Windows 10: openyes.info

Does anyone know what "openyes.info" is. Eset Smart Security has blocked 3 or 4 times that I know of.

:)

 

It appears to be a domain with a lot of redirects, so questionable...and some scanners have detected threats

https://www.virustotal.com/en/domain...o/information/

 

That's about all I could find when I did a search. I did install CyberGhost about 10 days ago to try it and was thinking that could be it. The only thing is I get the warning from Eset even though CyberGhost isn't running.

 

Wonder if you'd get the warning if CyberGhost is completely uninstalled? Have you checked your hosts file?

 

Might be a good idea to run Malwarebytes to see if it finds any remnants of the program if you've uninstalled it. Anything with possibly shady actions rarely lets go of a OS that easily. If you simply have it turned off, it may be running in the background despite your setting to turn it off. The free version of Malwarebytes will work fine. Do a full system scan & find quarantine anything it finds.

Malwarebytes | Free Anti-Malware Detection & Removal Software

 

I have run Malwarebytes and SuperAntiSpyware and they only found a few tracking cookies. I'm sure it's from a program I installed. I'm just not sure which one. The programs on my list of suspects are CyberGhost, eM Client, Genie9, and IObit Uninstaller. CyberGhost isn't running but the other programs are running in the background. Eset is blocking it and everything seems to be running so I guess its OK. I would like to know what program is doing this and if it's safe or not. If all else fails I could try the hit and miss method by uninstalling one program at a time. If I do it'll take awhile because it's only happened a few time. I tried looking in Eset for a log but can't find anything about blocking openeyes.info.

edit: I just thought of two programs that are running in the background and could be causing it, HP Support Assistant and Steam.

 

Matbe you can do some investigating with WireShark?
How to Use Wireshark to Capture, Filter and Inspect Packets

 

Thanks, I'll give it a try. I'm surprised that every search engine I try has very little info about openyes.info. Some don't have any info at all. I'm hoping to find out what program is using openyes.info and if it's safe or not.

 

Yeah, you've got me wondering now as well!

 

I did find out it's trying to connect to the Netherlands. If the message pops up I'll try to get a screen shot.

 

Okay! *Thumbs

 

IObit has had several articles written about it using shady tactics. That might be a good suspect there. I know this is not the exact program you have, but being it is an IObit product, you may want to put it on the suspect list.

If you want a uninstaller program, suggest you go with Revo. It is free & effective. Be sure to read the documentation as using it incorrectly can hose your OS.

Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Beware: IObit Malware Fighter |

Additional tools I would suggest are RKill & AdwCleaner to see what they find.

When you run RKill it will attempt to terminate any malware processes & show which ones it did. DO NOT REBOOT after running Rkill.

RKill Download

AdwCleaner Download

 

This is off topic.
Just want to mention about Revo Uninstaller.
I used it couple of times a few years back, but not recent 2 years.

Yesterday I tried to uninstall Google Chrome via Programs and Features.
I couldn't. Google Chrome kept saying there was another Google program running and I was to close it first.
There wasn't any other program running. Period.
Finally, I installed the recent version of Revo Uninstaller and it got rid of Chrome in a flash.
Not only that, it also asked to search for remnants in the registry. I consented and it found 7 or 10 of them. I deleted them and now I am "Chrome free ".

 

Glad to hear you had a good experience with it. Yes, it does a good job of finding everything. Most uninstallers will leave reg keys/files scattered across your system. Revo is pretty thorough in finding everything. Your best bet is to use the advanced option, but you also need to be careful as you can hose your system if you check the wrong reg keys.

Anyone who is going to be using this down the road, be aware, when the reg keys are presented for deletion, only select the BOLDED ones. If you select the non bolded ones you risk hosing the OS.

Here is a link to a users guide that will help anyone using this program down the road:

http://www.revouninstaller.com/manua...are%20Help.pdf

 

Yea. Thank you.
I forgot to mention the ones in BOLD prints only.
Thank you for pointing out this crucial fact.