Przekierowania w Google na strony Myfile itp

Witam,

ostatnio przekierowuje mnie podczas wyszukiwania na strony typu myfile, cudowne medaliki i lekarstwa na HIV.

Proszę o sprawdzenie logów:

 

First:

http://wklej.to/fOuSQ

Addition:

http://wklej.to/3ouBs

 

Machnąłem już ADW Cleanerem i Avastem, ale bez skutku. 

 

Pozdrawiam

Otwórz notatnik systemowy i wklej:

Startup: C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SAMSUNG_USB_Driver_for_Mobile_Phones.exe.lnk
ShortcutTarget: SAMSUNG_USB_Driver_for_Mobile_Phones.exe.lnk - C:\ProgramData\{a2aae8fa-b576-340e-a2aa-ae8fab57a3ea}\SAMSUNG_USB_Driver_for_Mobile_Phones.exe.exe (No File)
Startup: C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WTW.lnk
ShortcutTarget: WTW.lnk - C:\Program Files\K2T\WTW\wtw.exe (No File)
ShellIconOverlayIdentifiers: [1aCopyShExtError] - {83BEA36E-7680-4598-A4DF-994426F6E78D} = C:\Users\Piotr\AppData\Roaming\Copy\overlay\CopyShExt.dll No File
ShellIconOverlayIdentifiers: [2aCopyShExtSynced] - {845B7388-6F85-4F32-9FD5-F02DC7882B89} = C:\Users\Piotr\AppData\Roaming\Copy\overlay\CopyShExt.dll No File
ShellIconOverlayIdentifiers: [3aCopyShExtSyncing] - {F6378A7A-F753-449B-AE1B-997A96132E61} = C:\Users\Piotr\AppData\Roaming\Copy\overlay\CopyShExt.dll No File
ShellIconOverlayIdentifiers: [4aCopyShExtSyncingProg1] - {3A511828-777D-46F8-82F4-5B530C1B3D9E} = C:\Users\Piotr\AppData\Roaming\Copy\overlay\CopyShExt.dll No File
ShellIconOverlayIdentifiers: [5aCopyShExtSyncingProg2] - {C8C88204-5B14-40EC-BA72-8AEBC762047E} = C:\Users\Piotr\AppData\Roaming\Copy\overlay\CopyShExt.dll No File
ShellIconOverlayIdentifiers: [6aCopyShExtSyncingProg3] - {ACFF45C3-3EEB-4351-86C2-6696BA264239} = C:\Users\Piotr\AppData\Roaming\Copy\overlay\CopyShExt.dll No File
ShellIconOverlayIdentifiers: [7aCopyShExtSyncingProg4] - {29AF997F-488B-46F0-AE78-7146F1B89CC3} = C:\Users\Piotr\AppData\Roaming\Copy\overlay\CopyShExt.dll No File
ShellIconOverlayIdentifiers: [8aCopyShExtSyncingProg5] - {03F9AD29-1C78-4B66-8890-B177B5430C53} = C:\Users\Piotr\AppData\Roaming\Copy\overlay\CopyShExt.dll No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
2015-01-23 11:56 - 2015-01-23 11:56 - 00016384 _____ () C:\Program Files\uik.dat
2015-01-23 11:55 - 2015-02-07 11:38 - 00000005 _____ () C:\Program Files\is.dat
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.