Witam. Ostatnio niestety moja przeglądarka jest zawalona wirusem PriceLess i mystartsearch . Mam dla was raport skanu programem FRST prosił bym o pomoc jak usunąć to.
Otwórz notatnik systemowy i wklej:
Task: {D75C0A79-9A9D-41E0-BE95-B829A3946754} - System32\Tasks\{0188574F-81A0-4A2C-9406-4CAACA53AD49} = pcalua.exe -a C:\Users\Acer\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=amt
HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
Startup: C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Download.lnk
ShortcutTarget: Download.lnk - C:\ProgramData\{2147ce23-37c7-6284-2147-7ce2337c388c}\Download.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2141009896-191416768-2014006477-1000 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: PRiceLessss - {ce4c26f8-b993-4706-8f88-3ae3d4f35291} - C:\Program Files (x86)\PRiceLessss\epTh7ePiaJ72Hy.x64.dll No File
FF Extension: Zoom It - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\s7h533sl.default-1421782539385\Extensions\{c106a138-afa3-fe6a-1102-7abc4ce795a5} [2015-03-17]
FF Extension: No Name - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\s7h533sl.default-1421782539385\Extensions\firefox@mega.co.nz.xpi [2015-01-21]
2015-03-18 14:09 - 2015-03-18 14:12 - 00000000 ____ D () C:\AdwCleaner
2015-03-18 13:15 - 2015-03-18 13:15 - 00003158 _____ () C:\Windows\System32\Tasks\{0188574F-81A0-4A2C-9406-4CAACA53AD49}
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.