View Single Post
  #3  
Old 06-25-2014, 06:25
TempoMat TempoMat is offline
Friend
 
Join Date: Jan 2006
Posts: 89
Rept. Given: 10
Rept. Rcvd 6 Times in 6 Posts
Thanks Given: 4
Thanks Rcvd at 28 Times in 21 Posts
TempoMat Reputation: 6
I just found out how Baidu was installed.

It came on the computer through JDownloader.
The installer was still located in a sub folder of JDownloader's Temp-Folder

The file is "BavPro_Setup_Mini_115.exe" with the following characteristics:

File size: 1.23 MB (1,291,624 bytes)
Size on Disk: 1.25 MB (1,310,720 bytes)
File version: 4.8.0.1383
Description: Baidu Antivirus Mini Setup
Copyright: Copyright (C) 2013 Baidu, Inc. All rights reserved.

The Dll that was blocking all uninstall attempts had "bavha" in its name and there were far more keys in the registry with the name BAV* in them than Baidu
Reply With Quote