Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Spyware redirects my search to a different site.


  • This topic is locked This topic is locked

#16
TGMcCallie

TGMcCallie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts

Will do.  


  • 0

Advertisements


#17
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
And if the problem still occurs can you try a different browser to see if it happens in that browser as well.
  • 0

#18
TGMcCallie

TGMcCallie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts

I think I found it.  It was down in my taskbar.  Here it is:

 

 

# AdwCleaner v6.046 - Logfile created 12/05/2017 at 23:42:39
# Updated on 24/04/2017 by Malwarebytes
# Database : 2017-05-12.1 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : Tom - DESKTOP-Q1AN705
# Running from : C:\Users\Tom\Desktop\adwcleaner_6.046.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support
 
***** [ Services ] *****
 
***** [ Folders ] *****
[-] Folder deleted: C:\ProgramData\51f91071-2c6c-4d65-a800-21d2b065d56f
[-] Folder deleted: C:\ProgramData\844166d9-115b-46d2-9d36-ae47babfe8ed

***** [ Files ] *****
 
***** [ DLL ] *****
 
***** [ WMI ] *****
 
***** [ Shortcuts ] *****
 
***** [ Scheduled Tasks ] *****
 
***** [ Registry ] *****
[-] Key deleted: HKU\S-1-5-21-794965033-3937228011-3467878875-1001\Software\APN PIP
[#] Key deleted on reboot: HKCU\Software\APN PIP
[#] Key deleted on reboot: [x64] HKCU\Software\APN PIP

***** [ Web browsers ] *****
 
*************************
:: "Tracing" keys deleted
:: Winsock settings cleared
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [1049 Bytes] - [25/04/2017 00:00:00]
C:\AdwCleaner\AdwCleaner[C2].txt - [1268 Bytes] - [27/04/2017 15:55:42]
C:\AdwCleaner\AdwCleaner[C3].txt - [1414 Bytes] - [27/04/2017 16:06:42]
C:\AdwCleaner\AdwCleaner[C4].txt - [1305 Bytes] - [12/05/2017 23:42:39]
C:\AdwCleaner\AdwCleaner[S0].txt - [1184 Bytes] - [24/04/2017 23:57:45]
C:\AdwCleaner\AdwCleaner[S1].txt - [1290 Bytes] - [25/04/2017 00:23:34]
C:\AdwCleaner\AdwCleaner[S2].txt - [1364 Bytes] - [26/04/2017 18:05:50]
C:\AdwCleaner\AdwCleaner[S3].txt - [1436 Bytes] - [27/04/2017 15:55:31]
C:\AdwCleaner\AdwCleaner[S4].txt - [1582 Bytes] - [27/04/2017 16:06:30]
C:\AdwCleaner\AdwCleaner[S5].txt - [1954 Bytes] - [12/05/2017 23:39:04]
########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [1816 Bytes] ##########

  • 0

#19
TGMcCallie

TGMcCallie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts

I think I found it.  It was down in my taskbar.  Here it is:

 

 

# AdwCleaner v6.046 - Logfile created 12/05/2017 at 23:42:39
# Updated on 24/04/2017 by Malwarebytes
# Database : 2017-05-12.1 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : Tom - DESKTOP-Q1AN705
# Running from : C:\Users\Tom\Desktop\adwcleaner_6.046.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support
 
***** [ Services ] *****
 
***** [ Folders ] *****
[-] Folder deleted: C:\ProgramData\51f91071-2c6c-4d65-a800-21d2b065d56f
[-] Folder deleted: C:\ProgramData\844166d9-115b-46d2-9d36-ae47babfe8ed

***** [ Files ] *****
 
***** [ DLL ] *****
 
***** [ WMI ] *****
 
***** [ Shortcuts ] *****
 
***** [ Scheduled Tasks ] *****
 
***** [ Registry ] *****
[-] Key deleted: HKU\S-1-5-21-794965033-3937228011-3467878875-1001\Software\APN PIP
[#] Key deleted on reboot: HKCU\Software\APN PIP
[#] Key deleted on reboot: [x64] HKCU\Software\APN PIP

***** [ Web browsers ] *****
 
*************************
:: "Tracing" keys deleted
:: Winsock settings cleared
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [1049 Bytes] - [25/04/2017 00:00:00]
C:\AdwCleaner\AdwCleaner[C2].txt - [1268 Bytes] - [27/04/2017 15:55:42]
C:\AdwCleaner\AdwCleaner[C3].txt - [1414 Bytes] - [27/04/2017 16:06:42]
C:\AdwCleaner\AdwCleaner[C4].txt - [1305 Bytes] - [12/05/2017 23:42:39]
C:\AdwCleaner\AdwCleaner[S0].txt - [1184 Bytes] - [24/04/2017 23:57:45]
C:\AdwCleaner\AdwCleaner[S1].txt - [1290 Bytes] - [25/04/2017 00:23:34]
C:\AdwCleaner\AdwCleaner[S2].txt - [1364 Bytes] - [26/04/2017 18:05:50]
C:\AdwCleaner\AdwCleaner[S3].txt - [1436 Bytes] - [27/04/2017 15:55:31]
C:\AdwCleaner\AdwCleaner[S4].txt - [1582 Bytes] - [27/04/2017 16:06:30]
C:\AdwCleaner\AdwCleaner[S5].txt - [1954 Bytes] - [12/05/2017 23:39:04]
########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [1816 Bytes] ##########

