Signal strong, spyhunter - jak się tego pozbyć?


(Mlodaszala) #1

Jestem zielona w temacie! błagam o napisanie krok po kroku, jak dla dziecka…


(Acorus) #2

Odinstaluj McAfee Security Scan Plus,SpyHunter 4,Superfish Inc. VisualDiscovery.Otwórz notatnik systemowy i wklej:

Task: {F3F5EB66-94C4-4815-8762-C231E5EBCAF2} - System32\Tasks\SpyHunter4Startup = C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2015-02-13] (Enigma Software Group USA, LLC.)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.!doctype html
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://isearch.!doctype html
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.!doctype html
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.!doctype html
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.!doctype html
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.!doctype html
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.!doctype html
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.!doctype html
HKU\S-1-5-21-498505649-3479822125-3285032020-1002\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=dsppts=1421758415from=coruid=ST500LT012-1DG142_S3PG32QZXXXXS3PG32QZq={searchTerms}
HKU\S-1-5-21-498505649-3479822125-3285032020-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.!doctype html
HKU\S-1-5-21-498505649-3479822125-3285032020-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dsppts=1421758415from=coruid=ST500LT012-1DG142_S3PG32QZXXXXS3PG32QZq={searchTerms}
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-498505649-3479822125-3285032020-1002 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\S-1-5-21-498505649-3479822125-3285032020-1002 - {1046DC47-F5EC-4B34-B09A-A2AC68EEEE82} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST500LT012-1DG142_S3PG32QZXXXXS3PG32QZts=1421758448type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-498505649-3479822125-3285032020-1002 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST500LT012-1DG142_S3PG32QZXXXXS3PG32QZts=1421758448type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-498505649-3479822125-3285032020-1002 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://isearch.omiga-plus.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=ST500LT012-1DG142_S3PG32QZXXXXS3PG32QZts=1421758448type=defaultq={searchTerms}
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
FF Homepage: hxxp://isearch.!doctype html
FF Extension: FF Toolbar - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\h1ahw7cs.default\Extensions\fftoolbar2014@etech.com [2015-02-13]
FF Extension: Strong Signal - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\h1ahw7cs.default\Extensions\{1d1a835d-e7db-4598-a263-34b77157d4e9}.xpi [2015-02-12]
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\h1ahw7cs.default\extensions\fftoolbar2014@etech.com
FF HKU\S-1-5-21-498505649-3479822125-3285032020-1002\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - No Path
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158864 2015-01-08] (XTab system)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025920 2015-02-13] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-02-13] ()
2015-02-13 11:30 - 2015-02-13 11:30 - 00003328 _____ () C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2015-02-13 11:30 - 2015-02-13 11:30 - 00000000 ____ D () C:\Users\Magda\AppData\Roaming\Enigma Software Group
2015-02-13 11:29 - 2015-02-13 11:30 - 00000000 ____ D () C:\sh4ldr
2015-02-13 11:27 - 2015-02-13 11:27 - 00022704 _____ () C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-02-13 11:26 - 2015-02-13 11:26 - 00000000 ____ D () C:\Program Files\Enigma Software Group
2015-01-20 13:55 - 2015-01-20 13:55 - 00000000 ____ D () C:\ProgramData\IHProtectUpDate
2015-01-20 13:54 - 2015-02-13 12:15 - 00000000 ____ D () C:\Program Files (x86)\XTab
2015-01-20 13:53 - 2015-01-20 14:03 - 00000000 ____ D () C:\Users\Magda\AppData\Roaming\omiga-plus
C:\ProgramData\PC Reviver.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Mlodaszala) #3

nie mogę odistalować Spyhunter a Visualdiscovery nie mam na liście w programach :frowning:


(Acorus) #4

Możesz.


(Mlodaszala) #5

nie ma reklam, nie ma spyhuntera.


(Acorus) #6

Skasuj folder C:\FRST

W AdwCleaner użyj opcji Odinstaluj.


(Mlodaszala) #7

zrobione :slight_smile: dzięki wielkie jeszcze raz :slight_smile: