Strong signal i inne

Dla specjalistów Bezpieczeństwo
#1

Drodzy,

 

mam spory kłopot z moim kompem, próbowałam już różnych sposobów, ale strong signal jest mocniejszy;/ 

http://wklej.to/dRSxE - FRST

http://wklej.to/DwjQ6  Addition

 

Z góry dziękuje :slight_smile:

#2

  1. W panelu sterowania odinstaluj Strong Signal.

  2. Pobierz i uruchom AdwCleaner Kliknij Skanuj i później Usuń.

  3. Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

    CloseProcesses:
    Winlogon\Notify\igfxcui: igfxdev.dll [X]
    HKU\S-1-5-21-92303745-1427446707-1070136817-1001…\Run: [Yahoo! Search] => C:\Users\Weronika\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe
    ShellIconOverlayIdentifiers: [SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
    ShellIconOverlayIdentifiers: [SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
    ShellIconOverlayIdentifiers: [SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
    ShellIconOverlayIdentifiers-x32: [SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
    ShellIconOverlayIdentifiers-x32: [SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
    ShellIconOverlayIdentifiers-x32: [SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_9d14baaa-b397-422e-9401-00f0cc39f823
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
    HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
    HKU\S-1-5-21-92303745-1427446707-1070136817-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_9d14baaa-b397-422e-9401-00f0cc39f823
    SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_9d14baaa-b397-422e-9401-00f0cc39f823&q={searchTerms}
    SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_9d14baaa-b397-422e-9401-00f0cc39f823&q={searchTerms}
    SearchScopes: HKU.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-92303745-1427446707-1070136817-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_9d14baaa-b397-422e-9401-00f0cc39f823&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-92303745-1427446707-1070136817-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_9d14baaa-b397-422e-9401-00f0cc39f823&q={searchTerms}
    FF Homepage: hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-24 alt ddc_dsssyc_bd_com
    FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_616_bl-is-24 alt ddc_dsssyctab_bd_com
    FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bg_616_bl-is-24 alt ddc_dss_bd_com&p={searchTerms}
    FF SelectedSearchEngine: Yahoo Search!
    FF DefaultSearchEngine: Yahoo Search!
    OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-19 alt ddc_dsssyc_bd_com"
    OPR Extension: (Strong Signal) - C:\Users\Weronika\AppData\Roaming\Opera Software\Opera Stable\Extensions\ccdhifdlkplcpcjmfhlkbmmmnfbchifp [2015-06-11]
    R2 1d57b92d; c:\Program Files (x86)\SoftwareLite\SoftwareLite.dll [1630208 2015-04-11] () [File not signed]
    R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [655120 2015-06-11] ()
    R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [571152 2015-06-11] ()
    S2 DgiVecp; ??\C:\WINDOWS\system32\Drivers\DgiVecp.sys [X]
    S3 ew_usbenumfilter; \SystemRoot\System32\drivers\ew_usbenumfilter.sys [X]
    S3 huawei_cdcacm; \SystemRoot\system32\DRIVERS\ew_jucdcacm.sys [X]
    S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
    S3 huawei_ext_ctrl; \SystemRoot\System32\drivers\ew_juextctrl.sys [X]
    S3 huawei_wwanecm; \SystemRoot\system32\DRIVERS\ew_juwwanecm.sys [X]
    C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
    C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618c
    c:\Program Files (x86)\SoftwareLite
    2015-06-11 19:23 - 2015-06-11 19:23 - 00000000 ____ D C:\Program Files (x86)\Strong Signal
    2015-05-18 17:59 - 2015-05-18 17:59 - 00000000 _____ C:\Users\Weronika\AppData\Local\Temp.dat
    2015-05-14 18:07 - 2015-06-08 22:57 - 0000024 _____ () C:\Users\Weronika\AppData\Roaming\appdataFr25.bin
    2015-04-19 18:45 - 2015-04-24 19:51 - 0000020 _____ () C:\Users\Weronika\AppData\Roaming\appdataFr3.bin
    Task: {0C18CB1D-0390-4DA9-B986-76FD578B3427} - System32\Tasks{011608C6-EE63-448A-B4AA-0E223CE18F97} => pcalua.exe -a “C:\Users\Weronika\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrsetup.exe” -c /uninstl
    Task: {654A08DA-C560-488D-B6E7-09770705D844} - System32\Tasks{8EAD099D-C325-4EBB-8A59-34C853450255} => pcalua.exe -a "C:\Program Files (x86)\SmarterPower\SmarterPoweruninstall.exe"
    Task: {D1319FBF-E75F-4881-91BF-F5C027B7B638} - System32\Tasks{28CBED8C-EEA4-4BCE-8B2D-A351BBF19DA0} => Chrome.exe http://ui.skype.com/ui/0/6.6.0.106/pl/abandoninstall?page=tsBing
    EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

 

  1. Odinstaluj Chrome zaznaczając usunięcie danych przeglądania za pomocą Geek Uninstaller Free: KLIK

Najpierw możesz wyeksportować zakładki: KLIK

Później zainstaluj stabilną wersję: KLIK

  1. Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.
#3

ok, jestem na etapie usuwania chrome przez Geeka, i zastanawiam się, które wybrać: odinstaluj / usun program ( wymuszone) czy też usun wpis z listy?

wiem, że trywialne pytanie, ale chciałabym żeby udało się to wreszcie :wink:

#4

Wybierz Odinstaluj i później zatwierdź usunięcie pozostałości które wyszuka Geek.