Strong signal

Dla specjalistów Bezpieczeństwo
#1

Błagam, pomóżcie, aż się odechciewa odpalać komputer.

 

http://www.wklej.org/id/1713582/   - FRST

http://www.wklej.org/id/1713584/  - oddition

 

 

z góry bardzo dziekuje za pomoc:)

#2

Odinstaluj SpyHunter 4.Otwórz notatnik systemowy i wklej:

Task: {71FDF1AF-B7BD-48CA-BF52-DB972C110A79} - System32\Tasks\SpyHunter4Startup = C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
HKLM\...\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7194840 2013-07-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_PushButton] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-07-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [] = [X]
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR Extension: (Bookmark Manager) - C:\Users\BARBALELLA\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [556304 2015-05-13] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [478992 2015-05-13] ()
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [X]
S3 esgiguard; C:\FRST\Quarantine\C\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-03-30] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-03-30] ()
S3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0; \\c:\program files\dell support center\pcdsrvc_x64.pkms [X]
2015-05-13 09:32 - 2015-05-13 09:33 - 00000000 ____ D () C:\AdwCleaner
2015-05-13 08:58 - 2015-05-13 08:58 - 00000000 ____ D () C:\Users\BARBALELLA\Downloads\FRST-OlderVersion
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.