Problem ze Strong Signal Ads


(Izam155) #1

Bardzo proszę o pomoc.

Logi:


(Acorus) #2

Otwórz notatnik systemowy i wklej:

CloseProcesses:
Task: {E8BB34D6-8850-4656-8321-316EFA9DB87A} - System32\Tasks\{57F15EBA-49F3-43E7-98D4-D1AC6B310E8A} => pcalua.exe -a C:\Users\test\AppData\Roaming\do-search\UninstallManager.exe -c -ptid=cor
HKLM\...\Run: [] => [X]
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.search.yahoo.com/?fr=hp-ddc-bd&type=bl-bir-is __alt__ ddc_dsssyc_bd_com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-950207565-2800614287-1471140029-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.search.yahoo.com/?fr=hp-ddc-bd&type=bl-bir-is __alt__ ddc_dsssyc_bd_com
URLSearchHook: [S-1-5-21-950207565-2800614287-1471140029-1001] ATTENTION ==> Default URLSearchHook is missing
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_25&cd=2XzuyEtN2Y1L1QzuyCyEyD0AtDyE0A0A0CyCzz0FyEzy0ByDtN0D0Tzu0StCtByCyEtN1L2XzutAtFtCtDtFtCtDtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByDtB0DtD0A0E0DtGyEtBtD0EtGyD0EtCtBtGyE0FyB0AtG0FtD0CzzyEtA0D0Azyzy0E0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0F0CyDyBzz0CtGzzzzyD0FtGyEzzzztAtG0BtC0FtCtGyEtDtD0C0Dzy0BzzyC0DtCtA2QtN0A0LzuyE&cr=1864173960&ir=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_25&cd=2XzuyEtN2Y1L1QzuyCyEyD0AtDyE0A0A0CyCzz0FyEzy0ByDtN0D0Tzu0StCtByCyEtN1L2XzutAtFtCtDtFtCtDtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByDtB0DtD0A0E0DtGyEtBtD0EtGyD0EtCtBtGyE0FyB0AtG0FtD0CzzyEtA0D0Azyzy0E0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0F0CyDyBzz0CtGzzzzyD0FtGyEzzzztAtG0BtC0FtCtGyEtDtD0C0Dzy0BzzyC0DtCtA2QtN0A0LzuyE&cr=1864173960&ir=
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://q.search-simple.com/?affID=bl_d7dd37eb-c354-4ea5-977b-f3e6d5558ea9&q={searchTerms}
SearchScopes: HKLM -> {c9ab6446-7efc-47fe-966c-dc54324eff9f} URL = http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_25&cd=2XzuyEtN2Y1L1QzuyCyEyD0AtDyE0A0A0CyCzz0FyEzy0ByDtN0D0Tzu0StCtByCyDtN1L2XzutAtFtCtDtFtCtDtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StC0AtCtDtAtD0F0AtGyEyC0A0CtGtCyEtDtDtGyB0ByByEtGzztBzz0AyCzz0E0EtAzz0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0F0CyDyBzz0CtGzzzzyD0FtGyEzzzztAtG0BtC0FtCtGyEtDtD0C0Dzy0BzzyC0DtCtA2QtN0A0LzuyE&cr=558658571&ir=
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-950207565-2800614287-1471140029-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_25&cd=2XzuyEtN2Y1L1QzuyCyEyD0AtDyE0A0A0CyCzz0FyEzy0ByDtN0D0Tzu0StCtByCyEtN1L2XzutAtFtCtDtFtCtDtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByDtB0DtD0A0E0DtGyEtBtD0EtGyD0EtCtBtGyE0FyB0AtG0FtD0CzzyEtA0D0Azyzy0E0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0F0CyDyBzz0CtGzzzzyD0FtGyEzzzztAtG0BtC0FtCtGyEtDtD0C0Dzy0BzzyC0DtCtA2QtN0A0LzuyE&cr=1864173960&ir=
SearchScopes: HKU\S-1-5-21-950207565-2800614287-1471140029-1002 -> {c9ab6446-7efc-47fe-966c-dc54324eff9f} URL = http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_25&cd=2XzuyEtN2Y1L1QzuyCyEyD0AtDyE0A0A0CyCzz0FyEzy0ByDtN0D0Tzu0StCtByCyDtN1L2XzutAtFtCtDtFtCtDtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StC0AtCtDtAtD0F0AtGyEyC0A0CtGtCyEtDtDtGyB0ByByEtGzztBzz0AyCzz0E0EtAzz0ByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0F0CyDyBzz0CtGzzzzyD0FtGyEzzzztAtG0BtC0FtCtGyEtDtD0C0Dzy0BzzyC0DtCtA2QtN0A0LzuyE&cr=558658571&ir=
SearchScopes: HKU\S-1-5-21-950207565-2800614287-1471140029-1002 -> {D45C8198-1833-418F-9D61-372171341E99} URL =
