it may be considered browser hijacking really not sure. But “www.vx.55.com:8080/tms/click/index.jsp?189-Microsoft Internet Explorer.” takes over, loads.Also (189)changes.