proszę o pomoc w pozbyciu się strong signal
Odinstaluj GeekBuddy,KMP Service,SpyHunter 4.Otwórz notatnik systemowy i wklej:
Hosts:
Task: {7347E3C1-E38A-43C2-95E7-34A5C20615DE} - System32\Tasks\SpyHunter4Startup = C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2015-02-20] (Enigma Software Group USA, LLC.)
HKLM-x32\...\Run: [GrooveMonitor] = C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2015-01-10] (Oracle Corporation)
HKLM-x32\...\Run: [tvncontrol] = C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2015-02-12] (Comodo Security Solutions, Inc.)
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] - {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} = No File
BootExecute: autocheck autochk * sdnclean64.exe
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Keyword.URL: hxxp://pl.search.yahoo.com/search?fr=ytff-comodop=
FF Extension: Strong Signal - C:\Users\renia\AppData\Roaming\Mozilla\Firefox\Profiles\9w5umtq3.default\Extensions\{b0831b08-26e0-4e79-be2c-d45ab7387aaf}.xpi [2015-02-20]
CHR Extension: (Strong Signal) - C:\Users\renia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdidplnlbafiijjfbomlfokdppebnhpc [2015-02-20]
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2015-02-12] (Comodo Security Solutions, Inc.)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025920 2015-02-20] (Enigma Software Group USA, LLC.)
S3 MBAMSwissArmy; \\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
U2 SQLAGENT$sjobestiasql; No ImagePath
U2 SQLAGENT$sjobestiasqla; No ImagePath
U2 SQLAGENT$sjobestiasqls; No ImagePath
2015-02-20 18:07 - 2015-02-20 18:07 - 00003338 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup
2015-02-20 18:07 - 2015-02-20 18:07 - 00000000 ____ D () C:\Users\renia\AppData\Roaming\Enigma Software Group
2015-02-20 18:04 - 2015-02-20 18:04 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
2015-02-20 18:04 - 2015-02-20 18:04 - 00000000 ____ D () C:\Program Files\Enigma Software Group
2015-02-18 23:12 - 2015-02-18 23:12 - 00000000 ____ D () C:\Windows\System32\Tasks\Safer-Networking
2015-02-18 23:11 - 2015-02-20 17:43 - 00000000 ____ D () C:\ProgramData\Spybot - Search Destroy
2015-02-18 23:10 - 2015-02-20 17:44 - 00000000 ____ D () C:\Program Files (x86)\Spybot - Search Destroy 2
2015-02-18 23:08 - 2015-02-18 23:07 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\renia\Downloads\spybot-2.4.exe
2010-04-15 20:29 - 2011-11-15 19:49 - 0000174 _____ () C:\Users\renia\AppData\Roaming\wklnhst.dat
C:\Users\renia\jxpiinstall.exe
C:\Users\renia\setup_av_free.exe
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Dzięki. Udało się:)