Çözüldü Omiga Plus Kaldırma

Bu konu çözüldü olarak işaretlenmiştir. Çözülmediğini düşünüyorsanız konuyu rapor edebilirsiniz.
Durum
Mesaj gönderimine kapalı.

ahmet gül

Hectopat
Katılım
2 Mayıs 2014
Mesajlar
42
Makaleler
1
Daha fazla  
Cinsiyet
Erkek
Arkadaşlar Omiga Plus diye bir yazılım bilgisayarıma bulaştı her Chrome'u açışımda bu sayfa açılıyor. Yardım edebilir misiniz ?

Kod:
http://isearch.omiga-plus.com/?type=hppp&ts=1420100703&from=smt&uid=SamsungXSSDX840XEVOX120GB_S1D5NSAF822572R
 
Son düzenleyen: Moderatör:
Chrome eklenti sayfasından eklentilerini siler misiniz?
 
Malwarebyte ile tarama yaptıktan sonra çıkanları sildin mi?
 
İlk önce denetim masasından bunları kaldırın;
iWebar
NybbleModulator
omiga-plus uninstall
SensePlus
Shopper-Pro
VTFEdit 1.2.5
____________
Rgedit'i açıp şu yolu bulun;
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main
Burada StartPage yazan yeri google.com ile değiştirin.
__________
Bu dosyaları silin;
C:\Program Files (x86)\ShopperPro\JSDriver\1457.0.0.0\jsdrv.exe
C:\Users\Hamdi\AppData\Roaming\SkypEmoticons\SE.exe
C:\Users\Hamdi\AppData\Local\ChromeUpdater\tt.exe

