x-kom hosting

yoursites123 w firefoksie

szymon23000
utworzono
utworzono

Nie mam pojęcia skąd się to wzięło ani jak to usunąć :(

Twój_Anioł_Stróż
komentarz
komentarz (edytowane)

Otwórz Notatnik i wklej w nim:

Task: {8A6E96FA-EC49-4F35-8E31-F3775227FFC1} - System32\Tasks\Run_Bobby_Browser => C:\Users\Szymon\AppData\Local\BoBrowser\Application\bobrowser.exe <==== UWAGA
C:\Users\Szymon\AppData\Local\BoBrowser
ShortcutWithArgument: C:\Users\Szymon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449860886&z=2d4d812e0b6f4c62ec39323g6z4zdt2b5qcefb8b1m&from=ient07021&uid=ST3500418AS_9VM01640XXXX9VM01640 <==== UWAGA
ShortcutWithArgument: C:\Users\Szymon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449860886&z=2d4d812e0b6f4c62ec39323g6z4zdt2b5qcefb8b1m&from=ient07021&uid=ST3500418AS_9VM01640XXXX9VM01640 <==== UWAGA
ShortcutWithArgument: C:\Users\Szymon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1449860886&z=2d4d812e0b6f4c62ec39323g6z4zdt2b5qcefb8b1m&from=ient07021&uid=ST3500418AS_9VM01640XXXX9VM01640 <==== UWAGA
ShortcutWithArgument: C:\Users\Szymon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449860886&z=2d4d812e0b6f4c62ec39323g6z4zdt2b5qcefb8b1m&from=ient07021&uid=ST3500418AS_9VM01640XXXX9VM01640 <==== UWAGA
ShortcutWithArgument: C:\Users\Szymon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449860886&z=2d4d812e0b6f4c62ec39323g6z4zdt2b5qcefb8b1m&from=ient07021&uid=ST3500418AS_9VM01640XXXX9VM01640 <==== UWAGA
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449860886&z=2d4d812e0b6f4c62ec39323g6z4zdt2b5qcefb8b1m&from=ient07021&uid=ST3500418AS_9VM01640XXXX9VM01640 <==== UWAGA
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1449860886&z=2d4d812e0b6f4c62ec39323g6z4zdt2b5qcefb8b1m&from=ient07021&uid=ST3500418AS_9VM01640XXXX9VM01640 <==== UWAGA
C:\Users\Pawel\AppData\Roaming\TSv
C:\ProgramData\rWdMr
C:\Program Files (x86)\SFK
HKLM-x32\...\Run: [] => [X]
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449656824&z=3cd41932499296b9f260dc0g8z1z1teq5wbq3b8ocz&from=ient07021&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449656824&z=3cd41932499296b9f260dc0g8z1z1teq5wbq3b8ocz&from=ient07021&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.omniboxes.com/web/?type=ds&ts=1447147134&z=48c0fb04382d2d6d91d67fbg8zfz6mcg3z9meg0cam&from=wpm07163&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.omniboxes.com/web/?type=ds&ts=1447147134&z=48c0fb04382d2d6d91d67fbg8zfz6mcg3z9meg0cam&from=wpm07163&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449656824&z=3cd41932499296b9f260dc0g8z1z1teq5wbq3b8ocz&from=ient07021&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449656824&z=3cd41932499296b9f260dc0g8z1z1teq5wbq3b8ocz&from=ient07021&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.omniboxes.com/web/?type=ds&ts=1447147134&z=48c0fb04382d2d6d91d67fbg8zfz6mcg3z9meg0cam&from=wpm07163&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.omniboxes.com/web/?type=ds&ts=1447147134&z=48c0fb04382d2d6d91d67fbg8zfz6mcg3z9meg0cam&from=wpm07163&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC&q={searchTerms}
HKU\S-1-5-21-146596287-35509435-1045254187-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.omniboxes.com/web/?type=ds&ts=1448365998&z=b3d54bf9715e48f1c2f5bb5g1z4zfb1c2q3qae6e6g&from=ient07031&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC&q={searchTerms}
HKU\S-1-5-21-146596287-35509435-1045254187-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449656824&z=3cd41932499296b9f260dc0g8z1z1teq5wbq3b8ocz&from=ient07021&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC
HKU\S-1-5-21-146596287-35509435-1045254187-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.omniboxes.com/web/?type=ds&ts=1448365998&z=b3d54bf9715e48f1c2f5bb5g1z4zfb1c2q3qae6e6g&from=ient07031&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC&q={searchTerms}
SearchScopes: HKU\S-1-5-21-146596287-35509435-1045254187-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449656824&z=3cd41932499296b9f260dc0g8z1z1teq5wbq3b8ocz&from=ient07021&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe hxxp://www.yoursites123.com/?type=sc&ts=1449656824&z=3cd41932499296b9f260dc0g8z1z1teq5wbq3b8ocz&from=ient07021&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC
Edge HomeButtonPage: HKU\S-1-5-21-146596287-35509435-1045254187-1001 -> hxxp://www.delta-homes.com/?type=hp&ts=1444728147&z=b324f567ebd54bef6b8468fg5z6z1z7m9o4bag1w0e&from=wpm07163&uid=ST2000DM001-1ER164_Z4Z350NCXXXXZ4Z350NC
R2 IhPul; C:\Users\Pawel\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-08] (tsvr.com)
R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [170144 2015-11-27] (TODO: <公司名>)
R2 WdMan; C:\ProgramData\rWdMr\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
2015-12-09 11:28 - 2015-12-09 12:45 - 00000000 ____D C:\Program Files (x86)\SFK
2015-12-09 11:28 - 2015-12-09 11:28 - 00000000 ____D C:\ProgramData\rWdMr
2015-12-09 11:26 - 2015-12-09 11:27 - 00000000 ____D C:\ProgramData\XWdMX
2015-11-10 10:19 - 2015-11-10 10:20 - 00000000 ____D C:\ProgramData\pWMiniProp
2015-11-10 10:18 - 2015-12-09 11:26 - 00000000 ____D C:\ProgramData\2WMiniPro2
2015-12-09 11:28 - 2015-09-29 18:41 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-11-10 11:28 - 2015-10-13 10:23 - 00000000 ____D C:\Program Files (x86)\WinZipper
EmptyTemp:

Plik zapisz pod nazwą [b]fixlist.txt[/b] i umieść obok FRST.exe
Uruchom [b]FRST[/b] i kliknij przycisk [b]Fix[/b] (NAPRAW).


----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW).
przez SHIFT+DEL usuń pozostały folder C:\FRST.


Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie.
.
szymon23000
komentarz
komentarz

Problem zniknął, dziękuję :)

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.