Problem z strong signal

Dla specjalistów Bezpieczeństwo
#1

witam mam problem z strong signal czy mozecie pomóz??

tu mam FRST i Addition…

Addition.txt

FRST.txt

#2

Odinstaluj WPM18.8.0.304.Otwórz notatnik systemowy i wklej:

HKLM-x32\...\Run: [YouCam Tray] = C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] = C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] = C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [mcui_exe] = C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-01-28] (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hpts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hpts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
HKU\S-1-5-21-170050485-1323042680-3252933861-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hpts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
SearchScopes: HKU\S-1-5-21-170050485-1323042680-3252933861-1001 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
SearchScopes: HKU\S-1-5-21-170050485-1323042680-3252933861-1001 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253q={searchTerms}
SearchScopes: HKU\S-1-5-21-170050485-1323042680-3252933861-1001 - {97E777D2-E2E2-4C45-8A90-A48D23F3C119} URL =
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll [2015-03-04] ()
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=scts=1400253270from=slbnewuid=ST1000LM024XHN-M101MBB_S2SMJ9DD833253
FF SelectedSearchEngine: webssearches
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml [2014-05-31]
FF Extension: OnlineMapFinder - C:\Users\lenovo_\AppData\Roaming\Mozilla\Firefox\Profiles\pyfpo3xj.default\Extensions\9pffxtbr@OnlineMapFinder_9p.com [2015-02-20]
FF Extension: Strong Signal - C:\Users\lenovo_\AppData\Roaming\Mozilla\Firefox\Profiles\pyfpo3xj.default\Extensions\{78321fcc-38de-4e31-9756-9afb7ad2672e}.xpi [2015-03-04]
CHR Extension: (Strong Signal) - C:\Users\lenovo_\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhcklkloafcpghahpjomodagghgpdmgb [2015-03-11]
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [581368 2015-03-13] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [388856 2015-03-13] ()
2015-03-13 11:02 - 2015-03-13 15:17 - 00000000 ____ D () C:\Program Files (x86)\Spybot - Search Destroy 2
2015-03-13 11:02 - 2015-03-13 15:13 - 00000000 ____ D () C:\ProgramData\Spybot - Search Destroy
2015-03-13 11:00 - 2015-03-13 11:00 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\lenovo_\Downloads\spybot-2.4.exe
2015-03-13 10:59 - 2015-03-13 10:59 - 00713072 _____ (Soft Application ) C:\Users\lenovo_\Downloads\Spybot-Search-Destroy(12546)-dp.exe
2015-03-04 17:10 - 2015-03-04 17:10 - 00000000 ____ D () C:\Program Files (x86)\Strong Signal
2015-02-20 13:57 - 2015-02-20 13:57 - 00003152 _____ () C:\WINDOWS\System32\Tasks\{2E6E03B3-A8AF-4DD9-BD33-DC2596C41022}
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

dzieki wielkie za pomoc :slight_smile:

#4

Skasuj folder C:\FRST