wyłącz przywracanie systemu, wejdź w tryb awaryjny i kasujesz wpisy w Hijacku:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O2 - BHO: (no name) - {77701e16-9bfe-4b63-a5b4-7bd156758a37} - (no file)
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/inflaterball/miniclipGameLoader.dll
O16 - DPF: {DECEAAA2-370A-49BB-9362-68C3A58DDC62} (SAIX) - http://static.zangocash.com/cab/Seekmo/ie/bridge-c24.cab?1f9a979a74150cf8de259a45dd458c0cf096483a19f6578392de95aabf759fc4dd6df88f90f1bb8efb42c549d11df9f385f16daab72cc1f57252fc7802e9cf64fe0a7af9:44b83125cbf5d26212ed9ca2c634191a
O17 - HKLM\System\CCS\Services\Tcpip\..\{0A632B73-CB07-4FF5-8B88-401E2C703C34}: NameServer = 85.255.116.25,85.255.112.94
O17 - HKLM\System\CCS\Services\Tcpip\..\{89575AE4-C96F-488A-AA86-AD6CAA23CC4A}: NameServer = 85.255.116.25,85.255.112.94
O17 - HKLM\System\CCS\Services\Tcpip\..\{9CA6F9BF-F31F-4F91-A1F6-F6A653F2F00E}: NameServer = 85.255.116.25,85.255.112.94
O17 - HKLM\System\CCS\Services\Tcpip\..\{F41BC013-0144-4345-A7DA-1F263D7CD398}: NameServer = 85.255.116.25,85.255.112.94
O17 - HKLM\System\CS1\Services\Tcpip\..\{0A632B73-CB07-4FF5-8B88-401E2C703C34}: NameServer = 85.255.116.25,85.255.112.94
O17 - HKLM\System\CS2\Services\Tcpip\..\{0A632B73-CB07-4FF5-8B88-401E2C703C34}: NameServer = 85.255.116.25,85.255.112.94
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm