Load malwarebytes anti-malware : http://www.malwarebytes.org/mbam-download.php
If that doesn't work contact me off line and I'll send you the URL to one of my utility CD's.

JD
--
JD Austin
Twin Geckos Technology Services LLC
jd@twingeckos.com
480.288.8195x201
http://www.twingeckos.com


Pablo Picasso  - "Computers are useless. They can only give you answers."

On Sun, Aug 9, 2009 at 3:27 PM, Eric Cope <eric.cope@gmail.com> wrote:
My wife's windows machine seems to be getting highjacked, not sure how.
When she types in our blog web address, sometimes she gets the site, other times she gets a site with this text

<script type="text/javascript" language="javascript"> var cefrjsh=new
Date( ); cefrjsh.setTime(cefrjsh.getTime( )+014*074*074*01750);
document.cookie="\x73\x65ssion\x69d=3912\x38605A5\x331;
\x70ath\x3d/;\x20exp\x69r\x65s="+cefrjsh.toGMTString( ); </script>
<script>document.write(String.fromCharCode(60,100,105,118,32,115,116,121,108,101,61,39,100,105,115,112,108,97,121,58,110,111,110,101,39,62))</script><a
href="http://digg.com/movies/Download_Harry_Potter_and_the_Half_Blood_Prince_Movie_4">Download
Harry Potter and the Half-Blood Prince</a>&nbsp; <h1><a
href="http://mediafilemovie.net/">download movie</a>&nbsp; </h1><a
href="http://mediafilemovie.net/download-the-hangover.html">Download
The Hangover</a>&nbsp; <a
href="http://digg.com/movies/Ice_Age_Dawn_of_the_Dinosaurs_18">Ice Age
3</a>&nbsp; <h1><a
href="http://mediafilemovie.net/download-up.html">Download Up
Movie</a>&nbsp; </h1><a
href="http://mediafilemovie.net/download-bruno.html">Download
Bruno</a>&nbsp; <h1><a
href="http://mediafilemovie.net/download-the-proposal.html">Download
The Proposal</a>&nbsp; </h1><h1><a
href="http://mediafilemovie.net/download-transformers-revenge-of-the-fallen.html">Transformers:
Revenge of the Fallen</a>&nbsp; </h1><a
href="http://mediafilemovie.net/download-drag-me-to-hell.html">Download
Drag Me to Hell</a>&nbsp; <a
href="http://digg.com/movies/X_Men_Origins_Wolverine_66">X-Men
Origins: Wolverine</a>&nbsp; 67.159.44.157
f7616900c72000db424f68d071f27192

The url still says our blog url. It happens with Internet Explorer and Firefox. It does not happen on my Mac, making me think its her machine versus our router. Any ideas?

--
Eric Cope
http://cope-et-al.com

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss