Walka z omniboxes.com wyszukiwarka

Dla specjalistów Bezpieczeństwo
#1

Adw cleaner tego nie widzi w zmianie ustawień wyszukiwarki chrome na Google też nic nie daje 

#2

Otwórz notatnik systemowy i wklej:

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKU\S-1-5-21-2067251749-399779118-3126736728-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hpts=1425779348from=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0EST
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hpts=1425779348from=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0EST
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hpts=1425779348from=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0EST
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hpts=1425779348from=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0EST
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=dsts=1425779348from=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0ESTq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=dsts=1425779348from=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0ESTq={searchTerms}
HKU\S-1-5-21-2067251749-399779118-3126736728-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hpts=1425779348from=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0EST
HKU\S-1-5-21-2067251749-399779118-3126736728-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hpts=1425779348from=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0EST
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2067251749-399779118-3126736728-1001 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.omniboxes.com/web/?utm_source=butm_medium=obwutm_campaign=install_ieutm_content=dsfrom=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0ESTts=1425779373type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2067251749-399779118-3126736728-1001 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?utm_source=butm_medium=obwutm_campaign=install_ieutm_content=dsfrom=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0ESTts=1425779373type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2067251749-399779118-3126736728-1001 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.omniboxes.com/web/?utm_source=butm_medium=obwutm_campaign=install_ieutm_content=dsfrom=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0ESTts=1425779373type=defaultq={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=scts=1425779348from=obwuid=TOSHIBAXMQ01ABD075_44DDP0ESTXX44DDP0EST
FF HKU\S-1-5-21-2067251749-399779118-3126736728-1001\...\Firefox\Extensions: [{2E96E8FB-E771-F657-1EFF-138895A9DBCC}] - C:\Program Files (x86)\ver4CheckMeUp\189.xpi
CHR StartupUrls: Default - "https://getadblock.com/installed/?u=11hja4ty82545208", "https://www.google.pl/"
S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]
2015-03-11 14:59 - 2014-12-30 17:31 - 00000000 ____ D () C:\AdwCleaner
2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\Gainward2014\AppData\Roaming\LNJSQH
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

Zaraz sprawdzę 

#4

Skasuj folder C:\FRST

#5

Tak już skasowałem  :smiley: