HOME
COMPANY
SUPPORT
ENTERPRISE
CONTACT US
 
病毒资料查询
漏洞信息列表
间谍软件列表
系统补丁列表
安全新闻
KILL安全产品试用

 

  主页  >>安全信息

间谍软件Doctor Adware
作者:冠群金辰技术支持
文章来源:

概述
类别
Rogue Security Software:  使用欺骗性手段进行安装和进行其他企图的安全软件。安装后,流氓软件通常使用威吓手段通知用户在他们的系统中已经安装了间谍程序或恶意程序。之后流氓安全软件要求用户付款以取得解决方法。这些应用程序可能与具有不同目的的其他恶意程序捆绑出现。该类型软件通常以反间谍程序或防病毒应用程序的形式出现。


发源
发源日期
  2008年4月 


检测和删除
手工删除
按照以下步骤从您的机器删除Doctor Adware。先备份您的注册表和系统,并设置一个还原点,防止发生错误。
自动运行的引用:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce spywareremover

撤消 DLL 的注册:
使用 Regsvr32 撤销以下 DLLs 的注册,然后重启:
%program_files%\doctor adware\spywares\browser hijack\helper.dll

清除注册表:
使用注册表编辑器清除以下注册项(如果存在):
HKEY_CURRENT_USER\software\local appwizard-generated applications\doctor adware
HKEY_LOCAL_MACHINE\software\mandel enterprise\doctor adware
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\doctoradware.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce spywareremover
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\doctor adware
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce spywareremover

