2024/02/21

電腦登入後都會啟動一個程式Bright Data

下載格式工廠來做一些影片轉檔時,發現電腦右下角工具列,多了一個程式"Bright data",不知是什麼東西。



每次登入電腦就會啟動,在windows啟動列表中,卻找不到這個項目,電腦的程式安裝清單內也沒有。

查了一下才發現這是做網路代理的程式,但被被不肖份子濫用,使個人設備成為攻擊跳板。

https://www.cc.ntu.edu.tw/chinese/cert/cert20230815.asp  這個網頁有提供移除方法。

簡單的說就是用Autoruns.exe或procexp.exe去找搜尋net_updater64.exe、net_updater32.exe及brightdata.exe或服務Brightdata Service是否持續運行,找到就把這個程式刪除。


When downloading Format Factory to perform some video conversions, I noticed a program called "Bright data" appearing in the toolbar at the bottom right corner of my computer screen. I was unsure what it was.


Every time I logged into my computer, it would start up, but I couldn't find it in the Windows startup list, nor was it listed in the installed programs on my computer.


After some investigation, I discovered that it's a program used for internet proxies, but it has been abused by malicious actors, turning personal devices into attack proxies.


This webpage (https://www.cc.ntu.edu.tw/chinese/cert/cert20230815.asp) provides a method for removing it.


In short, you can use Autoruns.exe or procexp.exe to search for net_updater64.exe, net_updater32.exe, and brightdata.exe, or check if the Brightdata Service is continuously running. Once found, you can delete the program.

沒有留言:

張貼留言