Jak usunąć "MyStart" search


(Erykwin) #1

FRST http://wklej.org/id/1556696/

Addition http://wklej.org/id/1556697/

 


(Acorus) #2

Otwórz Notatnik i wklej:

HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-804690909-2992628118-2021338481-1000\...\RunOnce: [Adobe Speed Launcher] = 1418479203
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-804690909-2992628118-2021338481-1000 - {57B2F278-3C79-4115-8C8F-71265A55E039} URL = http://search.us.com/serp?guid={8531E7AF-EE27-45A2-AB33-F3AE0C97DCE0}k={searchTerms}
SearchScopes: HKU\S-1-5-21-804690909-2992628118-2021338481-1000 - {DA97BEE6-62CF-4957-A3BE-CFE0E21B4781} URL = http://search.yahoo.com/search?p={searchTerms}fr=tightropetbtype=10809
Toolbar: HKLM - TNT2-10809 Toolbar - {A6C382B6-DA36-463D-8B79-9500DD2617DA} - C:\Program Files (x86)\TNT2\Profiles\10809\passport64.dll No File
Toolbar: HKLM-x32 - TNT2-10809 Toolbar - {A6C382B6-DA36-463D-8B79-9500DD2617DA} - C:\Program Files (x86)\TNT2\Profiles\10809\passport.dll No File
CHR StartupUrls: Default - "hxxp://www.mystartsearch.com/?type=hpts=1418470109from=amtuid=SAMSUNGXHD300LJ_S0D7J1NP300298"
CHR DefaultSearchKeyword: Default - mystartsearch
S2 Util fassurun; "C:\Program Files (x86)\fassurun\bin\utilfassurun.exe" [X]
S3 ASAPIW2K; \\C:\Windows\SysWOW64\Drivers\asapiW2k.sys [X]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
2014-12-13 14:13 - 2014-12-13 15:08 - 00000000 ____ D () C:\AdwCleaner
2014-12-13 13:04 - 2014-12-13 13:04 - 00000000 ____ D () C:\sh4ldr
2014-12-13 13:03 - 2014-12-13 13:03 - 00000000 ____ D () C:\Program Files\Enigma Software Group
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.