Deutsch
Germany.ruФорумы → Архив Досок→ Компьютер & Co

Убить Б....Baidu

22.12.14 21:05
Re: Убить Б....Baidu
 
tuhran свой человек
tuhran
в ответ Edmond Dantes 22.12.14 20:51, Последний раз изменено 22.12.14 21:18 (tuhran)
aкрон легко очищается.
сейчас отчёт предоставлю следующий
там и службы задействованы, отключил две (не знаю точно где ковырять, что он подменил гад)



просканировал adwcleaner_4
вот портянка
В ответ на:
# AdwCleaner v4.105 - Bericht erstellt am 22/12/2014 um 20:48:39
# Aktualisiert 08/12/2014 von Xplode
# Database : 2014-12-08.2 [Local]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Extensa - EXTENSA-PC
# Gestartet von : C:\Users\Extensa\Desktop\AdwCleaner 4.104 Portable\????? ?????\adwcleaner_4.105.exe
# Option : Suchen
***** [ Dienste ] *****
Dienst Gefunden : LPTSystemUpdater
***** [ Dateien / Ordner ] *****
Ordner Gefunden : C:\ProgramData\apn
Ordner Gefunden : C:\Users\Public\Documents\baidu
***** [ Tasks ] *****
Task Gefunden : PC SpeedUp Service Deactivator
***** [ Verknьpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Daten Gefunden : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y
Daten Gefunden : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\OperaDeveloper\shell\open\command [(Default)] - "C:\Program Files (x86)\Opera Developer\Launcher.exe" hxxp://istart.webssearches.com/?type=sc&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y
Schlьssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlьssel Gefunden : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlьssel Gefunden : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlьssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Schlьssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlьssel Gefunden : HKCU\Software\Optimizer Pro
Schlьssel Gefunden : HKCU\Software\SmartBar
Schlьssel Gefunden : HKCU\Software\Smartbar
Schlьssel Gefunden : HKCU\Software\smartbarbackup
Schlьssel Gefunden : HKCU\Software\smartbarlog
Schlьssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Schlьssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlьssel Gefunden : [x64] HKCU\Software\Optimizer Pro
Schlьssel Gefunden : [x64] HKCU\Software\SmartBar
Schlьssel Gefunden : [x64] HKCU\Software\Smartbar
Schlьssel Gefunden : [x64] HKCU\Software\smartbarbackup
Schlьssel Gefunden : [x64] HKCU\Software\smartbarlog
Schlьssel Gefunden : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlьssel Gefunden : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlьssel Gefunden : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlьssel Gefunden : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlьssel Gefunden : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.bho
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlьssel Gefunden : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlьssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Schlьssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlьssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}
Schlьssel Gefunden : HKLM\SOFTWARE\webssearchesSoftware
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlьssel Gefunden : [x64] HKLM\SOFTWARE\PicColor Utility
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17496
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolxkaZR3WvLYGfPmlCtVSJr6eP071Nwtc1HiJRmGhbcVBclpjNu0vdW7scpMB73r_RZZu2zk66-oq5fMzWkzBS5PLekLvqJEOl7qWXzcUf2CH92sS9gqYGUleYWEwspI2hSXOpS0dWy6_SXFGjHhVdrbiz-hfcDzo0hU5O7WS-ffVu7IqxQ,,&q={searchTerms}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolxkaZR3WvLYGfPmlCtVSJr6eP071Nwtc1HiJRmGhbcVBclpjNu0vdW7scpMB73r_RZZu2zk66-oq5fM_WD-tCsVhXeKKvaWYAc7NJa-v6pbROvbbDSjznTSDIFgK9hWuzXl9QKbb-_FXtj2xcxkJE5V6PnWPA3kqRN883zCZT4DlkjAbig,,
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolxkaZR3WvLYGfPmlCtVSJr6eP071Nwtc1HiJRmGhbcVBclpjNu0vdW7scpMB73r_RZZu2zk66-oq5fMzWkzBS5PLekLvqJEOl7qWXzcUf2CH92sS9gqYGUleYWEwspI2hSXOpS0dWy6_SXFGjHhVdrbiz-hfcDzo0hU5O7WS-ffVu7IqxQ,,&q={searchTerms}
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://istart.webssearches.com/web/?type=ds&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y&q={searchTerms}
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://istart.webssearches.com/web/?type=ds&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y&q={searchTerms}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolxkaZR3WvLYGfPmlCtVSJr6eP071Nwtc1HiJRmGhbcVBclpjNu0vdW7scpMB73r_RZZu2zk66-oq5fMzWkzBS5PLekLvqJEOl7qWXzcUf2CH92sS9gqYGUleYWEwspI2hSXOpS0dWy6_SXFGjHhVdrbiz-hfcDzo0hU5O7WS-ffVu7IqxQ,,&q={searchTerms}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolxkaZR3WvLYGfPmlCtVSJr6eP071Nwtc1HiJRmGhbcVBclpjNu0vdW7scpMB73r_RZZu2zk66-oq5fMzWkzBS5PLekLvqJEOl7qWXzcUf2CH92sS9gqYGUleYWEwspI2hSXOpS0dWy6_SXFGjHhVdrbiz-hfcDzo0hU5O7WS-ffVu7IqxQ,,&q={searchTerms}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolxkaZR3WvLYGfPmlCtVSJr6eP071Nwtc1HiJRmGhbcVBclpjNu0vdW7scpMB73r_RZZu2zk66-oq5fMzWkzBS5PLekLvqJEOl7qWXzcUf2CH92sS9gqYGUleYWEwspI2hSXOpS0dWy6_SXFGjHhVdrbiz-hfcDzo0hU5O7WS-ffVu7IqxQ,,&q={searchTerms}
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StPOamTTqzur3wb8K-Ou-Ve_tolxkaZR3WvLYGfPmlCtVSJr6eP071Nwtc1HiJRmGhbcVBclpjNu0vdW7scpMB73r_RZZu2zk66-oq5fMzWkzBS5PLekLvqJEOl7qWXzcUf2CH92sS9gqYGUleYWEwspI2hSXOpS0dWy6_SXFGjHhVdrbiz-hfcDzuokjE8t5uxDdozThNXQ,,&q={searchTerms}
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://istart.webssearches.com/web/?type=ds&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y&q={searchTerms}
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://istart.webssearches.com/web/?type=ds&ts=1419266035&from=cvs&uid=ST9120822AS_5MA42G6Y&q={searchTerms}
*************************
AdwCleaner[R0].txt - [10709 octets] - [22/12/2014 20:48:39]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [10770 octets] ##########

после скана и удаления стенка работает как положено, сам не конектица, пока никто в инет не ломится.
но не всё удалилось

буду капать дальше.
Frustra fit per plura quod potest fieri per pauciora
 

Перейти на