logo elektroda
logo elektroda
X
logo elektroda

Chrome chromesearch.win default search engine - how to remove?

Nestrades 2652 5
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • #1 16838582
    Nestrades
    Level 1  
    Hello, I have a problem with the Google Chrome browser. I can't change my default search engine. It is "chromesearch.win".
    In the attachment there are scan logs from FRST (addition and frst.txt).
  • ADVERTISEMENT
  • #2 16838655
    krzychupar
    Level 43  
    Otwórz notatnik systemowy i wklej:

    Task: {A0C0B8B6-E5AC-4177-9B09-E8DB59091F53} - System32\Tasks\{0A11DE08-C1EA-464F-8D11-719B411F9674} => C:\Windows\system32\pcalua.exe -a C:\Matlab\Matlab_2007_Offical_Trial\Matlab_2007_Offical_Trial\win32\setup.exe -d C:\Matlab\Matlab_2007_Offical_Trial\Matlab_2007_Offical_Trial\win32
    Task: {D99FB988-A739-4CC6-B3CB-FD45F1EB4CB2} - System32\Tasks\{788E7BBE-AC1B-40A6-8274-6C43EA177B89} => C:\Windows\system32\pcalua.exe -a "C:\Brother drukarka\install\data\Disk1\setup.exe" -d "C:\Brother drukarka\install\data\Disk1"
    Task: {F44E5473-5048-4014-A711-69390E0A257A} - System32\Tasks\{AA868A26-A39E-4EC1-8788-E1336AC8D10C} => C:\Windows\system32\pcalua.exe -a C:\Matlab\Matlab_2007_Offical_Trial\Matlab_2007_Offical_Trial\setup.exe -d C:\Matlab\Matlab_2007_Offical_Trial\Matlab_2007_Offical_Trial
    ShortcutWithArgument: C:\Users\Artur\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WarThunder.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://mmotraffic.com/catalog/goplay/1000932/MTE3NjYvLy8xMDAwOTMy?click_id=zytD0EyC0B0Azz0C0C0CyCtAzy0AtA0A2RtBtDtCyCtDtCtDzztCyByEtAtByDzztCtA
    HKU\S-1-5-21-2314523805-2192830142-439888948-1000\...\MountPoints2: {eecbc420-ac02-11e6-b1f5-90e6ba8ccc63} - I:\Autorun.exe
    HKU\S-1-5-21-2314523805-2192830142-439888948-1000\...\MountPoints2: {eecbc425-ac02-11e6-b1f5-90e6ba8ccc63} - J:\m.exe
    HKU\S-1-5-21-2314523805-2192830142-439888948-1000\...\MountPoints2: {eecbc429-ac02-11e6-b1f5-90e6ba8ccc63} - K:\m.exe
    GroupPolicy: Ograniczenia - Chrome SpiralsTab
    CHR DefaultSuggestURL: Default -> hxxps://spiralstab.com/suggestions.php?q={searchTerms}
    FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-28] [Przestarzałe]
    FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2015-12-28] [Przestarzałe]
    CHR HKLM\...\Chrome\Extension: [ikaooahnheaoeceaipjcmnamnoleeblk] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
    2017-11-21 01:34 - 2017-11-21 01:40 - 000000000 ____D C:\AdwCleaner
    2017-11-19 16:06 - 2017-11-19 16:06 - 000001794 _____ C:\Windows\unins000.dat
    2017-11-19 16:06 - 2017-11-19 16:00 - 000715038 _____ C:\Windows\unins000.exe
    2017-11-19 16:00 - 2016-01-04 19:31 - 000000266 __RSH C:\ProgramData\ntuser.pol
    EmptyTemp:

    Plik zapisz pod nazwą fixlist.txt i umieść w folderze, gdzie masz FRST.exe.
    Uruchom FRST i kliknij w Fix/Napraw.
  • ADVERTISEMENT
  • ADVERTISEMENT
  • #4 16840046
    krzychupar
    Level 43  
    Do not stick to other people's threads because it makes the forum messy.
    Open the system notebook and paste:

    ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No file
    GroupPolicy: Restrictions - Chrome SpiralsTab
    CHR DefaultSuggestURL: Default -> hxxps: //spiralstab.com/suggestions.php? Q = {searchTerms}
    CHR HKLM-x32 \ ... \ Chrome \ Extension: [ikaooahnheaoeceaipjcmnamnoleeblk] - hxxps: //clients2.google.com/service/update2/crx
    U3 aswbdisk; ImagePath is missing
    EmptyTemp:

    Save the file as fixlist.txt and put it in the folder where you have FRST.exe.
    Run FRST and click Fix.
  • ADVERTISEMENT
  • #6 16855133
    Kolobos
    IT specialist
    @ piorun182 do a Fixlist:
    GroupPolicy: Restrictions - Chrome
ADVERTISEMENT