You have too much time on your hands ;) When I suggested using HJT it was before I knew there were gurus on here. Since then there have been a number of posts which brought me to the conclusion that I should start here. Plus the voices in my head have always told me to kill.
As an update though I think I may have nipped it. I ran PrevX like Rob suggested and looked at the results. It found (but wouldn't clean unless I purchased) a small number of cloaked threats. There were three .dll files in ..../system32/ and two .exe's in .../program files/. I searched for all file names in the registry and removed the key entries then I deleted the files. I then was able to open IE with no extra instances and the registry entries that pointed to klomp.exe weren't reappearing. Once I rebooted I also got a whack of windows update notifications so I wonder if it was blocking those. Everything seems good so far. Fingers crossed. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;207172674;29440083;f Archive: http://www.houseoffusion.com/groups/cf-community/message.cfm/messageid:284015 Subscription: http://www.houseoffusion.com/groups/cf-community/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.5
