afinstallere malware/virus

rettelse: den er sat til trovi, hvor jeg normalt har google forsiden fremme. Har prøvet at ændre indstillinger men viser det samme, når jeg genstarter chromebrowseren.

Hej og velkommen til.
Prøv at køre en tur med AdwCleaner:
Prøv at hente AdwCleaner her:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Start programmet, og når det er startet trykker du på [Scan]
Pc scannes, og ved endt scanning skal du trykke på [Clean].
Og derefter (automatisk) genstart...
Tilbage fra genstart kommer en log, som du gerne må kopiere herind.
Mht.: Vista og Windows 7/8 - Højreklik på filen - Kør som Administrator.

Måtte jeg evt lige se den log Malwarebytes genererede da den var færdig med scanning?

# AdwCleaner v3.210 - Report created 24/05/2014 at 15:36:51
# Updated 19/05/2014 by Xplode
# Operating System : Windows 7 Home Basic Service Pack 1 (64 bits)
# Username : MyOnlyLove - MYONLYLOVE-PC
# Running from : C:\Users\MyOnlyLove\Downloads\adwcleaner_3.210.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\FUN2SaVEE
Folder Deleted : C:\Program Files (x86)\Vuze
Folder Deleted : C:\Users\Administrator\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\MyOnlyLove\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\MyOnlyLove\AppData\Local\SearchProtect
Folder Deleted : C:\Users\MyOnlyLove\AppData\Local\torch
Folder Deleted : C:\Users\MyOnlyLove\Documents\Optimizer Pro
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeaghpkjngpfimjjjhlehodblfpmconj
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeaghpkjngpfimjjjhlehodblfpmconj
File Deleted : C:\END

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\FFuNN2SAve.FFuNN2SAve
Key Deleted : HKLM\SOFTWARE\Classes\FFuNN2SAve.FFuNN2SAve.4.5
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{1a34a8e0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9127453-5524-1F13-ED6A-F161BB42CFC9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A9127453-5524-1F13-ED6A-F161BB42CFC9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A9127453-5524-1F13-ED6A-F161BB42CFC9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\Software\Solvusoft
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DD5E91C-3864-77EC-7635-D14910C2A03E}

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16866


-\\ Mozilla Firefox v28.0 (da)

[ File : C:\Users\MyOnlyLove\AppData\Roaming\Mozilla\Firefox\Profiles\nhxn9mwn.default\prefs.js ]


-\\ Google Chrome v34.0.1847.131

[ File : C:\Users\MyOnlyLove\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3323885&octid=EB_ORIGINAL_CTID&ISID=MBCE49973-482A-4C28-9835-6559210A7687&SearchSource=58&CUI=&UM=5&UP=SP1CC37BD4-0C12-4F3A-BEF5-A6FED69D6671&q={searchTerms}&SSPV=
Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
Deleted [Search Provider] : hxxp://ebookoid.com/?q=search&searchQuery={searchTerms}
Deleted [Startup_urls] : hxxp://www.trovi.com/?gd=&ctid=CT3323885&octid=EB_ORIGINAL_CTID&ISID=MBCE49973-482A-4C28-9835-6559210A7687&SearchSource=55&CUI=&UM=5&UP=SP1CC37BD4-0C12-4F3A-BEF5-A6FED69D6671&SSPV=
Deleted [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Deleted [Extension] : flpcjncodpafbgdpnkljologafpionhb

*************************

AdwCleaner[R0].txt - [4756 octets] - [24/05/2014 15:35:26]
AdwCleaner[S0].txt - [4592 octets] - [24/05/2014 15:36:51]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4652 octets] ##########


Medhensyn til malwarebytes fil, så ved jeg ikke lige hvor den er henne. jeg lavede en systemrestore og der stod at den ikke kunne restore mit system. mog nu kan jeg ikke finde malwarebytes. håber det går uden.

Der blev fjernet noget browser skrammel kan jeg se. Men kan den fastholde den startside som du selv har valgt?

Nej det kan den desværre ikke. synes dog det virkede i starten, men den har åbenbart ændret det til det samme trovi søgemaskine igen.

