
Scan FRST:
http://speedy.sh/EB7z4/Addition.txt
http://speedy.sh/Mrhu9/FRST.txt
2015-02-28 15:34 - 2015-07-26 13:15 - 01089808 _____ () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe
2015-07-26 13:16 - 2015-07-26 13:16 - 00620304 _____ () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\3\plugin.exe
2015-07-26 13:16 - 2015-07-26 13:16 - 00781072 _____ () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\5\plugin.exe
2015-02-28 15:34 - 2015-07-26 13:16 - 01028880 _____ () C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe
2015-07-26 13:16 - 2015-07-26 13:16 - 00707344 _____ () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\8\plugin.exe
2015-07-26 13:16 - 2015-07-26 13:16 - 00596240 _____ () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\6\plugin.exe
2015-07-26 13:16 - 2015-07-26 13:16 - 01202960 _____ () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\2\plugin.exe
2015-07-26 03:54 - 2015-07-26 03:54 - 00459536 _____ () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\7\plugin.exe
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
GroupPolicy: Groepsbeleid op Chrome gedetecteerd <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Beleid restrictie <======= ATTENTION
BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll Geen bestand
C:\Program Files (x86)\Strong Signal
CHR Extension: (Strong Signal) - C:\Users\kazimiera\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldpclljhefhlahjipacagpcjolbejgcm [2015-07-26]
OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18__alt__ddc_dsssyc_bd_com"
OPR Extension: (Strong Signal) - C:\Users\kazimiera\AppData\Roaming\Opera Software\Opera Stable\Extensions\ldpclljhefhlahjipacagpcjolbejgcm [2015-07-19]
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?fr=hp-ddc-bd&type=bl-bir-is__alt__ddc_dsssyc_bd_com
HKU\S-1-5-21-1909094896-2871261932-647839839-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?fr=hp-ddc-bd&type=bl-bir-is__alt__ddc_dsssyc_bd_com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bl-bir-is__alt__ddc_dss_bd_com&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bl-bir-is__alt__ddc_dss_bd_com&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1909094896-2871261932-647839839-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bl-bir-is__alt__ddc_dss_bd_com&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1909094896-2871261932-647839839-1001 -> OldSearch URL =
SearchScopes: HKU\S-1-5-21-1909094896-2871261932-647839839-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bl-bir-is__alt__ddc_dss_bd_com&p={searchTerms}
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [1089808 2015-07-26] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [1028880 2015-07-26] ()
S3 OATool; \??\C:\Users\Administrator\AppData\Local\Temp\OAToolx64.sys [X]
S3 TDKLIB; \??\C:\Users\Administrator\AppData\Local\Temp\TdkLib64.sys [X]
EmptyTemp:
DeleteQuarantine:
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 3 gości