Seems everyone is having the same issues here. Ive read many of the other posts with similar issues to mine. My search engine links (Yahoo/Google) redirect to random sites. Ive read other posts to see if there is any similarity with my issue. There seems to be some common ground between them but i have to admin techspot admins/helpers are king at translating anti-virus and hijackthis logs. Problem - Search engine links redirect to ad sites. Internet Browser - Mozilla Firefox OS - Windows XP SP 2 Ive included the logs i have completed, at the moment superantispyware is finishing its scan. Last night it found 6 virus's and removed them. The problem was fixed for approx. 5min before it resumed its spyware activity. I understand that superantispyware, Spybot, and Antivir are all present in my Hijackthis log, simply because i ran a scan with each, independently of course, and with their active protection disabled, so yes they're all on but not active. Currently i have to leave the house, when i return ill post the complete scan log from SuperAntiSpyware. Thanks for the help. Update: Finished SuperAntiSpyware scan, nothing found. i can upload the log if you like but no results with full scan... Additional Info: Just a heads up on what has been done to this pc. I have run MalwareBytes, Superantispyware, Antivir, Spybot, CCleaner, Hijackthis, and as instructions indicated on a Bleepingcomputer post; combofix. Also ran AVG which would allow the redirecting to continue but constantly informed me that i had a Fake SVCHOST.EXE running, and sure enough there is... but if i turn it off it will, as all spyware does, it will turn itself back on. Ive manually searched for the files to remove them with no luck in finding them, even with Hidden/system files shown, ive also enabled Superhidden files as that seems to be the trend to hid malware. When superantispyware located malware last night all of it was located in C:\Volume information... etc... whatever that means, im not sure where to look to make sure its clean. Oh and java should be updated, as of last night.