I've gotten help with my Hijackthis log, but it keeps coming back.  Winpatrol detects something called replace module trying to load itself.  When this happens my homepage is changed, a folder called inetdata keeps being installed, and Winpatrol also detects something called xp_system and run in the list of start up programs.  this thing keeps coming back even after I fix the items in my hijackthis log.