Start.qone8.com

[AlbertoGibert]

Very funny to me that this is the most obstinate version that you have come across. Goddd 

I post the log with selecting all users: Its right?

[essexboy]

Are you still getting it coming as your main search engine ?

[AlbertoGibert]

Yes .....
Comes opening a new tab in all browsers because keeping open the last session.
When not saved the last session appears as the first tab, though Google the search engine that II have set.

[essexboy]

OK in IE could you visit here http://windows.microsoft.com/en-gb/windows-vista/change-or-choose-a-search-provider-in-internet-explorer  get a new search provider (i.e. Bing) this will not be for long
Make this your main search engine
Then delete the Google search engine
Does it still appear

[AlbertoGibert]

Yes, still appears it : http://start.qone8.com/?type=sc&ts=1381697851&from=tugs&uid=TOSHIBAXMK6465GSXN_Z0LCS14DSXXZ0LCS14DS

How to restore the search engine Google please?

[essexboy]

To restore Google follow the same process as used to get bing

Could you check in internet options that you have only one home page set

[AlbertoGibert]

Yes, I have only one home page set : http://www.google.com/

[essexboy]

These type of programmes really annoy me - especially when they find new ways to hide

For 32bit systems, please download SystemLook from one of the links below and save it to your Desktop.
 
Download Mirror #1
Download Mirror #2
 
For 64bit systems, download SystemLook from here.
 
 

• Double-click SystemLook.exe to run it.
  
• Copy the content of the following codebox into the main textfield:
  

Code: [Select]

:regfind
start.qone8.com
start.qone8
qone8

• Click the Look button to start the scan.
  
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

 
Note: The log can also be found on your Desktop entitled SystemLook.txt

[AlbertoGibert]

Here you are ...

[essexboy]

After this fix could you re-run system look please

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  
  

Code: [Select]

:Commands
[CREATERESTOREPOINT]

:Reg
[-HKEY_USERS\S-1-5-21-1571150509-1092675849-722137386-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\qone8.com]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\qone8.com]
[HKEY_USERS\S-1-5-21-1571150509-1092675849-722137386-1000\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit]
"LastKey"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit]
"LastKey"=-

:Commands
[resethosts]
[emptytemp]
[Reboot]

• Then click the Run Fix button at the top
  
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

[AlbertoGibert]

Still appears: http://start.qone8.com/?type=sc&ts=1381697851&from=tugs&uid=TOSHIBAXMK6465GSXN_Z0LCS14DSXXZ0LCS14DS

Posting ...

[AlbertoGibert]

And the system look

[essexboy]

OK I will have to do a bit more research on where this could be generated

[AlbertoGibert]

Rigth, thanks. I will wait.

[essexboy]

Still searching with no real answer yet