I cleared the restore points. HOSTS file is clean, same as example code.

Will keep monitoring the situation.

Trojan tried to install itself again. Avira caugt it and MBA-A found it in System Restore. Here the MBA log.

Malwarebytes' Anti-Malware 1.30
Database version: 1416
Windows 5.1.2600 Service Pack...

Out of AVG 8.0, Avast, and Avira which one should I use?

Time for bed. Running Malwarebytes' overnight. Will check back in the morning. Thanks for the help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:41:09 PM, on 11/22/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
...

ComboFix 08-11-22.02 - Owner 2008-11-22 18:40:50.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1364 [GMT -7:00]
Running from: c:\documents and...

I did get MBA intstalled and ran it in safe mode. It picked up 12 virus files. Its not redirecting or crawling anymore. Here is the fresh log.

Logfile of Trend Micro HijackThis v2.0.2
Scan...

ComboFix 08-11-22.02 - Owner 2008-11-22 17:11:53.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1436 [GMT -7:00]
Running from: c:\documents and...

I am getting a redirect virus. Its a go.google/go.yahoo type that activates when I try and click on a link for a websearch. It wont let me into Hijack This forums but it let me through here from...