Nu prøvede jeg lige at køre en fullscan med mit antivirus og derefter prøvede jeg en system restore. Derefter kørte jeg malwarebytes. føler lidt at jeg har gjort det værre. den fandt 18 notificationer :(

men men, har fået gemt en log fil. Den spytter følgende tekst ud:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 25-05-2014
Scan Time: 00:40:06
Logfile: virusscan2.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.05.24.08
Rootkit Database: v2014.05.21.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: MyOnlyLove

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 347540
Time Elapsed: 4 min, 42 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 9
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A9127453-5524-1F13-ED6A-F161BB42CFC9}, , [a3952134760591a5675dc9815fa2a858],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A9127453-5524-1F13-ED6A-F161BB42CFC9}, , [a3952134760591a5675dc9815fa2a858],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\FFuNN2SAve.FFuNN2SAve, , [a3952134760591a5675dc9815fa2a858],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\FFuNN2SAve.FFuNN2SAve.4.5, , [a3952134760591a5675dc9815fa2a858],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\FFuNN2SAve.FFuNN2SAve, , [a3952134760591a5675dc9815fa2a858],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\FFuNN2SAve.FFuNN2SAve.4.5, , [a3952134760591a5675dc9815fa2a858],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A9127453-5524-1F13-ED6A-F161BB42CFC9}, , [a3952134760591a5675dc9815fa2a858],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3961678734-1205597840-1493249322-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [44f42035730868ce0bb3248108fad22e],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3961678734-1205597840-1493249322-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [61d763f2bac140f65c6f4b70a360d22e],

Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3961678734-1205597840-1493249322-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, zr2X2X1G1S1F2V1S2Q0V, , [61d763f2bac140f65c6f4b70a360d22e]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 8
PUP.Optional.MultiPlug.A, C:\ProgramData\FUN2SaVEE\yD.dll, , [a3952134760591a5675dc9815fa2a858],
PUP.Optional.Tarma.A, C:\Users\MyOnlyLove\AppData\Local\Temp\{F524039B-0CD8-4C61-AE8A-44FA2EC7216D}\Setup.exe, , [94a4b5a0d2a9dd59b92560e5827e2dd3],
PUP.Optional.MultiPlug.A, C:\Users\MyOnlyLove\AppData\Local\Temp\{F524039B-0CD8-4C61-AE8A-44FA2EC7216D}\Addons\Alexa_setup.exe, , [3503b79e75064ee8109a51f8a4604bb5],
Trojan.SProtector, C:\Users\MyOnlyLove\AppData\Local\Temp\{F524039B-0CD8-4C61-AE8A-44FA2EC7216D}\Addons\assistant_v3.exe, , [9c9c460f3b4067cf8d33b29e1ce52bd5],
PUP.Optional.MultiPlug.A, C:\Users\MyOnlyLove\AppData\Local\Temp\{F524039B-0CD8-4C61-AE8A-44FA2EC7216D}\Addons\ext_setup.exe, , [1226cb8aa9d2b4821b8f5aefd430d42c],
PUP.Optional.MultiPlug.A, C:\Users\MyOnlyLove\AppData\Local\Temp\{F524039B-0CD8-4C61-AE8A-44FA2EC7216D}\Addons\ytab_setup.exe, , [2c0c58fdc9b25bdbdecc0b3ee32138c8],
PUP.Optional.OpenCandy, C:\Users\MyOnlyLove\Downloads\DTLite4491-0356.exe, , [b682bc99a9d261d5cff287f31ee610f0],
PUP.Optional.Trovi.A, C:\Users\MyOnlyLove\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (      "startup_urls": [ "http://www.trovi.com/?gd=&ctid=CT3323885&octid=EB_ORIGINAL_CTID&ISID=MBCE49973-482A-4C28-9835-6559210A7687&SearchSource=55&CUI=&UM=5&UP=SP1CC37BD4-0C12-4F3A-BEF5-A6FED69D6671&SSPV=" ],), ,[a3951144730850e64de16c17f1131ce4]

Physical Sectors: 0
(No malicious items detected)


(end)

Håber det kan hjælpe med at fixe min computer. det er jo til at blive skør over det her.

Når du skriver system restore, tolker jeg det som du har gendannet nogla dage tilbage. Det er ikke fabriksindstillinger (som den var da du købte den) du har gået tilbage til vel?
Kører man systemgendannelse får man den jo tilbage som den var på dette tidspunkt, med og uden snavs.
http://info.trovi.com/Uninstall
http://malwaretips.com/blogs/trovi-search-removal/

Hmm Har du Fast Free Convertor installeret på computeren?.
I linket fra Malwaetips, beskriver de at man får Trovi som søgemaskine når man installerer dette program.
Prøv at gennemføre de 5 steps der er på linket, så du forhåbentligt får fjernet Trovi på din maskine.

YES! mange tak skal du have. Det virkede! :D

Det var da godt :-) Jeg lægger hermed et svar du evt kan bruge til lukning af tråd:
Du kan her se hvordan man accepeterer et svar på Eksperten
http://www.youtube.com/watch?v=s26DGiuvXBo