Mystart problem


(Melkowski) #1

Witam.

 

Nie moge poradzic sobie z usunieciem programy Mystartsearch

 

Addition http://www.wklej.org/id/1562520/

 

FRST http://www.wklej.org/id/1562519/


(Acorus) #2

Otwórz Notatnik i wklej:

Task: {4835BE0F-3910-475F-8AD3-C74573221CE2} - System32\Tasks\{A42D0931-27F3-4342-AB80-5978F7180473} = pcalua.exe -a C:\Users\Przemek\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=smt
HKLM-x32\...\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-3729465440-2219740352-615487772-1001\...\RunOnce: [Adobe Speed Launcher] = 1418996182
HKU\S-1-5-21-3729465440-2219740352-615487772-1001\...\MountPoints2: {a50b705d-86f4-11e4-8ead-20cf307f86e2} - H:\SETUP.EXE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
HKU\S-1-5-21-3729465440-2219740352-615487772-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596
HKU\S-1-5-21-3729465440-2219740352-615487772-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=scts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
SearchScopes: HKU\S-1-5-21-3729465440-2219740352-615487772-1001 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
SearchScopes: HKU\S-1-5-21-3729465440-2219740352-615487772-1001 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596q={searchTerms}
FF SelectedSearchEngine: mystartsearch
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mystartsearch.xml
FF Extension: No Name - content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com [Not Found]
FF Extension: No Name - virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com [Not Found]
FF Extension: No Name - online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com [Not Found]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.mystartsearch.com/?type=scts=1418937619from=smtuid=WDCXWD1002FAEX-00Z3A0_WD-WCATR322659626596
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S1 wpnfd_1_10_0_4; system32\drivers\wpnfd_1_10_0_4.sys [X]
2014-12-19 14:11 - 2014-12-19 14:11 - 00003142 _____ () C:\Windows\System32\Tasks\{A21F1EE8-C4EC-417A-8B08-B5CF06744595}
2014-12-18 22:32 - 2014-12-18 22:32 - 00003154 _____ () C:\Windows\System32\Tasks\{A42D0931-27F3-4342-AB80-5978F7180473}
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.