Classic ASP - help using parameters

[AppalachiaAl]

I have some old code that I inherited and I need to update it to use parameters to prevent SQL injection attacks. I've tried the below but I get error that I "Must declare the variable '@fName'." Does some one see what's wrong. Also, if someone has a an example to update and insert using parameters I would appreciate it. I've tried googoling but you get about a million hits and everything is for .Net
Below is the code I have.

set objCmd = Server.CreateObject("ADODB.Command")
With objCmd
.ActiveConnection = conn
.CommandText = "select userID from tblUser where fname = @fName and lname = @lName and company = @Company and email = @eMail"
.Parameters.Append .CreateParameter("@fName", adVarChar, adParamInput, 50, strfname)
.Parameters.Append .CreateParameter("@lName", adVarChar , adParamInput, 50, strlname)
.Parameters.Append .CreateParameter("@Company", adVarChar , adParamInput, 75, strcompany)
.Parameters.Append .CreateParameter("@eMail", adVarChar , adParamInput, 100, stremail)
Set rs2 = .Execute
End With
THanks
Allen