• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 872
  • Last Modified:

Urgent - Internet adware problem

OS: win2000 pro SP4  & IE 6 SP1
While i tried to connect some website. the site automatically transfered to "MED NETWORK" some medical tablets website.

but in the address bar its display the actual address like www.cnn.com, but the page display the other "RX MED" and the tablets informations.

i have big problem because of this.i cant view the all websites properly. even after i reinstall my Win2000, still i have the same problem. i checked with the latest  SpyBoot, Hijackthis, CWShredder etc.

while i run the pc in IE5, i dont have any problem. but after change to IE6 , i have this problem.


0
Viji4u
Asked:
Viji4u
  • 9
  • 5
  • 2
  • +1
1 Solution
 
SheharyaarSaahilCommented:
Hello Viji4u =)

Try two things plzz,

1. Open ur HOSTS file from C:\WINNT\System32\drivers\etc folder, in notepad and make sure it doesn't contain the entries for the websites you are having problems with.

2. Download Hijackthis from here and run it to get its log file >> http://tools.radiosplace.com/HijackThis.exe
Then post that LOG at here >> http://www.hijackthis.de/index.php?langselect=english
hit Analyse button, and when its analysed, scroll down and click Save Analyse, and then copy the adress of that page and plzz paste here :)
0
 
Viji4uAuthor Commented:
Each time while i run i found the Following problem.

because of this, the problem in IE?

DSO Exploit: Data source object exploit (Registry change, nothing done)
  HKEY_USERS\S-1-5-21-1644491937-412668190-682003330-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
Viji4uAuthor Commented:
no change in the  host files in C:\WINNT\System32\drivers\etc folder
0
 
SheharyaarSaahilCommented:
O4 - HKLM\..\Run: [Msn DJ] msndj.exe
O4 - HKLM\..\RunServices: [Msn DJ] msndj.exe

check the above two lines in hijackthis scan and click on Fix Checked !!
If u can can find this file on ur hard drive, plzz delete it from safemode, and then Restart and check now for the problem ??

Also the DSO Exploit is just a bug in Spybot,,,, plzz update the Spybot to the latest version.
You can also read here for some possible solutions if updating doesn't solve the issue :)

Spybot keeps finding DSO exploit
http://www.computing.net/windowsxp/wwwboard/forum/104837.html
0
 
rindiCommented:
Another tip, use Mozilla Firebird for Browsing purposes. You can download it from http://mozilla.org. This Browser is much less likely to pick up any malware than IE is.
0
 
CharlyPhillyCommented:
If you download and run Bazooka you can look at the logfile there to find the registry entries you need to change to correct this problem. also you might want to download adaware se to search for spyware on the system. after you run bazooka you can place the logfile on here so I can take a look at it and tell you which registry entries need to be changed.
0
 
Viji4uAuthor Commented:
****************************************
Bazooka Scanner v1.13.02
http://www.kephyr.com/spywarescanner/
http://www.kephyr.com/spywarescanner/library/
support@kephyr.com
Log created 12:11:40.
OS: Windows NT 5.0
Database version: 2.220000
Database format version: 1.020000
Database date: 20040806
Current date: 2004-11-09 12:11


****************************************
Result when scanning:

MS Media Player GUID 404.888.000
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Settings\Client ID
http://www.kephyr.com/spywarescanner/library/msmediaplayerguid/index.phtml

****************************************
Auto start entries:
    D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    C:\Program Files\Microsoft Office\Office10\OSA.EXE -b -l
    D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    C:\Program Files\Microsoft Office\Office10\OSA.EXE -b -l
    D:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
    C:\mysql\bin\winmysqladmin.exe
    D:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
    C:\mysql\bin\winmysqladmin.exe

    Go here to analyse the startup entries and the associated files:
    http://www.kephyr.com/filedb/index.php

****************************************
Run entries:
    Zone Labs Client            D:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Zone Labs Client

    Synchronization Manager            mobsync.exe /logon
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Synchronization Manager

    RemoteControl            "D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\RemoteControl

    ctfmon.exe            ctfmon.exe
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ctfmon.exe


    Go here to analyse the run entries and the associated files:
    http://www.kephyr.com/filedb/index.php

****************************************
Browser helper objects:


****************************************
Toolbars:

{01E04581-4EEE-11D0-BFE9-00AA005B4383}      D:\WINNT\system32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{01E04581-4EEE-11D0-BFE9-00AA005B4383}

{0E5CBF21-D15F-11D0-8301-00AA005B4383}      D:\WINNT\system32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}

{01E04581-4EEE-11D0-BFE9-00AA005B4383}      D:\WINNT\system32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{01E04581-4EEE-11D0-BFE9-00AA005B4383}

{0E5CBF21-D15F-11D0-8301-00AA005B4383}      D:\WINNT\system32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}

{4D5C8C25-D075-11d0-B416-00C04FB90376}      D:\WINNT\system32\shdocvw.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376}

{32683183-48a0-441b-a342-7c2a440a9478}      D:\WINNT\system32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478}

{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}      D:\WINNT\system32\shell32.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}

{EFA24E64-B078-11D0-89E4-00C04FC9E26E}      D:\WINNT\system32\shdocvw.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{EFA24E64-B078-11D0-89E4-00C04FC9E26E}


****************************************
All processes:

    [System Process]
    System
    SMSS.EXE
    CSRSS.EXE
    WINLOGON.EXE
    SERVICES.EXE
    LSASS.EXE
    spoolsv.exe
    Apache.exe
    svchost.exe
    mdm.exe
    Apache.exe
    mysqld-nt.exe
    regsvc.exe
    mstask.exe
    vsmon.exe
    WinMgmt.exe
    svchost.exe
    zlclient.exe
    ApacheMonitor.e
    winmysqladmin.e
    explorer.exe
    procexp.exe
    emule.exe
    IEXPLORE.EXE
    CTFMON.EXE
    spywarescanner.
    IEXPLORE.EXE

