Adware.Win32.LinksAdder.A

Publish Date: 11 mars 2020

Modifié par: : Clive Fuentebella

Win32:Adware-gen [Adw] (AVAST); Trojan:Win32/Tiggre!rfn (MICROSOFT)

Plate-forme:

Windows

Overall Risk:

Dommages potentiels: :

Distribution potentielle: :

reportedInfection:

Information Exposure Rating::

Faible

Medium

Élevé

Critique

Type de grayware:
Adware
Destructif:
Non
Chiffrement:
Non
In the wild::
Oui

Overview

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Wird ausgeführt und löscht sich dann selbst.

Löscht Dateien, so dass Programme und Anwendungen nicht ordnungsgemäß ausgeführt werden.

Détails techniques

File size: 4,796,928 bytes

File type: EXE

Memory resident: Non

Date de réception des premiers échantillons: 10 mars 2020

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

Schleust die folgenden Dateien ein:

%User Temp%\{Random characters}.tmp
%User Temp%\7za.dll
%User Temp%\360Safe.dll
%Program Files%\360\360Safe\deepscan\speedmem2.hg
%Program Files%\360\360Safe\leakrepair.dat
%Program Files%\360\360Safe\netmon\360netmon.ini
%Program Files%\360\360Safe\safemon\360U.dat
%Program Files%\360\360Safe\safemon\360UACU.dat
%Favorites%\Links\desktop.ini
%Favorites%\Links\Suggested Sites.url
%Favorites%\Links\Web Slice Gallery.url
%Favorites%\Links\ｾｩｶｫｹｺﾎ・URL
%Favorites%\Links\ﾌ・ｨｹｺﾎ・URL
%Favorites%\Links\ﾌﾔｱｦﾍ・URL
%Favorites%\Links\ﾓﾎﾏｷﾓ鯊ﾖ.url
%Favorites%\Links\ﾈﾈｵ耙ﾂﾎﾅ.URL
%Favorites%\Links\ｵ酘ﾔｵ・ﾙﾍ・URL
%Favorites%\Links\ｰﾙｶﾈﾋﾑﾋ・URL
%Favorites%\Links\ﾍｷｵｼｺｽ.URL
%Favorites%\Links\ｻﾆﾀ敎・url
%User Temp%\nstC41B.tmp\System.dll
%Application Data%\360se6\User Data\Default\Bookmarks
%Application Data%\360se6\User Data\Default\History
%Application Data%\360se6\User Data\Default\History Provider Cache
%Application Data%\360se6\User Data\Default\History-journal
%Application Data%\360se6\User Data\Default\Preferences
%Application Data%\360se6\User Data\Default\QuotaManager
%Application Data%\360se6\User Data\Default\QuotaManager-journal
%Application Data%\360se6\User Data\Default\Top Sites
%Application Data%\360se6\User Data\Default\Top Sites-journal
%Application Data%\360se6\User Data\Default\Web Data
%Application Data%\360se6\User Data\Default\Web Data-journal
%Application Data%\360se6\User Data\Default\Local Storage\chrome-extension_eemcgdkfndhakfknompkggombfjjjeno_0.localstorage
%Application Data%\360se6\User Data\Default\Local Storage\chrome-extension_eemcgdkfndhakfknompkggombfjjjeno_0.localstorage-journal
%Application Data%\360se6\User Data\Default\Local Storage\chrome_newtab_0.localstorage
%Application Data%\360se6\User Data\Default\Local Storage\chrome_newtab_0.localstorage-journal
%Application Data%\Baidu\BaiduBrowser\rpt.dat
%Application Data%\Baidu\BaiduBrowser\user_data\default\ad_block\ad_block.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\blank_tab\new_tab.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\bookmark\bookmark.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\bookmark\bookmark.db.bak
%Application Data%\Baidu\BaiduBrowser\user_data\default\data_misc\data_misc.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\plugin_setting\plugin_setting.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\render_info\coreswitch.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\render_info\web_compatability2.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\settings\settings.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\settings\user_setting.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\suggestion\suggestion.db
%Application Data%\Mozilla\Firefox\profiles.ini
%Application Data%\Mozilla\Firefox\Profiles\default\places.sqlite
%Application Data%\Mozilla\Firefox\Profiles\default\prefs.js
%Application Data%\Mozilla\Firefox\Profiles\default\xulstore.json
%Application Data%\SogouExplorer\HistoryUrl3.db
%Application Data%\SogouExplorer\Misc.db
%Application Data%\SogouExplorer\commcfg.xml
%Application Data%\SogouExplorer\config.xml
%Application Data%\SogouExplorer\favorite3.dat
%Application Data%\SogouExplorer\favorite3Mob.dat
%Application Data%\SogouExplorer\FavIcon\FavorIcon.db
%Application Data%\SogouExplorer\FavIcon\o0u.diannaodian.com.ico
%Application Data%\SogouExplorer\FavIcon\oDefaultIcon.ico
%AppDataLocal%\2345Explorer\User Data\Default\Bookmarks
%AppDataLocal%\2345Explorer\User Data\Default\PreferencesV2
%AppDataLocal%\2345Explorer\User Data\Default\Secure Preferences
%AppDataLocal%\2345Explorer\User Data\Default\Top Sites
%AppDataLocal%\2345Explorer\User Data\Default\Top Sites-journal
%AppDataLocal%\2345Explorer\User Data\Default\Web DataV3
%AppDataLocal%\2345Explorer\User Data\Default\Web DataV3-journal
%AppDataLocal%\2345Explorer\User Data\Default\page_file.dat
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Bookmarks
