Ah crap. Sorry in advance for the kind of a long story but it's all important to what my problem is. Well it happened last night when a friend was over and he was searching the web while I was watching a movie. After he went home either I did a manual scan or a scheduled scan was performed in Microsoft antispyware and it caught two pieces of junk. One being 'Searchsquire' and the other 'BrilliantDigital'. MS antispyware told me it got rid of both of the threats but I was still skeptical because my security was pretty robust to begin with. So I ran all kinds of online tests such as bitdender, rav, mcafee, f-secure, trend-micro. THEN, I ran all of my security stuff on my own pc like ewido, spybot, spysweeper, adaware and TDS-3. All found absolutely nothing. But then today I did a manual scan with MS antispyware again just for the heck of it and Searchsquire showed up again. I then deleted it again. Now for the sxe7.tmp part; I was looking through the security tab in ProcessGuard 3.1 and I saw the sxe7.tmp. I quickly Google'd it and saw that a few people had it in their Hijack This logs where knowledgable persons told them the file was a problem. One of the guys that had the file on his pc said that it was infected with the hacktools.rootkit. That scared me so I set it's priveledges to deny always and rebooted. Now I just set it to remove. Symantecs site says that if you are infected with the hacktools rootkit that you should restore your system from clean backups (something I do not have. *&&%$&^$$!!!) or patch your system. I have 90 gb's of precious music on my system and I just got done moving them off my maxtor one touch to my pc after a clean install of windows. i didn't have a chance to make another back up as I just got done with the process a couple days ago. I'm really freaking out here guys because the hacktools.rootkit sounds really nasty. Any help and I would eternally be at your service. Thank you. Respectfully, Spray-on Dust EDIT: I almost forgot to mention that another thing that worried me was that I rebooted my pc a few hours ago and did a scan with Microsoft antispyware and left my pc unattended for maybe an hour or an hour and a half. When I turned on the monitor I saw that PG 3.1 was asking for permission give the go-ahead to my disk defragmenter (diskeeper 8 ). I thought nothing of it and granted it access. I did this because 1) I always put diskeeper on 'set it and forget it mode' to run every 2 hours and I thought that this was what it was asking for permission for. But after clean installing windows and re-installing all of my apps etc I never got around to 'setting it and forgetting it' on diskeeper. I didn't realize this until I read on symantecs site that hacktools.rootkit often disguises itself as another app to gain access to and hide on your pc. My heart sank when I read that and I hope I really am not infected. Also, this may just be me being paranoid but I could've swore that applications were asking for access when I had already defined their rules in learning mode when setting up PG. I'm sorry about the rambling. Please help. Thank you.