x-kom hosting

yoursites123

ighar
utworzono
utworzono

Witam. Mam ten sam problem co inni użytkownicy. Proszę o pomoc. Dziękuje. 
Logi

Twój_Anioł_Stróż
komentarz
komentarz (edytowane)

Otwórz Notatnik i wklej w nim:

Task: {57EED5C9-4862-41C9-8B44-50B4DDF1882D} - System32\Tasks\{4911A350-4647-4F40-A65B-33F6B51ED9E2} => pcalua.exe -a C:\Users\michu\AppData\Roaming\istartsurf\UninstallManager.exe -c  -ptid=cor
ShortcutWithArgument: C:\Users\michu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5 <==== UWAGA
ShortcutWithArgument: C:\Users\michu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5 <==== UWAGA
ShortcutWithArgument: C:\Users\michu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5 <==== UWAGA
ShortcutWithArgument: C:\Users\michu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5 <==== UWAGA
ShortcutWithArgument: C:\Users\michu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5 <==== UWAGA
ShortcutWithArgument: C:\Users\michu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5 <==== UWAGA
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5 <==== UWAGA
ShortcutWithArgument: C:\Users\Public\Desktop\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5 <==== UWAGA
C:\Users\michu\AppData\Roaming\TSv
C:\Program Files (x86)\SFK
C:\ProgramData\MWdMM
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
HKU\S-1-5-21-2696286215-2795040669-2894450061-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5
HKU\S-1-5-21-2696286215-2795040669-2894450061-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2696286215-2795040669-2894450061-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2696286215-2795040669-2894450061-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449650774&z=6f3c2855fc8f0779371c75cg8z1z9t2q2w9e9m3mem&from=ient07021&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1446037597&z=6c85cfbcbdb71a4de8042f4g5z4z8q9e0c4mec3zao&from=cor&uid=ST3320620AS_5QF7P2W5XXXX5QF7P2W5
R2 IhPul; C:\Users\michu\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-08] (tsvr.com)
R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [170144 2015-11-27] (TODO: <公司名>)
R2 WdMan; C:\ProgramData\MWdMM\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego]
S1 wfdrvr_vt_1_10_0_25; system32\drivers\wfdrvr_vt_1_10_0_25.sys [X]
2015-12-10 21:22 - 2015-12-11 22:01 - 00000001 _____ C:\Windows\SysWOW64\pl.html
2015-12-09 09:47 - 2015-12-11 22:06 - 00000000 ____D C:\Program Files (x86)\SFK
2015-12-09 09:47 - 2015-12-09 09:48 - 00000000 ____D C:\ProgramData\MWdMM
2015-12-09 09:46 - 2015-12-09 09:46 - 00000000 ____D C:\Users\michu\AppData\Roaming\TSv
2015-12-09 09:45 - 2015-12-09 09:46 - 00000000 ____D C:\ProgramData\pWdMp
2015-12-09 09:45 - 2015-10-28 14:06 - 00000000 ____D C:\ProgramData\MWMiniProM
2015-10-28 14:06 - 2015-12-09 09:47 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
EmptyTemp:

Plik zapisz pod nazwą [b]fixlist.txt[/b] i umieść obok FRST.exe
Uruchom [b]FRST[/b] i kliknij przycisk [b]Fix[/b] (NAPRAW).


----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW).
przez SHIFT+DEL usuń pozostały folder C:\FRST.


Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie.
.




 

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.