Fixlist.txt dla FRST:
ShortcutWithArgument: C:\Documents and Settings\Darek\Menu Start\Programy\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49 <==== UWAGA
ShortcutWithArgument: C:\Documents and Settings\Darek\Menu Start\Programy\Akcesoria\Narzędzia systemowe\Internet Explorer (bez dodatków).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49 <==== UWAGA
ShortcutWithArgument: C:\Documents and Settings\Darek\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Opera.lnk -> C:\Program Files\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49 <==== UWAGA
ShortcutWithArgument: C:\Documents and Settings\Darek\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Uruchom przeglądarkę Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49 <==== UWAGA
(TFuns LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\4WdM4\WdMan.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49&q={searchTerms}
HKU\S-1-5-21-1454471165-2077806209-1177238915-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49
HKU\S-1-5-21-1454471165-2077806209-1177238915-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1454471165-2077806209-1177238915-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki" <======= UWAGA
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1454471165-2077806209-1177238915-1004 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1454471165-2077806209-1177238915-1004 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.yoursites123.com/?type=sc&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe hxxp://www.yoursites123.com/?type=sc&ts=1449724725&z=e5416b470f6271da859b4bfg1zez3t7meofzdm9oaw&from=ient07021&uid=ST9100824AS_5PL0ZJ49XXXX5PL0ZJ49
R2 WdMan; C:\Documents and Settings\All Users\Dane aplikacji\4WdM4\WdMan.exe [333312 2015-12-04] (TFuns LIMITED) [Brak podpisu cyfrowego]
U1 eabfiltr; Brak ImagePath
U1 WS2IFSL; Brak ImagePath
2015-12-10 11:10 - 2015-12-10 11:10 - 00000000 ____D C:\Documents and Settings\Darek\Dane aplikacji\eCyber
2015-12-10 06:19 - 2015-12-10 09:42 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\4WdM4
2015-12-10 06:18 - 2015-12-10 06:18 - 00000000 ____D C:\Documents and Settings\All Users\Dane aplikacji\SWdMS
2015-12-10 23:20 - 2015-10-26 20:46 - 00000460 _____ C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1445888763.job
EmptyTemp:
