Ok, I'd like to try to help. I have built a program that will help to identify the problem. If you go to: http://www.aftermath.net/~coma/ModScan.zip, download that, install it... and then run it. When you run it, it will create a log file, on the root directory of the c drive (c:\tppscan.log). The first time you run it, run it with no web browser open. Then, close out of it, and rename the log (c:\tppscan.log) to something else (say: c:\firstscan.log). Then open your browser, and if it's been hijacked, run the program again. It will create another log (c:\tppscan.log). Then, either post the 2 logs (identify which one was first and which was second) Or, send them both to me in an e-mail as they will most likely be pretty large (text wise). I'll sift through them and see what If I can find anything.

Oops: just realized it's been fixed! Nevermind!