Problem z s.coldsearch (easydialsearch) - jak usunąć

Witam pomóżcie mi usunąć z przeglądarki i komputera tą wyszukiwarkę :slight_smile: Bardzo internet przez to muli. Dodatkowo komputer czasami zawiesza się.

 

LOG FRST: http://wklej.org/id/2308439/

Log audition.txt http://wklej.org/id/2308448/

Log shortcut.txt http://wklej.org/id/2308449/

 

Z góry dzięki za pomoc! ADW, MBAM było jednak nic nie dało. W rejestrze też brak :slight_smile:

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-2690150212-2739839111-2382175819-1000\...\Run: [] = [X]
ShellIconOverlayIdentifiers: [###MegaShellExtPending] - {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =  Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] - {05B38830-F4E9-4329-978B-1DD28605D202} =  Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] - {0596C850-7BDD-4C9D-AFDF-873BE6890637} =  Brak pliku
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} =  Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] - {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =  Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] - {05B38830-F4E9-4329-978B-1DD28605D202} =  Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] - {0596C850-7BDD-4C9D-AFDF-873BE6890637} =  Brak pliku
BootExecute: autocheck autochk *  
GroupPolicy: Ograniczenia - Chrome ======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia ======= UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia ======= UWAGA
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - Brak nazwy - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Brak pliku
Toolbar: HKLM - Brak nazwy - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Brak pliku
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2016-04-19 07:29 - 2016-04-19 07:29 - 06871040 _____ C:\Program Files (x86)\GUT1B2E.tmp
2016-04-19 07:29 - 2016-04-19 07:29 - 00000000 ____ D C:\Program Files (x86)\GUM1B1E.tmp
2016-04-18 22:10 - 2016-04-18 22:11 - 00000000 ___DC C:\AdwCleaner
2016-04-18 21:34 - 2016-04-18 21:34 - 00000000 ____ D C:\Users\user\AppData\Local\MFAData
2016-04-18 21:34 - 2016-04-18 21:34 - 00000000 ____ D C:\ProgramData\MFAData
2016-04-18 21:34 - 2016-04-18 21:34 - 00000000 ____ D C:\ProgramData\Avg
2016-04-18 21:33 - 2016-04-18 21:34 - 00000000 ____ D C:\Users\user\AppData\Local\AvgSetupLog
2016-04-18 21:33 - 2016-04-18 21:33 - 00000000 ____ D C:\Users\user\AppData\Local\Avg
2016-03-31 15:47 - 2016-03-31 15:50 - 167238729 _____ (Joe Williams ) C:\Users\Dawid\Downloads\Windows.exe
2016-03-31 15:41 - 2016-03-31 15:41 - 00772016 _____ (Reimage®) C:\Users\Dawid\Downloads\ReimageRepair.exe
2016-04-18 21:31 - 2013-11-19 15:17 - 00000000 ____ D C:\ProgramData\AVAST Software
C:\Users\user\AppData\Roaming\*.txt
C:\Users\user\AppData\Roaming\*.log
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 - Brak ścieżki do pliku
CustomCLSID: HKU\S-1-5-21-2690150212-2739839111-2382175819-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 - Brak ścieżki do pliku
Task: {1560203F-B8EC-41FC-9BA7-8390A1F98692} - System32\Tasks\{8C8D1769-2AF4-4E4C-8AB7-039E9D0F0479} = Iexplore.exe hxxp://ui.skype.com/ui/0/7.15.0.103/pl/abandoninstall?page=tsProgressBar
Task: {223639A1-B744-431D-827E-EBAE637C2EA2} - System32\Tasks\AVAST Software\Avast settings backup = C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-27] (AVAST Software)
Task: {2DE15554-1C08-4A4D-A6FB-503DCF99D3BF} - System32\Tasks\{E4AA282E-8C30-47C1-AEFA-7F76F438A757} = pcalua.exe -a C:\Users\user\Desktop\11-04-2011-pdf2wordsetup.exe -d C:\Users\user\Desktop
Task: {35D67298-3795-4BD5-9D1B-8328F509C2A9} - System32\Tasks\{461E28F2-4934-41AE-A431-6AAC1A0FD4B0} = Iexplore.exe hxxp://ui.skype.com/ui/0/7.15.0.103/pl/abandoninstall?page=tsProgressBar
Task: {66712E0E-D240-41D7-8A18-302C07915CAD} - System32\Tasks\{F9BFC363-DC88-4285-8B80-9F35A40563C2} = Iexplore.exe hxxp://ui.skype.com/ui/0/7.15.0.103/pl/abandoninstall?page=tsProgressBar
Task: {67EB2768-E020-458C-808A-CD0F43281E33} - System32\Tasks\{13ABB429-AA46-4E82-A8C1-D1B9BAD58DEE} = Iexplore.exe hxxp://ui.skype.com/ui/0/6.11.0.102/pl/abandoninstall?page=tsProgressBar
Task: {7C358103-B32E-441C-A9F8-388126B7D751} - System32\Tasks\{102FFA5D-8A43-4F52-9815-B3A6B7F8A62B} = pcalua.exe -a H:\eauninstall.exe -d H:\
Task: {AD4FE35C-8930-47B3-BAFF-A02EA9C293BE} - System32\Tasks\{B1803CCD-D61B-406D-979D-4DB07CB14913} = pcalua.exe -a H:\EASetup.exe -d H:\
Task: {B3227411-EE90-496B-956E-E65BE63D3BB4} - System32\Tasks\{EDD4A9CB-B122-4342-8F93-7B80ED7542E9} = pcalua.exe -a H:\autorun.exe -d H:\
Task: {EAF2BE86-FC36-444D-9BF3-56684BE2A47E} - System32\Tasks\{1BB07469-DDAD-4469-9F6E-07FCB0B62CFD} = pcalua.exe -a H:\setup.exe -d H:\
EmptyTemp:

Uruchom FRST i kliknij Napraw (Fix). Pokaż raport z usuwania Fixlog.

 

FIXLOG: http://wklej.org/id/2311100/

FRST: http://wklej.org/id/2311101/

 

Skasuj folder C:\FRST