Mam problem z dodatkiem Strong Signal Ads, możecie jakoś pomóc? Sam program został już usunięty z windowsa… skanowałem komputer też programem Malwarebytes ale nie poradził sobię z tym wirusem/spywarem. Zostawiam logi z FRST:
Odinstaluj Spybot - Search & Destroy.Otwórz notatnik systemowy i wklej:
Task: {28377655-558B-474D-981A-9CE1196465CA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates = C:\Program Files (x86)\Spybot - Search amp; Destroy 2\SDUpdate.exe
Task: {A02096B1-EABB-4F7E-95C5-401D8903BC87} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization = C:\Program Files (x86)\Spybot - Search amp; Destroy 2\SDImmunize.exe
Task: {DDD7E370-A6A7-42D9-B7F0-7BE8457FC057} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system = C:\Program Files (x86)\Spybot - Search amp; Destroy 2\SDScan.exe
HKLM-x32\...\Run: [HP Software Update] = C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] = [X]
HKLM-x32\...\Run: [SDTray] = C:\Program Files (x86)\Spybot - Search Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-745940436-1700770375-2815322266-1000\...\Run: [AdobeBridge] = [X]
HKU\S-1-5-21-745940436-1700770375-2815322266-1000\...\Run: [ALLUpdate] = C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [2765256 2014-11-03] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-745940436-1700770375-2815322266-1000\...\Run: [ALLPlayer WiFi Remote] = C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe [5182896 2014-07-23] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-745940436-1700770375-2815322266-1000\...\Run: [Spybot-SD Cleaning] = C:\Program Files (x86)\Spybot - Search Destroy 2\SDCleaner.exe [4566952 2014-06-24] (Safer-Networking Ltd.)
HKU\S-1-5-21-745940436-1700770375-2815322266-1000\...\MountPoints2: {a4d6c4e0-770f-11e3-ad76-ccaf78ea3c7a} - G:\SETUP.EXE
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FF Extension: Strong Signal - C:\Users\Kinga\AppData\Roaming\Mozilla\Firefox\Profiles\7cadmrdo.default\Extensions\{78321fcc-38de-4e31-9756-9afb7ad2672e}.xpi [2015-03-04]
CHR Extension: (Strong Signal) - C:\Users\Kinga\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhcklkloafcpghahpjomodagghgpdmgb [2015-03-05]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
2015-01-10 17:03 - 2015-03-05 23:02 - 00000000 ____ D () C:\ProgramData\Spybot - Search Destroy
2015-01-10 17:03 - 2015-01-10 17:03 - 00001391 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-SD Start Center.lnk
2015-01-10 17:03 - 2015-01-10 17:03 - 00000000 ____ D () C:\Windows\System32\Tasks\Safer-Networking
2015-01-10 17:03 - 2015-01-10 17:03 - 00000000 ____ D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search Destroy 2
2015-01-10 17:03 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2015-01-10 17:02 - 2015-01-10 17:09 - 00000000 ____ D () C:\Program Files (x86)\Spybot - Search Destroy 2
2015-01-10 17:00 - 2015-01-10 17:00 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Kinga\Downloads\spybot-2.4.exe
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.