Jump to content

Emsisoft blocks Spotlight update


Jaimie
 Share

Recommended Posts

Hi,

since I have installed Emsisoft Anti Malware I no longer receive updated Spotlight images for the lockscreen.
The same old pictures are used.
How did I check the root cause?
I deleted all spotlight images in the directory first.
Then set lockscreen setting from "windows spothlight" to a picture - worked.
Then set lockscreen setting to "Windows Spotlight" - no image appears.
Disabled EMSISOFT "surf protection" - new images appear. Of course I can't keep this setting.


As far as I understood spotlight images are based on daily images presented by the Bing search engine, so obviously this is blocked by EMSISOFT.
However... Bing.com itself is working perfectly well.

Any help aprecciated

Jaimie

Windows 10 Pro 64Bit, Emsisoft Anti Malware Licenced 36 months, latest update 53minutes ago

Link to comment
Share on other sites

Is there anything in the Surf Protection logs that might show what is being blocked? Just open Emsisoft Anti-Malware, click on Logs, and select Surf Protection from the menu at the top. There will be a button in the lower-left to Export the log and save it somewhere so that you can attach it to a post for me to review if you'd like.

Link to comment
Share on other sites

Interestingly, Surf Protection does not log anything, but I figured out something else...
If I deactivate surf protection, the directory which shall store the objects for the spotlight, I hope I looked up the right one, is populated by data, however spotlight doesn't display it. It defaults back to the last shown picture I had used.
 

Clipboard01.jpg

Link to comment
Share on other sites

I used the "resmon" to figure out which process starts acting on the network when I enable Spotlight.
It seems to be "BackgroundTransferHost.exe" transferring the pictures, however it does not always connects to the same address.
Sometimes it was 2.22.12.14, sometimes 104.124.128.119 - no fixed IP or hostname I could uadd to the whitelist :o:(.

As this drives me nuts, I also installed Emsisoft on my laptop.
Same WIndows W10 Pro Version (not german but english OS language ).
Here the spotlight is not being blocked by surf protection.

 


 

Link to comment
Share on other sites

On 2/11/2017 at 9:31 AM, Jaimie said:

Sometimes it was 2.22.12.14, sometimes 104.124.128.119 ...

Those are Akamai CDN addresses. Microsoft uses Akamai to host most of their content online since it's much cheaper than paying for the bandwidth themselves. The issue is that whatever domain name resolves to those IP addresses is in one of EAM's blocklists for the Surf Protection. I tried doing some reverse DNS lookups and checking on Shodan, but I wasn't able to find anything that was in our default Host Rules. The only Microsoft address that appears to be in our Host Rules at the moment is rad.microsoft.com, however this is a "Privacy risk" host, and these are not blocked by default. Did you turn on the option to block "Privacy risks" in the Surf Protection settings?

 

On 2/11/2017 at 9:31 AM, Jaimie said:

As this drives me nuts, I also installed Emsisoft on my laptop.
Same WIndows W10 Pro Version (not german but english OS language ).
Here the spotlight is not being blocked by surf protection.

Here are the most likely possibilities for why that is happening:

  • The Surf Protection was manually configured to block "Privacy risks" (this is set to "Don't block" by default).
  • The domain that is being resolved when Spotlight tries to load the graphics is in your custom Host Rules.
Link to comment
Share on other sites

I was told by at least one of our German employees that this did not happen in their testing on German editions of Windows 10. It's possible that there were other differences than just just the language. Perhaps they were different editions (Home, Professional, etc). It's also possible that one of them had been modified by the manufacturer to load the images from a different address.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...