瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 有关顽固性弹出Cid广告的求助[附日志](已搜索多种解决方法,均无效)

1   1  /  1  页   跳转

[求助] 有关顽固性弹出Cid广告的求助[附日志](已搜索多种解决方法,均无效)

有关顽固性弹出Cid广告的求助[附日志](已搜索多种解决方法,均无效)

一有问题我都到这里求助,每次都能得到各位实习生、版主和高手们的帮助,在此多谢啦!

  我遇到的新问题是:电脑联网后,不时弹出以Cid:http://~~~~~~~~~ 为标题的广告,一般俗称为“CId广告”。

  经查,此种情况在台湾地区所见较多,欧美地区也有出现。但大陆地区尚不多,也未有较好的解决办法。

  目前,台湾地区一般认为是一个木马广告程序,有的认为是与安装了messager  plus!有关。不过我试验了其中几种方法,都与我的实际情况不一样。

    我自己已经实验了瑞星安全模式查杀、卡卡助手、360等,仍无法解决。

    一个细节是,我发现在“添加删除程序中”多了一个“cid Help”的程序,我已经删除。但仍有广告弹出。以此为线索,我又搜索到了一个解决办法,引用如下:

1, To remove CiD Help, go to Start–>Settings–>Control Panel–> Add and Remove Programs, then select CiD Help, click remove.

2, Open Internet Explorer go to Tools–>Intenet Options–> General tab–>Browser history–>Delete–>Temporary Internet Files–>Delete.

3, Open “C:\Documents and Settings\All Users\Application Data” folder, search for folders have exe extension file. Delete the folder

4, Use your Windows Explorer, navigate to C:\WINDOWS\system32\drivers\etc, use a text editor to remove the following entries from the hosts file:


QUOTE:
127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1
www.drivecleaner.com ## added by CiD
127.0.0.1
www.errorprotector.com ## added by CiD
127.0.0.1
www.errorsafe.com ## added by CiD
127.0.0.1
www.systemdoctor.com ## added by CiD
127.0.0.1
www.utils.winfixer.com ## added by CiD
127.0.0.1
www.win-anti-virus-pro.com ## added by CiD
127.0.0.1
www.win-virus-pro.com ## added by CiD
127.0.0.1
www.winantispam.com ## added by CiD
127.0.0.1
www.winantispy.com ## added by CiD
127.0.0.1
www.winantispyware.com ## added by CiD
127.0.0.1
www.winantivirus.com ## added by CiD
127.0.0.1
www.winantiviruspro.com ## added by CiD
127.0.0.1
www.windrivecleaner.com ## added by CiD
127.0.0.1
www.windrivesafe.com ## added by CiD
127.0.0.1
www.winfixer.com ## added by CiD
127.0.0.1
www.winfixer2006.com ## added by CiD
127.0.0.1
www.winsoftware.com ## added by CiD



  这个方法的前几步我都作了,好像就剩下最后的编辑hosts文件了。

  因此,请各位大xxx下,说说如何解决。

  附上日志。

用户系统信息:Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; MAXTHON 2.0)

附件附件:

文件名:SREngLOG.log
下载次数:134
文件类型:application/octet-stream
文件大小:
上传时间:2009-9-17 20:26:08
描述:log

分享到:
gototop
 

回复:有关顽固性弹出Cid广告的求助[附日志](已搜索多种解决方法,均无效)

用卡卡上网安全助手检测恶意和流氓软件。

c:\windows\system32\qconsvc.exe 这个进程比较可疑,结束进程后把他提交到可疑文件交流区分析。
gototop
 

回复: 有关顽固性弹出Cid广告的求助[附日志](已搜索多种解决方法,均无效)



引用:
原帖由 Fabregas 于 2009-9-17 21:09:00 发表
用卡卡上网安全助手检测恶意和流氓软件。

c:\windows\system32\qconsvc.exe 这个进程比较可疑,结束进程后把他提交到可疑文件交流区分析。


qconsvc.exe是IBM Thinkpad笔记本电脑相关程序
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT