Load malwarebytes anti-malware :
http://www.malwarebytes.org/mbam-download.php
If that doesn't work contact me off line and I'll send you the URL to one of
my utility CD's.

JD
--
JD Austin
Twin Geckos Technology Services LLC
jd@twingeckos.com
480.288.8195x201
http://www.twingeckos.com


Pablo Picasso<http://www.brainyquote.com/quotes/authors/p/pablo_picasso.html>
- "Computers are useless. They can only give you answers."

On Sun, Aug 9, 2009 at 3:27 PM, Eric Cope <eric.cope@gmail.com> wrote:

> My wife's windows machine seems to be getting highjacked, not sure how.
> When she types in our blog web address, sometimes she gets the site, other
> times she gets a site with this text
>
> <script type="text/javascript" language="javascript"> var cefrjsh=new
> Date( ); cefrjsh.setTime(cefrjsh.getTime( )+014*074*074*01750);
> document.cookie="\x73\x65ssion\x69d=3912\x38605A5\x331;
> \x70ath\x3d/;\x20exp\x69r\x65s="+cefrjsh.toGMTString( ); </script>
>
> <script>document.write(String.fromCharCode(60,100,105,118,32,115,116,121,108,101,61,39,100,105,115,112,108,97,121,58,110,111,110,101,39,62))</script><a
> href="
> http://digg.com/movies/Download_Harry_Potter_and_the_Half_Blood_Prince_Movie_4
> ">Download
> Harry Potter and the Half-Blood Prince</a>&nbsp; <h1><a
> href="http://mediafilemovie.net/">download movie</a>&nbsp; </h1><a
> href="http://mediafilemovie.net/download-the-hangover.html">Download
> The Hangover</a>&nbsp; <a
> href="http://digg.com/movies/Ice_Age_Dawn_of_the_Dinosaurs_18">Ice Age
> 3</a>&nbsp; <h1><a
> href="http://mediafilemovie.net/download-up.html">Download Up
> Movie</a>&nbsp; </h1><a
> href="http://mediafilemovie.net/download-bruno.html">Download
> Bruno</a>&nbsp; <h1><a
> href="http://mediafilemovie.net/download-the-proposal.html">Download
> The Proposal</a>&nbsp; </h1><h1><a
> href="
> http://mediafilemovie.net/download-transformers-revenge-of-the-fallen.html
> ">Transformers:
> Revenge of the Fallen</a>&nbsp; </h1><a
> href="http://mediafilemovie.net/download-drag-me-to-hell.html">Download
> Drag Me to Hell</a>&nbsp; <a
> href="http://digg.com/movies/X_Men_Origins_Wolverine_66">X-Men
> Origins: Wolverine</a>&nbsp; 67.159.44.157
> f7616900c72000db424f68d071f27192
>
> The url still says our blog url. It happens with Internet Explorer and
> Firefox. It does not happen on my Mac, making me think its her machine
> versus our router. Any ideas?
>
> --
> Eric Cope
> http://cope-et-al.com
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>