Key-find


(Logitech55pawel) #1

Proszę o usunięcie key-find

 

FRST

http://www.wklej.org/id/1653933/

Addition

http://www.wklej.org/id/1653934/


(Atis) #2

Pobierz i uruchom AdwCleaner Kliknij Scan i później Cleaning.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.


(Logitech55pawel) #3

FRST

http://wklej.org/id/1654528/


(Atis) #4

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = ?type=hppp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = ?type=hppp
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = web/?type=dspp&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = web/?type=dspp&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppp
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = web/?type=dspp&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = web/?type=dspp&q={searchTerms}
HKU\S-1-5-21-4122318480-3438101843-1247912325-1001\Software\Microsoft\Internet Explorer\Main,Start Page = ?type=hppp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4122318480-3438101843-1247912325-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = web/?type=dspp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4122318480-3438101843-1247912325-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
CHR HomePage: Default -> ?type=hppp
CHR StartupUrls: Default -> "?type=hppp"
CHR DefaultSearchURL: Default -> web/?type=dspp&q={searchTerms}
2015-03-03 22:04 - 2015-03-03 22:06 - 00000000 ____ D () C:\AdwCleaner
2015-03-03 21:07 - 2015-03-03 21:07 - 00000000 ____ D () C:\Users\Pawel\AppData\Roaming\00876860-1425416875-11DB-9A2F-001A9272E199
Task: {09557C53-537B-4009-BDD1-BD8BED49B680} - \LuckyTab No Task File <==== ATTENTION
Task: {42872244-6EEC-4DEF-817E-36CAB837CAB2} - System32\Tasks\{FCAF58B3-B16C-49C7-B1E1-525D9C98C96A} => pcalua.exe -a C:\Users\Pawel\Desktop\slider\seospyglass\TC101a.exe -d C:\Users\Pawel\Desktop\slider\seospyglass
Task: {6E0445AE-BC2E-4AB5-A0D9-FA561414FD0A} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {90185EF6-32F3-41EC-BE8C-FBF98A9F3E62} - System32\Tasks\{3CBB46E8-DF73-4FE3-A764-E0F3E2FC3667} => pcalua.exe -a C:\Users\Pawel\AppData\Roaming\key-find\UninstallManager.exe -c -ptid=exp
Task: {F128547B-4A8A-4E65-8012-8A5B750D3B95} - System32\Tasks\4686 => Wscript.exe C:\Users\Pawel\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.