problem with search engines

[zak]

i have an issue with google search results, it begins from a few months only :suppose using ie or firefox to search for thinbasic, now if i click on any search results link it changes to something like this:
http://www.google.co.uk/url?sa=t&source=web&cd=2&sqi=2&ved=0CCcQFjAB&url=http%3A%2F%2Fwww.thinbasic.com%2Findex.php%3FItemid%3D95%26option%3Dcom_jdownloads&ei=WjiMTaD5JcnagQfG2r2oDQ&usg=AFQjCNEjfmIrXlB5X2uy5Bz7VIguBG8U3w
and it takes between 1 to 5 minutes to be directed to the final link:
http://www.thinbasic.com/index.php?Itemid=95&option=com_jdownloads
the same when right click on the search result and copy, the only browser escape this real link torturing is opera browser, i can R-click and copy exactly the real link.
but the surprise: using google chrome, yes the link are changed to that tortured link but it is immediadely changed to the real link.
i got an impression that google wants us to use chrome. no harm to use chrome, but i like the ie clear fonts.
normaly i am getting the real link from Opera and pasting it to IE.
i have asked other users in the area, some have this, and some don't have this phenomena. the same thing with yahoo, i will continue to see if this is a virus or not.

[matthew]

I don't think it's a Virus, it sound's more like Spyware.

Does it only happen when you search for thinBasic or other things too?

[ErosOlmi]

Try first of all removing all tools into your browser extensions:

anything whose name starts with "helper" is usually a spy
anything whose name starts with "toolbar" is usually a spy
any add-on that is not signed by a known company is suspect
if you do not use live.microsoft.com tools, remove all "live*" add-ons
Just leave add-ons like java, acrobat or things like that.

Than restart your browser. Somtimes you will find that your navigation speed will double or even more.

[zak]

thanks matthew, this happened in any search words. when i hover the mouse cursor over the link it appears as the real link should be in the bottom left of IE, but after R-click on the link it is directly converted to the tortured link as in this picture, and this happened whatever google.xxx i may use. i am using windows xp/sp2 mainly):
http://i55.tinypic.com/2w23bra.png
just now i have tried windows 7 which i am installing on another partition and using it rarely, it seems okay, the links tortured as in winxp but immediately converted to the real link. so may be it is spyware in winXP partition. but i have to live with the spyware for several months, it is extremely tedious to reinstall everything, i have a backup but an old one.

[matthew]

What Anti-Malware software are you using on your computer?

You might want to try using HijackThis (http://www.filehippo.com/download_hijackthis/) as it will tell you what applications are running & you can see if anything illegitimate has been installed.

[zak]

i am using avast free edition for very long time . i will try HijackThis .
and will try Eros suggestions
thanks