1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Resolved Strange IE Add-On or Trojan?

Discussion in 'Internet Explorer & Microsoft Edge' started by AlexH, 2016/11/10.

  1. 2016/11/10
    AlexH

    AlexH Just an Old Timer getting help ... Thread Starter

    Joined:
    2008/09/05
    Messages:
    254
    Likes Received:
    13
    StrangeNewBanner.JPG Hi,

    Just a few days ago, I started to see the above banner of sorts at the top of some - but not all - web sites, visited with IE version 11.0.36/11.321.

    It is a blue banner with a stylized finger to the left of a text/input field, and the word "Submit" to the right.

    Just for fits and giggles I put nonsense characters in the field and clicked on Submit, and got "Invalid Credential. Please try again." Note that the capitalization is exactly as on screen. I'm trying to post a copy of that with this cry for help. I've attached that image.

    Okay, so I recently turned 70 and yes, am kind of marginaly disabled, but not in the head. Meaning, I don't remember installing anything remotly resembling this and would love to know what it is. I just learned with emie*** was all about, when I found it in Program Files. Maybe this is something new with Windows 10 Pro 64-bit Version 1607 (OS Build 14393.351).

    Does anybdy have an idea of what this is and suggestions as to how to disable or remove it?

    As always, thank you all very much,
    -a.
     
  2. 2016/11/10
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,332
    Likes Received:
    389
    Well, it is not anything new with W10 Pro 64, or IE11. So I recommend you click the Tools icon (little gear) in the upper right, then select Manage add-ons and remove any Toolbar or extension you don't want.
     
    Bill,
    #2
    AlexH likes this.

  3. to hide this advert.

  4. 2016/11/10
    AlexH

    AlexH Just an Old Timer getting help ... Thread Starter

    Joined:
    2008/09/05
    Messages:
    254
    Likes Received:
    13
    Hey Bill!

    Thanks. I've actually done that, and looked in the add/remove / Programs and Features, and used Revo Unistall Pro to look at relatively recent additions or changes, and found nothing suspicious. I've got Norton's Security Pro on the system and routinely run complete scans ad checks, alsoin combination with Nortn Utils '16. But nothing in Add-ons looked unusual in any way.

    BTW, did my JPG show up? Was it helpful and did that banner look familiar in any way?

    Again, my thanks,
    -a.
     
  5. 2016/11/10
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,332
    Likes Received:
    389
    Yes, I saw the jpg. Frankly, I see Norton as a waste money and a resource hog. Windows Defender built into Windows 10, along with Windows firewall the free Malwarebytes is all you need.

    You might try resetting IE if the you were not able to get rid of that toolbar by the way I suggested.
     
    Bill,
    #4
    AlexH likes this.
  6. 2016/11/10
    lj50 Lifetime Subscription

    lj50 SuperGeek WindowsBBS Team Member

    Joined:
    2003/07/04
    Messages:
    2,801
    Likes Received:
    137
    Bill: I've used Norton products for many years and never had any problem with any of their products. You just need to know how to set it up. But every one is entitled to their opinion.
     
    Last edited: 2016/11/10
    lj50,
    #5
    AlexH likes this.
  7. 2016/11/10
    Evan Omo

    Evan Omo Computer Support Technician Staff

    Joined:
    2006/09/10
    Messages:
    7,899
    Likes Received:
    510
    Hi Alex.

    Lets see what is starting up with your machine.

    Please download Autoruns. After you download the zipped folder on your desktop, right click the zipped folder and click Extract All. After the folder has been extracted open the regular folder. Run the autoruns.exe program by right clicking on it and selecting Run as administrator. When you open the program, click the Logon Tab and then post a screenshot of all the startup entries on the Logon Tab in your next reply.

    Also in Autoruns click on the Internet Explorer tab and post a screenshot of that tab in your next reply as well so I can see what add-ons are enabled in the browser.

    Expanding on what Bill said, are you paying for Norton? If so then I would agree that you should remove it and just use the security programs that Bill stated as that's going to be plenty for your system's protection.
     
    AlexH likes this.
  8. 2016/11/10
    MrBill

    MrBill SuperGeek WindowsBBS Team Member

    Joined:
    2006/01/14
    Messages:
    4,292
    Likes Received:
    266
    Nobody said Norton was bad. Just a resource hog. I agree and use Windows Defender, the Built in firewall, MBAM, SpywareBlaster, which are all FREE and have not had any problems. Been using that since Win 7 and used on 8 and now 10.
     
    Last edited: 2016/11/10
    AlexH likes this.
  9. 2016/11/11
    lj50 Lifetime Subscription

    lj50 SuperGeek WindowsBBS Team Member

    Joined:
    2003/07/04
    Messages:
    2,801
    Likes Received:
    137
    MrBiil: Never noticed any problems with anything relating to being a resource hog.
     
    lj50,
    #8
    AlexH likes this.
  10. 2016/11/11
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,332
    Likes Received:
    389
    Right. It is, in fact, good at protecting computers from security threats but you don't need an Abrams Tank to navigate the streets to remain safe. You only need to keep your basic vehicle up to date, and most of all you must drive defensively - the same things you must do even in a tank. Only with WD and WF, you can do it for free.

    On the other hand, here you have an unidentified, unwanted toolbar suddenly appearing in your browser that Norton apparently did not alert you to! :(

    But many many users have. And this is not exclusive to Norton. Other big suites have had similar problems.
     
    Bill,
    #9
    AlexH likes this.
  11. 2016/11/11
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Same is true for Windows itself.

    Most important point is that these suits are resource hogs and provide little extra protection compared to the free standard tools provided by Microsoft.
     
