Hello, First of all, thank you to anyone who takes the time to read this and respond. Warning, this is long but I have a bizaare situation here and it will tak a bit to explain it all. I have what acts like a trojan/worm/virus but no scanners are detecting it. I've tried every online scanner I can find. I have had my HiJack this log checked at GeeksToGo and they say it's clear. Nevertheless, my PC is constantly being invaded and it's all I can do to keep it going and *under MY control*. I have a Dell Dimension 2400 almost a year old running WINXP Home. A few months ago I was physically hacked. At that time I did have a trojan. The win32.paradropper. AVG caught it and GeeksToGo helped me with the rest. However, ever since then I have had I've had nothing but problems. I've done several (actually more than several) clean re-installs of the OS and from what I can tell by looking at the services logs (I'm NOT a PC whiz by ANY means), it looks to me as if a program is being run that installs a network on the machine. There are two accounts that are created, Help Assistant and Support_xxx(the xs are a series of numbers) and *then* the Owner account. I know that these are accounts created by MS and then disabled so I suppose that that's not too surprising. However, in the past I have had both of those accounts pop back up in the logs for brief period of time. Both the owner and safe mode administrative account have been hijacked on separate occasions even though both had very strong multi-phrase passwords. I even paid a pro to scrub the hard drive about a month ago to no avail. Since then I decided that as far fetched as it might seem that *maybe* the fax modem (I have DSL so don't even use a modem) I had disabled several times and the wireless configuartion services I had also disabled repeatedly that kept renabling themselves might be connected so I totally uninstalled the fax modem and it mysteriously reinstalled itself. **WHOA!** I went poking around in the registry googling all the software and sure enough I found software for something called Staccato that could be a wireless modem. WTH? It might also be a microprocessor chip *for* something wireless. I dunno... I unseated the modem altogether but of course that didn't solve my problems either. The very next day all hades broke loose. By this time I had all kinds of system monitoring software installed and sure enough Sysinternals Autorun showed a modem failure analysis (a different word was used but I can't recall it at the moment) the next day. I don't think I really believed it was a wireless modem until that showed up. I'm not sure I still do. How the hell would something like that work if it was? Then one by one every program on my system became inoperable. Eventually, that necessitated a complete re-install and of course that didn't solve my problems either. It has just settled things down to a dull distant rumble instead of a constant all out war. The most interesting incident during this episode was the attack on my firewall. To make a long story short, I had to reinstall it twice and tinker around with the registry to get it to function properly and during the process I was reading the Sysinternals Process Explorer dll logs which were communications from Sygate. I didn't understand most of it but I sure understood the words warning and trojan. They mentioned something about Nimbus which I googled but quickly got overwhelmed by since that seems to be a generic term. I saved a few of the logs in case they would come in handy. According to Sysinternals TCPView when the system is disconnected from my DSL 2wire Gateway Router cable, alg.exe is listening at TCP ports 1025, my anti virus, AVG at 10110, and system 4 (what is that) is listening at 445. When I am connected, system 4 also listens at UDP port 139. I have a svchost.exe listening at TCP port 135. My firewall, Sygate, is "attached" to ports 1026 and 1027 and system 4 is "attached" to 137 and 138 but they have never been listening or established to my knowledge. Night before last something weird was going on (damned if I can remember what now, weird is SOP around here) and I was checking something out in safe mode and ended up in the in the hardware devices in the control panel for some reason and lo and behold I noticed there are all these icons for a whole bunch of WAN devices listed under the icon where my DSL icon is that I had never seen before. Well, I thought, that's whacked! I don't even know what WAN devices are! And then I notice that there is another **NEW** listing in hardware devices that I had never seen before either for Non Plug and Play Drivers some of which I recognized but some of which I have no clue about. I scurried back to regular mode and checked to see if I could bring that stuff up and sure enough there is a show hidden devices thing (why does Microsoft set up this stupid crap that makes it so damn easy for hackers?). I don't even know what this stuff is! So I started googling but hell, I still don't know much more than I knew before I started. I'm an 15th Century English Lit Major (some 20 years ago BTW...urgh...) Talk about being out of my league with the language here... Oh my! I get headaches and my eyes glaze over reading this stuff It was getting late so I decided I would just experiment with the WAN stuff and disable it all, reboot and see what happened. If I still had an internet connection then cool. If not, then OK, my bad, I could re-enable it. It was all cool so I went to bed and came back yesterday all set to do battle another day. When I went to google the other stuff, I didn't have any access to the Control Panel or My Computer! I tried to do a restore and of course, there were no restore points beyond yesterday. Gee, I wonder why? sigh... Time for another windows repair, rinse, repeat. This is just a small taste of the craziness I have been contending with trying to get this PC back under my control and operating normally. I have attempted to get help with this in the past and had my attempts to post blocked; my PC completely taken over and rendered inoperable so that I had to re-install my OS; and then I would think it was under control only to have it start all over in a few weeks after I had gotten everything back in place again. It took more than a little fiddling around to make this post. I tried to sign into my account yesterday but my password would not work so I had to send a request for a new one. When it it came through, my email (I use the sbc yahoo based stuff) mysteriously went on the fritz. Then I was googling some things so I would make more sense as I was talking to y'all and my browser went belly up. Basically I had an internet connection but no brower to work with. *huffy sigh* I am getting smarter about this crap though and this time I just uninstalled my exploreer and reinstalled it. HA! It worked! And what do you know, my email wasn't on the fritz either. But talk about being jerked around! Does anyone have any suggestions about where to go from here? I have little to NO money to spend on this but lots of time so it's got to be do-it-yourself. Any ideas about why the clean re-installs aren't clearing this bugger out? I recently "reset" the BIOS to factory defaults and did a clean re-install so it can't be that. Would doing another hard drive scrub be worth the bother? I've been reading about that and I'm sure I could take that on myself. I can't believe I paid someone $100 to do it for me!!! Whew! Thanks in advance for reading all of this and for answering! I really appreciate your time and efforts. B edited to add: sorry about this funky formatting. I wrote this in notepad and it didn't translate so well.