AubreyPage: IE 8 HP Redirect to http://hp-desktop.us.msn.com/

[OrnahP]

http://h30434.www3.hp.com/t5/Desktop-Operating-Systems-Software-Recovery/IE-8-HP-Redirect-to-http-hp...

For some reason, my previous post got lost so here goes again.

I have two issues now. The "Ediitor's Picks" on the msn page no longer works. There is only one item shown and the arrows that allow selection of news items 1 to 9 etc. do not work.

This is an IE10 issue only. What ever is causing the re-direction is embedded in IE 10. It does not affect Chrome or Firefox or IE 9. Yesterday, I uninstalled IE10 and reverted to IE9. The Editors picks works fine and the re-direction does not exist in IE9. I then re-installed IE 10 and both issues re-occurred.

Note also that this PC is an HP desktop but we also have a HP laptop that has the same issue except that is re-directed to HP-Laptop.us.msn.com. The Editor's picks do not work either on the laptop. I also reverted it to IE 9 and it resolved both issues and I left it that way until I can resolve this issue. Both machines run Windows 7 Home Edition 64 bit.

There are two posts going on this issue. I posted to this thread because the issue was the same as mine and I also later created a new thread on the issue. In that thread, moderator mahemac suggested that I might have a virus or maleware. So I ran Malewarebytes.

The malewarebytes scan completed and found 4 objects as listed below from the report. However the issue persists. Any attempt to go to www.msn.com whether opening the browser (thus going to my homepage www.msn.com), clicking in the house symbol or typing in www.msn.com in the address bar takes you to http://hp-desktop.us.msn.com/?pc=UP75&ocid=UP75DHP

I really believe that this is an HP issue. The thought that my homepage is being re-directed through another server really bothers me. That means that every click or keystroke while on that page can be logged.

Malewarebytes report:

Files Infected:

C:\Users\Aubrey Page\AppData\Local\Temp\ICReinstall_itunes_setup.exe (PUP.Optional.InstallCore) -> Quarantined and deleted successfully.

C:\Users\Aubrey Page\AppData\Local\Temp\is1615585457\4864378_stp\wajam_validate.exe (PUP.Optional.Wajam) -> Quarantined and deleted successfully.

C:\Users\Aubrey Page\Downloads\K Lite codec download\K-Lite_Setup.exe (PUP.Optional.InstallCore) -> Quarantined and deleted successfully.

C:\Users\Aubrey Page\Downloads\XP Disk 1\DOTNETFX\NDPSP.EXE (Trojan.Llac) -> Quarantined and deleted successfully.

[JeffHelp1]

10/16/13 - Jeff reached out to customer