Search.searchcompletion.com


(Speedway1986) #1

Witam. Mam problem, używam Firefoxa i nie mogę się pozbyć search.searchcompletion.com jako strony startowej.

Logi z OTL:

http://wklej.org/id/735517/


(Atis) #2

W panelu sterowania odinstaluj:

SearchSettings, Ask Toolbar, Winamp Toolbar, Babylon toolbar, MakeItLive Plugin, Babylon Plug In, DealPly, pdfforge Toolbar, IncrediMail MediaBar 2 Toolbar, Ashampoo PO Toolbar.

Do okna Własne opcje skanowania / skrypt wklej:

:OTL

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1331251517_362059

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=f70422f0-4217-11e1-8d1e-001bfcea51f7

IE - HKLM\..\SearchScopes\{317D40CB-6812-46D9-B5FF-BA81A4FEE09A}: "URL" = http://startsear.ch/?q={searchTerms}

IE - HKLM\..\SearchScopes\{6BD63EF5-F376-4104-B390-F6E1E3BEDAAC}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=f70422f0-4217-11e1-8d1e-001bfcea51f7&q={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1331251517_362059

SRV - File not found [Auto | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\QuestDns\questdns117.exe C:\Program Files\QuestDns\questdns.dll bovidoxivow -- (QuestDns Service)

SRV - File not found [Auto | Stopped] -- C:\Program Files\FlvTube Toolbar\FlvTubeSvc.exe -- (FlvTube Toolbar Helper)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\Senfilt.sys -- (SenFiltService)

DRV - File not found [Kernel | On_Demand | Stopped] -- I:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\X\USTAWI~1\Temp\ASFWHide -- (ASFWHide)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\AEAudio.sys -- (AEAudioService)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=f70422f0-4217-11e1-8d1e-001bfcea51f7

IE - HKCU\..\SearchScopes\{6BD63EF5-F376-4104-B390-F6E1E3BEDAAC}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=f70422f0-4217-11e1-8d1e-001bfcea51f7&q={searchTerms}

IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033

IE - HKCU\..\SearchScopes\{BAA36289-7EAC-42EA-BD14-9674223BFC4E}: "URL" = http://startsear.ch/?aff=2&src=sp&cf=f70422f0-4217-11e1-8d1e-001bfcea51f7&q={searchTerms}

IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredimail.com/mb68/?search={searchTerms}&loc=search_box&u=92541497570046273

FF - prefs.js..browser.search.defaultenginename: "Web Search"

FF - prefs.js..browser.search.order.1: "Search the web"

FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=f70422f0-4217-11e1-8d1e-001bfcea51f7"

[2010-09-09 10:11:07 | 000,000,000 | ---D | M] (QuestDns) -- C:\Program Files\Mozilla Firefox\extensions\{C91E1C68-B60A-4C9F-B53B-AAAEF0E7EF97}

[2011-02-05 14:40:26 | 000,000,000 | ---D | M] (QuestBrowse) -- C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}

[2011-07-07 11:35:24 | 000,002,291 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml

[2010-12-30 12:47:50 | 000,002,037 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchostpl.xml

[2011-10-07 18:44:06 | 000,000,158 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search the web.src

[2012-03-09 02:05:17 | 000,002,415 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\v9.xml

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found.

O4 - HKLM..\Run: [] File not found

O4 - HKLM..\Run: [NPSStartup] File not found

O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found

O4 - HKCU..\Run: [HKCU] C:\WINDOWS\system32\install\pics.exe (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\install\pics.exe (Microsoft Corporation)

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\install\pics.exe (Microsoft Corporation)

O8 - Extra context menu item: Download with IDA - Reg Error: Value error. File not found

O9 - Extra 'Tools' menuitem : @C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll,-103 - {B46B0919-62BA-4D99-A5C4-916B57A6805C} - Reg Error: Key error. File not found

O9 - Extra Button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - Reg Error: Key error. File not found

O9 - Extra Button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - Reg Error: Key error. File not found


:Commands

[emptytemp]

Kliknij Wykonaj skrypt i zatwierdź restart.

Pokaż raport z usuwania i nowy log Skanuj.


(Speedway1986) #3

Dzięki ale mam najpierw pytanie. Czy ten skrypt do wklejenia rozwiązuje problem także z mozillą czy tylko dotyczy IE?


(Mic) #4

Witam

Z tego co widzę to skrypt dotyczy IE i Firefox :slight_smile:

Np:

pogrubione to dane przeglądarka


(Speedway1986) #5

Wielkie dzięki, pomogło.

http://www.wklej.org/id/735948/


(Acorus) #6

Użyj AdwCleaner http://general-changelog-team.fr/outils/289-adwcleaner z funkcji Delete.

W OTL użyj opcji Sprzątanie.Przeskanuj progr.Malwarebytes Anti-Malware

Przed skanowaniem wykonaj RĘCZNĄ AKTUALIZACJĘ BAZY SYGNATUR WIRUSÓW Malwarebytesa "Uruchom Malwarebytes, przejdź do zakładki Aktualizacja, Sprawdź aktualizacje."

Zainstaluj aktualizacje do programow wskazanych przez: http://screen317.spywareinfoforum.org/SecurityCheck.exe jako out of date.