jarobtm utworzono 11 grudnia 2015 utworzono 11 grudnia 2015 Cześć, Jak w temacie, proszę o pomoc z usunięciem yoursite123[attachment=45506:Addition.txt][attachment=45507:FRST.txt]
Twój_Anioł_Stróż komentarz 11 grudnia 2015 komentarz 11 grudnia 2015 (edytowane) Otwórz Notatnik i wklej w nim: Task: {98C03BF8-3DC1-437D-83E4-93D86C8BE19D} - System32\Tasks\{C0907FE4-D389-4536-AD62-23B6F2FF2422} => pcalua.exe -a "C:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe" -d "C:\Program Files (x86)\YouTube Accelerator" Task: C:\Windows\Tasks\IEDJ.job => C:\Users\Ewa_Rafa�\AppData\Roaming\IEDJ.exe <==== UWAGA Task: C:\Windows\Tasks\IRGS.job => C:\Users\Ewa_Rafa�\AppData\Roaming\IRGS.exe <==== UWAGA ShortcutWithArgument: C:\Users\Ewa_Rafał\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX <==== UWAGA ShortcutWithArgument: C:\Users\Ewa_Rafał\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX <==== UWAGA ShortcutWithArgument: C:\Users\Ewa_Rafał\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX <==== UWAGA C:\ProgramData\3WdM3 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms} HKU\S-1-5-21-1732977636-2798228697-2142119067-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms} HKU\S-1-5-21-1732977636-2798228697-2142119067-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKd7LacAZijUqZ_dO6stdc_--USSaVktMdkybvYsjNyyjPR0ourTCXuL4rtOeArYvZelTYHt3wnQ54A,, HKU\S-1-5-21-1732977636-2798228697-2142119067-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms} HKU\S-1-5-21-1732977636-2798228697-2142119067-1001\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms} HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms} HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms} HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms} SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = SearchScopes: HKU\S-1-5-21-1732977636-2798228697-2142119067-1001 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms} SearchScopes: HKU\S-1-5-21-1732977636-2798228697-2142119067-1001 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms} SearchScopes: HKU\S-1-5-21-1732977636-2798228697-2142119067-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms} SearchScopes: HKU\S-1-5-21-1732977636-2798228697-2142119067-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms} BHO-x32: Crazy Score -> {f439aa7e-a2a0-4635-99a2-164180e848ca} -> C:\Program Files (x86)\Crazy Score\Extensions\f439aa7e-a2a0-4635-99a2-164180e848ca.dll => Brak pliku StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX FF NewTab: hxxp://www.yoursites123.com/newtab/?type=nt&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX FF SelectedSearchEngine: yoursites123 FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yoursites123.xml [2015-12-11] StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX R2 WdMan; C:\ProgramData\3WdM3\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego] S3 ewusbmbb; \SystemRoot\system32\DRIVERS\ewusbwwan.sys [X] S3 ew_hwusbdev; \SystemRoot\system32\DRIVERS\ew_hwusbdev.sys [X] S3 ew_usbenumfilter; \SystemRoot\System32\drivers\ew_usbenumfilter.sys [X] S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X] S3 hwdatacard; \SystemRoot\system32\DRIVERS\ewusbmdm.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] S3 ZTEusbmdm6k; \SystemRoot\system32\DRIVERS\ZTEusbmdm6k.sys [X] S3 ZTEusbnet; \SystemRoot\system32\DRIVERS\ZTEusbnet.sys [X] S3 ZTEusbnmea; \SystemRoot\system32\DRIVERS\ZTEusbnmea.sys [X] S3 ZTEusbser6k; \SystemRoot\system32\DRIVERS\ZTEusbser6k.sys [X] S1 {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64; system32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys [X] S1 {b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw64; system32\drivers\{b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw64.sys [X] 2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\Ewa_Rafał\AppData\Roaming\IEDJ 2014-09-26 09:27 - 2014-09-26 09:27 - 1464728 _____ (Object Browser) C:\Users\Ewa_Rafał\AppData\Roaming\IEDJ.exe 2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\Ewa_Rafał\AppData\Roaming\IRGS 2014-09-26 09:26 - 2014-09-26 09:26 - 1909144 _____ (Object Browser) C:\Users\Ewa_Rafał\AppData\Roaming\IRGS.exe EmptyTemp: Plik zapisz pod nazwą [b]fixlist.txt[/b] i umieść obok FRST.exe Uruchom [b]FRST[/b] i kliknij przycisk [b]Fix[/b] (NAPRAW). ---------------------- Jeśli będzie OK, to będziemy kończyć: Otwórz Notatnik i wklej w nim: DeleteQuarantine: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW). przez SHIFT+DEL usuń pozostały folder C:\FRST. Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie. .
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.