MicrosoftEdgeCP.exe WEBSITE POPUPS - Malvertising - Outbound Connection

[BlueyA]

I'm getting alot of pop ups, when on websites that are 100% safe like last.fm or myanimelist.net. Please help me, thank you!

Malware bytes detects it and blocks the pop up and tells me it comes from "File: C:\Windows\System32\MicrosoftEdgeCP.exe" but this keeps happening every minute or so.

*Logs for the popups and scans below* ( also weird thing is i installed adwcleaner but its magically disappeared! after i done a scan using it! )

I followed this guide correctly (screenshotted below)  but it did not get rid of this problem.  

 

I installed malware bytes and enabled the PUP detection and scanned but no malware or viruses appeared, malware bytes said all files are okay but everytime i browse the web malwarebytes says this (screenshotted below)

I want to get rid of this problem and its very annoying and has left me fustrated, in fact I'll soon be buying malwarebytes!

Here are logs :

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 8/6/19
Protection Event Time: 8:40 PM
Log File: 1bdb321a-b882-11e9-885a-a860b625217b.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.613
Update Package Version: 1.0.11888
License: Trial

-System Information-
OS: Windows 10 (Build 18362.30)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Malvertising
Domain: badskies.com
IP Address: 198.134.112.244
Port: [53901]
Type: Outbound
File: C:\Windows\System32\MicrosoftEdgeCP.exe

(end)

LOG 2 :

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 8/7/19
Protection Event Time: 12:30 AM
Log File: 25a5586f-b8a2-11e9-a90f-a860b625217b.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.613
Update Package Version: 1.0.11890
License: Trial

-System Information-
OS: Windows 10 (Build 18362.30)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Malvertising
Domain: mse2v5oglm.com
IP Address: 198.134.112.244
Port: [50149]
Type: Outbound
File: C:\Windows\System32\MicrosoftEdgeCP.exe

(end)

 

LOG 3 :

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 8/7/19
Protection Event Time: 12:30 AM
Log File: 2b925240-b8a2-11e9-90fa-a860b625217b.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.613
Update Package Version: 1.0.11890
License: Trial

-System Information-
OS: Windows 10 (Build 18362.30)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Malvertising
Domain: ouh3igaeb.com
IP Address: 198.134.112.243
Port: [50224]
Type: Outbound
File: C:\Windows\System32\MicrosoftEdgeCP.exe

(end)

*SCAN LOG*

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 8/6/19
Scan Time: 9:51 PM
Log File: 030cc550-b88c-11e9-bdd0-a860b625217b.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.613
Update Package Version: 1.0.11890
License: Trial

-System Information-
OS: Windows 10 (Build 18362.30)
CPU: x64
File System: NTFS
User: DESKTOP-A\hotch

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 286758
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 5 min, 5 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

 

 

 

 

 

 

[BlueyA]

that screenshot at the bottom is of a solution i found on microsofts website which i followed and i can 100% confirm i did the commands and they did work but the problem did not go away, i still get those pop ups

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Check this out.

Edge Syncing.
If the problem persists and you are Syncing Edge with other devices reset it.

https://www.tenforums.com/tutorials/36286-turn-off-sync-favorites-reading-list-microsoft-edge.html
===

If the problem is not solved, execute these instructions.

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Choose a File.
Navigate to the location of the File.
Click the file. It will appear in section.
Click the Saving button.

Wait for further instructions
====

 

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks