[grubbymitts]

you'll have the lad cacking himself again.

.tmp files can sometimes be left behind by installers - not necessarily bad ones. If the RunOnce process crashes or is used wrongly and doesn't remove them once it has installed they can appear on the startup list. It's a simple case of highlighting it in Hijackthis and removing it. Since when were .tmp files executable anyway?

Qttask can be anywhere on the drive - you can choose where to install Quicktime if I remember rightly.

Lots of pcs have macrovision protection installed on them - especially if you have bought them from a pc dealer. My compaq has it.

If there was anything really nasty in that startup file, Trend Micro's Housecall would have picked it up.