Gość portalu: Kolobos napisał(a):
> Obok frst.exe utworz plik fixlist.txt z zawartoscia:
> ShortcutWithArgument: C:\Documents and Settings\ppp\Menu Start\Programy\Interne
> t Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsof
> t Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452598803&z=e0f7
> 7af9cfe38fffcb196ceg3zewaoew8t5bfb2g5g&from=ient12253&uid=ST3500413AS_Z2A6SQ54X
> XXXZ2A6SQ54
> ShortcutWithArgument: C:\Documents and Settings\ppp\Menu Start\Programy\Aplikac
> je Chrome\Muzyka Google Play.lnk -> C:\Program Files\Google\Chrome\Applicat
> ion\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=145
> 2598803&z=e0f77af9cfe38fffcb196ceg3zewaoew8t5bfb2g5g&from=ient12253&uid=ST35004
> 13AS_Z2A6SQ54XXXXZ2A6SQ54
> ShortcutWithArgument: C:\Documents and Settings\ppp\Menu Start\Programy\Akcesor
> ia\Narzędzia systemowe\Internet Explorer (bez dodatków).lnk -> C:\Program F
> iles\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.y
> oursites123.com/?type=sc&ts=1452598803&z=e0f77af9cfe38fffcb196ceg3zewaoew8t5bfb
> 2g5g&from=ient12253&uid=ST3500413AS_Z2A6SQ54XXXXZ2A6SQ54
> ShortcutWithArgument: C:\Documents and Settings\All Users\Menu Start\Programy\M
> ozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla
> Corporation) -> hxxp://www.yoursites123.com/?type=sc&ts=1452598803&z=e0f77
> af9cfe38fffcb196ceg3zewaoew8t5bfb2g5g&from=ient12253&uid=ST3500413AS_Z2A6SQ54XX
> XXZ2A6SQ54
> ShortcutWithArgument: C:\Documents and Settings\All Users\Menu Start\Programy\G
> oogle Chrome\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Applicatio
> n\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=14525
> 98803&z=e0f77af9cfe38fffcb196ceg3zewaoew8t5bfb2g5g&from=ient12253&uid=ST3500413
> AS_Z2A6SQ54XXXXZ2A6SQ54
> ShortcutWithArgument: C:\Documents and Settings\All Users\Menu Start\Programy\G
> oogle Chrome\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Applicatio
> n\chrome.exe (Google Inc.) -> hxxp://www.yoursites123.com/?type=sc&ts=14525
> 98803&z=e0f77af9cfe38fffcb196ceg3zewaoew8t5bfb2g5g&from=ient12253&uid=ST3500413
> AS_Z2A6SQ54XXXXZ2A6SQ54
> ShortcutWithArgument: C:\Documents and Settings\All Users\Pulpit\Google Chrome.
> lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
> -> hxxp://www.yoursites123.com/?type=sc&ts=1452598803&z=e0f77af9cfe38fffcb1
> 96ceg3zewaoew8t5bfb2g5g&from=ient12253&uid=ST3500413AS_Z2A6SQ54XXXXZ2A6SQ54
> ShortcutWithArgument: C:\Documents and Settings\All Users\Pulpit\Mozilla Firefo
> x.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
> -> hxxp://www.yoursites123.com/?type=sc&ts=1452598803&z=e0f77af9cfe38fffcb
> 196ceg3zewaoew8t5bfb2g5g&from=ient12253&uid=ST3500413AS_Z2A6SQ54XXXXZ2A6SQ54
> HKU\S-1-5-21-861567501-790525478-839522115-1004\...\MountPoints2: {19611430-2f2
> a-11e1-b8b6-000fea5a5ae4} - H:\iStudio.exe
> HKU\S-1-5-21-861567501-790525478-839522115-1004\...\MountPoints2: {32c6d60a-587
> c-11e1-b923-4d6564696130} - J:\AutoRunMorrowind.exe
> SearchScopes: HKLM -> DefaultScope - brak wartości
> FF Homepage: hxxps://www.malwarebytes.org/restorebrowser//?type=hp&ts=145259880
> 3&z=e0f77af9cfe38fffcb196ceg3zewaoew8t5bfb2g5g&from=ient12253&uid=ST3500413AS_Z
> 2A6SQ54XXXXZ2A6SQ54
> 2016-01-13 22:29 - 2016-01-13 22:29 - 00001720 _____ C:\Documents and Settings\
> ppp\Pulpit\AdwCleaner[R10].txt
> 2016-01-13 22:28 - 2016-01-13 22:28 - 00001720 _____ C:\AdwCleaner[R10].txt
> 2016-01-13 22:22 - 2016-01-13 22:23 - 00001656 _____ C:\AdwCleaner[S5].txt
> 2016-01-13 22:22 - 2016-01-13 22:22 - 00001598 _____ C:\AdwCleaner[R9].txt
> 2016-01-13 22:21 - 2016-01-13 22:22 - 00001538 _____ C:\AdwCleaner[R8].txt
> 2016-01-13 22:21 - 2016-01-13 22:21 - 00001478 _____ C:\AdwCleaner[R7].txt
> 2016-01-13 21:06 - 2016-01-13 21:06 - 00000000 ____D C:\Documents and Settings\
> ppp\Dane aplikacji\eCyber
> 2015-12-22 23:36 - 2015-12-22 23:36 - 00000389 _____ C:\AdwCleaner[S4].txt
> 2015-12-22 23:35 - 2015-12-22 23:36 - 00001357 _____ C:\AdwCleaner[R6].txt
> EmptyTemp:
>
> Po wykonaniu usun katalog C:\FRST i to wszystko.
