Usunięcie strong signal ads

dejv02 · 20 Luty 2015 16:35

Proszę o pomoc w usunięciu strong signal ads.

z góry dziekuje za pomoc.

Pozdrawiam.

Acorus · 20 Luty 2015 16:51

Odinstaluj Adobe Reader 9.1 MUI,McAfee Security Scan Plus.Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [ASUS WebStorage] = C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [1754448 2010-03-16] ()
HKLM-x32\...\Run: [RemoteControl9] = C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateLBPShortCut] = C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] = C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM-x32\...\Run: [BCSSync] = C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=dsts=1423998875from=obwuid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=dsts=1423998875from=obwuid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=dsts=1423998875from=obwuid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=dsts=1423998875from=obwuid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
HKU\S-1-5-21-1168609249-2715750156-154641271-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1168609249-2715750156-154641271-1000 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
BHO-x32: No Name - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - No File
Toolbar: HKU\S-1-5-21-1168609249-2715750156-154641271-1000 - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=scts=1423998759from=obwuid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803
FF DefaultSearchEngine: omniboxes
FF SelectedSearchEngine: omniboxes
FF Extension: Strong Signal - C:\Users\Dawid\AppData\Roaming\Mozilla\Firefox\Profiles\j3edze0g.default\Extensions\{f318d533-127c-4630-af87-2d2b706e5282}.xpi [2015-02-16]
FF HKU\S-1-5-21-1168609249-2715750156-154641271-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
U3 tmlwf; No ImagePath
U3 tmwfp; No ImagePath
2015-02-18 21:03 - 2015-02-20 16:29 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

dejv02 · 20 Luty 2015 17:32

http://wklejto.pl/txt222619 nowylog

Acorus · 20 Luty 2015 17:52

To nie jest nowy log tylko log z usuwania.

dejv02 · 20 Luty 2015 17:56

ok to robie to jeszcze raz ale przyciskiem skan,jak rozumiem?

Acorus · 20 Luty 2015 18:03

Tak-dobrze rozumujesz.

dejv02 · 20 Luty 2015 18:12

frst: http://wklejto.pl/txt222623

teraz jest chyba dobrze:-)

Acorus · 20 Luty 2015 18:53

Log nie jest kompletny.

dejv02 · 20 Luty 2015 19:13

http://wklej.to/qmjFb

Acorus · 21 Luty 2015 09:21

Otwórz notatnik systemowy i wklej:

2015-02-14 11:30 - 2015-02-14 11:30 - 00003544 _____ () C:\Windows\System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

dejv02 · 26 Luty 2015 08:38

znów mam ten sam problem… jakieś 3 dni było dobrze.

Bardzo proszę o pomoc.

FRST: http://wklej.to/BgH6G

ADDITIONAL: http://wklej.to/dX6Lv

Acorus · 26 Luty 2015 08:56

Odinstaluj key-find uninstall,Strong Signal.Otwórz notatnik systemowy i wklej:

Task: {CF556DCC-215C-4A33-A0A2-B2934E5FAF63} - \060184C3-9766-46a0-B258-F4518A0B2633 No Task File ==== ATTENTION
HKU\S-1-5-18\...\RunOnce: [{91140000-0011-0000-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-001A-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-001A-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-00A1-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-00A1-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-006E-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-006E-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0017-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0015-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0016-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-00BA-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0044-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0018-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0019-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-001B-0415-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0015-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0016-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-00BA-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0044-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0018-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-0019-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKU\S-1-5-18\...\RunOnce: [{90140000-001B-0409-0000-0000000FF1CE}] = C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hpts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hpts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=dsts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=dsts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hpts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hpts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=dsts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=dsts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
HKU\S-1-5-21-1168609249-2715750156-154641271-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hpts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803
HKU\S-1-5-21-1168609249-2715750156-154641271-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=dsts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
HKU\S-1-5-21-1168609249-2715750156-154641271-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hpts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803
HKU\S-1-5-21-1168609249-2715750156-154641271-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=dsts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=dsts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=dsts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
SearchScopes: HKU\S-1-5-21-1168609249-2715750156-154641271-1000 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803ts=1424895296type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1168609249-2715750156-154641271-1000 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803ts=1424895296type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1168609249-2715750156-154641271-1000 - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803ts=1424895296type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1168609249-2715750156-154641271-1000 - {322997E4-B729-4A8A-86A5-55C1A95BD57B} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803ts=1424895296type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1168609249-2715750156-154641271-1000 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803ts=1424895296type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1168609249-2715750156-154641271-1000 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803ts=1424895296type=defaultq={searchTerms}
SearchScopes: HKU\S-1-5-21-1168609249-2715750156-154641271-1000 - {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.key-find.com/web/?utm_source=butm_medium=corutm_campaign=install_ieutm_content=dsfrom=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803ts=1424895296type=defaultq={searchTerms}
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\XTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Strong Signal - {c723a437-2eaf-466d-a95b-3fa0966bf88c} - C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll ()
FF DefaultSearchEngine: key-find
FF SelectedSearchEngine: key-find
FF Homepage: hxxp://www.key-find.com/?type=hpts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803
FF SearchPlugin: C:\Users\Dawid\AppData\Roaming\Mozilla\Firefox\Profiles\j3edze0g.default\searchplugins\key-find.xml
FF Extension: Fast Start - C:\Users\Dawid\AppData\Roaming\Mozilla\Firefox\Profiles\j3edze0g.default\Extensions\faststartff@gmail.com [2015-02-25]
FF Extension: Search Enginer - C:\Users\Dawid\AppData\Roaming\Mozilla\Firefox\Profiles\j3edze0g.default\Extensions\searchengine@gmail.com [2015-02-25]
FF Extension: Strong Signal - C:\Users\Dawid\AppData\Roaming\Mozilla\Firefox\Profiles\j3edze0g.default\Extensions\{d53d402a-1b39-4020-8066-3e40f3b55121}.xpi [2015-02-25]
CHR HomePage: Default - hxxp://www.key-find.com/?type=hpts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803
CHR StartupUrls: Default - "hxxp://www.key-find.com/?type=hpts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803"
CHR DefaultSearchKeyword: Default - key-find
CHR DefaultSearchURL: Default - http://www.key-find.com/web/?type=dsts=1424895187from=coruid=WDCXWD3200BEVT-80A0RT0_WD-WX81A30N2803N2803q={searchTerms}
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [577272 2015-02-25] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [384760 2015-02-25] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-25] (SysTool PasSame LIMITED)

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

dejv02 · 26 Luty 2015 10:51

ogromne dzieki:)

Acorus · 26 Luty 2015 10:52

Skasuj folder C:\FRST