Yea this happened to me as well although not with the same site. The registry can be a crual mistress when working against you. Search the registry and delete all the lop.com things and you should be fine. Also something to look for if you have NT look and see if there is a webpage in your IIS that could be loading as your default webpage for either your homepage or your 127.0.1.1. When I got the nimda virus there was for a few days a webpage in my IIS telling me that China sucked. Probly wont be anything there but worth a look.