    Go here to analyse the running processes:
    http://www.kephyr.com/filedb/index.php

****************************************
Internet Explorer Settings:

    Default_Page_URL    http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL

    Default_Search_URL    http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL

    Local Page    D:\WINNT\system32\blank.htm
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page

    Search Page    http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page

    Start Page    http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page

    SearchAssistant    http://www.google.com
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant

    CustomizeSearch    http://www.google.com
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch

        http://
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix\

    www    http://
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\www

    provider    
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\provider

    Local Page    D:\WINNT\system32\blank.htm
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page

    Search Page    http://www.google.com
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page

    Start Page    about:blank
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page


****************************************
0
 
CharlyPhillyCommented:
First: Open Regedit and change the following keys to a different site (like http://search.msn.com/default.aspx):

    Local Page    D:\WINNT\system32\blank.htm
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page

    Local Page    D:\WINNT\system32\blank.htm
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page

    Start Page    about:blank
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page

          *Also change the microsoft links to http://search.msn.com/default.aspx (or whatever you choose)

     While in the "HKCU & HKLM\Software\Microsoft\Internet Explorer\Main" window on the right hand pane, check for any *.dll files. let me know if you see any.

Next: Make sure you go to microsft and get the lastest updates & security patches. http://v4.windowsupdate.microsoft.com/en/default.asp

                     **You especially need to make sure you get the internet explorer updates (SP2 is latest).**

Last: I know you're probably tired of downloading and running programs but........

Download and run Giant Anti Spyware http://www.giantcompany.com/(e3olgravtimoyk45kgpw1fzy)/download.aspx?prodID=70&skip=true

This product has a larger database and finds way more adware/spyware. Let me know how everything works out.
0
 
Viji4uAuthor Commented:
i did the registry  and Windows update. After restart i tried the same site. still i have the same problem. even i tried to view the http://www.giantcompany.com/ site its automatically goes to the RX MED page.

here i added Software\Microsoft\Internet Explorer\Main  Registry Entries.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Enable_Disk_Cache"="yes"
"Cache_Percent_of_Disk"=hex:0a,00,00,00
"Delete_Temp_Files_On_Exit"="yes"
"Local Page"=hex(2):44,00,3a,00,5c,00,57,00,49,00,4e,00,4e,00,54,00,5c,00,73,\
  00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,62,00,6c,00,61,00,6e,00,\
  6b,00,2e,00,68,00,74,00,6d,00,00,00
"Anchor_Visitation_Horizon"=hex:01,00,00,00
"Use_Async_DNS"="yes"
"Placeholder_Width"=hex:1a,00,00,00
"Placeholder_Height"=hex:1a,00,00,00
"Start Page"=" D:\\WINNT\\system32\\blank.htm"
"CompanyName"="Microsoft Corporation"
"Custom_Key"="MICROSO"
"Wizard_Version"="6.00.2800.1106"
"FullScreen"="no"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\ErrorThresholds]
"400"=dword:00000200
"403"=dword:00000100
"404"=dword:00000200
"405"=dword:00000100
"406"=dword:00000200
"408"=dword:00000200
"409"=dword:00000200
"410"=dword:00000100
"500"=dword:00000200
"501"=dword:00000200
"505"=dword:00000200

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\UrlTemplate]
"1"="www.%s.com"
"2"="www.%s.org"
"3"="www.%s.net"
"4"="www.%s.edu"




Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"NoUpdateCheck"=dword:00000001
"NoJITSetup"=dword:00000001
"Show_ChannelBand"="No"
"Anchor Underline"="yes"
"Cache_Update_Frequency"="Once_Per_Session"
"Display Inline Images"="yes"
"Do404Search"=hex:01,00,00,00
"Local Page"=" D:\\WINNT\\system32\\blank.htm"
"Save_Session_History_On_Exit"="no"
"Show_FullURL"="no"
"Show_StatusBar"="yes"
"Show_ToolBar"="yes"
"Show_URLinStatusBar"="yes"
"Show_URLToolBar"="yes"
"Start Page"="about:blank"
"Use_DlgBox_Colors"="yes"
"Search Page"="http://www.google.com"
"FullScreen"="no"
"Window_Placement"=hex:2c,00,00,00,02,00,00,00,03,00,00,00,ff,ff,ff,ff,ff,ff,\
  ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,f2,00,00,00,16,00,00,00,f2,03,00,00,2f,02,00,\
  00
"FormSuggest PW Ask"="no"
"NotifyDownloadComplete"="yes"
"Q261272"="yes"
"Use FormSuggest"="yes"
"Error Dlg Displayed On Every Error"="no"
"Error Dlg Details Pane Open"="no"
"Disable Script Debugger"="yes"
"AddToFavoritesExpanded"=dword:00000000
"Save Directory"="D:\\Documents and Settings\\Administrator\\My Documents\\"



i tried with the all other adware and spyware removal tools. but still i cant find the location of this adware.
0
 
Viji4uAuthor Commented:
some times  i get the IE error like

HTTP 403 (Forbidden) - Microsoft Internet Explorer
You are not authorized to view this page

sometimes ASP and ASPX files not displying from the other sites.



0
 
CharlyPhillyCommented:
You need to change the following in the registry (you can just put http:// or nothing at all:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page"=" D:\\WINNT\\system32\\blank.htm"
"Local Page"=hex(2):44,00,3a,00,5c,00,57,00,49,00,4e,00,4e,00,54,00,5c,00,73,\
  00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,62,00,6c,00,61,00,6e,00,\
  6b,00,2e,00,68,00,74,00,6d,00,00,00
"Custom_Key"="MICROSO"   (delete this value)

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"=" D:\\WINNT\\system32\\blank.htm"
"Start Page"="about:blank"
"Show_FullURL"="no" (change to yes)

Also, under the HKCU & HKLM\Software\Microsoft\Internet Explorer expand the menu and check the actual keys (may or may not be present) that are called start page, local page, Default_Page_URL, Default_Search_URL, & Search Page check the values in the right-hand pane and also look for suspicious *.dll's.

