Do notatnika wklej i zapisz jako
fixlist.txt
Kod:
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
HKU\S-1-5-21-3966757063-3716859648-3989406979-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
HKU\S-1-5-21-3966757063-3716859648-3989406979-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6
HKU\S-1-5-21-3966757063-3716859648-3989406979-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6
HKU\S-1-5-21-3966757063-3716859648-3989406979-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
HKU\S-1-5-21-3966757063-3716859648-3989406979-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKU\S-1-5-21-3966757063-3716859648-3989406979-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3966757063-3716859648-3989406979-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3966757063-3716859648-3989406979-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421349631&from=cor&uid=ST9500325AS_S2W04FZ6XXXXS2W04FZ6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3966757063-3716859648-3989406979-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: ClickCaption -> {A18EA34C-6D33-4298-8A54-7F16499904C0} -> C:\Program Files\ClickCaption_1.10.0.2\IE\ClickCaptionClientIE.dll (ClickCaption)
BHO-x32: ClickCaption -> {A18EA34C-6D33-4298-8A54-7F16499904C0} -> C:\Program Files (x86)\ClickCaption_1.10.0.2\IE\ClickCaptionClientIE.dll (ClickCaption)
Toolbar: HKU\S-1-5-21-3966757063-3716859648-3989406979-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -No File
CHR Extension: (Dynamo Combo) - C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpdenfahlbckchoookbddpacicemeed [2015-01-16]
R2 ccsvc_1.10.0.2; C:\Program Files (x86)\ClickCaption_1.10.0.2\Service\ccsvc.exe [277584 2014-10-30] (ClickCaption)
R1 ccnfd_1_10_0_2; C:\Windows\System32\drivers\ccnfd_1_10_0_2.sys [58232 2014-10-30] (ClickCaption)
R1 {641e52b1-3179-43ed-8bcb-f688871e52b0}Gw64; C:\Windows\System32\drivers\{641e52b1-3179-43ed-8bcb-f688871e52b0}Gw64.sys [48792 2015-01-19] (StdLib)
R1 {ebd8d0c0-e022-4b76-a1f2-bc2963e3a147}Gw64; C:\Windows\System32\drivers\{ebd8d0c0-e022-4b76-a1f2-bc2963e3a147}Gw64.sys [48792 2015-01-14] (StdLib)
R1 {ecd6aae4-019c-44b2-a0e5-570904275d66}Gw64; C:\Windows\System32\drivers\{ecd6aae4-019c-44b2-a0e5-570904275d66}Gw64.sys [48792 2015-01-16] (StdLib)
U3 BcmSqlStartupSvc; No ImagePath
U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 iATAgentService; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
U2 nvUpdatusService; No ImagePath
U2 Oasis2Service; No ImagePath
U2 PCCarerService; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 RtLedService; No ImagePath
U2 SeaPort; No ImagePath
U2 SoftwareService; No ImagePath
U3 SQLWriter; No ImagePath
U2 Stereo Service; No ImagePath
C:\windows\system32\Drivers\{641e52b1-3179-43ed-8bcb-f688871e52b0}Gw64.sys
C:\windows\system32\Drivers\{ecd6aae4-019c-44b2-a0e5-570904275d66}Gw64.sys
C:\windows\system32\Drivers\{ebd8d0c0-e022-4b76-a1f2-bc2963e3a147}Gw64.sys
C:\ProgramData\IHProtectUpDate
C:\ProgramData\WindowsMangerProtect
CMD: netsh advfirewall reset
EmptyTemp:
Zapisany skrypt umieść obok ściągniętego programu
FRST
Następnie w programie kliknij
Fix,po wykonaniu pokaż raport z tego działania.
Odinstaluj:
Click Caption 1.10.0.2
omiga-plus uninstall
W przeglądarce
Firefox
Otwórz menu w górnym rogu po prawej stronie > otwórz menu pomoc oznaczone czerwoną ramką.
[Aby zobaczyć linki, zarejestruj się tutaj]
Informacje dla pomocy technicznej > Zresetuj program Firefox. Reset nie naruszy zakładek i haseł.
Google Chrome
Ustawienia > karta Ustawienia > Pokaż ustawienia zaawansowane > zjedź na sam spód i uruchom opcję "Zresetuj ustawienia przeglądarki".
Ściągnij program
[Aby zobaczyć linki, zarejestruj się tutaj]
kliknij
Szukaj i następnie
Usuń
Pokaż raport z niego.
Zrób nowe logi i przedstaw z FRST.txt > Addition.txt,Shortcut.txt + OTL ale bez extras
