Dear WAMUG members,

I turn to you guys in this time of trouble as a regular reader of the
informative posts to WAMUG. I have been lurking on this list for the last
year.  Well not quite a lurker, coz I did introduce "WireTap" when it first
came out so I have contributed to our collective knowledge once!!

I am in a hotel in Portland, Oregan USA and it has wireless access (US$6 a
day).  Yesterday I hexperienced something as a Mac user of 8 years as never
b4.

As soon as I logged to this network in the local hotel I have had problems
with a VERY WEIRD 'popunder Javascript' (having looked at the source) which
takes over my internet connection and thus I have been unable to load a page
for the last 2 days.  Have I experienced the first ever example of Mac
Spyware or Mac Malware???  I accessed the internet at San Fran Airport no
problem with T-Mobile (US$5 an hour).  Sydney Airport was also no prob at
all.

All websites loaded produce the same infinitely reproducing popup windows (
actually a pop-under window). This is the page source:

> <html>
> <head>
> <title>This site is temporarily out of service due to non-technical
> reasons.</title>
> <script>
> 
> //Pop-under window- By JavaScript Kit
> //Credit notice must stay intact for use
> //Visit http://javascriptkit.com for this script
> 
> //specify page to pop-under
> var popunder="http://www.onlywebhosts.com";
> 
> //specify popunder window features
> //set 1 to enable a particular feature, 0 to disable
> var 
> winfeatures="width=800,height=510,scrollbars=1,resizable=1,toolbar=1,location=
> 1,menubar=1,status=1,directories=0"
> 
> //Pop-under only once per browser session? (0=no, 1=yes)
> //Specifying 0 will cause popunder to load every time page is loaded
> var once_per_session=0
> 
> ///No editing beyond here required/////
> 

I have used Activity Monitor, Network Activity and searched my local
Directories in vain to find the root of the problem.   The 24/7 helpful
Wireless Internet company support have suggested a DNS hack but this has
been proven wrong. My firewall is enabled.

This is the first time I have experienced such a prob on a Mac. In the last
24hrs I have been able to occasionally iChat Text, And now for the first
time receive email tonight.  But still no website access, which does not
bode well for doing my presentation tomorrow.  I am loathed to use
PowerPoint, to do so.

BTW:  This is what I have tried so far:
Firefox, Safari, Camino, Explorer, Netscape all produce the same 'Popunder'
Javascript Spyware/Malware/Worm/Virus/Whatchamacallit.  They all head to
www.onlywebhosts.com
I have reset PRAM.
I have run MacJanitor.
I have run Disk First Aid. All to no avail.

Help me WAMUG OB1 you are my only hope.

Paul 
                .
     paul reid  .  [EMAIL PROTECTED]
lead developer  .
      orbitree  .  http://www.orbitree.com.au
                .  immersive imaging development
                .  0412 99 34 30
                .