Pobieralam dzisiaj konwerter ze strony dobre programy i teraz nie mogę sobie poradzić z reklamami
najpierw kliknij na SZUKAJ (SCAN), a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ (CLEANING), to kliknij na niego.
Uzyłam AdwCleaner.
C:\Users\brzenka\AppData\Roaming\do-search
C:\ProgramData\WindowsMangerProtect
C:\ProgramData\IHProtectUpDate
C:\Program Files (x86)\XTab
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\do-search uninstall" /f
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-30] (SysTool PasSame LIMITED)
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-03-16] (XTab system)
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
CHR StartupUrls: Default -> "hxxp://do-search.com/?type=hp&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX"
CHR DefaultSearchKeyword: Default -> do-search
CHR DefaultSearchURL: Default -> http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\brzenka\AppData\Roaming\Mozilla\Firefox\Profiles\twni32jo.default\extensions\searchengine@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [istart_ffnt@gmail.com] - C:\Users\brzenka\AppData\Roaming\Mozilla\Firefox\Profiles\twni32jo.default\extensions\istart_ffnt@gmail.com
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
FF Extension: WOT - C:\Users\brzenka\AppData\Roaming\Mozilla\Firefox\Profiles\twni32jo.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26]
FF NewTab: chrome://quick_start/content/index.html
FF SelectedSearchEngine: do-search
BHO-x32: browse pulse -> {ed8e593d-1965-4e45-9d55-d56162dcde14} -> C:\Program Files (x86)\browse pulse\Extensions\ed8e593d-1965-4e45-9d55-d56162dcde14.dll No File
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-03-16] (Thinknice Co. Limited)
SearchScopes: HKU\S-1-5-21-1577275202-546194520-1271563289-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&ts=1427694400&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1577275202-546194520-1271563289-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&ts=1427694400&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1577275202-546194520-1271563289-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&ts=1427694400&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1577275202-546194520-1271563289-1001 -> {255F6B65-DB46-4392-A798-6749D0F7F98F} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&ts=1427694400&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1577275202-546194520-1271563289-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&ts=1427694400&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1577275202-546194520-1271563289-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&ts=1427694400&type=default&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
HKU\S-1-5-21-1577275202-546194520-1271563289-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
HKU\S-1-5-21-1577275202-546194520-1271563289-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
EmptyTemp:
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
CHR DefaultSearchKeyword: Default -> do-search
CHR DefaultSearchURL: Default -> http://do-search.com/web/?type=ds&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX&q={searchTerms}
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\do-search uninstall" /f
EmptyTemp:
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
ShortcutWithArgument: C:\Users\brzenka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
ShortcutWithArgument: C:\Users\brzenka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
ShortcutWithArgument: C:\Users\brzenka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
ShortcutWithArgument: C:\Users\brzenka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
ShortcutWithArgument: C:\Users\brzenka\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://do-search.com/?type=sc&ts=1427694359&from=cor&uid=HitachiXHTS547575A9E384_J1140021G7WKNKG7WKNKX
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\do-search uninstall" /f
EmptyTemp:
do-search
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\ARP]
"1"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\do-searchSoftware]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\do-searchSoftware\do-searchhp]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\do-search uninstall]
[HKEY_USERS\S-1-5-21-1577275202-546194520-1271563289-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Users\brzenka\AppData\Roaming\do-search\UninstallManager.exe"=-
do-search
Windows Registry Editor Version 5.00
[HKEY_USERS\S-1-5-21-1577275202-546194520-1271563289-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Users\brzenka\AppData\Roaming\do-search\UninstallManager.exe"=-
DeleteQuarantine:
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 5 gości