|
| | | 
New Member
Group: Forum Members
Last Login: 5/22/2008 1:30 PM
Posts: 24, Visits: 37 |
| | Hi recently I have been getting a load of popups with CiD: prefixing them. The sites that popup are not particulalry harmful, but it is annoying. I carried out a full AVG and F-secure online scans and cleared out loads of stuff, but the popups are still appearing. Any help would be appreciated. |
| |
| | | 
Senior Forum Moderator
Group: Moderators
Last Login: 8/9/2008 10:14 AM
Posts: 28,406, Visits: 54,734 |
| Welcome fatty
Download Trend Micro HijackThis 2.0.2 to your desktop:
Double click on HJTInstall.exe,it will prompt you to extract hijackthis.exe to C:\Program Files\Trend Micro\HijackThis.
When the install is complete,HijackThis will automatically launch.
When the license agreement appears,select "I Accept" and then click on the "Do a system scan only" button.
When the scan is complete,click on the "Save Log" button,then save it to your desktop.
Copy and paste the entire contents of that log into a new topic in the HijackThis Logs forum, not here.
After posting the log you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised.
Doing so can result in system changes which may not show it the log you already posted.
Further, any modifications you make may cause confusion and could complicate any/the malware removal process.
________________________________________
ASAP & UNITE member since 2006
|
| |
| | |
New Member
Group: Forum Members
Last Login: 5/22/2008 1:30 PM
Posts: 24, Visits: 37 |
| | Thanks, I have posted the log under the same topic as this one. |
| |
| | | New Member
Group: Forum Members
Last Login: 3/17/2007 7:58 AM
Posts: 1, Visits: 1 |
| | Edit the following file: c:\windows\system32\drivers\etc\hosts (The file does not have an extension). You will see a bunch of the following types of entries: 127.0.0.1 bin.errorprotector.com ## added by CiD Either remove them or put a number sign (#) before them like this: #127.0.0.1 bin.errorprotector.com ## added by CiD I then added the following line to the file: 127.0.0.1 localhost I no longer get the CiD pop ups. |
| |
| | |
Senior Forum Moderator
Group: Moderators
Last Login: 8/9/2008 10:14 AM
Posts: 28,406, Visits: 54,734 |
| Hmm,nice twinsears, but you're not removing the root cause of the problem via Add/Remove Programs,and the Lop infection.
________________________________________
ASAP & UNITE member since 2006
|
| |
| | | New Member
Group: Forum Members
Last Login: 10/16/2007 9:49 PM
Posts: 1, Visits: 2 |
| | |
| | | New Member
Group: Forum Members
Last Login: 1/8/2008 5:24 AM
Posts: 1, Visits: 5 |
| hello fatty,
It is possible that you got "Lop" infection, which keeps displaying popups using Internet Explorer. CiD Popup is annoying and insecure object, so it has to be removed as soon as possible.
Manual CiD Popup removal can be complicated as infection can be found under random file names!
rilke in da house |
| |
| | | 
Forum Moderator
Group: Moderators
Last Login: 8/8/2008 6:28 AM
Posts: 2,759, Visits: 7,025 |
| Hello rilke
If you look at the date of this thread you will see that fatty's issue was resolved months ago (3/4/2007) by RichieUK.
Cid pop ups are a common symptom related to the LOP infection.
__________________________________________
"THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security  |
| |
| | | |
|
