MYSTAR SEARCH usunięcie

Dla specjalistów Bezpieczeństwo
#1

FRST http://wklej.org/id/1640689/

ADDITION http://wklej.org/id/1640690/

 

Proszę o pomoc

 

 

 

#2

Odinstaluj 50CouPOns,Adobe Reader 9,BestSaveFooRYou,BitSaVeeR,IP Address and Domain Information,JeoniiCouPoon,SquintElite,UniDeals,Urban Dictionary Search,youtubeadblocker.Pobierz i uruchom jako administrator AdwCleaner   https://toolslib.net/downloads/finish/1/ Kliknij Scan i później Cleaning.

Pokaż nowe logi z FRST.

#3

FRST http://wklej.org/id/1640726/

#4

Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] = C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] = C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] = C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-2402635002-1864651101-4023413211-1000\...\Run: [ASRock A-Tuning] = [X]
HKU\S-1-5-21-2402635002-1864651101-4023413211-1000\...\Run: [AdobeBridge] = [X]
HKU\S-1-5-21-2402635002-1864651101-4023413211-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] = C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)
HKU\S-1-5-21-2402635002-1864651101-4023413211-1000\...\MountPoints2: {8f19a5e2-9193-11e4-a7e7-d050993b5033} - G:\AutoRun.exe
HKU\S-1-5-21-2402635002-1864651101-4023413211-1000\...\MountPoints2: {f6e3e94b-7cd4-11e4-8912-806e6f6e6963} - F:\ASRSetup.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S2 SVCM; "C:\Program Files (x86)\kloudian\svcmain.exe" [X]
S3 AsrSetupDrv; \\C:\Windows\SysWOW64\Drivers\AsrSetupDrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-02-19 20:07 - 2015-02-19 20:08 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.