You have some serious Trojan Virus problems. I don't know how you got a HJT log if the computer keeps restarting. I see you just joined, so let me say welcome!! Just so you know, Service Pack 2 or SP2 is available. Service packs increase the safety of your system. Also Internet Explorer v6.00 SP1 (6.00.2800.1106) is out of date. In HijackThis, put a check mark in the following and fix. O2 - BHO: (no name) - (00110011-4b0b-44d5-9718-90c88817369b) - (no file) O2 - BHO: (no name) - (11904ce8-632a-4856-a7cc-00b33fe71bd8) - (no file) O2 - BHO: (no name) - (15ACE85C-0BB1-42d1-9E32-07EB0506675A) - (no file) O2 - BHO: (no name) - (202a961f-23ae-42b1-9505-ffe3c818d717) - (no file) O2 - BHO: (no name) - (479fd0cf-5be9-4c63-8cda-b6d371c67bd5) - (no file) O2 - BHO: (no name) - (5753791b-f607-48ca-814e-91c14d081f9e) - (no file) O2 - BHO: (no name) - (7070a8f9-08a4-ca47-0ab0-1eb9e4ee1f3b) - (no file) O2 - BHO: (no name) - (746455fe-d059-47e7-af0e-140e03f5a447) - (no file) O2 - BHO: (no name) - (77701e16-9bfe-4b63-a5b4-7bd156758a37) - (no file) O2 - BHO: (no name) - (7a7e6d97-b492-4884-9abb-c31281dcc4f2) - (no file) O2 - BHO: (no name) - (860c2f6b-ca82-4282-9187-beccbb66f0af) - (no file) O2 - BHO: (no name) - (87185e78-a61b-4db3-965a-3235bbd7a622) - (no file) O2 - BHO: (no name) - (8dc8f96d-34f7-1501-a2a4-631341aa3ac1) - (no file) O2 - BHO: (no name) - (9c5875b8-93f3-429d-ff34-660b206d897a) - (no file) O2 - BHO: (no name) - (a2595f37-48d0-46a1-9b51-478591a97764) - (no file) O2 - BHO: ASGP32.ASGP - (AB268D16-3B58-482F-91EB-8D305534302F) - C:\WINDOWS\System32\asgp32.dll O2 - BHO: (no name) - (b212d577-05b7-4963-911e-4a8588160dfa) - (no file) O2 - BHO: (no name) - (cf021f40-3e14-23a5-cba2-717765721306) - (no file) O2 - BHO: (no name) - (d1ac752e-883f-4ed8-8828-b618c3a72152) - (no file) O2 - BHO: (no name) - (e2b2b5a1-b48c-4886-a318-723916a01024) - (no file) O2 - BHO: (no name) - (e3eebbe8-9cab-4c76-b26a-747e25ebb4c6) - (no file) O2 - BHO: (no name) - (e6d5237d-a6c7-4c83-a67f-f9f15586fa62) - (no file) O2 - BHO: (no name) - (fe2d25c1-c1db-4b5e-9390-af1cb5302f32) - (no file) O2 - BHO: (no name) - (FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF) - (no file) If you notice, this will be all the 02 - BHO that get checked and fixed Be sure you match these 04's, because you do have some good 04's that you need to keep. O4 - HKLM\..\Run: [Start Page] C:\WINDOWS\system32\svcnt32.exe home O4 - HKLM\..\Run: [37.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\37.tmp.exe O4 - HKLM\..\Run: [38.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\38.tmp.exe O4 - HKLM\..\Run: [6.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\6.tmp.exe O4 - HKLM\..\Run: [7.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\7.tmp.exe O4 - HKLM\..\Run: [6.tmp.exe] C:\DOCUME~1\Owner\LOCALS~1\Temp\6.tmp.exe O4 - HKLM\..\Run: [7.tmp.exe] C:\DOCUME~1\Owner\LOCALS~1\Temp\7.tmp.exe O4 - HKLM\..\Run: [A.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\A.tmp.exe O4 - HKLM\..\Run: [A.tmp.exe] C:\DOCUME~1\Owner\LOCALS~1\Temp\A.tmp.exe O4 - HKLM\..\Run: [17.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\17.tmp.exe O4 - HKLM\..\Run: [17.tmp.exe] C:\DOCUME~1\Owner\LOCALS~1\Temp\17.tmp.exe O4 - HKLM\..\Run: [1E.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\1E.tmp.exe O4 - HKLM\..\Run: [glght.exe] C:\WINDOWS\System32\glght.exe O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm O21 - SSODL: ryYxujAshx - (BC9E7CA8-1634-D602-E96B-91D0A7E54126) - C:\WINDOWS\System32\qurbh.dll (file missing) O21 - SSODL: SystemCheck2 - (54645654-2225-4455-44A1-9F4543D34546) - C:\WINDOWS\System32\vbsys2.dll (file missing) You're also going to need to download and run AIMFix After you've done all this, turn off system restore - (right click my computer/ properties/ system restore tab/ put check in box) Restart computer in safe-mode by tapping F8 key on boot, then run your AVG Anti-Virus while in safe-mode. When you're done go turn system restore back on by unchecking the box. When you get it all fixed be sure and get the Microsoft updates, especially SP2.

