{"id":8404,"date":"2018-09-11T14:17:57","date_gmt":"2018-09-11T14:17:57","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=8404"},"modified":"2018-09-12T06:14:05","modified_gmt":"2018-09-12T06:14:05","slug":"whats-hiding-behind-bing-ads","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/whats-hiding-behind-bing-ads\/","title":{"rendered":"What&#8217;s Hiding Behind Bing&#8217;s Ads?"},"content":{"rendered":"<p>Something that always bugged me is some of the content promoted by search engine ads. I&#8217;m talking about the ads that appear at the top of the search results. Here&#8217;s an example where I search for &#8220;<strong>download firefox<\/strong>&#8221; on the <strong>Bing<\/strong> search engine:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/download-firefox-bing-search.png\"><img loading=\"lazy\" class=\"alignnone wp-image-8407 size-medium\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/download-firefox-bing-search-300x280.png\" alt=\"\" width=\"300\" height=\"280\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/download-firefox-bing-search-300x280.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/download-firefox-bing-search-768x716.png 768w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/download-firefox-bing-search-1024x955.png 1024w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/download-firefox-bing-search.png 1238w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>The first four items above the fold are ads. Let&#8217;s click on the first ad (fir.updatechecker.club).<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/50-sek-sms.png\"><img loading=\"lazy\" class=\"alignnone wp-image-8408 size-medium\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/50-sek-sms-300x229.png\" alt=\"\" width=\"300\" height=\"229\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/50-sek-sms-300x229.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/50-sek-sms-768x587.png 768w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/50-sek-sms-1024x782.png 1024w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/50-sek-sms.png 1236w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>The fir.updatechecker.club\u00a0web site shows a faked Windows GUI pretending to be the Firefox Installer (built inside the browser&#8217;s viewport) and they want me to <strong>pay 50 SEK to install the free Mozilla Firefox browser<\/strong> by sending an SMS! The fact that 50 SEK is charged when sending the SMS appears with a small font in grey in the lower left corner. When refusing to pay 50 SEK I get an <a href=\"\/library\/file\/UpdateChecker_1132258080.exe-285318\/\">setup file<\/a>, which is detected by many of the security scanners:<\/p>\n<p><a href=\"\/library\/file\/UpdateChecker_1132258080.exe-285318\/\"><img loading=\"lazy\" class=\"alignnone wp-image-8409 size-medium\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/UpdateChecker.exe-scan-result-300x200.png\" alt=\"\" width=\"300\" height=\"200\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/UpdateChecker.exe-scan-result-300x200.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/UpdateChecker.exe-scan-result-768x512.png 768w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/UpdateChecker.exe-scan-result-1024x683.png 1024w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/UpdateChecker.exe-scan-result.png 1438w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>The installer appears to be build using <strong>InstallCore<\/strong> and shows a sponsored offer to install <strong>Avast AntiVirus<\/strong>, which I declined. (Though it would be interesting to see if Avast would go ahead and remove the bundler. As you can see in the scan result above, Avast is detecting the installer file, giving it the detection name &#8220;FileRepMalware [PUP]&#8221;).<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/installcore-avast.png\"><img loading=\"lazy\" class=\"alignnone size-large wp-image-8406\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/installcore-avast-1024x681.png\" alt=\"\" width=\"604\" height=\"402\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/installcore-avast-1024x681.png 1024w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/installcore-avast-300x200.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/installcore-avast-768x511.png 768w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/installcore-avast.png 1745w\" sizes=\"(max-width: 604px) 100vw, 604px\" \/><\/a><\/p>\n<p>The installer file also installs a piece of software called <a href=\"\/library\/file\/Update%20Checker.exe-285319\/\">UpdateChecker<\/a>:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/update-checker.png\"><img loading=\"lazy\" class=\"alignnone size-large wp-image-8405\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/update-checker-1024x492.png\" alt=\"\" width=\"604\" height=\"290\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/update-checker-1024x492.png 1024w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/update-checker-300x144.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/update-checker-768x369.png 768w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2018\/09\/update-checker.png 1260w\" sizes=\"(max-width: 604px) 100vw, 604px\" \/><\/a><\/p>\n<p>Should Bing block these ads? What do you think?<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Something that always bugged me is some of the content promoted by search engine ads. I&#8217;m talking about the ads that appear at the top of the search results. Here&#8217;s an example where I search for &#8220;download firefox&#8221; on the Bing search engine: The first four items above the fold are ads. Let&#8217;s click on &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/whats-hiding-behind-bing-ads\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">What&#8217;s Hiding Behind Bing&#8217;s Ads?<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[178,221],"tags":[915,914,104,916],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/8404"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=8404"}],"version-history":[{"count":6,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/8404\/revisions"}],"predecessor-version":[{"id":8417,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/8404\/revisions\/8417"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=8404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=8404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=8404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}