Edge MSN 劫持 - V2EX
V2EX = way to explore
V2EX 是一个关于分享和探索的地方
Sign Up Now
For Existing Member  Sign In
Corco
V2EX    Edge

Edge MSN 劫持

  •  1
     
  •   Corco Jan 13, 2024 2896 views
    This topic created in 837 days ago, the information mentioned may be changed or developed.
    今天突然发现打开 Edge 启动页会自动跳转 https://ntp.msn.cn/edge/ntp
    发现每次开机启动了本地服务 localhost:端口随机 然后 edge 启动时访问该服务
    该服务与 System 进程有关,该进程又与 10 号更新的 C:\Windows\System32\ntoskrnl.exe 有关
    目前没有找到修改 MSN 启动页的方法,如果是微软更新导致的,和流氓软件又有什么区别
    10 replies    2024-02-01 08:56:46 +08:00
    Corco
        2
    Corco  
    OP
       Jan 13, 2024
    @gentrydeng 感谢,我试一下
    Qusic
        3
    Qusic  
       Jan 13, 2024 via iPhone
    Corco
        4
    Corco  
    OP
       Jan 14, 2024
    目前权宜之计就是用联想电脑管家把起始页强行锁成 duckduckgo
    Zho
        5
    Zho  
       Jan 21, 2024
    我也今天遇到了,微软真流氓
    Zho
        6
    Zho  
       Jan 21, 2024   1
    感觉是联想电脑管家的 bug ,启动时 edge 打开的 localhost:随机端口 会被 redirect 到联想电脑管家里锁定的网页,就算关闭锁定也会启动本地的服务,锁定时扫描端口如下:
    PORT STATE SERVICE VERSION

    54769/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)

    |_http-server-header: Microsoft-HTTPAPI/2.0

    |_http-title: Did not follow redirect to https://discovery.lenovo.com.cn/home/lenovo/v1/c3

    | http-methods:

    |_ Supported Methods: GET HEAD POST OPTIONS

    Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port

    Device type: general purpose

    Running: Microsoft Windows 10

    OS CPE: cpe:/o:microsoft:windows_10:1607

    OS details: Microsoft Windows 10 1607

    Uptime guess: 0.009 days (since Sun Jan 21 14:29:56 2024)

    Network Distance: 0 hops

    TCP Sequence Prediction: Difficulty=260 (Good luck!)

    IP ID Sequence Generation: Incremental

    Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
    WAHSUN
        7
    WAHSUN  
       Jan 26, 2024
    微软的确流氓,我一直用 Ecosia 做为默认搜索引擎,现在 Edge 强制劫持到 bing.com 了,害德我只能用 DuckDuckGO.
    yeyuanxinyi
        8
    yeyuanxinyi  
       Jan 30, 2024   1
    初步感觉是联想电脑管家引起的,我试着卸载了联想电脑管家就恢复正常,现在初步解决就是锁定或者卸载联想电脑管家
    zhaomma
        9
    zhaomma  
       Jan 31, 2024   1
    看到个办法,把快捷方式目标中 msedge.exe 改成 msedge_proxy.exe 就不会被防护发现跳转了。
    Corco
        10
    Corco  
    OP
       Feb 1, 2024
    @zhaomma 感谢,方法有效
    About     Help     Advertise     Blog     API     FAQ     Solana     1094 Online   Highest 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 61ms UTC 18:30 PVG 02:30 LAX 11:30 JFK 14:30
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86