Ruský šmejd - změna vyhledávače po spuštění

[JaRon]

zaskocim:
spust regedit a ZMAZ kluc:
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\kometaup]
C:\Users\Jonas\AppData\Local\Kometa\kometaup.exe --windows-start []

restart PC

[bilejpes]

Pořád a pořád stejná chyba, pustím chrome a jako vyhledávač ruský šmejd....

[vyosek]

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :reg
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "CCleaner Monitoring"=-
  "Zoner Photo Studio Autoupdate"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
  "GoSearchRemoveAppchrome"=-
  "GoSearchRemoveAppfirefox"=-
  "GoSearchRemoveAppiexplore"=-
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\kometaup]
  
  :files
  C:\Users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\94czhu4y.default\searchplugins\GoSearch.xml
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [EMPTYJAVA]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[bilejpes]

All processes killed
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\GoSearchRemoveAppchrome deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\GoSearchRemoveAppfirefox deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\GoSearchRemoveAppiexplore deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\kometaup\ not found.
========== FILES ==========
C:\Users\Jonas\AppData\Roaming\Mozilla\Firefox\Profiles\94czhu4y.default\searchplugins\GoSearch.xml moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Jonas
->Temp folder emptied: 21627610 bytes
->Temporary Internet Files folder emptied: 4164200 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 379508308 bytes
->Flash cache emptied: 492 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2343606 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 389,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Jonas
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Jonas
->Java cache emptied: 0 bytes

User: Public

Total Java Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 02152015_132641

Files\Folders moved on Reboot...
C:\Users\Jonas\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Jonas\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[vyosek]

Tak co rusaci, jsou zpatky na sibiri??

[bilejpes]

Zdá se, že Putin byl poražen
Ještě tedy jednou naběhl, ale zkusil jsem odinstalovat a zase nainstalovat chrome a zdá se v pohodě.

Děkuji za pomoc. Už jsem propadal depresím

[vyosek]

Ono je potreba pri odinstalaci smazat i jeho profil kde jsou nastaveni vyhledavacu atd. ulozeny

Spustte OTL a kliknete na Vycistit

Pak jeste projedte PC CCleanerem a melo by byt hotovo