如何判断某推广页面是哪个 Chrome 扩展弹出的? - V2EX
V2EX = way to explore
V2EX 是一个关于分享和探索的地方
Sign Up Now
For Existing Member  Sign In
TRIKING

如何判断某推广页面是哪个 Chrome 扩展弹出的?

  •  
  •   TRIKING Jun 25, 2018 4740 views
    This topic created in 2865 days ago, the information mentioned may be changed or developed.

    最近 Chrome 时不时会弹出下图所示的推广网页,因为我安装了 80 多个扩展(都是官方渠道),实在难以排查,所以请问有什么方法能快速定位恶意扩展吗?

    Supplement 1    Jun 25, 2018

    感谢各位帮助,目前已经确定是「Fatkun图片批量下载」扩展搞的鬼,具体推广代码在 Chrome 扩展程序文件夹的 nnjjahlikiabnchcpehcpkdeckfgnohf/js/background.js 文件中。

    17 replies    2018-06-25 16:07:40 +08:00
    iTakeo
        1
    iTakeo  
       Jun 25, 2018 via iPhone
    80 个扩展,666,不卡吗?
    h4wklee
        2
    h4wklee  
       Jun 25, 2018
    2 分法?
    RicardoM
        3
    RicardoM  
       Jun 25, 2018
    今天早上刚弹
    x86
        4
    x86  
       Jun 25, 2018
    大厂优先排除或最后检测
    Luckyray
        5
    Luckyray  
       Jun 25, 2018   1
    chrome 的 debug 功能里有针对页面元素被修改时触发的断点,应该能定位到相应的 js。
    crab
        6
    crab  
       Jun 25, 2018   2
    定位到插件文件夹下,搜索该文件夹字符串,字符串内容按域名名称。
    also24
        7
    also24  
       Jun 25, 2018   1
    torbrowserbridge
        8
    torbrowserbridge  
       Jun 25, 2018
    一个一个禁用看看
    leafleave
        9
    leafleave  
       Jun 25, 2018 via iPhone   1
    F12 在 source 还是元素页面可以看到元素加载的来源,看到 chrome 协议开头的就是
    TRIKING
        10
    TRIKING  
    OP
       Jun 25, 2018   1
    @also24 就是它,相关代码在 `background.js` 文件中,搜索域名就能找到
    TRIKING
        11
    TRIKING  
    OP
       Jun 25, 2018
    @RicardoM 是「 Fatkun 图片批量下载」这个扩展动的手脚,看我首楼补充内容
    Kobayashi
        12
    Kobayashi  
       Jun 25, 2018 via Android
    我也是这个扩展弹页面,但是弹出来的是另外一个扩展安装页面,就是这个云图的扩展 Picloud。
    RicardoM
        13
    RicardoM  
       Jun 25, 2018
    @TRIKING #11 感谢,已经很久没用过这个扩展了,正好删了它
    otakustay
        14
    otakustay  
       Jun 25, 2018
    @RicardoM 请先举报一下再删
    RicardoM
        15
    RicardoM  
       Jun 25, 2018
    @otakustay #14 嗯,已经举报了
    xspoco     16
    xspoco  
       Jun 25, 2018
    t/279692 举报了好像并没有什么卵用
    Servo
        17
    Servo  
       Jun 25, 2018 via Android
    交钱就能通过审核的。
    About     Help     Advertise     Blog     API     FAQ     Solana     2988 Online   Highest 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 56ms UTC 14:53 PVG 22:53 LAX 07:53 JFK 10:53
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86