Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unwanted page site keeps loading


  • This topic is locked This topic is locked
21 replies to this topic

#1 TGMcCallie

TGMcCallie

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Georgia - USA
  • Local time:06:50 AM

Posted 24 April 2017 - 11:28 AM

When I search for an item on e.bay.com I get the following website:  https://pages.ebay.com_default/226.html.

 

I have to close that tab and then the wanted site opens.

 

This has just happened about  2 days ago and it only happens on ebay.com.  The page that wants to open is pages.ebay.com

 

Need help in solving this.

 

I have Kasperesky internet security and Malwarebytes software and have run scans on both products with no results.

 

Thanks

 

Windows 10

XPS 8920 Dell computer Brand new



BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,261 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:05:50 AM

Posted 24 April 2017 - 06:42 PM

Which browser(s) is that happening in? Doing a search using that link shows one user having the same problem. Is that your post in

a Ebay Forum?

 

Use the programs below to clean, remove adware and remove malware.

 

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download

 

Download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message

download Zemana AntiMalware and install it

  • Run the application
  • Click "Next" and then Scan
  • When the scan has finished click Next to remove any threats.
  • Click the bars in the top right corner to display the logs, double click your log
  • copy and paste the log into your reply

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 TGMcCallie

TGMcCallie
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Georgia - USA
  • Local time:06:50 AM

Posted 24 April 2017 - 11:30 PM

I have ccleaner pro lifetime key and run it after every browser closure.

 

I have Kaspersky Internet Security

 

I have Malwarebytes Pro lifetime key and run it all the time.

888888888888888888888888888888888888888888888888888888888888888888888888888888

 

Adw Cleaner found no threats.

 

 

Zemana AntiMalware 2.72.179.388 (Installed)
-------------------------------------------------------
Scan Result            : Completed
Scan Date              : 2017/4/25
Operating System       : Windows 10 64-bit
Processor              : 8X Intel® Core™ i7-7700 CPU @ 3.60GHz
BIOS Mode              : UEFI
CUID                   : 1283EB6430A6E422D19D9B
Scan Type              : System Scan
Duration               : 0m 34s
Scanned Objects        : 54538
Detected Objects       : 2
Excluded Objects       : 0
Read Level             : SCSI
Auto Upload            : Enabled
Detect All Extensions  : Disabled
Scan Documents         : Disabled
Domain Info            : WORKGROUP,0,2
Detected Objects
-------------------------------------------------------
Internet Explorer Homepage
Status             : Scanned
Object             : http://www.cbsnews.com/
MD5                : -
Publisher          : -
Size               : -
Version            : -
Detection          : Suspicious Browser Setting
Cleaning Action    : Repair
Related Objects    :
                Browser Setting - Internet Explorer Homepage
Hosts File
Status             : Scanned
Object             : %systemroot%\system32\drivers\etc\hosts
MD5                : AE6DB773F0B7BCE261EEACD93CE70C6C
Publisher          : -
Size               : 3062
Version            : -
Detection          : Hosts Hijack
Cleaning Action    : Repair
Related Objects    :
                Hosts file - 127.0.0.1 - -p
                File - %systemroot%\system32\drivers\etc\hosts

Cleaning Result
-------------------------------------------------------
Cleaned               : 2
Reported as safe      : 0
Failed                : 0

 

 

_________________________________________________________________

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 10 Home x64
Ran by Tom (Administrator) on Tue 04/25/2017 at  0:03:08.76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

File System: 2
Successfully deleted: C:\Windows\system32\Tasks\PCDEventLauncherTask (Task)
Successfully deleted: C:\Windows\system32\Tasks\PCDoctorBackgroundMonitorTask (Task)
 
Registry: 1
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D62C52C7-4408-4FF8-BF8B-440C6DF1968D} (Registry Key)
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 04/25/2017 at  0:04:15.02
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

After doing this, I still have the unwanted  pop up page   www.pages.ebay.com


Edited by TGMcCallie, 24 April 2017 - 11:31 PM.


#4 buddy215

buddy215

  • Moderator
  • 13,261 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:05:50 AM

Posted 25 April 2017 - 05:53 AM

Replace your current HOSTS file with a tweaked one, as the MVPS Host file, that restricts access to known bad sites improving your security.
It basically prevents your computer from connecting to those sites by redirecting the attempted connections to 127.0.0.1, which is the IP of your local computer.

To do it:

  • Download hosts.zip and save it to your desktop
  • Right click the file you just downloaded on your desktop and select => Extract to "hosts\"
  • In the hosts folder on your desktop, double click on mvps.bat file to run the program
  • A prompt will appear, press any key to continue
  1. Reset IE settings to default:
  2. Close all Internet Explorer windows. Select the Tools button, and then select Internet options.
  3. Select the Advanced tab, and then select Reset.
  4. In the Reset Internet Explorer Settings dialog box, select Reset.
  5. When Internet Explorer finishes applying default settings, select Close, and then select OK. Restart your PC to apply changes.
  • Please download Security Check by glax24 and save the file to the Desktop
  • Run the tool by accepting all the Security prompts
  • when complete the tool will produce a log file C:\SecurityCheck\SecurityCheck.txt and also copy the contents to the Clipboard
  • Simply Paste the log to your reply

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 TGMcCallie

TGMcCallie
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Georgia - USA
  • Local time:06:50 AM

Posted 26 April 2017 - 11:14 PM

Buddy, this is a week old computer and I am reluctant in messing with the hosts file as I don't understand what might happen.  What does this do.

What does it change.  I have read somewhere that you can make a hosts file that blocks certain websites.  Is this one that blocks page.ebay.com or what?

 

If i back up the registry  before I replace the hosts file can I put it back like it was in case something fails.  I had rather have to be bothered with having to close one pop up in ebay rather than cause other problems with a new computer.

 

Thanks



#6 buddy215

buddy215

  • Moderator
  • 13,261 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:05:50 AM

Posted 27 April 2017 - 05:52 AM

Zemana removed Hosts Hijack. That is the reason I thought it best to replace the entire Host file. Doing that should have no effect on the computer. It

is not a heavy duty task to perform.

 

System Restore may not be turned on in Windows 10. It should be. You can read how to do that and why at.....How to turn on System Restore in Windows 10 to protect against bad updates | PCWorld

 

QUOTE A BIT:

The easiest way to get to System Protection is via the Cortana/search box on the task bar. Just type in “System Protection” and at the top of the pop-up panel you should see Create a restore point Control panel. Click that and the System Properties window appears.

As you can see, in my case the protection is already on. If yours isn’t, click Configure... and in the next window, select the radio button that says Turn on system protection.

The defaults under Disk Space Usage should be fine for most users, but if you’d like to change it just adjust the slider that says Max Usage. Now hit Apply, then OK, close the System Properties window, and you’re done. I suggest moving the slider to allow only one GB of storage.

 

You can forgo doing the Security Check if you prefer and do this instead:

 

 

Post the three lists mentioned below using CCleaner.

Open CCleaner and click on Tools. Choose Startups. On that page you will see a list of Windows Startups and at the top tabs for each browser and Scheduled Tasks.

At the bottom right of that page you will see a button when clicked will allow you to Copy and Paste the list of Windows Startups and Scheduled Tasks into your next

post. Please do that.

 

Open CCleaner and click on Tools. Choose Uninstall. On that page you will see a list of programs installed on your computer and at the bottom right of that page you

will see a button when clicked will allow you to Copy and Paste that list in your next post. Please do that.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#7 TGMcCallie

TGMcCallie
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Georgia - USA
  • Local time:06:50 AM

Posted 27 April 2017 - 08:48 AM

I can't post the two files.  Says my security setting will not let me paste. 
​Gave me a block to paste into but would not past   Said  control command V.   Did not work.