Bunları herdprotect rehberine göre sileceksin;
C:\Program Files (x86)\SupTab\HpUI.exe
c:\program files (x86)\suptab\loader64.exe
c:\program files (x86)\suptab\windowssupportdll64.dll
c:\program files (x86)\deltafix\deltafix.dll
c:\program files (x86)\youtube accelerator\ytalsp.dll
c:\program files (x86)\youtube accelerator\xmldb.dll
c:\program files\common files\shopperpro\spbiu.exe
C:\ProgramData\IePluginServices\PluginService.exe
c:\users\hamdi\appdata\roaming\skypemoticons\se.exe
c:\users\hamdi\appdata\roaming\skypemoticons\res.dll
c:\programdata\windowsmangerprotect\protectwindowsmanager.exe
c:\program files (x86)\shopperpro\jsdriver\1457.0.0.0\jsdrv.exe
c:\program files (x86)\iwebar\d56a9bac-f30b-448a-aff4-6b54a17b3c40-6.exe
c:\program files (x86)\suptab\windowssupportdll32.dll
c:\program files\common files\shopperpro\spbici32.dll
c:\program files (x86)\iwebar\8c119080-aca9-429d-bc86-20e82482e3fc.dll
c:\program files (x86)\senseplus\163e37ef-e1ea-45fa-8f6a-0545dde8c8a0.dll
c:\program files (x86)\senseplus\21acfba7-c453-4d41-8061-1bd72919c6b1-6.exe
c:\program files (x86)\globalupdate\update\googleupdate.exe
c:\program files (x86)\shopperpro\jsdriver\1457.0.0.0\jsdrv.sys
c:\users\hamdi\appdata\local\chromeupdater\tt.exe
c:\program files (x86)\shopperpro\shopperpro.exe
c:\program files (x86)\shopperpro\updater.exe
c:\programdata\shopperpro\shopperpro.dll
c:\program files (x86)\suptab\suptab.dll
c:\users\hamdi\appdata\local\temp\nsya3d8.tmp
c:\users\hamdi\appdata\local\temp\smt_omiga-plus.exe
c:\users\hamdi\appdata\local\temp\ssetup-se.exe
c:\users\hamdi\appdata\local\temp\tu17p84.exe
c:\users\hamdi\appdata\local\temp\unelevate.exe
c:\users\hamdi\appdata\local\temp\3abc6343d95d8\temp\ezdownloader_setup.exe
c:\users\hamdi\appdata\local\temp\3abc6343d95d8\temp\hpds_setup.exe
c:\users\hamdi\appdata\local\temp\3abc6343d95d8\temp\putfu.exe
c:\users\hamdi\appdata\local\temp\comh.126119\googleupdate.exe
c:\users\hamdi\appdata\local\temp\comh.126119\goopdate.dll
c:\users\hamdi\appdata\local\temp\comh.372513\googleupdate.exe
c:\users\hamdi\appdata\local\temp\comh.372513\goopdate.dll
c:\users\hamdi\appdata\local\temp\e25b209f\temp\ezdownloader_setup.exe
c:\users\hamdi\appdata\local\temp\e25b209f\temp\putfu.exe
c:\users\hamdi\appdata\local\temp\is-43c67.tmp\netlogger.exe
c:\users\hamdi\appdata\local\temp\is-6hhgk.tmp\netlogger.exe
c:\users\hamdi\appdata\local\temp\is-dvnpq.tmp\netlogger.exe
c:\Users\Hamdi\AppData\Local\Temp\~dlD880\~dljyb\tmp\suptab_v5.8.8.777_noblank.exe
c:\Users\Hamdi\AppData\Local\Temp\~dlD880\~dljyb\tmp\wpm_v20.0.0.1337.exe
c:\programdata\application data\bndhnipiokjhhhepfdaikdailcghjfon\manifest.json
c:\programdata\application data\shopperpro\shopperpro.dll
c:\programdata\application data\shopperpro\shopperpro64.dll
c:\programdata\application data\windowsmangerprotect\protectwindowsmanager.exe
c:\programdata\bndhnipiokjhhhepfdaikdailcghjfon\manifest.json
c:\programdata\shopperpro\shopperpro64.dll
c:\users\hamdi\appdata\local\updatechrome.exe
c:\users\hamdi\appdata\roaming\omiga-plus\uninstallmanager.exe
c:\users\hamdi\appdata\roaming\rheng\8403a6bde1394a229775f993908834b2\syesubc3_p2v3.exe
c:\program files (x86)\55bcc120-aba2-4d49-affc-6f2407372a6b\1d729828-de8f-4ada-8888-35fefde4510f.dll
c:\program files (x86)\55bcc120-aba2-4d49-affc-6f2407372a6b\4dd520b5-482a-438c-8060-22c7477271cb.dll
c:\program files (x86)\58aacb23-ccb8-4dbf-8352-ca7a891487aa\304cf2a2-04df-4062-b2aa-a466d10c491a.dll
c:\program files (x86)\58aacb23-ccb8-4dbf-8352-ca7a891487aa\58aacb23-ccb8-4dbf-8352-ca7a891487aa.dll
c:\program files (x86)\58aacb23-ccb8-4dbf-8352-ca7a891487aa\6acdddad-8f38-4732-8bc7-2375dba39579.dll
c:\program files (x86)\58aacb23-ccb8-4dbf-8352-ca7a891487aa\86f98b61-0ec9-4e78-9c66-174ff7f9fedb.dll
c:\program files (x86)\globalupdate\update\1.3.25.0\googleupdate.exe
c:\program files (x86)\globalupdate\update\1.3.25.0\goopdate.dll
c:\program files (x86)\iwebar\f0f2280d-f405-4dc4-84d2-12ff0c38771c.dll
c:\program files (x86)\senseplus\df91aab5-7c49-4a6e-8d23-72066ef965d3.dll
c:\program files (x86)\shopperpro\manifest.json
c:\program files (x86)\shopperpro\shopperpro.dll
c:\program files (x86)\shopperpro\shopperpro64.dll
c:\program files (x86)\shopperpro\spremove.exe
c:\program files (x86)\shopperpro\firefox\install.rdf
c:\program files (x86)\shopperpro\jsdriver\jsdrv.exe
c:\program files (x86)\shopperpro\jsdriver\jsdrv.sys
c:\program files (x86)\suptab\rshp.exe
c:\program files (x86)\suptab\searchprotect32.dll
c:\program files (x86)\suptab\searchprotect64.dll
c:\program files (x86)\suptab\uninstall.exe
c:\program files (x86)\uniisales\uniisales.exe
c:\program files (x86)\youtube accelerator\engine.dll
c:\program files (x86)\youtube accelerator\helper.dll
c:\program files (x86)\youtube accelerator\ipc.dll
c:\program files (x86)\youtube accelerator\ytahuninstall.exe

Bu klasörleri sil;
C:\Program Files (x86)\SupTab\
c:\program files (x86)\deltafix\
c:\program files (x86)\youtube accelerator\
c:\program files\common files\shopperpro\
c:\program files (x86)\uniisales\
c:\program files (x86)\senseplus\
c:\program files (x86)\iwebar\
C:\ProgramData\IePluginServices\
c:\program files (x86)\globalupdate\
c:\users\hamdi\appdata\roaming\rheng\
c:\users\hamdi\appdata\roaming\omiga-plus\
c:\programdata\shopperpro\
c:\program files (x86)\58aacb23-ccb8-4dbf-8352-ca7a891487aa\
c:\program files (x86)\55bcc120-aba2-4d49-affc-6f2407372a6b\
c:\users\hamdi\appdata\local\temp\
C:\Users\Hamdi\AppData\Roaming\SkypEmoticons\
C:\Users\Hamdi\AppData\Local\ChromeUpdater\
c:\programdata\windowsmangerprotect\
c:\program files\common files\shopperpro\

Tarayıcı kısayolu hedef kısımlarında bulunan siteyi kaldırıp bu şekilde düzenle;
Şuan:
...Application\chrome.exe" http://isearch.

Olması gereken:
...Application\chrome.exe"
 
ADWCleaner da kullanabilirsin, başta bir tarama yapıp bilgisayarı yeniden başlatıyor %85 işe yarıyor.
 
Durum
Mesaj gönderimine kapalı.

Geri
Yukarı