Wowzer, to quote monkey!
None of those mods are running. I have a lsass.exe though.
Thanks for that info, I'm doing a module search now and I'll check out the links and Combofix tomorrow.
:shock
Hah, just ran spyzooka with the newly downloaded files and got the win21 worm autoIT and Win32 Trojan-proxy MSIL again, but not that third one. Now I'm going to run webroot and go to sleep.
Thanks again!
Linda