-Then change your internet explorer settings to HIGH. Add the *.giantcompany.com/* to your trusted sites and set that to low. Check the trusted sites list and make sure there are no suspicious sites listed there. You should be able to download from the site. Hope this helps, let me know if it doesn't. I will be online for another 2 1/5 hours.
0
 
Viji4uAuthor Commented:
hi

Still i have the probloem.   its shows the same "Med Network" and in the address bar its displays the http://giantcompany.com.

here i copied the entire registry.


Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer]
@=""
"Download Directory"="D:\\Documents and Settings\\Administrator\\Desktop"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default HTML Editor]
"Description"="Microsoft FrontPage"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default HTML Editor\shell]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default HTML Editor\shell\edit]
@="&Edit"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command]
@="C:\\PROGRA~1\\MICROS~3\\Office10\\FRONTPG.EXE"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\ddeexec]
@="[Open(\"%1\")]"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\ddeexec\Application]
@="Frontpg"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\ddeexec\Topic]
@="System"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default MHTML Editor]
"Last"="\"C:\\Program Files\\Microsoft Office\\Office10\\WINWORD.EXE\" /n /dde"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default MHTML Editor\shell]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit]
@="&Edit"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\command]
@="\"C:\\Program Files\\Microsoft Office\\Office10\\WINWORD.EXE\" /n /dde"
"command"=hex(7):43,00,38,00,34,00,44,00,56,00,6e,00,2d,00,7d,00,66,00,28,00,\
  59,00,52,00,5d,00,65,00,41,00,52,00,36,00,2e,00,6a,00,69,00,57,00,4f,00,52,\
  00,44,00,46,00,69,00,6c,00,65,00,73,00,3e,00,4c,00,26,00,72,00,66,00,55,00,\
  6d,00,57,00,2e,00,63,00,47,00,2e,00,65,00,25,00,66,00,49,00,34,00,47,00,7d,\
  00,6a,00,64,00,20,00,2f,00,6e,00,20,00,2f,00,64,00,64,00,65,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\ddeexec]
@="[REM _DDE_Direct][FileOpen(\"%1\")]"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\ddeexec\Application]
@="WinWord"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Default MHTML Editor\shell\edit\ddeexec\Topic]
@="System"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000003
"Settings"=dword:00000001
"GeneralFlags"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00002002
"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e4,02,00,00,00,\
  00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
  ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,f0,01,00,00,1f,00,00,00,80,00,00,00,76,00,\
  00,00,01,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General]
"WallpaperFileTime"=hex:00,00,00,00,00,00,00,00
"ComponentsPositioned"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Old WorkAreas]
"NoOfOldWorkAreas"=dword:00000001
"OldWorkAreaRects"=hex:00,00,00,00,00,00,00,00,00,04,00,00,e4,02,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\SafeMode]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\SafeMode\General]
"Wallpaper"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,57,00,65,00,62,00,5c,00,53,00,61,00,66,00,65,00,4d,00,6f,\
  00,64,00,65,00,2e,00,68,00,74,00,74,00,00,00
"VisitGallery"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Scheme]
"Edit"=""
"Display"=""

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Document Windows]
"Maximized"="no"
"height"=hex:00,00,00,00
"width"=hex:00,00,00,80
"x"=hex:00,00,00,80
"y"=hex:00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478}]
@="Media Band"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E64-B078-11D0-89E4-00C04FC9E26E}]
"BarSize"=hex:2f,01,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping]
"NextId"=dword:00002005
"{6224f700-cba3-4071-b251-47cb894244cd}"=dword:00002001
"{B863453A-26C3-4e1f-A54D-A2CD196348E9}"=dword:00002002
"{E19ADC6E-3909-43E4-9A89-B7B676377EE3}"=dword:00002003
"{2222EF56-F49E-4d07-A14E-8D2B08766958}"=dword:00002004

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Help_Menu_URLs]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms]
"AskUser"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International]
"CNum_CpCache"=dword:00000002
"CpCache"=hex:af,6f,00,00,e9,fd,00,00
@=""

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\CpMRU]
"Enable"=dword:00000001
"Size"=dword:0000000a
"InitHits"=dword:00000064
"Factor"=dword:00000014
"Cache"=hex:af,6f,00,00,2b,00,00,00,b0,04,00,00,0f,00,00,00,e9,fd,00,00,05,00,\
  00,00,bd,6f,00,00,04,00,00,00,b5,03,00,00,04,00,00,00,e4,04,00,00,01,00,00,\
  00,e3,04,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3]
"IEFontSize"=hex:02,00,00,00
"IEPropFontName"="Times New Roman"
"IEFixedFontName"="Courier New"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"NoUpdateCheck"=dword:00000001
"NoJITSetup"=dword:00000001
"Show_ChannelBand"="No"
"Anchor Underline"="yes"
"Cache_Update_Frequency"="Once_Per_Session"
"Display Inline Images"="yes"
"Do404Search"=hex:01,00,00,00
"Local Page"=" D:\\WINNT\\system32\\blank.htm"
"Save_Session_History_On_Exit"="no"
"Show_FullURL"="yes"
"Show_StatusBar"="yes"
"Show_ToolBar"="yes"
"Show_URLinStatusBar"="yes"
"Show_URLToolBar"="yes"
"Start Page"="about:blank"
"Use_DlgBox_Colors"="yes"
"Search Page"="http://www.google.com"
"FullScreen"="no"
"Window_Placement"=hex:2c,00,00,00,02,00,00,00,03,00,00,00,00,83,ff,ff,00,83,\
  ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,7a,00,00,00,5c,00,00,00,7a,03,00,00,75,02,00,\
  00
"FormSuggest PW Ask"="no"
"NotifyDownloadComplete"="yes"
"Q261272"="yes"
"Use FormSuggest"="yes"
"Error Dlg Displayed On Every Error"="no"
"Error Dlg Details Pane Open"="yes"
"Disable Script Debugger"="yes"
"AddToFavoritesExpanded"=dword:00000000
"Save Directory"="D:\\Documents and Settings\\Administrator\\My Documents\\"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Media]
"AutoplayPrompt"=hex:01

