Usunięcie Solution Real Ads


(Dominik Robakowski) #1

Dzień dobry. Proszę o pomoc w usunięciu Solution Real Ads. Czytałem podobne posty na ten temat, ale nie do końca wiem, które wpisy rejestru usunąć :slight_smile:    Pozdrawiam


(Acorus) #2

Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671640 2014-04-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1385840 2014-04-15] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1385840 2014-04-15] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1385840 2014-04-15] (Realtek Semiconductor)
HKU\S-1-5-21-1459581378-1235903662-3072396622-1000\...\Run: [Akamai NetSession Interface] = "C:\Users\Dominik\AppData\Local\Akamai\netsession_win.exe"
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1421661693from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsts=1421661693from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1421661693from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsts=1421661693from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760q={searchTerms}
HKU\S-1-5-21-1459581378-1235903662-3072396622-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dsppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760q={searchTerms}
HKU\S-1-5-21-1459581378-1235903662-3072396622-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hpppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760
HKU\S-1-5-21-1459581378-1235903662-3072396622-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
HKU\S-1-5-21-1459581378-1235903662-3072396622-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hpppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760
HKU\S-1-5-21-1459581378-1235903662-3072396622-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dsppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760q={searchTerms}
SearchScopes: HKU\S-1-5-21-1459581378-1235903662-3072396622-1000 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760q={searchTerms}
SearchScopes: HKU\S-1-5-21-1459581378-1235903662-3072396622-1000 - OldSearch URL = http://www.mystartsearch.com/web/?type=dsppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760q={searchTerms}
SearchScopes: HKU\S-1-5-21-1459581378-1235903662-3072396622-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760ts=1421661824type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1459581378-1235903662-3072396622-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760ts=1421661824type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1459581378-1235903662-3072396622-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dsppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760q={searchTerms}
SearchScopes: HKU\S-1-5-21-1459581378-1235903662-3072396622-1000 - {7A7E54B7-203E-452D-9056-0A0EF7D2FE24} URL = http://q.search-simple.com/?affID=naq={searchTerms}r=516
SearchScopes: HKU\S-1-5-21-1459581378-1235903662-3072396622-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=butm_medium=smtutm_campaign=install_ieutm_content=dsfrom=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760ts=1421661824type=defaultq={searchTerms}
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\XTab\SupTab.dll [2015-01-16] (Thinknice Co. Limited)
FF Homepage: hxxp://www.mystartsearch.com/?type=hpppts=1421661807from=smtuid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXG1A144376043760
FF SearchPlugin: C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\p8nje98f.default\searchplugins\dsrlte.xml [2015-03-20]
FF SearchPlugin: C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\p8nje98f.default\searchplugins\search-simple.xml [2015-03-20]
FF Extension: FF Toolbar - C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\p8nje98f.default\Extensions\fftoolbar2014@etech.com [2015-05-01]
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\p8nje98f.default\extensions\fftoolbar2014@etech.com
FF Extension: No Name - C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\p8nje98f.default\extensions\{31c21995-b861-4864-ab50-4a53fbca73d4}.xpi [Not Found]
OPR Extension: (Solution Real) - C:\Users\Dominik\AppData\Roaming\Opera Software\Opera Stable\Extensions\nongkkjjhbjloiienhkhphhjjlnlnbfe [2015-04-18]
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
R1 {31c21995-b861-4864-ab50-4a53fbca73d4}Gw64; C:\Windows\System32\drivers\{31c21995-b861-4864-ab50-4a53fbca73d4}Gw64.sys [48784 2015-03-10] (StdLib)
R1 {df8eec40-f909-439c-9ffe-3fee212f71b9}w64; C:\Windows\System32\drivers\{df8eec40-f909-439c-9ffe-3fee212f71b9}w64.sys [48784 2015-02-01] (StdLib)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Dominik Robakowski) #3

Dziękuję serdecznie :slight_smile:


(Acorus) #4

Skasuj folder C:\FRST.


(Dominik Robakowski) #5

Zrobione, teraz wszystko działa jak należy. Dziękuję raz jeszcze. Pozdrawiam