Kira

Thank you very much. You guys are great

Thanks. Uninstalled ViewPoint. AboutBuster and HijackThis logs: Scanned at: 12:38:30 PM on: 5/20/2005 -- Scan 1 --------------------------- About:Buster Version 4.0 Reference List : 26 No ADS found on system Removed 2 Random Key Entries Attempted Clean Of Temp folder. Removed Uninstall Key (HSA) Removed Uninstall Key (SE) Removed Uninstall Key (SW) Pages Reset... Done! -- Scan 2 --------------------------- About:Buster Version 4.0 Reference List : 26 No ADS found on system Attempted Clean Of Temp folder. Pages Reset... Done! Logfile of HijackThis v1.99.0 Scan saved at 12:52:09 PM, on 5/20/20

Thanks for the quick reply. After following your instructions: Logfile of HijackThis v1.99.0 Scan saved at 11:30:46 AM, on 5/20/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\sstray.exe C:\Program Files\Co

Typical hijacked symptoms, but also getting a pop-up window that I haven't seen before: Title of the window is Javakx32.exe Text reads C:\\windows\crkk.dll is not a valid windows image Subsequent pop-ups replace crkk.dll with kpnl.dll, javagm32.dll, winzw.dll, appwk.dll and others. Logfile of HijackThis v1.99.0 Scan saved at 10:31:20 AM, on 5/20/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WIN