Solved How do I report a scam webpage to amazon?

[groze]

How do I report a scam webpage to amazon?

** REMOVED **

It trys to trick you into calling a number. It popup using legit sites. No malware, no spyware, and no viruses is added to your computer.

 

[Brink]

You could probably report it using the same method below, but for the webpage on an Amazon site.

Amazon.com Help: Report a Phishing or Spoofed E-mail

 

[groze]

You could probably report it using the same method below, but for the webpage on an Amazon site.

Amazon.com Help: Report a Phishing or Spoofed E-mail

Thank you and sorry about the link in my post.

 

[Jacee]

You may also have an 'add-on' in your browser that will bring up ads when you click certain sites.

Let's see if this is so ... download AdwCleaner by Xplode and save to your Desktop.

Step 1.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Step 2.
Using AdwCleaner v3: Scan & Clean:
This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder

******Post both .txt logs

 

[groze]

@Jacee


# AdwCleaner v4.110 - Logfile created 16/02/2015 at 15:50:26
# Updated 05/02/2015 by Xplode
# Database : 2015-02-14.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : User Name1 - usename1-PC
# Running from : C:\Users\User Name1\Downloads\adwcleaner_4.110.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found : C:\Users\User Name1\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflpcokdamgefbghpdipcibmhlkdopop

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\APN PIP
Key Found : [x64] HKCU\Software\APN PIP

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631


-\\ Mozilla Firefox v35.0.1 (x86 en-US)

[30yzllgc.default] - Line Found : user_pref("extensions.TrafficLightSettings.ph_white", "thecrims.com\nhattrick.org\nraiffeisenonline.ro\nbrd-net.ro\ningonline.ro\nbancpost.ro\nbtrl.ro\ncrediteurope.ro\nalphabank.ro\nromexterra.ro\not[...]
[53067om2.default] - Line Found : user_pref("extensions.TrafficLightSettings.ph_white", "thecrims.com\nhattrick.org\nraiffeisenonline.ro\nbrd-net.ro\ningonline.ro\nbancpost.ro\nbtrl.ro\ncrediteurope.ro\nalphabank.ro\nromexterra.ro\not[...]

-\\ Google Chrome v40.0.2214.111

[C:\Users\User Name1\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\User Name1\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\User Name2\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\User Name2\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

-\\ Opera v27.0.1689.69

*************************

AdwCleaner[R0].txt - [2004 bytes] - [16/02/2015 15:50:26]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2063 bytes] ##########




Here is the registry file

Key Name: HKEY_CURRENT_USER\Software\APN PIP
Class Name: <NO CLASS>
Last Write Time: 11/10/2014 - 8:04 PM

Key Name: HKEY_CURRENT_USER\Software\APN PIP\EPNV7
Class Name: <NO CLASS>
Last Write Time: 11/10/2014 - 8:04 PM
Value 0
Name: Cancel_PIP
Type: REG_SZ
Data: 1

I know traffic light is legit. The other is google chrome weather channel app. I think I know how APN PIP got installed. It could be the dell webcam software. It includes open candy but even saying no during install, still puts something in the registry. I ran all different type software virus scans, malware scans, boot time scans, nothing found. Is it safe to delete that key? There is one other item that might put that registry key in my Espon printer software.

Edit
I am positive it is Espon software, it was installed at the same time the registry key was made. My question is it safe to delete that key or will it stop the printer from working? Thank You in advance.

 

[Jacee]

You marked this topic 'solved' ... but you still have questions and haven't had AwCleaner "clean" the bad processes. Open candy is nothing you want!!
Please follow:

Step 2.
Using AdwCleaner v3: Scan & Clean:
This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.

A copy of that logfile will also be saved in the C:\AdwCleaner folder

Tell me if you're still getting the pop-ups.

 

[groze]

Thank you for your help Jacee.

I don't mean any offense here. I marked the topic solved because I got the main answer from Brink.

If I do what you suggested, I would lose the bitdefender traffic-light plugins/addons. Those are false-positives. I checked out the locations.

I did find out what put the registry key listed in my post was EpsonNet Print

https://files.support.epson.com/htmldocs/cx11nf/cx11nfng/lnwsw_4.htm

I am not sure that EpsonNet Print is really needed but it might be needed for wifi.

 

[Jacee]

Absolutely no offence taken! If you wish, leave that extension alone, and check all other ones to be cleaned. They are most definitely "adware".

Please post the cleaned .txt log.

 

[groze]

Jacee

# AdwCleaner v4.110 - Logfile created 17/02/2015 at 00:09:10
# Updated 05/02/2015 by Xplode
# Database : 2015-02-14.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : user 1 - User 1-PC
# Running from : C:\Users\user 1\Downloads\AdwCleaner.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

[x] Not Deleted : C:\Users\user 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflpcokdamgefbghpdipcibmhlkdopop (It would just come back) Weather channel app.

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\APN PIP (I may have to restore this if my printer doesn't work)

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631


-\\ Mozilla Firefox v35.0.1 (x86 en-US)


-\\ Google Chrome v40.0.2214.111

[C:\Users\user 1\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\user 1\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\user 2\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\user 2\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

-\\ Opera v27.0.1689.69

[C:\Users\user 1\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\user 1\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\user 2\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\user 2\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}


If your wondering about traffic light, I removed it temporally. Google Chrome might even restore the search providers

 

[Jacee]

Read this ... 5 Ways to Disable Add Ons - wikiHow

Please download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forum and save it to your desktop.

Save any unsaved work. TFC will close ALL open programs including your browser! This will also eliminate all desktop shortcuts, so just be aware!
Using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.

Important! Manually reboot the machine to ensure a complete clean.

This is a good app to keep!

Do you have Malwarebytes' Anti-malware?

 

[groze]

Thank you for your help Jacee.

 

[Jacee]

Go to Control Panel > Internet Options and set your home page and 'search provider' to Google. Click 'apply' and ok.