Well first the Monga.trj and I think I've tried all the cleaning from fixiedef to smithfraud, to spybot s&d. I also ran Avast scan and cleaned what that found. I turned of system recovery before doing all this and ran in safe mode. No I'm getting avast popping up with the prompt: "C:\r813.bat" file is supicious or something like that. So I've ran a HJT and attached the log. Does anybody have any suggestions? I'm trying to cleanup this computer of a friends and its starting to drive me crazy. Thanks for any input or suggestions.