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Media\MimeTypes]
"application/sdp"=hex:00
"application/x-sdp"=hex:00
"application/x-rtsp"=hex:00
"video/quicktime"=hex:00
"video/flc"=hex:00
"audio/x-wav"=hex:00
"audio/wav"=hex:00
"audio/aiff"=hex:00
"audio/x-aiff"=hex:00
"audio/basic"=hex:00
"audio/mid"=hex:00
"audio/x-midi"=hex:00
"audio/midi"=hex:00
"audio/vnd.qcelp"=hex:00
"audio/AMR"=hex:00
"audio/x-gsm"=hex:00
"video/x-mpeg"=hex:00
"video/mpeg"=hex:00
"audio/mpeg"=hex:00
"audio/x-mpeg"=hex:00
"video/3gpp"=hex:00
"audio/3gpp"=hex:00
"video/mp4"=hex:00
"audio/mp4"=hex:00
"audio/x-m4a"=hex:00
"audio/x-m4p"=hex:00
"audio/x-m4b"=hex:00
"video/sd-video"=hex:00
"video/3gpp2"=hex:00
"audio/3gpp2"=hex:00
"image/x-macpaint"=hex:00
"image/pict"=hex:00
"image/x-pict"=hex:00
"image/png"=hex:00
"image/x-png"=hex:00
"image/x-quicktime"=hex:00
"image/x-sgi"=hex:00
"image/x-targa"=hex:00
"image/tiff"=hex:00
"image/x-tiff"=hex:00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"provider"=""

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security]
"Sending_Security"="Medium"
"Viewing_Security"="Low"
"Safety Warning Level"="Query"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\P3Global]
"Enabled"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\P3Sites]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Services]
@=""

