Strong signal ads


(Piotr Stec44) #1

proszę o pomoc w usunięciu Strong signal ads! :slight_smile:

FRST.txt


(Acorus) #2

Brak loga Addition.txt


(Piotr Stec44) #3

Przepraszam, już wstawiam :slight_smile:

Addition.txt


(Acorus) #4

Odinstaluj key-find uninstall.Otwórz notatnik systemowy i wklej:

Task: {0BAE6CDA-1187-4F52-9C50-DA6EDF2B4A8A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-382665349-4269311730-1469142350-1002UA = C:\Users\komputer\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {40C5F4AC-532B-4196-9292-49671CEE9769} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-382665349-4269311730-1469142350-1002Core = C:\Users\komputer\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-382665349-4269311730-1469142350-1002Core.job = C:\Users\komputer\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-382665349-4269311730-1469142350-1002UA.job = C:\Users\komputer\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-382665349-4269311730-1469142350-1005\...\CurrentVersion\Windows: [Load] C:\ProgramData\msfczetc.exe ===== ATTENTION
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-382665349-4269311730-1469142350-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_5a326a74-d3c9-4fd8-bd1b-2ab64be5e70d
HKU\S-1-5-21-382665349-4269311730-1469142350-1005\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
HKU\S-1-5-21-382665349-4269311730-1469142350-1005\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
HKU\S-1-5-21-382665349-4269311730-1469142350-1005\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
HKU\S-1-5-21-382665349-4269311730-1469142350-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
URLSearchHook: [S-1-5-21-382665349-4269311730-1469142350-1001] ATTENTION == Default URLSearchHook is missing.
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
SearchScopes: HKLM - OldSearch URL = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-382665349-4269311730-1469142350-1005 - OldSearch URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD10JPVX-22JC3T0_WD-WX71EB3CEU41CEU41ts=1423484380type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-382665349-4269311730-1469142350-1005 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD10JPVX-22JC3T0_WD-WX71EB3CEU41CEU41ts=1423484380type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-382665349-4269311730-1469142350-1005 - {2002893B-2B79-4F58-92E0-4D41A024EAB9} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD10JPVX-22JC3T0_WD-WX71EB3CEU41CEU41ts=1423484380type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-382665349-4269311730-1469142350-1005 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD10JPVX-22JC3T0_WD-WX71EB3CEU41CEU41ts=1423484380type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-382665349-4269311730-1469142350-1005 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD10JPVX-22JC3T0_WD-WX71EB3CEU41CEU41ts=1423484380type=defaultq={searchTerms}
BHO-x32: No Name - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - No File
CHR HomePage: Default - hxxp://www.\u003C!DOCTYPE html PUBLIC \
CHR RestoreOnStartup: Default - "hxxp://search.yahoo.com/?fr=hp-ddc-bdtype=bg_616_bl-is-17 __alt__ ddc_dsssyc_bd_com"
CHR StartupUrls: Default - "hxxp://www.\u003C!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"hxxp://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\""
CHR Extension: (Strong Signal) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepampipjplnigjhkaijlbeppicakggl [2015-02-09]
CHR HKU\S-1-5-21-382665349-4269311730-1469142350-1005\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
S2 0030591431081387mcinstcleanup; C:\Windows\TEMP\003059~1.EXE -cleanup -nolog [X]
S3 cpuz136; \\C:\Users\komputer\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
2015-05-08 12:32 - 2015-05-15 19:27 - 00000000 ____ D () C:\Users\Magda\Downloads\FRST-OlderVersion
C:\ProgramData\msfczetc.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.