Hi Matt, Check the HTML code of your web pages. At the bottom, right after the </html> tag, you will see a script starting with "function load(code,dfunc,anticasp)...". When it is executed it adds a hidden iframe from 202 .75 .35 .222.
You should remove it. And find out how it got there to prevent reinfections. Denis http://www.UnmaskParasites.com --~--~---------~--~----~------------~-------~--~----~ You received this message through the Google Groups "stopbadware" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/stopbadware?hl=en -~----------~----~----~----~------~----~------~--~---