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings]
"Anchor Color Visited"="128,0,128"
"Anchor Color"="0,0,255"
"Background Color"="192,192,192"
"Text Color"="0,0,0"
"Use Anchor Hover Color"="No"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
"LinksFolderName"="Links"
"ShowDiscussionButton"="Yes"
"Locked"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Explorer]
"ITBarLayout"=hex:11,00,00,00,4c,00,00,00,00,00,00,00,34,00,00,00,1b,00,00,00,\
  4a,00,00,00,01,00,00,00,a0,06,00,00,a0,0f,00,00,05,00,00,00,62,04,00,00,26,\
  00,00,00,02,00,00,00,a1,06,00,00,a0,0f,00,00,04,00,00,00,a1,00,00,00,a0,0f,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"{01E04581-4EEE-11D0-BFE9-00AA005B4383}"=hex:81,45,e0,01,ee,4e,d0,11,bf,e9,00,\
  aa,00,5b,43,83,10,00,00,00,00,00,00,00,01,e0,32,f4,01,00,00,00
"{0E5CBF21-D15F-11D0-8301-00AA005B4383}"=hex:21,bf,5c,0e,5f,d1,d0,11,83,01,00,\
  aa,00,5b,43,83,22,00,1c,00,08,00,00,00,06,00,00,00,01,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,4c,00,00,00,01,14,02,00,00,00,00,00,c0,00,00,00,00,\
  00,00,46,83,00,00,00,10,00,00,00,26,54,98,e5,86,c4,c4,01,ce,65,6d,15,59,c5,\
  c4,01,8e,6a,41,f6,fd,c4,c4,01,00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,d2,00,14,00,1f,50,e0,4f,d0,20,ea,3a,69,10,a2,d8,\
  08,00,2b,30,30,9d,19,00,23,44,3a,5c,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,4d,59,2e,00,31,00,00,00,00,00,67,31,38,28,30,00,44,6f,63,75,6d,\
  65,6e,74,73,20,61,6e,64,20,53,65,74,74,69,6e,67,73,00,44,4f,43,55,4d,45,7e,\
  31,00,25,00,31,00,00,00,00,00,67,31,39,28,10,00,41,64,6d,69,6e,69,73,74,72,\
  61,74,6f,72,00,41,44,4d,49,4e,49,7e,31,00,3b,00,b1,00,00,00,00,00,67,31,6d,\
  a6,11,00,46,61,76,6f,72,69,74,65,73,00,46,41,56,4f,52,49,7e,31,00,1a,00,35,\
  00,03,00,ef,be,a0,a3,9b,1a,3a,14,cf,11,83,50,44,45,53,54,00,00,21,00,15,00,\
  31,00,00,00,00,00,67,31,c6,99,10,00,4c,69,6e,6b,73,00,00,00,00,6b,00,00,00,\
  1c,00,00,00,01,00,00,00,1c,00,00,00,32,00,00,00,00,00,00,00,6a,00,00,00,16,\
  00,00,00,03,00,00,00,50,eb,97,30,10,00,00,00,4b,69,64,20,32,00,44,3a,5c,44,\
  6f,63,75,6d,65,6e,74,73,20,61,6e,64,20,53,65,74,74,69,6e,67,73,5c,41,64,6d,\
  69,6e,69,73,74,72,61,74,6f,72,5c,46,61,76,6f,72,69,74,65,73,5c,4c,69,6e,6b,\
  73,00,00,60,00,00,00,03,00,00,a0,58,00,00,00,00,00,00,00,6b,69,64,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,4a,15,47,06,8a,97,86,4e,99,4b,f8,94,55,e1,93,\
  75,86,80,04,23,7a,30,d9,11,ac,02,ed,0c,9f,d5,68,2f,4a,15,47,06,8a,97,86,4e,\
  99,4b,f8,94,55,e1,93,75,86,80,04,23,7a,30,d9,11,ac,02,ed,0c,9f,d5,68,2f,00,\
  00,00,00
"ITBarLayout"=hex:11,00,00,00,4c,00,00,00,00,00,00,00,34,00,00,00,1b,00,00,00,\
  4a,00,00,00,01,00,00,00,20,07,00,00,a0,0f,00,00,05,00,00,00,62,05,00,00,26,\
  00,00,00,02,00,00,00,21,07,00,00,a0,0f,00,00,04,00,00,00,21,01,00,00,a0,0f,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{01E04581-4EEE-11D0-BFE9-00AA005B4383}"=hex:81,45,e0,01,ee,4e,d0,11,bf,e9,00,\
  aa,00,5b,43,83,10,00,00,00,00,00,00,00,01,e0,32,f4,01,00,00,00
"{0E5CBF21-D15F-11D0-8301-00AA005B4383}"=hex:21,bf,5c,0e,5f,d1,d0,11,83,01,00,\
  aa,00,5b,43,83,22,00,1c,00,08,00,00,00,06,00,00,00,01,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,4c,00,00,00,01,14,02,00,00,00,00,00,c0,00,00,00,00,\
  00,00,46,81,00,00,00,10,00,00,00,26,54,98,e5,86,c4,c4,01,ec,14,c7,b7,ca,c6,\
  c4,01,8e,6a,41,f6,fd,c4,c4,01,00,10,00,00,00,00,00,00,01,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,d2,00,14,00,1f,50,e0,4f,d0,20,ea,3a,69,10,a2,d8,\
  08,00,2b,30,30,9d,19,00,23,44,3a,5c,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,4d,59,2e,00,31,00,00,00,00,00,69,31,ab,46,30,00,44,6f,63,75,6d,\
  65,6e,74,73,20,61,6e,64,20,53,65,74,74,69,6e,67,73,00,44,4f,43,55,4d,45,7e,\
  31,00,25,00,31,00,00,00,00,00,69,31,b4,46,10,00,41,64,6d,69,6e,69,73,74,72,\
  61,74,6f,72,00,41,44,4d,49,4e,49,7e,31,00,3b,00,b1,00,00,00,00,00,6a,31,b9,\
  02,11,00,46,61,76,6f,72,69,74,65,73,00,46,41,56,4f,52,49,7e,31,00,1a,00,35,\
  00,03,00,ef,be,a0,a3,9b,1a,3a,14,cf,11,83,50,44,45,53,54,00,00,21,00,15,00,\
  31,00,00,00,00,00,67,31,c6,99,10,00,4c,69,6e,6b,73,00,00,00,00,60,00,00,00,\
  03,00,00,a0,58,00,00,00,00,00,00,00,6b,69,64,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,4a,15,47,06,8a,97,86,4e,99,4b,f8,94,55,e1,93,75,86,80,04,23,7a,30,\
  d9,11,ac,02,ed,0c,9f,d5,68,2f,4a,15,47,06,8a,97,86,4e,99,4b,f8,94,55,e1,93,\
  75,86,80,04,23,7a,30,d9,11,ac,02,ed,0c,9f,d5,68,2f,00,00,00,00
"ITBarLayout"=hex:11,00,00,00,4c,00,00,00,00,00,00,00,34,00,00,00,1f,00,00,00,\
  4a,00,00,00,01,00,00,00,a0,06,00,00,a0,0f,00,00,05,00,00,00,62,04,00,00,26,\
  00,00,00,02,00,00,00,a1,06,00,00,a0,0f,00,00,04,00,00,00,a1,00,00,00,a0,0f,\
  00,00,03,00,00,00,a0,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedUrls]
"url1"="http://web.de/"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

0
 
CharlyPhillyCommented:
This is only the current User (HKEY_CURRENT_USER) portion...You may not be changing all of the keys that need to be changed.

Right-click on the internet explorer page you open that has the MED NETWORK page, right-click, go to properties and paste the URL. If it shows the URL that you typed (i.e.: www.giantcompany.com) then right-click on the page, go to view source and post the source instead.
0
 
Viji4uAuthor Commented:
in URL its same like cnn.com

here i copied the source



<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE html
      PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
       "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-US"><head><title>Med Network</title>
<script type="text/javascript">//<![CDATA[


if (window != top) top.location.href = location.href;

function submit_link(linkname){

window.document.theForm.drug_select.value = linkname;
window.document.theForm.submit();

}
function cat_link(linkname){

window.document.theForm.cat_select.value = linkname;
window.document.theForm.submit();

}
function goto_link(linkname){

window.document.theForm.goto_field.value = linkname;
window.document.theForm.submit();

}
function buy_link(linkname){

window.document.theForm.buy_field.value = linkname;
window.document.theForm.submit();

}



//]]></script>
</head><body leftmargin="0" bgcolor="#ffffff" topmargin="0" marginheight="0" marginwidth="0"><form method="post" action="/" enctype="application/x-www-form-urlencoded" name="theForm">

<style type="text/css">
<!--/* <![CDATA[ */

td, p, .normal      {font-size: 10px; color: #999999; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
.white                  {font-size: 10px; color: #ffffff; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
.orange                  {font-size: 10px; color: #ffffff; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
.pill                  {font-size: 16px; color: #6666FF; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
.pill2                  {font-size: 16px; color: #6666FF; font-family: Arial, Helvetica, sans-serif; font-weight: bold; line-height:100%; text-decoration: none; }
.gray                  {font-size: 12px; color: #6666FF; font-family: Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: normal; line-height:150%; text-decoration: none; }

a:link                  {font-size: 10px; color: #000000; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
a:visited            {font-size: 10px; color: #000000; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
a:active            {font-size: 10px; color: #000000; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
a:hover                  {font-size: 10px; color: #000000; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }

a.blue:link            {font-size: 10px; color: #0000FF; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
a.blue:visited      {font-size: 10px; color: #0000FF; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
a.blue:active      {font-size: 10px; color: #0000FF; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
a.blue:hover      {font-size: 10px; color: #0000FF; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }

a.white:link      {font-size: 11px; color: #ffffff; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
a.white:visited      {font-size: 11px; color: #ffffff; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
a.white:active      {font-size: 11px; color: #ffffff; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }
a.white:hover      {font-size: 11px; color: #ffffff; font-family: Tahoma, Verdana, Geneva, Arial, Helvetica, sans-serif; font-weight: bold; line-height:150%; text-decoration: none; }



