Skip to content
Search

Adware

lastmod 2018-08-17created 2015-01-275 edits

Adware (advertising-supported software) is a program that automatically displays advertisements when certain software is run or after it is installed.

Example

As an example, the steps for removing omiga-plus are listed below.

  1. Remove all omiga-related keywords from the registry (regedit).
  2. If an omiga-related UUID COM is found, search for it again and remove it.1
  3. Remove the running omiga-related programs when Task Manager is run with administrator privileges.
  4. Remove all omiga-related URLs added to the properties of Internet Explorer shortcuts.
    1. In this case, if Chrome, Firefox, etc. are installed, check all related shortcuts as well.
  5. For Internet Explorer, remove all related ActiveX controls in the Internet settings.
    1. Check Chrome and Firefox plugins too.
    2. For Internet Explorer, you must also check 인터넷 옵션 > 프로그램 > 추가기능 관리.
  6. Change all start pages.
  7. If the same symptoms appear after rebooting, check msconfig and 제어판 > 관리 도구 > 작업 스케줄러. 2
    1. If a related UUID is found in Task Scheduler, find it again in regedit and remove it.
  8. Search all directories for omiga-related keywords and remove what you find.
    1. For reference, it was also present in %APPDATA%\Roaming.
  9. Check the copyright and other details in the related file properties, and also track down programs related to the company found.
    1. The copyright holder of omiga is Skytech, and %APPDATA%\Roaming\MailUpdate\MailUpdate.exe was found as a related file.
    2. For reference, there were mailUpdate-related services and registry search results. After removing them all, the service was also removed with the sc command.

Favorite site

References


  1. For reference, it was {33BB0A4E-99AF-4226-BDF6-49120163DE86}. ↩

  2. For reference, an omiga-related UUID was found: {AB9DC2A3-EE9A-4FB6-B325-F87EB1A62860}. ↩