Sorry to hear about your trouble, Larry. I've received nothing fishy from you. I've had my email taken over a couple of times. My Facebook account, too. I was apparently stranded in London with the kids on a last-minute vacation. Yeah, that's something I'd do. Heh. We have Macs and have not had any viruses since making the switch several years ago. I'm a complete computer moron so it has to be pure luck that I've not yet caught one of the rare Mac viruses. I hear they're getting more common. Oh, I did have my debit card number stolen a couple of years back. The bank caught it and was very good about it. I guess I'd been buying up several hundred dollars in fancy underwear in Norway or something and they thought that might be a bit odd for me. Like old age, the internet is not for sissies, huh? Diane

Close all browser windows including this one only have HJT open place a check mark in the following entries: O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe" O4 - HKLM\..\Run: [HPHmon04] C:\WINNT\System32\hphmon04.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" Click FIXED CHECKED. Reboot Windows. Review the log those entries should be gone, if not run HJT in the Safe Mode. 04 entries start everytime windows starts these entries are unnecessary the rest of the log is good. Again I see no Firewall, usually a firewall would show in the 023 entries like Avast because it runs on windows as a service. Note* Windows 2000 is currently running at Service pack 4, in the very top of the log is the header an shows this Platform: Windows 2000 SP3 (WinNT 5.00.2195) Is windows 2000 still supported with Micorsoft updates I am not sure but I think it is till July 2010 hopefully others can add information. Can you update Internet explore also---> MSIE: Internet Explorer v5.00 SP3 (5.00.2920.0000) This is very old, would IE7 work on 2000 I am not sure perhaps a google search "IE7 on windows 2000" search that maybe. FYI Hijackthis creates backups if any functionally is lost you can restore the entry that was removed by opening HJT and click review list of back ups there you will see all the 04 Entries that were removed and have to option to restore that entry. Never use HJT with out instruction it's advisable to remove the program when finished through the add/remove programs feature.

Tell us which programs you used for your virus search please, you did update the definitions first of course. Do you run any other anti spyware/malware programs, if so which? Are you using IE6, IE7, Firefox or another browser? How come you have Norton on this machine? Was it on there when you purchased the computer and you have never taken it off? Have you ever had Google set as the home page on this computer?

I don't use Picassa but if you know the file names of the pics try doing a search on that. Have you shifted any pics or files to another location in Windows Explorer? Photo album software may not be able to find the pics if you use Explorer. All pics must be moved and in some cases deleted within the application ie. Picassa I use Photoshop Elements 4 and this is certainly the case. I find it a bit unwieldy at times because Explorer is faster and easier to follow the file structure. Doug.