Jak odinstalować start.search.us.com?

Dla specjalistów Bezpieczeństwo
#1

Witam!

 

Jak w temacie - pojawiło mi się to w przeglądarce i po przeczytaniu tej instrukcji http://forum.dobreprogramy.pl/jak-odinstalowa%C4%87-startsearchuscom-t441081/ ściągnęlam oba programy. Po czyszczeniu pierwszym startsearch już się nie pojawił, ale na wszelki wypadek użyłam OTL

 

Tu linki:

http://www.wklej.org/id/1634660/ - otl

http://www.wklej.org/id/1634676/ - extras

 

Czekam na info, co dalej :slight_smile:

 

#2

Nowy log obowiązkowy - Farbar Recovery Scan Tool

#3

Dziękuję :slight_smile:

 

http://www.wklej.org/id/1637537/ - FRST

http://www.wklej.org/id/1637539/ - Addition

 

Rozumiem, że OTL i tamten wcześniejszy program mogę już odinstalować?

#4

Odinstaluj youtubeadblocker.Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13263072 2012-12-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1260256 2013-01-04] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [AdobeCS6ServiceManager] = C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [TkBellExe] = c:\program files (x86)\real\realplayer\Update\realsched.exe [296520 2014-12-18] (RealNetworks, Inc.)
HKLM-x32\...\Run: [RealDownloader] = C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [560192 2014-10-29] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4281609945-2294138942-2452147308-1002 - DefaultScope {0541FED8-471C-40F7-AB03-F702BE4DA4AC} URL =
SearchScopes: HKU\S-1-5-21-4281609945-2294138942-2452147308-1002 - {0541FED8-471C-40F7-AB03-F702BE4DA4AC} URL =
BHO: UniDeaLsa - {3cc10526-34e0-4f01-900b-f09926305cc4} - C:\Program Files (x86)\UniDeaLsa\OhwT7BYN2TjQvI.x64.dll ()
BHO: youtubeadblocker - {4d13454e-779d-4754-8468-977e8d5649db} - C:\Program Files (x86)\youtubeadblocker\5d4kwnGBpgQBTn.x64.dll ()
BHO: UniDeals - {e0660d01-41e6-4cbe-9697-55b89e09d86e} - C:\Program Files (x86)\UniDeals\kiLDJ5DZdYLzei.x64.dll ()
BHO-x32: UniDeaLsa - {3cc10526-34e0-4f01-900b-f09926305cc4} - C:\Program Files (x86)\UniDeaLsa\OhwT7BYN2TjQvI.dll ()
BHO-x32: youtubeadblocker - {4d13454e-779d-4754-8468-977e8d5649db} - C:\Program Files (x86)\youtubeadblocker\5d4kwnGBpgQBTn.dll ()
BHO-x32: UniDeals - {e0660d01-41e6-4cbe-9697-55b89e09d86e} - C:\Program Files (x86)\UniDeals\kiLDJ5DZdYLzei.dll ()
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
2015-02-15 15:18 - 2015-02-15 15:18 - 00000000 ____ D () C:\ProgramData\pdckpiidndafenceobkonbhlkcjkjejn
2015-02-15 15:18 - 2015-02-15 15:18 - 00000000 ____ D () C:\ProgramData\14648814322157088320
2015-02-15 15:18 - 2015-02-15 15:18 - 00000000 ____ D () C:\Program Files (x86)\youtubeadblocker
2015-02-15 15:18 - 2015-02-15 15:18 - 00000000 ____ D () C:\Program Files (x86)\UniDeaLsa
2015-02-13 21:11 - 2015-02-13 21:15 - 00000000 ____ D () C:\AdwCleaner
2015-02-13 11:01 - 2015-02-13 11:01 - 00000000 ____ D () C:\Program Files (x86)\BocaFunc
2015-02-13 11:00 - 2015-02-13 11:00 - 00000000 ____ D () C:\Program Files (x86)\UniDealssi
2015-02-13 11:00 - 2015-02-13 11:00 - 00000000 ____ D () C:\Program Files (x86)\UniDeals
2015-02-13 10:59 - 2015-02-13 10:59 - 00000000 ____ D () C:\ProgramData\imggfeifmikgkicmolgjfnlipggamdmp
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

Już jest w porządku. Bardzo dziękuję :slight_smile: