I would appreciate any help I can get. I have recently been "spammed" by a third party (so says MS)

  • 26 March 2015
  • 1 reply
  • 24 views

The Bing "home page" simply appears---full screen.  It is random.  I can be in the middle of writing an email, a search---whatever.  I have removed a couple of small downloads my wife recently activated for coupons redemption.  That did not stop the problem.  I have run several Webroot full scans.  Once, and only once, a "threat" was discovered.  I authorized threat removal.  That began, proceded normally, and then froze about 90% into the process. 20 minutes later,  I had to unplug the system to shut it down and reboot.  The next scan was normal---showing no threats.  Within an hour, I was receiving the same Bing intrusive homepage.
 
I'm an old guy, not nearly as teched up as most of you are..............but does anyone have any suggestions?
 
Thanks in advance.

1 reply

Userlevel 7
Badge +62
Hello Dodiboy,
 
Welcome to the Community Forum,
 
if your computer is infected with adware or PUAs that not only display ads but also hijack new tab pages then you will see a new page with search results by Bing. Scammers use this well know search engine in order to look as legit as possible. The problem is that users usually blame Microsoft and Bing for hijacking their browsers which is not true. Your computer is infected with malware that loads search results from Bing.
 
What you are seeing and describing sounds like it may be what we on the Community refer to as a PUA. (Potentially Unwanted Application) These are very annoying at best in that they cause pop-us, redirect your browser home page, and other behavior that may slow down the computer and direct ads your way, but they are not actually doing anything bad like damaging files or stealing information. Often they are installed intentionally by you the user as browser add-ons for various tasks such as quick search tools.. but they also come with the result of added annoying pop-ups and ads. Other times they 'piggy back' with other software that you installed, or try to 'sneak' onto your system entirely.
 
WSA does detect and remove many PUA's, and more are being added, but WSA does not detect all of them. A simple browser add-on with PUA behavior that is easy to identify and easy to remove is not likely to be detected and removed by WSA. Those that are intentionally difficult to locate and remove are. Please see THIS LINK for more information regarding Webroot's stance on these annoying programs.
 
For those that are not detected by WSA, please see this KB Article. It has some easy to follow directions on locating and removing PUA's.
When in the Control Panel Add/Remove Programs or the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and remove Search Protect by conduit, Yontoo, Conduit Toolbar, Search Protect LLC and any other recently installed application. Look for Conduit associated applications and uninstall them. For example, if you recently installed video converter or music player or any other application and got the Search.conduit.com browser hijacker, then there's a good chance it came with one of those applications. Conduit won't be listed, so you have to remove associated applications. Also check your browser for add ons and extensions and get rid of them.
 
You may also want to submit a Trouble Ticket, especially if you cannot remove it easily from the directions in the KB Article.
 
For those that ARE detected by WSA, but cannot be removed automatically, you can submit a Trouble Ticket.  Webroot Support will help you get these annoying 'crapware' off your computer at no extra charge, and the additional examples may help to better automatic removal of that particular PUA for all users in the future.
 
 
Hope this overly long reply can help resolve your concerns and if you need more quidance then please get back to us.
 
 
Best Regards,

Reply