cidaemon

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

I have been experiencing this problem for a while.

Did not want to disable indexing because it is a valuable service and thought that there must be something else to it other than just some buggy s/ware from MS.

The problems are directly linked to a very malicious set of spyware products which constantly changes their name/s. A previous post in this forum has alluded to this and also mentioned that there are irritating pop-ups of programs that warn of a compromised system and offers to repair it for you. It is a rogue antivirus producer that infects your machine and then offers to disinfect at a price while masquerading as the "good guy".

The names associated so far are "WinAntiVirus", "SmitFraud", "SystemDoctor" and several others. I have been trying for 2 days straight to remove all of them to no avail.

The trojan seems to hijack the cidaemon process and it then generates the .tmp files being discussed. Spybot SD finds the problems, removes their references from the registry, but they return as soon as the machine is restarted or after some time.

I am still trying to resolve this.

I hope somebody else has dug deeper than merely recommending switching the indexing off, because this seems to be one of the nastiest trojans I have encountered yet.

Please tell me if anyone recognises this as a more accurate picture of this problem or am I experiencing something completely different to all of you.

Interestingly, the first reports of the WinAntivirus problem seems to have surfaced in discussions in multiple forums around May 2006 when the first set of posts happened in this forum. Solutions to some of the discussions traced in Google takes you to a new set of solutions by equally insidious rogue antivirus producers.

Looking forward to the responses.

Sean

I use Microsoft Flight Simulator and have recently upgraded from fs2004 to FSX. I have been having terrible trouble with the programme hesitating and stuttering along, I have stopped certain actions using the task manager and the one programme to make an immediate difference was cidaemon.exe. When I removed it everything ran smoothly but it came back within minutes. I knew when it came back because it started stuttering again.I am going to try and disable it using some of the info I have gleaned I will let you know whether it works and thanks 4 the help Neil Birch

I use Microsoft Flight Simulator and have recently upgraded from fs2004 to FSX. I have been having terrible trouble with the programme hesitating and stuttering along, I have stopped certain actions using the task manager and the one programme to make an immediate difference was cidaemon.exe. When I removed it everything ran smoothly but it came back within minutes. I knew when it came back because it started stuttering again.I am going to try and disable it using some of the info I have gleaned I will let you know whether it works and thanks 4 the help Neil Birch

Yes it does make a difference because the flight simulator started jerking again, looked in task manage daemon was back again.Disabled it and everything ran smoothly again.Neilb

This is the solution!!!
====>Control Panel
====>Administrative Tools
====>Services
====>Indexing Service, Open
====>Startup type ====> Manual
====>Stop
====>OK
Enjoy ;)
Alejowin

im going thru this solution.

but where did the cidaemon go?

How in the heck do I disable cidaemon? I see all kinds of comments about it but nothing I see tells me what to do about it.

I realize cidaemon.exe is a Windows indexing service but if I sort the process list by name there are 2 of them. One of them takes a non-trivial amount of CPU time when I leave the computer alone for a while (expected), but quickly goes to zero when I touch my mouse.
Is it normal to have two of them on the process list? I double checked the spelling and they are in fact two separate processes running ( like multiple svchosts).

Thanks.

Thanks, everytime I take my computer off sleep mode and when I start it up, this process starts and it is really annoying.

Helped me do what I needed. Very relevant and effective stuff. Keep it up.

Cheers!

http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=330414

and/or

http://kb.adobe.com/selfservice/viewContent.do?externalId=330414

refer to solutions for the following problem:

Many Acrobat 7.0.x acr*.tmp files created in the Windows\Temp folder

To post a comment on "cidaemon", please return to that article's main page.