Why does someone else's website open when using IE?

[Guest]

I've had a web site on the internet for many years. The address is:
www.glorybound.net For the past couple of years, whenever I type
"glorybound.net" in the URL bar while using Internet Explorer, a website
called "Plexxa.com" opens. This doesn't happen in any other browser except
Internet Explorer. It doesn't happen in Netscape, Opera, or Safari. Does
anyone know why? It seems that Plexxa has somehow used Microsoft Internet
Explorer to steal the use of my domain name.
Who is Plexxa anyway?

Kevin
(e-mail address removed)

 

[Vanguard]

in message

I've had a web site on the internet for many years. The address is:
www.glorybound.net For the past couple of years, whenever I type
"glorybound.net" in the URL bar while using Internet Explorer, a
website
called "Plexxa.com" opens. This doesn't happen in any other browser
except
Internet Explorer. It doesn't happen in Netscape, Opera, or Safari.
Does
anyone know why? It seems that Plexxa has somehow used Microsoft
Internet
Explorer to steal the use of my domain name.

You're infected. Use HijackThis to check what is hooked into the
browser.

Have you updated your anti-virus program and performed a full scan?

Have you tried running any anti-malware programs to test if you are
infected?

SuperAntispyware
Grisoft AVG Antispyware
Grisoft AVG Rootkit
Lavasoft Ad-Aware
Spybot S&D
Windows Defender

Who is Plexxa anyway?

Plexxa hides their domain registration behind GoDaddy's "Domains by
Proxy" service. Registrars require valid info when registering a domain
name and can terminate that registration if the information is false.
However, "Domains by Proxy" is a registered domain who then lets other
domains hide behind them. No one is to be trusted that hides like this
regardless of their attempts at claiming they need to hide to avoid
spam.

If you want to nail Plexxa.com for involving themselves in the
hijackware, report their abuse to their upstream provider. A traceroute
to www.plexxa.com shows their upstream provider is savvis.net.
Plexxa.com runs their own nameserver so there's no point in sending a
complaint there.

 

[Guest]

in message


You're infected. Use HijackThis to check what is hooked into the
browser.

Have you updated your anti-virus program and performed a full scan?

Have you tried running any anti-malware programs to test if you are
infected?

SuperAntispyware
Grisoft AVG Antispyware
Grisoft AVG Rootkit
Lavasoft Ad-Aware
Spybot S&D
Windows Defender


Plexxa hides their domain registration behind GoDaddy's "Domains by
Proxy" service. Registrars require valid info when registering a domain
name and can terminate that registration if the information is false.
However, "Domains by Proxy" is a registered domain who then lets other
domains hide behind them. No one is to be trusted that hides like this
regardless of their attempts at claiming they need to hide to avoid
spam.

If you want to nail Plexxa.com for involving themselves in the
hijackware, report their abuse to their upstream provider. A traceroute
to www.plexxa.com shows their upstream provider is savvis.net.
Plexxa.com runs their own nameserver so there's no point in sending a
complaint there.


Thank you for the help. We do run hijack this and other anti-virus/anti- * software. The information on Plexxa was most helpful.

 

[Guest]

I'm still having trouble with this. I've used a couple of the listed
programs to clean out my files. I've also contacted savvis.nett and
godaddy.com for help on this and yet it is still happening. Is there
anything else I can do? It is not right that someone can steal your domain
name through microsoft internet explorer.

 

[Vanguard]

in message

I'm still having trouble with this. I've used a couple of the listed
programs to clean out my files. I've also contacted savvis.nett and
godaddy.com for help on this and yet it is still happening. Is there
anything else I can do? It is not right that someone can steal your
domain
name through microsoft internet explorer.

www.glorybound.net opens just fine for me. No one stole your *leased*
domain (you never own it but only lease it; stop paying its renewal fee
and you'll see that you never owned it). The current domain
registration for glorybound.net is shown at
http://whois.dnsstuff.com/tools/whois.ch?ip=glorybound.net. If that's
you, you still are the registrant for that domain.

The problem is not that anyone took away your domain. The problem is
local to your computer which apparently has had the problem for years.

You never did answer the question of whether HijackThis actually showed
up a hijack of your browser, only that you have HijackThis. Also, try
using a differen browser than Internet Explorer, like Firefox or Opera.