logo elektroda
logo elektroda
X
logo elektroda
Szukanie Zaawansowane
logo elektroda
REKLAMA
REKLAMA
Adblock/uBlockOrigin/AdGuard mogą powodować znikanie niektórych postów z powodu nowej reguły.

Elex-tech Yac, reklamy - Jak usunąć Elex-tech i uciążliwe reklamy w przegladarce

Proof3soR 21 Lip 2016 11:02 1848 5
REKLAMA
Zgłoś naruszenie prawa
| Nowy temat
  • #1 15821219
    Proof3soR
    Poziom 2  
    Posty: 3
    Witam,
    Jak w temacie jak usunąć YAC Elex-tech oraz Yoursites123? Widziałem poprzednie tematy dotyczące tego problemu lecz nadal nie jestem pewien jak usunąć tego wirusa. W mojej przeglądarce występują również uciążliwe reklamy domyślam się że one też wyskakują przez jakiś niechciany program/wirus. Czy musze pobrać jakiś program ?
    System win. 10
    Z góry dziękuję za pomoc. ;)
  • REKLAMA
  • #2 15821229
    Kolobos
    Spec od komputerów  
    Posty: 85182
    Pomógł: 17174
    Ocena: 10460
    Skoro widziales inne watki to dlaczego nie zamiesciles wymaganych logow z FRST?
  • REKLAMA
  • #3 15821270
    Proof3soR
    Poziom 2  
    Posty: 3
    Logi w załączniku. Nie podałem ich od razu, ponieważ nie wiedziałem jak je stworzyć - pierwszy raz mam tego typu problem. :)
    Załączniki:
    • Shortcut.txt (61.32 KB) Musisz być zalogowany, aby pobrać ten załącznik.
    • Addition_21-07-2016_11-31-56.txt (46.27 KB) Musisz być zalogowany, aby pobrać ten załącznik.
    • FRST_21-07-2016_11-31-57.txt (96.58 KB) Musisz być zalogowany, aby pobrać ten załącznik.
  • REKLAMA
  • Pomocny post
    #4 15821327
    Kolobos
    Spec od komputerów  
    Posty: 85182
    Pomógł: 17174
    Ocena: 10460
    Odinstaluj:
    do-search uninstall
    eBay Worldwide
    YAC(Yet Another Cleaner!) <- Odinstaluj po wykonaniu wszystkiego.

    Uruchom system w trybie awaryjnym.

    Obok frst.exe utworz pliK Fixlist.txt z zawartoscia:
    CloseProcesses:
    Task: {529636B8-F275-461F-A75C-C654DF4D7ED4} - System32\Tasks\Opera scheduled Autoupdate 1448991292 => C:\Program Files (x86)\Opera\launcher.exe [2016-07-01] (Opera Software)
    Task: {8BA29127-B7F0-44EC-93A0-92685979BDC9} - System32\Tasks\{2B6EA38D-CBBB-47DD-B6ED-45A7A3A098CA} => pcalua.exe -a "C:\Program Files (x86)\Elex-tech\YAC\uninstall.exe"
    ShortcutWithArgument: C:\Users\Krzysztof\Desktop\Facebook.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450950565&z=8b43d34c7a7c36701f71241gcz2w9e5taw5edw6zce&from=wpm07173&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450950565&z=8b43d34c7a7c36701f71241gcz2w9e5taw5edw6zce&from=wpm07173&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450950565&z=8b43d34c7a7c36701f71241gcz2w9e5taw5edw6zce&from=wpm07173&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Public\Desktop\Booking.com.lnk -> C:\Program Files\Booking.COM\StartURL.exe () -> hxxp://www.booking.com/index.html?aid=379334
    ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450950565&z=8b43d34c7a7c36701f71241gcz2w9e5taw5edw6zce&from=wpm07173&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Public\Desktop\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    2015-12-17 09:09 - 2015-08-19 08:59 - 00065696 ____N () C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll
    2015-12-17 09:08 - 2015-06-30 04:50 - 00176976 _____ () C:\Program Files (x86)\Elex-tech\YAC\tws\unrar.dll
    2015-12-17 09:08 - 2015-06-30 04:50 - 00087744 ____N () C:\Program Files (x86)\Elex-tech\YAC\tws\unacev2.dll
    (Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
    (Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\...\MountPoints2: {7d72049b-6a63-11e5-8286-2c600c4642a9} - "E:\AutoRun.exe"
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\...\MountPoints2: {dd3e7b45-391f-11e6-832f-2c600c4642a9} - "E:\autorun.exe"
    Tcpip\..\Interfaces\{3726a693-7d3d-4a99-b846-038cf90d303f}: [DhcpNameServer] 40.34.1.55
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://do-search.com/web/?type=ds&ts=1431868489&z=dc89e017d6594a3b6b30c99g0zfcageb0q8b7z7b2c&from=cor&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://do-search.com/web/?type=ds&ts=1431868489&z=dc89e017d6594a3b6b30c99g0zfcageb0q8b7z7b2c&from=cor&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130958716372878219&GUID=681A5062-0890-4D02-A063-F7710A7B9F4C
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKLM-x32 -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://v9.com/web?type=ds&ts=1450680884&from=zzgbkk123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q&q={searchTerms}
    SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKLM-x32 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://v9.com/web?type=ds&ts=1450680884&from=zzgbkk123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://v9.com/web?type=ds&ts=1450680884&from=zzgbkk123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://v9.com/web?type=ds&ts=1450680884&from=zzgbkk123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q&q={searchTerms}
    Edge HomeButtonPage: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> hxxp://www.yoursites123.com/?type=hp&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    FF NewTab: hxxp://www.nicesearches.com/search.php?q=keyword&type=hp&ts=1458541068&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=d71e056bac92eca5bc1c3e7g3z8w1b2w6z4g8efq5c
    FF DefaultSearchEngine: yoursites123
    FF SelectedSearchEngine: yoursites123
    FF Homepage: hxxp://www.nicesearches.com/search.php?q=keyword&type=hp&ts=1458541068&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=d71e056bac92eca5bc1c3e7g3z8w1b2w6z4g8efq5c
    FF Extension: Default NewTab - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\Extensions\default_newtabff@gmail.com [2016-01-08] [Brak podpisu cyfrowego]
    FF HKLM-x32\...\Firefox\Extensions: [searchffv2@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\searchffv2@gmail.com => nie znaleziono
    FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\sweetsearch@gmail.com => nie znaleziono
    FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\deskCutv2@gmail.com => nie znaleziono
    FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\yahooprotected@gmail.com => nie znaleziono
    FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\default_newtabff@gmail.com
    FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\arthurj8283@gmail.com => nie znaleziono
    R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [118048 2015-08-19] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [260856 2015-05-14] (Elex do Brasil Participações Ltda)
    S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [55056 2015-08-19] (Elex do Brasil Participações Ltda)
    S1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [110112 2015-08-19] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [52440 2015-08-19] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [103904 2015-08-19] (Elex do Brasil Participações Ltda)
    R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2015-06-30] (Elex do Brasil Participações Ltda)
    2015-12-01 19:34 - 2016-01-08 09:11 - 0000074 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
    C:\Program Files (x86)\Elex-tech\
    EmptyTemp:

