Elektroda.pl
Elektroda.pl
X
CControls
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Yoursearching.com - logi FRST - Strona wyszukiwarki - jak usunąć?

kamilfosniak 06 Sty 2016 11:18 699 3
  • CControls
  • #2 06 Sty 2016 11:26
    Acorus 20
    Spec od komputerów

    Log FRST.txt jest pusty.

    0
  • CControls
  • #4 06 Sty 2016 16:00
    Kolobos
    Spec od komputerów

    Odinstaluj:
    Dll-Files Fixer
    REACHit
    WarThunder
    yoursearching
    Opera

    W ustawieniach Chrome usun przywracanie zestawu stron po starcie.

    Obok frst.exe utworz plik fixlist.txt z zawartoscia:
    Task: {1A202224-A65B-41CE-8A13-BD0E5C330885} - System32\Tasks\{23C8FC41-CDFD-4828-8D82-CE68C4C210CB} => pcalua.exe -a "G:\Ubisoft\Ivory Tower\The Crew (Russian)\Support\InsHelper.exe" -c CallUplayProtocol Uninstall 507
    Task: {2480C75F-49BC-4E3D-BAF8-B0FE1532FC5D} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo)
    Task: {296D303C-C98A-42A4-8A04-4167A80B9B5E} - System32\Tasks\Lenovo\REACHit Agent Update => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2015-12-10] (Lenovo)
    Task: {61E86401-D30C-4CBD-8535-95F67667CE2B} - System32\Tasks\DLL-Files.Com Fixer_Updates => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2014-06-10] (Dll-FIles.Com)
    Task: {70A5C81B-7E02-4D74-9B92-4210E80F9445} - System32\Tasks\DLL-Files FixerASKUSER => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2014-06-10] (Dll-FIles.Com)
    Task: {891B6A49-1ED9-4219-A8E5-A067CC8B8AF9} - System32\Tasks\Opera scheduled Autoupdate 1420934294 => C:\Program Files (x86)\Opera\launcher.exe [2015-12-04] (Opera Software)
    Task: {AC11151A-25B2-4C9A-8C82-F2BFC67B1A0A} - System32\Tasks\RDReminder => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2014-06-10] (Dll-FIles.Com)
    Task: {B475F51C-3D5C-4D99-A82C-5040DB9080BD} - System32\Tasks\DLL-Files.Com Fixer_MONTHLY => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2014-06-10] (Dll-FIles.Com)
    Task: {C7630E4B-1DAF-4689-97EC-4AFC47106C37} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [2015-12-10] (Lenovo)
    Task: C:\windows\Tasks\DLL-Files FixerASKUSER.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
    Task: C:\windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
    Task: C:\windows\Tasks\DLL-Files.Com Fixer_Updates.job => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
    ShortcutWithArgument: C:\Users\kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://mmotraffic.com/catalog/goplay/1000932/...FyC0FtDtB2RtBtDtCyCtDtCtDtCtCzyyEtDyDyDyCtAtC
    ShortcutWithArgument: C:\Users\kamil\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursearching.com/?type=sc&ts=1451...rnl&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206




