I have been researching/scanning/re-researching and re-rescanning for the past few weeks trying to eradicate this beast. I just ran NoLop after reading another post, but it found no problems. I get prompted after boot up to work off-line by IE. In addition, a couple of pop-ups occur after getting a " . . . trying to access a protected item" warning. I have attached my latest logs in a zip. Ken Here's the HJT log from the zip . . .