Otvorim mozzilu,ukucam nesta,enter i pojavi mi se Ask toolbar!
Kako da uklonim ovaj shit?
Nema ga u deinstall programs,Revo uninstaler ga ne moze naci.
U mozzili pod toolbars ga nema!
Otvorim mozzilu,ukucam nesta,enter i pojavi mi se Ask toolbar!
Kako da uklonim ovaj shit?
Nema ga u deinstall programs,Revo uninstaler ga ne moze naci.
U mozzili pod toolbars ga nema!
skeniraj sa http://free.antivirus.com/hijackthis/
i zalijepi log ovdje
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:10:19, on 11.11.2011.
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16869)
Boot mode: Normal
Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\iko\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=15183
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 6638 bytes
Ako imas problem da ti otvara stalno Ask search engine, onda ga riješi ovako: u adress bar napisi about:config i onda kad se pojavi ono i'll be careful stisni na to, gore u filter upisi Ask i kada ti se pojavi rezultat filtera promjeni sve ovo u umjesto Ask u Google (VELIKO POCETNO SLOVO). Dakle, moras promijeniti browser.search.selectedEngine, browser.search.order.1, browser.search.defaultenginename, browser.search.defaultengine. Od ta cetiri svi moraju glasiti na Google umjesto Ask.
I to je to :D Nadam se da sam pomogao
Ako neznas kako to promijeniti jednostavno stisni dva puta na to.
Ako imas problem da ti otvara stalno Ask search engine, onda ga riješi ovako: u adress bar napisi about:config i onda kad se pojavi ono i'll be careful stisni na to, gore u filter upisi Ask i kada ti se pojavi rezultat filtera promjeni sve ovo u umjesto Ask u Google (VELIKO POCETNO SLOVO). Dakle, moras promijeniti browser.search.selectedEngine, browser.search.order.1, browser.search.defaultenginename, browser.search.defaultengine. Od ta cetiri svi moraju glasiti na Google umjesto Ask.
I to je to :D Nadam se da sam pomogao
Ako neznas kako to promijeniti jednostavno stisni dva puta na to.
Gle-samo sam 3 nasao od gore navedenih i promjenio u Google!
Jos uvjek otvara Ask!
Daj vidi sta jos moram promjeniti(ako vidis na slici)
Koja tri si promijenio? Iz ovoga ne vidim nista. Sve je kako treba bit.
Gle-samo sam 3 nasao od gore navedenih i promjenio u Google!
Jos uvjek otvara Ask!
Daj vidi sta jos moram promjeniti(ako vidis na slici)
nemoj u filter upisivat Ask nego:
browser.search.selectedEngine
browser.search.order.1
browser.search.defaultenginename
browser.search.defaultengine
i tu za svakog promjeni u Google
tako ćeš bit siguran da je to ok
EDIT: ne radi trenutno ona stranica za analizirat log iz HijackThis pa nisam siguran dal je sve ok, ovako napamet izgleda dobro...
Ako imas problem da ti otvara stalno Ask search engine, onda ga riješi ovako: u adress bar napisi about:config i onda kad se pojavi ono i'll be careful stisni na to, gore u filter upisi Ask i kada ti se pojavi rezultat filtera promjeni sve ovo u umjesto Ask u Google (VELIKO POCETNO SLOVO). Dakle, moras promijeniti browser.search.selectedEngine, browser.search.order.1, browser.search.defaultenginename, browser.search.defaultengine. Od ta cetiri svi moraju glasiti na Google umjesto Ask.
I to je to :D Nadam se da sam pomogao
Ako neznas kako to promijeniti jednostavno stisni dva puta na to.
Gle-samo sam 3 nasao od gore navedenih i promjenio u Google!
Jos uvjek otvara Ask!
Daj vidi sta jos moram promjeniti(ako vidis na slici)
Ovaj: extensions.wrc.... mi je malo sumnjiv. Ajde ga probaj pobrisat ili mu izmijeniti vrijednost u prazno. Znaci izbrisati njegovu vrijednost (ove neke simbole cudne). Izbrisi to iz oba dva
EDIT: U filteru pronadji keyword.URL i promjeni u ovo "http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=" bez navodnika
Koja tri si promijenio? Iz ovoga ne vidim nista. Sve je kako treba bit.
Promjenio sam samo ona koja su imala naziv Ask,nakon promjene su nestala.
browser.search.selectedEngine
browser.search.order.1
browser.search.defaultenginename
browser.search.defaultengine
i tu za svakog promjeni u Google
tako ćeš bit siguran da je to ok
EDIT: ne radi trenutno ona stranica za analizirat log iz HijackThis pa nisam siguran dal je sve ok, ovako napamet izgleda dobro...
Evo svaku sam pojedinacno filtrirao i sve je na Google!
Ovaj: extensions.wrc.... mi je malo sumnjiv. Ajde ga probaj pobrisat ili mu izmijeniti vrijednost u prazno. Znaci izbrisati njegovu vrijednost (ove neke simbole cudne). Izbrisi to iz oba dva
EDIT: U filteru pronadji keyword.URL i promjeni u ovo "http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=" bez navodnika
Promjenio sam vrijednost na obadva,probao nista!
keyword.URL nasao i promjenio-rezultat opet isti!
Zaboravi sam reci da mi je Ask toolbar dosao sa jucerasnjom nadogradnjom Firefoxa na 8 ver(mislim),odmah sam skenirao sa Avastom i Malwarebytsom-nista nisu nasli.
A onda vise nemam blage veze. Tako sam ja sebi napravio kad sam imao problem i sada radi bez beda. Onda reinstaliraj firefox pa mozda to pomogne.
Koji shit hebote!
Revo uninstalerom sam Mozzilu deinstalirao,CCleanerom ocistio registry,restart,ponovo install Mozzila i Ask je nestao!
Samo sto sam sada dobio Yahoo toolbar!
Koji shit hebote!
Revo uninstalerom sam Mozzilu deinstalirao,CCleanerom ocistio registry,restart,ponovo install Mozzila i Ask je nestao!
Samo sto sam sada dobio Yahoo toolbar!
pa dobro gledaš li ti što klikaš kod instalacije ili samo lupaš po next?
Može slika da se vidi gdje je taj Ask... Misliš li ti na onaj tamo gornji desni search bar ili?
pa dobro gledaš li ti što klikaš kod instalacije ili samo lupaš po next?
Gledam,gledam,ali evo sada uopce nisam nista naknadno instalirao,osim Mozzile(koja ne nudi nikakav toolbar) i eto sada Yahoo!??
Posebno pazim na to,cak ako si primjetio da su sada hrpa programa poceli ici na foru kao:
Will you accept Your User Agreement,te malim slovima napisu(and install bla,bla toolbar)-ono kada
moras stisnuti Yes(ili u ovom slucaju) NO...
Ma pazim hebote,ali eto opet....
Čuj, dosta video playera, codeca to isto stavi pa pogledaj i tamo naravno. Naravno ako ideš na Typical instalaciju, sve ti stavi. Ako ideš na Custom, tamo uglavnom redovito moraš maknuti kvačicu da ti se ne instaliraju te gluposti.