    ShortcutWithArgument: C:\Users\kamil\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WarThunder.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://mmotraffic.com/catalog/goplay/1000932/...FyC0FtDtB2RtBtDtCyCtDtCtDtCtCzyyEtDyDyDyCtAtC
    ShortcutWithArgument: C:\Users\kamil\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursearching.com/?type=sc&ts=1451...rnl&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206
    ShortcutWithArgument: C:\Users\kamil\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursearching.com/?type=sc&ts=1451...rnl&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206
    ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursearching.com/?type=sc&ts=1451...rnl&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206
    ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursearching.com/?type=sc&ts=1451...rnl&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206
    ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursearching.com/?type=sc&ts=1451...rnl&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206
    ShortcutWithArgument: C:\Users\Public\Desktop\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursearching.com/?type=sc&ts=1451...rnl&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206
    Hosts:
    (TData.com) C:\Program Files (x86)\TDataDld\TData.exe
    HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\MountPoints2: {590cc32a-985d-11e4-be79-c8f733d3f332} - "F:\Setup.exe"
    HKU\S-1-5-21-1735395495-2726210869-181527219-1002\...\MountPoints2: {dd896e39-a2b5-11e4-be84-1867b02a5482} - "H:\AutoRun.exe"
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2015-02-10]
    ShortcutTarget: CodecPackTrayMenu.lnk -> C:\windows\SysWOW64\C2MP\TrayMenu.exe ()
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackUpdateChecker.lnk [2015-02-10]
    ShortcutTarget: CodecPackUpdateChecker.lnk -> C:\windows\SysWOW64\C2MP\UpdateChecker.exe ()
    HKU\S-1-5-21-1735395495-2726210869-181527219-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
    URLSearchHook: [S-1-5-21-1735395495-2726210869-181527219-1004] UWAGA => Brak domyślnego URLSearchHook
    SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-1735395495-2726210869-181527219-1002 -> {779A2E64-4866-4DC0-893A-609F3F79FCD6} URL =
    SearchScopes: HKU\S-1-5-21-1735395495-2726210869-181527219-1002 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
    CHR HomePage: Default -> hxxp://www.yoursearching.com/?type=hp&ts=1451...rnl&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206
    CHR StartupUrls: Default -> "hxxp://www.yoursearching.com/?type=hp&ts=1451673691&z=783819e5222d618a1c365fagczcwdg4q4mfc6qdtcg&from=cornl&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206"
    CHR DefaultSearchURL: Default -> hxxp://yoursearching.com/web/?type=ds&ts=1451...&uid=st1000lm024xhn-m101mbb_s2rqj9ed205206&q={searchTerms}
    CHR DefaultSearchKeyword: Default -> yoursearching
    R2 TDataSvr; C:\Program Files (x86)\TDataDld\TData.exe [133360 2015-12-31] (TData.com)
    S2 MustangService_2015_10_10; C:\ProgramData\TempMoudleSet\MustangSer1026.exe [X]
    2016-01-01 19:42 - 2016-01-01 19:42 - 00000000 ____D C:\Program Files (x86)\TDataDld
    2016-01-01 19:41 - 2016-01-01 19:42 - 00000000 ____D C:\Users\kamil\AppData\Roaming\yoursearching
    2016-01-01 19:41 - 2016-01-01 19:41 - 00002063 _____ C:\Users\kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk
    2016-01-01 19:41 - 2016-01-01 19:41 - 00000000 ____D C:\Users\kamil\AppData\Roaming\WarThunder
    2015-12-12 15:12 - 2015-12-12 15:12 - 00001820 _____ C:\Users\kamil\AppData\Roaming\Microsoft\Windows\Start Menu\REACHit Drive.lnk
    2016-01-06 14:48 - 2015-04-26 13:36 - 00000306 _____ C:\windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job
    2016-01-03 16:38 - 2015-04-26 13:38 - 00000314 _____ C:\windows\Tasks\DLL-Files FixerASKUSER.job
    2016-01-02 14:47 - 2015-04-26 13:36 - 00000322 _____ C:\windows\Tasks\DLL-Files.Com Fixer_Updates.job
    2015-12-17 04:19 - 2015-11-17 19:57 - 00000000 ____D C:\Program Files (x86)\RayDld
    2015-12-14 05:44 - 2015-11-17 19:57 - 00000000 ____D C:\ProgramData\rWMiniPror
    2015-12-12 15:12 - 2015-11-17 19:57 - 00000000 ____D C:\windows\System32\Tasks\Lenovo
    2015-12-12 15:12 - 2015-11-17 19:57 - 00000000 ____D C:\Users\kamil\AppData\Local\Downloaded Installations
    2015-12-10 15:41 - 2015-10-01 10:38 - 00003900 _____ C:\windows\System32\Tasks\Opera scheduled Autoupdate 1420934294
    EmptyTemp:

    W FRST wybierz Napraw.

    Usun katalog C:\Frst i to wszystko.

    0