This sneaky bugger got in around 4pm yesterday, and after several hours of my best attempts to remove it, I finally gave up and came to these forums. The first hint I had that I was infected was when Winamp unexpectedly gained focus and attempted to play a .tmp file. The next hint was fairly obvious - my search engine clicks were taking forever to resolve the url they were supposed to go to, and instead after timing out would redirect me to useless malware ridden sites. So far I've run hijackthis, malware bytes and dds, checked my running services and msconfig and I didn't see anything obvious, but I'm clearly no expert at killing malware. GMER is currently running but I don't have high hopes for it completing even by the time I get home from work (this is a work machine I'm using at the moment). Ironically, I had Nod32 protection up until a week ago, but didn't feel the need to register it... Hindsight eh. I've included the logs requested by your site excluding GMER. Any ideas? PS For those of you wanting a high res image of Ramona Flowers from Scott Pilgrim using google image search, while simultaneously searching for glActiveTextureARB #define errors, be careful!