%AppDataLocal%\360Chrome\Chrome\User Data\Default\History
%AppDataLocal%\360Chrome\Chrome\User Data\Default\History Provider Cache
%AppDataLocal%\360Chrome\Chrome\User Data\Default\History-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Preferences
%AppDataLocal%\360Chrome\Chrome\User Data\Default\QuotaManager
%AppDataLocal%\360Chrome\Chrome\User Data\Default\QuotaManager-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Secure Preferences
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Top Sites
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Top Sites-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Web Data
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Web Data-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000005.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000007.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000009.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000011.log
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000012.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\CURRENT
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOCK
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOG
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOG.old
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001
%AppDataLocal%\Google\Chrome\User Data\First Run
%AppDataLocal%\Google\Chrome\User Data\Local State
%AppDataLocal%\Google\Chrome\User Data\Default\Bookmarks
%AppDataLocal%\Google\Chrome\User Data\Default\History
%AppDataLocal%\Google\Chrome\User Data\Default\History Provider Cache
%AppDataLocal%\Google\Chrome\User Data\Default\History-journal
%AppDataLocal%\Google\Chrome\User Data\Default\Preferences
%AppDataLocal%\Google\Chrome\User Data\Default\Secure Preferences
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Bookmarks
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Config Bookmarks
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Preferences
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Secure Preferences
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Shortcuts
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Shortcuts-journal
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Top Sites
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Top Sites-journal
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Web Data
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Web Data-journal
%AppDataLocal%\TheWorld6\User Data\Default\Bookmarks
%AppDataLocal%\TheWorld6\User Data\Default\History
%AppDataLocal%\TheWorld6\User Data\Default\History Provider Cache
%AppDataLocal%\TheWorld6\User Data\Default\History-journal
%AppDataLocal%\TheWorld6\User Data\Default\Preferences
%AppDataLocal%\TheWorld6\User Data\Default\QuotaManager
%AppDataLocal%\TheWorld6\User Data\Default\QuotaManager-journal
%AppDataLocal%\TheWorld6\User Data\Default\Secure Preferences
%AppDataLocal%\TheWorld6\User Data\Default\Shortcuts
%AppDataLocal%\TheWorld6\User Data\Default\Shortcuts-journal
%AppDataLocal%\TheWorld6\User Data\Default\Top Sites
%AppDataLocal%\TheWorld6\User Data\Default\Top Sites-journal
%AppDataLocal%\TheWorld6\User Data\Default\Web Data
%AppDataLocal%\TheWorld6\User Data\Default\Web Data-journal
%AppDataLocal%\UCBrowser\User Data\First Run
%AppDataLocal%\UCBrowser\User Data\Local State
%AppDataLocal%\UCBrowser\User Data\Default\Bookmarks
%AppDataLocal%\UCBrowser\User Data\Default\Omnibox
%AppDataLocal%\UCBrowser\User Data\Default\Omnibox-journal
%AppDataLocal%\UCBrowser\User Data\Default\Preferences
%AppDataLocal%\UCBrowser\User Data\Default\QuotaManager.5
%AppDataLocal%\UCBrowser\User Data\Default\QuotaManager.5-journal
%AppDataLocal%\UCBrowser\User Data\Default\Retailer
%AppDataLocal%\UCBrowser\User Data\Default\Secure Preferences
%AppDataLocal%\UCBrowser\User Data\Default\Top Sites.3
%AppDataLocal%\UCBrowser\User Data\Default\Top Sites.3-journal
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.65
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.65-journal
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.67
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.67-journal
%AppDataLocal%\liebao\User Data\Default\Bookmarks
%AppDataLocal%\liebao\User Data\Default\Login Data
%AppDataLocal%\liebao\User Data\Default\Login Data-journal
%AppDataLocal%\liebao\User Data\Default\Preferences
%AppDataLocal%\liebao\User Data\Default\QuotaManager
%AppDataLocal%\liebao\User Data\Default\QuotaManager-journal
%AppDataLocal%\liebao\User Data\Default\Top Sites
%AppDataLocal%\liebao\User Data\Default\Top Sites-journal
%AppDataLocal%\liebao\User Data\Default\Web Data
%AppDataLocal%\liebao\User Data\Default\Web Data-journal
%AppDataLocal%\liebao\User Data\Default\usertyped
%AppDataLocal%\liebao\User Data\Default\usertyped-journal

