thanks for all your help. i went into safe mode 3x and was able to clean everything up. THANKS, THANKS, THANKS. i dont understand why nav, adaware did not find it. trojan cleaner was able to find it. looking at the all the logs it appears to be a common occurrence. i thought a microsoft update was able to stop this?? again THANKS, THANKS THANKS