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
CHR Extension: (Strong Signal) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogknggodhpebknbodbcephnicepgbgib [2015-06-29]
CHR HKLM\...\Chrome\Extension: [ihokndmjeombjojnfkmapfnjeghjohim] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-950207565-2800614287-1471140029-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ihokndmjeombjojnfkmapfnjeghjohim] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ihokndmjeombjojnfkmapfnjeghjohim] - https://clients2.google.com/service/update2/crx
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [652048 2015-06-29] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\Updater.exe [571664 2015-06-29] ()
2015-06-19 00:13 - 2015-06-29 14:00 - 00000630 _____ C:\Windows\Tasks\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}.job
2015-06-19 00:13 - 2015-06-19 00:14 - 00003600 _____ C:\Windows\System32\Tasks\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}
2015-06-19 00:13 - 2015-06-19 00:14 - 00000000 ____ D C:\Users\test\AppData\Local\89685015
2015-06-19 00:13 - 2015-06-19 00:14 - 00000000 ____ D C:\Program Files (x86)\Run_Dregol
2015-06-19 00:13 - 2015-06-19 00:13 - 00000000 ____ D C:\Users\Public\Documents\PC Faster
2015-06-19 00:13 - 2015-06-19 00:13 - 00000000 ____ D C:\Users\Public\Documents\Guid
2015-06-19 00:13 - 2015-06-19 00:13 - 00000000 ____ D C:\Users\Public\Documents\Baidu
2015-06-19 00:13 - 2015-06-19 00:13 - 00000000 ____ D C:\Program Files (x86)\WeatherTool
C:\Users\test\AppData\Local\Temp
C:\Users\test\AppData\Local\Temp\10042BE5-3812-47d2-87F5-4F6ECC99962A.xml
C:\Users\test\AppData\Local\Temp\10240uninstall.exe
C:\Users\test\AppData\Local\Temp\1199559289ck.~tmp
C:\Users\test\AppData\Local\Temp\1584E80C-CB3E-492c-9490-C2B8A214B946.xml
C:\Users\test\AppData\Local\Temp\1872690440ck.~tmp
C:\Users\test\AppData\Local\Temp\355D20AC-DDD6-4A60-89CF-D43E112F1949.Diagnose.0.etl
C:\Users\test\AppData\Local\Temp\46841280-18A5-4D26-B8B7-8BEA2D01484B.Diagnose.Admin.0.etl
C:\Users\test\AppData\Local\Temp\46841280-18A5-4D26-B8B7-8BEA2D01484B.Repair.Admin.1.etl
C:\Users\test\AppData\Local\Temp\46841280-18A5-4D26-B8B7-8BEA2D01484B.Verify.Admin.2.etl
C:\Users\test\AppData\Local\Temp\607913718ck.~tmp
C:\Users\test\AppData\Local\Temp\646391354ck.~tmp
C:\Users\test\AppData\Local\Temp\89FE9506-0373-4f4c-821D-95E572F064C6.xml
C:\Users\test\AppData\Local\Temp\8FD5.tmp
C:\Users\test\AppData\Local\Temp\azrating_1.5.11.jar
C:\Users\test\AppData\Local\Temp\azrating_1.5.13.1.jar
C:\Users\test\AppData\Local\Temp\azrating_1.5.14.jar
C:\Users\test\AppData\Local\Temp\AZU2779615931841371294.tmp
C:\Users\test\AppData\Local\Temp\AZU2984849738740791276.tmp
C:\Users\test\AppData\Local\Temp\AZU5522519502782891141.tmp
C:\Users\test\AppData\Local\Temp\AZU8546765011847808730.tmp
C:\Users\test\AppData\Local\Temp\AZU9188377413428338294.tmp
C:\Users\test\AppData\Local\Temp\BA7AADAA-E135-477E-B88C-AE57F92F48C7.Diagnose.Admin.3.etl
C:\Users\test\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\test\AppData\Local\Temp\Bootstrapper(201506181701461568).log
C:\Users\test\AppData\Local\Temp\cab4F5C.tmp
C:\Users\test\AppData\Local\Temp\chrome_installer.log
C:\Users\test\AppData\Local\Temp\CProgram Files (x86)Opera28.0.1750.48opera_autoupdate.download.lock
