Well, the reinstall worked ok for a couple of hours until I went over to Google. Now I'm getting this PU from 2.4 again.
C:\Windows Explorer.exe has loaded a shell32.dll into firefox using a global hook which could be used by keyloggers to steal information. Explorer.exe could be using Fx.exe to connect to the internet.
I sure wish I knew more about software because I'd digto see if SP3 was M$'s new souped-up spyware/DRM toy instead of just all of the critical updates and a more secure OS for the users. Not a peep from 2.4 until I went over to google. I don't get a peep from the other images/drives with 3.0 and other AV's installed, Just this one with 2.4/KAV, but it happened previously with this particular image with sp2 although not with shell32. Just weird that this PU never surfaced for 2-1/2 hours of surfing until I hit Google.