Problem z usunięciem reklam strong signal


(Agi99) #1

Witam.

Mam problem z pozbyciem się z komputera wyskakujących reklam strong signal.

Nie działa mi strona wklej.org, więc wklejam na innej

 

FRST http://wklej.to/rjXBv

Addition http://wklej.to/BPoaS

Shortcut http://wklej.to/JIFB4

 

Bardzo proszę o pomoc


(Acorus) #2

Odinstaluj ASUS WebStorage Sync Agent,do-search uninstall.Otwórz notatnik systemowy i wklej:

HKLM-x32\...\Run: [ASUSWebStorage] = C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [RemoteControl10] = C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?fr=hp-ddc-bdtype=bl-bir-is __alt__ ddc_dsssyc_bd_com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFTq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dsts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFTq={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hpts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFT
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hpts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFT
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFTq={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dsts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFTq={searchTerms}
HKU\S-1-5-21-3243912359-1605599921-3775265331-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?fr=hp-ddc-bdtype=bl-bir-is __alt__ ddc_dsssyc_bd_com
HKU\S-1-5-21-3243912359-1605599921-3775265331-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?fr=hp-ddc-bdtype=bl-bir-is __alt__ ddc_dsssyc_bd_com
HKU\S-1-5-21-3243912359-1605599921-3775265331-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hpts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFT
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.yahoo.com/yhs/search?hspart=ddchsimp=yhs-ddc_bdtype=bl-bir-is __alt__ ddc_dss_bd_comp={searchTerms}
SearchScopes: HKLM - OldSearch URL = http://do-search.com/web/?type=dsts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFTq={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.yahoo.com/yhs/search?hspart=ddchsimp=yhs-ddc_bdtype=bl-bir-is __alt__ ddc_dss_bd_comp={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFTq={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFTq={searchTerms}
SearchScopes: HKU\S-1-5-21-3243912359-1605599921-3775265331-1002 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.yahoo.com/yhs/search?hspart=ddchsimp=yhs-ddc_bdtype=bl-bir-is __alt__ ddc_dss_bd_comp={searchTerms}
SearchScopes: HKU\S-1-5-21-3243912359-1605599921-3775265331-1002 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.yahoo.com/yhs/search?hspart=ddchsimp=yhs-ddc_bdtype=bl-bir-is __alt__ ddc_dss_bd_comp={searchTerms}
SearchScopes: HKU\S-1-5-21-3243912359-1605599921-3775265331-1002 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dsts=1428609211from=coruid=TOSHIBAXMQ01ABD050_43BFW4EFTXX43BFW4EFTq={searchTerms}
CHR Extension: (Strong Signal) - C:\Users\Dorota\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecdmekppnalhnpenpglkipoppjmiidke [2015-03-09]
OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bdtype=bg_616_bl-is-19 __alt__ ddc_dsssyc_bd_com"
OPR Extension: (Strong Signal) - C:\Users\Dorota\AppData\Roaming\Opera Software\Opera Stable\Extensions\ecdmekppnalhnpenpglkipoppjmiidke [2015-05-09]
C:\ProgramData\SetStretch.VBS
C:\Users\Dorota\7zxa.dll
C:\Users\Dorota\Ace32Loader.exe
C:\Users\Dorota\Rar.exe
C:\Users\Dorota\RarExt.dll
C:\Users\Dorota\RarExt32.dll
C:\Users\Dorota\rarnew.dat
C:\Users\Dorota\UNACEV2.DLL
C:\Users\Dorota\Uninstall.exe
C:\Users\Dorota\UnRAR.exe
C:\Users\Dorota\WinRAR.exe
C:\Users\Dorota\zipnew.dat
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.


(Agi99) #3

Wygląda na to, że pomogło :smiley:

Dzięki wielkie