Jak usunąć Strong Signal?

Dla specjalistów Bezpieczeństwo
#1

Witam

potrzebuję pomocy w usunięciu tego …

Będę bardzo wdzięczny za wszelką pomoc! !!

#2

Odinstaluj Hoolapp For Android.Otwórz notatnik systemowy i wklej:

Task: {3D9C060B-F11A-46A5-A29C-B35E820D59DE} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2408778338-1429174535-3547119565-1000Core = C:\Users\Tesco\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-29] (Facebook Inc.)
Task: {AFD1BF71-2E4D-4B86-B48B-985878DFAF02} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2408778338-1429174535-3547119565-1000UA = C:\Users\Tesco\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-29] (Facebook Inc.)
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2408778338-1429174535-3547119565-1000Core.job = C:\Users\Tesco\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2408778338-1429174535-3547119565-1000UA.job = C:\Users\Tesco\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKLM-x32\...\Run: [NPSStartup] = [X]
HKLM-x32\...\Run: [WinampAgent] = C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-28] (Nullsoft, Inc.)
HKLM-x32\...\Run: [HP Software Update] = C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM-x32\...\Run: [] = [X]
HKLM-x32\...\Run: [GrooveMonitor] = C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKU\S-1-5-21-2408778338-1429174535-3547119565-1000\...\Run: [Hoolapp Android] = "C:\Users\Tesco\AppData\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized
HKU\S-1-5-21-2408778338-1429174535-3547119565-1000\...\Run: [Facebook Update] = C:\Users\Tesco\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-07-29] (Facebook Inc.)
AppInit_DLLs-x32: c:/progra~3/{63108~1/192~1.1/mefa.dll = "c:\progra~3\{63108~1\192~1.1\mefa.dll" File Not Found
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKLM - {0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} URL =
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2408778338-1429174535-3547119565-1000 - {213A3A7F-3369-464F-8A14-DA5D4B6AFF26} URL = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-2408778338-1429174535-3547119565-1000 - {444F3116-4B78-4845-A020-7FFF2631640C} URL = http://www.amazon.co.uk/gp/search?ie=UTF8keywords={searchTerms}tag=tochibauk-win7-ie-search-21index=blendedlinkCode=ur2
SearchScopes: HKU\S-1-5-21-2408778338-1429174535-3547119565-1000 - {48778DF1-42D0-4C38-A835-473EC614E510} URL =
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
Toolbar: HKLM-x32 - Winamp Toolbar - {a0b1221c-a3ff-4f7c-a393-dc63af5301e9} - C:\Program Files (x86)\Winamp Toolbar\winamppltb.dll No File
Toolbar: HKU\S-1-5-21-2408778338-1429174535-3547119565-1000 - No Name - {A0B1221C-A3FF-4F7C-A393-DC63AF5301E9} - No File
FF Extension: Strong Signal - C:\Users\Tesco\AppData\Roaming\Mozilla\Firefox\Profiles\y7238iap.default\Extensions\{02df6ed9-d89d-425c-afc3-3a79ad6ce5ef}.xpi [2015-03-09]
CHR Extension: (Strong Signal) - C:\Users\Tesco\AppData\Local\Google\Chrome\User Data\Default\Extensions\jahepoliaomnhnejhcjbapfailjpapek [2015-03-10]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
2015-03-11 23:38 - 2015-03-12 00:19 - 00000000 ____ D () C:\AdwCleaner
2015-03-10 00:36 - 2015-03-10 00:36 - 00003150 _____ () C:\Windows\System32\Tasks\{C55DB445-639E-42F1-95C7-C0D6D587C8FF}
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

wielkie dzięki!

#4

Skasuj folder C:\FRST