Aide msftconnecttest
WilliamJK
-
WilliamJK -
WilliamJK -
Hello,
Recently, a Windows window (open with) appeared, asking me which browser to use to open a page. I naturally chose Google Chrome, and after that, I was directed to Http://www.msftconnecttest.com, which redirected me to another page: https://www.msn.com/fr-fr/?ocid=wispr&pc=u477.
I checked on Google, and it's neither known nor resolved by others, and some say it's a virus.
Why is this happening, and why now?
Is this known or serious? Can someone reassure me?
William
Recently, a Windows window (open with) appeared, asking me which browser to use to open a page. I naturally chose Google Chrome, and after that, I was directed to Http://www.msftconnecttest.com, which redirected me to another page: https://www.msn.com/fr-fr/?ocid=wispr&pc=u477.
I checked on Google, and it's neither known nor resolved by others, and some say it's a virus.
Why is this happening, and why now?
Is this known or serious? Can someone reassure me?
William
1 answer
Hello,
This happens when there is a network problem. Do you have a proxy on this PC?
See here: https://docs.microsoft.com/fr-fr/troubleshoot/windows-client/networking/internet-explorer-edge-open-connect-corporate-public-network
--------------
We can check the PC:
--> For a 32-bit system
--> For a 64-bit system
How to find out which 32-bit or 64-bit version is running on my system?
--> Wait for your browser to offer the download to save, without clicking anywhere, especially not on the sponsors of the page.
--> Close all applications, including your browser
--> Double-click on FRST.exe and click Yes to accept the Disclaimer
--> On Vista, Windows 7 / 8 and 10, you need to launch the file by right-clicking -> Run as administrator
--> Wait for it to indicate The tool is ready to run
--> On the main menu, click on Scan and wait for the analysis to complete
--> At the end of the scan, the FRST.txt and Addition.txt reports are created. Post these reports in your next response.
--> The reports are saved in the same location as the tool and under C:\FRST\Logs
--> The SmartScreen filter may trigger an alert. Click on Actions or More info and then Run anyway
---------------------------------------------------------------------------------------------
The reports FRST.txt and Addition.txt are expected
All reports must be hosted on https://security-x.fr/up/ and you indicate the links obtained in your response
--
Security contributor.
This happens when there is a network problem. Do you have a proxy on this PC?
See here: https://docs.microsoft.com/fr-fr/troubleshoot/windows-client/networking/internet-explorer-edge-open-connect-corporate-public-network
In some cases, for example when you connect to a network that uses a proxy server to access the Internet or when network restrictions prevent NCSI from completing its active probe process, Windows opens the MSN portal page in the default browser. If you analyze a network trace on the computer, an HTTP connection to this page is followed by a connection to the MSN portal at https://www.msn.com/fr-fr/?ocid=wispr&pc=u477. Windows opens this page to benefit from the passive probe process. If the page loads, NCSI concludes that the computer has Internet access.
--------------
We can check the PC:
Read the entire procedure carefully before posting the reports
--> Download the FRST version of Farbar, compatible with your system and save the file on your Desktop--> For a 32-bit system
--> For a 64-bit system
How to find out which 32-bit or 64-bit version is running on my system?
--> Wait for your browser to offer the download to save, without clicking anywhere, especially not on the sponsors of the page.
--> Close all applications, including your browser
--> Double-click on FRST.exe and click Yes to accept the Disclaimer
--> On Vista, Windows 7 / 8 and 10, you need to launch the file by right-clicking -> Run as administrator
--> Wait for it to indicate The tool is ready to run
--> On the main menu, click on Scan and wait for the analysis to complete
--> At the end of the scan, the FRST.txt and Addition.txt reports are created. Post these reports in your next response.
--> The reports are saved in the same location as the tool and under C:\FRST\Logs
--> The SmartScreen filter may trigger an alert. Click on Actions or More info and then Run anyway
---------------------------------------------------------------------------------------------
The reports FRST.txt and Addition.txt are expected
All reports must be hosted on https://security-x.fr/up/ and you indicate the links obtained in your response
--
Security contributor.
So if I understand correctly, this is normal?
But understand my concern with all the things I've read online.
And also why is this still happening today?
How can I tell if I have a proxy?
Why wouldn't a simple data scan or antivirus be sufficient?