Skip to main content

WEBCOMPANION UNINSTALL PROBLEM

Comments

4 comments

  • Customer


    thanks so far looks good!



     



    this was the results of the file after runnig FRST



     



    Fix result of Farbar Recovery Scan Tool (x64) Version: 10.10.2018

    Ran by Usuario (20-10-2018 22:58:45) Run:1

    Running from C:\Users\Usuario\Desktop

    Loaded Profiles: Usuario (Available Profiles: Usuario)

    Boot Mode: Normal

    ==============================================



    fixlist content:

    *****************

    HKU\S-1-5-21-3694723945-682610058-2143140717-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015

    SearchScopes: HKU\S-1-5-21-3694723945-682610058-2143140717-1001 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10270__181015&q={searchTerms}

    FF Homepage: Mozilla\Firefox\Profiles\q3jo6696.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015

    FF NewTab: Mozilla\Firefox\Profiles\q3jo6696.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015

    FF SearchPlugin: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\q3jo6696.default\searchplugins\securesearch.xml [2018-10-14]

    2018-10-14 20:42 - 2018-10-18 11:31 - 000000000 ____D C:\Users\Usuario\AppData\Local\Lavasoft

    2018-10-14 20:42 - 2018-10-18 11:22 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\Lavasoft

    2018-10-14 20:23 - 2018-10-18 11:31 - 000000000 ____D C:\ProgramData\Lavasoft

    IE trusted site: HKU\S-1-5-21-3694723945-682610058-2143140717-1001\...\webcompanion.com -> hxxp://webcompanion.com

    *****************



    HKU\S-1-5-21-3694723945-682610058-2143140717-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully

    HKU\S-1-5-21-3694723945-682610058-2143140717-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9} => removed successfully

    HKLM\Software\Classes\CLSID\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9} => not found

    "Firefox homepage" => removed successfully

    "Firefox newtab" => removed successfully

    C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\q3jo6696.default\searchplugins\securesearch.xml => moved successfully

    C:\Users\Usuario\AppData\Local\Lavasoft => moved successfully

    C:\Users\Usuario\AppData\Roaming\Lavasoft => moved successfully

    C:\ProgramData\Lavasoft => moved successfully

    HKU\S-1-5-21-3694723945-682610058-2143140717-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com => removed successfully

     



     



    thanks the connection seem to be back...

    0
  • Support


    Hi Samuel,



    1. If possible, start the Web Companion program and change the settings for search in the browsers to one that isn't handled by Web Companion.



    Please, start Notepad.

    Copy all text that is in the box:



    HKU\S-1-5-21-3694723945-682610058-2143140717-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015
    SearchScopes: HKU\S-1-5-21-3694723945-682610058-2143140717-1001 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10270__181015&q={searchTerms}
    FF Homepage: Mozilla\Firefox\Profiles\q3jo6696.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015
    FF NewTab: Mozilla\Firefox\Profiles\q3jo6696.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015
    FF SearchPlugin: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\q3jo6696.default\searchplugins\securesearch.xml [2018-10-14]
    2018-10-14 20:42 - 2018-10-18 11:31 - 000000000 ____D C:\Users\Usuario\AppData\Local\Lavasoft
    2018-10-14 20:42 - 2018-10-18 11:22 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\Lavasoft
    2018-10-14 20:23 - 2018-10-18 11:31 - 000000000 ____D C:\ProgramData\Lavasoft
    IE trusted site: HKU\S-1-5-21-3694723945-682610058-2143140717-1001\...\webcompanion.com -> hxxp://webcompanion.com



    and paste in Notepad. Check that no files have been split on two lines.

    Save the file as fixlist.txt on the desktop.


    Exit all programs.

    Start FRST, please.

    Click the Fix button.

    Wait until the tool has finished and the computer has been restarted.


    It creates a log file, called Fixlog.txt, on the desktop.

    Please, paste the content of that file in your reply.



    Do you see Web Companion now?

     



    2,




    Quote




    Java(TM) 7 Update 4 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217004FF}) (Version: 7.0.40 - Oracle)





    That is a very old version of Java with many known vulnerabilities that can be exploited by hacked or malicious web pages, I recommend that you uninstall it. If you really need Java, most people don't, it's very important to always have the latest version.



     



    3. You can get strange problems in the computer when several antivirus programs are installed, I can see files belonging to Avast, AVG and Kaspersky antivirus in the logs.

    0
  • Support


    You're welcome :)



    To remove automatically all files/folders created by FRST and the tool itself rename FRST/FRST64.exe to uninstall.exe and run it. Please reboot the computer to finish the removal.



    Can we mark this topic as solved?

    0
  • Customer


    yes you can close it, thanks once again!!!

    0

Please sign in to leave a comment.