最近发现大量的广告引用,其中甚至有errorsafe这类间谍软件的引用,为了提高本博客质量,保护浏览者的计算机安全,从即日起开启引用审核!
关于 Errorsafe及卸载方法
此软件会在弹出对话框说机器发生错误,并提示你下载其进行修复,提示极具误导性,容易使新手上当。同时edwio对此软件发出警报,认定为威胁!
类别
Adware : 在网页上方或后方的弹出广告的软件,此时主用户界面还不可见,或与产品没有什么关联。
Annoyance: 仅对用户造成妨碍的任何特洛伊木马程序,例如将屏幕上的文字上下颠倒,或使鼠标莫名其妙地移动。
发源
作者
ErrorSafe
按照以下步骤从您的机器删除ErrorSafe。先备份您的注册表和系统,并设置一个还原点,防止发生错误。
停止运行进程:
利用任务管理器停止以下运行进程:
errorsafescannersetup2222.exe
programfilesdir+\errorsafe\ers.exe
errorsafescannerinstall_de.exe
df_kme.exe
programfilesdir+\errorsafe\install.exe
programfilesdir+\errorsafe\sr.exe
programfilesdir+\errorsafe\unins001.exe
programfilesdir+\errorsafe\unins000.exe
撤消 DLL 的注册:
使用 Regsvr32 撤销以下 DLLs 的注册,然后重启:
programfilesdir+\errorsafe\strres.dll
programfilesdir+\errorsafe\mmfix.dll
programfilesdir+\errorsafe\ftrec.dll
programfilesdir+\errorsafe\flfxr5.dll
programfilesdir+\errorsafe\fixcore.dll
programfilesdir+\errorsafe\ffwraper.dll
programfilesdir+\errorsafe\esspcheck.dll
programfilesdir+\errorsafe\espcheck.dll
programfilesdir+\errorsafe\ecc.dll
programfilesdir+\errorsafe\df_proxy.dll
programfilesdir+\errorsafe\df_fixer.dll
删除自动运行的引用:
访问 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
如果找到值 HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run errorsafe,立即删除并重启机器
清除注册表:
使用注册表编辑器清除以下注册项(如果存在):
HKEY_CLASSES_ROOT\clsid\{0ba379c6-0efd-4a28-932c-d20469052fd9}
HKEY_CLASSES_ROOT\clsid\{0bc09fc7-473d-4f9c-b49b-f4e3e244b47a}
HKEY_CLASSES_ROOT\clsid\{196c80cb-20a7-4cf9-9c98-9322fb1e35fb}
HKEY_CLASSES_ROOT\clsid\{356af2e9-8874-4c60-a3d8-0cb516c9e747}
HKEY_CLASSES_ROOT\clsid\{5284ac2a-ef00-4750-9b82-b5b907d26536}
HKEY_CLASSES_ROOT\clsid\{5e19dee2-8d2f-4a9c-a66d-76bbeedd15cb}
HKEY_CLASSES_ROOT\clsid\{77ca442a-0c72-492b-804a-82611e558142}
HKEY_CLASSES_ROOT\clsid\{7e73c9db-69fb-4580-8e8e-194b34a2306c}
HKEY_CLASSES_ROOT\clsid\{965a8d33-ae18-4c17-8011-fe42d81e0758}
HKEY_CLASSES_ROOT\clsid\{c033567c-68fe-419b-bcc4-135db7faf8eb}
HKEY_CLASSES_ROOT\clsid\{c85a4afd-ff76-4661-b76a-3e9bb2ce2dab}
HKEY_CLASSES_ROOT\clsid\{e73e3959-fb15-44d7-acb9-3a75377006fc}
HKEY_CLASSES_ROOT\escompcleancore.esappcleaner
HKEY_CLASSES_ROOT\escompcleancore.esappcleaner.1
HKEY_CLASSES_ROOT\escompcleancore.esccquickscan
HKEY_CLASSES_ROOT\escompcleancore.esccquickscan.1
HKEY_CLASSES_ROOT\escompcleancore.esfilecleaner
HKEY_CLASSES_ROOT\escompcleancore.esfilecleaner.1
HKEY_CLASSES_ROOT\escompcleancore.esinetcleaner
HKEY_CLASSES_ROOT\escompcleancore.esinetcleaner.1
HKEY_CLASSES_ROOT\escompcleancore.esregcleaner
HKEY_CLASSES_ROOT\escompcleancore.esregcleaner.1
HKEY_CLASSES_ROOT\escompcleancore.essystemcleaner
HKEY_CLASSES_ROOT\escompcleancore.essystemcleaner.1
HKEY_CLASSES_ROOT\esdf_fixer.esfixer
HKEY_CLASSES_ROOT\esdf_fixer.esfixer.1
HKEY_CLASSES_ROOT\esdf_proxy.esdrivermanipulate
HKEY_CLASSES_ROOT\esdf_proxy.esdrivermanipulate.1
HKEY_CLASSES_ROOT\esffwraper.esffenginwraper
HKEY_CLASSES_ROOT\esffwraper.esffenginwraper.1
HKEY_CLASSES_ROOT\esfixcore.esmmfixcore
HKEY_CLASSES_ROOT\esfixcore.esmmfixcore.1
HKEY_CLASSES_ROOT\esmmfixctrl.escofixengine
HKEY_CLASSES_ROOT\esmmfixctrl.escofixengine.1
HKEY_CLASSES_ROOT\esspcheck.esspcheck
HKEY_CLASSES_ROOT\esspcheck.esspcheck.1
HKEY_CLASSES_ROOT\flfxr5.flfixer5