Fügt die folgenden Prozesse hinzu:

{Malware file path and name}
"%User Temp%\7za.dll" x "%User Temp%\360Safe.dll" -o"%Program Files%\360" -r -y\
%System%\cmd.exe /C WMIC BIOS get Manufacturer
%User Temp%\{Random characters}.tmp

(Hinweis: %Program Files%ist der Standardordner 'Programme', normalerweise C:\Programme.. %System% ist der Windows Systemordner. Er lautet in der Regel C:\Windows\System unter Windows 98 und ME, C:\WINNT\System32 unter Windows NT und 2000 sowie C:\Windows\System32 unter Windows 2000(32-bit), XP, Server 2003(32-bit), Vista, 7, 8, 8.1, 2008(64-bit), 2012(64bit) and 10(64-bit).)

Wird ausgeführt und löscht sich dann selbst.

Andere Systemänderungen

Löscht die folgenden Dateien:

%System Root%\{Random characters}.tmp
%User Temp%\7za.dll
%User Temp%\360Safe.dll
Specific files in {Malware file path}

(Hinweis: %System Root% ist der Stammordner, normalerweise C:\. Dort befindet sich auch das Betriebssystem.. %User Temp% ist der Ordner 'Temp' des aktuellen Benutzers, normalerweise C:\Dokumente und Einstellungen\{Benutzername}\Lokale Einstellungen\Temp unter Windows 2000(32-bit), XP und Server 2003(32-bit) und C:\Users\{Benutzername}\AppData\Local\Temp unter Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) und 10(64-bit).)

Fügt die folgenden Registrierungseinträge hinzu:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
MenuOrder\Favorites\Links
Order = {Hex data}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\MINIE
LinksBandEnabled = 1

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\MINIE
LinksBandEnabled = 1

Andere Details

Fügt die folgenden Registrierungsschlüssel hinzu:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\MINIE

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\MINIE

It connects to the following possibly malicious URL:

tj.{BLOCKED}s.com

Solutions

Moteur de scan minimum: 9.850

SSAPI Pattern File: 2.267.00

SSAPI Pattern Release Date: 12 mars 2020

Step 1

Für Windows ME und XP Benutzer: Stellen Sie vor einer Suche sicher, dass die Systemwiederherstellung deaktiviert ist, damit der gesamte Computer durchsucht werden kann.

