Strong signal ads

mmartek · 31 Maj 2015 17:43

Witam. Tym razem Moja Sympatia załapała takie coś. Pomoże ktoś?

spandaupol · 31 Maj 2015 19:23

Nikt nie pomoże,dlaczego? W logach brak ukośników dlatego m.in. w instrukcji pisze aby je umieszczać na www.wklej.org. Proszę to poprawić.

mmartek · 31 Maj 2015 19:55

O ja głupi cipek Przepraszam, poprawione

spandaupol · 31 Maj 2015 20:08

Przez Panel sterowania Dodaj usuń programy odinstaluj

Wklej do notatnika:

CloseProcesses:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hppp&ts=1423180921&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=ds&ts=1423180908&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hppp&ts=1423180921&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=ds&ts=1423180908&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&q={searchTerms}
HKU\S-1-5-21-3017883403-1461830242-3419357051-1002\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=dspp&ts=1423180921&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&q={searchTerms}
HKU\S-1-5-21-3017883403-1461830242-3419357051-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hppp&ts=1423180921&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2
HKU\S-1-5-21-3017883403-1461830242-3419357051-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hppp&ts=1423180921&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2
HKU\S-1-5-21-3017883403-1461830242-3419357051-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=dspp&ts=1423180921&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {33F6A848-26F5-40E7-9723-B7658B479AB5} URL =
SearchScopes: HKU\.DEFAULT -> {33F6A848-26F5-40E7-9723-B7658B479AB5} URL =
SearchScopes: HKU\S-1-5-21-3017883403-1461830242-3419357051-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=dspp&ts=1423180921&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3017883403-1461830242-3419357051-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&ts=1423180952&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3017883403-1461830242-3419357051-1002 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&ts=1423180952&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3017883403-1461830242-3419357051-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=dspp&ts=1423180921&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3017883403-1461830242-3419357051-1002 -> {33F6A848-26F5-40E7-9723-B7658B479AB5} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&ts=1423180952&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3017883403-1461830242-3419357051-1002 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=ST500LT012-9WS142_S0V63BF2XXXXS0V63BF2&ts=1423180952&type=default&q={searchTerms}
BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll [2015-02-05] ()
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
CHR Extension: (Strong Signal) - C:\Users\Daria\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcbclklbfcinjjelmpfncldpoempfmmk [2015-02-06]
CHR HKLM-x32\...\Chrome\Extension: [ieadcoanfjloocmfafkebdnfefmohngj] - C:\Program Files (x86)\BonanzaDeals\BonanzaDeals.crx [Not Found]
2015-05-31 19:53 - 2015-02-06 02:01 - 00000000 ____ D () C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
Task: {2ECAB904-E336-4C98-9DF0-D18903284970} - \BonanzaDealsUpdate No Task File <==== ATTENTION
Task: {EC27354C-5F8C-45B7-9B71-E671E905D063} - System32\Tasks\{87C6B185-4AA2-4B12-8B6C-BE7725EE2B7A} => pcalua.exe -a "C:\Users\Daria\Downloads\cwk252_setup (1).exe" -d C:\Users\Daria\Downloads
R2 StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [658192 2015-05-31] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [579856 2015-05-31] ()
C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
EmptyTemp:

Plik zapisz jako fixlist.txt i umieść w tym samym katalogu co FRST Uruchom FRST klikasz Fix Raport z usuwania pokaż na forum. Następnie ponownie uruchom FRST klikasz Scan pokaż nowy raport FRST.txt na forum

mmartek · 31 Maj 2015 20:55

fixlog - http://wklej.org/id/1726691/

problem nadal istnieje (za pewne coś źle ogarnąłem…)

frst - http://wklej.org/id/1726695/

spandaupol · 31 Maj 2015 22:50

Wklej do notatnika:

CloseProcesses:
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-01-16] (Thinknice Co. Limited)
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
2015-05-31 19:41 - 2015-05-31 19:50 - 00000000 ____ D () C:\AdwCleaner
2015-05-31 19:40 - 2015-05-31 19:40 - 02222592 _____ () C:\Users\Daria\Downloads\AdwCleaner.exe
C:\Program Files (x86)\XTab
EmptyTemp:

Plik zapisz jako fixlist.txt i umieść w tym samym katalogu co FRST Uruchom FRST klikasz Fix Raport z usuwania pokaż na forum. Następnie ponownie uruchom FRST klikasz Scan pokaż nowy raport FRST.txt na forum

mmartek · 2 Czerwiec 2015 17:44

fixlog http://wklej.org/id/1728341/

spandaupol · 2 Czerwiec 2015 22:30

Usuń folder C:\FRST

Reset chrome https://support.google.com/chrome/answer/3296214?hl=pl

Jeśli nie pomoże to

Odinstaluj Google Chrome, zaznacz przy tym usunięcie danych przeglądania, używając do tego Geek Uninstaller Free