C:\Users\test\AppData\Local\Temp\CProgram Files (x86)Opera28.0.1750.48opera_autoupdate.metrics.lock
C:\Users\test\AppData\Local\Temp\CVR460E.tmp.cvr
C:\Users\test\AppData\Local\Temp\CVRA538.tmp.cvr
C:\Users\test\AppData\Local\Temp\D3EEFBA3-33B1-4EF3-967D-9A0397EF362C.Diagnose.0.etl
C:\Users\test\AppData\Local\Temp\ddbabb86f2cd554c49021371c57a68f2.gnet
C:\Users\test\AppData\Local\Temp\DMI17A5.tmp
C:\Users\test\AppData\Local\Temp\DMI1823.tmp
C:\Users\test\AppData\Local\Temp\DMI190F.tmp
C:\Users\test\AppData\Local\Temp\DMIA40B.tmp
C:\Users\test\AppData\Local\Temp\DMICC8D.tmp
C:\Users\test\AppData\Local\Temp\e4j3C7C.tmp
C:\Users\test\AppData\Local\Temp\e4j6230.tmp
C:\Users\test\AppData\Local\Temp\e4j92.tmp
C:\Users\test\AppData\Local\Temp\e4jB8A8.tmp
C:\Users\test\AppData\Local\Temp\e4jCCA.tmp
C:\Users\test\AppData\Local\Temp\e4jF8F8.tmp
C:\Users\test\AppData\Local\Temp\etilqs_5oMl5fdRdbDmvkT
C:\Users\test\AppData\Local\Temp\etilqs_7A5EmbesPgfc69Q
C:\Users\test\AppData\Local\Temp\etilqs_bjEgb4174LsRcHS
C:\Users\test\AppData\Local\Temp\etilqs_EuTCM25fRwFmvtk
C:\Users\test\AppData\Local\Temp\etilqs_GkrmQIwl6XefBjD
C:\Users\test\AppData\Local\Temp\etilqs_JJGmteHrMfNGiz4
C:\Users\test\AppData\Local\Temp\etilqs_WfCTlwVE8IB47Gb
C:\Users\test\AppData\Local\Temp\etilqs_YHLBcWHXU7NvL2M
C:\Users\test\AppData\Local\Temp\etilqs_ZpUpo03ovCkwUrW
C:\Users\test\AppData\Local\Temp\F0042BE5-3812-47d2-87F5-4F6ECC99962A.xml
C:\Users\test\AppData\Local\Temp\F5179614-4E23-4794-9C21-843FE579DD7E.Diagnose.0.etl
C:\Users\test\AppData\Local\Temp\FBFDE863-3C17-4B82-A5D1-9B8ED5BE6B40.tmp
C:\Users\test\AppData\Local\Temp\FireFly(201506181701481668).log
C:\Users\test\AppData\Local\Temp\GoogleToolbarInstaller1.log
C:\Users\test\AppData\Local\Temp\GoogleToolbarInstaller2.log
C:\Users\test\AppData\Local\Temp\i4jdel0.exe
C:\Users\test\AppData\Local\Temp\i4jdel1.exe
C:\Users\test\AppData\Local\Temp\i4jdel2.exe
C:\Users\test\AppData\Local\Temp\i4j_nlog_2
C:\Users\test\AppData\Local\Temp\i4j_nlog_3
C:\Users\test\AppData\Local\Temp\info.dat
C:\Users\test\AppData\Local\Temp\InstallHelper.exe
C:\Users\test\AppData\Local\Temp\integratedoffice.exe_c2rdll(201506181701491668).log
C:\Users\test\AppData\Local\Temp\Kno663.tmp
C:\Users\test\AppData\Local\Temp\Kno6828.tmp
C:\Users\test\AppData\Local\Temp\Kno99E9.tmp
C:\Users\test\AppData\Local\Temp\KnoD118.tmp
C:\Users\test\AppData\Local\Temp\mccspuninstall.exe
C:\Users\test\AppData\Local\Temp\megatex_edit.bin
C:\Users\test\AppData\Local\Temp\Microsoft-Windows-AppXDeploymentServer-Operational.xml
C:\Users\test\AppData\Local\Temp\Microsoft-Windows-Store-Operational.xml
C:\Users\test\AppData\Local\Temp\Microsoft-WS-Licensing-Admin.xml
C:\Users\test\AppData\Local\Temp\mlab-win32_0.1.9.2.zip
C:\Users\test\AppData\Local\Temp\mlab_0.2.zip
C:\Users\test\AppData\Local\Temp\MM26_PL(dobreprogramy.pl).msi
C:\Users\test\AppData\Local\Temp\OfficeSetup.exe
C:\Users\test\AppData\Local\Temp\opera_crashreporter.log
C:\Users\test\AppData\Local\Temp\others
C:\Users\test\AppData\Local\Temp\qtsingleapp-TexMak-44c1-3-lockfile
C:\Users\test\AppData\Local\Temp\Skype.msi
C:\Users\test\AppData\Local\Temp\SparkMiniInstall.ini
C:\Users\test\AppData\Local\Temp\spark_install.exe
C:\Users\test\AppData\Local\Temp\SPBDC4D.tmp
C:\Users\test\AppData\Local\Temp\SPKCBE2.tmp
C:\Users\test\AppData\Local\Temp\StructuredQuery.log
C:\Users\test\AppData\Local\Temp\TemproCleanup.txt
C:\Users\test\AppData\Local\Temp\TOSHIBA-20150624-1531.log
