Note that this symptom often indicates the possibility of other malware. You might want go to this page at Jim Eshelman's site, here: http://aumha.org/a/noads.htm and wait a little bit (be patient), while an analysis of a number of possible parasites on your machine will be made to help you identify and remove them. NOTE: You will need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad Blocking software which interferes with Java Scripting for this scan to work. You should get a message between the two lines of **** giving the results of the scan.
For the general hijack case, the best way to start is to get Ad-Aware 6.0, Build 181 or later, here: http://www.lavasoftusa.com/support/download/. UPDATE and run this regularly to get rid of most "spyware/hijackware" on your machine. If it has to fix things, be sure to re-boot and rerun AdAware again and repeat this cycle until you get a clean scan. The reason is that it may have to remove things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy available here: http://security.kolla.de/ SpyBot Support Forum here: http://www.net-integration.net/cgi-bin/for...s/ikonboard.cgi. I recommend using both normally. After UPDATING and fixing things with SpyBot S&D, be sure to re-boot and rerun SpyBot again and repeat this cycle until you get a clean "no red" scan. The reason is that SpyBot sometimes has to remove things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these programs report as spyware. See here, for example: http://www.imilly.com/alexa.htm
A currently common parasite which can cause this symptom is some malware called CoolWebSearch. Do the following:
Once you get things cleaned up, you might want to consider installing the SpywareBlaster and SpywareGuard here to help prevent this kind of thing from happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or memory load - but keep it UPDATED) The latest version as of this writing will prevent installation or prevent the malware from running if it is already installed, and it provides information and fixit-links for a variety of parasites.