View original (French)

What is Google OneStart?

Solved
locaguo Posted messages 48 Registration date   Status Member Last intervention   -  
brucine Posted messages 24834 Registration date   Status Member Last intervention   -

Hello,

On January 3, 2025, I have a new startup tab: OneStart from Google, very similar to the Google Chrome tab on my PC running Windows 10 Home, which cannot upgrade to Windows 11 nor receive updates since 12/27/2024. I keep the old Edge for my email on this 64-bit HP PC.

What does this intrusion mean? Should I remove it?

Thank you for your attention


3 answers

  1.
    Jean20B Posted messages 1861 Registration date   Status Member Last intervention   2 372
     

    Hello,

    OneStart is not a Google product. It is a browser (different from Google Chrome), your PC does not need it to function.

    OneStart may have been installed along with another software that you installed on your PC. Some installers contain options to install promotional software.

    You should be able to uninstall it from the Windows settings or the control panel.

    4
  2. HYZO.AI
     

    Hello,
    OneStart is indeed not a Google product and is flagged by several antivirus programs as malware. I recommend using a Powershell script to remove any trace of the software (registry keys, force closing services, deleting files, etc...)

    You can download the OpenSource script in Powershell here: https://github.com/HYZO-ai/Delete-all-OneStart-adhesion.ps1

    Have a nice day

    0
    1. Ligara
       

      Hello, how can I install this script on my computer?

      0
      1. HelpiOS Posted messages 15569 Registration date   Status Moderator Last intervention   11 947 > Ligara
         

        Hello,

        On the GitHub page, click on the file removeOneStart.ps1 and then on the three vertical dots next to "Files" and the "main" dropdown menu. Choose Download to download it.

        Then, right-click on the file you just downloaded and click on Run with PowerShell (Admin).

        0
  3. locaguo Posted messages 48 Registration date   Status Member Last intervention   2
     

    Good evening,

    Apparently this software is no longer on my PC after I removed it.

    Thank you for your information.

    0
    1. brucine Posted messages 24834 Registration date   Status Member Last intervention   4 166
       

      Hello,

      This "trend" of OneStart is surprising; it is not malware by direct intrusion but rather a "software" that must have been installed by the user via direct download (a strange idea) or because it is bundled with another software that was downloaded, particularly the case with a number of so-called PDF software promising wonders for free.

      The first lesson is therefore to be careful with the software you download and to do so only from trusted publishers.

      For the next victims on Windows 11, it does not allow you to run a ps1 file as an administrator from the context menu; you need to run this script in the PowerShell console itself.

      https://www.it-connect.fr/comment-executer-un-script-powershell-en-tant-quadministrateur/

      0
      1. brucine Posted messages 24834 Registration date   Status Member Last intervention   4 166 > brucine Posted messages 24834 Registration date   Status Member Last intervention  
         

        To add another layer, regarding direct downloads, I don't know what Windows Defender's behavior is.

        But concerning indirect downloads in another software, recent versions of Windows 10 and all versions of Windows 11 normally intercept PUA, and it is then that presumably the user has overridden the warning.

        0