Pendrive - tworzące się skróty

Witam!

Format niepotrzebny.Podepnij pendriva.Użyj USBFix z funkcji Usuń(Clean).Pokaż z niego log.http://www.en.usbfix.net/download/usbfix/

Pokaż nowe logi z FRST.

USBFix: http://wklej.org/id/1742782/

FRST: http://wklej.org/id/1742797/

Shortcut: http://wklej.org/id/1742798/

Addition: http://wklej.org/id/1742801/

Odinstaluj do-search uninstall,McAfee Internet Security,Search App by Ask,Shopping App by Ask,Strong Signal.Otwórz notatnik systemowy i wklej:

CloseProcesses:
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\RunOnce: [] => [X]
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hp&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163&q={searchTerms}
HKU\S-1-5-21-4277405865-1928476865-732415944-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?tpid=FFSP-SAT&o=APN11590&pf=V7&trgb=IE&p2=%5EBJ5%5EYYYYYY%5EYY%5EPL&gct=hp&apn_ptnrs=%5EBJ5&apn_dtid=%5EYYYYYY%5EYY%5EPL&apn_dbr=cr_41.0.2272.118&apn_uid=40B10689-78A9-4995-B691-76A89F81067C&itbv=12.27.0.897&doi=2015-04-06&psv=&pt=tb
HKU\S-1-5-21-4277405865-1928476865-732415944-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4277405865-1928476865-732415944-1002 -> {1E11711B-5874-4CD6-BD50-FE319CB46B07} URL = http://www.search.ask.com/web?tpid=FFSP-SAT&o=APN11590&pf=V7&p2=^BJ5^YYYYYY^YY^PL&gct=&itbv=12.27.0.897&apn_uid=40B10689-78A9-4995-B691-76A89F81067C&apn_ptnrs=^BJ5&apn_dtid=^YYYYYY^YY^PL&apn_dbr=cr_41.0.2272.118&doi=2015-04-06&trgb=IE&q={searchTerms}&psv=&pt=tb
SearchScopes: HKU\S-1-5-21-4277405865-1928476865-732415944-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1428227281&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED431163&q={searchTerms}
BHO: No Name -> {46465350-2D53-4154-00A7-7A786E7484D7} -> No File
BHO: No Name -> {4F524A2D-5350-4500-76A7-7A786E7484D7} -> No File
BHO-x32: No Name -> {46465350-2D53-4154-00A7-7A786E7484D7} -> No File
BHO-x32: No Name -> {4F524A2D-5350-4500-76A7-7A786E7484D7} -> No File
Toolbar: HKU\S-1-5-21-4277405865-1928476865-732415944-1002 -> No Name - {4F524A2D-5350-4500-76A7-7A786E7484D7} - No File
CHR HKLM\...\Chrome\Extension: [aaaaahaeginbdcckocjkhbciadcafnep] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaahaeginbdcckocjkhbciadcafnep.crx [2015-06-07]
CHR HKLM-x32\...\Chrome\Extension: [aaaaahaeginbdcckocjkhbciadcafnep] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaahaeginbdcckocjkhbciadcafnep.crx [2015-06-07]
2015-06-20 16:58 - 2015-04-05 11:48 - 00000000 ____ D C:\Users\Łucja\AppData\Roaming\do-search
2015-06-20 16:50 - 2015-02-06 14:14 - 00000000 ____ D C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
2015-06-20 16:50 - 2015-02-06 14:14 - 00000000 ____ D C:\Program Files (x86)\Strong Signal
2015-06-20 13:37 - 2015-01-12 23:13 - 00000000 ____ D C:\Program Files (x86)\AskPartnerNetwork

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.