Nie mogę wykasować wyszukiwarki, która o dziwo - jako tako działa. Webssearches.com - wyszukuje, ale domyślam się, że reconecty oraz wyskakujące reklamy są jej powodem, a nie mogę jej usunąć :(.
1.FRST
2.ADDITION
3.SHORTCUT
FRST:
Odinstaluj istartsurf uninstall,McAfee Security Scan Plus.Otwórz notatnik systemowy i wklej:
CloseProcesses:
Task: {3B4C82DE-F388-4093-A674-02EF48CBBF5B} - System32\Tasks\Open Chrome => Chrome.exe --new-window http://toolbar.avg.com/almost-done?pid=safeguard&lang=pl
Task: C:\Windows\Tasks\Open Chrome.job => c:\program files (x86)\Google\Chrome\Application\chrome.exeF--new-window http:/toolbar.avg.com/
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7506136 2013-12-06] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2510784 2015-05-14] ()
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-3904652547-3808582991-2354910503-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3904652547-3808582991-2354910503-1001\...\Run: [AvgUpdater0215tb] => C:\ProgramData\Avg_Update_0215tb\0215tb_{8BB0DC8D-563A-4ED2-93F9-08C469F01CF4}.exe [2794520 2015-02-25] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-10-12]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
HKU\S-1-5-21-3904652547-3808582991-2354910503-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014
HKU\S-1-5-21-3904652547-3808582991-2354910503-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3904652547-3808582991-2354910503-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3904652547-3808582991-2354910503-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3904652547-3808582991-2354910503-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3904652547-3808582991-2354910503-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={C5AC7CE8-232F-45AF-9F21-E3BB24839440}&mid=b58e4fcf7a3e47d2a1e995c31d45734d-f8f6899029d2a52c43d3b138bff5ea3974b4a87e&lang=pl&ds=AVG&coid=avgtbavg&cmpid=1214tb&pr=fr&d=2014-10-12 14:36:43&v=18.2.0.829&pid=safeguard&sg=&sap=dsp&q={searchTerms}
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
Toolbar: HKLM - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.5.0.909\AVG SafeGuard toolbar_toolbar.dll [2015-05-14] (AVG Secure Search)
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.5.0.909\AVG SafeGuard toolbar_toolbar.dll [2015-05-14] (AVG Secure Search)
FF DefaultSearchEngine: istartsurf
FF SelectedSearchEngine: istartsurf
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\hklvd2di.default-1414314545593\searchplugins\avg-secure-search.xml [2015-05-16]
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\hklvd2di.default-1414314545593\searchplugins\istartsurf.xml [2015-06-26]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml [2015-05-14]
FF Extension: AVG SafeGuard toolbar - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\hklvd2di.default-1414314545593\Extensions\avg@toolbar [2014-12-13]
FF Extension: QuickSearch - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\hklvd2di.default-1414314545593\Extensions\searchffv2@gmail.com [2015-06-21]
FF Extension: Search Enginer - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\hklvd2di.default-1414314545593\Extensions\sweetsearch@gmail.com [2015-06-21]
FF Extension: Click Caption - C:\Program Files (x86)\Mozilla Firefox\extensions\{190bc294-c8e5-471c-9466-3eb945b09542} [2015-06-04]
FF HKLM-x32\...\Firefox\Extensions: [{190bc294-c8e5-471c-9466-3eb945b09542}] - C:\Program Files (x86)\Mozilla Firefox\extensions\{190bc294-c8e5-471c-9466-3eb945b09542}
FF HKLM-x32\...\Firefox\Extensions: [searchffv2@gmail.com] - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\hklvd2di.default-1414314545593\extensions\searchffv2@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\hklvd2di.default-1414314545593\extensions\sweetsearch@gmail.com
FF HKU\S-1-5-21-3904652547-3808582991-2354910503-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
CHR HomePage: Default -> hxxp://www.istartsurf.com/?type=hp&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014
CHR StartupUrls: Default -> "hxxp://www.istartsurf.com/?type=hp&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014"
CHR DefaultSearchKeyword: Default -> istartsurf
CHR DefaultSearchURL: Default -> http://www.istartsurf.com/web/?type=ds&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014&q={searchTerms}
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.google.com/service/update2/crx
OPR StartupUrls: "hxxp://www.istartsurf.com/?type=hp&ts=1434877828&z=66311df1ba3d83fb4872499gczdc1z3b7m5m5b1oeb&from=cor&uid=WDCXWD5000AZRX-00A8LB0_WD-WMC1U368801488014"
R2 vToolbarUpdater18.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.5.0\ToolbarUpdater.exe [1812416 2015-05-14] (AVG Secure Search)
S3 MSICDSetup; \\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \\D:\NTIOLib_X64.sys [X]
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Wszystko wykonałem, kliknąłem skanuj i Usuń - kazało zrestartować kompa. Zrestartowałem - wchofdzę w inernet i nadal mam Webssearch.com jako wyszukiwarkę 
to scan z adwcleaner
edit: robię scana z malwarebytes - może to coś pomoże …
W pasek adresu wpisz: about:support Kliknij Odśwież program Firefox.
Atis - Twoja rada była najwięcej owocna :).
Mam na razie brak reklam. brak reconectów i normalny wujek google wyskakuje zamiast tamtego świństwa.
Także dzięki Atisowi i Atorusowi uważam (I hope so) temat do zamknięcia :*
Mam ten sam problem i wskazany sposób zadziałał.