0
mr-user
4y

I use a Windows 10 OS and the browser popup sometime (not always so it hard to debug) when I open my computer.

Does the browser goes to other website?No the browser just show default page.

Is it a malware?I always keep my update AV so I am not sure.

Comments
  • 3
    Try running Malwarebytes, and check your startup services and scheduled tasks manager for anything dodgy.
  • 3
    In addition to what @C0D4 said, you could try running simplewall for a while in whitelist mode and see what's trying to "get out".

    https://github.com/henrypp/...
  • 0
    @C0D4 I am already using the commercial AV so I am hesitant to switch with Malwarebytes. Thank for your advise.

    @Jilano Do you think it is because of Windows installshield? My AV already manage my firewall rule so I am going to try white listing.
  • 1
    @mr-user you can use both. Malwarebytes' free version runs on demand not real time, if your commercial AV has issues playing with others.
  • 0
    @C0D4 My AV don't play nice and it's run real time.

    I don't seem to lose any data lose and all the network traffic seem to be valid.

    I even does a Full Scan on my AV which take almost a day and no threat is found.

    The problem have been existing for a weeks and I am currently annoy enough to look into the problem.It probably safe to leave it without touching anything.

    Maybe it's also because I disable too much service (like Windows auto update) and all the Windows related service I don't need.
  • 1
    Fun Fact : The windows network service is disable when you force close Install Shield Update Service (ISUSPM.exe)(At least on my machine).
  • 0
    @mr-user No idea, honestly, but you can always look into it. Yeah, I suggested simplewall because I'm using it and quite like it, but if you already have something similar, go ahead!

    By the way, what AV solution are you using if I may? From my experience, the default one on W10 is sufficient as long as you're not installing everything you get from the Internet without checking.
  • 0
    @Jilano

    I am using "Kaspersky AV" I know it have a bad press lately but it's a good AV.

    I have to install stuff from the internet and also need to receive and copy stuff to the external USB drive which may be infected (don't ask about why I need plug infected USB device to my computer).
  • 2
    @mr-user kasperaky is fine for an AV. But that's what it is an Anti-Virus tool.

    Malwarebytes is designed specifically for malware, and since you have real time issues, you don't need the premium version, just download and run.

    https://www.malwarebytes.com/

    I run it once a week and it usually finds something, hell running it now and it's complaining MinerGate ( a bitcoin miner ) which I downloaded myself is a problem.

    Also, how did you go with the services and scheduled tasks?
  • 0
    @C0D4 I run Malwarebytes and it show me this scheduler task which I don't know whether it a side effect of some program.

    As a suspect the install shield show on malware bytes. I am not really sure if it a legit task or not.

    "Hijack.AutoConfigURL" "C:\WINDOWS\SYSTEM32\TASKS\InstallShield Update Service Scheduler"

    I mess around with the configurations too much and my system become too fragmented.
  • 1
    @mr-user install shield is a clunky windows service, it usually just eats more ram and cpu then it actually does any good.

    As for it being detected as an auto config hijacker leads me to believe it's not what you think it is anymore.

    Check this for some info, but ultimately if you haven't knowingly setup a proxy on your pc, click quarantine.

    https://blog.malwarebytes.com/detec...

    By the sounds of your pc being near unusable, it may be wise to do a clean install and start again.
  • 0
    @C0D4

    I agree Install Shield is a clunky windows service. Maybe I use the word "fragmented" too loosely. I mean I don't remember what changes I done to the system since it was a long time ago.

    The Kaspersky AV set up proxy.

    There is nothing wrong with the system performance wise. There's just a minor ignorance of browser something opening automatically when Windows start up. It is an ignorance that I can live with.
  • 2
    My windows 10 computer does the same thing, but it also automatically opens other programs that were open when I shut it down, like Word or Excel. It seems that's a feature of new windows updates, which can only be changed using registry mods or by closing all programs before shutting down your computer.

    https://bleepingcomputer.com/forums...
  • 0
    @guitargirl15

    That seem to be a problem. I am going to leave the feature on since I am not experiencing any significant problem.
  • 0
    Yep, windows 10 has tried to open some applications you had open when you left since forever.
Add Comment