How to fix the "This domain is for sale" at google, yahoo, etc?

[jsteph]

Sometimes, when I go to Google.com a site comes up that says:

http://www.google.com

<-----This domain is for sale

It also happens with Yahoo, and other popular sites.

Sometimes it will do this for a day or so, and then go away. I have a home network, and when this happens, none of my kids' machines do this--they all go correctly to google, etc, so it's no my ISP or router, it's a machine specific thing.

What is it? Is it some sort of hijack/spyware thing? I have Mcafee Enterprise viruscan 8.0i, and Trend Micro antispyware with def's 3.41 (mar 29 2006). Neither catches this, both give a clean bill of health, even after full, unfiltered scans.

Once when I got this, I used Toolbarcop and just removed an Acrobat plugin, and the problem went away, but I think it was coincidence--I've had this several times since and toolbarcop shows only the barebones items, no plugins or bho's.
Thanks for any help,
--Jim

 

[erikhertzel]

Please post a Hijack This Log.

Download it here:

Do a scan and post it here.

Erik

 

[erikhertzel]

That should have been...

Download it here:

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

Sorry, forgot the url to post.

 

[jsteph]

I will do a hijackthis scan when the problem returns and post it here. The problem mysteriously went away again, but it will be back.

For the first time, however, Mcaffe did pick up the below warnings:

3/30/2006 6:22:56 AM Blocked by Buffer Overflow Protection PRA_NT\j_user C:\Program Files\Internet Explorer\IEXPLORE.EXE::bind bo:heap
3/30/2006 8:36:20 AM Blocked by Buffer Overflow Protection PRA_NT\j_user C:\Program Files\Internet Explorer\IEXPLORE.EXE::LoadLibraryA bo:heap

--Jim

 

[erikhertzel]

I would go ahead and post, and we will see about fixing the problem before it comes up again. Who knows what else may be going on?

Just my thoughts.

Regards.

 

[aquias]

Just to second Erik, because the problem corrected itself doesn't mean there still isn't an underlying problem.