Witam,
Proszę o pomoc jak usunąć Strong Signal ads?
Pliki z FRST załączeniu.
Pozdr
Otwórz notatnik systemowy i wklej:
Task: {10FDC484-4B73-43E4-A7D8-F0F5C7D1ECB3} - System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore = C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [2014-04-23] (PriceMeter) ==== ATTENTION
Task: {763A7CCB-5307-4642-8438-10DA6BC98BE0} - System32\Tasks\YourFile DownloaderUpdate = C:\Program Files (x86)\YourFileDownloader Updater\YourFileUpdater.exe ==== ATTENTION
Task: {7771DA83-CB51-40FE-98E6-E822102F55DD} - System32\Tasks\pricemeterdownloader = C:\Users\Maria Jablonska\AppData\Local\PriceMeter\pricemeterd.exe ==== ATTENTION
Task: {AA45383B-09E4-4031-96D7-946685F8309A} - System32\Tasks\BitGuard = Sc.exe start BitGuard ==== ATTENTION
Task: {E59557AE-973C-4F15-9EB2-57B54F8C1764} - System32\Tasks\APSnotifierPP1 = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: {F43E2FEF-C7BB-45D3-9DA2-0DB1D721A1A4} - System32\Tasks\EPUpdater = C:\Users\Maria Jablonska\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-09-01] () ==== ATTENTION
Task: {F5EB0149-6576-4ABB-90A1-8C12815EB345} - System32\Tasks\APSnotifierPP2 = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: {F6307C06-1375-43D2-B9A9-554DF792346F} - System32\Tasks\Price Meter Updater = C:\Users\MARIAJ~1\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE ==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP1.job = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job = C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe ==== ATTENTION
Task: C:\Windows\Tasks\Price Meter Updater.job = C:\Users\MARIAJ~1\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE ==== ATTENTION
Task: C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job = C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe ==== ATTENTION
Task: C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job = C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe ==== ATTENTION
HKLM-x32\...\Run: [CLVirtualDrive] = C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491320 2012-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] = C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] = C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] = [X]
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-3014712591-2921505344-1678855117-1002\...\Run: [ALLUpdate] = C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [2995712 2013-01-23] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-3014712591-2921505344-1678855117-1002\...\Run: [] = [X]
HKU\S-1-5-21-3014712591-2921505344-1678855117-1002\...\Run: [PriceMeterW] = "C:\Users\Maria Jablonska\AppData\Local\PriceMeter\pricemeterw.exe"
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll = c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hpts=1398088160from=expuid=HitachiXHTS547550A9E384_J2160056GA57KCGA57KCX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=dsts=1398088160from=expuid=HitachiXHTS547550A9E384_J2160056GA57KCGA57KCXq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hpts=1398088160from=expuid=HitachiXHTS547550A9E384_J2160056GA57KCGA57KCX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?type=dsts=1398088160from=expuid=HitachiXHTS547550A9E384_J2160056GA57KCGA57KCXq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3014712591-2921505344-1678855117-1002\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.searchgol.com/?babsrc=HP_ssmntrId=D6CC12689D1D6FF3affID=125036tsp=5035
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1398088160from=expuid=HitachiXHTS547550A9E384_J2160056GA57KCGA57KCXq={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}l=diso=CPNTDF
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1398088160from=expuid=HitachiXHTS547550A9E384_J2160056GA57KCGA57KCXq={searchTerms}
SearchScopes: HKLM - {8E904834-1B83-42F4-8F86-B4FF914412F2} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://pl.search.yahoo.com/search?p={searchTerms}ei={inputEncoding}fr=chr-hp-psgtype=CPNTDF
SearchScopes: HKLM-x32 - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}FORM=AVASDFPC=AV01
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}l=diso=CPNTDF
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1398088160from=expuid=HitachiXHTS547550A9E384_J2160056GA57KCGA57KCXq={searchTerms}
SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}FORM=AVASDFPC=AV01
SearchScopes: HKLM-x32 - {8E904834-1B83-42F4-8F86-B4FF914412F2} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://pl.search.yahoo.com/search?p={searchTerms}ei={inputEncoding}fr=chr-hp-psgtype=CPNTDF
SearchScopes: HKU\.DEFAULT - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3014712591-2921505344-1678855117-1002 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}l=diso=CPNTDF
SearchScopes: HKU\S-1-5-21-3014712591-2921505344-1678855117-1002 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://istart.webssearches.com/web/?type=dsts=1398088160from=expuid=HitachiXHTS547550A9E384_J2160056GA57KCGA57KCXq={searchTerms}
SearchScopes: HKU\S-1-5-21-3014712591-2921505344-1678855117-1002 - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3014712591-2921505344-1678855117-1002 - {8E904834-1B83-42F4-8F86-B4FF914412F2} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8tag=hp-uk3-vsb-21link%5Fcode=qsindex=apsfield-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3014712591-2921505344-1678855117-1002 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://pl.search.yahoo.com/search?p={searchTerms}ei={inputEncoding}fr=chr-hp-psgtype=CPNTDF
BHO-x32: No Name - {53d1f32a-a4e1-493c-8830-a4f3599a667f} - No File
BHO-x32: searchgol Helper Object - {8F547BDD-FCD4-48F8-A06F-573D6F404A3C} - C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\bh\searchgol.dll [2013-03-19] (Montera Technologeis LTD)
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=scts=1398088160from=expuid=HitachiXHTS547550A9E384_J2160056GA57KCGA57KCX
FF SelectedSearchEngine: webssearches
FF SearchPlugin: C:\Users\Maria Jablonska\AppData\Roaming\Mozilla\Firefox\Profiles\ll4k9qvv.default\searchplugins\searchgol.xml [2013-10-14]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml [2014-04-21]
FF Extension: SearchGol - C:\Users\Maria Jablonska\AppData\Roaming\Mozilla\Firefox\Profiles\ll4k9qvv.default\Extensions\ffxtlbr@searchgol.com [2013-10-14]
FF Extension: Strong Signal - C:\Users\Maria Jablonska\AppData\Roaming\Mozilla\Firefox\Profiles\ll4k9qvv.default\Extensions\{629ac51d-702d-4c48-8a56-6d6a5061a41f}.xpi [2015-02-26]
CHR HKLM-x32\...\Chrome\Extension: [aipfmkinhleccnodemkoofnnofpbbpac] - C:\Users\Maria Jablonska\AppData\Roaming\BabSolution\CR\searchgol.crx [2013-10-14]
S2 pricemeterliveUpdate; C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [150504 2014-04-23] (PriceMeter)
S3 pricemeterliveUpdatem; C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [150504 2014-04-23] (PriceMeter)
S2 Service Mgr StrongSignal; "C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe" [X]
S3 hwdatacard; \SystemRoot\system32\DRIVERS\ewusbmdm.sys [X]
2015-03-08 17:06 - 2015-03-08 17:11 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Maria Jablonska\Downloads\SpyHunter-Installer.exe
2014-04-23 21:49 - 2014-04-23 17:12 - 1089722 _____ (AnyProtect.com) C:\Users\Maria Jablonska\AppData\Local\AnyProtectScannerSetup.exe
2014-04-21 14:56 - 2014-04-21 14:56 - 1097384 _____ (AnyProtect.com) C:\Users\Maria Jablonska\AppData\Local\nsaD21B.tmp
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Wita,
Bardzo dziękuję za pomoc.
Mam jeszcze pytanie, czy usunąć FRST z C: i pliki txt?
Pozdr,
Skasuj folder C:\FRST
Wielkie dzięki. Zrobione.