How to remove the MSN pop up permanently?

Can I ask what AV you use, and also what Firewall?

RKILL

Performing miscellaneous checks:

* Windows Defender Disabled

[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001

* Windows Firewall Disabled

[HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = dword:00000000

ADWCleaner

[-] Folder Deleted : C:\ProgramData\simplitec
[#] Folder Deleted : C:\ProgramData\Application Data\simplitec
[-] Folder Deleted : C:\Users\Arcadian\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence
...
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
[-] Key Deleted : HKCU\Software\CheckPoint\ISW
[-] Key Deleted : HKCU\Software\darwendlm
[-] Key Deleted : HKCU\Software\PRODUCTSETUP
[-] Key Deleted : HKCU\Software\Softwareopensource
[-] Key Deleted : HKCU\Software\csastats
[-] Key Deleted : HKLM\SOFTWARE\simplitec
[-] Key Deleted : [x64] HKLM\SOFTWARE\CheckPoint\ISW
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-2073988303-265105248-2263932473-1001\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data Restored : HKU\S-1-5-21-2073988303-265105248-2263932473-1001\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C5CDD303-B921-4A1C-9656-3745F0150771}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C5CDD303-B921-4A1C-9656-3745F0150771}
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Data Restored : HKU\S-1-5-21-2073988303-265105248-2263932473-1001\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]

Not sure this will stop the issue you're seeing, but all that stuff needs to go. If you still have simplitec installed, remove it using the standard Windows method for uninstalling programs (Control Panel>Programs and Features).

I would create a restore point, and then go ahead and select everything ADWCleaner found, and CLEAN it all off.

It will be interesting if you can get a screenshot, or a photo with your phone/camera, so we can see exactly what you're seeing.

Just so you know: RKILL is a temporary scan - it simply disables suspicious items, and everything it does is undone by a reboot - it doesn't clean anything. It is used to give temporary control of an infected computer back to the owner, so it can be cleaned. It also, (for our purposes here), identifies some key settings in the system.

Task manager in search > Open Task Manager > Go to startup tab.

DeaconFrost said:

That looks to be the Edge Browser going to msn.com on startup. I would think you'd see some reference that that in your start up items.

Nope, that's actually Internet Explorer.

Arcadian said:

Bit lucky as I'd switched off for a couple of hours and it was back again, see screen pic below....

Sorry not a techie what's AV ? Firewall is Zone Alarm which I've used for years right back to XP...

AV = AntiVirus. I just want to make sure you have a 3rd-party AV on your system, as RKILL reports that Defender is disabled. That is as it should be, if you're using something else.


This picture you posted is Internet Explorer.
Do you have Ccleaner on the machine? If so, I think you can disable it from there as well, if you can't find it in Startup/Task Manager.



You could also change your home page on Internet Explorer if you don't care for that Bing one. If you'd like instructions on that, let me know.