 

Advise



#8 TGMcCallie

TGMcCallie
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Georgia - USA
  • Local time:06:50 AM

Posted 27 April 2017 - 08:55 AM

Maybe this will work:

 

3D Builder Microsoft Corporation 4/19/2017  14.0.1031.0 All users
Acronis True Image Acronis 4/14/2017 385 MB 19.0.6581 All users
Adblock Plus Eyeo GmbH 4/15/2017  0.9.9.0 All users
Adobe Photoshop CS6 Adobe Systems Incorporated 4/15/2017 50.9 MB 13.0 All users
Adobe Reader XI (11.0.20) Adobe Systems Incorporated 4/15/2017 378 MB 11.0.20 All users
Alarms & Clock Microsoft Corporation 4/14/2017  10.1703.602.0 All users
AMD Install Manager Advanced Micro Devices, Inc. 3/3/2017 26.3 MB 9.0.000.4 All users
App Installer Microsoft Corporation 4/14/2017  1.0.10332.0 All users
Belarc Advisor 8.5c Belarc Inc. 4/25/2017 5.42 MB 8.5.3.0 All users
Calculator Microsoft Corporation 4/14/2017  10.1703.601.0 All users
Camera Microsoft Corporation 4/14/2017  2017.214.20.0 All users
Candy Crush Soda Saga king.com 4/14/2017  1.87.900.0 All users
CCleaner Piriform 4/25/2017 19.8 MB 5.29 All users
CloneBD Elaborate Bytes 4/16/2017 59.1 MB 1.0.6.8 All users
CloneCD SlySoft 4/16/2017 5.08 MB 5.3.2.1 All users
CyberLink Media Suite Essentials CYBERLINK CORPORATION. 4/15/2017  1.0.9.0 All users
CyberLink PowerDVD 15 CyberLink Corp. 4/16/2017 462 MB 15.0.3305.58 All users
Dell Customer Connect Dell Inc. 4/13/2017 17.0 MB 1.4.15.0 All users
Dell Data Vault  3/3/2017 24.3 MB  All users
Dell Digital Delivery Dell Products, LP 3/3/2017 3.97 MB 3.1.1117.0 All users
Dell Foundation Services Dell Inc. 4/13/2017 15.7 MB 3.4.16100.0 All users
Dell Help & Support Dell Inc. 4/13/2017 6.09 MB 2.4.18.0 All users
Dell Product Registration Dell Inc. 4/13/2017 15.1 MB 3.0.123.0 All users
Dell SupportAssist Dell 4/14/2017 107 MB 1.3.6855.72 All users
Dell SupportAssist Remediation Dell Inc. 4/14/2017 1.68 MB 2.0.2.1835 All users
Dell SupportAssistAgent Dell 4/19/2017 38.4 MB 1.4.1.8 All users
Dell System Detect Dell 4/16/2017  8.4.0.5 Tom
Dell Update Dell Inc. 3/3/2017 3.50 MB 1.9.7.0 All users
Dell Update - SupportAssist Update Plugin Dell Inc. 4/21/2017 4.33 MB 2.0.2.1840 All users
Dropbox 20 GB Dropbox, Inc. 4/13/2017 5.96 MB 4.1.2.0 All users
Epson Connect Printer Setup Seiko Epson Corporation 4/14/2017 16.7 MB 1.4.0 All users
Epson Customer Research Participation Seiko Epson Corporation 4/14/2017 6.78 MB 1.81.0000 All users
Epson E-Web Print SEIKO EPSON CORPORATION 4/15/2017 18.4 MB 1.23.0000 All users
Epson Event Manager Seiko Epson Corporation 4/14/2017 88.0 MB 3.10.0061 All users
Epson Print CD Seiko Epson Corporation 4/14/2017 227 MB 2.44.00 All users
EPSON Scan Seiko Epson Corporation 4/14/2017   All users
Epson Software Updater SEIKO EPSON CORPORATION 4/14/2017 19.8 MB 4.4.4 All users
EPSON XP-950 Series Printer Uninstall SEIKO EPSON Corporation 4/13/2017   All users
EpsonNet Print SEIKO EPSON Corporation 4/14/2017 24.4 MB 3.1.4.0 All users
Facebook Facebook Inc 4/14/2017  81.832.151.0 All users
Feedback Hub Microsoft Corporation 4/20/2017  1.1703.971.0 All users
Groove Music Microsoft Corporation 4/15/2017  10.17022.10301.0 All users
Intel® Management Engine Components Intel Corporation 3/3/2017  11.6.0.1036 All users
Intel® Processor Graphics Intel Corporation 3/3/2017  21.20.16.4550 All users
Intel® Rapid Storage Technology Intel Corporation 3/3/2017  15.2.2.1030 All users
Intel® Ready Mode Technology Intel Corporation 3/3/2017 24.9 MB 1.1.70.528 All users
Intel® Wireless Bluetooth® Intel Corporation 3/3/2017 17.7 MB 19.11.1639.0649 All users
Intel® PROSet/Wireless Software Intel Corporation 4/25/2017 229 MB 19.20.0 All users
Kaspersky Internet Security Kaspersky Lab 4/18/2017 97.5 MB 17.0.0.611 All users
Kaspersky Secure Connection Kaspersky Lab 4/14/2017 25.7 MB 17.0.0.611 All users
Mail and Calendar Microsoft Corporation 4/25/2017  17.8119.42377.0 All users
