
Sugerując się wpisami na innych forach ściągnęłam FRST i zrobiłam scan. Załączniki poniżej.
Bardzo proszę o pomoc, wyskakujące reklamy w przeglądarkach internetowych są bardzo uciążliwe i nie można normalnie korzystać z laptopa
Z góry dziękuję.
BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll [2015-02-16] ()
C:\Program Files (x86)\Strong Signal
FF Extension: Strong Signal - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\zd6qy4bd.default\Extensions\{f318d533-127c-4630-af87-2d2b706e5282}.xpi [2015-02-16]
CHR Extension: (Strong Signal) - C:\Users\Lenovo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndgafedgphnfegpdleilandjadhkecpl [2015-02-22]
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [639224 2015-03-30] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [559864 2015-03-30] ()
C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
C:\ProgramData\WindowsMangerProtect
C:\Program Files (x86)\XTab
HKLM-x32\...\Run: [] => [X]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hp&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hp&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=ds&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=ds&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hp&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hp&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=ds&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=ds&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&q={searchTerms}
HKU\S-1-5-21-759295226-503350162-3143695615-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hp&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5
HKU\S-1-5-21-759295226-503350162-3143695615-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hp&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5
URLSearchHook: [S-1-5-21-759295226-503350162-3143695615-1001] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=ds&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=ds&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=ds&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=ds&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&q={searchTerms}
SearchScopes: HKU\S-1-5-21-759295226-503350162-3143695615-1002 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&ts=1424109656&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-759295226-503350162-3143695615-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&ts=1424109656&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-759295226-503350162-3143695615-1002 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&ts=1424109656&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-759295226-503350162-3143695615-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&ts=1424109656&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-759295226-503350162-3143695615-1002 -> {536CB987-4B1D-4635-A5D4-5E8F64B954D3} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&ts=1424109656&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-759295226-503350162-3143695615-1002 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5&ts=1424109656&type=default&q={searchTerms}
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: key-find
FF SelectedSearchEngine: key-find
FF Extension: Fast Start - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\zd6qy4bd.default\Extensions\faststartff@gmail.com [2015-02-16]
FF Extension: Search Enginer - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\zd6qy4bd.default\Extensions\searchengine@gmail.com [2015-02-16]
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\zd6qy4bd.default\extensions\searchengine@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Lenovo\AppData\Roaming\Mozilla\Firefox\Profiles\zd6qy4bd.default\extensions\faststartff@gmail.com
OPR StartupUrls: "hxxp://www.key-find.com/?type=hp&ts=1424109540&from=cor&uid=ST1000LM014-SSHD-8GB_W38127K5XXXXW38127K5"
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
EmptyTemp:
DeleteQuarantine:
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 3 gości