Witam, mam jeden problem, mianowicie chodzi o to że na porbałem jakiś ■■■■ z internetu który zaśmiecił mi komputer na waszym forum zobaczyłem jakieś rozwiązanie tylko nie jestem pewien czy je dobrze zrozumiałem (jestem totalnie zielony)
Otwórz notatnik systemowy i wklej:
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1421091658from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1421091658from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1421091658from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1421091658from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKU\S-1-5-21-424072320-1533989454-3974748350-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
HKU\S-1-5-21-424072320-1533989454-3974748350-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKU\S-1-5-21-424072320-1533989454-3974748350-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79
HKU\S-1-5-21-424072320-1533989454-3974748350-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
SearchScopes: HKU\S-1-5-21-424072320-1533989454-3974748350-1001 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dsppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
SearchScopes: HKU\S-1-5-21-424072320-1533989454-3974748350-1001 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dsppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79q={searchTerms}
FF DefaultSearchEngine: omiga-plus
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml
CHR StartupUrls: Default - "hxxp://isearch.omiga-plus.com/?type=hpppts=1421091672from=coruid=CrucialXCT120M500SSD1_14150C13EA790C13EA79"
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158864 2014-12-29] (XTab system)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [473088 2015-01-12] (Fuyu LIMITED) [File not signed]
S2 Update Solution Real; "C:\Program Files (x86)\Solution Real\updateSolutionReal.exe" [X]
R1 {76eaa25f-d535-414d-8a8b-4bce0a94d247}Gw64; C:\Windows\System32\drivers\{76eaa25f-d535-414d-8a8b-4bce0a94d247}Gw64.sys [48792 2015-01-12] (StdLib)
2015-01-12 20:53 - 2015-01-12 20:53 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\Michałek\Downloads\SpyHunter-installer.exe
2015-01-12 20:49 - 2015-01-12 05:44 - 00048792 _____ (StdLib) C:\Windows\system32\Drivers\{76eaa25f-d535-414d-8a8b-4bce0a94d247}Gw64.sys
2015-01-12 20:41 - 2015-01-12 20:41 - 00000000 ____ D () C:\ProgramData\WindowsMangerProtect
2015-01-12 20:41 - 2015-01-12 20:41 - 00000000 ____ D () C:\ProgramData\IHProtectUpDate
2015-01-12 20:41 - 2015-01-12 20:41 - 00000000 ____ D () C:\Program Files (x86)\XTab
2015-01-12 20:40 - 2015-01-12 20:46 - 00000000 ____ D () C:\Users\Michałek\AppData\Roaming\omiga-plus
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Dzięki za błyskawiczną odpowiedź tylko mam problem bo gdy robie
Musi być tam gdzie jest FRST czyli C:\Users\Michałek\Downloads
Dobra wielkie dzięki już wszystko zrobiłem. Nie wiem czy jest tu jakiś system reputacji żeby się odwdzięczyć?
Skasuj folder C:\FRST
W AdwCleaner użyj opcji Odinstaluj.