Malwarebytes version 3.0.6.1469 Malwarebytes 4/14/2017 127 MB 3.0.6.1469 All users
Maps Microsoft Corporation 4/14/2017  5.1703.762.0 All users
March of Empires Gameloft. 4/26/2017  2.4.0.9 All users
Messaging Microsoft Corporation 4/14/2017  3.19.1001.0 All users
Microsoft Office Professional Plus 2016 - en-us Microsoft Corporation 4/26/2017 1.09 GB 16.0.7967.2139 All users
Microsoft OneDrive Microsoft Corporation 4/14/2017 84.8 MB 17.3.6799.0327 Tom
Microsoft Solitaire Collection Microsoft Studios 4/15/2017  3.16.3302.0 All users
Microsoft Sticky Notes  4/15/2017   All users
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 3/3/2017 4.66 MB 8.0.61001 All users
Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Corporation 4/15/2017 13.6 MB 8.0.61000 All users
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 Microsoft Corporation 3/3/2017 1.44 MB 9.0.30729 All users
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 3/3/2017 1.39 MB 9.0.30729 All users
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Corporation 4/15/2017 1.38 MB 9.0.30729.4148 All users
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 4/18/2017 590 KB 9.0.30729.6161 All users
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 3/3/2017 1.16 MB 9.0.30729 All users
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 3/3/2017 2.87 MB 9.0.30729 All users
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 3/3/2017 2.86 MB 9.0.30729.4148 All users
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 4/18/2017 2.23 MB 9.0.30729.6161 All users
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 Microsoft Corporation 4/18/2017 17.8 MB 10.0.40219 All users
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 Microsoft Corporation 4/18/2017 16.4 MB 10.0.40219 All users
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 Microsoft Corporation 3/3/2017 20.5 MB 11.0.61030.0 All users
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Corporation 3/3/2017 17.3 MB 11.0.61030.0 All users
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 Microsoft Corporation 3/3/2017 20.5 MB 12.0.30501.0 All users
Minecraft: Windows 10 Edition Microsoft Studios 4/20/2017  1.0.700.0 All users
Movies & TV Microsoft Corporation 4/15/2017  10.17022.10311.0 All users
Netflix Netflix, Inc. 4/26/2017  6.21.109.0 All users
NewBlue Video Essentials for Windows NewBlue 3/3/2017  3.0 All users
News Microsoft Corporation 4/21/2017  4.20.1102.0 All users
OneNote Microsoft Corporation 4/18/2017  17.8067.57631.0 All users
Paid Wi-Fi & Cellular Microsoft Corporation 4/14/2017  1.1607.6.0 All users
People Microsoft Corporation 4/14/2017  10.2.831.0 All users
Photos Microsoft Corporation 4/14/2017  17.313.10010.0 All users
PowerChute Personal Edition 3.0.2 Schneider Electric 4/16/2017 163 MB 3.0.2 All users
proDAD Adorage 3.0 proDAD GmbH 3/3/2017 3.50 MB 3.0.114.1 All users
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 3/3/2017 12.1 MB 6.0.1.7968 All users
Samsung_MonSetup Samsung 4/15/2017 4.87 MB 1.00.0000 All users
Skype Skype 4/26/2017  11.14.662.0 All users
Sling TV Sling TV LLC 4/26/2017  1.4.23.0 All users
Store Microsoft Corporation 4/15/2017  11701.1001.99.0 All users
Store Purchase App Microsoft Corporation 4/15/2017  11608.1000.2431.0 All users
Tips Microsoft Corporation 4/14/2017  5.0.13.0 All users
Twitter Twitter Inc. 4/14/2017  5.6.1.0 All users
UnderCover10 2.03 Wicked & Wild Inc. 4/16/2017 5.00 MB  All users
Voice Recorder Microsoft Corporation 4/24/2017  10.1704.952.0 All users
Vulkan Run Time Libraries 1.0.26.0 LunarG, Inc. 3/3/2017 1.66 MB 1.0.26.0 All users
Weather Microsoft Corporation 4/21/2017  4.20.1102.0 All users
WinRAR 5.21 (64-bit) win.rar GmbH 4/14/2017 4.93 MB 5.21.0 All users
Xbox Microsoft Corporation 4/14/2017  27.28.8007.0 All users
Xbox Identity Provider Microsoft Corporation 4/15/2017  11.19.19003.0 All users
Zemana AntiMalware Zemana Ltd. 4/25/2017 16.4 MB 2.72.0.388 All users
 

