Owen, could you delete the part in your otherwise excellent post about using CWShredder before posting a HJT log. There are currently three or four strains of CoolWebSearch about which need special fixes before CWShredder will work. Running CWShredder first will temporarily fix them, but only until reboot or in some cases for 24 hours before they return.
Running CWShredder before posting for advice will effectively make them invisible so we can't see what we're dealing with. It's much better to be able to identify CWS before we advise.
Example here
http://www.d-a-l.com/help/showthrea...03&page=1&pp=10