Jak usunąć "MyStart" search


(Madara1994s) #1

Witam, również mam taki problem , więc postanowiłem podczepić tutaj.

FRST:     http://wklej.org/hash/83e9cd7a492/

Addition:  http://wklej.org/hash/d54340d1f26/


(Acorus) #2

Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] = C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] = C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-1097260286-924376121-386474913-1000\...\Run: [AdobeBridge] = [X]
HKU\S-1-5-21-1097260286-924376121-386474913-1000\...\MountPoints2: {f6f0f78b-abb9-11e4-9c72-bc5ff40ce485} - G:\Setup.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = ?type=hppppp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = ?type=hppppp
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppppp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppppp
HKU\S-1-5-21-1097260286-924376121-386474913-1000\Software\Microsoft\Internet Explorer\Main,Start Page = ?type=hppppp
SearchScopes: HKU\S-1-5-21-1097260286-924376121-386474913-1000 - DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=HitachiXHDT725050VLA360_VFK401R41N4DWK1N4DWKXts=1422978079type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1097260286-924376121-386474913-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=HitachiXHDT725050VLA360_VFK401R41N4DWK1N4DWKXts=1422978079type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1097260286-924376121-386474913-1000 - {0AB7E40A-9F2F-474C-A20F-75AF6D72D1B7} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=HitachiXHDT725050VLA360_VFK401R41N4DWK1N4DWKXts=1422978079type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1097260286-924376121-386474913-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=HitachiXHDT725050VLA360_VFK401R41N4DWK1N4DWKXts=1422978079type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1097260286-924376121-386474913-1000 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=HitachiXHDT725050VLA360_VFK401R41N4DWK1N4DWKXts=1422978079type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1097260286-924376121-386474913-1000 - {95564325-106F-4734-9675-B982261C02DC} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=HitachiXHDT725050VLA360_VFK401R41N4DWK1N4DWKXts=1422978079type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1097260286-924376121-386474913-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=HitachiXHDT725050VLA360_VFK401R41N4DWK1N4DWKXts=1422978079type=defaultq={searchTerms}
CHR StartupUrls: Default - "hxxp://www.sweet-page.com/?type=hpts=1402300881from=coruid=HitachiXHDT725050VLA360_VFK401R41N4DWK1N4DWKX", "hxxp://search.gboxapp.com/", "hxxp://www.mystartsearch.com/?type=hpts=1422978050from=smtuid=HitachiXHDT725050VLA360_VFK401R41N4DWK1N4DWKX", "hxxp://www.google.com/", "?type=hppp", "?type=hppppp"
CHR HKU\S-1-5-21-1097260286-924376121-386474913-1000\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - No Path
2015-02-04 06:07 - 2015-02-04 06:08 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.