I have been using the PDF reader built into Firefox for some time now. No complaints with it. Regarding your unwanted crapware I have been using the custom install for some time after realising some sites were doing exactly what Foxit has been up to. It is about money of course, they get a fee for all those unwanted installs, plus many of those probably do not get removed once the user has made the discovery. For those who may fear using the custom install method it is very simple, you check off all you need and leave out what is not wanted.

or just hold down shift while right clicking a .pdf file and in the pop out context menu choose Open With... Adobe Reader. Should be a checkbox to make it the default .pdf reader.

I used a website to analyze your log file. You can go their and paste your log if you wish. http://hijackthis.de/index.php ------------------------------------------------- C:\WINDOWS\9129837.exe Extremely nasty Nasty (2.27 / 5.00) ------------------------------------------------------------ O4 - HKCU\..\Run: [ttool] C:\WINDOWS\9129837.exe Nasty Must be fixed! Malware ----------------------------------------------------------- O20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dll Nasty ------------------------------------------------------------

Close all browser windows including this one only have HJT open place a check mark in the following entries: O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe" O4 - HKLM\..\Run: [HPHmon04] C:\WINNT\System32\hphmon04.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" Click FIXED CHECKED. Reboot Windows. Review the log those entries should be gone, if not run HJT in the Safe Mode. 04 entries start everytime windows starts these entries are unnecessary the rest of the log is good. Again I see no Firewall, usually a firewall would show in the 023 entries like Avast because it runs on windows as a service. Note* Windows 2000 is currently running at Service pack 4, in the very top of the log is the header an shows this Platform: Windows 2000 SP3 (WinNT 5.00.2195) Is windows 2000 still supported with Micorsoft updates I am not sure but I think it is till July 2010 hopefully others can add information. Can you update Internet explore also---> MSIE: Internet Explorer v5.00 SP3 (5.00.2920.0000) This is very old, would IE7 work on 2000 I am not sure perhaps a google search "IE7 on windows 2000" search that maybe. FYI Hijackthis creates backups if any functionally is lost you can restore the entry that was removed by opening HJT and click review list of back ups there you will see all the 04 Entries that were removed and have to option to restore that entry. Never use HJT with out instruction it's advisable to remove the program when finished through the add/remove programs feature.