******************

 

Yes HKCU:Run AdobeBridge  Tom 
Yes HKCU:Run CCleaner Monitoring Piriform Ltd Tom "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Yes HKCU:Run OneDrive Microsoft Corporation Tom "C:\Users\Tom\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
Yes HKLM:Run Acronis Scheduler2 Service Acronis International GmbH All users "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
Yes HKLM:Run AcronisTibMounterMonitor Acronis International GmbH All users C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
Yes HKLM:Run AdobeAAMUpdater-1.0 Adobe Systems Incorporated All users "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
Yes HKLM:Run AdobeCS6ServiceManager Adobe Systems Incorporated All users "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
Yes HKLM:Run CloneCDTray SlySoft, Inc. All users "C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s
Yes HKLM:Run Display Schneider Electric All users C:\Program Files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe
Yes HKLM:Run EEventManager SEIKO EPSON CORPORATION All users "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
Yes HKLM:Run IAStorIcon Intel Corporation All users "C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60
Yes HKLM:Run Malwarebytes TrayApp Malwarebytes All users C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe
Yes HKLM:Run PowerDVD15Agent CyberLink Corp. All users "C:\Program Files (x86)\CyberLink\PowerDVD15\PowerDVD15Agent.exe"
Yes HKLM:Run RTHDVCPL Realtek Semiconductor All users "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
Yes HKLM:Run StartCN Advanced Micro Devices, Inc. All users "c:\Program Files\AMD\CNext\CNext\RadeonSettings.exe" atlogon
Yes HKLM:Run SwitchBoard Adobe Systems Incorporated All users C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
Yes HKLM:Run TrueImageMonitor.exe Acronis International GmbH All users C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
Yes HKLM:Run WavesSvc Waves Audio Ltd. All users "C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe" -Jack
Yes HKLM:Run ZAM Copyright 2017. All users "C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe" /minimized
Yes Startup Common APC UPS Status.lnk Schneider Electric All users C:\Program Files (x86)\APC\PowerChute Personal Edition\Display.exe
Yes Startup User Send to OneNote.lnk Microsoft Corporation Tom C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
 

 

I just did it the old fashioned way.   If you need something else let me know.

 

I do have system restore enabled and when I delete something it sets a restore point.



#9 buddy215

buddy215

  • Moderator
  • 13,261 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:05:50 AM

Posted 27 April 2017 - 09:33 AM

I don't see the list of Scheduled Tasks...

 

Uninstall Candy Crush Soda Saga king.com 4/14/2017  1.87.900.0 All users

 

Disable these Windows Startups: Use CCleaner by clicking on each item and choosing Disable on the right.

Yes HKCU:Run AdobeBridge  Tom 
Yes HKCU:Run CCleaner Monitoring Piriform Ltd Tom "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Yes HKCU:Run OneDrive Microsoft Corporation Tom "C:\Users\Tom\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background

Yes HKLM:Run AdobeAAMUpdater-1.0 Adobe Systems Incorporated All users "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
Yes HKLM:Run AdobeCS6ServiceManager Adobe Systems Incorporated All users "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
Yes HKLM:Run CloneCDTray SlySoft, Inc. All users "C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s

Yes HKLM:Run EEventManager SEIKO EPSON CORPORATION All users "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"

Yes HKLM:Run SwitchBoard Adobe Systems Incorporated All users C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

Yes HKLM:Run ZAM Copyright 2017. All users "C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe" /minimized

Yes Startup User Send to OneNote.lnk Microsoft Corporation Tom C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
 

If you only do manual backups/ create images using Acronis then I suggest you disable the Acronis Startup items, too.

