Problem z reklamami etc


(Mrmrutkowski) #1

Witam, mam jeden problem, mianowicie chodzi o to że na porbałem jakiś shit  z internetu który zaśmiecił mi komputer na waszym forum zobaczyłem jakieś rozwiązanie tylko nie jestem pewien czy je dobrze zrozumiałem (jestem totalnie zielony)


(Acorus) #2

Otwórz notatnik systemowy i wklej:

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1421091658from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1421091658from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1421091658from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1421091658from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKU\S-1-5-21-424072320-1533989454-3974748350-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKU\S-1-5-21-424072320-1533989454-3974748350-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKU\S-1-5-21-424072320-1533989454-3974748350-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKU\S-1-5-21-424072320-1533989454-3974748350-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
SearchScopes: HKU\S-1-5-21-424072320-1533989454-3974748350-1001 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dsppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
SearchScopes: HKU\S-1-5-21-424072320-1533989454-3974748350-1001 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dsppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
FF DefaultSearchEngine: omiga-plus
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml
CHR StartupUrls: Default - "hxxp://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79"
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158864 2014-12-29] (XTab system)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [473088 2015-01-12] (Fuyu LIMITED) [File not signed]
S2 Update Solution Real; "C:\Program Files (x86)\Solution Real\updateSolutionReal.exe" [X]
R1 {76eaa25f-d535-414d-8a8b-4bce0a94d247}Gw64; C:\Windows\System32\drivers\{76eaa25f-d535-414d-8a8b-4bce0a94d247}Gw64.sys [48792 2015-01-12] (StdLib)
2015-01-12 20:53 - 2015-01-12 20:53 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\Michałek\Downloads\SpyHunter-installer.exe
2015-01-12 20:49 - 2015-01-12 05:44 - 00048792 _____ (StdLib) C:\Windows\system32\Drivers\{76eaa25f-d535-414d-8a8b-4bce0a94d247}Gw64.sys
2015-01-12 20:41 - 2015-01-12 20:41 - 00000000 ____ D () C:\ProgramData\WindowsMangerProtect
2015-01-12 20:41 - 2015-01-12 20:41 - 00000000 ____ D () C:\ProgramData\IHProtectUpDate
2015-01-12 20:41 - 2015-01-12 20:41 - 00000000 ____ D () C:\Program Files (x86)\XTab
2015-01-12 20:40 - 2015-01-12 20:46 - 00000000 ____ D () C:\Users\Michałek\AppData\Roaming\omiga-plus
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Mrmrutkowski) #3

Dzięki za błyskawiczną odpowiedź tylko mam problem bo gdy robie 


(Acorus) #4

Musi być tam gdzie jest FRST czyli C:\Users\Michałek\Downloads


(Mrmrutkowski) #5

Dobra wielkie dzięki już wszystko zrobiłem. Nie wiem czy jest tu jakiś system reputacji żeby się odwdzięczyć?


(Acorus) #6

Skasuj folder C:\FRST

W AdwCleaner użyj opcji Odinstaluj.