Mozilla Firefox - Omiga Plus jak usunąć


(superbike08) #1

Witam, zamsiat strony startowej pojawia mi sie coś takiego, jak wspisuje coś w pasuku too szuka przez Omgia Plus a nie przez google, nie moge to ususac bo tego nie ma nigdzie :frowning: http://zapodaj.net/f64d66a58c664.png.html

proszę o pomoc dzięki za odpdwiedzi


(Acorus) #2

Pobierz Farbar Recovery Scan Tool http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ zgodny z wersją systemu 32-bit lub 64-bit.


(superbike08) #3

FRST - http://wklej.org/id/1609999/ Addition - http://wklej.org/id/1610002/


(Acorus) #4

Odinstaluj Solution Real.Otwórz notatnik systemowy i wklej:

Task: {0A111FF1-EE95-46CD-917D-59A977394833} - System32\Tasks\{1AE76FB1-669B-4693-BAF8-ACA648E1E128} = Chrome.exe http://ui.skype.com/ui/0/7.0.0.100/pl/go/help.faq.installer?LastError=1618
Task: {43ED9B2C-2076-4DC0-B1E9-86E1D614332B} - System32\Tasks\{01E156A8-B957-4269-A043-205D9059A7E4} = Chrome.exe http://ui.skype.com/ui/0/7.0.0.100/pl/go/help.faq.installer?LastError=1618
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpppts=1421579272from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1421579211from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpppts=1421579272from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1421579211from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13q={searchTerms}
HKU\S-1-5-21-856208234-4236845106-3171623757-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsppts=1421579272from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13q={searchTerms}
HKU\S-1-5-21-856208234-4236845106-3171623757-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpppts=1421579272from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13
HKU\S-1-5-21-856208234-4236845106-3171623757-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpppts=1421579272from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13
HKU\S-1-5-21-856208234-4236845106-3171623757-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsppts=1421579272from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13q={searchTerms}
SearchScopes: HKU\S-1-5-21-856208234-4236845106-3171623757-1000 - DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13ts=1421579280type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-856208234-4236845106-3171623757-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13ts=1421579280type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-856208234-4236845106-3171623757-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13ts=1421579280type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-856208234-4236845106-3171623757-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13ts=1421579280type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-856208234-4236845106-3171623757-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13ts=1421579280type=defaultq={searchTerms}
BHO: Solution Real 1.0.0.6 - {1bb456da-878f-44a5-b013-4bfe0ae02fce} - C:\Program Files\Solution Real\SolutionRealbho.dll (Solution Real)
BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files\XTab\SupTab.dll (Thinknice Co. Limited)
FF DefaultSearchEngine: omiga-plus
FF SelectedSearchEngine: omiga-plus
FF Homepage: hxxp://isearch.omiga-plus.com/?type=hpppts=1421579272from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13
FF SearchPlugin: C:\Users\Ola\AppData\Roaming\Mozilla\Firefox\Profiles\s4okc17v.default\searchplugins\omiga-plus.xml
FF Extension: FF Toolbar - C:\Users\Ola\AppData\Roaming\Mozilla\Firefox\Profiles\s4okc17v.default\Extensions\fftoolbar2014@etech.com [2015-01-18]
FF Extension: Solution Real 1.0.1 - C:\Users\Ola\AppData\Roaming\Mozilla\Firefox\Profiles\s4okc17v.default\Extensions\{6e9af5d3-a8f9-4461-ad38-1433888f55dc}.xpi [2015-01-18]
FF HKLM\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Ola\AppData\Roaming\Mozilla\Firefox\Profiles\s4okc17v.default\extensions\fftoolbar2014@etech.com
CHR HomePage: Default - hxxp://isearch.omiga-plus.com/?type=hpppts=1421579272from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13
CHR StartupUrls: Default - "hxxp://isearch.omiga-plus.com/?type=hpppts=1421579272from=coruid=WDCXWD3200BPVT-55JJ5T0_WD-WX81E71VWT13VWT13"
CHR DefaultSearchKeyword: Default - omiga-plus
CHR Extension: (Solution Real) - C:\Users\Ola\AppData\Local\Google\Chrome\User Data\Default\Extensions\najacfdolllggobgahokmbofjfmboefn [2015-01-19]
R2 IHProtect Service; C:\Program Files\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
R2 Update Solution Real; C:\Program Files\Solution Real\updateSolutionReal.exe [681208 2015-01-26] ()
R2 Util Solution Real; C:\Program Files\Solution Real\bin\utilSolutionReal.exe [673016 2015-01-26] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [464384 2015-01-18] (SysTool PasSame LIMITED) [File not signed]
R1 {1d7d694e-604c-4da2-9100-b2601d3a1c57}Gw; C:\Windows\System32\drivers\{1d7d694e-604c-4da2-9100-b2601d3a1c57}Gw.sys [43160 2015-01-25] (StdLib)
R1 {4cff408a-d9e7-47c3-a711-95133fcf7f45}Gw; C:\Windows\System32\drivers\{4cff408a-d9e7-47c3-a711-95133fcf7f45}Gw.sys [43160 2015-01-19] (StdLib)
R1 {5c281c6e-0132-4ac6-ad9d-d1d95d218412}Gw; C:\Windows\System32\drivers\{5c281c6e-0132-4ac6-ad9d-d1d95d218412}Gw.sys [43160 2015-01-23] (StdLib)
R1 {6e9af5d3-a8f9-4461-ad38-1433888f55dc}Gw; C:\Windows\System32\drivers\{6e9af5d3-a8f9-4461-ad38-1433888f55dc}Gw.sys [43160 2015-01-17] (StdLib)
2015-01-18 12:08 - 2015-01-18 12:08 - 00000000 ____ D () C:\ProgramData\IHProtectUpDate
2015-01-18 12:08 - 2015-01-18 12:08 - 00000000 ____ D () C:\Program Files\XTab
2015-01-18 12:07 - 2015-01-19 11:36 - 00000000 ____ D () C:\Users\Ola\AppData\Roaming\omiga-plus
2015-01-18 12:07 - 2015-01-18 12:07 - 00000000 ____ D () C:\ProgramData\WindowsMangerProtect
2015-01-18 12:06 - 2015-01-26 15:39 - 00000000 ____ D () C:\Program Files\Solution Real
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(superbike08) #5

dziękuje działa :slight_smile:


(Acorus) #6

Skasuj folder C:\FRST


(superbike08) #7

Na drugim kompie stało mi sie to samo :frowning:

Addition http://wklej.se/0b95

FRST http://wklej.se/f1a9


(Acorus) #8

Brak loga Addition.txt


(superbike08) #9

sorki mój błąd http://wklej.se/4030