logo elektroda
logo elektroda
X
logo elektroda
REKLAMA
REKLAMA
Adblock/uBlockOrigin/AdGuard mogą powodować znikanie niektórych postów z powodu nowej reguły.

Jak usunąć oursurfing z przeglądarki w Windows 8.1?

miszon 17 Maj 2015 14:25 1776 4
REKLAMA
  • #1 14699865
    miszon
    Poziom 9  
    Posty: 99
    Ocena: 7
    Dzień dobry

    Proszę o pomoc jakieś straszne ustrojstwa dostały mi się na komputer.
    AdwC i mbam opcje skan/usuń. Może dla pewności dodam też raporty z usuwania.
    Załączniki:
    • mbam.txt (7.44 KB) Musisz być zalogowany, aby pobrać ten załącznik.
    • FRST.txt (33.32 KB) Musisz być zalogowany, aby pobrać ten załącznik.
    • AdwCleaner_S25_.txt (8.46 KB) Musisz być zalogowany, aby pobrać ten załącznik.
    • Addition.txt (33.25 KB) Musisz być zalogowany, aby pobrać ten załącznik.
  • REKLAMA
  • Pomocny post
    #2 14700076
    Acorus 20
    Poziom 43  
    Posty: 10541
    Pomógł: 3247
    Ocena: 1063
    Otwórz notatnik systemowy i wklej:

    Cytat:
    Task: {5AD277BF-83F7-4E80-8741-06EFD1BC9D49} - System32\Tasks\Installer_iwebar => C:\Users\user\AppData\Local\Installer\Installiwebar_8307\DCytaiesmt_smtyc_setup.exe [2015-05-17] () <==== ATTENTION
    Task: {7D45FC79-CA41-4739-A0F7-83A51F3A3E2D} - System32\Tasks\SPBIW_UpdateTask_Time_313738383839373530392d5b5b4a346c4123452a5a556c => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
    Task: {F78C6D4D-EEB5-4347-A572-D325B3A749E9} - System32\Tasks\Inst_Rep => C:\Users\user\AppData\Local\Installer\Install_1392\DCytaiesmt_smtyc_setup.exe [2015-05-17] ()
    Task: C:\Windows\Tasks\31a9bbb3-f513-4cfc-970d-05e7309dd748-1-6.job => C:\Program Files (x86)\SensePlus\31a9bbb3-f513-4cfc-970d-05e7309dd748-1-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\31a9bbb3-f513-4cfc-970d-05e7309dd748-1-7.job => C:\Program Files (x86)\SensePlus\31a9bbb3-f513-4cfc-970d-05e7309dd748-1-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\31a9bbb3-f513-4cfc-970d-05e7309dd748-5.job => C:\Program Files (x86)\SensePlus\31a9bbb3-f513-4cfc-970d-05e7309dd748-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\31a9bbb3-f513-4cfc-970d-05e7309dd748-5_user.job => C:\Program Files (x86)\SensePlus\31a9bbb3-f513-4cfc-970d-05e7309dd748-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\31a9bbb3-f513-4cfc-970d-05e7309dd748-6.job => C:\Program Files (x86)\SensePlus\31a9bbb3-f513-4cfc-970d-05e7309dd748-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\31a9bbb3-f513-4cfc-970d-05e7309dd748-7.job => C:\Program Files (x86)\SensePlus\31a9bbb3-f513-4cfc-970d-05e7309dd748-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
    HKLM-x32\...\Run: [wsUpdate] => C:\Users\user\AppData\Roaming\Microsoft\wsUpdate.exe [192512 2015-05-17] ()
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001\...\Run: [wsUpdate] => C:\Users\user\AppData\Roaming\Microsoft\wsUpdate.exe [192512 2015-05-17] ()
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [wsUpdate] => C:\Users\user\AppData\Roaming\Microsoft\wsUpdate.exe [192512 2015-05-17] ()
    Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Steam.lnk
    ShortcutTarget: Steam.lnk -> C:\Users\user\AppData\Local\6b3938\svńhîst.exe (No File)
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oursurfing.com/?type=hp&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.oursurfing.com/?type=hp&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds&ts...T1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfing.com/?type=hp&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfing.com/?type=hp&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds&ts...T1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL&q={searchTerms}
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oursurfing.com/?type=hp&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds&ts...T1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL&q={searchTerms}
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfing.com/?type=hp&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds&ts...T1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL&q={searchTerms}
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.oursurfing.com/?type=hp&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds&ts...T1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL&q={searchTerms}
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfing.com/?type=hp&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    HKU\S-1-5-21-2070900500-1894314203-3353238036-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds&ts...T1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL&q={searchTerms}
    StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.oursurfing.com/?type=sc&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO-x32: No Name -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Users\user\AppData\Roaming\Microsoft\uspion.dll ()
    CHR Extension: (Bookmark Manager) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-09]
    CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.oursurfing.com/?type=sc&ts=143...p;uid=ST1000DM003-1CH162_Z1D6JEBLXXXXZ1D6JEBL
    2015-05-17 13:47 - 2015-05-17 13:55 - 00000000 ____D () C:\Users\user\AppData\Roaming\oursurfing
    2015-05-17 13:47 - 2015-05-17 13:47 - 00004234 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313738383839373530392d5b5b4a346c4123452a5a556c
    2015-05-17 13:47 - 2015-05-17 13:47 - 00003982 _____ () C:\Windows\System32\Tasks\Wsutil Update
    2015-05-17 13:47 - 2015-05-17 13:47 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
    2015-05-17 13:47 - 2015-05-17 13:47 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
    2015-05-17 13:46 - 2015-05-17 13:46 - 00172032 _____ (Jin Hui E-mail: jinhui(_at_)jcomsoft.com Web: http://www.jcomsoft.com) C:\Windows\SysWOW64\AniGIF.ocx
    2015-05-17 13:46 - 2015-05-17 13:46 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
    2015-04-30 13:57 - 2015-05-17 14:02 - 00000000 ____D () C:\AdwCleaner
    C:\Windows\SysWOW64\KBDRR.DLL
    C:\Windows\SysWOW64\KBDÂU.DLL
    C:\Windows\SysWOW64\KBDBULG.DLL
    EmptyTemp:


    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix.
  • REKLAMA
  • #3 14700147
    miszon
    Poziom 9  
    Posty: 99
    Ocena: 7
    Dziękuję za pomoc wszystko jest ok. Rozumiem że plik c:\frst mam usunąć
  • REKLAMA
  • Pomocny post
    #4 14700158
    Acorus 20
    Poziom 43  
    Posty: 10541
    Pomógł: 3247
    Ocena: 1063
    Tak. Jak zawsze po usuwaniu.
  • #5 14700168
    miszon
    Poziom 9  
    Posty: 99
    Ocena: 7
    Czyli wszystko wiem jeszcze raz dziękuję i życzę spokojnej niedzieli.

    Pozdrawiam.
    Jak usunąć oursurfing z przeglądarki w Windows 8.1?
REKLAMA