/* ]]> */-->
</style>
<table border="0" width="780" cellpadding="0" cellspacing="0">
      <tr>
            <td width="62" background="/images/strip_01.gif" align="center"><a href="javascript:goto_link('goto_0');">HOME</a></td>
            <td width="1"><img src="/images/divider.gif" alt="" width="1" height="19" border="0"></td>
            <td width="89" background="/images/strip_01.gif" align="center"><a href="javascript:goto_link('goto_7');">ORDER STATUS</a></td>
            <td width="1"><img src="/images/divider.gif" alt="" width="1" height="19" border="0"></td>
            <td width="41" background="/images/strip_01.gif" align="center"><a href="javascript:goto_link('goto_4');">F.A.Q.</a></td>
            <td width="1"><img src="/images/divider.gif" alt="" width="1" height="19" border="0"></td>
            <td width="77" background="/images/strip_01.gif" align="center"><a href="javascript:goto_link('goto_5');">CONTACT US</a></td>
            <td width="45" background="/images/strip_01.gif"><img src="/images/diagonal_01.gif" alt="" width="45" height="19" border="0"></td>
            <td width="465" background="/images/strip_02.gif">&nbsp;</td>
      </tr>
      <tr valign="top">
            <td colspan="9" bgcolor="#949494"><img src="/images/blank.gif" alt="" width="1" height="1" border="0"></td>
      </tr>
      <tr valign="top">
            <td colspan="9"><img src="/images/header2.jpg" alt="" width="780" height="77" border="0"></td>
      </tr>
</table>
<table border="0" width="780" cellpadding="0" cellspacing="0">
      <tr valign="top">
            <td colspan="15" bgcolor="#949494"><img src="/images/blank.gif" alt="" width="1" height="1" border="0"></td>
      </tr>
      <tr bgcolor="#6666FF">
            <td width="86" align="center"><a href="javascript:cat_link('Weight Loss');" class="white">Weight Loss</a></td>
            <td width="1"><img src="/images/divider_2.gif" alt="" width="2" height="17" border="0"></td>
            <td width="102" align="center"><a href="javascript:cat_link('Allergies');" class="white">Allergy & Sinus</a></td>
            <td width="1"><img src="/images/divider_2.gif" alt="" width="2" height="17" border="0"></td>
            <td width="92" align="center"><a href="javascript:cat_link('Stomach');" class="white">Gastro Health</a></td>
            <td width="1"><img src="/images/divider_2.gif" alt="" width="2" height="17" border="0"></td>
            <td width="103" align="center"><a href="javascript:cat_link('Blood Pressure');" class="white">Blood Pressure</a></td>
            <td width="1"><img src="/images/divider_2.gif" alt="" width="2" height="17" border="0"></td>
            <td width="87" align="center"><a href="javascript:cat_link('Cholesterol');" class="white">Cholesterol</a></td>
            <td width="1"><img src="/images/divider_2.gif" alt="" width="2" height="17" border="0"></td>
            <td width="92" align="center"><a href="javascript:cat_link('Sexual Performance');" class="white">Sexual Health</a></td>
            <td width="1"><img src="/images/divider_2.gif" alt="" width="2" height="17" border="0"></td>
            <td width="103" align="center"><a href="javascript:cat_link('Diabetes');" class="white">Diabetes</a></td>
            <td width="1"><img src="/images/divider_2.gif" alt="" width="2" height="17" border="0"></td>
            <td width="101" align="center"><a href="javascript:cat_link('Depression');" class="white">Wellness Aids</a></td>
      </tr>
      <tr valign="top">
            <td colspan="15" bgcolor="#949494"><img src="/images/blank.gif" alt="" width="1" height="1" border="0"></td>
      </tr>
</table>
<table border="0" width="780" cellpadding="0" cellspacing="0">
      <tr valign="top">
            <td width="168" background="/images/strip_03.gif">
            
<br><br>

            <table width="168"  border="0" align="center" cellpadding="0" cellspacing="1" class="popular">

