For me it happens on any URL I go to on the site. So these forums, the main www.pinkun.co.uk etc.... It seems to have stopped now anyway If it helps - it was detected as "Exploit-MhtRedir.gen" - in the file adv173(1).htm (which I guess is a temporary file?) and in loaderadv173(1).jar Could it be in an advert or something? Ben