This exact thing happened to my brother once. They took his laptop and did Windows Explorer searches for image extensions as well as the words "boy" and "girl", so your (and his) hunch that they were searching for child porn is probably correct. This was maybe 5 years ago.