                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Weight Loss </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Adipex');" >Adipex</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Bontril (generic)');" >Bontril (generic)</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Didrex');" >Didrex</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Diethylpropion');" >Diethylpropion</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Ionamin(Fastin)');" >Ionamin(Fastin)</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Meridia');" >Meridia</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Phentermine');" >Phentermine</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Tenuate');" >Tenuate</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Xenical');" >Xenical</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Sexual Performance </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Cialis');" >Cialis</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Levitra');" >Levitra</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Viagra');" >Viagra</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Pain Relief </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Celebrex');" >Celebrex</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Fioricet');" >Fioricet</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Hydrocodone');" >Hydrocodone</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Norco (generic)');" >Norco (generic)</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Tramadol');" >Tramadol</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Ultram');" >Ultram</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Vicodin (generic)');" >Vicodin (generic)</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Zebutal');" >Zebutal</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Sleep Disorders </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Ambien');" >Ambien</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Muscle Relaxant </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Cyclobenzaprine');" >Cyclobenzaprine</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Flexeril');" >Flexeril</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Generic Soma');" >Generic Soma</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Soma');" >Soma</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Valium');" >Valium</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Zanaflex');" >Zanaflex</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Anxiety </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Alprazolam');" >Alprazolam</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Diazepam');" >Diazepam</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Xanax');" >Xanax</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Depression </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Buspirone');" >Buspirone</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Celexa');" >Celexa</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Effexor XR');" >Effexor XR</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Fluoxetine');" >Fluoxetine</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Paxil');" >Paxil</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Prozac');" >Prozac</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Wellbutrin');" >Wellbutrin</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Zoloft');" >Zoloft</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Smoking </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Zyban');" >Zyban</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Hair Loss </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Propecia');" >Propecia</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Allergies </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Zyrtec');" >Zyrtec</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Enhancers </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('AndroGel');" >AndroGel</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Oxandrin');" >Oxandrin</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Saizen 15IU');" >Saizen 15IU</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Antibiotic </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Cipro');" >Cipro</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Herpetic </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Acyclovir');" >Acyclovir</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Valtrex');" >Valtrex</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Skin Care </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Renova');" >Renova</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Vaniqa 13.9%');" >Vaniqa 13.9%</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Blood Pressure </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Adalat');" >Adalat</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Furosemide');" >Furosemide</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Cholesterol </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Lipitor');" >Lipitor</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Zocor');" >Zocor</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Birth Control </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Ortho Tri-cyclen');" >Ortho Tri-cyclen</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Diabetes </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Glucophage XR');" >Glucophage XR</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Migraine Headaches </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Imitrex');" >Imitrex</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Seizures </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Neurontin');" >Neurontin</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Stomach </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Nexium');" >Nexium</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Prilosec');" >Prilosec</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Zantac');" >Zantac</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
 
                    <tr>
                            <td colspan="3" bgcolor="#6666FF" class="orange"> Thyroid Hormone </td>
                          </tr>
            
            
                      <tr>
                            <td bgcolor=""> &rsaquo; </td>
                            <td bgcolor=""> <a href="javascript:submit_link('Synthroid');" >Synthroid</a> </td>
                            <td bgcolor=""> </td>
                          </tr>
 
                          </table>
           


            </td>
            <td width="1"><img src="/images/blank.gif" alt="" width="1" height="1" border="0"></td>
            <td width="611">
<!--  MAIN MIDDLE AREA BEGIN -->

<table border="0" width="100%" cellpadding="5" cellspacing="0">
      <tr>
            <td width="223">&nbsp;</td>
            <td width="204">&nbsp;</td>
            <td width="173">&nbsp;</td>
      </tr>
      <tr>
            <td colspan="2"><img src="/images/image_01.gif" alt="" width="347" height="54" border="0"></td>
            <td>&nbsp;</td>
      </tr>
      <tr>
            <td rowspan="2"><!-- pill one -->
                  <table border="0" width="100%" cellpadding="0" cellspacing="0">
                        <tr valign="top">
                              <td width="9"><img src="/images/left_table.gif" alt="" width="9" height="73" border="0"></td>
                              <td width="190" background="images/strip_04.gif">
                                    <table border="0" width="100%" cellpadding="0" cellspacing="0">
                                          <tr>
                                                <td align="center" class="white" colspan="2">Weight Loss</td>
                                          </tr>
                                          <tr>
                                                <td rowspan="2"><br><A title="Phentermine" href="javascript:submit_link('Phentermine');"><img src="/images/lowas_89.gif" alt="" width="58" height="42" border="0"></a></td>
                                                <td class="pill">Phentermine</td>
                                          </tr>
                                          <tr>
                                                <td align="center"><A title="Phentermine" href="javascript:submit_link('Phentermine');"><img src="/images/pill_phentermine.jpg" alt="" width="60" height="30" border="0"></a></td>
                                          </tr>
                                    </table>
                              </td>
                              <td width="9"><img src="/images/right_table.gif" alt="" width="9" height="73" border="0"></td>
                        </tr>
                  </table><br>
                  <!-- pill two -->
                  <table border="0" width="100%" cellpadding="0" cellspacing="0">
                        <tr valign="top">
                              <td width="9"><img src="/images/left_table.gif" alt="" width="9" height="73" border="0"></td>
                              <td width="190" background="images/strip_04.gif">
                                    <table border="0" width="100%" cellpadding="0" cellspacing="0">
                                          <tr>
                                                <td align="center" class="white" colspan="2">Sexual Performance</td>
                                          </tr>
                                          <tr>
                                                <td rowspan="2"><br><A title="Viagra" href="javascript:submit_link('Viagra');"><img src="/images/lowas_89.gif" alt="" width="58" height="42" border="0"></a></td>
                                                <td class="pill">&nbsp;Viagra</td>
                                          </tr>
                                          <tr>
                                                <td>&nbsp;&nbsp;&nbsp;&nbsp;<A title="Viagra" href="javascript:submit_link('Viagra');"><img src="/images/pill_viagra.jpg" alt="" width="38" height="30" border="0"></a></td>
                                          </tr>
                                    </table>
                              </td>
                              <td width="9"><img src="/images/right_table.gif" alt="" width="9" height="73" border="0"></td>
                        </tr>
                  </table><br>
                  <!-- pill three -->
                  <table border="0" width="100%" cellpadding="0" cellspacing="0">
                        <tr valign="top">
                              <td width="9"><img src="/images/left_table.gif" alt="" width="9" height="73" border="0"></td>
                              <td width="190" background="images/strip_04.gif">
                                    <table border="0" width="100%" cellpadding="0" cellspacing="0">
                                          <tr>
                                                <td align="center" class="white" colspan="2">Muscle Relaxant</td>
                                          </tr>
                                          <tr>
                                                <td rowspan="2"><br><A title="Soma" href="javascript:submit_link('Generic Soma');"><img src="/images/lowas_59.gif" alt="" width="58" height="42" border="0"></a></td>
                                                <td class="pill">&nbsp;Soma</td>
                                          </tr>
                                          <tr>
                                                <td>&nbsp;&nbsp;&nbsp;<A title="Soma" href="javascript:submit_link('Generic Soma');"><img src="/images/pill_soma.jpg" alt="" width="38" height="30" border="0"></a></td>
                                          </tr>
                                    </table>
                              </td>
                              <td width="9"><img src="/images/right_table.gif" alt="" width="9" height="73" border="0"></td>
                        </tr>
                  </table><br>
                  <!-- pill four -->
                  <table border="0" width="100%" cellpadding="0" cellspacing="0">
                        <tr valign="top">
                              <td width="9"><img src="/images/left_table.gif" alt="" width="9" height="73" border="0"></td>
                              <td width="190" background="images/strip_04.gif">
                                    <table border="0" width="100%" cellpadding="0" cellspacing="0">
                                          <tr>
                                                <td align="center" class="white" colspan="2">Sleep Disorders</td>
                                          </tr>
                                          <tr>
                                                <td rowspan="2"><br><A title="Ambien" href="javascript:submit_link('Ambien');"><img src="/images/lowas_169.gif" alt="" width="58" height="42" border="0"></a></td>
                                                <td class="pill">&nbsp;Ambien</td>
                                          </tr>
                                          <tr>
                                                <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<A title="Ambien" href="javascript:submit_link('Ambien');"><img src="/images/pill_ambien.jpg" alt="" width="55" height="28" border="0"></a></td>
                                          </tr>
                                    </table>
                              </td>
                              <td width="9"><img src="/images/right_table.gif" alt="" width="9" height="73" border="0"></td>
                        </tr>
                  </table><br>


