Help me, Please! I am at work right now, so I don't have the HijackThis log handy. I have see logs similiar to mine, and used the solutions give by Pieter. The only problem is this. Using APM, I click explorer in the top window. The offending file doesn't show anywhere in the bottom window. Can the file change it's name? I am able to do all of the other steps (Using HijackThis to remove the "sp" references, and running Adaware 6 Build 181. I have all the updates for IE6 and Windows XP. This hijacker will not let me run SpywareBlaster (the same message about damaged sectors on the hard drive). My Microsoft Money will not log in with my .NET Passport (this may or may not be related). Here's the kicker, tho. When I try to run Web Tools in Norton Systemworks 2004, it tells me that I have a browser open (I don't). Another tech here at work says that is because I have a service running. Evidently, the work of the hijacker. I'll get the log as soon as I can. Thanks for any help you can give!