Mystartsearch jak usunąć?

Dla specjalistów Bezpieczeństwo
#1

FRST   http://wklej.org/id/1587925/

#2

Odinstaluj ConvertAd,Remote Desktop Access (VuuPC),Support PL 1.1.Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.

Pokaż nowe logi z FRST.

#3

http://wklej.to/aDRQF

#4

Otwórz notatnik systemowy i wklej:

Winlogon\Notify\igfxcui: igfxdev.dll [X]
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Extension: FF Toolbar - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\ti5t3jua.default\Extensions\fftoolbar2014@etech.com [2015-01-07]
FF Extension: Super Start - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\ti5t3jua.default\Extensions\superstart@enjoyfreeware.org [2015-01-05]
FF Extension: YesScript - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\ti5t3jua.default\Extensions\yesscript@userstyles.org.xpi [2015-01-02]
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\ti5t3jua.default\extensions\fftoolbar2014@etech.com
2015-01-08 20:13 - 2015-01-08 20:16 - 00000000 ____ D () C:\AdwCleaner
2015-01-07 21:45 - 2015-01-07 21:45 - 00000000 ____ D () C:\Users\Lenovo\AppData\Local\Google
2015-01-07 21:45 - 2015-01-07 21:45 - 00000000 ____ D () C:\Users\Lenovo\AppData\Local\Comodo
2015-01-07 21:45 - 2015-01-07 21:45 - 00000000 ____ D () C:\Users\Gość\AppData\Local\Google
2015-01-07 21:45 - 2015-01-07 21:45 - 00000000 ____ D () C:\Users\Gość\AppData\Local\Comodo
2015-01-07 21:45 - 2015-01-07 21:45 - 00000000 ____ D () C:\Users\Gość
2015-01-07 21:45 - 2015-01-07 21:45 - 00000000 ____ D () C:\Users\Administrator\AppData\Local\Google
2015-01-07 21:45 - 2015-01-07 21:45 - 00000000 ____ D () C:\Users\Administrator\AppData\Local\Comodo
2015-01-07 21:45 - 2015-01-07 21:45 - 00000000 ____ D () C:\Users\Administrator
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

Dzieki bardzo. Wszystko wrociło do normy :smiley:

#6

Skasuj folder C:\FRST