Wirus Strong Signal Ads

Dla specjalistów Bezpieczeństwo
#1

Witam.

#2

Otwórz notatnik systemowy i wklej:

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-398508130-942609103-2337746467-1002Core.job = C:\Users\MichaB\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\Opera D1.job =
Task: C:\Windows\Tasks\Opera D2.job =
Task: C:\Windows\Tasks\Opera D3.job =
Task: C:\Windows\Tasks\Opera D4.job =
Task: C:\Windows\Tasks\Opera D5.job =
Task: C:\Windows\Tasks\Opera D6.job =
Task: C:\Windows\Tasks\Opera D7.job =
Task: C:\Windows\Tasks\Opera N.job =
HKLM\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [TNod UP] = "C:\Users\MICHA~1\AppData\Local\Temp\Rar$EX20.864\ESET SMART SECURITY 5.0.95.0\TNODUP.exe" /i ===== ATTENTION
HKLM-x32\...\Run: [GrooveMonitor] = C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] = C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKU\S-1-5-21-398508130-942609103-2337746467-1002\...\Run: [Facebook Update] = C:\Users\Michał\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-12-29] (Facebook Inc.)
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
GroupPolicyUsers\S-1-5-21-398508130-942609103-2337746467-1002\User: Group Policy Restriction detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
URLSearchHook: [S-1-5-21-398508130-942609103-2337746467-1000] ATTENTION == Default URLSearchHook is missing
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-398508130-942609103-2337746467-1002 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
FF Extension: Strong Signal - C:\Users\Michał\AppData\Roaming\Mozilla\Firefox\Profiles\ted6d33z.default\Extensions\{ba0a5460-68de-457f-b28e-a05c9f0b3e0e}.xpi [2015-04-15]
CHR Extension: (Bookmark Manager) - C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-20]
StartMenuInternet: Google Chrome.AY5ZXRSKJFCHJTV64FAR4QJCKM - C:\Users\Michał\AppData\Local\Google\Chrome\Application\chrome.exe http://www.awesomehp.com/?type=scts=1391083547from=amtuid=ST9500325AS_5VETD0Z7XXXX5VETD0Z7
S2 Update Deal Keeper; "C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe" [X]
S2 Update Mgr StrongSignal; "C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe" [X]
S2 Update Surftastic; "C:\Program Files (x86)\Surftastic\updateSurftastic.exe" [X]
S2 Util Deal Keeper; "C:\Program Files (x86)\Deal Keeper\bin\utilDealKeeper.exe" [X]
S3 GGSAFERDriver; \\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 SmbDrv; system32\DRIVERS\Smb_driver.sys [X]
2015-06-05 13:29 - 2015-06-06 15:34 - 00000000 ____ D C:\AdwCleaner
2015-06-06 15:09 - 2014-11-16 21:16 - 00000000 ____ D C:\Program Files (x86)\Spybot - Search Destroy 2
2015-06-06 11:56 - 2014-11-16 21:16 - 00000000 ____ D C:\ProgramData\Spybot - Search Destroy
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

Niestety nie pomogło… :confused:

#4

Odinstaluj Chrome zaznaczając usunięcie danych przeglądania za pomocą Geek Uninstaller Free: KLIK

Najpierw możesz wyeksportować zakładki: KLIK

Później zainstaluj: KLIK

#5

Dziwna sprawa, ale Chrome nie ma na liście w tym programie  :? Rozumiem że deinstalacja z panelu sterowania nic nie da?