C:\Users\test\AppData\Local\Temp\VGX353B.tmp
C:\Users\test\AppData\Local\Temp\VGX354B.tmp
C:\Users\test\AppData\Local\Temp\VGX355C.tmp
C:\Users\test\AppData\Local\Temp\VGX355D.tmp
C:\Users\test\AppData\Local\Temp\VGX355E.tmp
C:\Users\test\AppData\Local\Temp\VGX356F.tmp
C:\Users\test\AppData\Local\Temp\VGX3570.tmp
C:\Users\test\AppData\Local\Temp\VGX3571.tmp
C:\Users\test\AppData\Local\Temp\VGX3581.tmp
C:\Users\test\AppData\Local\Temp\VGX3582.tmp
C:\Users\test\AppData\Local\Temp\WebDataJs
C:\Users\test\AppData\Local\Temp\WER-270596656-0.sysdata.xml
C:\Users\test\AppData\Local\Temp\WER3A87.tmp.WERInternalMetadata.xml
C:\Users\test\AppData\Local\Temp\WER3E25.tmp.appcompat.txt
C:\Users\test\AppData\Local\Temp\WER3E55.tmp.WERInternalMetadata.xml
C:\Users\test\AppData\Local\Temp\winstore.log
C:\Users\test\AppData\Local\Temp\WINWORD.EXE_c2rdll(20150618235629A68).log
C:\Users\test\AppData\Local\Temp\wmplog00.sqm
C:\Users\test\AppData\Local\Temp\wmplog01.sqm
C:\Users\test\AppData\Local\Temp\wmsetup.log
C:\Users\test\AppData\Local\Temp\wop3E25.tmp
C:\Users\test\AppData\Local\Temp\wop4D63.tmp
C:\Users\test\AppData\Local\Temp\wopA3FC.tmp
C:\Users\test\AppData\Local\Temp\wopA6C.tmp
C:\Users\test\AppData\Local\Temp\wopBF22.tmp
C:\Users\test\AppData\Local\Temp\wopD8EC.tmp
C:\Users\test\AppData\Local\Temp\wopE782.tmp
C:\Users\test\AppData\Local\Temp\wopE825.tmp
C:\Users\test\AppData\Local\Temp\wopEB91.tmp
C:\Users\test\AppData\Local\Temp\~DF300937E8DD3E09F8.TMP
C:\Users\test\AppData\Local\Temp\~DF3464D8FA40F96E74.TMP
C:\Users\test\AppData\Local\Temp\~DF743DB3FA376CF8C1.TMP
C:\Users\test\AppData\Local\Temp\~DF7A4BD3F6290DB874.TMP
C:\Users\test\AppData\Local\Temp\~DFA3DAB9114493644A.TMP
C:\Users\test\AppData\Local\Temp\~DFDABA481E30B67CF1.TMP
C:\Users\test\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\test\AppData\Local\Temp\{99DF2214-1027-4D9C-B388-77A1C55E5609}\Setup.exe
C:\Users\test\AppData\Local\Temp\{386C8B8D-E939-4fbc-9658-18521092C408}\download_map.xml
C:\Users\test\AppData\Local\Temp\{34370D49-5ADE-4D74-9D53-20B7C29DFAF0}\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}\InstallHelper.dll
C:\Users\test\AppData\Local\Temp\{331E8084-BC91-46CC-B03A-FAC7822BB142}\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}\InstallHelper.dll
C:\Users\test\AppData\Local\Temp\winre\ExtractedFromWim
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-f9fd9b3f-d74d-4829-baef-230be70fbfa3\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-ed121066-01a6-4202-87e2-0fdb332a825a\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-e54224bb-d210-4f51-9d13-0f2fd86f4419\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-8a27dd43-ce63-479f-b3d1-97cd6d638d29\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-7b2f922b-6727-4ee3-95c6-51d5158b3541\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-68fb86d8-3dbf-46fc-9fa6-8426ef1c4fa4\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-34f2178a-1f03-44a5-b9ad-c4160ab08d83\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-34ebfbfa-7141-445f-bdfc-03e683c5a7f2\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-21bb92d3-04ad-42df-a160-4cd9bd1464c4\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-21354b0f-4965-4052-b712-53e24e5735c1\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\uninstaller-WTA-09a944d0-5532-4a21-8e1f-1b9661767d52\Uninstaller.exe
