Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Frameset//EN"> <!-- web05 --><HTML><HEAD><TITLE></TITLE> <META http-equiv=Content-Type content="text/html; charset=windows-1252"> <META content="" name=description> <META content="" name=keywords></HEAD><FRAMESET border=0 frameSpacing=0 rows=100%,* frameBorder=0 noresize><FRAME name=MainFrame src="http://64.70.7.141/blank.htm?domain=spywareinfo.com" noResize><NOFRAMES> <body> <center> <h1></h1> <br> <br> <a href="http://64.70.7.141/blank.htm?domain=spywareinfo.com">Click here to enter</a> <br> </center> </body> </NOFRAMES></FRAMESET></HTML>
When I had the problems yesterday, landings.overtureparking.com was in place of 64.70.7.141 in the src and a href items. Ad-Aware found nothing, The HijackThis log was clean, host file wasn't changed (no write access to it). Any ideas?
-- LB
