My buddy wasn't able to download all these nifty progs so I had to upload it to him through AIM. He's no longer having problems staying in a web browser so I had him run HJT and send me his log file. Here's part of it.
O4 - HKLM\..\Run: [jf4] C:\documents and settings\dale davis\local settings\temp\jf4.exe
O4 - HKLM\..\Run: [F] C:\documents and settings\dale davis\local settings\temp\F.exe
----will have him clear his Temp folder again----
O4 - HKLM\..\Run: [r77i3sO] wmiwizc.exe
----what the heck is this?----
O4 - HKLM\..\Run: [ujlu8c9c] C:\WINDOWS\system32\ujlu8c9c.exe
----what the heck is this?----
O4 - HKLM\..\Run: [Mzaxht] C:\Program Files\Vshgtzb\Msbq.exe
----what the heck is this?----