Looks like Spyware companies have started doing their dirty work at the Winsock layer rather than at the application layer. The most notable company using this technique is ShopAtHome.com. I suspect other spyware companies will start doing the same. Thieves have the problem that other thieves are always stealing their ideas.
I've wondered how long it would take the thieves of the internet to make the leap from manipulating cookies to actually changing packets in transit.
I wish I knew which spyware removal program to recommend. The last time I recommended a program...it turned out that Spyware removal program was simply a host for more spyware. Spyware companies are always upset at the slimely tactics of the companies in the spyware business.