THanks, I thought those looked iffy. When I rebooted it gave me an error can't find sytem32\spoolsrv32.exe. I don't see that entry in this current log though. Logfile of HijackThis v1.99.1 Scan saved at 3:42:53 PM, on 2/18/2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32