yoursite123 proszę o pomoc

[Joanna]

Koledzy i Koleżanki,

 

Proszę o pomoc :(

 

Asia

Addition.txt

FRST.txt

[jessica]

Otwórz Notatnik i wklej w nim:

 

DeleteKey: HKLM\SOFTWARE\Wow6432Node\yoursites123Software
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes
Task: {860CE710-0073-4B79-AC02-7E7ADB54306E} - System32\Tasks\{94550B6A-DB64-40E7-9325-8F87A934E522} => pcalua.exe -a "C:\Program Files (x86)\Common Files\Adobe\Installers\cd40c268fefdd8bfc54faa37df2ce97\Setup.exe"
Task: {9E789368-BA1F-446D-B7C1-775CC3D1AB53} - System32\Tasks\{017CAA02-CF5B-4421-A735-A1BC35A82448} => pcalua.exe -a "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2161675285-3126244748-3473099214-1001\...\Run: [AdobeBridge] => [X]
GroupPolicyScripts: Ograniczenia <======= UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.omniboxes.com/?type=hp&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.omniboxes.com/?type=hp&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.omniboxes.com/web/?type=ds&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.omniboxes.com/web/?type=ds&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.omniboxes.com/?type=hp&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.omniboxes.com/?type=hp&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.omniboxes.com/web/?type=ds&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.omniboxes.com/web/?type=ds&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY&q={searchTerms}
HKU\S-1-5-21-2161675285-3126244748-3473099214-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.yoursites123.com/web/?type=ds&ts=1449831976&z=d6f3c4cfd9585c06b245d53g5z5zft0b3ccgbt7mcc&from=ient07021&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY&q={searchTerms}
HKU\S-1-5-21-2161675285-3126244748-3473099214-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.omniboxes.com/?type=hp&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY
HKU\S-1-5-21-2161675285-3126244748-3473099214-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.omniboxes.com/?type=hp&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY
HKU\S-1-5-21-2161675285-3126244748-3473099214-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.yoursites123.com/web/?type=ds&ts=1449831976&z=d6f3c4cfd9585c06b245d53g5z5zft0b3ccgbt7mcc&from=ient07021&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2161675285-3126244748-3473099214-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.omniboxes.com/web/?type=ds&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.omniboxes.com/?type=sc&ts=1448360152&z=f567f1d40d62e7390a758a6g3z1z4b9c0qde0g2z8b&from=ient07031&uid=TOSHIBAXTHNSNS128GMCP_82ES12XXT4BY
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: yoursites123
FF SelectedSearchEngine: yoursites123
FF SearchPlugin: C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\360ktxd0.default\searchplugins\yoursites123.xml [2016-01-06]
FF Extension: Default NewTab - C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\360ktxd0.default\extensions\default_newtabff@gmail.com [2015-11-24] [brak podpisu cyfrowego]
FF Extension: YahooToolsProtected  - C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\360ktxd0.default\extensions\yahooprotected@gmail.com [2015-11-24] [brak podpisu cyfrowego]
FF HKLM-x32\...\Firefox\Extensions: [default_newtabff@gmail.com] - C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\360ktxd0.default\extensions\default_newtabff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [yahooprotected@gmail.com] - C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\360ktxd0.default\extensions\yahooprotected@gmail.com
S3 btmhsf; \SystemRoot\system32\DRIVERS\btmhsf.sys [X]
S3 iBtFltCoex; \SystemRoot\system32\DRIVERS\iBtFltCoex.sys [X]
2016-01-06 11:50 - 2015-04-22 12:16 - 00000000 ____D C:\ProgramData\8708eaaa-1c2b-4faa-8923-a6c9f88eeb0e
C:\ProgramData\Ament.ini
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).

 

Napisz, czy problem znikł?

 

jessi