natkejs - you're right, there's nothing there - but this trojan/virus or wtf it is, leads to free6.se - unfortunately for him, if it's not him, it does look like it (or someone has it in for him)
BTW, tried what he mentions still doesn't work
The other one from Helix - although I found an x.cab file, the computer didn't have the ied_s7m.cab
I finally got it to stop loading the page - although the popup still opens up. 6 hours & I'm fed up so he took the computer home but will bring it back
I'll actually try this Hijackthis when he gets back!