Jak usunąć Powered Strong Signal?


(Olqqqa) #1

Witam,

Piszę tutaj ponieważ naprawdę nie mam do kogo zwrócić się o pomoc. Mianowicie mam problem z wyskakującymi reklamami Strong Signal. Nabawiłam się tego prawdopodobnie przez aktualizację Adobe Player. Proszę o pomoc i jak najprostsze wyjaśnienie kolejnych kroków bo jestem w tym całkowicie zielona.

Z góry ogromne dzięki :slight_smile:

http://wklej.org/id/1644275/  

http://wklej.org/id/1644225/


(Acorus) #2

Odinstaluj Adobe Reader 9.1 MUI,key-find uninstall,Microsoft Security Essentials,Norton AntiVirus.Otwórz notatnik systemowy i wklej:

Task: {119BF7E1-D704-45D7-B06A-89A3AB6AD71D} - \AdobeFlashPlayerUpdate No Task File ==== ATTENTION
Task: {6B6AF81B-70FB-4C11-8A0A-E022198AF759} - \Lyrmix Update No Task File ==== ATTENTION
Task: {ACAB6277-63C8-4A5D-8288-5A364A6AE4F6} - System32\Tasks\{35A40BC0-53E2-4848-A8A9-9FD37E8F6C5D} = pcalua.exe -a C:\Users\User\AppData\Roaming\key-find\UninstallManager.exe -c -ptid=cor
Task: {EF320D36-E140-4DB8-B949-1292C88F98D9} - \AdobeFlashPlayerUpdate 2 No Task File ==== ATTENTION
Task: C:\Windows\Tasks\Lyrmix Update.job = C:\Program Files (x86)\Lyrmix\LymxUD.exe ==== ATTENTION
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] = [X]
HKLM-x32\...\Run: [ConvertAd] = C:\Users\User\AppData\Local\ConvertAd\ConvertAd.exe
HKLM-x32\...\Run: [ashMaiSv] = C:\PROGRA~2\ALWILS~1\Avast4\ashmaisv.exe
HKLM-x32\...\Run: [QuickTime Task] = C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
GroupPolicyUsers\S-1-5-21-3472659952-4141941378-3577737083-1003\User: Group Policy restriction detected ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hpppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hpppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=dsts=1424001571from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=dsts=1424001571from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hpppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hpppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=dsts=1424001571from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=dsts=1424001571from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696q={searchTerms}
HKU\S-1-5-21-3472659952-4141941378-3577737083-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=dsppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696q={searchTerms}
HKU\S-1-5-21-3472659952-4141941378-3577737083-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hpppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696
HKU\S-1-5-21-3472659952-4141941378-3577737083-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hpppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696
HKU\S-1-5-21-3472659952-4141941378-3577737083-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=dsppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696q={searchTerms}
SearchScopes: HKU\.DEFAULT - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKU\S-1-5-21-3472659952-4141941378-3577737083-1000 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=dsppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696q={searchTerms}
SearchScopes: HKU\S-1-5-21-3472659952-4141941378-3577737083-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696ts=1424001673type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-3472659952-4141941378-3577737083-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696ts=1424001673type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-3472659952-4141941378-3577737083-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=dsppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696q={searchTerms}
SearchScopes: HKU\S-1-5-21-3472659952-4141941378-3577737083-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696ts=1424001673type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-3472659952-4141941378-3577737083-1000 - {EF4AFED7-8562-452C-A93F-678A5D85FBD3} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696ts=1424001673type=defaultq={searchTerms}
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\XTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Lyrmix - {804efe7d-a8d7-4351-a6df-014d1ed7c6fc} - C:\Program Files (x86)\Lyrmix\133.dll No File
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
FF DefaultSearchEngine: key-find
FF SelectedSearchEngine: key-find
FF Homepage: hxxp://www.key-find.com/?type=hpppts=1424001649from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rj6hk1xl.default\searchplugins\key-find.xml
FF Extension: Lyrmix - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rj6hk1xl.default\Extensions\133 [2013-10-26]
FF Extension: FF Toolbar - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rj6hk1xl.default\Extensions\fftoolbar2014@etech.com [2015-02-20]
FF Extension: Search Enginer - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rj6hk1xl.default\Extensions\searchengine@gmail.com [2015-02-15]
FF Extension: Strong Signal - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rj6hk1xl.default\Extensions\{f318d533-127c-4630-af87-2d2b706e5282}.xpi [2015-02-15]
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rj6hk1xl.default\extensions\searchengine@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rj6hk1xl.default\extensions\faststartff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rj6hk1xl.default\extensions\fftoolbar2014@etech.com
FF HKU\S-1-5-21-3472659952-4141941378-3577737083-1000\...\Firefox\Extensions: [{dde15e35-c9b3-4c30-b055-730c5f4a45d3}] - C:\Program Files (x86)\Lyrmix\133.xpi
CHR StartupUrls: Default - "hxxp://www.key-find.com/?type=hpts=1424001571from=coruid=WDCXWD3200BPVT-22ZEST0_WD-WXB1A31M2696M2696"
CHR Extension: (Strong Signal) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\iofiplankempicdeegfcodkmgchcdmom [2015-02-15]
CHR HKLM-x32\...\Chrome\Extension: [kidmhllhjmmmnpbiaihafgchacpmokof] - C:\Program Files (x86)\Lyrmix\133.crx [Not Found]
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
S3 cpuz134; \\C:\Users\User\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
2015-02-20 10:13 - 2015-02-20 10:13 - 00003148 _____ () C:\Windows\System32\Tasks\{35A40BC0-53E2-4848-A8A9-9FD37E8F6C5D}
2015-02-15 13:01 - 2015-02-15 13:01 - 00000000 ____ D () C:\ProgramData\IHProtectUpDate
2015-02-15 13:01 - 2015-02-15 13:01 - 00000000 ____ D () C:\Program Files (x86)\XTab
2015-02-15 13:00 - 2015-02-20 09:10 - 00000000 ____ D () C:\ProgramData\WindowsMangerProtect
2015-02-20 08:07 - 2013-10-27 10:14 - 00000000 ____ D () C:\AdwCleaner
mptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.