Can't tell what this one did. It removed "View" from the browser menu bar (IE 7) so I couldn't ask to view source.
And from the same folks that brought you that one there was
which I did not click, having wasted half a day already undoing the first and warning everyone else on two Yahoo groups to avoid them. I also set my firewall (Sygate) to block 220.127.116.11 - 18.104.22.168 hereafter.
If anyone knows what damage the first one accomplished between acquisition and removal, please reply. Especially if you think there are additional steps I should be taking, e.g., changing dozens of passwords, etc.