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2:56:16 PM, on 2/20/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\WINDOWS\system32\devldr32.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wfxsnt40.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe C:\WINDOWS\system32\hphmon03.exe C:\Program Files\Ontrack\ZipMagic\zm32nt.exe C:\Program Files\Ahead\ODD Toolkit\DVDTray.exe C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe C:\Program Files\JL2005A\cam_mon.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Verizon\VSP\VerizonServicepoint.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\HPHipm09.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe C:\Program Files\HiJackThis.exe O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c:\program files\google\googletoolbar3.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - (2318C2B1-4965-11d4-9B18-009027A5CD4F) - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe O4 - HKLM\..\Run: [HPHmon03] C:\WINDOWS\system32\hphmon03.exe O4 - HKLM\..\Run: [ZipMagic] C:\Program Files\Ontrack\ZipMagic\zm32nt.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [DVDTray] C:\Program Files\Ahead\ODD Toolkit\DVDTray.exe O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\Verizon\SMARTB~1\MotiveSB.exe O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe /autorun O4 - HKLM\..\Run: [CAMMON_JL2005A] C:\Program Files\JL2005A\cam_mon O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\RunServices: [ZipMagic] C:\Program Files\Ontrack\ZipMagic\zm32nt.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C:\Program Files\Java\jre6\bin\jp2iexp.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C:\Program Files\Java\jre6\bin\jp2iexp.dll O16 - DPF: (01010E00-5E80-11D8-9E86-0007E96C65AE) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab O16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: (640B39C1-D713-464F-92C3-75BD972B95EE) - http://www.sidestep.com/get/k42037/sb02b.cab O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1142949036440 O16 - DPF: (90C9629E-CD32-11D3-BBFB-00105A1F0D68) (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Pml Driver - HP - C:\WINDOWS\system32\HPHipm09.exe -- End of file - 6191 bytes

To start with, you can't just switch drives from one computer to another and expect it to boot to windows, unless the computers are the exact same make and model. You can put your C drive into the new computer and if you have a windows xp disc, do a repair install. If it asks for a product key, look on the case of the new computer for the sticker. If the new computer came with a HD and works, I'd just start transferring important data to it either with dvd or flash drives and eventually get it setup the way you like. The people that do a clean install are erasing the whole drive. Yes, a re-install will erase your entire C: drive, a repair install would leave your documents intact. You're going to need a windows xp disc to get started, also software needs to be installed to work, not just a simple transfer folders thing. You may be able to put your old C drive in the new computer, boot from the xp disc, go to the recovery console and fixboot or fixmbr and she may boot up. Don't know what windows genuine advantage or activation will do noticing your C drive has a different motherboard, video and ram.

this is the other thread with part of the info on it. http://ths.gardenweb.com/forums/load/comphelp/msg051706324223.html?16 If I were her I would make sure she has the key from the pc, I would do the magicjellybean too make sure it and belarc show the same so she has proof of that, then try calling the microsoft number for re-activation and tell them what is going on and that she does not know exactly what the guy did and see what they say, if she happens to get someone on a very good day she might get lucky and they go with it. Won't hurt to try. there are other places she can actually get updates too. you can get sp2 on cd for example, for free from microsoft, sp3 can be put on a cd also. Also there is a method to get updates using firefox which should not have the validation issue this is the link to that. updater There is also autopatcher, here is some info and the link to it is in the article. Simple definition for the types of update: Autopatcher full: If this is the first time you want to update your operating system, download it, install the updates inside it and reboot. Autopatcher update: Contains update for each month (lets say for this month, March). Use this after you have installed the Autopatcher full. autopatcher info I have never used these just read about others that have, use at your own discretion. I know that Windows Genuine Advantage can be turned off in Internet Explorer, Click Start, all programs, at top select windows update, in the browser click tools, manage add ons, select from the drop down box add-ons IE has used, scroll down to Windows Genuine Advantage, select it and change to disable, save. She needs to check her pc to see what she has already does she have sp1, sp2 or just plain xp?? Here is the link for her to order the cd from microsoft. order sp2 on cd from microsoft