IE6 hijacked

[chuckrt]

About half the time when I click on the IE6 icon it tries to go to 66.96.132.
10. After several tries then it goes to my home page. I do not know where
this hijacking to http://66.96.132.10 comes from so cannot find a fix. Any
help appreciated.

[PA Bear [MS MVP]]

Does the domain bizland.com mean anything to you? What's your chosen home
page?
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Post by chuckrt
About half the time when I click on the IE6 icon it tries to go to 66.96.132.
10. After several tries then it goes to my home page. I do not know where
this hijacking to http://66.96.132.10 comes from so cannot find a fix.
Any
help appreciated.

[chuckrt via WindowsKB.com]

No, bizland.com means nothing to me. My current homepage is
www.platinum-editon.com but I have also used blank and still get this ip when
opening a new ie6.

Post by PA Bear [MS MVP]
Does the domain bizland.com mean anything to you? What's your chosen home
page?

Post by chuckrt
About half the time when I click on the IE6 icon it tries to go to 66.96.132.

[quoted text clipped - 3 lines]

Post by chuckrt
Any
help appreciated.

[PA Bear [MS MVP]]

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting the requested logs
in an appropriate forum.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~PA Bear
[posted directly to the MS newsserver via NNTP =>
news://msnews.microsoft.com/microsoft.public.windows.inetexplorer.ie6.browser

Post by chuckrt via WindowsKB.com
No, bizland.com means nothing to me. My current homepage is
www.platinum-editon.com but I have also used blank and still get this ip
when opening a new ie6.

Post by PA Bear [MS MVP]
Does the domain bizland.com mean anything to you? What's your chosen home
page?

Post by chuckrt
About half the time when I click on the IE6 icon it tries to go to 66.96.132.

[quoted text clipped - 3 lines]

Post by chuckrt
Any
help appreciated.

[chuckrt via WindowsKB.com]

Thanks for the links I will take this problem there.

Post by PA Bear [MS MVP]
Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315
Run a /thorough/ check for hijackware, including posting the requested logs
in an appropriate forum.
Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or other appropriate forums.**
If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

Post by chuckrt via WindowsKB.com
No, bizland.com means nothing to me. My current homepage is
www.platinum-editon.com but I have also used blank and still get this ip

[quoted text clipped - 8 lines]

Post by chuckrt via WindowsKB.com

Post by chuckrt
Any
help appreciated.

[RR]

66.96.132.10 = [ 10.132.96.66.static.eigbox.net ]
(Asked whois.arin.net:43 about +66.96.132.10)

OrgName: The Endurance International Group Inc.
OrgID: EIG-12
Address: 70 Blanchard Road
City: Burlington
StateProv: MA
PostalCode: 01803
Country: US
NetRange: 66.96.128.0 - 66.96.191.255
CIDR: 66.96.128.0/18
NetName: BIZLAND-FC01
NetHandle: NET-66-96-128-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.BIZLAND.COM
NameServer: NS2.BIZLAND.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2001-04-03
Updated: 2005-03-31
OrgTechHandle: KWI15-ARIN
OrgTechName: Witt Karl
OrgTechPhone: 1-781-852-3316
OrgTechEmail: ***@bizland-inc.com

10.132.96.66.static.eigbox.net = [ 66.96.132.10 ]

(Asked whois.tucows.com:43 about eigbox.net)

Registrant:
Domain Name Holding Company Inc
70 Blanchard Road
Burlington MA 01803
US
Domain name: EIGBOX.NET
Administrative Contact:
Support Domain ***@dnhco.com

70 Blanchard Road
Burlington MA 01803
US
1.7818523200
Technical Contact:
Support Domain ***@dnhco.com

70 Blanchard Road
Burlington MA 01803
US
1.7818523200
Registration Service Provider:
Domain Name Holding Company Inc. ***@yourhostingaccount.com

866-642-4678
Registrar of Record: TUCOWS INC.
Record last updated on 09-Oct-2008.
Record expires on 07-Nov-2009.
Record created on 07-Nov-2006.
Registrar Domain Name Help Center:
http://domainhelp.tucows.com
Domain servers in listed order:
CLICKME2.CLICK2SITE.COM
CLICKME.CLICK2SITE.COM

[chuckrt via WindowsKB.com]

I had searched for EIGBOX before but found no entries. I did find an entry
in Documents and settings....\Temporary internet files\content.ie5\w7pxg501
for tucows.gif and have deleted it. After deleting it I tried opening
another ie6 and got that address again.
My domain is with IPower-inc.com

Post by RR
66.96.132.10 = [ 10.132.96.66.static.eigbox.net ]
(Asked whois.arin.net:43 about +66.96.132.10)
OrgName: The Endurance International Group Inc.
OrgID: EIG-12
Address: 70 Blanchard Road
City: Burlington
StateProv: MA
PostalCode: 01803
Country: US
NetRange: 66.96.128.0 - 66.96.191.255
CIDR: 66.96.128.0/18
NetName: BIZLAND-FC01
NetHandle: NET-66-96-128-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.BIZLAND.COM
NameServer: NS2.BIZLAND.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2001-04-03
Updated: 2005-03-31
OrgTechHandle: KWI15-ARIN
OrgTechName: Witt Karl
OrgTechPhone: 1-781-852-3316
10.132.96.66.static.eigbox.net = [ 66.96.132.10 ]
(Asked whois.tucows.com:43 about eigbox.net)
Domain Name Holding Company Inc
70 Blanchard Road
Burlington MA 01803
US
Domain name: EIGBOX.NET
70 Blanchard Road
Burlington MA 01803
US
1.7818523200
70 Blanchard Road
Burlington MA 01803
US
1.7818523200
866-642-4678
Registrar of Record: TUCOWS INC.
Record last updated on 09-Oct-2008.
Record expires on 07-Nov-2009.
Record created on 07-Nov-2006.
http://domainhelp.tucows.com
CLICKME2.CLICK2SITE.COM
CLICKME.CLICK2SITE.COM