Ponownie problem z yoursite

[Brabus]

Proszę o pomoc. Logi w załączeniu

 

 

Addition.txt

FRST.txt

Shortcut.txt

[jessica]

1) Użyj >Adw-cleaner
najpierw kliknij na SZUKAJ (SCAN), a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ (CLEANING), to kliknij na niego.

 

2) Otwórz Notatnik i wklej w nim:

 

DeleteKey: HKLM\SOFTWARE\Wow6432Node\yoursites123Software
ShortcutWithArgument: C:\Users\Robert\Desktop\WarThunder.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WarThunder.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
ShortcutWithArgument: C:\Users\Robert\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
C:\ProgramData\gWdMg
C:\Users\Robert\AppData\Roaming\TSv
C:\Program Files (x86)\SFK
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://yoursites123.com/web?type=ds&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://yoursites123.com/web?type=ds&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH&q={searchTerms}
HKU\S-1-5-21-884423482-3915767466-712464105-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.yoursites123.com/?type=hp&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
HKU\S-1-5-21-884423482-3915767466-712464105-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.yoursites123.com/?type=hp&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://yoursites123.com/web?type=ds&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartpageing.com/?type=sc&ts=1450191287&z=4306daa27818ef983875c0fg0z7w0ecg9teg6odqfg&from=cor&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
Edge HomeButtonPage: HKU\S-1-5-21-884423482-3915767466-712464105-1001 -> hxxp://www.yoursites123.com/?type=hp&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
FF NewTab: hxxp://www.yoursites123.com/newtab/?type=nt&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
FF DefaultSearchEngine: yoursites123
FF SearchPlugin: C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\dd8xjcak.default-1450209625027\searchplugins\yoursites123.xml [2016-01-08]
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
CHR HomePage: Default -> hxxp://www.yoursites123.com/?type=hp&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
CHR StartupUrls: Default -> "hxxp://www.yoursites123.com/?type=hp&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH"
CHR DefaultSearchURL: Default -> hxxp://yoursites123.com/web?type=ds&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH&q={searchTerms}
CHR DefaultSearchKeyword: Default -> yoursites123
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.yoursites123.com/?type=sc&ts=1452242551&z=cb96bfede07523f96f1acb8g5zcw6o1o4zbo4wfzbm&from=wpm01073&uid=ST1000LM014-SSHD-8GB_W7717AEHXXXXW7717AEH
R2 IhPul; C:\Users\Robert\AppData\Roaming\TSv\TSvr.exe [580752 2015-12-08] (tsvr.com)
R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [158400 2016-01-08] (TODO: <公司名>)
R2 WdMan; C:\ProgramData\gWdMg\WdMan.exe [326656 2016-01-08] (TU-Funs LIMITED) [brak podpisu cyfrowego]
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
C:\ProgramData\Tmp0x0x
C:\WINDOWS\SysWOW64\pl.html
C:\ProgramData\HWdMH
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix (NAPRAW).


Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

 

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix (NAPRAW).
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).


Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie.
.

jessi

[Brabus]

Dziękuję za pomoc. Problem usunięty.