[cd34]

This is just incredible.

Not only was the client's home machine hacked, their passwords discovered, etc, but, the hackers found the foresight to install a proxy server on his machine and named it mcafeeav.exe -- so, when the firewall alert popped up to ask whether the client wanted to allow that application remote access, he said yes.

At that point, the hackers used the proxy on his machine to access his server -- making it almost impossible to see which were valid updates to his site and which were not.

Oh how much fun... not!