Solved

remove chinese softwares

Posted on 2016-08-10
22
209 Views
Last Modified: 2016-08-20
someone brought in a system with some malware on it + chinese softwares
i ran the usual tools : AV, MBAM, roguekiller, adaware
i also removed old softwares with revo

however, in the context menu of this windows 7 system (updated to windows 10) i still see chenese entries, though in add/remove programs there are none to be seen (they were there before)

on some you can select uninstall - but then are presented with multiple choices in chinese

does anybody know how to delete these?
if someone reads chinese, i can post a screenshot of it
0
Comment
Question by:nobus
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 10
  • 5
  • 4
  • +1
22 Comments
 
LVL 35

Assisted Solution

by:Kimputer
Kimputer earned 125 total points
ID: 41750496
Google Translate is your friend here. Point mobile phone to the screen, and voila, the Chinese is LIVE OVERLAYED with English.
Of course, you can also post screenshots here (just takes hella longer).
Using live translation is also handy, because the dialogs are not simply "Yes" and "No", there are usually MANY MANY variations on it, including short sentences.
0
 
LVL 95

Assisted Solution

by:John Hurst
John Hurst earned 125 total points
ID: 41750522
Try this (often works)

Open Process Explorer, and look in the left side tree under Explorer for strange (alphanumeric) processes. Kill these processes but do not restart.

Close out of PE and run Malwarebytes followed by your own AV.
0
 
LVL 92

Author Comment

by:nobus
ID: 41750530
ok - will try
meantime i forgot how to capture a contextmenu with snipping tool
must be some keys to press i guess - Alt?
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 95

Expert Comment

by:John Hurst
ID: 41750542
The special characters (Ctrl-PtrScr) are documented in this Microsoft Article. I use SnagIt instead.

https://support.microsoft.com/en-us/help/13776/windows-use-snipping-tool-to-capture-screenshots
0
 
LVL 92

Author Comment

by:nobus
ID: 41750555
i've got it in the mean time : seems to be some chinese zip software
123
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 41750562
If the context items are not processes (See Process Explorer) then I will have to do some digging.
0
 
LVL 63

Expert Comment

by:btan
ID: 41750568
Run also junkware removal toolkit and CCleaner to reetry uninstallation of the s/w
https://www.piriform.com/docs/ccleaner/using-ccleaner/uninstalling-programs
Specifically, for CCleaner - see its past update test
A recent CCleaner update added a context menu editor to CCleaner which you can also use to disable or delete items that are displayed in Windows Explorer on a right-click. You do need the latest version of the program which you can download as a portable version or installer from the developer website.

You identify items by their program name, publisher or file path which are all listed in the columns here. Usually, all it takes is to look at the program column to identify the majority of programs. Sometimes, you need to look at the file path column as well to identify entries like UAContextMenu.

Items that you disable or delete are immediately removed from the context menu without need for a restart of the system.
http://www.ghacks.net/2012/07/22/clean-up-windows-explorer-menu-items-with-ccleaner/
0
 
LVL 92

Author Comment

by:nobus
ID: 41750572
yes john - nothing up your tree   :-(

btan  - if nothing els shows up - i'll try your solution - since it is a more general way
0
 
LVL 63

Assisted Solution

by:btan
btan earned 250 total points
ID: 41750589
Looks like kuaizip and you can also consider SpyHunter to surface its traces and a manual removal in safe mode with the application not running in startup https://www.enigmasoftware.com/kuaizip-removal/
FYI - The free version scan only and removal will requires purchase
0
 
LVL 92

Author Comment

by:nobus
ID: 41754965
i never saw the last post - will test further
but as said - it was tested with AV, mbam and roguekiller
i doubt if spyhunter does better
0
 
LVL 63

Accepted Solution

by:
btan earned 250 total points
ID: 41759597
how is the testing ? Wouldnt the uninstall software works though it give dialog in chinese language.

In your image in ID: 41750555, it shows (bottom) a feedback prompt asking for your email and the (top) prompt stating as the Kuaizip is asking to be the default compression software as it is not. The "(O)" is "OK" and "(C)" is "Cancel". Maybe can shows the prompt as you try to uninstall them
0
 
LVL 92

Author Comment

by:nobus
ID: 41759777
btan - if you can read it, post what i have to click in those imges  - and you're the winner
i have no idea at all what to click
0
 
LVL 63

Assisted Solution

by:btan
btan earned 250 total points
ID: 41760355
Those dialog is not asking the software to be removed. For the top smaller dialog, you should click "C" as you will not want it as default zip or compress software to ne associated. For the bottom bigger dialog, it is a feedback prompt which you need not check the option as they are asking customer for their feedbacks or even supply your email or phone. You can click dont proceed on the right button.
0
 
LVL 92

Author Comment

by:nobus
ID: 41760565
ok nice
a last Q  - do you happen to know how to use google translate on such popup windows ?
0
 
LVL 63

Expert Comment

by:btan
ID: 41760571
I thought the software will have language support selection though.
Manual mean instead to Copy & paste those statement in the dialog  and put all in a document and upload into Google to translate (https://translate.google.com/). Don't think there is an software or tools for automated means to translate the dialog displayed statements
1
 
LVL 35

Assisted Solution

by:Kimputer
Kimputer earned 125 total points
ID: 41760634
As I mentioned, you should just use your phone (Android > Google Translate) to point to the dialogs. The display on your phone shows the Chinese, and IMMEDIATELY, it will OVERLAY it with English. It looks like the screen is actually in English now (since the overlay has dynamic font sizes, it fits exactly over the chinese characters).
1
 
LVL 92

Author Comment

by:nobus
ID: 41761036
kimputer - i have no smartphone -so i can't use your solution
i'll look if i x
can find one
0
 
LVL 92

Author Comment

by:nobus
ID: 41761039
@ Mod  - can you assign points to btan and kimputer?  i cannot close this Q it seems
0
 
LVL 92

Author Closing Comment

by:nobus
ID: 41763448
ok i was able to close it - thanks all
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 41763565
Good that you were able to work out the closing wizard.
0
 
LVL 92

Author Comment

by:nobus
ID: 41763571
its Always nice when something comes to a favorable end
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Copying files across 2 remote servers 11 39
Global Cyber attack 5 56
Replaced printer and cannot print 15 36
RDP exploit 13 18
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question