删除文件:
使用资源管理器删除以下文件(如果存在):
%program_files%\doctor adware\doctoradware.exe
%program_files%\doctor adware\logs\debug.log
%program_files%\doctor adware\logs\objectsfound.log
%program_files%\doctor adware\logs\objectsremoved.log
%program_files%\doctor adware\spywares\adroar\description.html
%program_files%\doctor adware\spywares\adroar\files.txt
%program_files%\doctor adware\spywares\adroar\filespaths.txt
%program_files%\doctor adware\spywares\adroar\fixedregistry.txt
%program_files%\doctor adware\spywares\adroar\processes.txt
%program_files%\doctor adware\spywares\alexa related\description.html
%program_files%\doctor adware\spywares\alexa related\fixedregistry.txt
%program_files%\doctor adware\spywares\broadcastpc\description.html
%program_files%\doctor adware\spywares\broadcastpc\files.txt
%program_files%\doctor adware\spywares\broadcastpc\filespaths.txt
%program_files%\doctor adware\spywares\broadcastpc\fixedregistry.txt
%program_files%\doctor adware\spywares\broadcastpc\processes.txt
%program_files%\doctor adware\spywares\browser hijack\helper.dll
%program_files%\doctor adware\spywares\cookies\description.html
%program_files%\doctor adware\spywares\cookies\files.txt
%program_files%\doctor adware\spywares\cookies\filespaths.txt
%program_files%\doctor adware\spywares\cookies\fixedfiles.txt
%program_files%\doctor adware\spywares\cydoor\description.html
%program_files%\doctor adware\spywares\cydoor\fixedfiles.txt
%program_files%\doctor adware\spywares\cydoor\fixedregistry.txt
%program_files%\doctor adware\spywares\cydoor\processes.txt
%program_files%\doctor adware\spywares\cydoor\registry.txt
%program_files%\doctor adware\spywares\cydoor\registrypaths.txt
%program_files%\doctor adware\spywares\eacceleration\description.html
%program_files%\doctor adware\spywares\eacceleration\fixedregistry.txt
%program_files%\doctor adware\spywares\euniverse\cookies.txt
%program_files%\doctor adware\spywares\euniverse\description.html
%program_files%\doctor adware\spywares\euniverse\files.txt
%program_files%\doctor adware\spywares\euniverse\filespaths.txt
%program_files%\doctor adware\spywares\euniverse\fixedregistry.txt
%program_files%\doctor adware\spywares\euniverse\processes.txt
%program_files%\doctor adware\spywares\fsg\description.html
%program_files%\doctor adware\spywares\fsg\fixedfiles.txt
%program_files%\doctor adware\spywares\fsg\processes.txt
%program_files%\doctor adware\spywares\gain\cookies.txt
%program_files%\doctor adware\spywares\gain\description.html
%program_files%\doctor adware\spywares\gain\fixedfiles.txt
%program_files%\doctor adware\spywares\gain\fixedregistry.txt
%program_files%\doctor adware\spywares\gain\processes.txt
%program_files%\doctor adware\spywares\huntbar\description.html
%program_files%\doctor adware\spywares\huntbar\fixedfiles.txt
%program_files%\doctor adware\spywares\huntbar\fixedregistry.txt
%program_files%\doctor adware\spywares\huntbar\processes.txt
%program_files%\doctor adware\spywares\ibis toolbar\description.html
%program_files%\doctor adware\spywares\ibis toolbar\files.txt
%program_files%\doctor adware\spywares\ibis toolbar\filespaths.txt
%program_files%\doctor adware\spywares\ibis toolbar\fixedregistry.txt
%program_files%\doctor adware\spywares\ibis toolbar\processes.txt
%program_files%\doctor adware\spywares\keenvalue.perfectnav\cookies.txt
%program_files%\doctor adware\spywares\keenvalue.perfectnav\description.html
%program_files%\doctor adware\spywares\keenvalue.perfectnav\fixedregistry.txt
%program_files%\doctor adware\spywares\marketscore\cookies.txt
%program_files%\doctor adware\spywares\marketscore\description.html
%program_files%\doctor adware\spywares\marketscore\fixedfiles.txt
%program_files%\doctor adware\spywares\marketscore\fixedregistry.txt
%program_files%\doctor adware\spywares\marketscore\processes.txt
%program_files%\doctor adware\spywares\new.net\description.html
%program_files%\doctor adware\spywares\new.net\files.txt
%program_files%\doctor adware\spywares\new.net\filespaths.txt
%program_files%\doctor adware\spywares\new.net\fixedregistry.txt
%program_files%\doctor adware\spywares\new.net\processes.txt
%program_files%\doctor adware\spywares\new.net\providers.txt
%program_files%\doctor adware\spywares\new.net\uninstallers.txt
%program_files%\doctor adware\spywares\processes.txt
doctoradware.exe
setup.exe
%desktopdirectory%\doctor adware.lnk
%program_files%\doctor adware\doctor adware.url
%program_files%\doctor adware\uninst.exe
%programs%\doctor adware\doctor adware.lnk
%programs%\doctor adware\uninstall.lnk
%programs%\doctor adware\website.lnk
%program_files%\doctor adware\spywares\spydb.exe
%program_files%\doctor adware\spywares\startnow.hyperbar\description.html
%program_files%\doctor adware\spywares\startnow.hyperbar\fixedfiles.txt
%program_files%\doctor adware\spywares\startnow.hyperbar\fixedregistry.txt
%program_files%\doctor adware\spywares\topmoxie(websavings)\description.html
%program_files%\doctor adware\spywares\topmoxie(websavings)\files.txt
%program_files%\doctor adware\spywares\topmoxie(websavings)\filespaths.txt
%program_files%\doctor adware\spywares\topmoxie(websavings)\fixedregistry.txt
%program_files%\doctor adware\spywares\topmoxie(websavings)\processes.txt
%program_files%\doctor adware\spywares\tv media\description.html
%program_files%\doctor adware\spywares\tv media\files.txt
%program_files%\doctor adware\spywares\tv media\filespaths.txt
%program_files%\doctor adware\spywares\tv media\fixedregistry.txt
%program_files%\doctor adware\spywares\tv media\processes.txt
%program_files%\doctor adware\spywares\twain-tech\description.html
%program_files%\doctor adware\spywares\twain-tech\files.txt
%program_files%\doctor adware\spywares\twain-tech\filespaths.txt
%program_files%\doctor adware\spywares\twain-tech\fixedregistry.txt
%program_files%\doctor adware\spywares\twain-tech\processes.txt
%program_files%\doctor adware\spywares\version.txt
%program_files%\doctor adware\spywares\vx2\description.html
%program_files%\doctor adware\spywares\vx2\files.txt
%program_files%\doctor adware\spywares\vx2\filespaths.txt
%program_files%\doctor adware\spywares\vx2\fixedregistry.txt
%program_files%\doctor adware\spywares\vx2\processes.txt
%program_files%\doctor adware\spywares\webhancer\description.html
%program_files%\doctor adware\spywares\webhancer\files.txt
%program_files%\doctor adware\spywares\webhancer\filespaths.txt
%program_files%\doctor adware\spywares\webhancer\fixedregistry.txt
%program_files%\doctor adware\spywares\webhancer\processes.txt
%program_files%\doctor adware\spywares\webhancer\providers.txt
%program_files%\doctor adware\spywares\websearchtoolbar\description.html
%program_files%\doctor adware\spywares\websearchtoolbar\files.txt
%program_files%\doctor adware\spywares\websearchtoolbar\filespaths.txt
%program_files%\doctor adware\spywares\websearchtoolbar\fixedregistry.txt
%program_files%\doctor adware\spywares\websearchtoolbar\processes.txt
%program_files%\doctor adware\spywares\browser hijack\helper.dll
%program_files%\doctor adware\spywares\spydb.exe
%program_files%\doctor adware\uninst.exe
%program_files%\doctor adware\doctoradware.exe
setup.exe

删除目录:
使用资源管理器删除以下目录(如果存在):
%program_files%\doctor adware
%programs%\doctor adware

调查
文件分析
Doctor Adware

调查方式
间谍软件研究中心

 

相关文章 
间谍软件Doctor Adware
间谍软件Adware Patrol 1.0.8
间谍软件AdwarePro
间谍软件AdwareRemover2007
 

 

    北京冠群金辰软件有限公司 版权所有2008-2011
Copyright(c)2008 by kill.com.cn All right reserver
公司简介 | 荣誉证书 | 销售许可 | 联系我们 | 加入我们   
ICP备案编号:京ICP备05003498号
jia.lihua@ca-jc.com ; zhou.weichen@ca-jc.com; xu.jianbin@ca-jc.com; yu.shenbao@ca-jc.com; chen.zhongyi@ca-jc.com