Strong Signal Ads

Dla specjalistów Bezpieczeństwo
#1

Ja również mam problem z tym paskudztwem. Poniżej logi, nie wiem czy poprawne.

 

Addition - http://wklej.org/id/1665447/

Shortcut - http://wklej.org/id/1665449/

FRST - http://wklej.org/id/1665450/

 

Proszę o pomoc.

#2

Odinstaluj Akamai NetSession Interface.Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7510232 2014-01-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1374936 2014-01-14] (Realtek Semiconductor)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3098168897-1800639071-183899932-1001\...\Run: [Akamai NetSession Interface] = C:\Users\Grzegorz\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3098168897-1800639071-183899932-1001\...\MountPoints2: {b59d4847-9418-11e4-825a-9cad97da58b6} - "F:\Setup.exe"
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR StartupUrls: Default - "hxxp://google.pl/", "hxxp://www.google.com/", "hxxp://www.istartsurf.com/?type=hpppts=1426091057from=squadmuid=TOSHIBAXMQ01ABF050_84H6SJB1SXX84H6SJB1S"
CHR Extension: (Strong Signal) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jahepoliaomnhnejhcjbapfailjpapek [2015-03-12]
CHR Extension: (Steel Cut) - C:\Users\Grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnpmdolhefplgicmenfmihlegdbpifob [2015-03-11]
R2 Update Steel Cut; C:\Program Files (x86)\Steel Cut\updateSteelCut.exe [412912 2015-03-18] ()
R2 Util Steel Cut; C:\Program Files (x86)\Steel Cut\bin\utilSteelCut.exe [412912 2015-03-18] ()
U2 McMPFSvc; No ImagePath
2015-03-18 10:44 - 2015-03-18 11:20 - 00000000 ____ D () C:\AdwCleaner
2015-03-11 17:17 - 2015-03-18 11:23 - 00000000 ____ D () C:\Program Files (x86)\Steel Cut
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.