I downloaded superantispyware and it was able to detect 17 more nasties than another program I used (mostly adware, trojans, malware). It prompted me to reboot, so I did. Then I went back again and scanned my whole system. This time there were serveral of the same files (and some different) wtih '[RESTORE]'next to their name. Again I clicked 'next' to go to the quarantined items box, and before agreeing to reboot, I noticed that in addition to 'removing', the box listed many of the same items as 'adding'? I didn't reboot because I didn't know if the program files were protecting themselves somehow. Is this how its supposed to work?

By my experience, that's how SAS puts stuff into quarantine. It says it's "adding" and then "deleting" on the same screen. They're actually going into quarantine and you can delete them permanently from there.

you have an active log http://www.bleepingcomputer.com/forums/ind...mp;#entry762463 so you ought NOT make any changes on your computer until you receive help on that thread from one of the HJT team on here

As ruby1 has posted, now that you have a HJT log posted in the HijackThis Logs and Malware Removal forum, you shouldn't make any changes to your system.

At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.
If you experience difficulties in running certain malware removal programs, please direct your questions to your HJT Team helper.

This topic will now be closed, since you have an open log posted.
If you have any questions, feel free to send me a PM.