疑問 - 灌了win7後網頁會出現三個廣告?

[latenight]

--------------------
閱讀本主題的最佳解答
--------------------


大大們好

小弟自從最近灌win7後瀏覽網頁不管用哪一種瀏覽軟體都會出現三個廣告(但常去的網站像FB卻不會有)
我灌的是海盜版(不到$1000)
是否跟這個有關或是有其他原因及解法?
想請教大家
謝謝

[a471]

沒有圖片輔助說明不太懂你的意思..

[latenight]

就是從網頁右下角及左下角會橫向插進來廣告圖案, 都要點掉比較麻煩, 謝謝

[不飛]

作者: latenight

就是從網頁右下角及左下角會橫向插進來廣告圖案, 都要點掉比較麻煩, 謝謝

跟版本無關，

但是跟您安裝的程式有關，被某個程式惡意綑綁瀏覽器網頁廣告。

請到所有瀏覽器內的工具，檢查所有的附加元件，

因為您沒有截圖說明，很難說明大概是哪一個程式。

[latenight]

請問如果要載圖上來說明需如何進行? 謝謝

[latenight]

如果你看到上傳圖面左邊有兩個打叉叉的圖示這些可能就是我所指的廣告 謝謝

http://i.imgur.com/VEs96OH.jpg

[getter]

迪西瀏覽某些網站也有那個東西 ... 迷你廣告小視窗 ...

有些不是在右下角或者是左下角。

有些採用計時的，時間到就會自動關閉或隱藏 ...

有些則是一直開著 ...

主要是看網站本身 ... 有的有 ... 有的則不會有 ...

有些是瀏覽器被植入廣靠程式 ...

看起來像是 Firefox 瀏覽器 ...

迪西的 Firefox、Opera、Google Chrome 瀏覽器，很乾淨沒有裝啥「擴充套件」只有必要的一兩種。

請參考中毒的 http://forum.slime.com.tw/thread208952.html 方式


至於左側的那個，看起來有點像是「側邊欄」的工具。有的是瀏覽器本身的功能，有些事擴充外掛。


可以試著先做
1.病毒、惡意軟體、廣告軟體的檢測看看。
2.只有瀏覽單一個網站看看。看看是不是某個網站出來的。
3.停用瀏覽器外掛工具列、擴充套件看看。
4.用看看別種瀏覽器看看有沒有
5.備份好原本瀏覽器的「書籤、最愛」後，到「控制台→程式集→程式和功能」，把瀏覽器移除掉重新安裝看看。

[leo2014]

作者: latenight

大大們好

小弟自從最近灌win7後瀏覽網頁不管用哪一種瀏覽軟體都會出現三個廣告(但常去的網站像FB卻不會有)
我灌的是海盜版(不到$1000)
是否跟這個有關或是有其他原因及解法?
想請教大家
謝謝

前幾天我也遇過相同問題, 解決方法如下:

網際網路選項 >進階 >重設 (IE)

[latenight]

先貼hijack this 報告給各位瞧瞧再說
謝謝

---
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at PM 03:27:17, on 07/23/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\Hewlett-Packard\HP UT\bin\hppusg.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\trolatunt\bin\trolatunt.BrowserAdapter.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Common Files\ACD Systems\ACDSeeMC.exe
D:\Downloads\Exe\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: trolatunt - {59bc35cc-f3cb-4e2b-a21d-481d781207af} - C:\Program Files (x86)\trolatunt\trolatuntbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HPUsageTracking] C:\Program Files (x86)\Hewlett-Packard\HP UT\bin\hppusg.exe "C:\Program Files (x86)\Hewlett-Packard\HP UT\"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe"
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: 匯出至 Microsoft Excel(&X) - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: 傳送至 OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: 傳送至 OneNote(E) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://web.r530.com
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {8E1D16E3-37B1-48B8-862E-9D646FC0C8FF} (TFBWebATM Control) - https://ebank.taipeifubon.com.tw/iba.../TFBWebATM.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{095AD5FC-F03F-4898-BACB-0F9FAD27DDF4}: NameServer = 61.31.233.1 61.31.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{095AD5FC-F03F-4898-BACB-0F9FAD27DDF4}: NameServer = 61.31.233.1 61.31.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{095AD5FC-F03F-4898-BACB-0F9FAD27DDF4}: NameServer = 61.31.233.1 61.31.1.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASP.NET 狀態服務 (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google更新 服務 (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google更新 服務 (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IePlugin Services (IePluginServices) - Cherished Technololgy LIMITED - C:\ProgramData\IePluginServices\PluginService.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - Sandboxie Holdings, LLC - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Update trolatunt - Unknown owner - C:\Program Files (x86)\trolatunt\updatetrolatunt.exe
O23 - Service: Util trolatunt - Unknown owner - C:\Program Files (x86)\trolatunt\bin\utiltrolatunt.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) - Fuyu LIMITED - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10803 bytes

[getter]

C:\Program Files (x86)\trolatunt\bin\trolatunt.BrowserAdapter.exe
O2 - BHO: trolatunt - {59bc35cc-f3cb-4e2b-a21d-481d781207af} - C:\Program Files (x86)\trolatunt\trolatuntbho.dll
O23 - Service: Update trolatunt - Unknown owner - C:\Program Files (x86)\trolatunt\updatetrolatunt.exe
O23 - Service: Util trolatunt - Unknown owner - C:\Program Files (x86)\trolatunt\bin\utiltrolatunt.exe

trolatunt 這一個很可疑 ... 根據股溝找到的原文翻譯


trolatunt

通過trolatunt應用trolatunt.browseradapter.exe被檢測為廣告軟件16反惡意軟件掃描。
它會插入到網頁瀏覽器，並覆蓋現有的廣告或通過各種網頁中插入新的顯示基於上下文的廣告。
它是Yontoo網絡的擴展，注入在瀏覽器中的廣告部分。


可以查查看「控制台→程式集→程式和功能」裡面有沒有「trolatunt」項目把他移除掉 ...

如果沒有的話 ... 就要找看看有沒有可用工具，如掃毒軟體、惡意軟體移除程式、廣告軟體移除程式 ...


剛好丹楓大大有發表一款 「AdwCleaner v3.216-解決瀏覽器首頁被綁架(QVO6 網頁綁架)、刪不掉的工具列、惡意廣告.. 等問題」

可以嘗試看看 ... 防毒最少也要裝一套 ... 如免費版的 avast free 減少中鏢的風險

Dr.Web CureIt!® 大蜘蛛免安裝手動掃毒工具 1

Dr.Web CureIt!® 大蜘蛛免安裝手動掃毒工具 2