Elektroda.pl
Elektroda.pl
X
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Yoursites123.com - jak się pozbyć ?

Julian257 13 Gru 2015 21:05 606 2
  • #1 13 Gru 2015 21:05
    Julian257
    Poziom 7  

    Mnie też dopadło Yoursites123.

    Bardzo proszę o pomoc.

    0 2
  • Pomocny post
    #2 13 Gru 2015 21:17
    Kolobos
    Spec od komputerów

    Odinstaluj: PC Cleaners

    Fixlist.txt dla FRST:
    Task: {1D62A74F-C64C-4A83-941F-16FF3C57E663} - System32\Tasks\Opera scheduled Autoupdate 1434739219 => C:\Program Files (x86)\Opera\launcher.exe [2015-12-04] (Opera Software)
    Task: {48640037-F682-4322-B2D9-A40110225A62} - System32\Tasks\PC Cleaner Pro Update Job => C:\ProgramData\PC Cleaners\PCCleaners.exe [2015-12-13] (PC Cleaners Inc.) <==== ATTENTION
    AlternateDataStreams: C:\ProgramData\.rdata:X
    HKU\S-1-5-21-4034388935-1031848237-3511601874-1000\...\Run: [PC Cleaners] => C:\ProgramData\PC Cleaners\PCCleaners.exe [67533008 2015-12-13] (PC Cleaners Inc.)
    HKU\S-1-5-21-4034388935-1031848237-3511601874-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1...p;uid=ST1000DM003-1CH162_S1DEX52KXXXXS1DEX52K
    HKU\S-1-5-21-4034388935-1031848237-3511601874-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1...p;uid=ST1000DM003-1CH162_S1DEX52KXXXXS1DEX52K
    SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&...T1000DM003-1CH162_S1DEX52KXXXXS1DEX52K&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-4034388935-1031848237-3511601874-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&...T1000DM003-1CH162_S1DEX52KXXXXS1DEX52K&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-4034388935-1031848237-3511601874-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&...T1000DM003-1CH162_S1DEX52KXXXXS1DEX52K&q={searchTerms}
    StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=144...p;uid=ST1000DM003-1CH162_S1DEX52KXXXXS1DEX52K




    CHR StartupUrls: Default -> "hxxp://www.yoursites123.com/?type=hp&ts=1449713378&z=214ca7522fa9eff6db2cd4agdz6z2t1m8g4c1c1m8w&from=ient07021&uid=ST1000DM003-1CH162_S1DEX52KXXXXS1DEX52K"
    CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
    CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
    StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.yoursites123.com/?type=sc&ts=1...p;uid=ST1000DM003-1CH162_S1DEX52KXXXXS1DEX52K
    2015-12-13 15:31 - 2015-12-13 17:20 - 00000000 ____D C:\ProgramData\PC1Data
    2015-12-13 15:31 - 2015-12-13 15:31 - 00003656 _____ C:\Windows\System32\Tasks\PC Cleaner Pro Update Job
    2015-12-13 15:31 - 2015-12-13 15:31 - 00000735 _____ C:\Users\Julo\Desktop\PC Cleaner Pro.lnk
    2015-12-13 15:31 - 2015-12-13 15:31 - 00000000 ____D C:\Users\Julo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Cleaners
    2015-12-13 15:31 - 2015-12-13 15:31 - 00000000 ____D C:\ProgramData\PC Cleaners
    2015-12-13 15:28 - 2015-12-13 15:28 - 06345936 ____R (PC Cleaners) C:\ProgramData\pclunst.exe
    2015-12-13 14:43 - 2015-12-13 14:43 - 00000001 _____ C:\Windows\SysWOW64\pl.html
    2015-12-10 03:09 - 2015-12-10 03:10 - 00000000 ____D C:\ProgramData\UWdMU
    2015-12-10 03:09 - 2015-12-10 03:09 - 00000000 ____D C:\Users\Julo\AppData\Roaming\TSv
    2015-12-10 03:09 - 2015-12-10 03:09 - 00000000 ____D C:\ProgramData\aWdMa
    2015-12-13 15:28 - 2015-12-13 15:28 - 6345936 ____R (PC Cleaners) C:\ProgramData\pclunst.exe
    EmptyTemp:

    W FRST wybierz Napraw.

    Usun katalog C:\FRST po wykonaniu.

    1
  • #3 13 Gru 2015 21:25
    Julian257
    Poziom 7  

    Dziękuje! Miłego wieczoru.

    0