http://www.nappysthumbs.com/downloads/hjt.zip
-- HiJack This - edits registry to kill any browser hijacks
check c:\windows\host
-- Edit this, mines empty.. messes up your search page that microsoft autoloads for domains that dont resolve but it will also fix any host changes that redirect certain domains to the wrong sites.
also check msconfig.exe using start -> run, and check the startup tab for anything you dont recognize.. then do a cold boot (just shut the power off)
do first and second step again in case the spyware/malware/virus auto-changes what you change.. and set c:\windows\host to read only.
you open c:\windows\host in notepad.. its a file with no extention