Witam!
Czy mógłbym prosić o pomoc w usunięciu MyStartSearch?
FRST: http://wklej.to/bs8DY
Additional: http://wklej.to/J8yb4
pozdrawiam
Odinstaluj SpyHunter 4.Otwórz notatnik systemowy i wklej:
Task: {BA4DBC5A-537F-412B-AC65-73B25A595C60} - System32\Tasks\{F18072A6-81CA-4B71-83C4-70E861ACAB23} = Chrome.exe http://ui.skype.com/ui/0/7.0.85.102/pl/go/help.faq.installer?LastError=1638
IFEO\appvlp.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\ccleaner.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\lync.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\msoev.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\msotd.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\msouc.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\ocpubmgr.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\onenotem.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\setlang.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\spyhunter4.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\teamviewer.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
IFEO\winword.exe: [Debugger] "C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe"
HKU\S-1-5-21-2060926847-3843008666-3331866911-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
SearchScopes: HKU\S-1-5-21-2060926847-3843008666-3331866911-1001 - DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=vttutm_campaign=install_ieutm_content=dsfrom=vttuid=WDCXWD5000AAKS-75YGA0_WD-WCAS8454690346903ts=1424044541type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2060926847-3843008666-3331866911-1001 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=vttutm_campaign=install_ieutm_content=dsfrom=vttuid=WDCXWD5000AAKS-75YGA0_WD-WCAS8454690346903ts=1424044541type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2060926847-3843008666-3331866911-1001 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=vttutm_campaign=install_ieutm_content=dsfrom=vttuid=WDCXWD5000AAKS-75YGA0_WD-WCAS8454690346903ts=1424044541type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2060926847-3843008666-3331866911-1001 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=vttutm_campaign=install_ieutm_content=dsfrom=vttuid=WDCXWD5000AAKS-75YGA0_WD-WCAS8454690346903ts=1424044541type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2060926847-3843008666-3331866911-1001 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=vttutm_campaign=install_ieutm_content=dsfrom=vttuid=WDCXWD5000AAKS-75YGA0_WD-WCAS8454690346903ts=1424044541type=defaultq={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FF NewTab: hxxp://www.mystartsearch.com/newtab/?type=ntts=1424044497from=vttuid=WDCXWD5000AAKS-75YGA0_WD-WCAS8454690346903
S4 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [770944 2015-02-15] (Enigma Software Group USA, LLC.)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [16432 2015-02-15] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2015-02-15] ()
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 urvpndrv; system32\DRIVERS\covpnwlh.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-02-15 22:13 - 2015-02-15 22:13 - 00001253 _____ () C:\Users\mbx\Desktop\SpyHunter.lnk
2015-02-15 22:13 - 2015-02-15 22:13 - 00000000 ____ D () C:\Users\mbx\AppData\Roaming\Enigma Software Group
2015-02-15 22:13 - 2015-02-15 22:13 - 00000000 ____ D () C:\sh4ldr
2015-02-15 22:12 - 2015-02-15 22:12 - 00019984 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
2015-02-15 22:12 - 2015-02-15 22:12 - 00000000 ____ D () C:\Program Files\Enigma Software Group
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.