A neighbor brought his laptop to me saying that he could "get the Internet, but my searches don't work". That didn't make any sense to me, but I said, sure, I'll take a look at it. I got the system booted up, and sure enough he was RIGHT! I could go to www.ask.com (same results no matter the search engine), type in a search, and the page that loaded would just be blank. I thought WTF? No "page cannot be displayed"? So I looked at the source code, expecting to see the "transitional" HTML code. Instead, the entire page source was present. At the top of the document, though, was this: <DIV STYLE="position:absolute;width:2000px;height:3000px;top:0px;left:0px;z-index:99999;background-color:#fffff"></DIV> So SOMETHING is running on this system that is intercepting the web page, altering the source code, then displaying the altered page. FUCK! I have removed some virii from this system, including that annoying "FREDDY49.EXE", which I was just at a customer's house removing about a week ago. There were three different pieces of malware on this system, and I've removed them. The guy had AVG (yea, great choice- you get what you pay for!). I tried removing it, but it wouldn't uninstall. I manually removed the program and all registry references. Still nothing. There is something tied into the browser that's doing this, and I can't figure out what it is. Any help? I also looked for rogue services, other startup entries, IE add-ons, etc. I ususally don't end up stumped, but this is blowing my mind. HALP MEEEEE! Thanks.