    W FRST wybierz Napraw.

    Usun katalog C:\FRST.
  • REKLAMA
  • Pomocny post
    #5 15821328
    Domino_2
    Pomocny dla użytkowników  
    Posty: 1048
    Pomógł: 315
    Ocena: 99
    Odinstaluj do-search uninstall i YAC(Yet Another Cleaner!).

    Cytat:

    CloseProcesses:
    Task: {0C44A4D8-5EDB-444B-9FA7-5C11A5F307B2} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
    Task: {1C83C3B1-396E-4AD4-92FA-C6E9215EB665} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA
    Task: {1FCC1CCF-C116-46F7-9209-E9E7E7C249B1} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA
    Task: {21D9E24C-5F1A-40D6-A84E-601CF3C89504} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Brak pliku <==== UWAGA
    Task: {429E2EAE-A977-4CC0-9456-53E8DF825F6F} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
    Task: {4BD57924-FA55-40AE-B705-94D1CCD7DC27} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA
    Task: {527269CC-5FFC-46EA-A3A0-89E5D9E0495A} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA
    Task: {529636B8-F275-461F-A75C-C654DF4D7ED4} - System32\Tasks\Opera scheduled Autoupdate 1448991292 => C:\Program Files (x86)\Opera\launcher.exe [2016-07-01] (Opera Software)
    Task: {6CA0688B-0F44-4826-B9F1-9FC1B4E9FC25} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA
    Task: {8BA29127-B7F0-44EC-93A0-92685979BDC9} - System32\Tasks\{2B6EA38D-CBBB-47DD-B6ED-45A7A3A098CA} => pcalua.exe -a "C:\Program Files (x86)\Elex-tech\YAC\uninstall.exe"
    Task: {977C5BDC-982D-4C28-91B9-E175F9FC3CC3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA
    Task: {9B225D04-7D76-435D-8AA5-56B887B0C34C} - \UbtFrameworkService -> Brak pliku <==== UWAGA
    Task: {A72AE653-6C4D-48E9-A556-0000324493A4} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA
    Task: {D001A134-6D3D-4B1E-85B9-A271AA20A566} - \SweetLabs App Platform -> Brak pliku <==== UWAGA
    Task: {DC7F2243-02FD-4F7A-8792-4F980EC0819A} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA
    Task: {DF4B13CB-7351-4B48-BE43-3B1F56D747AD} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA
    Task: {FF6D4EED-6AB0-4F5A-AB89-41B02AC7FC01} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA
    ShortcutWithArgument: C:\Users\Krzysztof\Desktop\Facebook.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Krzysztof\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-17152322370.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0xd7d3e022 -pinnedTimeHigh 0x01d08d7c -securityFlags 0x00000000 -tileType 0x00000001 -url 0x00000021 hxxps://www.google.pl/?gws_rd=ssl
    ShortcutWithArgument: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450950565&z=8b43d34c7a7c36701f71241gcz2w9e5taw5edw6zce&from=wpm07173&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Krzysztof\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450950565&z=8b43d34c7a7c36701f71241gcz2w9e5taw5edw6zce&from=wpm07173&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450950565&z=8b43d34c7a7c36701f71241gcz2w9e5taw5edw6zce&from=wpm07173&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Public\Desktop\Booking.com.lnk -> C:\Program Files\Booking.COM\StartURL.exe () -> hxxp://www.booking.com/index.html?aid=379334
    ShortcutWithArgument: C:\Users\Public\Desktop\Dropbox.lnk -> C:\Program Files\Dropbox\StartURL.exe () -> hxxps://www.dropbox.com/partners/acer2014/download
    ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1450950565&z=8b43d34c7a7c36701f71241gcz2w9e5taw5edw6zce&from=wpm07173&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Public\Desktop\Opera.lnk -> C:\Program Files (x86)\Opera\launcher.exe (Opera Software) -> hxxp://www.yoursites123.com/?type=sc&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    ShortcutWithArgument: C:\Users\Public\Desktop\USB device MF63.lnk -> C:\Program Files (x86)\Hostless Modem\USB device MF63\LaunchWebUI.exe () -> hxxp://router.setup/
    (Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
