Strong signal pomocy


(Norb95) #1

witam, usunąłem rozszerzenie z Opery i na godzine reklamy zniknely po czym znowu sie wylaczyla przegladarka i strong signal wrócił. 

 

logi z FRST:

http://wklej.org/id/1701222/

http://wklej.org/id/1701226/

 

Prosze o pomoc.


(Acorus) #2

Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7510232 2014-01-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1374936 2014-01-14] (Realtek Semiconductor)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKU\S-1-5-21-3636814428-3229344471-2727357515-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://q.search-simple.com/?affID=bl_82b78347-b897-4265-9e77-2105e75432beq={searchTerms}
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3636814428-3229344471-2727357515-1001 - OldSearch URL =
SearchScopes: HKU\S-1-5-21-3636814428-3229344471-2727357515-1001 - {5D1FBC14-EC60-48B8-A2DF-2F6C2A3915BB} URL = http://q.search-simple.com/?affID=bl_82b78347-b897-4265-9e77-2105e75432beq={searchTerms}
CHR RestoreOnStartup: Default - "hxxp://search.yahoo.com/?fr=hp-ddc-bdtype=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
CHR StartupUrls: Default - "hxxp://search.yahoo.com/?fr=hp-ddc-bdtype=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
CHR Extension: (Bookmark Manager) - C:\Users\laguj_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-01]
CHR Extension: (Strong Signal) - C:\Users\laguj_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibkenfpakmbdmlalmhgcpdbeennobfho [2015-05-01]
OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bdtype=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [556304 2015-05-01] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [478992 2015-05-01] ()
R3 MBAMSwissArmy; \\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
U2 McMPFSvc; No ImagePath
2015-05-01 17:27 - 2015-05-01 17:27 - 00000000 ____ D () C:\Program Files (x86)\Strong Signal
2015-05-01 00:43 - 2015-05-01 15:35 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Norb95) #3

dzięki wielkie


(Acorus) #4

Skasuj folder C:\FRST