Viewing Chinese viruses from a computer. Baidu - what kind of program is this and how can you get it out of your computer? Vidality baydu report description

Є such Chinese antivirus – Baidu. Moreover, it seems, a whole lot of disgrace. Especially since I haven’t installed anything yet, I can’t say anything about it. Ale bіda in the fact that among the koristuvachіv about the new one, the glory is rotten. Vіdbuvaєtsya through those, scho pіd chinese antivirus masquerades different shkіdlіvі programs (for example, Baidu An, Baidu Sd and others) і, working on computers, psyut їkh vlasniki. These malwares improve the operation of the system, change the home page in browsers, display different ads in them, take advantage of unsafe software from the Internet, install toolbars for browsers.

Yak qia Chinese canoe go to the computer? As a rule, it's worth it if you want a program on some kind of "calamute" site. And then we’ll wait until the hour of installation, Baidu will be installed on the computer before you. Moreover, the whole process sounds to take place in the attached mode, and you can’t get started when you are installed.

To me, as an IT specialist, it is surprising that most of these Chinese programs are signed with a digital signature of the Baidu company. In fact, it turns out that these are "legal shkіdniks".

On which I, perhaps, I will finish my introductory word, and I will move on to the conclusion on the smut of the question: “ How to see baidu from the computer?”.

At this article I preach to you two ways to contact Baidu. The first one is Baidu's automatic shutdown for the help of the AntiSMS program. Other - remote Baidu in manual mode.

If you choose the first option, you'll need to create a flash drive containing the AntiSMS utility and then infect your computer with it. Let her do it all herself. Tsey method of reporting descriptions of the axis. Vіdkrivaєmo її that robim everything, as it is written there.

How can we fold this way for you, otherwise I didn’t do it, then I can do it baidu practically by hand. I’ll tell you once again that this process is not easy: there’s no way to solve the problem by pressing one button.

Alright, let's get started:

1. We support Baidu services. On the infected computer, go to “Start” - “Control Panel” - “Administration” - “Services”. The list knows the service for them Baidu(otherwise it is similar). My vid has a service running “ BaiduHips”:
Vіdkrivaєmo її podvіynym klatsannyam i naskaєmo button "Supinity". Since you don't have any daily services related to Baidu, it just looks like it.

2. Finish the Baidu process. Click on "Windows Task Manager". For this, you can right-click the mouse at the bottom of the screen on the task bar and select the item "Start Task Manager":

Here we go to the tab “ Processes". We sort through all the processes for the alphabet, clicking on the “My image”. Now we wonder what we have here є letter B. This screenshot shows that six Baidu processes are running on the computer:
You can click on the skin on the skin process with the right mouse button and select the item “ Open a place to save a file". If you see it all the time, at the top row of which you can follow the path to the first file. Ale zam'yatovuvati tsey way neobov'yazkovo.

Click with the right mouse button on the skin of these Chinese processes and select “ End the process". The system has been reloaded, and if you want to complete it, just press the “Finish Process” button again.

It is possible that not all of Baidu's processes can be completed. The window will appear: “The operation cannot be completed. Informed in access". It's okay - just skip yoga:

3. We see Baidu from auto-advancement. For whom you can speed up with a regular Windows tool (“Start” - “Vikonati” - msconfig- “Auto-advantage”), but I will pronounce the victorist utility CCleaner.

Let's start CCleaner(if you don’t have it - you can make a profit) - select the tab “”. We know the program, in which figure the word “ Baidu". Click on it with the right mouse button and select "Vidality" - "OK". There may be some sprats like that here. It is not a fact that they are all visible.

4. We can see Baidu through the regular Windows installer. We go to “Start” - “Control Panel” - “Programs and Components” (“Installing and Remote Programs” for Windows XP).

Here we order the programs by date of installation(For which one, click on the "Enabled" item). Tobto. at the very top there will be programs that have been installed recently. In my mind, the beast showed up Chinese programs:

It is possible that you will not have them.

We try to delete the programs from the computer: we see the first click and press the "Visibility" button. It’s coming suddenly, in which the hieroglyph is embossed on the vision:

Vzagali the whole process of withdrawal is very intuitive, tk. I don’t know Chinese characters (I think it’s more quiet, who reads this article 🙂).

