Delete the rogue software under windows thoroughly

Yesterday, I updated a wave of 2345 Picture Viewer. A 2345 security guard was installed for some reason, but I couldn’t find the uninstallation entry in the control panel. There was no uninstall exe in the corresponding folder, and I couldn’t delete it with 360. Drop that folder... The
most uncomfortable thing is that my computer has a blue screen because it looks at station B ? ? ? And there are unusual card slowness at every turn.
This is so absolutely cut! ! ! !

So follow these methods to get the
most comprehensive way to enter Windows 10 safe mode.
How to completely remove the rogue 2345 Security Guard and 2345SafeCenterSvc service?


"Anything that can't kill you will make you stronger in the end"-I should be grateful for the emergence of this problem and the article "How to Completely Eliminate". I will list general rogue software routines to make a summary of experience.

file

Open [Task Manager] and
find "2345SafeCenterSvc", right-click it and select "Open File Location" to find the folder, right-click to delete the folder and provide administrator rights, but because the process is being used, it cannot be deleted... 360 Shred it shows success But the folder and the contents did not move at all...

process

Open the [Task Manager] and
find "2345SafeCenterSvc", right-click it and select "End Process" and find no effect? ? ?

service

Right-click [My Computer]-[Management]-[Services and Applications]-[Services]
found "2345SafeCenterSvc", right-click "Properties"-change the startup type to "Disable" and pop up "Access denied"? ? ?

Generally, I won’t be recruited here. Fortunately, there are posts from big guys telling me what to do next.


Drive (divers)

[C:\Windows\System32\drivers\]
There are several .sys files with a prefix of 2345 in this directory

It must be the ghost of these files, because the drivers folder are all drivers. It seems that 2345 Security Guard has performed physical-level operations (deleting files from the hard disk) of the user through these .sys files at the software level. Restricted, by trying to delete these .sys files, there will be a prompt saying that the file is occupied by the 2345SafeCenterSvc service and cannot be deleted, which also proves the above guess.
Finally found the source of the problem.
————————————————
Copyright statement: This article is the original article of the CSDN blogger "You travel the world all the way". It follows the CC 4.0 BY-SA copyright agreement. Please attach the original source for reprinting. Links and this statement.
Original link: https://blog.csdn.net/u010098138/article/details/102798992

Application data (AppData)

[C:\User\Personal Account (the first few digits of the mailbox)\AppData]

\Local\Temp
If you accidentally recruited, you must also clean up the temporary files in the C:\Users\Personal Account\AppData\Local\Temp\ folder.

\Roaming
a vote starting with 2345
and a vote not starting with 2345: GameHall_2345, Helper_2345, MiniPage_2345, Shield_2345Explorer and other folders,

Registry

[Win button + r]-[input regedit]
-to open the registry editor [ctrl+f] to search for 2345 one by one, or for example the more appropriate "2345SafeCenterSvc" and corresponding components.

How to delete

Now that all the targets to be cleaned up are found, use [PE Tool Disk] or [Safe Mode] to delete them.

Since it cannot be deleted in the current system, we can only use the U disk PE tool to
download all files and folders under
C:\ Program Files (x86)\2345Soft\ C:\Windows\System32\drivers\ about 2345 Delete all several files In
order to prevent others from remaining in the C:\Windows\ folder, you can search for 2345 related files and delete them through the file search function.
Finally, restart the computer to clean up the registry normally, and the corresponding 2345SafeCenterSvc service will disappear after the registry is cleaned up.
————————————————
Copyright statement: This article is the original article of the CSDN blogger "You travel the world all the way". It follows the CC 4.0 BY-SA copyright agreement. Please attach the original source for reprinting. Links and this statement.
Original link: https://blog.csdn.net/u010098138/article/details/102798992

2020.1.4 update ----
"Imperialism is dead, my heart is not dead".
Today, my computer has 4 blue screens inexplicably (PAGE_FAULT_IN_NONPAGED_AREA), the fan has turned
wildly, and I glanced at the task manager, mmp, and the 2345SafeCenterSvc process!
The same can’t be deleted. Take a
look at the 2345 security guard files that were deleted in the past
. They all appear again!
I entered the safe mode again and deleted it slowly.
Suddenly it occurred to me that it was the ghost of 2345 Picture King!
Simply unloaded,
then the 2345 security guards were all gone!
Damn, do you use this software to find sin and suffer ?
Later, when I searched for alternatives, it was really not as powerful as it is. Then
I thought about finding a green version and it ended.
2345 See the picture king green to advertise the pure version V9.1.2.8380 computer version

Removing Share on Twitter
removing Share QQ space to
remove the handset share to
remove information outreach
to remove excess components
to remove the automatic upgrade prompt
removal of the menu to check for new versions and other extra options
to remove Subscribe today's hot
to remove the upgrade option
to remove the program from checking
the non-modified resolved after Official version error prompt

It's cool to use, it seems that the author thinks more than I just want to delete 2345SafeCenterSvc and 2345minipage.
As for how to continuously read the pictures in the compressed package:
-> in the "Settings" of WinRAR -> switch to the "Viewer" tab -> in the "Unpack All Uses" column -> add the following code You can use your default viewing software to view pictures continuously in the compressed package.
*.jpg *.jpeg *.gif *.bmp *.png
The principle is very simple, if you need other image formats, you can add them manually.

Quoted from: https://www.zhihu.com/question/30901454/answer/272448865

Guess you like

Origin blog.csdn.net/sinat_27382047/article/details/103551324