Strong signal - jak usunąć?

Dla specjalistów Bezpieczeństwo
#1

Witam,

Mam zainfekowany komputer jakims syfem typu strong signal add, proszę o pomoc w usunięciu tego.

 

FRST: http://www.wklejto.pl/227015

Addition: http://www.wklejto.pl/227016

 

Pomożecie?

 

#2

W logach brak ukośników.Umieść na wklej .org

#3

FRST http://wklej.org/id/1711372/

Addition http://wklej.org/id/1711374/

#4

Otwórz notatnik systemowy i wklej:

Task: {23842206-96CF-40AB-8474-4A08EEAE77F1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2133123347-1844305491-2667635363-1000Core = C:\Users\PCDell\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-05] (Facebook Inc.)
Task: {9D794E08-2D32-4731-8FE3-32350685F3C8} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2133123347-1844305491-2667635363-1000UA = C:\Users\PCDell\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-05-05] (Facebook Inc.)
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2133123347-1844305491-2667635363-1000Core.job = C:\Users\PCDell\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2133123347-1844305491-2667635363-1000UA.job = C:\Users\PCDell\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKU\S-1-5-21-2133123347-1844305491-2667635363-1000\...\Run: [Facebook Update] = C:\Users\PCDell\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-05-05] (Facebook Inc.)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
FF Extension: Strong Signal - C:\Users\PCDell\AppData\Roaming\Mozilla\Firefox\Profiles\iqis5rrd.default\Extensions\{f318d533-127c-4630-af87-2d2b706e5282}.xpi [2015-02-17]
CHR HomePage: Default - hxxp://www.max-start.com/?babsrc=HP_ss_wls_mib2mntrId=F642F81A67095FAEaffID=119357tsp=5006
CHR StartupUrls: Default - "hxxp://www.max-start.com/?babsrc=HP_ss_wls_mib2mntrId=F642F81A67095FAEaffID=119357tsp=5006"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\38.0.2125.111\PepperFlash\pepflashplayer.dll No File
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

Wielkie dzięki za pomoc!