Are you encountering redirects to the Home page while interacting with various functions on eBay ?

JavaScript Disabled    Your browser has not been checked for parasites, because JavaScript is disabled.

   For technical reasons, the automatic-detection feature on this web page can only work with Internet Explorer on Windows, when "Active Scripting" is enabled and "Download signed ActiveX components" is not disabled.

   If you are an IE/Win user, you can turn JavaScript on (temporarily is probably best) by going to Tools->Internet Options->Security->Internet Zone->Custom Settings and setting ’Active Scripting’ to ’Enable’ or ’Prompt’. Then force a page reload using CTRL+F5.

You've just been scanned for “known” scumware that use “Browser Helper Objects” to exploit Internet Explorer.

Since you are visiting this page, you have probably been experiencing redirects while browsing category links or clicking item titles from eBay search result pages... Only to land on eBay’s Home page. It can quickly become tiresome and can be frustrating to say the least.

There can be many possible causes for this annoyance:
1.) Your eBay cookies may be corrupt, especially if you have multiple eBay IDs that use the same machine.
2.) eBay's incessant use of poorly coded JavaScript often throws off multiple errors... Every eBay page has both HTML encoded and Javascript downloads... Sometimes as many as seven7 downloads per page AND those JS DLs sometimes contain up to an additional three3 JS DLs called from within.
3.) Your computer is infested with a parasite and eBay is utilizing some form of script suppression to keep your browser “on-site”.

It’s a tough call. The first recommendation is for you to clear your cache (delete Temporary Internet Files) and dump (delete) your cookies (can be a pain-in-the-rear if you use cookies to set site preferences). eXit (close) all browser windows (to dump JS and cookies from memory) and start a new browser session. Did that help?

If not, you should consider familiarizing yourself with various pest removal tools to rid your computer of security risks as well as removing the annoyance you are currently experiencing.
Displayed to your right is eBay’s recommended actions... Though they are somewhat on-track, it is apparent that eBay is not greatly concerned about your computer’s security nor any future frustration you may encounter because of their directions.

A far better approach would be to download Ad-Aware or SpyBot Search & Destroy. If you already have Ad-Aware, be sure that it is the most current build (Ad-Aware 6 Build 0162)... If not, DL it.
1.) After DLing, update the Reference File to the latest one (0R149 25.06.2003 as of June 25th 2003).
2.) Read the instructions and familiarize yourself with the methods used to quarantine the suspect files for later retrieval if necessary.
3.) Familiarize yourself with the process of archiving a logfile (will prove very helpful if you need to visit LavaSoft’s forums for a problem parasite).
4.) Scan your computer and archive the logfile.
5.) If you are unsure about what is safe to remove, simply mark the tracking cookies for deletion... Delete.
6.) Rescan, select the items from the alerts that you think may be the cause of your problem, mark them for deletion and quarantine the lot just in case you accidentally delete something necessary.
7.) Run your computer, if there is still an “annoyance” that was not taken care of with the above steps, or something keeps reappearing in your scans, take your most recent logfile to the LavaSoft forums.
8.) You may be asked to download HijackThis, run it and post the contents of the logfile it creates. (Simply click “Save log” to create it.) Do not fix anything with HijackThis unless you can 100% identify the item you wish to delete (like porn-dialers, etc.)... HijackThis will delete with NO possible way to restore. HijackThis (ver. 1.95) now has a backup feature (set as the default) and can list running processes.
9.) If your problem is caused by a currently unknown parasite you may be asked to submit the file to LavaSoft so that a research team can identify the offenders and include them into the next Reference File update.
10.) You will be given detailed and knowledgeable suggestions from very patient members on how to fix and/or remove the troublesome pest(s).

You can find the download links to the above FREE applications plus additional FREE software and scumware removal information at http://quidnunc.net/~highpointe/scumware.htm ... Not to be too critical of eBay, but it is obvious that they are incapable of differentiating between a commercial and FREE site.

eBay’s recommendation to use BHODemon is sound, as it is a fine and very simple to use application, BUT it is NOT a complete remedy.

If eBay is running a suppression script (very likely and probably referred to as a “browser debugger”) your computer and browser security is not increased... Simply put, the dangerous cancer is masked over while visiting eBay. If you have a form of scumware residing on your hard-drive, there is a very good possibility that a unprotected back-door to the Internet exists... Any form of malware can scan your ports and exploit this open doorway. Should a keylogger come through and set up residence, your redirect annoyance will be very minor compared to the time and costs involved repairing your identity. Frankly, a placebo for a very curable illness is irresponsible.

Good Luck!

    Important Update
After communicating with a few members who are experiencing these redirects, there appears to be no “known” spyware infesting their computers that is causing the browser to visit the eBay Home page. To summarize a few of the emails:
    Two2 users found no parasites and opted to use eBay's instructions to disable “third-party extensions” and successfully navigated through eBay.
    Two2 users DLed, installed, and ran BHODemon, after disabling suspect BHOs was able to navigate eBay.
    One1 user went directly to eBay’s instructions for disabling “third-party extensions” with success.
    Four4 users cleaned their systems using Ad-Aware and still encountered problems.
    One1 user ran Ad-Aware and followed eBay’s instructions for manually removing BHOs without success.
    Three3 users used Ad-aware and followed both sets of eBay instructions to your right and still experienced the redirects.
The last eight8 users mentioned above were then given the recommendation to follow the instructions on this eBay Answer Center page.
All eight8 reported back with success which, unfortunately, indicates that some eBay JavaScripting is interferring with certain software, applications, security and/or browser features on their machines. The instructions on that Answer Center page will knock out all eBay JavaScripting while visiting the item listing pages and search results pages... The draw-back is that the Refined Search feature is rendered useless (since it resides on eBay’s search server)... eBay’s Advanced Search does not reside on that server and should function okay, barring errant eBay JavaScripting.

