Yes, that was my first thought. However, when I check the squid logs it shows many/all users being served those iframed websites within pages that they requested. And since these are remote users, the various clients have nothing in common. > I'd suggest trying a spyware/antivirus program on your client, assuming > you are running a stock squid without content-alteration patches. > > Rob ____________________________________________________________________________________ Building a website is a piece of cake. Yahoo! Small Business gives you all the tools to get online. http://smallbusiness.yahoo.com/webhosting