Jak usunąć strong signal

Dla specjalistów Bezpieczeństwo
#1

Pomocy z usunięciem strong signal!!

FRST:http://wklej.org/id/1704459/

Addition: http://wklej.org/id/1704460/

 

#2

W panelu sterowania odinstaluj SpyHunter 4.

Usuń szkodliwe rozszerzenia w przeglądarce Chrome i Opera w pasek adresu wpisz: opera:extensions

Pobierz i uruchom AdwCleaner Kliknij Scan i później Cleaning.

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
AppInit_DLLs: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL => C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~2.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~3.DLL => "C:\PROGRA~2\Amazon\AMAZON~1\AMAZON~3.DLL" File Not Found
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_455385f6-9448-4f57-a51b-641361b7710e
HKU\S-1-5-21-2244377330-2544061544-4151670484-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_455385f6-9448-4f57-a51b-641361b7710e
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {1F1B4AC8-F955-4649-93FE-DB8FCAF9EBB1} URL = http://q.search-simple.com/?affID=bl_455385f6-9448-4f57-a51b-641361b7710e&q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2244377330-2544061544-4151670484-1001 -> {1F1B4AC8-F955-4649-93FE-DB8FCAF9EBB1} URL = 
CHR RestoreOnStartup: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
CHR Extension: (Strong Signal) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aamaaompokdjbebnfbcfobpkklfkmddp [2015-05-03]
CHR Extension: (Bookmark Manager) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-03]
OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
OPR Extension: (Strong Signal) - C:\Users\Damian\AppData\Roaming\Opera Software\Opera Stable\Extensions\aamaaompokdjbebnfbcfobpkklfkmddp [2015-05-01]
R3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026432 2015-05-03] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-05-03] ()
2015-05-03 23:23 - 2015-05-03 23:23 - 00000000 ____ D () C:\Users\Damian\AppData\Roaming\Enigma Software Group
2015-05-03 23:22 - 2015-05-03 23:23 - 00000000 ____ D () C:\sh4ldr
2015-05-03 23:21 - 2015-05-03 23:21 - 00022704 _____ () C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-05-03 23:21 - 2015-05-03 23:21 - 00000000 ____ D () C:\Program Files\Enigma Software Group
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.

#3

Dzieki za pomoc:)