Jak usunąć Yoursites123? Wyniki skanowania FRST64 w załączniku

Cytat:

Task: {899FA9DA-3750-4948-8C76-776182B82411} - System32\Tasks\Opera N Saturday => C:\Program Files (x86)\Opera\launcher.exe [2015-11-25] (Opera Software)
Task: {95F79A2A-0AE7-4337-B2F6-D35B48192ABA} - System32\Tasks\Opera N Sunday => C:\Program Files (x86)\Opera\launcher.exe [2015-11-25] (Opera Software)
ShortcutWithArgument: C:\Users\Admin\Desktop\Facebook.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847 <==== UWAGA
ShortcutWithArgument: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847 <==== UWAGA
ShortcutWithArgument: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847 <==== UWAGA
ShortcutWithArgument: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847 <==== UWAGA
ShortcutWithArgument: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847 <==== UWAGA
ShortcutWithArgument: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847 <==== UWAGA
ShortcutWithArgument: C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847 <==== UWAGA
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847 <==== UWAGA
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847 <==== UWAGA
HKU\S-1-5-21-2731251349-3574837984-1868100601-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847
HKU\S-1-5-21-2731251349-3574837984-1868100601-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847
SearchScopes: HKU\S-1-5-21-2731251349-3574837984-1868100601-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2731251349-3574837984-1868100601-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847
FF DefaultSearchEngine: yoursites123
FF SelectedSearchEngine: yoursites123
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q332w7gx.default\searchplugins\yoursites123.xml [2015-12-15]
FF Extension: YahooToolsProtected - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q332w7gx.default\extensions\yahooprotected@gmail.com [2015-11-25] [Brak podpisu cyfrowego]
FF Extension: FirefixTab - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q332w7gx.default\extensions\deskCutv2@gmail.com [2015-12-09] [Brak podpisu cyfrowego]
FF Extension: Default NewTab - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q332w7gx.default\extensions\default_newtabff@gmail.com [2015-12-14] [Brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q332w7gx.default\extensions\deskCutv2@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q332w7gx.default\extensions\yahooprotected@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q332w7gx.default\extensions\default_newtabff@gmail.com
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe hxxp://www.yoursites123.com/?type=sc&ts=1450084970&z=94f9c9c9087cf052575d5f5g1zaw5e7e4bfz5tfm8e&from=wpm07173&uid=WDCXWD5000LPVX-08V0TT5_WD-WX31AC3M0847M0847
R2 IhPul; C:\Users\Admin\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-14] (tsvr.com)
2015-12-14 10:24 - 2015-12-14 10:25 - 00000000 ____D C:\ProgramData\DWdMD
2015-12-14 10:23 - 2015-12-14 10:23 - 00000000 ____D C:\Users\Admin\AppData\Roaming\TSv
2015-11-25 18:29 - 2015-12-14 10:22 - 00000000 ____D C:\ProgramData\1WMiniPro1
EmptyTemp: