Strong Signal ads

SWE · 25 Luty 2015 19:33

Żona zainstalowała przy okazji z jakimś programem…

FRST

http://wklej.to/8oFQE

Addition

http://wklej.to/UlSYB

Z góry dzięki!

Atis · 25 Luty 2015 23:15

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2100001416-2170443706-2230923172-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: No Name -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKU\S-1-5-21-2100001416-2170443706-2230923172-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
CHR Extension: (Strong Signal) - C:\Users\JM\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndgafedgphnfegpdleilandjadhkecpl [2015-02-19]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]
2015-02-22 21:40 - 2015-02-22 21:51 - 00000000 ____ D () C:\AdwCleaner
2015-02-19 10:49 - 2015-02-19 10:49 - 00717216 _____ (Web Generic ) C:\Users\JM\Downloads\Photoscape(12505)-dp.exe
C:\ProgramData\*.log
Task: {5D12FC73-1119-40F8-A6FD-636545B6D1F8} - System32\Tasks\{8F6CFA1A-0A2C-4902-823B-7665078D1B97} => pcalua.exe -a "D:\Pobrane\Heroes III WoG 3.58f\Heroes III\H3WUPD.EXE" -d "D:\Pobrane\Heroes III WoG 3.58f\Heroes III"
Task: {3692980D-6B0D-4754-8581-853BCC3B1F2F} - System32\Tasks\DriverToolkit Autorun => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
Task: C:\windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
HKU\S-1-5-21-2100001416-2170443706-2230923172-1001\Software\Classes\.exe: exefile => <===== ATTENTION!
HKU\S-1-5-21-2100001416-2170443706-2230923172-1001\Software\Classes\exefile: <===== ATTENTION!
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition.