Webssearches - jak usuąć


(Ogion) #1

Bardzo proszę o pomoc. Zazwyczaj sobie dawałem radę z różnym ustrojstwem, ale ten mnie pokonał.

Piotr

http://www.wklej.org/id/1758923/

http://www.wklej.org/id/1758925/

http://www.wklej.org/id/1758926/


(Atis) #2

Pobierz i uruchom AdwCleaner Kliknij Skanuj i później Usuń.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.


(Ogion) #3

http://www.wklej.org/id/1758929/

przed uruchomieniem komputera z AdwCleaner

 

 

poniżej po restarcie komputera:

http://www.wklej.org/id/1758933/


(Atis) #4

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
Startup: C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ESET Escalation ID_ February 21, 2015 (Nod32 Serial Username and Passwords).lnk [2015-03-01]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\ProgramData\{89c2911b-20ac-1144-89c2-2911b20a446c}
URLSearchHook: HKU\S-1-5-21-1013130722-2159863148-4205598113-1000 - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch64.dll No File
URLSearchHook: HKU\S-1-5-21-1013130722-2159863148-4205598113-1000 - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: webssearches
FF Extension: deskCut - C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\wnqjwgyi.default-1401984591874\Extensions\deskCutv2@gmail.com [2015-07-16]
FF SearchPlugin: C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\wnqjwgyi.default-1401984591874\searchplugins\webssearches.xml [2015-07-18]
FF Extension: Default SearchProtected - C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\wnqjwgyi.default-1401984591874\Extensions\defsearchp@gmail.com.xpi [2015-07-15]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2015-07-16 15:28 - 2015-07-16 15:28 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Piotr\Downloads\sh-remover(1).exe
2015-07-18 13:53 - 2014-10-20 18:02 - 00000000 ____ D C:\AdwCleaner
CustomCLSID: HKU\S-1-5-21-1013130722-2159863148-4205598113-1000_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe No File
CustomCLSID: HKU\S-1-5-21-1013130722-2159863148-4205598113-1000_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe /Automation No File
CustomCLSID: HKU\S-1-5-21-1013130722-2159863148-4205598113-1000_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe /Automation No File
CustomCLSID: HKU\S-1-5-21-1013130722-2159863148-4205598113-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\pl-PL\acadficn.dll No File
Task: {654F7DD0-B642-4DA9-AB7A-2BAD39112E55} - System32\Tasks\{91C89B88-A3BB-41CC-8635-7C42A636EE0A} => pcalua.exe -a C:\Users\Piotr\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=cor
Task: {6AE5717A-19DD-48D8-97CD-1C3E3BC1A5E5} - System32\Tasks\{F38BBFF1-35E1-4B70-85F0-58764231D82A} => pcalua.exe -a "C:\Users\Piotr\Downloads\PSA Interface Checker Install.exe" -d C:\Users\Piotr\Downloads
Task: {E19469D0-39F4-4388-B2C3-818C8E3D7720} - System32\Tasks\Chromium => C:\Users\Piotr\AppData\Local\Chromium\APPLIC~1\440238~1.0\INSTAL~1\UNINST~1.EXE
Task: C:\Windows\Tasks\Chromium.job => C:\Users\Piotr\AppData\Local\Chromium\APPLIC~1\440238~1.0\INSTAL~1\UNINST~1.EXE
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.


(Ogion) #5

http://www.wklej.org/id/1758953/

Widzę, że znikło z paska. Serdecznie dzięki.


(Atis) #6

Skasuj folder C:\FRST

Usuń stare punkty przywracania: Aby usunąć wszystkie punkty przywracania

Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK

Odinstaluj Java 8 Update 45

Zainstaluj Java 8 Update 51 i Internet Explorer 11


(Ogion) #7

OK, dzięki jeszcze raz.