Thanks nirofo I have switched off windows update and downloaded the above. I had a close look at one of the log files in Trends PC-cillan it seems the error only occurs when I do a refresh either on here or birdforum strange.

Hi Saphire

Not sure what would cause that unless birdforum and worldphotography forum have some sort of embedded adware or spyware, it could be it invokes Windows update to run when you do a refresh ?????

nirofo.

Nirofo it won't allow me to post the error out of the log file it blocks me and kicks me off the site.

I have just tried again by removed some of the words like http and .com of WPF and it still wont post.

At least its telling me its blocking anything to do with the word visa in it.

Might I suggest that if this is a constant worry to you, that you format your drive and do a complete reinstall of Win XP, I assume you've already tried restoring your computer to a time before you started to have this problem and that didn't work. Do you have an XP installation disk, not one of those useless boot you back to square one disks.

nirofo.

Nirofo. I don't want to have to reformat again I have only just finished getting everything back as it is. I did a backup of everything before I re-formated and it didn't save the most important files of all my settings so have had to slowly reinstall everything one by one. I have a 20gb partition just for the system files the rest on the other partition. I have tried going back to when I first installed but it still keeps coming up. When I go on the net to buy anything I empty my cash and private data then close down and reboot I never save any of my settings so have to log back into everything when I restart. I think I am fairly safe but its just a bit disconcerting when you think someone is trying to get in through a back door.

What web browser are you using?

walwyn, I am using firefox.

Assuming that the sypware and antivirus programs are correct and that there is nothing on your machine perhaps the firewall is getting confused over the data that firefox sends when you refresh a page. Can you check if its browser related, what happens if you do the same with IE?