On the toolbar at the top, you will likely have a Google searchbox. Just to the right of that will be a little "magnifying glass" icon with a downward arrowhead next to it. Click the arrowhead and it should offer "manage search providers" and you can select the default one as Google - and remove the nasty ones.
If that doesn't help then... chances are there's something still quite wrong with your machine, so it would be worth getting it "properly" rebuilt rather than just cleaned. What you might find is that the default hosts file has been poisoned with a redirect to a "something that's nasty" instead of the regular Google page.
If you:
Open "My Computer" then go to "C:" drive, then "Windows", then "System32", then "Drivers", then "etc" you will find a file called "hosts" (without any filetype description, like .txt or anything else, just "hosts").
Right click that and copy it, then paste the copy to the same folder - this is just as a backup so that you can fix things if they go wrong. Now right click the original hosts file again, and choose "open" and use "Notepad" to open it. Don't try to open it with anything else.
It should look like this
Code: Select all
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
If there is anything else there then it has either been added by malware, and is trying to intercept any lookup to Google, or it could be added by Spybot Search & Destroy if giraffe has got as far as adding the hosts file protection on it - but I didn't get as far as telling her about that before.
If there is anything after the example info above in your hosts file then let me know.