Serch protect program ;/

[Krzysztof Kuleczka]

Z jakimś programem zainstalował mi się Serch Protetc, odinstalowałem go z poziomu Windowsa ale i tak został. Póki co nie wyskakują mi jeszcze żadne reklamy.
Proszę o pomoc.

[ordynat]

1) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ (SCAN), a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ (CLEANING), to kliknij na niego.


2) Otwórz Notatnik i wklej w nim:

C:\ProgramData\WindowsMangerProtect
C:\Program Files (x86)\XTab
C:\ProgramData\IHProtectUpDate
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\avgua32.exe" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\globalUpdatem" /f
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1427364020&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1427364020&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1427364020&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1427364020&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&q={searchTerms}
HKU\S-1-5-21-434506248-1161652463-595190394-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dspp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&q={searchTerms}
HKU\S-1-5-21-434506248-1161652463-595190394-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223
HKU\S-1-5-21-434506248-1161652463-595190394-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223
HKU\S-1-5-21-434506248-1161652463-595190394-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dspp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&q={searchTerms}
SearchScopes: HKU\S-1-5-21-434506248-1161652463-595190394-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&q={searchTerms}
SearchScopes: HKU\S-1-5-21-434506248-1161652463-595190394-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&ts=1427364041&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-434506248-1161652463-595190394-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&ts=1427364041&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-434506248-1161652463-595190394-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1427364036&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&q={searchTerms}
SearchScopes: HKU\S-1-5-21-434506248-1161652463-595190394-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=PLEXTORXPX-128M6S_P02420107223&ts=1427364041&type=default&q={searchTerms}
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-03-16] (Thinknice Co. Limited)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\3.2.0\\npsitesafety.dll No File
CHR HomePage: Default -> https://mysearch.avg.com?cid={3EE3AE43-FBAE-45AE-B45C-F58F884A45C3}&mid=23868775c9b947d4a08531760ff74864-cceedc7b55453980a5a1d9eeb39d6d8b34142f37&lang=pl&ds=AVG&coid=avgtbavg&pr=fr&d=2014-08-30 08:52:03&v=3.2.0.15&pid=wtu&sg=&sap=hp
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-03-16] (XTab system)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-26] (SysTool PasSame LIMITED)
S2 vToolbarUpdater3.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe [X]
C:\Program Files (x86)\Common Files\AVG Secure Search
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-03-16] (XTab system)
C:\ProgramData\.bf45c81f8dc8abfeecf09.dat
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.
Uruchom FRST i kliknij przycisk Fix.


----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.