Witam. Ja również mam z tym problem i nie za bardzo rozumiem co mam zrobić dalej. Zrobiłem pierwsze logi i stoję w miejscu. Pomożecie?
Odinstaluj do-search uninstall.Otwórz notatnik systemowy i wklej:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsts=1426428705from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsts=1426428705from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsts=1426428705from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsts=1426428705from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
HKU\S-1-5-21-4240395916-3117214858-2299808492-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsppts=1426428746from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
HKU\S-1-5-21-4240395916-3117214858-2299808492-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsppts=1426428746from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://q.search-simple.com/?affID=bl_6bb06c20-00c9-453b-a5c8-7b1542ac7938q={searchTerms}
SearchScopes: HKLM - OldSearch URL = http://do-search.com/web/?type=dsts=1426428705from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}l=diso=HPNTDF
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://q.search-simple.com/?affID=bl_6bb06c20-00c9-453b-a5c8-7b1542ac7938q={searchTerms}
SearchScopes: HKLM - {49F1323A-CF62-4EE2-8082-99AC15605FC9} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://pl.search.yahoo.com/search?p={searchTerms}ei={inputEncoding}fr=chr-hp-psgtype=HPNTDF
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsts=1426428705from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}l=diso=HPNTDF
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsts=1426428705from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
SearchScopes: HKLM-x32 - {49F1323A-CF62-4EE2-8082-99AC15605FC9} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://pl.search.yahoo.com/search?p={searchTerms}ei={inputEncoding}fr=chr-hp-psgtype=HPNTDF
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsppts=1426428746from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - OldSearch URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXts=1426428752type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXts=1426428752type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://q.search-simple.com/?affID=bl_6bb06c20-00c9-453b-a5c8-7b1542ac7938q={searchTerms}
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXts=1426428752type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsppts=1426428746from=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXq={searchTerms}
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - {49F1323A-CF62-4EE2-8082-99AC15605FC9} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXts=1426428752type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXts=1426428752type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXts=1426428752type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-4240395916-3117214858-2299808492-1001 - {szukaj.gazeta.pl} URL = http://do-search.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=HitachiXHTS547575A9E384_J2140059F69HUAF69HUAXts=1426428752type=defaultq={searchTerms}
FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tabtype=bg_616_bl-is-18 __alt__ ddc_dsssyctab_bd_com
FF DefaultSearchEngine: Yahoo! Search
FF SelectedSearchEngine: Yahoo! Search
FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddchsimp=yhs-ddc_bdtype=bg_616_bl-is-18 __alt__ ddc_dss_bd_comp={searchTerms}
FF Extension: FF Toolbar - C:\Users\Lukasz\AppData\Roaming\Mozilla\Firefox\Profiles\fphs32g0.default\Extensions\fftoolbar2014@etech.com [2015-04-24]
FF Extension: Fast Start - C:\Users\Lukasz\AppData\Roaming\Mozilla\Firefox\Profiles\fphs32g0.default\Extensions\istart_ffnt@gmail.com [2015-03-18]
FF Extension: Search Enginer - C:\Users\Lukasz\AppData\Roaming\Mozilla\Firefox\Profiles\fphs32g0.default\Extensions\searchengine@gmail.com [2015-03-15]
FF Extension: Strong Signal - C:\Users\Lukasz\AppData\Roaming\Mozilla\Firefox\Profiles\fphs32g0.default\Extensions\{9e0ccca5-18ce-454f-a0fd-dacd358d0ce9}.xpi [2015-05-02]
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Lukasz\AppData\Roaming\Mozilla\Firefox\Profiles\fphs32g0.default\extensions\searchengine@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [istart_ffnt@gmail.com] - C:\Users\Lukasz\AppData\Roaming\Mozilla\Firefox\Profiles\fphs32g0.default\extensions\istart_ffnt@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Lukasz\AppData\Roaming\Mozilla\Firefox\Profiles\fphs32g0.default\extensions\fftoolbar2014@etech.com
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-03-10] (XTab system)
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [556304 2015-05-02] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [478992 2015-05-02] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-15] (SysTool PasSame LIMITED) ==== ATTENTION
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
2015-05-02 22:54 - 2015-05-02 22:54 - 00000000 ____ D () C:\Program Files (x86)\Strong Signal
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.