Mystart search jak usunąć?


(Kamil Grzybowski90) #1

Witam, mam problem. Jak usunąć?

 

FRST http://www.wklej.org/id/1540975/

Addition http://www.wklej.org/id/1540989/

 

POMOCY!


(Atis) #2

Odinstaluj McAfee Security Scan Plus .

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM\...\Run: [mobilegeni daemon] => C:\Program Files\Mobogenie\DaemonProcess.exe                                                                                     
HKLM\...\Run: [fst_pl_30] => [X]
HKU\S-1-5-21-2465497986-1214810018-993422006-1000\...\Run: [TornTv Downloader] => C:\Users\Ja\AppData\Roaming\TornTV.com\Torntv Downloader.exe /c=startup
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
Startup: C:\Users\Ja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TornTvDownloader.lnk
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Ja\AppData\Roaming\Mozilla\Firefox\Profiles\jhhqu0v4.default\extensions\faststartff@gmail.com
FF HKLM\...\Firefox\Extensions: [{190bc294-c8e5-471c-9466-3eb945b09542}] - C:\Program Files\Mozilla Firefox\extensions\{190bc294-c8e5-471c-9466-3eb945b09542}
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.mystartsearch.com/?type=sc&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML"
CHR DefaultSearchKeyword: Default -> mystartsearch
CHR DefaultSearchProvider: Default -> mystartsearch
CHR DefaultSearchURL: Default -> http://www.mystartsearch.com/web/?type=ds&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML&q={searchTerms}
CHR Extension: (SquirrelWeb) - C:\Users\Ja\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdnafjfahbdfphihncgadbegiaebehio [2014-01-20]
CHR HKLM\...\Chrome\Extension: [gdnafjfahbdfphihncgadbegiaebehio] - C:\Program Files\SquirrelWeb\gdnafjfahbdfphihncgadbegiaebehio.crx [2014-01-10]
CHR StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/?type=sc&ts=1417112209&from=ild&uid=ST9160310AS_5SV1SQMLXXXX5SV1SQML
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
S1 ccnfd_1_10_0_2; system32\drivers\ccnfd_1_10_0_2.sys [X]
C:\AdwCleaner
C:\ProgramData\1790955706
C:\Users\Ja\AppData\Roaming\OpenCandy
C:\ProgramData\WindowsMangerProtect
C:\Program Files\SquirrelWeb
 C:\Program Files\SupTab
Task: {4CA83BB2-1D4E-47ED-9D35-392C2F76AA7C} - System32\Tasks\APSnotifierCA => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {C6BC641E-B510-488B-8888-F9BEAD7395EF} - System32\Tasks\bench-Updater removing
Task: {E970D564-EBE5-4DE0-B157-2483E567091F} - System32\Tasks\bench-sys => C:\Program Files\Bench\Updater\updater.exe [2013-12-18] () <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierCA.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\bench-sys.job => C:\Program Files\Bench\Updater\updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\bench-Updater removing.job => ?
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.


(Kamil Grzybowski90) #3

Mam to zapisać w zwyklym notatniku jako fixlist i pozniej przenieść do folderu FRST? bo nie czaje :frowning:


(Atis) #4

Przecież masz napisane, że fixlist i FRST należy zapisać w tym samym folderze.


(Kamil Grzybowski90) #5

tak jak tu?

post-269169-0-16570800-1417133245_thumb.


(Acorus) #6

W tym folderze gdzie jest FRST czyli C:\Users\Ja\Downloads


(Kamil Grzybowski90) #7

FIX http://www.wklej.org/id/1541268/

FRST http://www.wklej.org/id/1541270/


(Atis) #8

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mystartsearch.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\sweet-page.xml
CHR DefaultSearchProvider: Default -> mystartsearch
C:\Users\Ja\Desktop\FRST-OlderVersion
DeleteQuarantine:

Uruchom FRST i kliknij Fix. Skasuj folder C:\FRST

Usuń stare punkty przywracania: Aby usunąć wszystkie punkty przywracania

Dysk przeskanuj Malwarebytes Anti-Malware

Podczas instalacji usuń zaznaczenie przy Uruchom okres testowy Malwarebytes Anti-Malware Premium.

Język PL > Settings > General Settings > Language > Polish

Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK - KLIK

Odinstaluj Microsoft Silverlight

Zainstaluj:

Silverlight 5.1.30514.0

Service Pack 1 (537.8 MB)

Internet Explorer 11


(Kamil Grzybowski90) #9

Dzieki :slight_smile: natomiast nie moge pobrac silverlight i service pack.


(Atis) #10

Samo nic nie wróciło tylko zainstalowałeś szkodliwe programy.