PLEASE NOTE: Okay, first, just got a pop-up box when posting saying it "appears" we are trying to post a HiJackThis log. There is NO HijackThis log contained in this post ... so PLEASE do not delete this! Trojan horse Startpage.21.AY Lord, another one! Just got rid of that pesky critter Startpage.19.J and now THIS one pops up!!! Bigger files, 39 KB. The 19.J version was only 18 KB! AVG seems to have updated for the 19.J version, at least that's what their techs emailed us. But we are running the AVG scan again (right this minute) and this is the third time it has picked this one up ~ showing now copies of the last two here in this copy of the AVG Virus Vault files: Trojan horse Startpage.21.AY C:\WINDOWS\SYSTEM\ppkf.dll 6/11/2005 6:41:38 PM ppkf.dll 39 KB Trojan horse Startpage.21.AY C:\WINDOWS\Desktop\hijackthis\backups\backup-20050609-120150-791.dll 6/11/2005 6:41:39 PM backup-20050609-120150-791.dll 39 KB Trojan horse Startpage.21.AY C:\_RESTORE\TEMP\A0000532.CPY 6/12/2005 6:55:27 PM A0000532.CPY 39 KB Trojan horse Startpage.21.AY C:\_RESTORE\TEMP\A0000534.CPY 6/12/2005 6:55:27 PM A0000534.CPY 39 KB Does it not seem strange that the first one was found in the hijackthis desktop file? Or so it says ... Or did it just create that file itself as a safe haven? AVG says it healed the four listed here, but we're running the Virus Scan now and it says again, it found one each of the last two listed there ... again. We are going to try the SpSeHjfix112 remedy as instructed by Abnormal in the Startpage.19.J discussion below, but: Should we delete this hijackthis "Backup" folder??? There's a bunch of stuff in there, don't really remember even seeing that folder in there before, so we don't know what it is or what any of that stuff in there means. We just peeked in there briefly, there are about 20 files in that folder! One is named: backup-20050609-120148-108 -- what does that mean, and again, should we get rid of that entire backup folder? We didn't put it there and again, can'r rightly say as how anyone here even remembers seeing it before. Oh, and something else: One of our dial-up email accounts has been bombarded with spam, SUDDENLY. This all started about a week ago, aren't in that account much but there was a super flow of spam from: Gov Grants Military Benefits Softdrink Survey Fathers Day Gifts We deleted at least 100 of these, set the Mail preferences to "not download it from the server," "delete it from the server," and they still kept POURING in. We finally delteted the account from the mailbox, don't really use it that much, a relic email account sort of, but really strange. We've never had that happen with any email accounts before. Can you get spyware from email? Or is this just pesky stuff and harmless (except for being a pain where a pill can't reach)? Thanks! "When you're going through Hell, keep going ..." -- Winston Churchhill

You have to be very careful what you delete with hijack this otherwise you'll find yourself reloading your whole computer if you dete the wrong registry keys. May i suggest a few steps to you can try to clean out those bugs Go to www.securitytango.com and click on Lets dance and follow the instructions to the letter to cleanse that machine make sure you turn off the system restore as things have a way of hiding in there. after the machine is clean turn it back on . But follow the cleaning and it should take care of the problem.