C:\Users\test\AppData\Local\Temp\u\cds\alcatel.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\alcatel.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\ericsson.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\ericsson.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\mitsubishi.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\mitsubishi.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\motorola.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\motorola.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\nokia.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\nokia.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\panasonic.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\panasonic.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\philips.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\philips.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\sagem.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\sagem.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\samsung.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\samsung.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\siemens.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\siemens.pl.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\sony.en.doc.html
C:\Users\test\AppData\Local\Temp\u\cds\sony.pl.doc.html
C:\Users\test\AppData\Local\Temp\Temp3_survivalmmo.zip\survivalmmo\SGlauncher.exe
C:\Users\test\AppData\Local\Temp\Temp2_survivalmmo.zip\survivalmmo\SGlauncher.exe
C:\Users\test\AppData\Local\Temp\Temp1_survivalmmo.zip\survivalmmo\SGlauncher.exe
C:\Users\test\AppData\Local\Temp\TeamViewer\7.hta
C:\Users\test\AppData\Local\Temp\TeamViewer\TeamViewer_.exe
C:\Users\test\AppData\Local\Temp\TeamViewer\TV10Install.log
C:\Users\test\AppData\Local\Temp\TeamViewer\tvinfo.ini
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\DlgForceInstall.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\DlgInstalling.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\DlgLicense.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\DlgMain.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\DlgUnInstallConfig.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\DlgUnInstallDone.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\DlgUnInstalling.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\DlgUpdate.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\DlgUserProtocol.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\en-us.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\id.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\InstallStyle.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\MsgBox.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\MsgBox2.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\pt-br.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\th.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\zh-cn.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\zh-cn\Config.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\th\Config.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\bg.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\bg2.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\bg_mes.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\btn-bg.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\btn_close.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\btn_close2.