Step 2

<p> Beachten Sie, dass nicht alle Dateien, Ordner, Registrierungsschlüssel und Einträge auf Ihrem Computer installiert sind, während diese Malware / Spyware / Grayware ausgeführt wird. Dies kann auf eine unvollständige Installation oder andere Betriebssystembedingungen zurückzuführen sein. Fahren Sie mit dem nächsten Schritt fort. </ p><p> Beachten Sie, dass nicht alle Dateien, Ordner, Registrierungsschlüssel und Einträge auf Ihrem Computer installiert sind, während diese Malware / Spyware / Grayware ausgeführt wird. Dies kann auf eine unvollständige Installation oder andere Betriebssystembedingungen zurückzuführen sein. Fahren Sie mit dem nächsten Schritt fort. </ p>

Step 3

Diesen Registrierungswert löschen

[ learnMore ]

Wichtig: Eine nicht ordnungsgemäße Bearbeitung der Windows Registrierung kann zu einer dauerhaften Fehlfunktion des Systems führen. Führen Sie diesen Schritt nur durch, wenn Sie mit der Vorgehensweise vertraut sind oder wenn Sie Ihren Systemadministrator um Unterstützung bitten können. Lesen Sie ansonsten zuerst diesen Microsoft Artikel, bevor Sie die Registrierung Ihres Computers ändern.

In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\Links
- Order = {Hex data}
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MINIE
- LinksBandEnabled = 1
In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MINIE
- LinksBandEnabled = 1

DATA_GENERIC_KEY

Suchen und löschen Sie im rechten Fensterbereich den folgenden Eintrag:
DATA_GENERIC_ENTRY

Schließen Sie den Registrierungs-Editor.

Step 4

Diesen Registrierungsschlüssel löschen

[ learnMore ]

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer
- MINIE
In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer
- MINIE

Step 5

Diese Dateien suchen und löschen

[ learnMore ]

Möglicherweise sind einige Komponentendateien verborgen. Aktivieren Sie unbedingt das Kontrollkästchen Versteckte Elemente durchsuchen unter "Weitere erweiterte Optionen", um alle verborgenen Dateien und Ordner in den Suchergebnissen zu berücksichtigen.

