Usunięcie Strong Signal

Dla specjalistów Bezpieczeństwo
#1

Witam.

#2

Pobierz na pulpit Adwcleaner -  https://toolslib.net…d/1-adwcleaner/

Uruchom Adwcleaner i wykonaj polecenia scan i cleaning. Pokaż raport.

Pokaż aktualne raporty FRST i Addition.

Wszystkie raporty umieszczasz na http://wklej.org/

#3

Dziękuję za odpowiedź.

#4

Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2014-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUSWebStorage] = C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [iTunesHelper] = C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-265392928-1776667888-2769137944-1001\...\Run: [ALLUpdate] = C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3000704 2014-01-29] (ALLPlayer Group Ltd.)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-265392928-1776667888-2769137944-1001 - {32AC024C-0396-4D8B-A847-6BC0CAA48116} URL = https://search.yahoo.com/search?fr=chr-greentree_ieei=utf-8ilc=12type=888596p={searchTerms}
FF DefaultSearchEngine: key-find
FF Keyword.URL: https://search.yahoo.com/search?fr=greentree_ff1ei=utf-8ilc=12type=888596p=
FF SearchPlugin: C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\zn943z62.default\searchplugins\key-find.xml
FF Extension: Strong Signal - C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\zn943z62.default\Extensions\{1d1a835d-e7db-4598-a263-34b77157d4e9}.xpi [2015-02-12]
CHR HomePage: Default - hxxp://www.key-find.com/?type=hpppts=1423749319from=coruid=HitachiXHTS545050A7E380_TEJ51139DKP8MSDKP8MSX
CHR StartupUrls: Default - "hxxp://www.key-find.com/?type=hpppts=1423749319from=coruid=HitachiXHTS545050A7E380_TEJ51139DKP8MSDKP8MSX"
CHR DefaultSearchKeyword: Default - key-find
CHR Extension: (Strong Signal) - C:\Users\piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\lchgpdbcbebecigcoclaoebchenjbgak [2015-02-13]
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
U0 msahci; No ImagePath
2015-03-02 12:46 - 2015-03-02 12:58 - 00000000 ____ D () C:\AdwCleaner
C:\ProgramData\SetStretch.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#5

Dziękuję za odpowiedź.

#6

Skasuj folder C:\FRST