Many thanks to those replying:

Here's what I see in the registry. MS/Giant beta has actually found MANY more.

CoolWeb Search
CB.UrlCatcher
Ezula
ATLEvents(1)
Webcom.Webbar

As I say, MS/Giant sees others but stalls at the Webcom one. At that point, it reports "low on virtual memory" & locks up.

I have tried turning VM off & then restarting- turning it on & setting the max at 2000mb's. Plenty of room on this drive. It still locks up. It only has 256mb- I may drop another of my own sticks in if necessary. This is a favor for a friend's daughter.

Had she brought along the CD's- I'd have done a reinstall from the get-go, you know it! It had 453 spyware & 89 viri to start!

The ones now in the registry will not allow me to do anything with them...I was even hoping I could boot to a Knoppix CD & access/delete them from there.

I will post a new HijackThis this evening to Castlecops. More to follow...

Tracy
PS- all the typicals followed: restore off/safe mode/etc...Adaware, Spybot, Housecall, Pest Patrol, a2,...makes no difference.