%User Temp%\{Random characters}.tmp
%User Temp%\7za.dll
%User Temp%\360Safe.dll
%Program Files%\360\360Safe\deepscan\speedmem2.hg
%Program Files%\360\360Safe\leakrepair.dat
%Program Files%\360\360Safe\netmon\360netmon.ini
%Program Files%\360\360Safe\safemon\360U.dat
%Program Files%\360\360Safe\safemon\360UACU.dat
%Favorites%\Links\desktop.ini
%Favorites%\Links\Suggested Sites.url
%Favorites%\Links\Web Slice Gallery.url
%Favorites%\Links\ｾｩｶｫｹｺﾎ・URL
%Favorites%\Links\ﾌ・ｨｹｺﾎ・URL
%Favorites%\Links\ﾌﾔｱｦﾍ・URL
%Favorites%\Links\ﾓﾎﾏｷﾓ鯊ﾖ.url
%Favorites%\Links\ﾈﾈｵ耙ﾂﾎﾅ.URL
%Favorites%\Links\ｵ酘ﾔｵ・ﾙﾍ・URL
%Favorites%\Links\ｰﾙｶﾈﾋﾑﾋ・URL
%Favorites%\Links\ﾍｷｵｼｺｽ.URL
%Favorites%\Links\ｻﾆﾀ敎・url
%User Temp%\nstC41B.tmp\System.dll
%Application Data%\360se6\User Data\Default\Bookmarks
%Application Data%\360se6\User Data\Default\History
%Application Data%\360se6\User Data\Default\History Provider Cache
%Application Data%\360se6\User Data\Default\History-journal
%Application Data%\360se6\User Data\Default\Preferences
%Application Data%\360se6\User Data\Default\QuotaManager
%Application Data%\360se6\User Data\Default\QuotaManager-journal
%Application Data%\360se6\User Data\Default\Top Sites
%Application Data%\360se6\User Data\Default\Top Sites-journal
%Application Data%\360se6\User Data\Default\Web Data
%Application Data%\360se6\User Data\Default\Web Data-journal
%Application Data%\360se6\User Data\Default\Local Storage\chrome-extension_eemcgdkfndhakfknompkggombfjjjeno_0.localstorage
%Application Data%\360se6\User Data\Default\Local Storage\chrome-extension_eemcgdkfndhakfknompkggombfjjjeno_0.localstorage-journal
%Application Data%\360se6\User Data\Default\Local Storage\chrome_newtab_0.localstorage
%Application Data%\360se6\User Data\Default\Local Storage\chrome_newtab_0.localstorage-journal
%Application Data%\Baidu\BaiduBrowser\rpt.dat
%Application Data%\Baidu\BaiduBrowser\user_data\default\ad_block\ad_block.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\blank_tab\new_tab.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\bookmark\bookmark.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\bookmark\bookmark.db.bak
%Application Data%\Baidu\BaiduBrowser\user_data\default\data_misc\data_misc.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\plugin_setting\plugin_setting.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\render_info\coreswitch.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\render_info\web_compatability2.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\settings\settings.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\settings\user_setting.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\suggestion\suggestion.db
%Application Data%\Mozilla\Firefox\profiles.ini
%Application Data%\Mozilla\Firefox\Profiles\default\places.sqlite
%Application Data%\Mozilla\Firefox\Profiles\default\prefs.js
%Application Data%\Mozilla\Firefox\Profiles\default\xulstore.json
%Application Data%\SogouExplorer\HistoryUrl3.db
%Application Data%\SogouExplorer\Misc.db
%Application Data%\SogouExplorer\commcfg.xml
%Application Data%\SogouExplorer\config.xml
%Application Data%\SogouExplorer\favorite3.dat
%Application Data%\SogouExplorer\favorite3Mob.dat
%Application Data%\SogouExplorer\FavIcon\FavorIcon.db
%Application Data%\SogouExplorer\FavIcon\o0u.diannaodian.com.ico
%Application Data%\SogouExplorer\FavIcon\oDefaultIcon.ico
%AppDataLocal%\2345Explorer\User Data\Default\Bookmarks
%AppDataLocal%\2345Explorer\User Data\Default\PreferencesV2
%AppDataLocal%\2345Explorer\User Data\Default\Secure Preferences
%AppDataLocal%\2345Explorer\User Data\Default\Top Sites
%AppDataLocal%\2345Explorer\User Data\Default\Top Sites-journal
%AppDataLocal%\2345Explorer\User Data\Default\Web DataV3
%AppDataLocal%\2345Explorer\User Data\Default\Web DataV3-journal
%AppDataLocal%\2345Explorer\User Data\Default\page_file.dat
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Bookmarks
%AppDataLocal%\360Chrome\Chrome\User Data\Default\History
%AppDataLocal%\360Chrome\Chrome\User Data\Default\History Provider Cache
%AppDataLocal%\360Chrome\Chrome\User Data\Default\History-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Preferences
%AppDataLocal%\360Chrome\Chrome\User Data\Default\QuotaManager
%AppDataLocal%\360Chrome\Chrome\User Data\Default\QuotaManager-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Secure Preferences
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Top Sites
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Top Sites-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Web Data
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Web Data-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000005.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000007.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000009.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000011.log
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000012.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\CURRENT
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOCK
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOG
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOG.old
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001
%AppDataLocal%\Google\Chrome\User Data\First Run
%AppDataLocal%\Google\Chrome\User Data\Local State
%AppDataLocal%\Google\Chrome\User Data\Default\Bookmarks
%AppDataLocal%\Google\Chrome\User Data\Default\History
%AppDataLocal%\Google\Chrome\User Data\Default\History Provider Cache
%AppDataLocal%\Google\Chrome\User Data\Default\History-journal
%AppDataLocal%\Google\Chrome\User Data\Default\Preferences
%AppDataLocal%\Google\Chrome\User Data\Default\Secure Preferences
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Bookmarks
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Config Bookmarks
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Preferences
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Secure Preferences
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Shortcuts
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Shortcuts-journal
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Top Sites
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Top Sites-journal
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Web Data
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Web Data-journal
%AppDataLocal%\TheWorld6\User Data\Default\Bookmarks
%AppDataLocal%\TheWorld6\User Data\Default\History
%AppDataLocal%\TheWorld6\User Data\Default\History Provider Cache
%AppDataLocal%\TheWorld6\User Data\Default\History-journal
%AppDataLocal%\TheWorld6\User Data\Default\Preferences
%AppDataLocal%\TheWorld6\User Data\Default\QuotaManager
%AppDataLocal%\TheWorld6\User Data\Default\QuotaManager-journal
%AppDataLocal%\TheWorld6\User Data\Default\Secure Preferences
%AppDataLocal%\TheWorld6\User Data\Default\Shortcuts
%AppDataLocal%\TheWorld6\User Data\Default\Shortcuts-journal
%AppDataLocal%\TheWorld6\User Data\Default\Top Sites
%AppDataLocal%\TheWorld6\User Data\Default\Top Sites-journal
%AppDataLocal%\TheWorld6\User Data\Default\Web Data
%AppDataLocal%\TheWorld6\User Data\Default\Web Data-journal
%AppDataLocal%\UCBrowser\User Data\First Run
%AppDataLocal%\UCBrowser\User Data\Local State
%AppDataLocal%\UCBrowser\User Data\Default\Bookmarks
%AppDataLocal%\UCBrowser\User Data\Default\Omnibox
%AppDataLocal%\UCBrowser\User Data\Default\Omnibox-journal
%AppDataLocal%\UCBrowser\User Data\Default\Preferences
%AppDataLocal%\UCBrowser\User Data\Default\QuotaManager.5
%AppDataLocal%\UCBrowser\User Data\Default\QuotaManager.5-journal
%AppDataLocal%\UCBrowser\User Data\Default\Retailer
%AppDataLocal%\UCBrowser\User Data\Default\Secure Preferences
%AppDataLocal%\UCBrowser\User Data\Default\Top Sites.3
%AppDataLocal%\UCBrowser\User Data\Default\Top Sites.3-journal
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.65
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.65-journal
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.67
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.67-journal
%AppDataLocal%\liebao\User Data\Default\Bookmarks
%AppDataLocal%\liebao\User Data\Default\Login Data
%AppDataLocal%\liebao\User Data\Default\Login Data-journal
%AppDataLocal%\liebao\User Data\Default\Preferences
%AppDataLocal%\liebao\User Data\Default\QuotaManager
%AppDataLocal%\liebao\User Data\Default\QuotaManager-journal
%AppDataLocal%\liebao\User Data\Default\Top Sites
%AppDataLocal%\liebao\User Data\Default\Top Sites-journal
%AppDataLocal%\liebao\User Data\Default\Web Data
%AppDataLocal%\liebao\User Data\Default\Web Data-journal
%AppDataLocal%\liebao\User Data\Default\usertyped
%AppDataLocal%\liebao\User Data\Default\usertyped-journal

