Herdprotect rehberine göre
"BUNLAR HARİÇ" hepsini işaretleyip sil:
Kod:Panoya kopyala
d:\users\metehann\downloads\herdprotectscan_setup.exe
d:\users\metehann\downloads\minecraft.exe
d:\users\metehann\desktop\programlar\dolphin\dolphin-3.0-win64\dolphin.exe
d:\users\metehann\appdata\local\microsoft\redist\dsetup32.dll
d:\program files (x86)\hp photo creations\uninst.exe
d:\program files (x86)\k-lite codec pack\filters\haali\gdsmux.exe
d:\program files\windowsapps\microsoft.studios.pinballfx2_1.8.1.957_x86__8wekyb3d8bbwe\microsoft.games.sentient.dll
d:\program files\windowsapps\microsoft.studios.pinballfx2_1.8.1.957_x86__8wekyb3d8bbwe\pinballfx2.exe
Denetim masasından bunları kaldır:
360 Total Security
AnySend
Avast Free Antivirus
AVG Web TuneUp
BlockAndSurf
Broadband Cyan
Clean IMDb
CPU Miner
FlexiiblEiSHiopper
Hounds Last Hope 1.0
IGS
igsc
Java 8 Update 31
MyBestOffersToday 010.209
omniboxes uninstall
Phrase Finder 1.10.0.9
Punctuation Toner
Quick Ref 1.10.0.9
Sandboxie 4.16 (64-bit)
Search App by Ask
SeekerInstance
shopperz 2.0.0.457
tperafecTcuoupoon
Bu klasör içlerini sil:
d:\users\metehann\appdata\roaming\macwebtoise
d:\program files (x86)\phrasefinder_1.10.0.9
d:\users\metehann\appdata\roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions
d:\users\metehann\downloads\
d:\programdata\application data\askpartnernetwork
d:\programdata\application data\epicscale
d:\programdata\askpartnernetwork
d:\programdata\epicscale
D:\Users\metehann\AppData\Local\Temp\
D:\WINDOWS\Temp
d:\users\metehann\appdata\local\03000200-1426092432-0500-0006-000700080009
d:\users\metehann\appdata\local\03000200-1429218197-0500-0006-000700080009
d:\users\metehann\appdata\local\03000200-1429218374-0500-0006-000700080009
d:\users\metehann\appdata\local\rapidmediaconverter
d:\users\metehann\appdata\roaming\03000200-1428724575-0500-0006-000700080009
d:\users\metehann\appdata\roaming\03000200-1429207336-0500-0006-000700080009
d:\users\metehann\appdata\roaming\aspackage
d:\users\metehann\appdata\roaming\omniboxes\
d:\users\metehann\appdata\roaming\opera software\opera stable\extensions\
d:\program files (x86)\cinemap-1.9cv16.03\
D:\Program Files (x86)\QuickRef_1.10.0.9
d:\program files (x86)\rapidmediaconverter\
d:\users\metehann\appdata\local\google\chrome\user data\default\extensions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main
Regediten bu anahtarı bulup alt bölümlerinde omniboxes sitesini silip google ile değiştirin.
Bunların ardından Malwarebyte ile tarama yapıp bulunanları silersen iyi olur.