My Start Search problem z usunięciem


(Kmichalowskaa) #1

Witam. Mam problem z usunięciem my start search

Tutaj logi:

 

FRST: http://wklej.org/id/1593882/

Addition: http://wklej.org/id/1593886/


(Acorus) #2

Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKU\S-1-5-21-3683344634-2980218734-1216683544-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZ
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZ
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZ
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZ
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
HKU\S-1-5-21-3683344634-2980218734-1216683544-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZ
HKU\S-1-5-21-3683344634-2980218734-1216683544-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZ
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=scts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZ
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
SearchScopes: HKU\S-1-5-21-3683344634-2980218734-1216683544-1000 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
SearchScopes: HKU\S-1-5-21-3683344634-2980218734-1216683544-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZq={searchTerms}
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\myszka\AppData\Roaming\Mozilla\Firefox\Profiles\fblt7akd.default\extensions\fftoolbar2014@etech.com
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\myszka\AppData\Roaming\Mozilla\Firefox\Profiles\fblt7akd.default\extensions\faststartff@gmail.com
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.mystartsearch.com/?type=scts=1421139396from=smtuid=ST320LT020-9YG142_W0459HXZXXXXW0459HXZ
S2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -service [X]
R1 {549b1cd8-769f-468a-ad93-f57bfc8402c2}Gw64; C:\Windows\System32\drivers\{549b1cd8-769f-468a-ad93-f57bfc8402c2}Gw64.sys [48784 2015-01-12] (StdLib)
U3 BcmSqlStartupSvc; No ImagePath
U2 CLKMSVC10_3A60B698; No ImagePath
U2 CLKMSVC10_C3B3B687; No ImagePath
U2 DriverService; No ImagePath
U2 IAStorDataMgrSvc; No ImagePath
U2 iATAgentService; No ImagePath
U2 idealife Update Service; No ImagePath
U3 IGRS; No ImagePath
U2 IviRegMgr; No ImagePath
U2 nvUpdatusService; No ImagePath
U2 Oasis2Service; No ImagePath
U2 PCCarerService; No ImagePath
U2 ReadyComm.DirectRouter; No ImagePath
U2 RichVideo; No ImagePath
U2 RtLedService; No ImagePath
U2 SeaPort; No ImagePath
U2 SoftwareService; No ImagePath
U3 SQLWriter; No ImagePath
2015-01-13 10:05 - 2015-01-12 18:34 - 00048784 _____ (StdLib) C:\windows\system32\Drivers\{549b1cd8-769f-468a-ad93-f57bfc8402c2}Gw64.sys
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.