From: "Rich" 

This is a multi-part message in MIME format.

------=_NextPart_000_002F_01C58279.82D2BD70
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

   Sure.  If a web page requests to change your home page a confirmation =
dialog is displayed.  The dialog is always displayed.  Given the lack of =
details in your description I can't tell you what happened on your =
machine.  Given this and earlier statements you have made I would not be =
surprised if your machine was "owned".

   If you want me to comment on examples of which I do have knowledge I =
can say that my machines have never had this happen and the machines of =
others where it has happened and they asked me for help I have found in =
all cases there was an application downloaded and running on the machine =
that was responsible.  Give me full access to your machine and if I have =
time I'll investigate, that is assuming you have not destroyed the = traces
of what happened.

Rich

  "Geo"  wrote in message
news:42ccaa54{at}w3.nls.net...
  Rich,

  So this evening when I got home my homepage was set to www.nls.net

  I go browsing the news sites, nice normal very public type news sites. =
One
  of the ads (I'm assuming it was an ad since I can't get it to do it =
again)
  that comes up on those sites brought up a popup window which of course =
I
  just clicked cancel to whatever it was and now my homepage is

  http://205.177.122.27/securityAPI.dll?xC02

  You wanna tell me about this nice warning box that's supposed to =
prevent my
  homepage getting changed now?

  Geo.


------=_NextPart_000_002F_01C58279.82D2BD70
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable








  
Sure.  If a web page =
requests to=20
change your home page a confirmation dialog is displayed.  The =
dialog is=20
always displayed.  Given the lack of details in your description I
= can't=20
tell you what happened on your machine.  Given this and earlier =
statements=20
you have made I would not be surprised if your machine was =
"owned".
 
   If you
want me to comment =
on examples=20
of which I do have knowledge I can say that my machines have never had = this=20
happen and the machines of others where it has happened and they asked = me for=20
help I have found in all cases there was an application downloaded and = running=20
on the machine that was responsible.  Give me full access to your
= machine=20
and if I have time I'll investigate, that is assuming you have not = destroyed the=20
traces of what happened.
Rich
 

  "Geo" <georger{at}nls.net>">mailto:georger{at}nls.net">georger{at}nls.net>
wrote=20
  in message news:42ccaa54{at}w3.nls.net...Ri=
ch,So=20
  this evening when I got home my homepage was set to www.nls.netI">http://www.nls.net">www.nls.netI
go browsing the =
news sites,=20
  nice normal very public type news sites. Oneof the ads (I'm =
assuming it=20
  was an ad since I can't get it to do it again)that comes up on =
those sites=20
  brought up a popup window which of course Ijust clicked cancel to =
whatever=20
  it was and now my homepage ishttp://205.177.122.27" target="new">http://205.177.122.27=">http://205.177.122.27/securityAPI.dll?xC02">http://205.177.122.27=
/securityAPI.dll?xC02You=20
  wanna tell me about this nice warning box that's supposed to prevent=20
  myhomepage getting changed=20
now?Geo.

------=_NextPart_000_002F_01C58279.82D2BD70--

--- BBBS/NT v4.01 Flag-5