oh sorry mate missed this last message
i did do the scan 'full scan' in 'safe mode'
and it found 2 trogens and 16 tracking cookies here is the log
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 10/21/2010 at 04:43 PM
Application Version : 4.44.1000
Core Rules Database Version : 5726
Trace Rules Database Version: 3538
Scan type : Complete Scan
Total Scan Time : 00:11:25
Memory items scanned : 346
Memory threats detected : 0
Registry items scanned : 12109
Registry threats detected : 0
File items scanned : 23033
File threats detected : 18
Trojan.SystemConfig
C:\APPLICATIONS\TOOLS\SYSTEMCONFIG\SYSTEMCONFIG.EXE
C:\APPLICATIONS\TOOLS\SYSTEMCONFIG\CONFIGURE YOUR SYSTEM.LNK
C:\Windows\Prefetch\SYSTEMCONFIG.EXE-5D3BEE59.pf
Adware.Tracking Cookie
C:\Users\romesh\AppData\Local\Temp\Low\Cookies\romesh@ad.yieldmanager[2].txt
C:\Users\romesh\AppData\Local\Temp\Low\Cookies\romesh@collective-media[2].txt
C:\Users\romesh\AppData\Local\Temp\Low\Cookies\romesh@atdmt[2].txt
C:\Users\romesh\AppData\Local\Temp\Low\Cookies\romesh@invitemedia[1].txt
C:\Users\romesh\AppData\Local\Temp\Low\Cookies\romesh@ads.bleepingcomputer[1].txt
C:\Users\romesh\AppData\Local\Temp\Low\Cookies\romesh@doubleclick[1].txt
C:\Users\romesh\AppData\Roaming\Microsoft\Windows\Cookies\Low\romesh@collective-media[2].txt
C:\Users\romesh\AppData\Roaming\Microsoft\Windows\Cookies\Low\romesh@apmebf[1].txt
C:\Users\romesh\AppData\Roaming\Microsoft\Windows\Cookies\Low\romesh@ad.yieldmanager[1].txt
C:\Users\romesh\AppData\Roaming\Microsoft\Windows\Cookies\Low\romesh@adserver.adtechus[1].txt
C:\Users\romesh\AppData\Roaming\Microsoft\Windows\Cookies\Low\romesh@atdmt[2].txt
C:\Users\romesh\AppData\Roaming\Microsoft\Windows\Cookies\Low\romesh@mediaplex[2].txt
C:\Users\romesh\AppData\Roaming\Microsoft\Windows\Cookies\Low\romesh@ads.bleepingcomputer[1].txt
C:\Users\romesh\AppData\Roaming\Microsoft\Windows\Cookies\Low\romesh@invitemedia[2].txt
C:\Users\romesh\AppData\Roaming\Microsoft\Windows\Cookies\Low\romesh@doubleclick[1].txt