  • 0

#20
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
Thanks for that log.
  • 0

#21
TGMcCallie

TGMcCallie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts

Still does it in Edge.  I bring up e.bay.com and it opens fine.  I then type something in the search field and it does this number:  Gives this info:

Waiting for touch Kaspersky   and then it switches to pages.ebay.com.

 

I immediately click the red x and close it out without opening it.   Then the window goes to what I had actually searched for.  It does this on everything I search

for so I am constantly closing out and etc.

 

I tried IE browser and I searched for about 9 different things and it did not do any of the things I mentioned above.  It worked fine.   Wonder if it is something in Edge and

Kaspersky.   


Edited by TGMcCallie, 12 May 2017 - 10:25 PM.

  • 0

#22
TGMcCallie

TGMcCallie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts

Search for   touch.kaspersky.com   I did and it stated something about redirecting.


  • 0

#23
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
Hello,

Something to do with Kaspersky and edge, I'll have to research that one.
  • 0

#24
TGMcCallie

TGMcCallie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts

Ok, let me know when you come up with something.  I will call Kaspersky Monday to see if they have any idea.

Will get back in touch after I talk with them.  Will be busy today.

 

I don't seem to have this showing up anywhere else.  Before it did show up some times in IE and I will check that out closer by useing IE as ebay search

for a while.

 

Tom


  • 0

#25
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
Hello,

It could be one of these files,

BHO: Kaspersky Protection -> {0E2877D3-2641-4970-B794-A553E295428D} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 18.0.0\x64\IEExt\ie_plugin.dll [2017-04-29] (AO Kaspersky Lab)

Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 18.0.0\IEExt\ie_plugin.dll [2017-04-29] (AO Kaspersky Lab)


The first one BHO(Browser Helper Object) is a browser add on for Internet Explorer.
  • 0

Advertisements


#26
TGMcCallie

TGMcCallie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts

Do you think it would be a good idea to delete Kaspersky as I have it through my ISP and does not cost me anything.  I had vs 17 and don't think it had this problem.  Then I was updated to vs 1018.

 

Maybe if I completely deleted Kaspersky and then re-downloaded it then that would get rid of this problem.

 

If you don't think so, I will go over this with Kaspersky Lab Monday.

 

Maybe it would be worth a try as I also have Malwarebytes pro running on my computer that would protect me while Kaspersky was deleted.


Edited by TGMcCallie, 13 May 2017 - 12:09 PM.

  • 0

#27
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
Hello,

Yes go forward with that and we will see what happens.
  • 0

#28
TGMcCallie

TGMcCallie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts

zep56, I tried this procedure and it seems to tell me where the problem lies.

 

I exited Kaspersky Internet Securities and left Malwarebytes running.

 

I opened up Edge and went to www.ebay.com

 

It opened up fine.

 

I typed a search item in the search box and it went directly to the site I had searched for without diverting to page.ebay.com.

 

I then tried approx 20 searches one after another and it worked perfectly each time.

 

This prooves to me that the problem lies somewhere within Kaspersky so I will be contacting them Monday and put the problem directly in their lap.

 

I also tried searching with IE latest vs and never got the divert search either.

 

After that I reloaded Kaspersky Internet Security 2018 and with Edge browser the very first search I made went to the diverted pages site.  That proved to me to 

support the fact that it lies with Kaspersky.

 

Will be getting back with you when I get through with Kaspersky.

 

Thanx

Tom


  • 0

#29
TGMcCallie

TGMcCallie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts

I called Kaspersky and they thought they had found the problem.  They made some changes in the Kaspersky settings and thought that would solve my problem.  I tried it

while talking to them and it seemed to be fixed.  After I hung up and tried to search a few more times the problem was still there.  They thought it was solved by adding

www.ebay.com website address to their Safe Money part of Kaspersky.  Not the problem.

 

I called them back and of course got another person and she sent me e-mail asking me to download a product of theirs to run and then e-mail them the logs.  I did that and

awaiting their reply.

 

Will keep you posted when I get results from Kaspersky


  • 0

#30
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 8,090 posts
Thanks for the up dates TGMcCallie.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP