Spybot S&D had already been run before making the HJT log, but now doesn't seem to search for all the products. I've been using it since I first posted on TechSupportForum, and it usually takes 10/15 minutes to scan, but this time it only takes two seconds and tells me that there were no threats.
Ad-Aware scan had just been run when I created the HJT log.
CWShredder found no instances of CoolWebSearch
The first IP is for Internet Connection Sharing (which doesn't work correctly anyway) on my home network.
I have never seen the second and third, but they may well be for my NTL connection, as my server's current IP is 194.145.148.77, and gives the same result on a search of
www.arin.net/whois
Here is the log file from pandasoft:
Incident Status Location
Spyware:Spyware/ISTbar No disinfected C:\Documents and Settings\Alastair\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-3cc46f89-2fd7dcb2.zip[InstallerApplet.class]