Problem z Powered by strong signal


(Mysterio61911) #1

Nie dam rady obsługiwać żadnej przeglądarki ze względu na ciągłe reklamy.

 

Wrzucam skany z FRST. Proszę o pomoc

 

FRST: http://wklej.to/4bVkV

Addition: http://wklej.to/iabxd


(Atis) #2

Usuń szkodliwe rozszerzenie. W pasek adresu wpisz: opera:extensions

W panelu sterowania odinstaluj:

Extreme Blocker

LibraryProc

Strong Signal

Pobierz i uruchom AdwCleaner Kliknij Scan i później Cleaning.

Odinstaluj Chrome zaznaczając usunięcie danych przeglądania za pomocą Geek Uninstaller Free: KLIK

Najpierw możesz wyeksportować zakładki: KLIK

Później zainstaluj stabilną wersję: KLIK

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.


(Mysterio61911) #3

Nowy raport po czynnościach.

 

FRST: http://wklej.to/9sQ29


(Atis) #4

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150219
HKU\S-1-5-21-3648716304-128590815-1914471283-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf
HKU\S-1-5-21-3648716304-128590815-1914471283-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf&q={searchTerms}
SearchScopes: HKLM -> {62D45EBA-D899-4206-BDBB-EE095A17BD27} URL = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3648716304-128590815-1914471283-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3648716304-128590815-1914471283-1002 -> OldSearch URL = 
SearchScopes: HKU\S-1-5-21-3648716304-128590815-1914471283-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3648716304-128590815-1914471283-1002 -> {62D45EBA-D899-4206-BDBB-EE095A17BD27} URL = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3648716304-128590815-1914471283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3648716304-128590815-1914471283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> OldSearch URL = 
SearchScopes: HKU\S-1-5-21-3648716304-128590815-1914471283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3648716304-128590815-1914471283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {62D45EBA-D899-4206-BDBB-EE095A17BD27} URL = http://q.search-simple.com/?affID=bl_50e127eb-5c22-45e1-b767-5f808f4c98cf&q={searchTerms}
OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [556304 2015-05-04] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [478992 2015-05-04] ()
S2 163ac2d4; "C:\WINDOWS\system32\rundll32.exe" "c:\Program Files (x86)\LibraryProc\LibraryProc.dll",serv
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
2015-05-04 23:40 - 2015-05-04 23:40 - 00000000 ____ D () C:\Program Files (x86)\Strong Signal
2015-05-04 22:22 - 2015-05-04 23:24 - 00000000 ____ D () C:\AdwCleaner
2015-05-04 22:17 - 2015-02-21 16:01 - 00000020 _____ () C:\Users\Piotr\AppData\Roaming\appdataFr3.bin
2015-03-23 23:37 - 2015-03-23 23:37 - 0000000 _____ () C:\Users\Piotr\AppData\Local\{7AB2D2FD-2A70-49AD-A90B-E272DFE23E77}
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.


(Mysterio61911) #5

Fixlog: http://wklej.to/rr1qg

FRST: http://wklej.to/pm5ee


(Atis) #6

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
CHR Extension: (Bookmark Manager) - C:\Users\Piotr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-05]
2015-03-23 23:40 - 2015-03-23 23:40 - 0000000 ____ H () C:\Users\Piotr\AppData\Local\BITA8D3.tmp
DeleteQuarantine:

Uruchom FRST i kliknij Fix. Skasuj folder C:\FRST

Usuń stare punkty przywracania: Przywracanie systemu i kopie w tle

Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK - KLIK

Odinstaluj Java 8 Update 25 i zainstaluj Java 8 Update 45


(Mysterio61911) #7

dziękuję za pomoc.