Hzz utworzono 8 stycznia 2016 utworzono 8 stycznia 2016 Witam, Chciałbym prosić o pomoc w usunięciu z komputera yoursite. Z góry serdecznie dziękuję za pomoc.
Twój_Anioł_Stróż komentarz 8 stycznia 2016 komentarz 8 stycznia 2016 (edytowane) Otwórz Notatnik i wklej w nim: DeleteKey: HKLM\SOFTWARE\Wow6432Node\yoursites123Software ShortcutWithArgument: C:\Users\Hubert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS ShortcutWithArgument: C:\Users\Hubert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS ShortcutWithArgument: C:\Users\Hubert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS ShortcutWithArgument: C:\Users\Hubert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS ShortcutWithArgument: C:\Users\Hubert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS C:\ProgramData\JWdMJ HKLM\...\Run: [] => [X] CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS&q={searchTerms} HKU\S-1-5-21-3432357439-2527700510-3695448560-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS&q={searchTerms} HKU\S-1-5-21-3432357439-2527700510-3695448560-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS HKU\S-1-5-21-3432357439-2527700510-3695448560-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS HKU\S-1-5-21-3432357439-2527700510-3695448560-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS&q={searchTerms} DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes SearchScopes: HKU\S-1-5-21-3432357439-2527700510-3695448560-1001 -> {BF196A2B-DA98-4E8E-86F5-859624A780D8} URL = FF NewTab: about:newtab FF SearchPlugin: C:\Users\Hubert\AppData\Roaming\Mozilla\Firefox\Profiles\vb299q0u.default\searchplugins\webssearches.xml [2016-01-08] FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Hubert\AppData\Roaming\Mozilla\Firefox\Profiles\vb299q0u.default\extensions\deskCutv2@gmail.com => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Hubert\AppData\Roaming\Mozilla\Firefox\Profiles\vb299q0u.default\extensions\yahooprotected@gmail.com => nie znaleziono FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Hubert\AppData\Roaming\Mozilla\Firefox\Profiles\vb299q0u.default\extensions\default_newtabff@gmail.com => nie znaleziono StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.yoursites123.com/?type=sc&ts=1452244837&z=0c8af0a2e08e90845239e89gczaw1o0o9z9z6bfodb&from=wpm01073&uid=TOSHIBAXMQ01ABD075_53IGFBJUSXX53IGFBJUS R2 WdMan; C:\ProgramData\JWdMJ\WdMan.exe [326656 2016-01-08] (TU-Funs LIMITED) [Brak podpisu cyfrowego] S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-01-08] () C:\Windows\System32\DRIVERS\EsgScanner.sys C:\ProgramData\1b8399e8-64f7-0 C:\ProgramData\1b8399e8-3e91-1 2016-01-08 10:21 - 2016-01-08 10:22 - 00000000 ____D C:\Program Files (x86)\WinZipper 2016-01-08 10:21 - 2016-01-08 10:21 - 00000000 ____D C:\Users\Hubert\AppData\Roaming\WinZipper 2016-01-08 10:20 - 2016-01-08 10:21 - 00000000 ____D C:\ProgramData\JWdMJ 2016-01-08 10:20 - 2016-01-08 10:20 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat C:\ProgramData\hmdfghmbneofghjgaglnnjcopfjgcmnc C:\ProgramData\boost_interprocess EmptyTemp: Plik zapisz pod nazwą [b]fixlist.txt[/b] i umieść obok FRST.exe Uruchom [b]FRST[/b] i kliknij przycisk [b]Fix[/b] (NAPRAW). ---------------------- Jeśli będzie OK, to będziemy kończyć: Otwórz Notatnik i wklej w nim: DeleteQuarantine: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW). przez SHIFT+DEL usuń pozostały folder C:\FRST. Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie. . 1
Hzz komentarz 8 stycznia 2016 Autor komentarz 8 stycznia 2016 Problem zniknął, bardzo dziękuję za szybką i rzeczową pomoc :)
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.