            
            </td>
            <td><img src="/images/bottles.gif" alt="" width="184" height="98" border="0"></td>
            <td><img src="/images/pills.jpg" alt="" width="113" height="105" border="0"></td>
      </tr>
      <tr>
            <td colspan="2" class="gray">
            
<div class="pill2">
No Appointments.<br>
No Waiting Rooms.<br>
No Prior Prescription Required.
</div>
<br>
After you submit your order, one of our licensed physicians will review your request and issue a prescription for your medication. Next, our Licensed Pharmacy will ship your order discreetly. This is the most convenient and least costly way to order prescription medications.
<br><br>
We offer a selection of over 150 prescription drugs such as Viagra and Levitra, plus discreet delivery direct to your home or office.            
<br>&nbsp;
            </td>
      </tr>
</table>
<center>
<table><tr><td><a href="/cgi-bin/unsubscribe.pl" target="_blank"><font color="blue"><u>Email Unsubscibe Link</u></font></a></td></tr></table>
</center>


            </td>
      </tr>
</table>
<table border="0" width="780" cellpadding="0" cellspacing="0">
      <tr valign="top">
            <td bgcolor="#949494"><img src="/images/blank.gif" alt="" width="1" height="1" border="0"></td>
      </tr>
      <tr bgcolor="#9999FF">
            <td>&nbsp;</td>
      </tr>
      <tr valign="top">
            <td colspan="15" bgcolor="#949494"><img src="/images/blank.gif" alt="" width="1" height="1" border="0"></td>
      </tr>
</table>
<input type="hidden" name="billing_lname" value="" /><input type="hidden" name="phone_phone4" value="" /><input type="hidden" name="billing_address1" value="" /><input type="hidden" name="dob_day" value="" /><input type="hidden" name="fname" value="" /><input type="hidden" name="billing_zip" value="" /><input type="hidden" name="state" value="" /><input type="hidden" name="patient_responsibility" value="" /><input type="hidden" name="card_month" value="" /><input type="hidden" name="dob_year" value="" /><input type="hidden" name="city" value="" /><input type="hidden" name="phone_nxx" value="" /><input type="hidden" name="billing_phone_phone4" value="" /><input type="hidden" name="gender" value="" /><input type="hidden" name="patient_privacy" value="" /><input type="hidden" name="billing_fname" value="" /><input type="hidden" name="patient_consent" value="" /><input type="hidden" name="card_num" value="" /><input type="hidden" name="billing_phone_nxx" value="" /><input type="hidden" name="billing_state" value="" /><input type="hidden" name="address2" value="" /><input type="hidden" name="card_type" value="" /><input type="hidden" name="billing_same" value="" /><input type="hidden" name="card_year" value="" /><input type="hidden" name="card_ccv2" value="" /><input type="hidden" name="billing_city" value="" /><input type="hidden" name="zip" value="" /><input type="hidden" name="lname" value="" /><input type="hidden" name="phone_ac" value="" /><input type="hidden" name="billing_phone_ac" value="" /><input type="hidden" name="address1" value="" /><input type="hidden" name="dob_month" value="" /><input type="hidden" name="page" value="0" /><input type="hidden" name="drug_select" value="" /><input type="hidden" name="cat_select" value="" /><input type="hidden" name="goto_field" value="" /><input type="hidden" name="buy_field" value="" /><input type="hidden" name="referrer_id" value="website" /><input type="hidden" name="session_id" value="20041109225040788087458190" /><input type="hidden" name="aff_id" value="2243" /><input type="hidden" name="ipaddress" value="61.11.75.84" /><input type="hidden" name="product_id" value="" /><div></div></form></body></html>
0
 
CharlyPhillyCommented:
Apparently there is a script being run on your system. You are not the only person with this problem. It has something to do with javascript. I need you to search your registry and computer (even system & hidden files) for "theForm" with any extension. it should come up as xml, xmls, xhtml, etc...Also, i need you to try to go to 216.74.167.162. That is the ip for the giant company. If you can get to the site then that means your only being redirected by name. you could also do a google search and look for an anonymizer site and try to get to giant that way if using the ip address doesn't work. I will try to figure out the source of your problem.
0
 
Viji4uAuthor Commented:
Hi Charly

Thanks lot for your help.

Now the problem is solved  by  "GIANT AntiSpyware".
once again thanks lot
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

  • 9
  • 5
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now