The next windows have embossed buttons, which I have seen:

In the rest of the week, you can put all the checkboxes:

One program was removed!

Now we can see it coming:

5. Now we are speeding up as a useful utility for the removal of various Adware, as it is called. It is completely free of cost and will not require installation.

Get the program. Next run її - press the button “ Scanuvati". After the scanning process is completed, press the button “ Clear". Let the program ask reset computer- let's wait:

6. As soon as the computer goes into re-advancement, it’s time to start a lot of times on the keyboard F8 key in order to have a meal in Safe mode. It is necessary to make sure of the obov'yazkovo, otherwise all the vicons will be familiar to us until the next day - I can clean up my computer from Baidu instead of using Safe Mode.

Otzhe, press the key F8 pіd hour zavantazhennya computer'yutor. After one hour, we will see the following screen:
For help, the arrows on the keyboard see the item “ Safe mode”and press the Enter key.

After Windows is taken into Safe mode, let's go to “Computer” (“My Computer”). I don’t care that all the icons on the working table are large, the building is low on the screen and the starry look is not very loud.

We are typing a word at the vikni Baidu and typing Enter:

Check the hour, the docking system does not know on the computer all the ways, de є Baidu. If the list will be left with promptings, we can see all the folders and files, so the baidu will appear:

If the file is known to the system folder by raptom, then the folder itself, obviously, cannot be seen - only the whole file can be seen.

I’ll point a butt, which folders can have files Baidu(including attached files):

C:\Program Files (x86)\Baidu\
C:\Program Files (x86)\BaiduEx\
C:\Program Files (x86)\Baidu\BaiduAn\3.0.0.3971
C:\Program Files (x86)\Baidu\BaiduSd\2.1.0.3086
C:\Program Files (x86)\Common Files\Baidu\BaiduHips\1.1.0.733

C:\Program Files\Baidu\
C:\Program Files\BaiduEx\
C:\Program Files\Common Files\Baidu

C:\Users\Public\Documents\Baidu\
C:\ProgramData\Baidu\
C:\Users\your computer name\AppData\Roaming\Baidu
C:\Users\your computer name\AppData\Local\Baidu\Baidu\1.3.1.157

Also, Baidu files can be transferred to the system under the supervision of the drivers. The axis is a list of such files, which you need to know and manually see:

C:\Windows\System32\Drivers\BDMWrench.sys
C:\Windows\System32\Drivers\BDSafeBrowser.sys
C:\Windows\System32\Drivers\bd0004.sys
C:\Windows\System32\Drivers\BDMNetMon.sys
C:\Windows\System32\Drivers\BDArKit.sys
C:\Windows\System32\Drivers\bd0003.sys
C:\Windows\System32\Drivers\bd0002.sys
C:\Windows\System32\Drivers\bd0001.sys
C:\Windows\System32\bd64_x86.dll
C:\Windows\System32\bd64_x64.dll

Since all the folders with Baidu files will be deleted, run the search again: it's still gone. Let's restart the computer.

7. After that, as the computer is re-vanquished, Baidu is not guilty of anything else. But I still recommend scanning the computer with the program Malwarebytes Anti-Malware.

You can download Malwarebytes Anti-Malware from the official website (download the full version of the free version). It is installed and launched. At the vіknі, scho vіdkrylos, embossed posilannya " Update Now”, to update the anti-virus basis of the program. Let's keep pressing the big button ScanNow”, to rewrite the reverb:
After the end, you will see the list of known shkidlivy components (like stinks, obviously, they were left in the system). Into this vipad we press the button “ Apply Actions"("Come in to live").
After removing all malware from your computer, you can uninstall Malwarebytes Anti-Malware.

Today we are learning to clean up the computer from the Chinese virus Baidu, which is invariably installed for the koristuvach and visibly hums the entire system. You know how the future will be protected from such unacceptable surprises and who can see the spread of the virus, which is not stealing anything from you.

What is Baidu?

And yet, in the wake of this, unknown persons began to actively expand this shkidlivy PZ, as it looks even more similar to the original antivirus, and even more “smіttyam” with the Baidu logo. The provocation went on: in our country, there’s nothing to joke about such a joke and this funny product, but when you’re angry, you’ll get a virus ahead of you.

