Elektroda.pl
Elektroda.pl
X
CControls
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

iStartSurf - ciągle powraca

Arkenss 08 Lip 2015 12:24 690 5
  • #1 08 Lip 2015 12:24
    Arkenss
    Poziom 2  

    Witam mam problem z "istartsurf" mimo że usuwam go adwcleanerem ciągle powraca, a przy okazji instalują mi się jakieś syfiaste programy. Głupio mi strasznie, zawsze uważam co instaluję a ten syf jakoś mi się pojawił.

    0 5
  • CControls
  • CControls
  • Pomocny post
    #4 08 Lip 2015 14:00
    Acorus 20
    Spec od komputerów

    Otwórz notatnik systemowy i wklej:

    Cytat:
    HKLM-x32\...\Run: [gmsd_pl_005010024] => [X]
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    CHR Extension: (No Name) - E:\Users\Piotrek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-03]
    R2 zejytose; E:\Users\Piotrek\AppData\Roaming\804A1DA0-1436197495-11D5-A247-001E8C784FDD\jnsd3A14.tmp [199168 2015-07-06] () [File not signed]
    U3 afbvpvht; C:\Windows\System32\Drivers\afbvpvht.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
    S3 ALSysIO; \??\E:\Users\Przemek\AppData\Local\Temp\ALSysIO64.sys [X]
    2015-07-06 18:18 - 2015-07-08 13:03 - 00000000 ____D C:\Program Files (x86)\f6d684a9-8f58-450d-b7c6-8c56bd608eec
    2015-07-06 18:06 - 2015-07-06 18:06 - 00003162 _____ C:\Windows\System32\Tasks\{B9EF127E-C61A-450D-903A-8A3C690AEBF3}
    EmptyTemp:


    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix. Odinstaluj Chrome zaznaczając usunięcie danych przeglądania.
    Najpierw możesz wyeksportować zakładki: https://support.google.com/chrome/answer/96816?hl=pl
    Później zainstaluj stabilną wersję: https://www.google.pl/chrome/browser/desktop/

    2
  • #6 09 Lip 2015 13:52
    Acorus 20
    Spec od komputerów

    Odinstaluj istartsurf uninstall. Otwórz notatnik systemowy i wklej:

    Cytat:
    Task: {90C2AA39-A388-47F1-9531-7CA52B395548} - \{B9EF127E-C61A-450D-903A-8A3C690AEBF3} No Task File <==== ATTENTION
    Task: {B375CEC1-50BD-4F6E-844E-FD8AA2912F9C} - System32\Tasks\SmartWeb Upgrade Trigger Task => E:\Users\Piotrek\AppData\Local\SmartWeb\SmartWebHelper.exe <==== ATTENTION
    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
    HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
    HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [gmsd_pl_005010025] => [X]
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=143...face&uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=143...face&uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts...p;uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts...p;uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=143...face&uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=143...face&uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH




    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts...p;uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts...p;uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH&q={searchTerms}
    HKU\S-1-5-21-720544448-317035217-680682757-1009\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=143...face&uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH
    HKU\S-1-5-21-720544448-317035217-680682757-1009\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=143...face&uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH
    SearchScopes: HKU\S-1-5-21-720544448-317035217-680682757-1009 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&a...0YH&ts=1436434654&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-720544448-317035217-680682757-1009 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.istartsurf.com/web/?utm_source=b&a...0YH&ts=1436434654&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-720544448-317035217-680682757-1009 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.istartsurf.com/web/?utm_source=b&a...0YH&ts=1436434654&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-720544448-317035217-680682757-1009 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?utm_source=b&a...0YH&ts=1436434654&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-720544448-317035217-680682757-1009 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.istartsurf.com/web/?utm_source=b&a...0YH&ts=1436434654&type=default&q={searchTerms}
    BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\MiuiTab\SupTab.dll [2015-06-24] (Thinknice Co. Limited)
    StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=143...face&uid=ST3320620AS_9QFAB0YHXXXX9QFAB0YH
    FF DefaultSearchEngine: istartsurf
    FF SelectedSearchEngine: istartsurf
    FF SearchPlugin: E:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\3wtgi60d.default\searchplugins\istartsurf.xml [2015-07-09]
    FF Extension: QuickSearch - E:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\3wtgi60d.default\Extensions\searchffv2@gmail.com [2015-07-09]
    FF Extension: Search Enginer - E:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\3wtgi60d.default\Extensions\sweetsearch@gmail.com [2015-07-09]
    FF HKLM-x32\...\Firefox\Extensions: [searchffv2@gmail.com] - E:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\3wtgi60d.default\extensions\searchffv2@gmail.com
    FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - E:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\3wtgi60d.default\extensions\sweetsearch@gmail.com
    R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [707240 2015-07-09] (DTools LIMITED) <==== ATTENTION
    R2 wotenufi; E:\Users\Piotrek\AppData\Roaming\804A1DA0-1436197495-11D5-A247-001E8C784FDD\knssF6ED.tmp [345088 2015-07-08] () [File not signed]
    S3 TBPanel; No ImagePath
    U3 a63h9luo; C:\Windows\System32\Drivers\a63h9luo.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
    R1 innfd_1_10_0_14; system32\drivers\innfd_1_10_0_14.sys [X]
    2015-07-09 11:45 - 2015-07-09 11:45 - 00000000 ____D C:\Program Files (x86)\predm
    2015-07-09 11:37 - 2015-07-09 11:37 - 00000000 ____D C:\Program Files (x86)\MiuiTab
    2015-07-09 11:36 - 2015-07-09 11:45 - 00000000 ____D E:\Users\Piotrek\AppData\Local\SmartWeb
    2015-07-09 11:36 - 2015-07-09 11:36 - 00004050 _____ C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
    2015-07-09 11:36 - 2015-07-09 11:36 - 00000000 ____D E:\Users\Piotrek\AppData\Roaming\istartsurf
    EmptyTemp:


    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix. Pobierz i uruchom jako administrator AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Scan i później Cleaning.

    0