Baidu Bar.....BDGuard.sys again!

[emgee]

I see that more than a year ago a member had a lot of trouble getting rid of the BDGuard.SYS Trojan. Which has now been identified as a very dangerous beast. Dare not use Paypal, my bank or anything that needs passwords.
I have got it on my laptop, came from the PPStream which I have used to watch soccer games.
Whilst I am more than competant, I am no expert with computers. I don't think I could do all the registry edditing safely that the guy above did.
I would have thought that after 18 months there would now be a program that would clean it.
Truesword, amongst others, states it can clean it but it can't! Spybot, Zone Alarm Suite, Lavasoft and AVG V8 all find it and after "fix" say they have cleaned it. But as before, within seconds it's back. Nearly threw the laptop out the window yesterday.
Anyone have any latest info that might help.

[CrowdAds]

[TQ]

This thread may assist you...

I only glanced at the thread, but the fellow claims to have resolved the issue.

[TQ]

Here's another method that I located after searching. I found it here...


Removal of Badiu.Sobar is as simple as downloading and instaling Windows Defender ,(if not already installed) , rebooting in safe mode (not with networking) and running Defender. The files will be deleted and the system will ask to re-boot to complete removal.

Works on Windows XP Home SP2 and Pro SP2 as tested on my machines.

These are the files associated with it:

C:\Program Files\Baidu\bar
-baidubar.dat
-BaiDuBar.dll
-bdgdins.dll
C:\Program Files\Baidu\bar\img
-imglist.bmp
-logo.bmp

Registry Keys:

clsid:
HKLM\SOFTWARE\CLASSES\CLSID\{FE14F22E-BE14-4F08-A80F-F27BC3A67B2D}

clsid:
HKLM\SOFTWARE\CLASSES\CLSID\{B580CF65-E151-49C3-B73F-70B13FCA8E86}

clsid:
HKLM\SOFTWARE\CLASSES\CLSID\{A7F05EE4-0426-454F-8013-C41E3596E9E9}

clsid:
HKLM\SOFTWARE\CLASSES\CLSID\{7C76C055-ED6E-4535-A70F-CD476E727F67}

regkey:
HKLM\SYSTEM\CurrentControlSet\Services\BdGuard

regkey:
HKLM\Software\Classes\MimeFilter.AdFilter.1

regkey:
HKLM\Software\Classes\MimeFilter.AdFilter

regkey:
HKLM\SOFTWARE\CLASSES\CLSID\{FE14F22E-BE14-4F08-A80F-F27BC3A67B2D}

regkey:
HKLM\SOFTWARE\CLASSES\CLSID\{B580CF65-E151-49C3-B73F-70B13FCA8E86}

regkey:
HKLM\SOFTWARE\CLASSES\CLSID\{A7F05EE4-0426-454F-8013-C41E3596E9E9}

regkey:
HKLM\SOFTWARE\CLASSES\CLSID\{7C76C055-ED6E-4535-A70F-CD476E727F67}

regkey:
HKLM\Software\Classes\BaiduBarEx.DropTarget.1

regkey:
HKLM\Software\Classes\BaiduBarEx.DropTarget

regkey:
HKLM\Software\Classes\BaiduBarEx.BandIE.1

regkey:
HKLM\Software\Classes\BaiduBarEx.BandIE

regkey:
HKLM\Software\Classes\BaiduBar.Tool.1

regkey:
HKLM\Software\Classes\BaiduBar.Tool

regkey:
HKLM\Software\Classes\BaiduBar.Baidu.1

regkey:
HKLM\Software\Classes\BaiduBar.Baidu

regkey:
HKCU@S-1-5-21-1715567821-1482476501-725345543-1003\software\baidu

driver:
BdGuard

file:
C:\WINDOWS\system32\drivers\BDGuard.SYS
__________________

[TQ]

Good luck.

[emgee]

Many thanks, will give it a go.