View original (French)

What is Google OneStart?

Solved
locaguo Posted messages 48 Registration date   Status Membre Last intervention   -  
brucine Posted messages 24370 Registration date   Status Membre Last intervention   -

Hello,

On January 3, 2025, I have a new startup tab: OneStart from Google, very similar to the Google Chrome tab on my PC running Windows 10 Home, which cannot upgrade to Windows 11 nor receive updates since 12/27/2024. I keep the old Edge for my email on this 64-bit HP PC.

What does this intrusion mean? Should I remove it?

Thank you for your attention


3 réponses

Réponse 1 / 3
Jean20B Posted messages 1861 Registration date   Status Membre Last intervention   2 372
 

Hello,

OneStart is not a Google product. It is a browser (different from Google Chrome), your PC does not need it to function.

OneStart may have been installed along with another software that you installed on your PC. Some installers contain options to install promotional software.

You should be able to uninstall it from the Windows settings or the control panel.
4
Réponse 2 / 3
HYZO.AI
 

Hello,
OneStart is indeed not a Google product and is flagged by several antivirus programs as malware. I recommend using a Powershell script to remove any trace of the software (registry keys, force closing services, deleting files, etc...)

You can download the OpenSource script in Powershell here: https://github.com/HYZO-ai/Delete-all-OneStart-adhesion.ps1

Have a nice day
0
Ligara
 

Hello, how can I install this script on my computer?

0
HelpiOS Posted messages 15551 Registration date   Status Modérateur Last intervention   11 939 > Ligara
 

Hello,

On the GitHub page, click on the file removeOneStart.ps1 and then on the three vertical dots next to "Files" and the "main" dropdown menu. Choose Download to download it.

Then, right-click on the file you just downloaded and click on Run with PowerShell (Admin).

0
Réponse 3 / 3
locaguo Posted messages 48 Registration date   Status Membre Last intervention   2
 

Good evening,

Apparently this software is no longer on my PC after I removed it.

Thank you for your information.
0
brucine Posted messages 24370 Registration date   Status Membre Last intervention   4 094
 

Hello,

This "trend" of OneStart is surprising; it is not malware by direct intrusion but rather a "software" that must have been installed by the user via direct download (a strange idea) or because it is bundled with another software that was downloaded, particularly the case with a number of so-called PDF software promising wonders for free.

The first lesson is therefore to be careful with the software you download and to do so only from trusted publishers.

For the next victims on Windows 11, it does not allow you to run a ps1 file as an administrator from the context menu; you need to run this script in the PowerShell console itself.

https://www.it-connect.fr/comment-executer-un-script-powershell-en-tant-quadministrateur/

0
brucine Posted messages 24370 Registration date   Status Membre Last intervention   4 094 > brucine Posted messages 24370 Registration date   Status Membre Last intervention  
 

To add another layer, regarding direct downloads, I don't know what Windows Defender's behavior is.

But concerning indirect downloads in another software, recent versions of Windows 10 and all versions of Windows 11 normally intercept PUA, and it is then that presumably the user has overridden the warning.

0