    AlexH likes this.
  12. 2016/11/11
    AlexH

    AlexH Just an Old Timer getting help ... Thread Starter

    Joined:
    2008/09/05
    Messages:
    254
    Likes Received:
    13
    For many years I was a beta tester for Symantec/Norton and learned some tricks to making it work with the least intrusions. Things have changed since then, but I don't find it to be a resource hog.
    What I did find disappointing was the AVG - both free and for pay - suites. All encompassing as they may be, they were all-intrusive as well. I removed it/them completely a few weeks ago.
    I'm going to download Autoruns and then post what you've requested.
    What has be puzzled is that this banner, for want of a better term, doesn't show up for every web site I visit and there seems to be no connecion between those on which it shows up and those on which it doesn't.
    I'll get back to you and I thank you all foryour guidance.
    -a.
     
  13. 2016/11/11
    AlexH

    AlexH Just an Old Timer getting help ... Thread Starter

    Joined:
    2008/09/05
    Messages:
    254
    Likes Received:
    13
     

    Attached Files:

  14. 2016/11/11
    AlexH

    AlexH Just an Old Timer getting help ... Thread Starter

    Joined:
    2008/09/05
    Messages:
    254
    Likes Received:
    13
    Meanwhile, does anybody know what "Textharvester" does? It's located here: C:\Users\AlexH\AppData\Local\Microsoft\InputPersonalization
    -a.
     
  15. 2016/11/11
    lj50 Lifetime Subscription

    lj50 SuperGeek WindowsBBS Team Member

    Joined:
    2003/07/04
    Messages:
    2,801
    Likes Received:
    137
    Bill: I'll take the tank. I'm not in an RMP anymore. The tank would have come in handy when a female driver decided to apply makeup, talk into a phone and operate a motor vehicle when she drifted into my lane and slammed into me. The only place I had to go is to either hit someone walking on the sidewalk and/or hit a telephone pole. So I'll take the tank.
     
    AlexH likes this.
  16. 2016/11/12
    Evan Omo

    Evan Omo Computer Support Technician Staff

    Joined:
    2006/09/10
    Messages:
    7,899
    Likes Received:
    510
    In Autoruns on the Logon Tab, remove the following items:

    HP Beats
    BOINC Manager for Windows
    BOINC System Tray
    iTunes Helper
    LogMeIn Desktop Application
    HP Software Update
    MegaPanel
    Amazon Music
    Bluetooth Tray
    File Association Helper
    Netgear Genie
    Update Notifier
    WinZip Preloader
    All the items highlighted in yellow
    Google Chrome


    Then on the Internet Explorer tab as a test to figure out what add-on in Internet Explorer is responsible for that password banner, UNCHECK all the Norton entries and then reboot the computer and let me know if that toolbar is still showing up. Also you can remove the two ieSpell entries from the Internet Explorer tab in Autoruns as they are not present anymore.
     
    AlexH likes this.
  17. 2016/11/12
    Bill

    Bill SuperGeek WindowsBBS Team Member

    Joined:
    2002/01/11
    Messages:
    3,332
    Likes Received:
    389
    It is NOT about the damage done. The tank analogy was all about preventing infestation (avoiding an accident) in the first place. If you were in a tank, the girl still would have hit you, or left you with the same two choices.

    Once the malicious codes gets past you and your security defenses, Norton will NOT prevent or minimize any damage caused by the malware better than any other decent anti-malware solution. And preventing the malicious code from getting past you and your security defenses is what having a decent anti-malware solution is all about.

    So whether you were driving a tank or a modern and properly maintained car - if you did not see it coming in time to avoid the accident, the accident still would have occurred. But even still, if you kept your car current and properly maintained, even if you opted to hit the pole, you would not have been hurt. But if you were driving your obsolete, antiquated, unsupported Model XP out on the Information Highway 86, that's a different story.
     
  18. 2016/11/12
    AlexH

    AlexH Just an Old Timer getting help ... Thread Starter

    Joined:
    2008/09/05
    Messages:
    254
    Likes Received:
    13
    Hi Evan,
    Please forgive my ignorance here. If I remove all the suggested items from Autoruns, what effect does that have on them permanently? Does it somehow disable them in my system?

    BTW, do you have any information about Megapanel, other than what I find in Google? I'd love to know where it came from, what it does, and how to get rid of it.

    While I am waiting to learn what the effect of removing in Autoruns is, I will gladly follow your lead, and let you know the outcome.

    Thank you,
    -a.
     
  19. 2016/11/12
    AlexH

    AlexH Just an Old Timer getting help ... Thread Starter

    Joined:
    2008/09/05
    Messages:
    254
    Likes Received:
    13
    Hi.
    Stupid question that was .. if it will effect the system, as in remove things permanently.

    As for Megapanel it is prt of a program I use where I upload the scanned in prices when I shop, for research purposes.

    And on the IE Tab, I decided to uncheck only the first entry, HP Nework Check Helper, along with your recommendations.

    Now, I reboo.

    -a.
     
  20. 2016/11/12
    lj50 Lifetime Subscription

    lj50 SuperGeek WindowsBBS Team Member

    Joined:
    2003/07/04
    Messages:
    2,801
    Likes Received:
    137
    Haven't had any problems yet. But I don't visit any questionable websites nor open any suspicious emails. It's been nice conversing with you again.
     
    AlexH likes this.
  21. 2016/11/12
    Evan Omo

    Evan Omo Computer Support Technician Staff

    Joined:
    2006/09/10
    Messages:
    7,899
    Likes Received:
    510
    Removing those items from the Logon tab removes those items from booting up with your computer. Those programs will remain installed but if you want to run them, you will have to run them manually.

    As a result of removing those items, your computer will boot into Windows a lot faster and your system's performance will be improved.
     
    AlexH likes this.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.