Krok 1. Pochatkov's foreshadowing.

1. UltraAdwareKiller 0.1.0 (32-bit version | 64-bit version)

Restart the computer in safe mode, which supports the firmware drivers. For the last hour of reloading before the Windows logo appears, press the F8 key on the keyboard once. As a result, the following window will appear:

Windows XP:

Select the program (blue icon), press "Vidality".
When a window with Chinese characters appears, select the button with white ashes in the lower right corner, DO NOT change the blue:

Here, first, at the end, more confusion appears: we click on the back of the displeased horned Chinese, and only then we press the button.

Krok 2. Residual purification.

At the main window, the program presses "Scanuvati".
The program will revise everything, starting with shortcuts, finishing with files, folders and records at the registry. After the end, you can marvel at the skin of the tabs that she herself knew and, as it is necessary, to pick up this element, unchecking the new checkmark.

If AdwCleaner works in safe mode, skip this section and go to the next program:

Important: before using programs, enable access to the computer to the Internet! The version itself miraculously copes with the Baidu pseudo-antivirus, and the axis after the update stops joking around. So we are defending.

Important: check it out, only Baidu viruses are marked with ticks, because for promotions, the program can mean and, say, an extension for your browsers, if you win. Be respectful!

Since the virus changes from hour to hour, for complete peace of mind, you can now run the newest version of UAK. Vikonuєmo tі dії і everything that will be found, you can see it. Now you can zavantazhuvat computer as usual.

If the AdwCleaner in the safe mode did not want to work, at the very same time, run yoga, having done the check, as it was described above.

Nasamkinets, run this program and check the registry check:

Press "Clear", and after seeing all the known pardons, repeat the revision again. Even more often than not, that friend who is farther away knows more pardons. Repeat this procedure (ring out 5 times) until nothing is found.

How to protect yourself from such viruses?

1. Perevіrenі dzherela filesіv, scho zavantazhuyutsya. For some unknown site, it’s easy to stumble upon a file, zagornuty in the so-called “zavantazhuvach” - an advertising module, which at the same time needs to install more mass of brandy or shkidlivy PZ. Also, you can change the start page in browsers, add different unsafe plugins too.
2. Give respect to those who are written during the installation (especially, as the installer is unknown to you). When installing the software, simply press the “Next” button or “Accept” doti, the docks will not appear at the end of the installation scale. And at the same time, at the stages before installation, you are often prompted to voluntarily install that other program, for which you can wait, pressing “Next”. An unequivocal recommendation cannot be given, because the old look and the button layout are often resurrected, but at Baidu’s side it looks something like this:

Following the same principle, different products of Mail.Ru and Yandex are often installed. Such a way of expanding neobov'yazkovo means that you take away the virus, but the ability is great, as we have gone over the butt of this material.

Visnovok

Baidu allows the root to be done in depth, but for programs that specialize in advertising software, it does not take a lot of time to do it. Fortunately, the Danish virus does not become unsafe, but it can also neabiyak zіpsuvati nerves, shaking the system as a whole.

Baidu is a Chinese antivirus, and it says it all. The program of the creators of the biggest hit Google has been hacked. The program runs in a seemingly slow program, installs on the computer in the background mode (silent installation) without notification of a crash, and after launching, continuously monitors active processes, boosting the computer's work and conflicting with the installed anti-virus. Rich Windows, having become a victim of such an "antivirus", are joking about ways to see Baidu. Let's get busy today.
Zagale, the Baidu removal procedure is little affected by the uninstallation of other products, except for the presence of the uninstall.exe file in the directory with the program and the Chinese language interface, which makes it easier to navigate such a simple task, like clicking on the “OK” button.

• Let's finish all the steps to Baidu's processes on Windows.

Shchob vikonati tsyu diyu, zapuskaemo dispatcher zavdan. Vіn vyklikаєєєєєєєєю for help keys "Ctrl + Shift + Esc" or the context menu in the Windows taskbar.

Go to the “Processes” tab and sort them into im'ya, clicking on the name of the first column “Im'ya image”.
Then we know all the processes, the names of which are based on the words “baidu” and we complete them all in order: we see the process by clicking the mouse and press Delete, or we select the command “End the process” from the context menu of the process, and we can traces.

The simplest way to use the Process Explorer utility. We can see the head process named Baidu, albeit Shift+Del and confirming the completion of the process tree.

• We can see the program from the computer for the help of a built-in uninstaller through the “Taskbar” subtitle under the name “Programs and components”.

To remove the program, open the "Control Panel" and go to the "Programs and Components" - the program, as a confirmation of the removal of any Windows components.

Going down the list of installed Windows add-ons and we know “antivirus”, focusing on the blue icon and the name to avenge the hieroglyphics.
Click on the context menu of the element, which is Baidu, and select a single menu item "Visibility / Change".

After the appearance of a yellow veil with a white sun, we can use the middle button to click on the white button, ruffled to the right (like on the screenshot).

Once the Baidu installer starts up on the computer. In order to remove the smittya, in the upcoming future, we also pressed the button, which launched the uninstallation of the antivirus from the computer.

We confirm that we want to save Windows from add-ons by clicking on the same white button "Vidality".

When the rest of the dialog box appears, we simply press a single button, an analogue of the classic “OK”. It’s not necessary to lose the daily ensigns.

• It is possible to remove other programs, as it is installed at once from Baidu.

The element of the Windows Care Panel is launched under the name “Software and Components” and, like Baidu’s options, clicks a single item of the context menu of the program, which is missing, with a green icon.

The window with a green title also has an embossed left button that allows you to see Baidu.

Against this background, the program is removed from the computer under the protection of Windows. Check, the docking process is not completed.

In the rest of the week, it is also embossed on a single button.

• Allow the computer to run Chinese programs, which is enough to tamper with the Windows robot.

Once again, the launch of the "Deployment Manager" is a method and we try to complete the process, which was left after Baidy. As a rule, the fault of theft and the operation will end in failure.

Reboot the computer in safe mode by pressing the F8 key and selecting the appropriate menu item after BIOS has been booted.

We go into the directories "Program Files" and "Program Files (x86)" according to some, we know the directories, which are based on the phrase "Baidu", we can see them from the computer, but for the help of the combination "Shift + Delete", by the way cat.

If so, you can speed up the functionality of the CCleaner program or something similar to it. This utility scans the computer for presence on a new unsafe program and allows it to be deleted both from the disk and from the Windows registry.

(Visited 273 times, 1 visits today)

Baidu is a Chinese program, like an antivirus. However, there are scarves on it that look like coristuvachs, wisely, that Baidu independently installs itself on the computer, and if you start, you can do it all the way and show yourself the right computer virus. Moreover, if you try the remoteness of the programs, the programs will end up with even more problems, because the interface is absolutely similar to the Chinese one, and you can only visualize it using the tick method. And even if you have mercy on the button, you can install other additions to your computer on the computer, and as a result, you may not be able to vryatuvati yogo, such a shkidlivogo software security. However, that's not all. Navit that the program can be removed through the її uninstallation, with a little re-installation, it will be automatically installed again on the PC.

As soon as you grow up, you will be restored in the right viral way. When entangled with any programs from the Internet, Baidu zavantazhuetsya in a hooked mode and dragging it to the computer in an incomprehensible way for a koristuvach. After the download is completed, the program will automatically install itself on the computer and start, as it is called, on a new master. Corystuvachіv PC repair forever turbulent splicing windows, misunderstood program sounds, the computer repair better, the Internet crashes and so on, right up to the fact that the PC will become golden Windows.

What is more important, different popular anti-viruses do not recognize Baidu as a virus and do not give regular warnings about the threat. At the same time, the PC is weakened and sings that the program is not good enough to get into trouble with your computer.

Prote, how can I see the Chinese "baid" from Windows again, so that there was no news and was not restored any more? Below is a report on the instructions for removal from a personal computer.

On the back of the head, try to see it in a natural way. For this, you need to press the combination of keys Win + X, in the context menu, which appeared, select the "Control Panel" item. Let's go to the "Program View" tab.

