Maybe it's just my computer that's possessed...

Go to cnet-downloads and search for Hijackthis, by trend micro. Do the scan and save log, and if you want post it here or email me, I can tell you what you have running and what looks suspicious. Often things like that .exe file you down loaded and then tried to uninstall sets registry files into your computer and basically hijacks it every time you restart. You have to get rid of them completely.

On my laptop I have Avira Antivir, Malwarebytes, and Lavasoft Adware, along with spybot and spydoctor and hijackthis. Nod32 isn't too bad for an antivirus program either. It's always good to have several different ones. And in extreme cases it's good to have them saved on a memory stick just in case your computer gets super taken over and won't let you open any programs. (I've had that happen enough times.)

If all else fails, you can always reformat, but doing that sucks.

I never had any trouble with uninstalling Thunderbird, but I didn't like using it. There were weird issues with a Yahoo account (which I no longer have either). So I've never really trusted its sanity. I'm thinking it might have been wise to uninstall first and delete the download later. Some uninstallers get upset when they can't backtrack all the way to the beginning. Just the presence of the original file seems to comfort the silly software. Computers are logical, but logic and sanity are not the same, unfortunately. You could have done a system restore immediately, though that might have left worse registry garbage. A registry cleaner could help.

Me, I could use some sleep.

ETA: I second my recommendation of a registry and whatnot cleaner. I don't see anything suspicious in the HJT log. Interesting reading, anyway

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ario&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...ario&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presar io&pf=laptop

Click to expand...

These can all be stopped. So on hijackthis you would check them and then hit fix.

Now I also notice you have a lot of AVG files on there. Is this actually something you are using, the the AVG internet securities by AVG Technologies? If you aren't actually using this program you should check and fix all of the avg files,

C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe

Click to expand...

If you use this program on purpose, then leave them as they are.

After you fix the few things above, you can run another scan to see if they've all been taken care of. However, before you run another scan, close all programs that you have running, like word, or the internet, and then try running it again.

I'm not seeing anything that is jumping out at me as a definite trojan, but you do have a lot of processes slowing your computer down, but that is normal with name brand computers.

If you don't think you have fully deleted Thunderbird, which does happen, files get stuck everywhere and sometimes aren't fully removed. If you go into your COMPUTER button, click on your C drive (the hard drive that has all your info on it--though you may have a partitioned hard drive so be sure and go to the one that has your program files and user files-- if you have a partition you will see two hard drives listed, one as C and one as D, if not you'll only have C.)

Click on C drive.

At the top of the box you will see the word Tools. Click on that. Click on folder options. Click the view tab at the top. In the box below you will see a little folder that says Hidden Files And Folders and below that are two options, select Show hidden files, then click apply.

Now you can go through your user folders and program files and see if there are any left over hidden Thunderbird files on your computer. This is also how you go into your Local Settings to delete cookies and temp files (where a lot of crap hides out.)

To get to local settings, go to Documents and Settings from the C drive. Click on your name, then look for the folder that looks a little see through with the name of Local Settings. In this folder you will find your temporary internet files, and your temp files and you should see a cookie file in there. You can go into these and clear them out. In the cookie folder, however you will always be left with one index file, which should be there and can't be deleted.

If you see something on your computer that is questionable, do a quick google search for it, most times you can find out what the process is and if you need to have it on your computer for it to run right. And if you have any more problems, feel free to email me and we can try to figure out what's wrong.

Cool. Glad to put my geekish knowledge to use.

**mind boggles as how much about computers I don't know**

**mind unboggles enough to mark down bluebell80 as go-to person for computer weirdness**

And a sl st in the first 2 dc's and in the first ch 2 sp. Ch 3, 2 dc in ch 2 sp, ch 2, work 3 dc in same sp. Ch 1, work 3 dc in next ch 1 sp. Ch 1. Work the following 3 times (Work 3 dc, ch2, 3 dc in next ch 2 sp. Ch 1, work 3 dc in next ch 1 sp. Ch 1.) Join with sl st to top of ch 3 to you, too!

Ah. I would have got to mentioning orphan files if I'd had any sleep

My fave running process and startup controllers are Dtaskmanager and Autoruns

Paranoid aside of the day: I only allow hidden files on computers used by complete idjits and maintained by me. What's worse, though, is hidden file extensions. Everyone -- anyone -- don't let Windwoes do it.