I used a website to analyze your log file. You can go their and paste your log if you wish. http://hijackthis.de/index.php ------------------------------------------------- C:\WINDOWS\9129837.exe Extremely nasty Nasty (2.27 / 5.00) ------------------------------------------------------------ O4 - HKCU\..\Run: [ttool] C:\WINDOWS\9129837.exe Nasty Must be fixed! Malware ----------------------------------------------------------- O20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dll Nasty ------------------------------------------------------------

Mikie, you're right...something was going on. I ran Malwarebytes this evening and came up with the following log. Malwarebytes' Anti-Malware 1.36 Database version: 2112 Windows 5.1.2600 Service Pack 3 05/11/2009 8:57:48 PM mbam-log-2009-05-11 (20-57-48).txt Scan type: Full Scan (C:\:) Objects scanned: 130796 Time elapsed: 38 minute(s), 40 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 3 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\amd64si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ati64si (Rootkit.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\securentm (Rootkit.Agent) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) I ran it again after quarantining and got this one. I had a terrible virus a few weeks ago and Landzdown helped me clear it up. Does this last log mean I'm ok? I wonder why AVG didn't find it? Malwarebytes' Anti-Malware 1.36 Database version: 2112 Windows 5.1.2600 Service Pack 3 05/11/2009 9:52:46 PM mbam-log-2009-05-11 (21-52-46).txt Scan type: Full Scan (C:\:) Objects scanned: 130145 Time elapsed: 34 minute(s), 48 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

I got it straightened out! I went into the AVG Update Manager Properties and found that it was set to complete the updates when the computer was restarted. I changed it to Update Immediately, and it worked perfectly yesterday and today. I have no idea how it ended up with the restart selection, but as long as it works now without having to reboot each time, I'm happy. Thanks to everyone who replied. I appreciate it. Dee

Thanks so much for letting us know. I was getting an error messages that said "Connection to the update server has failed". I wasn't sure if it was AVG or my computer. I'll wait until it's fixed and try again. Dee