Strong Signal


(Mateuszstaniek) #1

Proszę o pomoc w usunięciu. Nie daje rady sam.

Addition.txt

FRST.txt


(Acorus) #2

Otwórz notatnik systemowy i wklej:

Task: {5C033418-5821-479B-94C0-BFE655E2ECD6} - System32\Tasks\{A9F882CB-DD52-4EFF-8D6B-935396D07C7A} = Firefox.exe http://ui.skype.com/ui/0/6.1.0.129.272/pl/abandoninstall?page=tsProgressBar
HKLM-x32\...\Run: [] = [X]
HKLM-x32\...\Run: [WinampAgent] = "C:\Program Files (x86)\Winamp\winampa.exe"
AppInit_DLLs: c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll = c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll File Not Found
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll = c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
CHR HKU\S-1-5-21-4235917144-3652417787-2054622363-1003\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKU\S-1-5-21-4235917144-3652417787-2054622363-1003 - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}babsrc=SP_ssmntrId=D8AA4CEB4210D93DaffID=121565tt=080913_nchtsp=4999
BHO: No Name - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No File
BHO: No Name - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No File
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: No Name - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No File
BHO-x32: No Name - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\e9emdcta.default\searchplugins\ask-web-search.xml
FF Extension: Strong Signal - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\e9emdcta.default\Extensions\{d53d402a-1b39-4020-8066-3e40f3b55121}.xpi [2015-02-24]
CHR HomePage: Default - hxxp://www2.delta-search.com/?babsrc=HP_ssmntrId=D8AA4CEB4210D93DaffID=121565tt=080913_nchtsp=4999
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (Strong Signal) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhmpkhmmcaoioocmabgalkjedeegpgcc [2015-02-25]
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Mateuszstaniek) #3

Dzieki ogromne, jesteś wielki Acorus


(Acorus) #4

Skasuj folder C:\FRST