Anna, ntuser.dat is where the HKEY_USER part of the XP registry is stored when you
logoff or make changes whiule logged on. ntuser.dat.LOG is the backup for that file.
Updates to those files are normal though they also attract some malware. The WTT
HJT folks will be able to tell you what is going on. It's a very busy area so may
take a few days to get to you.
See here for more info: WIndows
NT Registry (applies to W2K and XP as well).
As for shortening the KL log, I believe they want you to edit it and remove the
duplicates since it's so long or just provide a sample of the entries. Most of what
is there is normal:
C:\Documents and Settings\Anna Ruth Baldwin.ANNARUTH\ntuser.dat.LOG - registry
update
C:\WINDOWS\system32\config\software.LOG - ? not sure but I believe this is
normal Windows
C:\WINDOWS\Prefetch\WORDPAD.EXE-24533991.pf - Loading wordpad form the prefetch
folder
C:\Documents and Settings\Anna Ruth Baldwin.ANNARUTH\Local Settings\Temporary
Internet Files\Content.IE5\ - normal web browser cache
C:\Documents and Settings\Anna Ruth Baldwin.ANNARUTH\Local Settings\History\History.IE5\
- normal web browser history cache
C:\Documents and Settings\Anna Ruth Baldwin.ANNARUTH\Cookies - normal web
browser cookie