    (Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\...\MountPoints2: {7d72049b-6a63-11e5-8286-2c600c4642a9} - "E:\AutoRun.exe"
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\...\MountPoints2: {dd3e7b45-391f-11e6-832f-2c600c4642a9} - "E:\autorun.exe"
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://do-search.com/web/?type=ds&ts=1431868489&z=dc89e017d6594a3b6b30c99g0zfcageb0q8b7z7b2c&from=cor&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://do-search.com/web/?type=ds&ts=1431868489&z=dc89e017d6594a3b6b30c99g0zfcageb0q8b7z7b2c&from=cor&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130958716372878219&GUID=681A5062-0890-4D02-A063-F7710A7B9F4C
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://v9.com/?type=hp&ts=1450680884&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q
    HKU\S-1-5-21-484098157-473445352-3500707870-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKLM-x32 -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://v9.com/web?type=ds&ts=1450680884&from=zzgbkk123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q&q={searchTerms}
    SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKLM-x32 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://v9.com/web?type=ds&ts=1450680884&from=zzgbkk123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://v9.com/web?type=ds&ts=1450680884&from=zzgbkk123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL = hxxp://v9.com/web?type=ds&ts=1450680884&from=zzgbkk123&uid=liteonitxlcs-128m6s_002452122513&z=b2a59c9db2dad2f003aacdcg0zewce8q5bce8b7q3q&q={searchTerms}
    Edge HomeButtonPage: HKU\S-1-5-21-484098157-473445352-3500707870-1001 -> hxxp://www.yoursites123.com/?type=hp&ts=1449644467&z=30aacef1718117cadf5744eg1z5z0tfq4zcz8z3w1m&from=ient07021&uid=LITEONITXLCS-128M6S_002452122513
    FF NewTab: hxxp://www.nicesearches.com/search.php?q=keyword&type=hp&ts=1458541068&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=d71e056bac92eca5bc1c3e7g3z8w1b2w6z4g8efq5c
    FF DefaultSearchEngine: yoursites123
    FF SelectedSearchEngine: yoursites123
    FF Homepage: hxxp://www.nicesearches.com/search.php?q=keyword&type=hp&ts=1458541068&from=mych123&uid=liteonitxlcs-128m6s_002452122513&z=d71e056bac92eca5bc1c3e7g3z8w1b2w6z4g8efq5c
    FF HKLM-x32\...\Firefox\Extensions: [searchffv2@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\searchffv2@gmail.com => nie znaleziono
    FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\sweetsearch@gmail.com => nie znaleziono
    FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\deskCutv2@gmail.com => nie znaleziono
    FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\yahooprotected@gmail.com => nie znaleziono
    FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\default_newtabff@gmail.com
    FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Krzysztof\AppData\Roaming\Mozilla\Firefox\Profiles\y6owuco2.default\extensions\arthurj8283@gmail.com => nie znaleziono
    R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [118048 2015-08-19] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [260856 2015-05-14] (Elex do Brasil Participações Ltda)
    S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [55056 2015-08-19] (Elex do Brasil Participações Ltda)
    S1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [110112 2015-08-19] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [52440 2015-08-19] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [103904 2015-08-19] (Elex do Brasil Participações Ltda)
    R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2015-06-30] (Elex do Brasil Participações Ltda)
    C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
    EmptyTemp:


    Wklej to do notatnika i zapisz pod nazwą fixlist.txt i umieść w folderze gdzie znajduje się plik FRST.exe/FRST64.exe, odpal go i kliknij Fix/Napraw.
  • #6 15821349
    Proof3soR
    Poziom 2  
    Posty: 3
    Dziękuję za pomoc. ;)
    Elex-tech Yac, reklamy - Jak usunąć Elex-tech i uciążliwe reklamy w przegladarce
| Nowy temat
Zgłoś naruszenie prawa
REKLAMA