Jak usunąć Mystart search?


(Mga13) #1

Witam mam problem z przeglądarką chrom. Mianowicie zainstalowało mi się mystart search i teraz nie można spokojnie przeglądać stron ciągle pojawiają się jakieś dodatkowe okienka Adblock wg nie blokuje żadnych reklam. 

 

FRST.txt

Addition.txt


(Acorus) #2

Odinstaluj Price Metér (remove only).Otwórz notatnik systemowy i wklej:

Task: {BE69E1F0-0C5A-44E1-A9C0-BCA39775EFAA} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-681972650-2598347831-1091676328-1001Core = C:\Users\Dell\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-06] (Facebook Inc.)
Task: {D1C94B60-D575-4080-84D9-3264169396E6} - System32\Tasks\pricemeterwatcher = C:\Users\Dell\AppData\Local\PriceMeter\pricemeterw.exe [2014-06-15] (PriceMeter) ==== ATTENTION
Task: {DE09A5B4-B282-46F4-83B5-850E6845EDE7} - System32\Tasks\pricemetertask = C:\Users\Dell\AppData\Local\PriceMeter\TEMP\pricemeter.exe ==== ATTENTION
Task: {FB9A5B51-5121-47BC-9EB3-8A551A09735C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-681972650-2598347831-1091676328-1001UA = C:\Users\Dell\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-06] (Facebook Inc.)
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-681972650-2598347831-1091676328-1001Core.job = C:\Users\Dell\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-681972650-2598347831-1091676328-1001UA.job = C:\Users\Dell\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKU\S-1-5-21-681972650-2598347831-1091676328-1001\...\Run: [Facebook Update] = C:\Users\Dell\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-05-06] (Facebook Inc.)
HKU\S-1-5-21-681972650-2598347831-1091676328-1001\...\Run: [PriceMeterW] = C:\Users\Dell\AppData\Local\PriceMeter\pricemeterw.exe [288256 2014-06-15] (PriceMeter)
HKU\S-1-5-21-681972650-2598347831-1091676328-1001\...\Run: [ALLUpdate] = C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3510704 2014-07-23] (ALLPlayer Group Ltd.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
HKU\S-1-5-21-681972650-2598347831-1091676328-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587
HKU\S-1-5-21-681972650-2598347831-1091676328-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=scts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
SearchScopes: HKU\S-1-5-21-681972650-2598347831-1091676328-1001 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
SearchScopes: HKU\S-1-5-21-681972650-2598347831-1091676328-1001 - {336CF95B-8D10-46C5-AC7C-4191875E3291} URL =
SearchScopes: HKU\S-1-5-21-681972650-2598347831-1091676328-1001 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1419550035from=wpcuid=ST1000LM024XHN-M101MBB_S314JA0DA24587A24587q={searchTerms}
BHO: uniSalEs - {249c0572-3f8e-40d2-acf2-b4e28141f036} - C:\Program Files (x86)\uniSalEs\EOnZv3040g0Hoo.x64.dll No File
BHO: YoutubeAdBLocke - {4d585efa-19c5-4886-8c46-28c65c6733db} - C:\Program Files (x86)\YoutubeAdBLocke\dZEveizWA9iW6T.x64.dll No File
BHO: unisiaLes - {5d75776f-25ca-4a28-be22-f351c0c3d185} - C:\Program Files (x86)\unisiaLes\7j90IRDYeGTKhf.x64.dll No File
CHR Extension: (unnisaalesu) - C:\ProgramData\hehchodpjkdlecoanfoadecalcjnlpfe\ [2014-04-11]
CHR Extension: (unuiSales) - C:\ProgramData\nbaobknnepmgjgecfpcijkkcookkdlkb\ [2014-04-11]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
2014-12-26 00:55 - 2014-12-26 00:55 - 02998656 _____ (Enigma Software Group USA, LLC.) C:\Users\Dell\Downloads\SpyHunter-Installer.exe
2014-12-26 00:27 - 2014-12-26 00:27 - 00000000 ____ D () C:\ProgramData\IePluginServices
2014-12-26 00:27 - 2014-12-26 00:27 - 00000000 ____ D () C:\Program Files (x86)\SupTab
2014-12-26 00:26 - 2014-12-26 00:26 - 00000000 ____ D () C:\ProgramData\nbaobknnepmgjgecfpcijkkcookkdlkb
2014-12-26 00:25 - 2014-12-26 00:25 - 00000000 ____ D () C:\ProgramData\hehchodpjkdlecoanfoadecalcjnlpfe
2014-12-26 00:25 - 2014-12-26 00:25 - 00000000 ____ D () C:\ProgramData\18419013243010294975
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Mga13) #3

W 100% pomogło. Dziękuję za pomoc :wink:


(Acorus) #4

Skasuj folder C:\FRST