Elektroda.pl
Elektroda.pl
X
CControls
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

DNS Unlocker - jak usunąć? - RoxeR1000

RoxeR1000 06 Mar 2016 03:37 579 3
  • CControls
  • Pomocny post
    #2 06 Mar 2016 07:47
    krzychupar
    Poziom 40  

    Otwórz notatnik systemowy i wklej:

    Task: {C6FFCED0-F3F0-47EA-B408-3F25AFEDCE61} - \{09090B47-7E7A-7F7F-0511-09057E7D110F} -> Keine Datei <==== ACHTUNG
    CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
    Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
    Tcpip\..\Interfaces\{5d712af5-950e-4dce-a629-6e1334009dbf}: [DhcpNameServer] 192.168.178.1
    Tcpip\..\Interfaces\{a14d1063-a5de-40c6-a275-01dbed9c0943}: [DhcpNameServer] 192.168.178.1
    SearchScopes: HKLM -> OldSearch URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKU\S-1-5-21-1140559135-3121401589-4266997689-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
    SearchScopes: HKU\S-1-5-21-1140559135-3121401589-4266997689-1001 -> OldSearch URL =
    CHR HomePage: Default -> hxxp://www.istartsurf.com/?type=hp&ts=144...uid=samsungxmzhpu256hcgl-00005_s24snyafb07439
    CHR StartupUrls: Default -> "hxxps://www.malwarebytes.org/restorebrowser/"
    CHR DefaultSearchURL: Default -> hxxp://www.istartsurf.com/web/?type=ds&ts...sungxmzhpu256hcgl-00005_s24snyafb07439&q={searchTerms}
    CHR DefaultSearchKeyword: Default -> istartsurf
    OPR StartupUrls: "hxxp://Google.com/h?eq=U0EeCFZVBB8SRggSdwheAwBEExgQdF0KTA1AEFMOIgANBBRAE1QaJABcAw8TFQcFIk0FA1oDB0VXfV5bFElXTwhwJVhKAlE6T1pU"
    2016-03-06 03:28 - 2016-03-06 03:29 - 02374144 _____ (Farbar) C:\Users\Denis\Downloads\FRST64 (1).exe
    2016-03-06 03:23 - 2016-03-06 03:23 - 00015722 _____ C:\Users\Denis\Downloads\Addition (1).txt
    2016-03-06 03:22 - 2016-03-06 03:22 - 00051509 _____ C:\Users\Denis\Downloads\FRST (1).txt
    2016-03-06 03:18 - 2016-03-06 03:18 - 01518592 _____ C:\Users\Denis\Downloads\adwcleaner_5.037 (1).exe
    2016-03-06 03:18 - 2016-03-06 03:18 - 00000000 ____D C:\AdwCleaner
    2016-02-26 00:27 - 2016-03-06 03:06 - 00000080 _____ C:\Users\Denis\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
    EmptyTemp:

    Plik zapisz pod nazwą fixlist.txt i umieść w folderze C:\Users\Denis\Downloads\FRST64.exe.
    Uruchom FRST i kliknij w Fix/Napraw.

    0
  • CControls
  • Pomocny post
    #3 06 Mar 2016 08:28
    Kolobos
    Spec od komputerów

    Dodaj do fixlist.txt jeszcze to:
    Task: {35849AE9-1552-419F-8A50-F4CACFF8A9FB} - System32\Tasks\{A046FA7E-25CE-0EB7-7378-801C194FFC38} => C:\WINDOWS\system32\regsvr32.exe [2015-10-30] (Microsoft Corporation)
    Task: {C6FFCED0-F3F0-47EA-B408-3F25AFEDCE61} - \{09090B47-7E7A-7F7F-0511-09057E7D110F} -> Keine Datei <==== ACHTUNG
    CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
    OPR Extension: (ProxFlow) - C:\Users\Denis\AppData\Roaming\Opera Software\Opera Stable\Extensions\pfhgklkklombiikjckbfpkadmlodekgo [2015-10-31]
    2016-03-06 03:28 - 2016-03-06 03:29 - 02374144 _____ (Farbar) C:\Users\Denis\Downloads\FRST64 (1).exe
    2016-03-06 03:18 - 2016-03-06 03:18 - 01518592 _____ C:\Users\Denis\Downloads\adwcleaner_5.037 (1).exe
    2016-03-06 03:13 - 2016-03-06 03:13 - 00000000 _____ C:\autoexec.bat
    2016-03-06 03:10 - 2016-03-06 03:11 - 03237248 _____ (Enigma Software Group USA, LLC.) C:\Users\Denis\Downloads\sh-remover.exe
    2016-03-03 22:58 - 2016-03-03 22:59 - 00003882 _____ C:\WINDOWS\System32\Tasks\{A046FA7E-25CE-0EB7-7378-801C194FFC38}
    2016-03-03 22:58 - 2016-03-03 22:59 - 00000000 ____D C:\ProgramData\a78930ed
    2016-03-03 22:59 - 2016-01-24 01:23 - 00000000 ____D C:\ProgramData\a185f4f0-58c5-1
    2016-03-03 22:59 - 2016-01-24 01:23 - 00000000 ____D C:\ProgramData\a185f4f0-0c61-0
    2016-03-03 12:18 - 2015-10-14 11:37 - 00004010 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1444819077

    Z poprzednigo usun:
    Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
    Tcpip\..\Interfaces\{5d712af5-950e-4dce-a629-6e1334009dbf}: [DhcpNameServer] 192.168.178.1
    Tcpip\..\Interfaces\{a14d1063-a5de-40c6-a275-01dbed9c0943}: [DhcpNameServer] 192.168.178.1

    0
  • #4 06 Mar 2016 15:55
    RoxeR1000
    Poziom 12  

    Dzięki wielkie panowie! :) Pomogło!

    0