Mnóstwo reklam w przeglądarkach i bardzo spowolniony lapotp


(Fenomen0107) #1

Witam, w ostatnim czasie mój laptop bardzo spowolniał, w dodatku w przeglądarkach pojawia się multum przeszkadzających reklam, nie da się ich usunąc ani zablokowac (strong signal ads). Próbowałem się tego pozbyc ale na marne. Robiłem też skan i usuwanie AdwCleanerem


(Acorus) #2

Odinstaluj do-search uninstall.Otwórz notatnik systemowy i wklej:

Task: {13BE77DD-25B8-4A6E-921A-B191B837821F} - System32\Tasks\{0571B8D6-5C3E-434D-B237-CF6047F58738} = pcalua.exe -a "C:\Users\ative 5\AppData\Roaming\do-search\UninstallManager.exe" -c -ptid=cor
Task: {64CCBD07-7CA7-4296-A5C3-9C3D7D248D45} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2161880130-3257555242-778284119-1001UA = C:\Users\ative 5\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-01-20] (Facebook Inc.)
Task: {72A38B0A-5DA7-43BE-A763-73A6ABE656E8} - System32\Tasks\DefaultReg = c:\Users\All Users\dtdata\R001.exe ==== ATTENTION
Task: {9BBB7AF4-3213-498D-9A03-55342DB2D2EA} - System32\Tasks\DefaultCheck = c:\Users\All Users\dtdata\R002.exe ==== ATTENTION
Task: {A621BDC3-95A3-4CEB-9D86-1BEADB07894D} - System32\Tasks\Default2Check = c:\Users\All Users\dtdata\R003.exe ==== ATTENTION
Task: {B1AB3893-25A7-4DDA-A90A-696F02F2EF73} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2161880130-3257555242-778284119-1001Core = C:\Users\ative 5\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-01-20] (Facebook Inc.)
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2161880130-3257555242-778284119-1001Core.job = C:\Users\ative 5\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2161880130-3257555242-778284119-1001UA.job = C:\Users\ative 5\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKLM-x32\...\Run: [RtHDVCpl] = C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13263072 2012-12-12] (Realtek Semiconductor)
HKLM-x32\...\Run: [RtHDVBg] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1260256 2013-01-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [RtHDVBg_SRSSA] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1260256 2013-01-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-04-30] (Adobe Systems Incorporated)
HKU\S-1-5-21-2161880130-3257555242-778284119-1001\...\Run: [Facebook Update] = C:\Users\ative 5\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-01-20] (Facebook Inc.)
HKU\S-1-5-21-2161880130-3257555242-778284119-1001\...\Run: [ALLUpdate] = C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [2765256 2015-01-24] (ALLPlayer Group Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2013-11-29]
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hpts=1432151892z=10f2fcfb89206cbba8bf793g8z6c4o8gdweg5bft0wfrom=wpm05203uid=HGSTXHTS545050A7E380_TE951649KRJJ1PKRJJ1PX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsppts=1426619523from=coruid=HGSTXHTS545050A7E380_TE951649KRJJ1PKRJJ1PXq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hpts=1432151892z=10f2fcfb89206cbba8bf793g8z6c4o8gdweg5bft0wfrom=wpm05203uid=HGSTXHTS545050A7E380_TE951649KRJJ1PKRJJ1PX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsppts=1426619523from=coruid=HGSTXHTS545050A7E380_TE951649KRJJ1PKRJJ1PXq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsppts=1426619523from=coruid=HGSTXHTS545050A7E380_TE951649KRJJ1PKRJJ1PXq={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsppts=1426619523from=coruid=HGSTXHTS545050A7E380_TE951649KRJJ1PKRJJ1PXq={searchTerms}
SearchScopes: HKU\S-1-5-21-2161880130-3257555242-778284119-1001 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=butm_medium=utm_campaign=install_ieutm_content=dsfrom=uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6Ats=1420373293type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2161880130-3257555242-778284119-1001 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=butm_medium=utm_campaign=install_ieutm_content=dsfrom=uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6Ats=1420373293type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2161880130-3257555242-778284119-1001 - {3C21155F-64B9-400E-A44E-E4FC7495F525} URL = http://do-search.com/web/?utm_source=butm_medium=utm_campaign=install_ieutm_content=dsfrom=uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6Ats=1420373293type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-2161880130-3257555242-778284119-1001 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=butm_medium=utm_campaign=install_ieutm_content=dsfrom=uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6Ats=1420373293type=defaultq={searchTerms}
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: No Name - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - No File
BHO-x32: LuckyTab Class - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} - C:\Program Files (x86)\XTab\SupTab.dll No File
BHO-x32: No Name - {7F6AFBF1-E065-4627-A2FD-810366367D01} - No File
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com/?type=scts=1432151892z=10f2fcfb89206cbba8bf793g8z6c4o8gdweg5bft0wfrom=wpm05203uid=HGSTXHTS545050A7E380_TE951649KRJJ1PKRJJ1PX
FF SelectedSearchEngine: delta-homes
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\ative 5\AppData\Roaming\Mozilla\Firefox\Profiles\pqr4c7po.default\extensions\searchengine@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [istart_ffnt@gmail.com] - C:\Users\ative 5\AppData\Roaming\Mozilla\Firefox\Profiles\pqr4c7po.default\extensions\istart_ffnt@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\ative 5\AppData\Roaming\Mozilla\Firefox\Profiles\pqr4c7po.default\extensions\fftoolbar2014@etech.com
FF HKLM-x32\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\ative 5\AppData\Roaming\Mozilla\Firefox\Profiles\pmrwru8o.default-1426672535109\extensions\quick_searchff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\ative 5\AppData\Roaming\Mozilla\Firefox\Profiles\pmrwru8o.default-1426672535109\extensions\sweetsearch@gmail.com
FF HKU\S-1-5-21-2161880130-3257555242-778284119-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
CHR Extension: (Bookmark Manager) - C:\Users\ative 5\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-23]
CHR Extension: (Strong Signal) - C:\Users\ative 5\AppData\Local\Google\Chrome\User Data\Default\Extensions\odckdhimhjidiihnkmocngdngkngjjka [2015-05-23]
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kdidombaedgpfiiedeimiebkmbilgmlc] - C:\Program Files (x86)\DefaultTab\DefaultTab.crx [Not Found]
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [556304 2015-05-23] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [478992 2015-05-23] ()
S3 ETDSMBus; \SystemRoot\system32\DRIVERS\ETDSMBus.sys [X]
2015-05-23 11:55 - 2015-05-23 12:03 - 00000000 ____ D () C:\AdwCleaner
2015-05-20 22:04 - 2015-05-20 22:04 - 00000000 ____ D () C:\Program Files (x86)\Strong Signal
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Fenomen0107) #3

A więc tak, nie mogę znaleźc tego Do-search nigdzie, reszte zrobiłem tak jak kazales, ale nadal to samo, wyskakują te cholerne reklamy

EDIT: Chociaż nie, na mozilli wydaje się, że jest ok, tylko na chromie nadal są te reklamy, mimo że w pluginach i rozszerzeniach nie ma już tego strong signal


(Acorus) #4

Skasuj folder C:\FRST Reset Chrome: https://support.google.com/chrome/answer/3296214?hl=pl a jk nie pomoże to 

odinstaluj Chrome zaznaczając usunięcie danych przeglądania.


(Fenomen0107) #5

Reset chroma nie pomógł, ale odinstalowanie z usunięciem danych już tak, dzięki za pomoc!