Problem z signal ads

Dla specjalistów Bezpieczeństwo
#1

Witam. Mam problem z signal ads czyli ciągle wyskakującymi reklamami.

 

Jestem zielony w tych sprawach. Bardzo proszę o pomoc. Jestem w trakcie pisania pracy na studia, a to coś powoduje że nie mogę nic zrobić.

 

Chciałem wkleić Shortcut, Addition, i FRST na wklej.org ale wyskakuje mi ciągle że wyglądam jak spamer.

 

 

Shortcut.txt

Addition.txt

#2
#3

Addition

http://wklej.org/id/1712183

 

FRST

http://wklej.org/id/1712188

 

Shortcut

http://wklej.org/id/1712189

#4

Usuń szkodliwe rozszerzenia w przeglądarce Firefox i Opera. W pasek adresu wpisz: opera:extensions

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [iSkysoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\ISHelper.exe
HKLM-x32\...\Run: [BrowserPlugInHelper] => C:\Program Files (x86)\iSkysoft\iTube Studio\BrowserPlugInHelper.exe
HKLM\...\Policies\Explorer: [NoControlPanel] 0
ShellIconOverlayIdentifiers: [SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_f71e386c-d547-4b3d-b4b4-28f1a87cde75
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150502
HKU\S-1-5-21-575993162-1571817519-2729724939-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_f71e386c-d547-4b3d-b4b4-28f1a87cde75
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF Homepage: hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-20 __alt__ ddc_dsssyc_bd_com
FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_616_bl-is-20 __alt__ ddc_dsssyctab_bd_com
FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bg_616_bl-is-20 __alt__ ddc_dss_bd_com&p={searchTerms}
FF SelectedSearchEngine: Yahoo! Search
FF DefaultSearchEngine: Yahoo! Search
FF Extension: Strong Signal - C:\Users\Damian Moskal\AppData\Roaming\Mozilla\Firefox\Profiles\fpk5oft7.default\Extensions\{9e0ccca5-18ce-454f-a0fd-dacd358d0ce9}.xpi [2015-05-01]
CHR RestoreOnStartup: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
CHR StartupUrls: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
CHR Extension: (Bookmark Manager) - C:\Users\Damian Moskal\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-02]
OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18 __alt__ ddc_dsssyc_bd_com"
OPR Extension: (Strong Signal) - C:\Users\Damian Moskal\AppData\Roaming\Opera Software\Opera Stable\Extensions\ibkenfpakmbdmlalmhgcpdbeennobfho [2015-05-01]
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [478992 2015-05-15] ()
2015-05-15 10:45 - 2015-05-15 10:45 - 00000000 ____ D () C:\Users\Damian Moskal\Desktop\FRST-OlderVersion
2015-05-14 19:59 - 2015-05-15 10:46 - 00000000 ____ D () C:\AdwCleaner
2015-05-14 18:35 - 2015-05-14 18:35 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Damian Moskal\Downloads\SpyHunter-Installer.exe
2015-05-10 16:46 - 2015-05-10 16:46 - 00741672 _____ (Web software ) C:\Users\Damian Moskal\Downloads\LAME-MP3-encoder(12377)-dp.exe
2015-05-02 18:46 - 2015-05-02 18:47 - 00741672 _____ (Web software ) C:\Users\Damian Moskal\Downloads\Audacity(11826)-dp (2).exe
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
Task: {ACBB73F0-C138-4739-BC46-F52A78161781} - System32\Tasks\{F80A2D76-E1B3-4DDB-B8D5-9B2EC683D3C5} => pcalua.exe -a "C:\Users\Damian Moskal\AppData\Roaming\key-find\UninstallManager.exe" -c -ptid=cor
Task: {CFC2F3D5-D92D-4B5B-A3CD-F3C822BA2113} - System32\Tasks\{88842199-9C15-43C9-B96C-6B9072798DC3} => Firefox.exe http://ui.skype.com/ui/0/6.13.0.104/pl/abandoninstall?source=lightinstaller&amp;page=tsInstall
Task: {D849DD38-D1D6-4603-8DBE-28D60170D20A} - System32\Tasks\{EE6AFD48-CACD-43FD-BFBA-5F014E3A7FC8} => Firefox.exe http://ui.skype.com/ui/0/6.13.0.104/pl/abandoninstall?source=lightinstaller&amp;page=tsInstall
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.

#5

Fixlog

http://wklej.org/id/1712247

#6

A może przeczytasz całą poprzednią odpowiedź?

#7

FRST

http://wklej.org/id/1712264

#8

Przecież napisałem, że masz usunąć szkodliwe rozszerzenie w Firefox.

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_f71e386c-d547-4b3d-b4b4-28f1a87cde75&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_f71e386c-d547-4b3d-b4b4-28f1a87cde75&q={searchTerms}
SearchScopes: HKU\S-1-5-21-575993162-1571817519-2729724939-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_f71e386c-d547-4b3d-b4b4-28f1a87cde75&q={searchTerms}
SearchScopes: HKU\S-1-5-21-575993162-1571817519-2729724939-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_f71e386c-d547-4b3d-b4b4-28f1a87cde75&q={searchTerms}
FF Extension: Strong Signal - C:\Users\Damian Moskal\AppData\Roaming\Mozilla\Firefox\Profiles\fpk5oft7.default\Extensions\{505141e0-c232-40dc-a148-f7a39e4a7118}.xpi [2015-05-15]
S2 Service Mgr StrongSignal; "C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe" [X]
2015-05-15 10:40 - 2015-05-15 10:40 - 00000109 ____ H () C:\Users\Damian Moskal\Desktop\.~lock.AdwCleaner[R1].txt#
DeleteQuarantine:

Uruchom FRST i kliknij Fix. Skasuj folder C:\FRST

Usuń stare punkty przywracania: Przywracanie systemu i kopie w tle

Dysk przeskanuj Malwarebytes Anti-Malware

Podczas instalacji usuń zaznaczenie przy Uruchom okres testowy Malwarebytes Anti-Malware Premium.

http://wstaw.org/m/2014/03/25/2014-03-25_123039.png

Język PL > Settings > General Settings > Language > Polish

Przeczytaj w jaki sposób należy instalować programy: KLIK - KLIK - KLIK - KLIK

Odinstaluj Java 8 Update 31 i zainstaluj Java 8 Update 45