Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Browser image, video searches by itself


  • This topic is locked This topic is locked
77 replies to this topic

#16 NickS111

NickS111
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Local time:11:50 PM

Posted 24 August 2017 - 03:48 PM

Hi Gary,

 

I am willing to do almost anything to solve this for my family as we have been dealing with it for months.

 

To date I have replaced the modem and the router. The issue didn't stop after switching both.

My ISP is COX. Previous router was an Asus AC68U. It worked well at 1st but after the pron stuff started popping up, I tried switching on the filters in the router to block the porn. It didn't stop the image search pop-ups. I had reset the router a number of times hoping to stop the issue.

Purchased a new Netgear cox compatible modem in May 2017. Also purchased a new Pepwave Surf Soho router. It is a commercial grade router with supposedly better software and security. The firmware was just updated 2 weeks ago. I found out today that the firewall wasn't configured correctly. That was corrected today.

I can reset the router tonight. Usually when I do this, I will also change the SSID.

 

Anything else?

 

Also, you should know that we get similar pop-ups on our smart phones even with wifi turned off coming in through the phone carriers data connection. This is were it gets more strange, it only occurs when we are near our house.

 

Thanks, Nick



BC AdBot (Login to Remove)

 


#17 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,968 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:50 PM

Posted 25 August 2017 - 09:12 AM

I know you stopped Edge from syncing but are there other means by which your devices sync information?

If this only happens at your house then it has to be something with your network, but to be honest this makes no sense to me given all that you have done already,
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#18 NickS111

NickS111
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Local time:11:50 PM

Posted 25 August 2017 - 11:16 AM

I need to correct myself. I thought I had stopped Edge until I arrived home and noticed that even though Firefox was set as my default browser Edge was open and bing had done a search (again). So it appears that I stopped IE but not Edge. I was reading through Windows information to change the permissions on Edge to keep it from opening. The permissions are setup as "Trusted Advisor". I am hearing that Windows was trying to force users to use the Edge browser with the latest upgrades by making it more difficult to shut down. Do you know how to shut off Edge? I feel like I am trying to plug all the holes in the system so the unwanted pop-pages stop.


Speaking with router supplier they were wondering if there was a RAT (remote access Trojan) at work. I would have thought MAlwarebytes or the other antivirus would have found rat.

#19 NickS111

NickS111
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Local time:11:50 PM

Posted 25 August 2017 - 11:23 AM

I have a PNG file screen shot of the Image Search that I was going to post to this page But not sure how to do that.

#20 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,968 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:50 PM

Posted 25 August 2017 - 11:34 AM

Upload the screen shot here.

 

Do you want to completely disable Edge, meaning it won't launch at all (this would be reversible)?

 

I see no evidence of Remote Access.


Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#21 NickS111

NickS111
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Local time:11:50 PM

Posted 25 August 2017 - 12:22 PM

Uploaded screen shot. I never did the router reset. One I saw the image search I was trying to close

Win10 allows changing the default browser. The problem is Edge still runs in background. In the case of the pop-up window, it came through Edge even though I have Firefox set as default. I think this occurred because Firefox is set to block pop-ups. Its weird that the pop-up searches for a way in through a browser or search engine.
Disabling Edge is supposedly reversible. I was reading on one of the windows forums that the only way to do it is at the file level, by renaming the exe. According to the other users trying to shutdown Edge, they said Edge is a "free for all, that downloads anything".

#22 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,968 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:50 PM

Posted 25 August 2017 - 12:28 PM

If you have any similar links or screen shots you want me to see upload them rather than post on the site.

Are all of these pop up pages Bing related?

I have created registry modifications to effectively disable Edge then reverse that. Download the attached files which are self-explanatory. Right click on the DisableMicrosoftEdge.reg file and select Merge. You will get a warning but allow it. If the registry key merged properly attempt to launch Edge then tell me what happens.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#23 NickS111

NickS111
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Local time:11:50 PM

Posted 25 August 2017 - 12:53 PM

Ok will do on uploads.

Not sure what you mean if the Bing pages are related? All I know is they happen one after another, some are 1 minute or less apart. Is this someone typing or a script running somewhere? The only relation I see is the search starts with Butt then moves on to ass. Its almost like they didn't like the results of butt so they switched to ass....my question is who is they?

Ok, I will do the edge modifications later today. thanks for sending. You don't like Edge?!? :)

thanks!

#24 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,968 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:50 PM

Posted 25 August 2017 - 06:42 PM

The last screen shot you uploaded the URL started with Bing.com/images.search. I was asking if they all started with that. I know you provided web addresses earlier (which I deleted) but I am wondering how it is behaving now, i.e. always Bing.com/images/search.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#25 NickS111

NickS111
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Local time:11:50 PM

Posted 26 August 2017 - 10:19 AM

Hi Gary,

 

I downloaded edge exe the files this morning.

 

The searches usually starts with bing as it is the designated search engine in firefox. Bing filter is turned to strict which usually holds. when using google or duckduckgo the filters would switch off as part of the image search. Bing has its limitations as well. If there is another search engine that is more robust with family filters I would love to find it.

 

I had another event occur 5pm. I posted it to link. Whats weird is my mobile/windows phone that wasnt connected to wifi but mobile data received a similar but more illiplicit pop. that phone has no filters. will be buying new phone soon. almost thinking that phone was door that caused all the home network problems as it was previously connected to wifi as well.

 

I am considering adding Mobicip to all devices.

 

thanks, Nick



#26 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,968 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:50 PM

Posted 26 August 2017 - 03:19 PM

I would like to test this to see if we can stop the pop ups on Firefox. Though it doesn't locate the cause, hopefully you won't get the pages anymore with this browser.
  • Download and install the BlockSite Add-on for Firefox
  • Once installed click Tools, Add-ons, then Extensions
  • Add bing.com/images and click OK
  • Test Firefox
Let me know what happens.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#27 NickS111

NickS111
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Local time:11:50 PM

Posted 28 August 2017 - 10:15 AM

Sure. I have added block site to Firefox on both the laptop and desktop. The laptop test worked and blocked images. The desktop had issues when tested. I will try again later today.

 

Thanks again for your help.

 

Any other thoughts on the cause?



#28 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,968 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:50 PM

Posted 28 August 2017 - 10:34 AM

Before merging the registry key did you still get the image searches when you tried to go to random web sites?

What issues did your desktop have? Were the images not blocked?
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#29 NickS111

NickS111
  • Topic Starter

  • Members
  • 55 posts
  • OFFLINE
  •  
  • Local time:11:50 PM

Posted 29 August 2017 - 12:46 PM

I haven't had the issues since merging registry keys. I may need to leave a webpage up to test.

 

The desktop didn't block bing images when tested after adding the add-on blocker. The laptop worked. I may need to refresh browser.



#30 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,968 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:10:50 PM

Posted 29 August 2017 - 01:00 PM

Let's just focus on the laptop for now.

Since this is an individual browser work around it will be necessary to do the same thing on all the browsers you want to use. What other browsers are you going to use besides Firefox and Edge?
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users