Solution to poisoning (http://www.xn -- ******. com)

I guess it is one of the few people who are currently poisoned. Because I search Google and Baidu, the keyword is www. XN --, http://www.xn --, xn --, the results are almost a few of the problems related to poisoning, there are a few people in foreign recruitment, that is, in these two days (Google can search for some ).

 

So I guess there are only a few tricks in China, or I have not found a solution like me. Let me put it simply.

 

Symptoms:

 

December 2, My IE, Firefox, chorme will pop up in a different form, the address is http://www.xn--qck8833a.com/or http: // XN -- qck8833a/, ie even pop up a blank window. In fact, this website cannot be opened on any web page, at least for me. Qck8833a is just a string on my machine. Different machines display different characters. The common difference is "XN --".

 

No cause can be found through hijackthis, 360, icesword, McAfee, registry, key startup directory, and other methods. No suspicious processes or programs exist.

 

I searched for "XN -- qck8833a" through the search engine, and there was no result at all. Later I went through "XN --", "www. XN -- "," http://www.xn -- "returns some results.

 

Finally, the Mozilla Forum shows a solution.
. Some people are said to have reported to McAfee. McAfee said it was a new virus and is being resolved... Khan...

 

Solution:

 

Download a tool: combofix

Address: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

 

You may need to disable the anti-virus tool. Let combofix perform all the processes step by step, which will wait for a period of time, including restarting and so on.

Generally, the problem can be solved.

 

Later, I checked the combofix on the Internet, and the comments were quite good. It seems that this tool is unknown. If you are interested, follow up.