view.atdmt.com

[PhilliePhan]

I could not find 8d7*.sys in c:\windows\system32

Drat! My fault there - doing 10 things at once and I did not mention that this file is hidden. You'll need to Enable the Viewing of Hidden Files to see it.
It is likely a driver that has been on the machine for some time - could very well be legit.

When I tried to block view.atdmt.com in IE it only accepted view.atdmt and atdmt.com; thus, on Facebook it still attempts to redirect to view.atdmt.com.
Also, I added view.atdmt.com 127.0.0.1 to the HOSTs file.
Any other ideas?

I am not sure - you would probably have better luck exploring this with Google.

I looked in Silj's MVP Hosts File and found a few additional entries you might try. Note that a couple have been disabled due to interference with legit stuff like Hotmail. I probably missed a few...

127.0.0.1 cts.channelintelligence.com #[switch.atdmt.com]
127.0.0.1 click.atdmt.com #[McAfee.Cookie-Atdmt]
# 127.0.0.1 clk.atdmt.com #[disabled affects MS downloads]
127.0.0.1 image.atdmt.com
127.0.0.1 mir.atdmt.com #[p.mii.instacontent.net]
127.0.0.1 nc.atdmt.com #[EventTracking]
127.0.0.1 rmd.atdmt.com #[a898.x.akamai.net]
127.0.0.1 spd.atdmt.com #[a796.x.akamai.net]
127.0.0.1 spe.atdmt.com
127.0.0.1 srch.atdmt.com
# 127.0.0.1 switch.atdmt.com #[disabled affects Hotmail signup]
127.0.0.1 view.atdmt.com #[eTrust.Tracking.Cookie]
127.0.0.1 www.atdmt.com #[AveA Action Tag][Ewido.TrackingCookie.Atdmt]
127.0.0.1 atlasdmt.com #[Panda.Spyware:Cookie/Atlas DMT]
127.0.0.1 www.atlasdmt.com
127.0.0.1 spd.atdmt.speedera.net

-- Perhaps show her how to customize and use Firefox? I find that with a few add-ons such as NoScript and the like, I run into few annoyances such as this

-- Is there a support forum on Facebook (I do not use it)? I know that on my Fantasy Baseball site, when they have annoying or malicious ads, people are quick to complain to customer service and that usually does the trick....

-- Does this thing really hijack her browser and redirect it? Or does it just pop a fresh window? Can you get a screenshot? (don't know if that would help or not, but I'm kinda interested in seeing this in action.)

Maybe Judy or TL or somebody else may have a better idea than I - I am not as up-to-date on the baddies as I used to be....

PP