DATA_GENERIC_FILENAME_1

Wählen Sie im Listenfeld lt;i>Suchen in die Option Arbeitsplatz, und drücken Sie die Eingabetaste.

Markieren Sie die gefundene Datei, und drücken Sie UMSCHALT+ENTF, um sie endgültig zu löschen.

Wiederholen Sie die Schritte 2 bis 4 für die übrigen Dateien: %User Temp%\{Random characters}.tmp
%User Temp%\7za.dll
%User Temp%\360Safe.dll
%Program Files%\360\360Safe\deepscan\speedmem2.hg
%Program Files%\360\360Safe\leakrepair.dat
%Program Files%\360\360Safe\netmon\360netmon.ini
%Program Files%\360\360Safe\safemon\360U.dat
%Program Files%\360\360Safe\safemon\360UACU.dat
%Favorites%\Links\desktop.ini
%Favorites%\Links\Suggested Sites.url
%Favorites%\Links\Web Slice Gallery.url
%Favorites%\Links\ｾｩｶｫｹｺﾎ・URL
%Favorites%\Links\ﾌ・ｨｹｺﾎ・URL
%Favorites%\Links\ﾌﾔｱｦﾍ・URL
%Favorites%\Links\ﾓﾎﾏｷﾓ鯊ﾖ.url
%Favorites%\Links\ﾈﾈｵ耙ﾂﾎﾅ.URL
%Favorites%\Links\ｵ酘ﾔｵ・ﾙﾍ・URL
%Favorites%\Links\ｰﾙｶﾈﾋﾑﾋ・URL
%Favorites%\Links\ﾍｷｵｼｺｽ.URL
%Favorites%\Links\ｻﾆﾀ敎・url
%User Temp%\nstC41B.tmp\System.dll
%Application Data%\360se6\User Data\Default\Bookmarks
%Application Data%\360se6\User Data\Default\History
%Application Data%\360se6\User Data\Default\History Provider Cache
%Application Data%\360se6\User Data\Default\History-journal
%Application Data%\360se6\User Data\Default\Preferences
%Application Data%\360se6\User Data\Default\QuotaManager
%Application Data%\360se6\User Data\Default\QuotaManager-journal
%Application Data%\360se6\User Data\Default\Top Sites
%Application Data%\360se6\User Data\Default\Top Sites-journal
%Application Data%\360se6\User Data\Default\Web Data
%Application Data%\360se6\User Data\Default\Web Data-journal
%Application Data%\360se6\User Data\Default\Local Storage\chrome-extension_eemcgdkfndhakfknompkggombfjjjeno_0.localstorage
%Application Data%\360se6\User Data\Default\Local Storage\chrome-extension_eemcgdkfndhakfknompkggombfjjjeno_0.localstorage-journal
%Application Data%\360se6\User Data\Default\Local Storage\chrome_newtab_0.localstorage
%Application Data%\360se6\User Data\Default\Local Storage\chrome_newtab_0.localstorage-journal
%Application Data%\Baidu\BaiduBrowser\rpt.dat
%Application Data%\Baidu\BaiduBrowser\user_data\default\ad_block\ad_block.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\blank_tab\new_tab.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\bookmark\bookmark.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\bookmark\bookmark.db.bak
%Application Data%\Baidu\BaiduBrowser\user_data\default\data_misc\data_misc.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\plugin_setting\plugin_setting.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\render_info\coreswitch.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\render_info\web_compatability2.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\settings\settings.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\settings\user_setting.db
%Application Data%\Baidu\BaiduBrowser\user_data\default\suggestion\suggestion.db
%Application Data%\Mozilla\Firefox\profiles.ini
%Application Data%\Mozilla\Firefox\Profiles\default\places.sqlite
%Application Data%\Mozilla\Firefox\Profiles\default\prefs.js
%Application Data%\Mozilla\Firefox\Profiles\default\xulstore.json
%Application Data%\SogouExplorer\HistoryUrl3.db
%Application Data%\SogouExplorer\Misc.db
%Application Data%\SogouExplorer\commcfg.xml
%Application Data%\SogouExplorer\config.xml
%Application Data%\SogouExplorer\favorite3.dat
%Application Data%\SogouExplorer\favorite3Mob.dat
%Application Data%\SogouExplorer\FavIcon\FavorIcon.db
%Application Data%\SogouExplorer\FavIcon\o0u.diannaodian.com.ico
%Application Data%\SogouExplorer\FavIcon\oDefaultIcon.ico
%AppDataLocal%\2345Explorer\User Data\Default\Bookmarks
%AppDataLocal%\2345Explorer\User Data\Default\PreferencesV2
%AppDataLocal%\2345Explorer\User Data\Default\Secure Preferences
%AppDataLocal%\2345Explorer\User Data\Default\Top Sites
%AppDataLocal%\2345Explorer\User Data\Default\Top Sites-journal
%AppDataLocal%\2345Explorer\User Data\Default\Web DataV3
%AppDataLocal%\2345Explorer\User Data\Default\Web DataV3-journal
%AppDataLocal%\2345Explorer\User Data\Default\page_file.dat
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Bookmarks
%AppDataLocal%\360Chrome\Chrome\User Data\Default\History
%AppDataLocal%\360Chrome\Chrome\User Data\Default\History Provider Cache
%AppDataLocal%\360Chrome\Chrome\User Data\Default\History-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Preferences
%AppDataLocal%\360Chrome\Chrome\User Data\Default\QuotaManager