Among the programs installed on the PC, we are talking about Chinese programs. Let's get it right, the yarlik of what looks like a green shield. Click on it with the left mouse button, then select the “Visibility” item.

Vіdkryєtsya vіkno uninstallation. Of the two proponated options, they are chosen, illuminated in green color, we choose the last option. Then, at the approaching dialogic future, we will again choose the left variant of both. If so, the programs are removed. After the completion of the process, click on the single button, thus completing the previous program.

Let's move on to the next program, the image is a blue shield. Well, I know I still click with the right mouse button, select the “Vidality” item. Further, we follow this principle: we choose from two proponated hieroglyphs of the same one that is not illuminated in blue color. Vikonuemo so dvichi, after which the process of removal is initiated. For the rest of the dialogue, I will again select one available button, and this will complete the process of deleting Baidu.

However, not all. Since the Chinese "baida" was no longer installed, it is necessary to remove the connection process.

Croc other: Remote processes

Pressing the key combination Ctrl + Alt + Delete, this rank calls “Task Manager”. In the middle of the top tabs, select the "Processes" tab. We see before us all the processes that are taken from the PC at once. Among them, there may be one or a few processes of the Baidu program, you should know them from the list, which is clumsy, the description of such processes of writing will be written in Chinese language.

After that, as absolutely all processes are known, you should create a text document on the desktop and open it. Dali diemo following the approaching principle: we select the first-stupest “bidi” process in the list and click on it with the right mouse button. In the context menu, you need to select the item "Open where to save the file".

We see a folder in front of us, as if to show the place of the process. At the exact hats, we have a better way to the process. Copy it and then paste it to the text document. So it is necessary to fix it with the skin process, we will check with the dispatcher on the day.

Nav_scho mi robimo tsey krok? On the right, in the fact that when trying to remove folders manually, we see a reminder “It is impossible to see folders, to that… they are written by another program.” For reasons why, we need to see the process, zayshovshi at windows through the "Safe Mode". Just so we can see the skin folder and the “bidi” process without a trace.

How to enter the computer through the "Safe Mode"?

Method 1
On Windows bugs, for a little "vintage", this method works. Reboot the computer and press the F8 key if the computer is not zavantazhte through the "Safe Mode".

Method 2
Even though Baidu is running on Windows 8, you need to go to the offensive method:
Press the revive button on the Windows login screen, then immediately press the combination of buttons on the Restart screen and the Shift keyboard. Windows will give you a choice, from which of the following you can choose the option Diagnostics. Then at the menu "Diagnostics" it is necessary to press the button "Additional parameters". Next, select the item "Attack settings" and select the option "Turn off safe mode" and "Restart". After restarting Windows, you will be prompted to select three options to secure "Safe Mode". Next, press the F4 key to start Windows simply in "Safe Mode". In the safe mode, the Chinese program cannot run the process, so we may have a chance to get it right.

On the working table, we save a text document from the ways of arranging files in Baidu. Dali sled viklikati row "Vikonati". For which you press the combination of Win + R buttons. Copy the first path at the list, insert at the row "Vikonati". In this order, we are told before the file is opened and we can see it without a trace. For this, click on a folder or a file with the right mouse button and select the "Visibility" function in the context menu. Absolutely the same robimo z usіma ways, vidyayuchi all folders to the Baidu virus. As soon as you see all the files associated with this program, you can reset the computer to the original mode.

After restarting the PC, the Chinese antivirus of the unknown was found without the ability to independently install itself, which means that your computer will no longer be threatened by anything.

What is Baidu? On the back of my mind, as if the Chinese antivirus was in disgrace, a shalena thought came to me to start expanding yoga as much as possible like a virus.

At the most important vipadkіv koristuvach navіt zdogudovatimetsya, that on this machine there was a software security, but the process of installing attachments and zdіysnyuєtsya in automatic mode.

You won't be able to use the summative software.

Nazrіvaє logical food: how to see baidu from the windows computer, so that the computer becomes a new pratsyuvati, how to lie down.

Early preparation

We need to copy all the available addresses on the disks, de zustrichaetsya wonder-antivirus. For which launcher, the dispatcher is scheduled. Zrobity can be done in 2 ways:

1. CTRL+ALT+DEL;
2. Right-click on the Start panel and select the menu you need.

It is necessary for the dispatcher to know that open a tab with processes, after which to sort out the program security.

