Hi,
This is a whole new thing to me; never seen it before.
On Random pages, at the top of the actual webpage, it shows the same amazon
web banner.
See here: http://sam06.tfcph.com/googleadvert.jpg
It doesn't seem to appear on all pages, but appears on websites such as
google and wikipedia.
If it's any help, the link links to:
http://www.amazon.com/?&tag=granoffe...5Y5PN3R0Q864Y&
which appears as an affiliate link?

Kind Rgeards,
Sam.

Right-click on an empty area of the banner box > Properties > Copy/paste the
Address (URL) into a reply to this thread.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.org/

samhale wrote:
> Hi,
> This is a whole new thing to me; never seen it before.
> On Random pages, at the top of the actual webpage, it shows the same
> amazon
> web banner.
> See here: http://sam06.tfcph.com/googleadvert.jpg
> It doesn't seem to appear on all pages, but appears on websites such as
> google and wikipedia.
> If it's any help, the link links to:
> http://www.amazon.com/?&tag=granoffe...5Y5PN3R0Q864Y&
> which appears as an affiliate link?
>
> Kind Rgeards,
> Sam.

http://rcm.amazon.com/e/cm?t=granoff...e=windows-1252

"PA Bear" wrote:

> Right-click on an empty area of the banner box > Properties > Copy/paste the
> Address (URL) into a reply to this thread.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE, OE, Security, Shell/User)
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.org/
>
> samhale wrote:
> > Hi,
> > This is a whole new thing to me; never seen it before.
> > On Random pages, at the top of the actual webpage, it shows the same
> > amazon
> > web banner.
> > See here: http://sam06.tfcph.com/googleadvert.jpg
> > It doesn't seem to appear on all pages, but appears on websites such as
> > google and wikipedia.
> > If it's any help, the link links to:
> > http://www.amazon.com/?&tag=granoffe...5Y5PN3R0Q864Y&
> > which appears as an affiliate link?
> >
> > Kind Rgeards,
> > Sam.
>
>

Windows version? IE version?
--
~PA Bear

samhale wrote:
> http://rcm.amazon.com/e/cm?t=granoff...e=windows-1252
>
> "PA Bear" wrote:
>> Right-click on an empty area of the banner box > Properties > Copy/paste
>> the Address (URL) into a reply to this thread.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE, OE, Security, Shell/User)
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.org/
>>
>> samhale wrote:
>>> Hi,
>>> This is a whole new thing to me; never seen it before.
>>> On Random pages, at the top of the actual webpage, it shows the same
>>> amazon
>>> web banner.
>>> See here: http://sam06.tfcph.com/googleadvert.jpg
>>> It doesn't seem to appear on all pages, but appears on websites such as
>>> google and wikipedia.
>>> If it's any help, the link links to:
>>> http://www.amazon.com/?&tag=granoffe...5Y5PN3R0Q864Y&
>>> which appears as an affiliate link?
>>>
>>> Kind Rgeards,
>>> Sam.

IE7 , XP

"samhale" wrote:

> Hi,
> This is a whole new thing to me; never seen it before.
> On Random pages, at the top of the actual webpage, it shows the same amazon
> web banner.
> See here: http://sam06.tfcph.com/googleadvert.jpg
> It doesn't seem to appear on all pages, but appears on websites such as
> google and wikipedia.
> If it's any help, the link links to:
> http://www.amazon.com/?&tag=granoffe...5Y5PN3R0Q864Y&
> which appears as an affiliate link?
>
> Kind Rgeards,
> Sam.

To keep track of things, it helps immensely if you include all of previous
message(s) in your replies to the newsgroup. Thank you.

This looks like...


Adware.Win32.Amazon Toolbar - a-squared Malware Beschreibung:
http://www.emsisoft.de/de/malware/?A...Amazon+Toolbar

==================================

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.org/


samhale wrote:
> IE7 , XP
<paste>
PA Bear wrote:
> Windows version? IE version?
>
> samhale wrote:
>> http://rcm.amazon.com/e/cm?t=granoff...e=windows-1252
>>
>> "PA Bear" wrote:
>>> Right-click on an empty area of the banner box > Properties > Copy/paste
>>> the Address (URL) into a reply to this thread.
>>> --
>>> samhale wrote:
>>>> Hi,
>>>> This is a whole new thing to me; never seen it before.
>>>> On Random pages, at the top of the actual webpage, it shows the same
>>>> amazon
>>>> web banner.
>>>> See here: http://sam06.tfcph.com/googleadvert.jpg
>>>> It doesn't seem to appear on all pages, but appears on websites such as
>>>> google and wikipedia.
>>>> If it's any help, the link links to:
>>>> http://www.amazon.com/?&tag=granoffe...5Y5PN3R0Q864Y&
>>>> which appears as an affiliate link?
>>>>
>>>> Kind Rgeards,
>>>> Sam.

Hello,
I have the exact same problem. I get AMAZON banner ads at the top of
IE randomly when opened. Has something to do with www.grandoffers.net,
but I can't find a solution. Any help appreciated.
JT

"John" <gatordoc******.com> wrote in message
news:1194720915.078311.296680@c30g2000hsa.googlegr oups.com...
> Hello,
> I have the exact same problem. I get AMAZON banner ads at the top of
> IE randomly when opened. Has something to do with www.grandoffers.net,
> but I can't find a solution. Any help appreciated.
> JT
>

Do a thorough check for malware, following all of the steps at one of these
Web pages.
Help with malware:
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/...moving_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing programs like Messenger Plus,
whose ads for malware don't identify the malware as such and try to convince
you that you owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

--
Frank Saunders MS-MVP IE,OE/WM
www.fjsmjs.com
Do not send email

On Nov 11, 9:14 am, "Frank Saunders MS-MVP IE,OE/WM"
<franksaund...@mvps.org> wrote:
> "John" <gator...******.com> wrote in message
>
> news:1194720915.078311.296680@c30g2000hsa.googlegr oups.com...
>
> > Hello,
> > I have the exact same problem. I get AMAZON banner ads at the top of
> > IE randomly when opened. Has something to do withwww.grandoffers.net,
> > but I can't find a solution. Any help appreciated.
> > JT
>
> Do a thorough check for malware, following all of the steps at one of these
> Web pages.
> Help with malware:
> All MS-MVP Sites.http://aumha.org/a/parasite.htmhttp:...re_Defence.htm
>
> Unexplained computer behavior may be caused by deceptive software.http://support.microsoft.com/kb/827315
>
> So How Did I Get Infected Anyway?
> For quite a few people it's by installing programs like Messenger Plus,
> whose ads for malware don't identify the malware as such and try to convince
> you that you owe it to the author. See also:http://www.wilderssecurity.com/showthread.php?t=27971
> Don't ever do a "default" install of anything. Always choose Custom and see
> what else is being carried along. Don't install any extras you're not sure
> of.
>
> --
> Frank Saunders MS-MVP IE,OE/WMwww.fjsmjs.com
> Do not send email

Hello Frank,
I have not had any luck finding the offending software, however I have
another interesting finding. The banners show up on random pages, esp
when opening a new tab, but when I view the source code, nothing is
listed. Could this be something microsoft added to IE7? Thanks for the
help.
JT