Widzę na forum, że nie tylko ja mam problem z samo otwierającymi się reklamami w przeglądarce, co usunąć? (m.in. strong signal i inne)
FRST http://www.wklej.org/id/1642094/
ADDITION http://www.wklej.org/id/1642093/
z góry dziękuję i pozdrawiam
Agnieszka
Otwórz notatnik systemowy i wklej:
HKLM\...\Run: [RtsFT] = C:\WINDOWS\RTFTrack.exe [6340312 2014-06-10] (Realtek semiconductor)
HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-02-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1379544 2014-03-05] (Realtek Semiconductor)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1419188031from=coruid=SanDiskXSDSSDHII240G_144232400657q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsts=1419188031from=coruid=SanDiskXSDSSDHII240G_144232400657q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1419188031from=coruid=SanDiskXSDSSDHII240G_144232400657q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsts=1419188031from=coruid=SanDiskXSDSSDHII240G_144232400657q={searchTerms}
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: PriceFountain - {b608cc98-54de-4775-96c9-097de398500c} - C:\Users\aga.lapdom\AppData\Local\PriceFountain\PriceFountainIE.dll No File
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://isearch.omiga-plus.com/?type=scts=1419188031from=coruid=SanDiskXSDSSDHII240G_144232400657
CHR Extension: (Strong Signal) - C:\Users\aga.lapdom\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepampipjplnigjhkaijlbeppicakggl [2015-02-10]
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [485888 2014-12-21] (Fuyu LIMITED) [File not signed]
R1 {078ad437-dc9f-4228-9edb-b3d1c0246ff8}Gw64; C:\Windows\System32\drivers\{078ad437-dc9f-4228-9edb-b3d1c0246ff8}Gw64.sys [48784 2014-12-10] (StdLib)
R1 {442ad619-2fad-4d96-9434-49e6d1c6e280}w64; C:\Windows\System32\drivers\{442ad619-2fad-4d96-9434-49e6d1c6e280}w64.sys [48792 2014-12-20] (StdLib)
2015-02-21 08:15 - 2015-02-21 08:15 - 00000000 ____ D () C:\Users\aga.lapdom\AppData\Roaming\eCyber
2015-02-21 08:14 - 2015-02-21 08:14 - 01167656 _____ (Elex do Brasil Participações Ltda) C:\Users\aga.lapdom\Downloads\yet_another_cleaner_avae_setup_10153395398.exe
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Dziękuję -pomogło (na razie nie widzę reklam, nie wyskakują okienka, nie otwierają się same strony z reklamami) , zauważyłam, że się tak dzieje po tym, gdy córka gra w Simsy… ;-/
Skasuj folder C:\FRST
zrobione 
dzięki!