• 0
samuel

WEBCOMPANION UNINSTALL PROBLEM

Question

I tried to uninstall webcompanion but there is a pop-up stating that "Another instance is running" "WebCompanion.UI.AppCore.Services.InstallerService´threw an exception"

i started the process with FRST, i have sent the files, please advice me how to fix it, thanks!

Addition.txt

FRST.txt

Share this post


Link to post
Share on other sites

4 answers to this question

Recommended Posts

  • 0

Hi Samuel,

1. If possible, start the Web Companion program and change the settings for search in the browsers to one that isn't handled by Web Companion.

Please, start Notepad.
Copy all text that is in the box:

HKU\S-1-5-21-3694723945-682610058-2143140717-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015
SearchScopes: HKU\S-1-5-21-3694723945-682610058-2143140717-1001 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10270__181015&q={searchTerms}
FF Homepage: Mozilla\Firefox\Profiles\q3jo6696.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015
FF NewTab: Mozilla\Firefox\Profiles\q3jo6696.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015
FF SearchPlugin: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\q3jo6696.default\searchplugins\securesearch.xml [2018-10-14]
2018-10-14 20:42 - 2018-10-18 11:31 - 000000000 ____D C:\Users\Usuario\AppData\Local\Lavasoft
2018-10-14 20:42 - 2018-10-18 11:22 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\Lavasoft
2018-10-14 20:23 - 2018-10-18 11:31 - 000000000 ____D C:\ProgramData\Lavasoft
IE trusted site: HKU\S-1-5-21-3694723945-682610058-2143140717-1001\...\webcompanion.com -> hxxp://webcompanion.com

and paste in Notepad. Check that no files have been split on two lines.
Save the file as fixlist.txt on the desktop.

Exit all programs.
Start FRST, please.
Click the Fix button.
Wait until the tool has finished and the computer has been restarted.

It creates a log file, called Fixlog.txt, on the desktop.
Please, paste the content of that file in your reply.

Do you see Web Companion now?
 

2,

Quote

Java(TM) 7 Update 4 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217004FF}) (Version: 7.0.40 - Oracle)

That is a very old version of Java with many known vulnerabilities that can be exploited by hacked or malicious web pages, I recommend that you uninstall it. If you really need Java, most people don't, it's very important to always have the latest version.

 

3. You can get strange problems in the computer when several antivirus programs are installed, I can see files belonging to Avast, AVG and Kaspersky antivirus in the logs.

Share this post


Link to post
Share on other sites
  • 0

thanks so far looks good!

 

this was the results of the file after runnig FRST

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 10.10.2018
Ran by Usuario (20-10-2018 22:58:45) Run:1
Running from C:\Users\Usuario\Desktop
Loaded Profiles: Usuario (Available Profiles: Usuario)
Boot Mode: Normal
==============================================

fixlist content:
*****************
HKU\S-1-5-21-3694723945-682610058-2143140717-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015
SearchScopes: HKU\S-1-5-21-3694723945-682610058-2143140717-1001 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10270__181015&q={searchTerms}
FF Homepage: Mozilla\Firefox\Profiles\q3jo6696.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015
FF NewTab: Mozilla\Firefox\Profiles\q3jo6696.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10270__181015
FF SearchPlugin: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\q3jo6696.default\searchplugins\securesearch.xml [2018-10-14]
2018-10-14 20:42 - 2018-10-18 11:31 - 000000000 ____D C:\Users\Usuario\AppData\Local\Lavasoft
2018-10-14 20:42 - 2018-10-18 11:22 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\Lavasoft
2018-10-14 20:23 - 2018-10-18 11:31 - 000000000 ____D C:\ProgramData\Lavasoft
IE trusted site: HKU\S-1-5-21-3694723945-682610058-2143140717-1001\...\webcompanion.com -> hxxp://webcompanion.com
*****************

HKU\S-1-5-21-3694723945-682610058-2143140717-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-3694723945-682610058-2143140717-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9} => removed successfully
HKLM\Software\Classes\CLSID\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9} => not found
"Firefox homepage" => removed successfully
"Firefox newtab" => removed successfully
C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\q3jo6696.default\searchplugins\securesearch.xml => moved successfully
C:\Users\Usuario\AppData\Local\Lavasoft => moved successfully
C:\Users\Usuario\AppData\Roaming\Lavasoft => moved successfully
C:\ProgramData\Lavasoft => moved successfully
HKU\S-1-5-21-3694723945-682610058-2143140717-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com => removed successfully
 

 

thanks the connection seem to be back...

Share this post


Link to post
Share on other sites
  • 0

You're welcome :)

To remove automatically all files/folders created by FRST and the tool itself rename FRST/FRST64.exe to uninstall.exe and run it. Please reboot the computer to finish the removal.

Can we mark this topic as solved?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now