Strona startowa przegladarki zmieniona

[matix56]

Witam
Tak jak w temacie strona startowa zmieniona na http://www.so-v.com
Proszę o pomoc

[ordynat]

W logach nic nie potwierdza istnienia "so-v".

Otwórz Notatnik i wklej w nim:

Task: {89935406-CA58-4601-841C-77951D535240} - System32\Tasks\{BFFBB28B-EF16-4135-9CAD-69F1DFDE9A5A} => pcalua.exe -a E:\setup.exe -d E:\
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKU\S-1-5-21-4266547079-3383473741-2708876902-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartpageing.com/web/?type=ds&ts=1447878393&z=c777d9036a86fb8442bde32g3zbz7m9bcm5b3c0t5c&from=cor&uid=st1000lm024xhn-m101mbb_s2u5j9cc747056&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1447879557&z=7b94f0945c112565ace8985g7zdzcm2b3mat6w9wbm&from=smt&uid=st1000lm024xhn-m101mbb_s2u5j9cc747056&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartpageing.com/web/?type=ds&ts=1447878393&z=c777d9036a86fb8442bde32g3zbz7m9bcm5b3c0t5c&from=cor&uid=st1000lm024xhn-m101mbb_s2u5j9cc747056&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1447879557&z=7b94f0945c112565ace8985g7zdzcm2b3mat6w9wbm&from=smt&uid=st1000lm024xhn-m101mbb_s2u5j9cc747056&q={searchTerms}
HKU\S-1-5-21-4266547079-3383473741-2708876902-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1447879557&z=7b94f0945c112565ace8985g7zdzcm2b3mat6w9wbm&from=smt&uid=st1000lm024xhn-m101mbb_s2u5j9cc747056&q={searchTerms}
HKU\S-1-5-21-4266547079-3383473741-2708876902-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1447879557&z=7b94f0945c112565ace8985g7zdzcm2b3mat6w9wbm&from=smt&uid=st1000lm024xhn-m101mbb_s2u5j9cc747056&q={searchTerms}
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120808133801.dll => Brak pliku
BHO-x32: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120808133801.dll => Brak pliku
BHO-x32: Browse2save -> {D655E145-7A79-FC78-2293-FC1B7724AE9E} -> C:\ProgramData\Browse2save\511948168f78b.dll => Brak pliku
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Brak pliku
Toolbar: HKU\S-1-5-21-4266547079-3383473741-2708876902-1001 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku
S2 a5a53867; "C:\Windows\system32\rundll32.exe" "c:\progra~3\accele~1\AccelewinSvc.dll",service
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U2 CLKMSVC10_3A60B698; Brak ImagePath
U2 CLKMSVC10_C3B3B687; Brak ImagePath
U2 DriverService; Brak ImagePath
U2 iATAgentService; Brak ImagePath
U2 idealife Update Service; Brak ImagePath
U3 IGRS; Brak ImagePath
U2 IviRegMgr; Brak ImagePath
U2 Oasis2Service; Brak ImagePath
U2 PCCarerService; Brak ImagePath
U2 ReadyComm.DirectRouter; Brak ImagePath
U2 RichVideo; Brak ImagePath
U2 RtLedService; Brak ImagePath
U2 SeaPort; Brak ImagePath
U2 SoftwareService; Brak ImagePath
U3 SQLWriter; Brak ImagePath
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).
.