Jak skutecznie usunąć z komputera Yoursites123? Logi z FRST.

Cytat:

ShortcutWithArgument: C:\Users\Mateusz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231 <==== UWAGA
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231 <==== UWAGA
IFEO\SppExtComObj.exe: [Debugger] C:\Windows\SECOH-QAD.exe
GroupPolicy: Ograniczenia - Chrome <======= UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3163230144-1433449461-83505656-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3163230144-1433449461-83505656-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3163230144-1433449461-83505656-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3163230144-1433449461-83505656-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3163230144-1433449461-83505656-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231&q={searchTerms}
BHO-x32: Discovery App -> {ba32987d-db80-4ccb-a8bb-f812b5421c0f} -> C:\Program Files (x86)\Discovery App\Extensions\ba32987d-db80-4ccb-a8bb-f812b5421c0f.dll => Brak pliku
StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe hxxp://www.yoursites123.com/?type=sc&ts=1450066159&z=3d30399d4767eb477376171gfzdw0e6edq6qdg5wab&from=wpm07173&uid=ST1000LM024XHN-M101MBB_S2Y4J9ADC02231
R2 IhPul; C:\Users\Mateusz\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-08] (tsvr.com)
S2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe -s [X]
S3 mfeaack01; \Device\mfeaack01.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
S1 wfdrvr_vw_1_10_0_28; system32\drivers\wfdrvr_vw_1_10_0_28.sys [X]
2015-12-14 05:09 - 2015-12-14 05:09 - 00000000 ____D C:\Users\Mateusz\AppData\Roaming\TSv
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
EmptyTemp:

Mateusz00 napisał:

Wesołych świąt.