If one or more of those items creates a big hassle being disabled for you....they can easily be reenabled using CCleaner...


Edited by buddy215, 27 April 2017 - 09:34 AM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#10 TGMcCallie

TGMcCallie
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Georgia - USA
  • Local time:06:50 AM

Posted 27 April 2017 - 12:30 PM

Still get the same pop up page.   What next?



#11 buddy215

buddy215

  • Moderator
  • 13,261 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:05:50 AM

Posted 27 April 2017 - 02:29 PM

I would like to see the list of scheduled Tasks as mentioned in instructions below.

 

Open CCleaner and click on Tools. Choose Startups. On that page you will see a list of Windows Startups and at the top tabs for each browser and Scheduled Tasks.

At the bottom right of that page you will see a button when clicked will allow you to Copy and Paste the list of Windows Startups and Scheduled Tasks into your next

post. Please do that.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#12 TGMcCallie

TGMcCallie
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Georgia - USA
  • Local time:06:50 AM

Posted 27 April 2017 - 02:43 PM

No HKCU:Run AdobeBridge  Tom 
No HKCU:Run CCleaner Monitoring Piriform Ltd Tom "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
No HKCU:Run OneDrive Microsoft Corporation Tom "C:\Users\Tom\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
Yes HKLM:Run Acronis Scheduler2 Service Acronis International GmbH All users "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
Yes HKLM:Run AcronisTibMounterMonitor Acronis International GmbH All users C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
No HKLM:Run AdobeAAMUpdater-1.0 Adobe Systems Incorporated All users "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
No HKLM:Run AdobeCS6ServiceManager Adobe Systems Incorporated All users "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
No HKLM:Run CloneCDTray SlySoft, Inc. All users "C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s
Yes HKLM:Run Display Schneider Electric All users C:\Program Files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe
No HKLM:Run EEventManager SEIKO EPSON CORPORATION All users "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
Yes HKLM:Run IAStorIcon Intel Corporation All users "C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60
Yes HKLM:Run Malwarebytes TrayApp Malwarebytes All users C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe
Yes HKLM:Run PowerDVD15Agent CyberLink Corp. All users "C:\Program Files (x86)\CyberLink\PowerDVD15\PowerDVD15Agent.exe"
Yes HKLM:Run RTHDVCPL Realtek Semiconductor All users "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
Yes HKLM:Run StartCN Advanced Micro Devices, Inc. All users "c:\Program Files\AMD\CNext\CNext\RadeonSettings.exe" atlogon
No HKLM:Run SwitchBoard Adobe Systems Incorporated All users C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
Yes HKLM:Run TrueImageMonitor.exe Acronis International GmbH All users C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
Yes HKLM:Run WavesSvc Waves Audio Ltd. All users "C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe" -Jack
Yes Startup Common APC UPS Status.lnk Schneider Electric All users C:\Program Files (x86)\APC\PowerChute Personal Edition\Display.exe
No Startup User Send to OneNote.lnk Microsoft Corporation Tom C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
 

********************************************************************************************************************************************************************************