%AppDataLocal%\360Chrome\Chrome\User Data\Default\QuotaManager-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Secure Preferences
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Top Sites
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Top Sites-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Web Data
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Web Data-journal
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000005.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000007.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000009.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000011.log
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000012.ldb
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\CURRENT
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOCK
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOG
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOG.old
%AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001
%AppDataLocal%\Google\Chrome\User Data\First Run
%AppDataLocal%\Google\Chrome\User Data\Local State
%AppDataLocal%\Google\Chrome\User Data\Default\Bookmarks
%AppDataLocal%\Google\Chrome\User Data\Default\History
%AppDataLocal%\Google\Chrome\User Data\Default\History Provider Cache
%AppDataLocal%\Google\Chrome\User Data\Default\History-journal
%AppDataLocal%\Google\Chrome\User Data\Default\Preferences
%AppDataLocal%\Google\Chrome\User Data\Default\Secure Preferences
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Bookmarks
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Config Bookmarks
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Preferences
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Secure Preferences
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Shortcuts
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Shortcuts-journal
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Top Sites
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Top Sites-journal
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Web Data
%AppDataLocal%\Tencent\QQBrowser\User Data\Default\Web Data-journal
%AppDataLocal%\TheWorld6\User Data\Default\Bookmarks
%AppDataLocal%\TheWorld6\User Data\Default\History
%AppDataLocal%\TheWorld6\User Data\Default\History Provider Cache
%AppDataLocal%\TheWorld6\User Data\Default\History-journal
%AppDataLocal%\TheWorld6\User Data\Default\Preferences
%AppDataLocal%\TheWorld6\User Data\Default\QuotaManager
%AppDataLocal%\TheWorld6\User Data\Default\QuotaManager-journal
%AppDataLocal%\TheWorld6\User Data\Default\Secure Preferences
%AppDataLocal%\TheWorld6\User Data\Default\Shortcuts
%AppDataLocal%\TheWorld6\User Data\Default\Shortcuts-journal
%AppDataLocal%\TheWorld6\User Data\Default\Top Sites
%AppDataLocal%\TheWorld6\User Data\Default\Top Sites-journal
%AppDataLocal%\TheWorld6\User Data\Default\Web Data
%AppDataLocal%\TheWorld6\User Data\Default\Web Data-journal
%AppDataLocal%\UCBrowser\User Data\First Run
%AppDataLocal%\UCBrowser\User Data\Local State
%AppDataLocal%\UCBrowser\User Data\Default\Bookmarks
%AppDataLocal%\UCBrowser\User Data\Default\Omnibox
%AppDataLocal%\UCBrowser\User Data\Default\Omnibox-journal
%AppDataLocal%\UCBrowser\User Data\Default\Preferences
%AppDataLocal%\UCBrowser\User Data\Default\QuotaManager.5
%AppDataLocal%\UCBrowser\User Data\Default\QuotaManager.5-journal
%AppDataLocal%\UCBrowser\User Data\Default\Retailer
%AppDataLocal%\UCBrowser\User Data\Default\Secure Preferences
%AppDataLocal%\UCBrowser\User Data\Default\Top Sites.3
%AppDataLocal%\UCBrowser\User Data\Default\Top Sites.3-journal
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.65
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.65-journal
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.67
%AppDataLocal%\UCBrowser\User Data\Default\Web Data.67-journal
%AppDataLocal%\liebao\User Data\Default\Bookmarks
%AppDataLocal%\liebao\User Data\Default\Login Data
%AppDataLocal%\liebao\User Data\Default\Login Data-journal
%AppDataLocal%\liebao\User Data\Default\Preferences
%AppDataLocal%\liebao\User Data\Default\QuotaManager
%AppDataLocal%\liebao\User Data\Default\QuotaManager-journal
%AppDataLocal%\liebao\User Data\Default\Top Sites
%AppDataLocal%\liebao\User Data\Default\Top Sites-journal
%AppDataLocal%\liebao\User Data\Default\Web Data
%AppDataLocal%\liebao\User Data\Default\Web Data-journal
%AppDataLocal%\liebao\User Data\Default\usertyped
%AppDataLocal%\liebao\User Data\Default\usertyped-journal

