Jak usunąć MyStartSearch?


(Turkusowypatryk) #1

Czy mógłbym mi ktoś pomóc?


(Acorus) #2

Odinstaluj SpyHunter 4,Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RTHDCPL] = C:\WINDOWS\RTHDCPL.EXE [18063872 2008-12-09] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] = C:\WINDOWS\ALCMTR.EXE [57344 2008-06-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SpyHunter Security Suite] = C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe [7125376 2015-03-07] (Enigma Software Group USA, LLC.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-1060284298-1482476501-682003330-1004\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
HKU\S-1-5-21-1060284298-1482476501-682003330-1004\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
HKU\S-1-5-21-1060284298-1482476501-682003330-1004\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
HKU\S-1-5-21-1060284298-1482476501-682003330-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" ======= ATTENTION
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-1060284298-1482476501-682003330-1004 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
SearchScopes: HKU\S-1-5-21-1060284298-1482476501-682003330-1004 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=scts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
StartMenuInternet: chrome.exe - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/?type=scts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-03-07] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2015-03-07] ()
S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath
2015-03-07 13:42 - 2015-03-07 13:43 - 00000000 ____ D () C:\AdwCleaner
2015-03-07 12:11 - 2015-03-07 12:11 - 00000000 ____ D () C:\Documents and Settings\Wredna Sowa\Dane aplikacji\Enigma Software Group
2015-03-07 12:09 - 2015-03-07 12:10 - 00000000 ____ D () C:\sh4ldr
2015-03-07 11:51 - 2015-03-07 11:51 - 00019984 _____ () C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-03-06 23:31 - 2015-03-07 11:49 - 00000000 ____ D () C:\Program Files\Enigma Software Group
2015-03-06 23:21 - 2015-03-06 23:21 - 00000000 ____ D () C:\Documents and Settings\All Users\Dane aplikacji\dece2fc800004b73
2015-03-06 23:13 - 2015-03-06 23:13 - 00000000 ____ D () C:\Program Files\MyPC Backup
2015-03-06 23:05 - 2015-03-06 23:14 - 00000000 ____ D () C:\Program Files\youtubeadblocker
2015-03-06 23:04 - 2015-03-06 23:13 - 00000000 ____ D () C:\Program Files\UniDeals
2015-03-06 23:04 - 2015-03-06 23:04 - 00000000 ____ D () C:\Program Files\UniiDeals
2015-03-06 23:04 - 2015-03-06 23:04 - 00000000 ____ D () C:\Documents and Settings\All Users\Dane aplikacji\4935543516684527716
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Turkusowypatryk) #3

Czy coś trzeba jeszcze zrobić? Bo jak na razie to bez zmian, nadal po włączeniu przeglądarki przekierowuje mnie na stronę MyStartSearch…


(Acorus) #4

Skasuj folder C:\FRST

Reset Chrome: https://support.google.com/chrome/answer/3296214?hl=pl


(Turkusowypatryk) #5

Nadal mi przekierowuje. :confused:


(Acorus) #6

Odinstaluj Chrome zaznaczając usunięcie danych przeglądania.


(Turkusowypatryk) #7

Teraz jest już ok. Dzięki za pomoc. :slight_smile: