> I just built a new HTTrack (v3.01) project from 
scratch  
> and mirrored a site which requires basic 
> authentication.
> In the *** HTTrack generated *** HTML files there 
are 
> definitely external URLs containing the 
> username:password from the original project URL...

Darn - in what form? Are they URLs or comments in the 
HTML code?