The log looks pretty good really. But let me comment on a few things;

First of all, when running an HJT scan it is VITALLY important that ALL unnecessary items be turned OFF.
In each and every one of your HJT scans you can see, in Running Processes, meaning these programs WERE running during the scan one or more of each of the programs noted below;

Internet Explorer
Notepad
Windows Media Player
Windows Messenger Utility

Each one of these can, and should be started manually when used and not set to auto-start with the boot of the computer, the same goes for the Adobe programs. These ALL will slow the boot process and slow down the computer if running all the time and definitely should be turned off when running scans, any kind of scan.

In your post detailing problems experienced you mention that you have multiple svchost.exes running. I went through your logs and counted no more than 5 instances of svchost.exe running in any of the logs. With Windows XP this is completely normal. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can and do run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. At this very moment my computer also shows 5 instances of svchost.exe running. There is nothing unusual about this.

If you are still concerned about this number, which really is completely normal, you can view the list of services that are running in Svchost by doing this:
1. Click Start on the Windows taskbar, and then click Run.
2. In the Open box, type CMD, and then press ENTER.
3. Type Tasklist /SVC, and then press ENTER.

Just doing the process above I looked at my 5 instances of svchost.exe running and all were legitimate, one of them was running 10 different services necessary for the use of the computer and the other four were running one or two each...all also necessary for the running of the computer.


Now you again say that those cookies found noted in Mozilla were wierd because you had uninstalled it. The program itself may be gone and no longer running, or able to be run, but the Mozilla folder is not. Which also is completely normal. It is located in
C:\Documents and Settings\Jonathan Gallimore\Application Data\
navigate there and you will see, in the Application Data folder, a Mozilla folder. If you wish you can delete that folder.

Whenerver you uninstall a program, after going through the normal uninstall process via Add/Remove, you should always also do a file search on the computer to look for other remaining files with the name of the program. Many, many GOOD programs (and Mozilla is one of them) DO leave behind their file folder (probably for ease of reinstall) which you must remove manually. There was absolutely nothing from Mozilla showing in any of your HJT logs, so there was nothing from Mozilla running on the computer. Those two cookies were in that file. There is nothing wrong with them. Not all cookies are bad, many are necessary for ease of browsing.

Now for TeaTimer. The reason you are told to turn this off;
The removal in Hijackthis of some BHO (Browser Helper Objects), R1 and R0 entries and other startup items that are bad may be impeded by the startup TeaTimer resident program in Spybot Search & Destroy and also SpywareGuard (and other protection programs like WinPatrol, AVG Anti-spy, Spysweeper, etc..).

You may receive prompts during a cleanup process to allow or deny the desired changes, but the prompts will not always show up. The main reason for that is when a malware entry is spotted by TeaTimer or the others, it'll prompt the user, if they say no the change will not be made.... but, as long as the infection remains, these changes will attempt to be made regardless of protection programs. The prompts will most likely drive the user nuts. They'll want to get rid of the prompts and will eventually say ok you win and check the "remember this decision" check box so they'll be left alone. Teatimer remembers that decision and if something else tries to remove any entry that's been made, it'll automatically reject it without prompting the user.

In other words ANY anti-spy program running in the background should be turned off until the cleaning process is complete and you are TOLD to turn them back on. But you do NOT the anti-virus program unless told to do so.

As I said, your log looks good. So, if you agree I believe things are cleaned up. Now I have some suggestions;

I still recommend Firefox OVER Internet Explorer. The only exception of course is Windows Updates where you must use Internet Explorer. Firefox is one of the safest browsers out there.
Firefox keeps you safe from spyware, hackers, scammers and spammers. When you encounter a Web site that is a suspected forgery (known as a “phishing” site) Firefox will warn you and offer to take you to a search page so you can find the real Web site you were looking for. Firefox will not allow a Web site to download, install, or run programs on your computer without your explicit agreement. Period. You will be notified whenever downloading or installing software, and Firefox will always tell you what’s happening so that you can stay in control of your computer.

I really do hope you will download and install SpywareBlaster. It is one of the BEST protection programs available and it is FREE. The best part...It DOES NOT run in the background so it cannot slow down your computer. This is the only constant protection, other than my firewall and anti-virus program that I use. I don't use any background scanners. I do use AVG Anti-spy, AdAwareSE and Spybot for manual scanning weekly but I do not have any of them running in the background.
If you use SpywareBlaster you will be amazed at how little, if anything these other three find during their scans. I do a lot of searching when working on one of these threads. I visit a lot of sites I normally would not visit and I have had NO nasty items show up on my computer because of these searches and I have no other explanation except for the use of SpywareBlaster.

I would also recommend a little program called Mike Lin's StartUp Control Panel
It is a simple, little FREE program that, when you download and install it, can then be found in your Control Panel. It is a super, easy way to control your auto-start programs. I highly recommend it.
Now if you feel the computer is clean I advise that you set new and now clean Restore Point in System Restore by right clicking My Computer. Choose Properties. When System Properties opens choose the System Restore Tab. Place a checkmark in Turn Off System Restore. You will be asked if you are sure, say yes or Ok. System Restore will shut down. Wait a minute and then do the reverse and remove that checkmark and it will come back on with a new, clean Restore point.
Let me know how things progress.
Judy