sirmich utworzono 10 grudnia 2015 utworzono 10 grudnia 2015 Uprzjmię proszę o pomoc w usunieciu tego dziadostwa z mojego systemu.
Twój_Anioł_Stróż komentarz 11 grudnia 2015 komentarz 11 grudnia 2015 Otwórz Notatnik i wklej w nim: Task: {AE9625BF-68DF-4430-AE59-DB51AD5799E5} - System32\Tasks\{3B784F94-2E36-46EC-8930-FFD96E373699} => pcalua.exe -a "C:\ProgramData\Package Cache\{a9888f41-68ae-43df-bd7d-d93405a44106}\Setup.exe" -c /uninstall ShortcutWithArgument: C:\Users\Mich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX <==== UWAGA ShortcutWithArgument: C:\Users\Mich\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX <==== UWAGA ShortcutWithArgument: C:\Users\Mich\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> E:\soft\Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX <==== UWAGA ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> E:\soft\Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX <==== UWAGA ShortcutWithArgument: C:\Users\Public\Desktop\Launcher.lnk -> E:\Gry\Batman Arkham Knight\Launcher.exe () -> hxxp://www.istartpageing.com/?type=sc&ts=1449171939&z=5d8402ef0977a575eea8f75g6z4z8t8g0m2g6tbc6m&from=cor&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX <==== UWAGA C:\Users\Mich\AppData\Roaming\TSv C:\ProgramData\8WdM8 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} HKU\S-1-5-21-338239284-247605828-3016863882-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX HKU\S-1-5-21-338239284-247605828-3016863882-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} SearchScopes: HKU\S-1-5-21-338239284-247605828-3016863882-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} SearchScopes: HKU\S-1-5-21-338239284-247605828-3016863882-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartpageing.com/?type=sc&ts=1449171939&z=5d8402ef0977a575eea8f75g6z4z8t8g0m2g6tbc6m&from=cor&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX FF NewTab: chrome://quick_start/content/index.html FF SelectedSearchEngine: yoursites123 FF Session Restore: -> [funkcja włączona] FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Mich\AppData\Roaming\Mozilla\Firefox\Profiles\fvpnrhae.default\extensions\default_newtabff@gmail.com => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Mich\AppData\Roaming\Mozilla\Firefox\Profiles\fvpnrhae.default\extensions\yahooprotected@gmail.com => nie znaleziono StartMenuInternet: FIREFOX.EXE - E:\soft\Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1449661456&z=3d4c754ef1c538cf52d713egbzfzbt7qbqdg3z7wew&from=ient07021&uid=WDCXWD10S21X-24R1BT0-SSHD-8GB_WD-WXK1A65R49NXR49NX R2 IhPul; C:\Users\Mich\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-08] (tsvr.com) R2 WdMan; C:\ProgramData\8WdM8\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego] S2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe -s [X] C:\Windows\Minidump\*.dmp C:\Program Files (x86)\SFK C:\ProgramData\MWdMM C:\Users\Mich\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 C:\ProgramData\boost_interprocess 2015-12-03 20:45 - 2015-12-09 12:44 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat 2015-12-03 20:45 - 2015-12-09 12:44 - 00000000 ____D C:\ProgramData\ZWMiniProZ 2015-12-03 20:45 - 2015-12-05 13:25 - 00000000 ____D C:\Users\Mich\AppData\Roaming\istartpageing EmptyTemp: >>Menu Notatnika >> Plik >> >>Zapisz jako >> Nazwa pliku: fixlist Zapisz jako typ: Dokumenty tekstowe Kodowanie: UTF -8 >>Zapisz Plik umieść w folderze E:\soft Uruchom [b]FRST[/b] i kliknij przycisk [b]Fix[/b] (NAPRAW). ---------------------- Jeśli będzie OK, to będziemy kończyć: Otwórz Notatnik i wklej w nim: DeleteQuarantine: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW). przez SHIFT+DEL usuń pozostały folder C:\FRST. Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie. .
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.