Yes Task CCleanerSkipUAC Piriform Ltd Tom "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Yes Task Dell Cleanup  All users c:\windows\system32\oem\startmenufix.vbs
Yes Task DropboxUpdateTaskMachineCore Dropbox, Inc. All users C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
Yes Task DropboxUpdateTaskMachineUA Dropbox, Inc. All users C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
Yes Task EPSON XP-950 Series Invitation {395B359A-FD8B-4064-A443-69FEB01B3BB2} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{395B359A-FD8B-4064-A443-69FEB01B3BB2}" /F:"Invitation"
Yes Task EPSON XP-950 Series Invitation {8B33CFFB-6530-44A0-9072-8A142A67F99C} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{8B33CFFB-6530-44A0-9072-8A142A67F99C}" /F:"Invitation"
Yes Task EPSON XP-950 Series Invitation {8F2D16CF-48BF-41DD-A7B1-474266E82D76} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{8F2D16CF-48BF-41DD-A7B1-474266E82D76}" /F:"Invitation"
Yes Task EPSON XP-950 Series Update {395B359A-FD8B-4064-A443-69FEB01B3BB2} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{395B359A-FD8B-4064-A443-69FEB01B3BB2}" /F:"Update"
Yes Task EPSON XP-950 Series Update {8B33CFFB-6530-44A0-9072-8A142A67F99C} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{8B33CFFB-6530-44A0-9072-8A142A67F99C}" /F:"Update"
Yes Task EPSON XP-950 Series Update {8F2D16CF-48BF-41DD-A7B1-474266E82D76} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{8F2D16CF-48BF-41DD-A7B1-474266E82D76}" /F:"Update"
Yes Task IntelIOC-Upgrade-f1c8187b-2653-47cd-a9be-b554b98f68a7 Intel Corporation All users "C:\Program Files (x86)\Intel\Intel® Online Connect Access\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe" --automatic
Yes Task IntelIOC-Upgrade-f1c8187b-2653-47cd-a9be-b554b98f68a7-Logon Intel Corporation All users "C:\Program Files (x86)\Intel\Intel® Online Connect Access\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe" --automatic
Yes Task IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473  All users C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe --automatic
Yes Task OneDrive Standalone Update Task v2 Microsoft Corporation Tom %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
 



#13 buddy215

buddy215

  • Moderator
  • 13,261 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:05:50 AM

Posted 27 April 2017 - 03:36 PM

Disable these Tasks:

Yes Task Dell Cleanup  All users c:\windows\system32\oem\startmenufix.vbs
Yes Task DropboxUpdateTaskMachineCore Dropbox, Inc. All users C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
Yes Task DropboxUpdateTaskMachineUA Dropbox, Inc. All users C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
Yes Task EPSON XP-950 Series Invitation {395B359A-FD8B-4064-A443-69FEB01B3BB2} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{395B359A-FD8B-4064-A443-69FEB01B3BB2}" /F:"Invitation"
Yes Task EPSON XP-950 Series Invitation {8B33CFFB-6530-44A0-9072-8A142A67F99C} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{8B33CFFB-6530-44A0-9072-8A142A67F99C}" /F:"Invitation"
Yes Task EPSON XP-950 Series Invitation {8F2D16CF-48BF-41DD-A7B1-474266E82D76} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{8F2D16CF-48BF-41DD-A7B1-474266E82D76}" /F:"Invitation"
Yes Task EPSON XP-950 Series Update {395B359A-FD8B-4064-A443-69FEB01B3BB2} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{395B359A-FD8B-4064-A443-69FEB01B3BB2}" /F:"Update"
Yes Task EPSON XP-950 Series Update {8B33CFFB-6530-44A0-9072-8A142A67F99C} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{8B33CFFB-6530-44A0-9072-8A142A67F99C}" /F:"Update"
Yes Task EPSON XP-950 Series Update {8F2D16CF-48BF-41DD-A7B1-474266E82D76} SEIKO EPSON CORPORATION All users C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLIE.EXE /EXE:"{8F2D16CF-48BF-41DD-A7B1-474266E82D76}" /F:"Update"
Yes Task OneDrive Standalone Update Task v2 Microsoft Corporation Tom %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe

 

I don't expect those changes to remove the problem. Just shorten boot time and use less system resources.

 

If you click on this link...Electronics, Cars, Fashion, Collectibles, Coupons and More | eBay  does it take you straight to Ebay's home page?

Once on the home page and you enter a search there....do you get the misdirection?


Edited by buddy215, 27 April 2017 - 03:36 PM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#14 TGMcCallie

TGMcCallie
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Georgia - USA
  • Local time:06:50 AM

Posted 27 April 2017 - 04:16 PM

when I clickd on, electronics  went to electronics, cars went to care fashions went to fashions coupons did not.  EBay went straight to their page.

Then when I searched from that page sometimes I get pages.ebay.com

 

Is there anyway that I can block out pages.ebay.com maybe in host files.



#15 TGMcCallie

TGMcCallie
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NW Georgia - USA
  • Local time:06:50 AM

Posted 27 April 2017 - 04:33 PM

Must be just an edge problem.  I used internet explorer and went to ebay.com and made abnout 20 different searches and never got th3 page at all.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users