Elektroda.pl
Elektroda.pl
X
CControls
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

MSI S12 - Jak odinstalować oursurfing

niedzwiedzpl 20 Maj 2015 22:06 1218 2
  • CControls
  • #2 21 Maj 2015 09:35
    Acorus 20
    Spec od komputerów

    Odinstaluj Adobe Reader 9.5.0 - Polish. Otwórz notatnik systemowy i wklej:

    Cytat:
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> "C:\Users\Dell\AppData\Local\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe" No File
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> "C:\Users\Dell\AppData\Local\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe" No File
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> "C:\Users\Dell\AppData\Local\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe" No File
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> "C:\Users\Dell\AppData\Local\Google\Chrome\Application\42.0.2311.90\delegate_execute.exe" No File
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Dell\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Dell\AppData\Local\Google\Update\1.3.26.9\psuser.dll No File
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Dell\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll No File
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Dell\AppData\Local\Google\Update\1.3.25.11\psuser.dll No File
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> "C:\Users\Dell\AppData\Local\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe" No File
    CustomCLSID: HKU\S-1-5-21-4213573106-4107421796-4251913024-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Dell\AppData\Local\Google\Update\1.3.26.9\psuser.dll No File
    Task: {B78A8BB3-0C93-4F67-B25D-88112B64C031} - System32\Tasks\hBvXwVM5X975fcPyvd8lKUElqp9 => C:\Users\Dell\AppData\Roaming\hBvXwVM5X975fcPyvd8lKUElqp9.exe <==== ATTENTION
    Task: {B97615C2-EC08-4372-9A1A-E0CCE7FACF81} - System32\Tasks\NOJj4qn => C:\Users\Dell\AppData\Roaming\NOJj4qn.exe <==== ATTENTION
    Task: {CA8FAF0B-8FEF-48FE-BEBA-D8D80D3B26D8} - System32\Tasks\{34430EBC-BC04-460F-B051-6450EE914AB1} => pcalua.exe -a C:\Users\Dell\AppData\Roaming\oursurfing\UninstallManager.exe -c -ptid=smt
    Task: C:\Windows\Tasks\hBvXwVM5X975fcPyvd8lKUElqp9.job => C:\Users\Dell\AppData\Roaming\hBvXwVM5X975fcPyvd8lKUElqp9.exe <==== ATTENTION




    Task: C:\Windows\Tasks\NOJj4qn.job => C:\Users\Dell\AppData\Roaming\NOJj4qn.exe <==== ATTENTION
    HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
    HKLM\...\Run: [cpuminer] => C:\Windows\system32\cpuminer-gw64.exe [1346048 2015-05-20] ()
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds&ts...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds&ts...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds&ts...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds&ts...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    HKU\S-1-5-21-330872248-3995108307-3225967-1002\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=dspp&...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    HKU\S-1-5-21-330872248-3995108307-3225967-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
    HKU\S-1-5-21-330872248-3995108307-3225967-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=dspp&...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?type=ds&ts...D5000LPVX-22V0TT0_WD-WX51E93M8282M8282&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-330872248-3995108307-3225967-1002 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.oursurfing.com/web/?utm_source=b&a...282&ts=1432101932&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-330872248-3995108307-3225967-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?utm_source=b&a...282&ts=1432101932&type=default&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-330872248-3995108307-3225967-1002 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.oursurfing.com/web/?utm_source=b&a...282&ts=1432101932&type=default&q={searchTerms}
    StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.oursurfing.com/?type=sc&ts=143...d=WDCXWD5000LPVX-22V0TT0_WD-WX51E93M8282M8282
    CHR StartupUrls: Default -> "hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP", "hxxp://www.oursurfing.com/?type=hp&ts=1432101832&z=b0ba5eb659bc86986f8a5e0g1z6c9o0g8e7g0b2o6b&from=amt&uid=WDCXWD5000LPVX-22V0TT0_WD-WX51E93M8282M8282", "hxxp://www.google.com/"
    CHR Extension: (Bookmark Manager) - C:\Users\Marta N\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-17]
    CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
    CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
    S2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [X]
    S2 scsvc_1.10.0.16; "C:\Program Files (x86)\SuperClick_1.10.0.16\Service\scsvc.exe" [X]
    U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X]
    2015-05-20 21:45 - 2015-05-20 21:51 - 00000000 ____D () C:\AdwCleaner
    2015-05-20 17:03 - 2015-05-20 17:05 - 00000000 ____D () C:\Users\Marta N\SupTab
    2015-05-20 15:09 - 2015-05-20 15:09 - 00000000 _____ () C:\autoexec.bat
    2015-05-20 15:04 - 2015-05-20 15:04 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Marta N\Downloads\sh-remover.exe
    2015-05-20 08:35 - 2015-05-20 21:05 - 00000000 ____D () C:\Program Files (x86)\LuckyTab
    2015-05-20 08:35 - 2015-05-20 08:35 - 00003398 _____ () C:\Windows\System32\Tasks\LuckyTab
    2015-05-20 08:35 - 2015-05-20 08:35 - 00000000 ____D () C:\Users\Marta N\AppData\Roaming\Microsoft\Windows\Start Menu\LuckyTab
    2015-05-20 08:08 - 2015-05-20 08:08 - 00000000 ____D () C:\Users\Marta N\AppData\Roaming\cpuminer
    2015-05-20 08:06 - 2015-05-20 08:06 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
    2015-05-20 08:05 - 2015-05-20 21:05 - 00000000 ____D () C:\Program Files (x86)\XTab
    2015-05-20 07:28 - 2015-05-20 07:28 - 01346048 _____ () C:\Windows\system32\cpuminer-gw64.exe
    2015-05-20 07:26 - 2015-05-20 07:26 - 00000423 _____ () C:\Windows\system32\cpuminer-conf.json
    EmptyTemp:

    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix. Zainstaluj Foxit Reader http://ninite.com/foxit/

    0
  • CControls
  • #3 15 Sie 2015 11:18
    niedzwiedzpl
    Poziom 9  

    @Acorus 20 dzięki za pomoc.
    MSI S12 - Jak odinstalować oursurfing

    0