Two days ago, I used Taobao to buy the dictionary on my computer, and I only browsed it and did not place any further orders. I was downloaded the rogue software-Tmall 618 super carnival red envelope. And it starts automatically after a period of time.
So angry, so angry. Doesn't your conscience hurt when a company such as a certain treasure plays this kind of vagrant software? Not much to say is the liver: Ctrl+Alt+Delete to open the task manager.
As shown in the picture above, after browsing in the "Background Process", we found a very suspicious thing:
right click-"open the location of the file-"find it in the folder ↓At
this time, it is impossible to delete, because the program is still there. run. Then we find the red envelope icon in the taskbar just now, and right-click to exit.
Then try to delete, Shift+Delete (of course, if you are afraid of deleting your own things by mistake, don’t use the shift key). Sure enough, you can delete it!
But after using it for a period of time, the advertisement will come out. After checking some information (thanks to the comment area for pointing out), the four files involved in Sogou advertising are as follows (where to find the files, please continue to look down):
These files are also in the above folder. If you can't find the folder, you can find the following two processes in the task manager:
then right-click to view the file location and find the above four files (the Sogou input method tool corresponds to the file SGTool.exe, the cloud computing agent corresponds to SogouCloud.exe, and the rest of SGNews .exe is not running in the first place (the blogger's side should be turned off and self-starting ads) and ShowInfo.exe has been deleted above)
In order to confirm whether the deletion of these files will affect the use of the input method, you can first close the process and try to use the input method. feasible! Then delete the above four files. Get it done. According to the blogger's two days of observation, there are no more ads. Just like it if you help you, let's go!
(Note that the file involved in the case cannot be deleted if the process is not closed. Therefore, delete the process first and then delete the file)
If the above method still does not solve the problem, you can also modify the user account control settings:
Open the control panel-"User Account -" change user account control settings.
Enter the user account to find this:
Adjust the control level to the highest:
There is a problem with this method, that is, you open any software will pop up to ask for your opinion. A little troublesome. So we can also use the following method: Security software prohibits the above four rogues from running
Take Tinder as an example, select Access Control-"Program Execution Control-"Add Program -"
Program Execution Control Remember to turn on (the orange button on the right is turned on, and the gray state is off)
Here select "Select Program":
enter our previous search To the path, add the above four rogue softwares in turn (the ones that are basically blocked are SGTool.exe after testing. It is troublesome to add only this one). After adding, you can close the dialog box, make sure the orange button on the right is on, and close it directly. Dialog box.
After setting, you will often see such a pop-up box instead of Tmall ads:
Get it done! The control panel part is referenced from
Thanks again for the reminder in the comment area. Just like it if you help you, let's go!