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\btn_install.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\btn_messagebox_close.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\btn_min.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\btn_min2.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\btn_msg.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\btn_uninstall.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_CheckedHighlight.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_CheckedHighlight_light.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_CheckedNormal.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_CheckedNormal_light.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_CheckedPushed.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_CheckedPushed_light.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_UncheckedHighlight.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_UncheckedHighlight_light.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_UncheckedNormal.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_UncheckedNormal_light.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_UncheckedPushed.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\CB_UncheckedPushed_light.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\custom.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\ImproveQuality.txt
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\install_complete_ani.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\install_config_ani.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\install_shadow.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\install_title.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\ins_custom_config_bg.jpg
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\Licence.txt
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\logo_83_83.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\logo_transparent_83_83.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\product_text.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\progress.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\progress_bg.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\repair_man.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\richedit_bkg.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\set_default_logo.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\tab_btn_bkg.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\tab_btn_bkg_sel.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\uninstalling_text.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\uninstall_complete_text.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\uninstall_recycle.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\res\unin_title.png
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\pt-br\Config.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\id\Config.xml
C:\Users\test\AppData\Local\Temp\sparkskinres_SkinXUI\en-us\Config.xml
C:\Users\test\AppData\Local\Temp\sparksetup_dll\bdcommon.dll
C:\Users\test\AppData\Local\Temp\sparksetup_dll\bdxctrl.dll
C:\Users\test\AppData\Local\Temp\sparksetup_dll\bdxui.dll
C:\Users\test\AppData\Local\Temp\sparksetup\DefaultConfig.xml
C:\Users\test\AppData\Local\Temp\sparksetup\uninstall_20150626020445.log
C:\Users\test\AppData\Local\Temp\Skype\DbTemp\temp-q520Xu5oMXc5C1R3Tdsr0dvZ
