Witam,
Po zainstalowaniu Adobe Flash Player zainstalowało mi się też my start search i jakiś omniboxes, są to dwa programy, których nie mogę usunąć standardowymi metodami. Nie wiem co robi ten drugi, ale my start search jest bardzo irytujące. Proszę o pomoc jak mogę się tego pozbyć?
Addition http://wklej.to/sSsyB
Otwórz notatnik systemowy i wklej:
Task: {0216FB4B-9771-410C-937B-1B997105B4C3} - System32\Tasks\APSnotifierPP2 = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: {4516895B-2D84-4865-B3D0-7170FAD5CE5B} - System32\Tasks\{933B66C0-8022-4E2F-BD2D-354118B551A7} = pcalua.exe -a C:\Users\YoAsia\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi
Task: {59E574B4-57D2-44F0-B29E-C671620D30D5} - System32\Tasks\APSnotifierPP1 = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: {616C4418-9902-46D6-8A71-A03929A90507} - System32\Tasks\SmartWeb Upgrade Trigger Task = C:\Users\YoAsia\AppData\Local\SmartWeb\SmartWebHelper.exe ==== ATTENTION
Task: {A5EDF6CE-5402-4316-B9E2-F66E5B98663D} - System32\Tasks\{8769BE14-A15E-4BDE-B56A-A16757EECB9F} = pcalua.exe -a C:\Users\YoAsia\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw
Task: {CDE7D678-F8D3-4D12-A82F-8744AB406BFD} - System32\Tasks\APSnotifierPP3 = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP1.job = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
HKLM-x32\...\Run: [gmsd_pl_62] = [X]
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322q={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=scts=1425509797from=obwuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322
CHR StartupUrls: Default - "hxxp://www.mystartsearch.com/?type=hpts=1425510674from=cmiuid=WDCXWD5000BPVT-22HXZT3_WD-WX31E927232272322"
CHR Extension: (hdogcpghhdcocgdjogbglgejhdeedijn) - C:\Users\YoAsia\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdogcpghhdcocgdjogbglgejhdeedijn [2015-03-08]
R2 cupukeko; C:\Users\YoAsia\AppData\Roaming\A62AAE64-1425513321-67AB-DCEA-DC0EA1B7F0DA\jnsdD02.tmp [194560 2015-03-04] () [File not signed]
R2 donureqe; C:\Users\YoAsia\AppData\Roaming\A62AAE64-1425513321-67AB-DCEA-DC0EA1B7F0DA\nse8AEB.tmp [140288 2015-03-08] () [File not signed]
S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X]
2015-03-05 00:55 - 2015-03-05 00:55 - 00000000 ____ D () C:\Program Files (x86)\predm
2015-03-05 00:44 - 2015-03-05 00:44 - 00003162 _____ () C:\Windows\System32\Tasks\{8769BE14-A15E-4BDE-B56A-A16757EECB9F}
2015-03-05 00:25 - 2015-03-05 00:25 - 00003170 _____ () C:\Windows\System32\Tasks\{933B66C0-8022-4E2F-BD2D-354118B551A7}
2015-03-05 00:21 - 2015-03-08 00:21 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2015-03-05 00:21 - 2015-03-06 00:21 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2015-03-05 00:21 - 2015-03-05 00:41 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2015-03-05 00:21 - 2015-03-05 00:21 - 00002830 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2015-03-05 00:21 - 2015-03-05 00:21 - 00002828 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2015-03-05 00:21 - 2015-03-05 00:21 - 00002828 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2015-03-05 00:13 - 2015-03-05 00:13 - 00613067 _____ (CMI Limited) C:\Users\YoAsia\AppData\Local\nsp4BD0.tmp
2015-03-05 00:13 - 2015-03-05 00:13 - 00000000 __SHD () C:\Users\YoAsia\AppData\Roaming\AnyProtectEx
2015-03-05 00:11 - 2015-03-08 15:21 - 00000000 ____ D () C:\Users\YoAsia\AppData\Roaming\mystartsearch
2015-03-04 23:58 - 2015-03-04 23:58 - 00000000 ____ D () C:\ProgramData\IHProtectUpDate
2015-03-04 23:57 - 2015-03-05 00:14 - 00000000 ____ D () C:\Program Files (x86)\MiniGet
2015-03-04 23:57 - 2015-03-04 23:57 - 00000000 ____ D () C:\Users\YoAsia\AppData\Roaming\MiniGet
2015-03-04 23:57 - 2015-03-04 23:57 - 00000000 ____ D () C:\ProgramData\WindowsMangerProtect
2015-03-04 23:56 - 2015-03-05 12:20 - 00000000 ____ D () C:\Program Files (x86)\globalUpdate
2015-03-04 23:56 - 2015-03-04 23:56 - 00000000 ____ D () C:\Users\YoAsia\AppData\Roaming\omniboxes
2015-03-04 23:56 - 2015-03-04 23:56 - 00000000 ____ D () C:\Users\YoAsia\AppData\Local\globalUpdate
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Dziękuję bardzo!
Skasuj folder C:\FRST