Czy mógłbym mi ktoś pomóc?
Odinstaluj SpyHunter 4,Otwórz notatnik systemowy i wklej:
HKLM\...\Run: [RTHDCPL] = C:\WINDOWS\RTHDCPL.EXE [18063872 2008-12-09] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] = C:\WINDOWS\ALCMTR.EXE [57344 2008-06-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SpyHunter Security Suite] = C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe [7125376 2015-03-07] (Enigma Software Group USA, LLC.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-1060284298-1482476501-682003330-1004\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
HKU\S-1-5-21-1060284298-1482476501-682003330-1004\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
HKU\S-1-5-21-1060284298-1482476501-682003330-1004\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
HKU\S-1-5-21-1060284298-1482476501-682003330-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" ======= ATTENTION
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-1060284298-1482476501-682003330-1004 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
SearchScopes: HKU\S-1-5-21-1060284298-1482476501-682003330-1004 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=scts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
StartMenuInternet: chrome.exe - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/?type=scts=1425679664from=wpcuid=SAMSUNGXHD502IJ_S13TJ90Z208688
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-03-07] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2015-03-07] ()
S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath
2015-03-07 13:42 - 2015-03-07 13:43 - 00000000 ____ D () C:\AdwCleaner
2015-03-07 12:11 - 2015-03-07 12:11 - 00000000 ____ D () C:\Documents and Settings\Wredna Sowa\Dane aplikacji\Enigma Software Group
2015-03-07 12:09 - 2015-03-07 12:10 - 00000000 ____ D () C:\sh4ldr
2015-03-07 11:51 - 2015-03-07 11:51 - 00019984 _____ () C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-03-06 23:31 - 2015-03-07 11:49 - 00000000 ____ D () C:\Program Files\Enigma Software Group
2015-03-06 23:21 - 2015-03-06 23:21 - 00000000 ____ D () C:\Documents and Settings\All Users\Dane aplikacji\dece2fc800004b73
2015-03-06 23:13 - 2015-03-06 23:13 - 00000000 ____ D () C:\Program Files\MyPC Backup
2015-03-06 23:05 - 2015-03-06 23:14 - 00000000 ____ D () C:\Program Files\youtubeadblocker
2015-03-06 23:04 - 2015-03-06 23:13 - 00000000 ____ D () C:\Program Files\UniDeals
2015-03-06 23:04 - 2015-03-06 23:04 - 00000000 ____ D () C:\Program Files\UniiDeals
2015-03-06 23:04 - 2015-03-06 23:04 - 00000000 ____ D () C:\Documents and Settings\All Users\Dane aplikacji\4935543516684527716
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Czy coś trzeba jeszcze zrobić? Bo jak na razie to bez zmian, nadal po włączeniu przeglądarki przekierowuje mnie na stronę MyStartSearch…
Nadal mi przekierowuje.
Odinstaluj Chrome zaznaczając usunięcie danych przeglądania.
Teraz jest już ok. Dzięki za pomoc.