HKEY_CLASSES_ROOT\flfxr5.flfixer5\clsid
HKEY_CLASSES_ROOT\typelib\{04392304-5221-4022-9300-be4128fb25b2}
HKEY_CLASSES_ROOT\typelib\{49f9ffb5-514d-4b69-b31d-2ae5a7d30ae6}
HKEY_CLASSES_ROOT\typelib\{68bc55e9-4d3e-4c89-89ac-7559763c98b8}
HKEY_CLASSES_ROOT\typelib\{692ca430-32c8-470d-ba1f-7e15e21e7043}
HKEY_CLASSES_ROOT\typelib\{6bd7e052-306e-497a-ad23-601bc6bfc305}
HKEY_CLASSES_ROOT\typelib\{77dc6558-60e0-4644-a3df-b31f29d113bd}
HKEY_CLASSES_ROOT\typelib\{9dd86cf2-8ac0-4fe0-b55a-601a302b5fd8}
HKEY_CLASSES_ROOT\typelib\{a73973ab-95a6-4abe-a046-de3bab2be448}
HKEY_CURRENT_USER\software\errorsafe
HKEY_CURRENT_USER\software\errorsafe\errorsafe
HKEY_LOCAL_MACHINE\software\errorsafe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run errorsafe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ers_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ersu_is1
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_erssdd
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\erssdd
删除文件:
使用资源管理器删除以下文件(如果存在):
errorsafescannersetup2222.exe
ers.exe
erssdd.sys
espcheck.dll
esspcheck.dll
ffwraper.dll
fixcore.dll
flfxr5.dll
ftrec.dll
install.exe
license.rtf
mmfix.dll
sr.exe
strres.dll
commonprograms+\errorsafe\contact customer support.lnk
commonprograms+\errorsafe\errorsafe deinstallieren.lnk
commonprograms+\errorsafe\errorsafe im netz.lnk
commonprograms+\errorsafe\errorsafe on the web.lnk
commonprograms+\errorsafe\errorsafe.lnk
commonprograms+\errorsafe\kundendienst kontaktieren.lnk
commonprograms+\errorsafe\uninstall errorsafe.lnk
desktopdir+\errorsafe.lnk
profilepath+\trace.log
programfilesdir+\errorsafe\activate.dat
programfilesdir+\errorsafe\bnlink.dat
programfilesdir+\errorsafe\database.sav
df_fixer.dll
df_kme.exe
df_proxy.dll
ecc.dll
errorsafescannerinstall_de.exe
programfilesdir+\errorsafe\df_fixer.dll
programfilesdir+\errorsafe\df_proxy.dll
programfilesdir+\errorsafe\ecc.dll
programfilesdir+\errorsafe\ers.exe
programfilesdir+\errorsafe\ers.url
programfilesdir+\errorsafe\erssdd.sys
programfilesdir+\errorsafe\espcheck.dll
programfilesdir+\errorsafe\esspcheck.dll
programfilesdir+\errorsafe\ffwraper.dll
programfilesdir+\errorsafe\fixcore.dll
programfilesdir+\errorsafe\flash.ini
programfilesdir+\errorsafe\flfxr5.dll
programfilesdir+\errorsafe\ftrec.dll
programfilesdir+\errorsafe\unins001.exe
programfilesdir+\errorsafe\install.exe
programfilesdir+\errorsafe\lapv.dat
programfilesdir+\errorsafe\license.rtf
programfilesdir+\errorsafe\lock.dat
programfilesdir+\errorsafe\mmfix.dll
programfilesdir+\errorsafe\program.sav
programfilesdir+\errorsafe\pv.dat
programfilesdir+\errorsafe\strres.dll
programfilesdir+\errorsafe\support.url
programfilesdir+\errorsafe\template.dbx
programfilesdir+\errorsafe\trace.log
programfilesdir+\errorsafe\unins000.dat
programfilesdir+\errorsafe\sr.exe
programfilesdir+\errorsafe\sr.log
programfilesdir+\errorsafe\unins000.exe
programfilesdir+\errorsafe\unins001.dat
删除目录:
使用资源管理器删除以下目录(如果存在):
programfilesdir+\errorsafe
programfilesdir+\errorsafe\backup
programfilesdir+\errorsafe\mp3db
programfilesdir+\errorsafe\mpegdb
programfilesdir+\errorsafe\repaired
programfilesdir+\errorsafe\tasks
programfilesdir+\errorsafe\wavedb