x-kom hosting

Proszę o pomoc z Yoursite123

jarobtm
utworzono
utworzono

Cześć, Jak w temacie, proszę o pomoc z usunięciem yoursite123[attachment=45506:Addition.txt][attachment=45507:FRST.txt]

Twój_Anioł_Stróż
komentarz
komentarz (edytowane)

Otwórz Notatnik i wklej w nim:

Task: {98C03BF8-3DC1-437D-83E4-93D86C8BE19D} - System32\Tasks\{C0907FE4-D389-4536-AD62-23B6F2FF2422} => pcalua.exe -a "C:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe" -d "C:\Program Files (x86)\YouTube Accelerator"
Task: C:\Windows\Tasks\IEDJ.job => C:\Users\Ewa_Rafa�\AppData\Roaming\IEDJ.exe <==== UWAGA
Task: C:\Windows\Tasks\IRGS.job => C:\Users\Ewa_Rafa�\AppData\Roaming\IRGS.exe <==== UWAGA
ShortcutWithArgument: C:\Users\Ewa_Rafał\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX <==== UWAGA
ShortcutWithArgument: C:\Users\Ewa_Rafał\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX <==== UWAGA
ShortcutWithArgument: C:\Users\Ewa_Rafał\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX <==== UWAGA
C:\ProgramData\3WdM3
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms}
HKU\S-1-5-21-1732977636-2798228697-2142119067-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms}
HKU\S-1-5-21-1732977636-2798228697-2142119067-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKd7LacAZijUqZ_dO6stdc_--USSaVktMdkybvYsjNyyjPR0ourTCXuL4rtOeArYvZelTYHt3wnQ54A,,
HKU\S-1-5-21-1732977636-2798228697-2142119067-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms}
HKU\S-1-5-21-1732977636-2798228697-2142119067-1001\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms}
HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms}
HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX
HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX
HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms}
HKU\S-1-5-21-1732977636-2798228697-2142119067-1002\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKU\S-1-5-21-1732977636-2798228697-2142119067-1001 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1732977636-2798228697-2142119067-1001 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ6e1krQXBFZY3cpUbx-QSBpvqjb5qexRHcdtRmpbTeArtp90Cx0hzehGqY34iqt0kPLkkKwe2lNVgKdIxw5PfBKJRWEnFDmwCQyXJofU66A7-yYsT9iUIftx3txnWpK7Uh8Z06-gYsYPupIC2ohvUoqiAww,,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1732977636-2798228697-2142119067-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1732977636-2798228697-2142119067-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX&q={searchTerms}
BHO-x32: Crazy Score -> {f439aa7e-a2a0-4635-99a2-164180e848ca} -> C:\Program Files (x86)\Crazy Score\Extensions\f439aa7e-a2a0-4635-99a2-164180e848ca.dll => Brak pliku
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX
FF NewTab: hxxp://www.yoursites123.com/newtab/?type=nt&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX
FF SelectedSearchEngine: yoursites123
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yoursites123.xml [2015-12-11]
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1449863101&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=ient07021&uid=HitachiXHTS545050A7E380_TEJ51239J76TUXJ76TUXX
R2 WdMan; C:\ProgramData\3WdM3\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego]
S3 ewusbmbb; \SystemRoot\system32\DRIVERS\ewusbwwan.sys [X]
S3 ew_hwusbdev; \SystemRoot\system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; \SystemRoot\System32\drivers\ew_usbenumfilter.sys [X]
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
S3 hwdatacard; \SystemRoot\system32\DRIVERS\ewusbmdm.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 ZTEusbmdm6k; \SystemRoot\system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnet; \SystemRoot\system32\DRIVERS\ZTEusbnet.sys [X]
S3 ZTEusbnmea; \SystemRoot\system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; \SystemRoot\system32\DRIVERS\ZTEusbser6k.sys [X]
S1 {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64; system32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys [X]
S1 {b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw64; system32\drivers\{b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw64.sys [X]
2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\Ewa_Rafał\AppData\Roaming\IEDJ
2014-09-26 09:27 - 2014-09-26 09:27 - 1464728 _____ (Object Browser) C:\Users\Ewa_Rafał\AppData\Roaming\IEDJ.exe
2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\Ewa_Rafał\AppData\Roaming\IRGS
2014-09-26 09:26 - 2014-09-26 09:26 - 1909144 _____ (Object Browser) C:\Users\Ewa_Rafał\AppData\Roaming\IRGS.exe
EmptyTemp:

Plik zapisz pod nazwą [b]fixlist.txt[/b] i umieść obok FRST.exe
Uruchom [b]FRST[/b] i kliknij przycisk [b]Fix[/b] (NAPRAW).


----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW).
przez SHIFT+DEL usuń pozostały folder C:\FRST.


Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie.
.
 

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.