For whom to press on the column im'ya image, schob put all running programs and programs in alphabetical order.

The column "Description" will help you localize the Chinese spy - you can see it in hieroglyphs.

In this case, you can design as many as 6 processes, as if they were used to support the main one.

Create a new document in notepad, in which copy to the address of the running program.

The algorithm is simple to dissimilarity: press the right button on the task and select the item, instructions on the screenshot.

You will win the victory over the roztashuvannyam. It’s less likely to see the right address, as we still need more than once. Copy this character set from our document.

For the skin process (we have seen 6 of them), we work the same. Remember that it is even more important, and keep on repeating the ways, all the same copy them from the document.

For example, the picture will be approximately the same.

Your paths can be shaken up, so don’t give special respect to the butt. Here there is no more evidence of the algorithm and the sequence of victorious actions.

Vidalennya PZ

Ignorant of those who were uninstalled in China, I didn’t understand how rich, there was nothing coherent in them. Golovne - buti respect.

For the cob it is necessary to go to the "remote programs". Press "Start" - "control panel". The child point, before speech, may be called "software components".

Check, while the entire list of PZs is proven, and we know a bad product from a blue label. Greens do not call us.

Right-click on the new one to see.

You are welcome to do it in a Chinese way. Now you have to rely only on screenshots with explanations, so it’s easy to confuse the button.

Thumb on the visible key.

To appear at once with a sign of nourishment and wondrous prohannyam. Tisnemoly liviy typing of hieroglyphs, as shown below.

So you confirm the vision. Now the checks are being filled, while the files are being uninstalled, which are to be saved. Do not hurry up, for for example, I will renew my victories.

It's only one button, but at the same time, we don't set any number.

Now let's think about a different program from the "green" label. Її you need to take a similar rank.

To work for the sake of doty, don’t overdo the rest of the docks, that the big-mensh system has been “cleansed” in the form of a third-party infection of the Chinese shtibu.

Get respect! If you think that everything is for what - you will have mercy. Open the dispatcher again and change your mind, Baidu, as before, is functioning, but even in a smaller number. Now you need to “drive in” all the redundant processes.

Let's just say that you can't get into the standard path. You pobachit such a reminder.

Chastkovo vіd nebazhany guest you pozbulisya. It was left to clean up all the uncommon smittya. For which you need a text document, some kind of creation on the very cob of the process.

For the cob, we reboot into the safe mode. Pressing restart and periodically pressing F8 on the keyboard. As if everything is set up correctly, it seems to be so victorious.

We are called "Safe Mode". Open this point with arrows and press on Enter. Now Baidu can't start, the shards have given us our rights.

It is less likely to “finish off” the unfortunate antivirus.

Open a notebook, copy the first path and insert it into the Start - Vikonati row. Pressing "Introduction" that is passable for the required address.

You bachite a piece of folders with shukani im'yam, as it is necessary to see it irrevocably.

Vikoristovuyuchi before copying the way, you can see everything that costs a shkidlivy PZ.

Now, if you have pierced all the cumbersome and laborious work of the robot, and you can see the baidu antivirus from your computer, you can boldly reset the system to normal mode and enjoy third-party software security.

Please! Dodatkovo we recommended installing a special cleaning program on the CCleaner or Auslogics BoostSpeed. With this help, it would not be bad to scan and clean the disks C and D, and then we can correct the pardons to the registry. You tsep pіde tіlki on melancholy. At the same time, you are still restless, that you have seen inappropriate software.

Now you've crossed the line for the last time, download something on the Internet from unknown and suspicious dzherel zagrozhu.

In the shortest possible way, you can get the wrong file. In gіrshomu - the virus is under attack, otherwise the axis is such a marvelous antivirus, and you don’t know that the virus has penetrated your system.

If you don’t feel like it - ask a knowledgeable person to help you, or learn to use torrent trackers and safe resources, it’s like a “widow” service. Good luck to you.

How to access Baidu from Baidu's computer How to access Chinese software

How to remove Baidu antivirus from a Windows computer forever? report instruction