Elektroda.pl
Elektroda.pl
X
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Chromesearch.win - trzeba zlikwidować

Raurielz 06 Gru 2017 10:37 222 1
  • Pomocny post
    #2 06 Gru 2017 11:23
    Kolobos
    Spec od komputerów

    Wykonaj Fixlist.txt dla FRST:
    HKLM\...\Run: [] => [X]
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\...\MountPoints2: F - F:\_devsetup.exe
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\...\MountPoints2: {0aa8c202-2861-11e7-be59-002618e1ac6a} - H:\setup.exe
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\...\MountPoints2: {143f7611-1ef7-11e7-94f6-002618e1ac6a} - H:\install.exe
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\...\MountPoints2: {6f11ef4a-21cd-11e7-94ca-002618e1ac6a} - H:\setup.exe
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\...\MountPoints2: {851faede-3d41-11e7-be85-002618e1ac6a} - H:\setup.exe
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\...\MountPoints2: {91186a76-3d5b-11e7-8a4e-002618e1ac6a} - H:\setup.exe
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\...\MountPoints2: {c3cb2ade-2a55-11e7-952e-002618e1ac6a} - H:\setup.exe
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\...\MountPoints2: {ee22a5d8-1d3d-11e7-9527-002618e1ac6a} - F:\_devsetup.exe
    GroupPolicy: Ograniczenia - Chrome <==== UWAGA
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.vobis.pl/
    HKU\S-1-5-21-2820515392-770093226-2416803518-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.vobis.pl
    CHR NewTab: Default -> Not-active:"chrome-extension://ikaooahnheaoeceaipjcmnamnoleeblk/newtab.html"
    CHR DefaultSearchURL: Default -> hxxps://spiralsnewtab.com/search?q={searchTerms}
    CHR DefaultSearchKeyword: Default -> SpiralsTab
    CHR DefaultSuggestURL: Default -> hxxps://spiralsnewtab.com/suggestions.php?q={searchTerms}
    CHR Extension: (SpiralsTab) - C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikaooahnheaoeceaipjcmnamnoleeblk [2017-11-29]
    C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikaooahnheaoeceaipjcmnamnoleeblk
    CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM\...\Chrome\Extension: [ikaooahnheaoeceaipjcmnamnoleeblk] - hxxps://clients2.google.com/service/update2/crx
    S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

    Po wykonaniu usun katalog C:\FRST i to wszystko.

    0