2009-05-06 23:50 警惕！关于慎用Windows优化大师的紧急通知！

lchunghan

2009-05-06 23:50 警惕！关于慎用Windows优化大师的紧急通知！




关于慎用Windows优化大师的紧急通知
3月最新发布的Windows优化大师 V7.93 Build 9.303 经分析测试，存在安全风险，请慎用。
运行Windows优化大师后，即使不选择任何设置，系统注册表会被修改，添加和修改的内容如下：
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearch]
"CustomizeSearch"="http://www.baidu.com/baidu?tn=youcome_pg"
"SearchAssistant"="http://www.baidu.com/baidu?tn=youcome_pg"
[HKEY_LOCAL_MACHINESOFTWAREWom]
"Masters"="0F0F0F0F"
"Wopti P2P Library"="V:WoptiUtilitiesWoptiP2P.dll"
"Wopti Utilities"="V:WoptiUtilitiesWoptiUtilities.exe"
[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopes]
"DefaultScope"="Baidu"
[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopes{24588FA4-10F1-41D7-B19D-6E22361E47FA}]
"URL"="http://www.baidu.com/s?tn=youcome_pg&ie=UTF-8&wd={searchTerms}&cl=3"
[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopesBaidu]
"Codepage"=dword:0000FDE9
"DisplayName"="百度搜索"
"SortIndex"=dword:FFFFFFFD
"URL"="http://www.baidu.com/s?tn=youcome_pg&ie=UTF-8&wd={searchTerms}&cl=3"
[HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchScopesGoogle]
"Codepage"=dword:000003A8
"DisplayName"="谷歌搜索"
"SortIndex"=dword:FFFFFFFE
"URL"="http://www.google.com/search?hl=zh-CN&q={searchTerms}&lr="
[HKEY_CURRENT_USERSoftwareMicrosoftWindows]
"Verion"="0013E86C8919"
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet SettingsConnections]
"SavedLegacySettings"=hex(03):46,00,00,00,70,01,00,00,01,00,00,00,00,00,00,
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,c5,58,13,73,7b,c9,01,
01,00,00,00,7f,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet SettingsZones3]
"1803"=dword:00000001

同时中途可能会连接以下不明网址：

ww w.930930.com
ww w.304304.com
ww w.072072.com
072072.com
ww w.146146.com
146146.com
397397.com
265.com
liveupdate.baidu101.com

如果是安装版本，则会强制捆绑安装非用户请求的软件（可卸载）。
对于非用户请求的注册表信息和浏览器默认搜索引擎的篡改以及可能访问不明网址，都有可能被恶意利用而带来安全风险，请大家慎用！
其他参考信息请自行搜索“优化大师全面转型流氓大师”的相关内容。
另，刚刚下载V7.94 Build 9.422版本，发现情况依然如此。<