For those experiencing the redirects from the Sell Your Item forms I can only suggest that you make sure that your system is clean (DL, install and run Ad-Aware and BHODemon at the very least) and temporarily disable “third-party extensions”.

Update box revised July 10 2003 at 23:04:00 to reflect additional email communication and that on July 7th eBay was rolling out a fix (for errant JS) for the “click-through URLS” (strange name for redirects but guess eBay should know their poor JS coding better than most).



eBay's Recommended Course of Action:

During your initial contact with eBay LiveChat (LiveHelp) you may OR may not get a “LivePerson” who is familiar with the Home page redirects and knows where to find the eBay recommended Copy&Paste replies to attempt a remedy.

If the “LivePerson” is somewhat familiar with the problem or can navigate through the canned eBay recommendations, you will be first advised to download BHODemon from definitivesolutions.
All well and good if the current scumware you are encountering uses a Browser Helper Object (BHO). If it doesn't and your scan using BHODemon proves negative, the next visit to eBay LiveChat will produce the following recommendation:

eBay's instructions to manually delete Browser Helper Objects...
eBay LC: I can understand your frustration with having trouble with being automatically redirected to the eBay home page. This is caused by a spyware program that becomes automatically installed in your browser, often without your knowledge or permission.

eBay LC: To remove it, please follow the steps below:

eBay LC: 1. Click Tools at the top of your browser and choose Internet Options from the menu.

eBay LC: 2. In the options window, click Settings in the Temporary Internet Files Area.

eBay LC: 3. In the next window, click View Objects and a list of objects will come up.

eBay LC: 4. You will see one or more objects that look similar to this: {8A05273A-2EA5-42DE-AA75-59EA7D9D50D7}

eBay LC: 5. Please right-click on each of those and choose remove from the menu that comes up.

eBay LC: 6. You can then close out of all those windows, restart your computer, and that will solve the problem.
Unfortunately the above instructions are still assuming that your problem is BHO based (not necessarily the case)... PLUS no where in the instructions are you told how to differentiate GOOD BHOs from BAD BHOs.
It is quite interesting that for item number 4. eBay uses the ID for HuntBar, a known piece of scumware that is often loaded into machines as a Drive-By Download (no interaction on your part necessary to become infected).
So now you have followed eBay's instructions, successfully disabling your Google Toolbar and many applications you may find useful, you return to eBay only to find the page redirects still occur... A return visit to LiveChat produces yet another recommendation:

eBay's Last Resort...
eBay LC: Please follow the steps below to disable the Tool Bars and Browser Helper Objects features:

eBay LC: 1. Close all instances of Internet Explorer, click Start, point to Settings, and then click Control Panel.

eBay LC: 2. Double-click Internet Options.

eBay LC: 3. Click the Advanced tab.

eBay LC: 4. Under Browsing, click to clear the Enable third-party browser extensions (requires restart) check box.

eBay LC: 5. Restart Internet Explorer.

eBay LC: That should allow you to use the site successfully.

Disabling “Third-Party Extensions” will work but will likely have unintended consequences... In addition to leaving an unknown infection still on your machine, if you did not aleady damage or disable any additional browser toolbars by performing the instructions on manual removal of BHOs, you will now render them inoperable... As well as any popup stopper applications you may use, ad-blockers, depending on your ISP some possible service and security features, many download managers, most extra browser contextual menu items, most extra add-in browser buttons, desktop stock tickers, desktop news scrollers, the ability to log onto many portals to play on-line games, the possible source of your infection (P2P file sharing applications), etc., etc.

Update July 27 2003 at 01:18:00... eBay is getting a little better at this... They are no longer recommending the too all-encompassing instructions of disabling “Third-Party Extensions”, possibly since doing so also disables the eBay ToolBar. The latest spyware/adware threat plaguing eBay users appears to be setting a Cascading Style Sheet (CSS) into the Windows system. LiveChat’s fix:

eBay's guide to disabling an
implanted style sheet...
eBay LC: I can understand your frustration with having trouble with slowness on the site. After researching this problem, it is most likely related to a third party spyware object that has been installed on your computer. Such objects are in no way affiliated with eBay. Please follow the steps below to make sure you aren't affected:

eBay LC: 1. Click Start, Settings, then Control Panel (just Start and Control Panel if using XP).

eBay LC: 2. Click Internet Options.

eBay LC: 3. Click the Accessibility button and in the window that comes up, make sure all the options are UNCHECKED.

eBay LC: 4. Click Ok twice to close the windows and restart Internet Explorer.

Yes, that will work (possibly only temporarily) but the action is much too simplistic. If it is the browser hijack culprit that it sounds like, you need to know that it loads a file at startup: bootconf.exe. The style sheet contains javascript that opens a pop up window so you need to get remove that CSS file... There are at least three3 possible file names: my.css, default.css and system.css. AND it places it’s site(s) in the IE “Trusted Zone” so you will want to review your IE Security Settings. Thus there is a chance that this CSS pest may very well rebuild upon the computer’s next reboot if not properly removed... Likely Ad-Aware has identified this parasite for removal with the latest reference file 01R20427.07.2003. Manual removal of the bootconf.exe and *.css files may be necessary... Visit the LavaSoft Support Forums and do a search for bootconf.exe or any of the above css file names to see if anyone has suggested the proper manual removal procedure.