Strong signal - dałem się wrobić


(Giiixxxx6) #1

Cześć

Strong Signal zainstalował się chyba razem z instalatorem programu ze strony internetowej.

 

Frst http://wklej.org/id/1654378/

Addition http://wklej.org/id/1654380/

Shortcut http://wklej.org/id/1654381/

 

Dzięki za pomoc :slight_smile:


(Acorus) #2

Otwórz notatnik systemowy i wklej:

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hpts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQ
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hpts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQ
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hpts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQ
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hpts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQ
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
HKU\S-1-5-21-453154066-1838936862-1790011891-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hpts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQ
HKU\S-1-5-21-453154066-1838936862-1790011891-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hpts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQ
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
SearchScopes: HKU\S-1-5-21-453154066-1838936862-1790011891-1001 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
SearchScopes: HKU\S-1-5-21-453154066-1838936862-1790011891-1001 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=dsts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQq={searchTerms}
SearchScopes: HKU\S-1-5-21-453154066-1838936862-1790011891-1001 - {96D300B6-EE31-4289-8F95-6DC6C6D1BEB3} URL =
FF DefaultSearchEngine: sweet-page
FF SelectedSearchEngine: sweet-page
FF Homepage: hxxp://www.sweet-page.com/?type=hpts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQ
FF SearchPlugin: C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\6w8ar7dy.default\searchplugins\sweet-page.xml
FF Extension: Fast Start - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\6w8ar7dy.default\Extensions\istart_ffnt@gmail.com [2015-03-04]
FF Extension: Search Enginer - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\6w8ar7dy.default\Extensions\searchengine@gmail.com [2015-03-04]
FF Extension: Strong Signal - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\6w8ar7dy.default\Extensions\{78321fcc-38de-4e31-9756-9afb7ad2672e}.xpi [2015-03-04]
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\6w8ar7dy.default\extensions\searchengine@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [istart_ffnt@gmail.com] - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\6w8ar7dy.default\extensions\istart_ffnt@gmail.com
CHR HomePage: Default - hxxp://www.sweet-page.com/?type=hpts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQ
CHR StartupUrls: Default - "hxxp://www.sweet-page.com/?type=hpts=1425475145from=coruid=ST500LT012-9WS142_W0V861CQXXXXW0V861CQ"
CHR DefaultSearchKeyword: Default - sweet-page
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [581368 2015-03-04] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [388856 2015-03-04] ()
S1 BAPIDRV; system32\DRIVERS\BAPIDRV64.sys [X]
2015-03-04 14:19 - 2015-03-04 14:19 - 00000000 ____ D () C:\Users\Max\AppData\Roaming\sweet-page
2015-03-04 14:18 - 2015-03-04 15:13 - 00000000 ____ D () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
2015-03-04 14:18 - 2015-03-04 14:20 - 00000000 ____ D () C:\Program Files (x86)\Strong Signal
2015-03-03 18:03 - 2015-03-03 18:03 - 00000000 __SHD () C:\found.004
2015-03-03 17:12 - 2015-03-03 17:12 - 00000000 __SHD () C:\found.003
2015-03-03 17:12 - 2015-03-03 17:12 - 00000000 __SHD () C:\found.002
2015-03-03 17:12 - 2015-03-03 17:12 - 00000000 __SHD () C:\found.001
2015-03-03 17:12 - 2015-03-03 17:12 - 00000000 __SHD () C:\found.000
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.