Fake pony Activation (OEM10) causes the browser home page to be tampered with to 2345 resolution.

Transfer from http://tieba.baidu.com/p/4240325541

Suitable for running fake pony activation (OEM10) causes the browser home page to be tampered to 2345
Judge by running OEM10 Tool time, DLL name, DLL signature
1, C:\Windows\System32\drivers\UMDF\jihuo.dll (time in accordance with the name of a look is two goods from the "Activation"), renamed;
2, C:\Windows\System32\drivers\LHPLKernel.sys (time in accordance with the name of the two goods signed), renamed;

3, C:\Windows\System32\LHPLKC.dat (time in accordance with the name of a look is 2 files used in the data file), renamed;
4, C:\Windows\System32\drivers\surak.sys (time in accordance with the name of the two goods signed), renamed;

5, there is a file JUGY850F.txt, path C:\Users\admin\AppData\Local\Microsoft\Windows\INetCookies, the deletion should be all can, as if randomly generated name, content:
CNZZDATA1257017989
1633915353-1451127010-%7c1451127010
xm1.xxx333xxx.com/
1088
2441287168
30527192
1790396529
30490580
6, change after restarting a computer, and then open ie, Chrome, disgusting people problem solved, the system did not appear any problems, view Win10 and Office 2013 activation status, everything OK!!!

By the way, 2345 is too rogue.

Fake pony Activation (OEM10) causes the browser home page to be tampered with to 2345 resolution.