I used a website to analyze your log file. You can go their and paste your log if you wish. http://hijackthis.de/index.php ------------------------------------------------- C:\WINDOWS\9129837.exe Extremely nasty Nasty (2.27 / 5.00) ------------------------------------------------------------ O4 - HKCU\..\Run: [ttool] C:\WINDOWS\9129837.exe Nasty Must be fixed! Malware ----------------------------------------------------------- O20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dll Nasty ------------------------------------------------------------

If you do have Adobe and it has an update you really should do it because they are usually always for security reasons, there are really some bad problems with it that can make you vulnerable if you do not keep it updated. I got rid of adobe reader long ago and went with pdf xchange PDF-XChange Viewer that avast pop up should have a link right on it for you to select to do the re-register it takes just a second.

Close all browser windows including this one only have HJT open place a check mark in the following entries: O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe" O4 - HKLM\..\Run: [HPHmon04] C:\WINNT\System32\hphmon04.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" Click FIXED CHECKED. Reboot Windows. Review the log those entries should be gone, if not run HJT in the Safe Mode. 04 entries start everytime windows starts these entries are unnecessary the rest of the log is good. Again I see no Firewall, usually a firewall would show in the 023 entries like Avast because it runs on windows as a service. Note* Windows 2000 is currently running at Service pack 4, in the very top of the log is the header an shows this Platform: Windows 2000 SP3 (WinNT 5.00.2195) Is windows 2000 still supported with Micorsoft updates I am not sure but I think it is till July 2010 hopefully others can add information. Can you update Internet explore also---> MSIE: Internet Explorer v5.00 SP3 (5.00.2920.0000) This is very old, would IE7 work on 2000 I am not sure perhaps a google search "IE7 on windows 2000" search that maybe. FYI Hijackthis creates backups if any functionally is lost you can restore the entry that was removed by opening HJT and click review list of back ups there you will see all the 04 Entries that were removed and have to option to restore that entry. Never use HJT with out instruction it's advisable to remove the program when finished through the add/remove programs feature.

Thank you so much, RavenCajun. I will continue with my little chore of removal and install now.