Step 6

Search and delete these folders

[ learnMore ]

Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden folders in the search result.

%Program Files%\360
%Program Files%\360\360Safe
%Program Files%\360\360Safe\safemon
%Program Files%\360\360Safe\netmon
%Program Files%\360\360Safe\deepscan
%User Temp%\nstC41B.tmp
%Favorites%\Links

Step 7

Durchsuchen Sie Ihren Computer mit Ihrem Trend Micro Produkt, und löschen Sie Dateien, die als Adware.Win32.LinksAdder.A entdeckt werden. Falls die entdeckten Dateien bereits von Ihrem Trend Micro Produkt gesäubert, gelöscht oder in Quarantäne verschoben wurden, sind keine weiteren Schritte erforderlich. Dateien in Quarantäne können einfach gelöscht werden. Auf dieser Knowledge-Base-Seite finden Sie weitere Informationen.

Step 8

Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.

Specific files in {Malware file path}

Participez à notre enquête!

Adware.Win32.LinksAdder.A

Overview

Détails techniques

Solutions

Ressources

Support

À propos de Trend

Siège social national

Adware.Win32.LinksAdder.A

Overview

Détails techniques

Solutions

Ressources

Support

À propos de Trend

Siège social national

Amérique

Moyen-Orient et Afrique

Europe

Asie-Pacifique