Jak to usunąć- mystartsearch

Dla specjalistów Bezpieczeństwo
#1

Witam!

Koledzy komputer mi zmólił i denerwuje mnie otwierajaca sie ta strona mystartsearch.com

zamieszczam linki

FRST.txt

http://www.wklej.org/id/1611819/

Addition.txt

http://www.wklej.org/id/1611824/

#2

Odinstaluj Adobe Reader 9.5.0 - Polish.Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [Adobe Reader Speed Launcher] = C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] = C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-02] (Adobe Systems Incorporated)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354q={searchTerms}
HKU\S-1-5-21-977705385-1762560262-3765340067-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354
HKU\S-1-5-21-977705385-1762560262-3765340067-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=scts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354q={searchTerms}
SearchScopes: HKU\S-1-5-21-977705385-1762560262-3765340067-1000 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354q={searchTerms}
SearchScopes: HKU\S-1-5-21-977705385-1762560262-3765340067-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1420486008from=wpcuid=WDCXWD3200BPVT-00HXZT1_WD-WX91AC0M1354M1354q={searchTerms}
FF SearchPlugin: C:\Users\Daro\AppData\Roaming\Mozilla\Firefox\Profiles\s1qy7l06.default\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\wtu-secure-search.xml
FF Extension: AVG Web TuneUp - C:\Users\Daro\AppData\Roaming\Mozilla\Firefox\Profiles\s1qy7l06.default\Extensions\avg@toolbar [2014-09-07]
R2 vToolbarUpdater3.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe [1843736 2014-09-07] (AVG Secure Search)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-09-07] (AVG Technologies)
S2 Hardlock; \SystemRoot\system32\drivers\hardlock.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-01-05 20:18 - 2015-01-06 10:07 - 00000000 ____ D () C:\Program Files\unnisalles
2015-01-05 20:17 - 2015-01-06 10:07 - 00000000 ____ D () C:\Program Files\Unisales
2015-01-05 20:17 - 2015-01-05 20:17 - 00000000 ____ D () C:\ProgramData\12615330912956918023
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

Witam!

Wielkie dzięki . :smiley:

#4

Skasuj folder C:\FRST