Hijack to buydomains.com?

[George]

Hello,

When I type an invalid URL on my browser, I'll get redirected to
www.buydomains.com. I ran the lastest version of Ad-aware and deleted all
the spywares and restarted my PC, the buydomains.com hijack problem still
exists.

Are there other ways to get rid of this problem?

Thanks for your help.

George.

 

[Frank Saunders, MS-MVP]

First eliminate any scumware.
See
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated before every use, even when just
downloaded. There's also a lot more to do than just those two programs.
CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.
If trying everything at that site does not fix the problem please post back
in the same thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[julianbarry \(remove this\)]

Same problem and system restore won't work to reset
default settings. Please let me know if you get a
solution.

 

[George]

I tried all the software mentioned: spybot, ad-aware and CWShredder. I also
downloaded the lastest update before I ran these programs. I removed all
the possible spyware suggested by these software. I also ran the
Hijackthis program and posted the log to the Aumha Forums. I haven't heard
anything back from Aumha Forums yet.

Thanks for pointing out all the different resources for me to try. I'll
keep trying.

George.

 

[Guest]

Download Hijack This http://www.majorgeeks.com/downloads31.htm

Please’ post your Hijack This Logs, in any of the following “Expert Forumsâ€
http://forums.tomcoyote.org/index.php?showforum=2
http://forums.net-integration.net/index.php?s=853f186bf90302d57a6840f00475ff6b&showforum=3
http://forums.spywareinfo.com/index.php?s=1413794b9fe306155560c99576acc3a8&showforum=1
http://www.lavasoftsupport.com/index.php?s=c0d583c0e136d2133506ec492cb6bd40&showforum=4
http://www.cybertechhelp.com/forums/forumdisplay.php?f=1
http://boards.cexx.org/viewforum.php?f=1&sid=0b5c7c42dc70e12ffe32f4a0807ff6a
http://www.dslreports.com/forum/security,


----- julianbarry (remove this) @ntlworld .com wrote: ----

Same problem and system restore won't work to reset
default settings. Please let me know if you get a
solution

 

[Frank Saunders, MS-MVP]

There was at least one answer:

One possible culprit that stands out to me:
O2 - BHO: (no name) - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} -
C:\WINNT\System32\nzdd.dll

http://editor.actrix.co.nz/byarticle/spyw.htm
_________________
James M. Fisher
MS-MVP Windows Shell/User


--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Martin C]

Considering all the other things you have tried without result, you could
try the following, but I am not sure it will really help you.

Get this file:

http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG
After downloading it, right click it and choose Merge.

Hope this helps.

Martin

 

[Guest]

Have you tried searching your registry for 'buydomains'. I'd expect that a setting in there has been changed that could easily be modified.