Bardzo proszę o pomoc w usunięciu Strong Signal


(Adrianj10) #1

Witam,

 

Proszę o pomoc w usunięciu Strong Signal

Załączone pliki:

FRST http://www.wklej.org/id/1701702/ 

 

Addition http://www.wklej.org/id/1701704/

 

Z góry dziękuję za jakiekolwiek wskazówki


(Atis) #2

Pobierz i uruchom AdwCleaner Kliknij Scan i później Cleaning.

Usuń szkodliwe rozszerzenia w przeglądarce Firefox i Chrome

Opera w pasek adresu wpisz: opera:extensions

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.


(Adrianj10) #3

Wykonałem wszystkie kroki.

Nowy raport z FRST http://www.wklej.org/id/1701731/


(Atis) #4

Odinstaluj Akamai NetSession Interface.

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SFAUpdater] => C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe [655984 2015-02-04] (Filefacts.net)
HKU\S-1-5-21-1089487829-1826241731-2414270404-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Adrian\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1089487829-1826241731-2414270404-1001\...\Policies\Explorer: [] 
AppInit_DLLs-x32: C:/PROGRA~3/{D85E3~1/171~1.0/delo.dll => C:\ProgramData\{D85E309D-88DC-E11B-395A-9199E9D84217}\1.7.1.0\delo.dll [649216 2015-01-17] ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_7e4ce8e1-e061-42be-90af-41878dd1c1b4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150412
HKU\S-1-5-21-1089487829-1826241731-2414270404-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_7e4ce8e1-e061-42be-90af-41878dd1c1b4
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = 
SearchScopes: HKLM-x32 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1089487829-1826241731-2414270404-1001 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = 
BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_616_bl-is-18 __alt__ ddc_dsssyctab_bd_com
FF SearchEngineOrder.1: V9
FF SelectedSearchEngine: Yahoo! Search
FF Homepage: hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com
FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bg_616_bl-is-18 __alt__ ddc_dss_bd_com&p={searchTerms}
FF Extension: Strong Signal - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\nlshe2fn.default\Extensions\{9e0ccca5-18ce-454f-a0fd-dacd358d0ce9}.xpi [2015-05-01]
CHR Extension: (PodoWeb) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiiljpkmcifjfgdjbneemhagneommddc [2014-11-13]
OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [478992 2015-05-02] ()
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [556304 2015-05-02] ()
R2 MaintainerSvc6.89.573444; C:\ProgramData\01e58235-010d-43b1-8340-277d43a75321\maintainer.exe [128240 2015-05-02] ()
R2 MaintainerSvc4.00.5030318; C:\ProgramData\e25f457c-9287-4f2d-b5a8-8cd714c55009\maintainer.exe [128240 2015-05-02] ()
C:\ProgramData\{D85E309D-88DC-E11B-395A-9199E9D84217}
C:\ProgramData\e25f457c-9287-4f2d-b5a8-8cd714c55009
C:\ProgramData\01e58235-010d-43b1-8340-277d43a75321
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\Program Files (x86)\Smart File Advisor
C:\Users\Adrian\Downloads\*.tmp
C:\AdwCleaner
C:\Windows\SysWOW64\RENCDAA.tmp
C:\ProgramData\374311380
Task: {20D56232-CF49-4A79-8442-5E512C9A3496} - System32\Tasks\{E04694AC-7AB4-42D9-8486-48A3879352E0} => pcalua.exe -a F:\setup.exe -d F:\
Task: {CAC3A6AE-374A-4674-88B5-FADC77E4DC0B} - System32\Tasks\{65A72351-66AA-46D7-A836-598698EFDBFB} => pcalua.exe -a C:\Users\Adrian\AppData\Roaming\sweet-page\UninstallManager.exe -c -ptid=cor
Task: {CED6980C-FE91-4FE5-A117-053B56EACC3C} - System32\Tasks\{27FBE9D5-BF36-4EE7-81F5-63B947F41742} => pcalua.exe -a C:\Users\Adrian\AppData\Roaming\do-search\UninstallManager.exe -c -ptid=cor
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.


(Adrianj10) #5

Raport z Fixlog http://www.wklej.org/id/1701743/

Nowy raport z FRST http://www.wklej.org/id/1701744/


(Atis) #6

Usuń szkodliwe rozszerzenie. W pasek adresu wpisz: opera:extensions

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_7e4ce8e1-e061-42be-90af-41878dd1c1b4&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_7e4ce8e1-e061-42be-90af-41878dd1c1b4&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1089487829-1826241731-2414270404-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_7e4ce8e1-e061-42be-90af-41878dd1c1b4&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1089487829-1826241731-2414270404-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_7e4ce8e1-e061-42be-90af-41878dd1c1b4&q={searchTerms}
OPR Extension: (Strong Signal) - C:\Users\Adrian\AppData\Roaming\Opera Software\Opera Stable\Extensions\ibkenfpakmbdmlalmhgcpdbeennobfho [2015-05-02]
C:\Program Files (x86)\Strong Signal
DeleteQuarantine:
CreateRestorePoint:

Uruchom FRST i kliknij Fix. Skasuj folder C:\FRST

Usuń stare punkty przywracania: Aby usunąć wszystkie punkty przywracania oprócz najnowszego

Dysk przeskanuj Malwarebytes Anti-Malware

Podczas instalacji usuń zaznaczenie przy Uruchom okres testowy Malwarebytes Anti-Malware Premium.

http://wstaw.org/m/2014/03/25/2014-03-25_123039.png

Język PL > Settings > General Settings > Language > Polish

Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK - KLIK

Odinstaluj Java 8 Update 40.

Zainstaluj:

Java 8 Update 45

Service Pack 1 x64 (903.2 MB)

Internet Explorer 11


(Adrianj10) #7

Bardzo dziękuje za pomoc :slight_smile: Sam nie poradziłbym sobie.