x-kom hosting

Ponownie Yoursites123

Annshie
utworzono
utworzono

Problem ten sam co inni,proszę o pomoc,ponieważ kompletnie się nie znam na komputerach...

Twój_Anioł_Stróż
komentarz
komentarz (edytowane)

Otwórz Notatnik i wklej w nim:

ShortcutWithArgument: C:\Users\Tadek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://start.qone8.com/?type=sc&ts=1382572743&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109 <==== UWAGA
ShortcutWithArgument: C:\Users\Tadek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://start.qone8.com/?type=sc&ts=1382572743&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109 <==== UWAGA
ShortcutWithArgument: C:\Users\Tadek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://start.qone8.com/?type=sc&ts=1382572743&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109 <==== UWAGA
ShortcutWithArgument: C:\Users\Tadek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://start.qone8.com/?type=sc&ts=1382572743&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109 <==== UWAGA
ShortcutWithArgument: C:\Users\Tadek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449856250&z=2523489d2a1f246e60c51a6g9z7z6t7bcw8q3oez2q&from=ient07021&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109 <==== UWAGA
ShortcutWithArgument: C:\Users\Tadek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449856250&z=2523489d2a1f246e60c51a6g9z7z6t7bcw8q3oez2q&from=ient07021&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109 <==== UWAGA
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449856250&z=2523489d2a1f246e60c51a6g9z7z6t7bcw8q3oez2q&from=ient07021&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109 <==== UWAGA
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1449856250&z=2523489d2a1f246e60c51a6g9z7z6t7bcw8q3oez2q&from=ient07021&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109 <==== UWAGA
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1449856250&z=2523489d2a1f246e60c51a6g9z7z6t7bcw8q3oez2q&from=ient07021&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109 <==== UWAGA
C:\Windows\SysWOW64\pl4.exe
C:\ProgramData\4WdM4
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1438175430&z=be1ee5a1372b504da240797g7z0c7b3gfm9w0z5o4b&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1438175430&z=be1ee5a1372b504da240797g7z0c7b3gfm9w0z5o4b&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1438175430&z=be1ee5a1372b504da240797g7z0c7b3gfm9w0z5o4b&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1438175430&z=be1ee5a1372b504da240797g7z0c7b3gfm9w0z5o4b&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1438175430&z=be1ee5a1372b504da240797g7z0c7b3gfm9w0z5o4b&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1438175430&z=be1ee5a1372b504da240797g7z0c7b3gfm9w0z5o4b&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&q={searchTerms}
SearchScopes: HKLM -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtBtAyD0A0C0B0BtAyDtCzzyC0BtDtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=261550984&ir=
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM-x32 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzutDtDtBtAyD0A0C0B0BtAyDtCzzyC0BtDtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=261550984&ir=
SearchScopes: HKLM-x32 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.fastosearch.info/?l=1&q={searchTerms}&pid=34&r=2014/06/19&hid=13414854523882579982&lg=EN&cc=PL&unqvl=55
SearchScopes: HKU\S-1-5-21-249382588-2416047448-1516661887-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.sweet-page.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&ts=1438175636&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-249382588-2416047448-1516661887-1000 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://www.sweet-page.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&ts=1438175636&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-249382588-2416047448-1516661887-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.sweet-page.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&ts=1438175636&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-249382588-2416047448-1516661887-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449856250&z=2523489d2a1f246e60c51a6g9z7z6t7bcw8q3oez2q&from=ient07021&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&q={searchTerms}
SearchScopes: HKU\S-1-5-21-249382588-2416047448-1516661887-1000 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.sweet-page.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&ts=1438175636&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-249382588-2416047448-1516661887-1000 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://www.sweet-page.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&ts=1438175636&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-249382588-2416047448-1516661887-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.sweet-page.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000BEVT-22ZAT0_WD-WXT0A49U4109U4109&ts=1438175636&type=default&q={searchTerms}
Toolbar: HKLM - Brak nazwy - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Brak pliku
Toolbar: HKLM - Brak nazwy - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Brak pliku
FF SearchEngineOrder.1,S: WebSearch
FF SelectedSearchEngine,S: WebSearch
FF SearchPlugin: C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\searchplugins\Mysearchdial.xml [2013-10-26]
FF SearchPlugin: C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\searchplugins\seznam-avast.xml [2015-03-26]
FF SearchPlugin: C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\searchplugins\sweet-page.xml [2015-09-22]
FF SearchPlugin: C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\searchplugins\WebSearch.xml [2015-07-11]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qone8.xml [2013-10-24]
FF Extension: Default NewTab - C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\Extensions\default_newtabff@gmail.com [2015-09-22] [Brak podpisu cyfrowego]
FF Extension: Default SearchProtected  - C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\Extensions\defsearchp@gmail.com [2015-07-29] [Brak podpisu cyfrowego]
FF Extension: deskCut - C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\Extensions\deskCutv2@gmail.com [2015-07-29] [Brak podpisu cyfrowego]
FF Extension: SNT - C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\Extensions\m61oeoiu@toa.org [2015-07-11] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\extensions\defsearchp@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\extensions\deskCutv2@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\extensions\default_newtabff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Tadek\AppData\Roaming\Mozilla\Firefox\Profiles\dpx38vil.default\extensions\yahooprotected@gmail.com
HR HKLM-x32\...\Chrome\Extension: [dchmpbaclbiioedakpcldenooikekokm] - C:\Users\Tadek\AppData\Local\foxtab_speeddial.crx [2013-10-28]
CHR HKLM-x32\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Tadek\AppData\Local\mysearchdial-speeddial.crx [2013-10-25]
R2 WdMan; C:\ProgramData\4WdM4\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
2015-12-11 18:53 - 2015-12-11 20:53 - 00000001 _____ C:\Windows\SysWOW64\pl.html
2015-12-11 18:53 - 2015-12-11 18:54 - 00000000 ____D C:\ProgramData\4WdM4
2015-12-11 18:53 - 2015-10-14 10:42 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
EmptyTemp:

Plik zapisz pod nazwą [b]fixlist.txt[/b] i umieść obok FRST.exe
Uruchom [b]FRST[/b] i kliknij przycisk [b]Fix[/b] (NAPRAW).


----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW).
przez SHIFT+DEL usuń pozostały folder C:\FRST.


Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie.
.



 

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.