openyes.info

Winuser said:

I did find out it's trying to connect to the Netherlands. If the message pops up I'll try to get a screen shot.

Okay!

Winuser said:

The programs on my list of suspects are CyberGhost, eM Client, Genie9, and IObit Uninstaller. CyberGhost isn't running but the other programs are running in the background.

IObit has had several articles written about it using shady tactics. That might be a good suspect there. I know this is not the exact program you have, but being it is an IObit product, you may want to put it on the suspect list.

If you want a uninstaller program, suggest you go with Revo. It is free & effective. Be sure to read the documentation as using it incorrectly can hose your OS.

Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

For those who may be unaware; IObit is the Chinese software company accused of stealing intellectual property from Malwarebytes some time back.

Now, with the release of Malware Fighter, I believe my stance has been vindicated. Why? Because IObit Malware Fighter wants to change the default home page and search engine, and comes bundled with a variety of PUPs (Potentially Unwanted Programs). In a program described as being ‘anti-mlaware’, this type of behavior must surely be the epitome of antithesis. Or hypocrisy perhaps.

Beware: IObit Malware Fighter |

Additional tools I would suggest are RKill & AdwCleaner to see what they find.

When you run RKill it will attempt to terminate any malware processes & show which ones it did. DO NOT REBOOT after running Rkill.

RKill Download

As RKill only terminates a program's running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again. Instead, after running RKill you should immediately scan your computer using some sort of anti-malware or anti-virus program so that the infections can be properly removed.

AdwCleaner Download

AdwCleaner is a program that searches for and deletes Adware, Toolbars, Potentially Unwanted Programs (PUP), and browser Hijackers from your computer. By using AdwCleaner you can easily remove many of these types of programs for a better user experience on your computer and while browsing the web.

The types of programs that AdwCleaner targets are typically bundled with free programs that you download from the web. In many cases when you download and install a program, the install will state that these programs will be installed along with the program you downloaded. Unless you perform a Custom install, these unwanted programs will automatically be installed on your computer leaving you with extra browser toolbars, adware, and other unwanted programs. AdwCleaner is designed to search for and remove these types of programs.

This is off topic.
Just want to mention about Revo Uninstaller.
I used it couple of times a few years back, but not recent 2 years.

Yesterday I tried to uninstall Google Chrome via Programs and Features.
I couldn't. Google Chrome kept saying there was another Google program running and I was to close it first.
There wasn't any other program running. Period.
Finally, I installed the recent version of Revo Uninstaller and it got rid of Chrome in a flash.
Not only that, it also asked to search for remnants in the registry. I consented and it found 7 or 10 of them. I deleted them and now I am "Chrome free ".

Glad to hear you had a good experience with it. Yes, it does a good job of finding everything. Most uninstallers will leave reg keys/files scattered across your system. Revo is pretty thorough in finding everything. Your best bet is to use the advanced option, but you also need to be careful as you can hose your system if you check the wrong reg keys.

Anyone who is going to be using this down the road, be aware, when the reg keys are presented for deletion, only select the BOLDED ones. If you select the non bolded ones you risk hosing the OS.

Here is a link to a users guide that will help anyone using this program down the road:

http://www.revouninstaller.com/manua...are%20Help.pdf

OldMike65 said:

I agree with you 100% I actually bought Revo years ago, they come out with updates about once a year, unless their is a bug reported. Also, never had a problem letting Revo Clean my registry. But, this is another good reason to make image backups regularly :)

Because not long ago you gave a good recommendation to someone I installed and paid for it.
All I can say it certainly does its job 100% and so glad I now have it

Winuser said:

I'm still trying to track down where this file is located. I did a search in FreeCommander XE for openyes. It found 67 entries. Most were log files for Malwarebytes and a few were listed in AppData\Moonchild Productions\Pale Moon\Profiles\ydu7aa3.default. I'm going to use Edge for awhile and see if I still get the warning. According to the listing for the Malwarebytes this goes back to December 2015 when I bought the computer. I'm going to search my other computers to see if they list openyes.info. If they don't I'll see what programs I have on this computer that I don't have installed on them. IObit Uninstaller is definitely going to be uninstalled. I'm tired of every update if your not careful their SystemCare Program gets installed. I forgot all about AdwCleaner. I never used RKill, I'll give it a try. What surprises me is that there is so little info on openyes.info.

Pale Moon - that's a custom Firefox-type browser, right? Can you see if there's a proxy set in there for openyes? Or maybe reset the browser to default? Check what add-ons are installed?