C:\Users\test\AppData\Local\Temp\Skype\DbTemp\temp-sY5zaVa5GCrYbERuHbClccL5
C:\Users\test\AppData\Local\Temp\Opera Installer\opera_installer_20150320144059.log
C:\Users\test\AppData\Local\Temp\Opera Installer\opera_installer_20150320144100.exe
C:\Users\test\AppData\Local\Temp\Opera Installer\opera_installer_20150320144101.log
C:\Users\test\AppData\Local\Temp\Opera Installer\opera_installer_20150320144149.log
C:\Users\test\AppData\Local\Temp\Opera Installer\opera_installer_20150320144755.log
C:\Users\test\AppData\Local\Temp\Opera Installer\opera_installer_20150320144800.log
C:\Users\test\AppData\Local\Temp\nsq4709.tmp\CloseRun2.dll
C:\Users\test\AppData\Local\Temp\nsq4709.tmp\SkinXUI.dll
C:\Users\test\AppData\Local\Temp\nsq4709.tmp\System.dll
C:\Users\test\AppData\Local\Temp\nsp6CDE.tmp\CloseRun2.dll
C:\Users\test\AppData\Local\Temp\nsp6CDE.tmp\SkinXUI.dll
C:\Users\test\AppData\Local\Temp\nsp6CDE.tmp\System.dll
C:\Users\test\AppData\Local\Temp\nsoCCF2.tmp\linker.dll
C:\Users\test\AppData\Local\Temp\nsdBEE2.tmp\System.dll
C:\Users\test\AppData\Local\Temp\is740357246\3FA05BD7_stp\RAM.dll
C:\Users\test\AppData\Local\Temp\e4jF8F8.tmp_dir1427652574\exe4jlib.jar
C:\Users\test\AppData\Local\Temp\e4jF8F8.tmp_dir1427652574\i4jdel.exe
C:\Users\test\AppData\Local\Temp\e4jCCA.tmp_dir1429443038\exe4jlib.jar
C:\Users\test\AppData\Local\Temp\e4jCCA.tmp_dir1429443038\i4jdel.exe
C:\Users\test\AppData\Local\Temp\e4jB8A8.tmp_dir1426351015\exe4jlib.jar
C:\Users\test\AppData\Local\Temp\e4jB8A8.tmp_dir1426351015\i4jdel.exe
C:\Users\test\AppData\Local\Temp\e4j92.tmp_dir1426179681\exe4jlib.jar
C:\Users\test\AppData\Local\Temp\e4j92.tmp_dir1426179681\i4jdel.exe
C:\Users\test\AppData\Local\Temp\e4j6EC9.tmp_dir1426351062\exe4jlib.jar
C:\Users\test\AppData\Local\Temp\e4j6230.tmp_dir1427035645\exe4jlib.jar
C:\Users\test\AppData\Local\Temp\e4j6230.tmp_dir1427035645\i4jdel.exe
C:\Users\test\AppData\Local\Temp\e4j3C7C.tmp_dir1427653640\exe4jlib.jar
C:\Users\test\AppData\Local\Temp\e4j3C7C.tmp_dir1427653640\i4jdel.exe
C:\Users\test\AppData\Local\Temp\e4j22BD.tmp_dir1426351042\exe4jlib.jar
C:\Users\test\AppData\Local\Temp\bdMiniDownloader-EU_Tools_Test_mini\gnet_log_20150625143717.txt
C:\Users\test\AppData\Local\Temp\Baidu\Spark\errors\BugReportConfig.ini
C:\Users\test\AppData\Local\Temp\avastBCLTMP\chrome\Default\History
C:\Users\test\AppData\Local\Temp\avastBCLTMP\chrome\Default\Web Data
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Izam155) #3

Wszystko zrobione krok po kroku jednak dalej reklamy i Strong Signal są obecne. 


(Acorus) #4

Pokaż nowy log z FRST bez Addition.


(Izam155) #5

http://www.wklej.org/id/1749311/


(Acorus) #6

Otwórz notatnik systemowy i wklej:

URLSearchHook: [S-1-5-21-950207565-2800614287-1471140029-1001] ATTENTION == Default URLSearchHook is missing
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
S2 TheDesktopWeatherService; C:\Program Files (x86)\WeatherTool\1.2.2.10180\WeatherService.exe [X]
S2 VBoxAswDrv; \\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
2015-06-29 14:24 - 2015-06-29 14:24 - 00000000 ____ D C:\Program Files (x86)\Strong Signal

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

Reset Chrome: https://support.google.com/chrome/answer/3296214?hl=pl a jak nie pomoże to


(Izam155) #7

Dopiero re-instalacja Chrome pomogła, wielkie dzięki za wszystkie wskazówki! :slight_smile: