zbynio77 utworzono 10 grudnia 2015 utworzono 10 grudnia 2015 Witam, Podobnie jak inni użytkownicy prosze o pomoc w usunięciu szkodnika. [attachment=45338:Addition.txt] [attachment=45339:FRST.txt]
Twój_Anioł_Stróż komentarz 10 grudnia 2015 komentarz 10 grudnia 2015 (edytowane) Otwórz Notatnik i wklej w nim: Task: {285CB557-C3A6-487C-9964-60EEA9B87F74} - \Lenovo\Lenovo Customer Feedback Program 64 35 -> Brak pliku <==== UWAGA Task: {7F8DB704-401A-47D6-8713-0CC56FF2A609} - System32\Tasks\{BD7481D4-A3A7-4A98-9AA2-6FE00F29924E} => pcalua.exe -a "C:\Program Files (x86)\DYMO\DYMO Label Software\vstor40.exe" -d "C:\Program Files (x86)\DYMO\DYMO Label Software" Task: {E1A45E74-3495-4D64-8BD7-1057890AD33E} - System32\Tasks\{177D2933-ABBE-4B0F-AF11-B2198616DEA8} => pcalua.exe -a "C:\Users\Zbyszek Evdic\AppData\Roaming\yoursearching\UninstallManager.exe" -c -ptid=cornl Task: {EDC73311-0B6D-4FB5-BA93-457016E0DCA3} - System32\Tasks\{A4F1485F-67F1-4502-AD9E-710E81967C77} => pcalua.exe -a F:\Setup.exe -d F:\ ShortcutWithArgument: C:\Users\Zbyszek Evdic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR <==== UWAGA ShortcutWithArgument: C:\Users\Zbyszek Evdic\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR <==== UWAGA ShortcutWithArgument: C:\Users\Zbyszek Evdic\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR <==== UWAGA ShortcutWithArgument: C:\Users\Zbyszek Evdic\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR <==== UWAGA ShortcutWithArgument: C:\Users\Zbyszek Evdic\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR <==== UWAGA ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR <==== UWAGA ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR <==== UWAGA HKU\S-1-5-21-3742620791-3053827281-171198783-1000\...\Policies\Explorer: [] HKU\S-1-5-21-3742620791-3053827281-171198783-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR&q={searchTerms} HKU\S-1-5-21-3742620791-3053827281-171198783-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR HKU\S-1-5-21-3742620791-3053827281-171198783-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR HKU\S-1-5-21-3742620791-3053827281-171198783-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR&q={searchTerms} SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = FF NewTab: chrome://quick_start/content/index.html FF DefaultSearchEngine: yoursites123 FF SelectedSearchEngine: yoursites123 FF Session Restore: -> [funkcja włączona] StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1449648678&z=545379c9f9591b75f46d9a8gfzczdt9q6z8b3q3m6w&from=ient07021&uid=ST1000LM014-SSHD-8GB_W380X6PRXXXXW380X6PR S1 wfdrvr_vt_1_10_0_28; system32\drivers\wfdrvr_vt_1_10_0_28.sys [X] 2015-12-09 09:34 - 2015-12-09 09:34 - 00000000 ____D C:\Users\Zbyszek Evdic\AppData\Roaming\eCyber 2015-12-09 09:11 - 2015-12-09 09:13 - 00000000 ____D C:\ProgramData\QWdMQ 2015-12-09 09:10 - 2015-12-09 09:11 - 00000000 ____D C:\ProgramData\8WdM8 2015-11-26 15:51 - 2015-12-09 09:10 - 00000000 ____D C:\ProgramData\FWMiniProF 2015-11-26 15:50 - 2015-11-26 16:30 - 00000000 ____D C:\Users\Zbyszek Evdic\AppData\Roaming\yoursearching 2015-11-26 15:49 - 2015-11-26 15:48 - 02276352 _____ (CAD PROJEKT KiA s.c.) C:\Users\Zbyszek Evdic\Downloads\ldp.exe 2015-11-26 15:48 - 2015-11-26 15:48 - 00962128 _____ (Installer Soft Program ) C:\Users\Zbyszek Evdic\Downloads\Light-Decor-Paradyz-12172-dp.exe EmptyTemp: Plik zapisz pod nazwą [b]fixlist.txt[/b] i umieść obok FRST.exe Uruchom [b]FRST[/b] i kliknij przycisk [b]Fix[/b] (NAPRAW). ---------------------- Jeśli będzie OK, to będziemy kończyć: Otwórz Notatnik i wklej w nim: DeleteQuarantine: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW). przez SHIFT+DEL usuń pozostały folder C:\FRST. Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie. .
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.