Ok, I've been caught! Bugger!
OS XP with SP1
The redirection url = coolwwwsearch.com (If that helps)
I've run AdAware, Hijack This, Search and Destroy and Spysweeper.
Hijack This found the little sod and removed it but it comes back on boot. Persistent little bugger.
Any ideas which proggie/service it's using on boot to reinstall itself? Looked through .js and .hta files. Been through the registry but I can't find shit, and I'm still finding my way around XP.
I wasn't sure if it was related to bootconf.exe located in the system32 directory...
Can you help on this with solution which does not involve formatting C: or moving to Linux
Thanks
Dave