Omiga PLus jak usunąć?

Dla specjalistów Bezpieczeństwo
#1

Witam mam problem z omigą plus nie mogę tego usunąć w żaden sposób.

Logi z Farbar Recovery Scan Tool

http://wklej.se/f1a9 FRST.txt

http://wklej.se/4030 Addition.txt

#2

Pobierz i uruchom AdwCleaner Kliknij Scan i później Cleaning.

Nowe logi FRST po tym co usunie AdwCleaner

Temat powinieneś założyć w dziale Bezpieczeństwo

#3

Otwórz notatnik systemowy i wklej:

ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qq={searchTerms}
HKU\S-1-5-21-888690829-82207692-3796540428-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q
HKU\S-1-5-21-888690829-82207692-3796540428-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dsts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qq={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dsts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qq={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dsts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qq={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dsts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qq={searchTerms}
SearchScopes: HKU\S-1-5-21-888690829-82207692-3796540428-1000 - DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qts=1423061814type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-888690829-82207692-3796540428-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qts=1423061814type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-888690829-82207692-3796540428-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qts=1423061814type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-888690829-82207692-3796540428-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qts=1423061814type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-888690829-82207692-3796540428-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qts=1423061814type=defaultq={searchTerms}
FF NewTab: hxxp://isearch.omiga-plus.com/newtab/?type=ntts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q
FF SelectedSearchEngine: omiga-plus
FF Homepage: hxxp://isearch.omiga-plus.com/?type=hpts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml
FF Extension: Round World 1.0.1 - C:\Users\Miruś\AppData\Roaming\Mozilla\Firefox\Profiles\cjhxufyz.default\Extensions\{e5189cab-3112-4bd9-9e32-85524e9e9322}.xpi [2015-02-04]
CHR HomePage: Default - hxxp://isearch.omiga-plus.com/?type=hpts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q
CHR StartupUrls: Default - "hxxp://isearch.omiga-plus.com/?type=hpts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Q"
CHR DefaultSearchKeyword: Default - omiga-plus
CHR DefaultSearchURL: Default - http://isearch.omiga-plus.com/web/?type=dsts=1423061788from=coruid=ST3500418AS_9VM17B9QXXXX9VM17B9Qq={searchTerms}
CHR Extension: (Round World) - C:\Users\Miruś\AppData\Local\Google\Chrome\User Data\Default\Extensions\egkpojibogaemajbehmhdkfadcjmnnae [2015-02-06]
CHR HKLM-x32\...\Chrome\Extension: [mibfbmhijjgpkmobcfdlelpccpeafoom] - No Path
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
R2 MaintainerSvc2.14.9041534; C:\ProgramData\aea8cc93-2213-47cf-a265-0391e3461dbb\maintainer.exe [123632 2015-02-07] ()
R2 Update Round World; C:\Program Files (x86)\Round World\updateRoundWorld.exe [394992 2015-02-07] ()
R2 Util Round World; C:\Program Files (x86)\Round World\bin\utilRoundWorld.exe [394992 2015-02-07] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-04] (SysTool PasSame LIMITED)
R1 {624928ef-5dfa-4c3f-a4d8-7dddec6d32f0}Gw64; C:\Windows\System32\drivers\{624928ef-5dfa-4c3f-a4d8-7dddec6d32f0}Gw64.sys [48784 2015-02-03] (StdLib)
R1 {81711fd0-60e8-45bb-a4ff-3004058b32b4}Gw64; C:\Windows\System32\drivers\{81711fd0-60e8-45bb-a4ff-3004058b32b4}Gw64.sys [48784 2015-02-07] (StdLib)
R1 {e5189cab-3112-4bd9-9e32-85524e9e9322}Gw64; C:\Windows\System32\drivers\{e5189cab-3112-4bd9-9e32-85524e9e9322}Gw64.sys [48784 2015-02-04] (StdLib)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
dvgkmd.sys [X]
2015-02-04 15:56 - 2015-02-04 15:56 - 00000000 ____ D () C:\Users\Miruś\AppData\Roaming\omiga-plus
2015-02-04 15:56 - 2015-02-04 15:56 - 00000000 ____ D () C:\ProgramData\WindowsMangerProtect
2015-02-04 15:56 - 2015-02-04 15:56 - 00000000 ____ D () C:\ProgramData\IHProtectUpDate
2015-02-04 15:56 - 2015-02-04 15:56 - 00000000 ____ D () C:\Program Files (x86)\XTab
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.