Pomocy - strong signal (proszę o fixlist)

[magdalenasch]

Cześć

Bardzo proszę o pomoc w usunięciu Strong Signal... Juz nie daję rady z tymi reklamami

FRST : http://wklej.to/r43iW
Addition: http://wklej.to/KRQ4h

Z góry bardzo dziękuję!

[ordynat]

1) Odinstaluj:

Foxtab (HKLM-x32\...\foxtab) (Version: - FoxTab) <==== ATTENTION

2) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ (SCAN), a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ (CLEANING), to kliknij na niego.

3) Otwórz Notatnik i wklej w nim:

BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
C:\Program Files (x86)\Strong Signal
CHR Extension: (Strong Signal) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aamaaompokdjbebnfbcfobpkklfkmddp [2015-03-17]
FF Extension: Strong Signal - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\i5k7lg2w.default\Extensions\{6a37a6df-cdc9-4482-9257-c1fac286b4a9}.xpi [2015-03-16]
Task: C:\windows\Tasks\FoxTab.job => C:\Users\Magda\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {5ED41642-986A-49C5-B4D1-C2C0AFDD4115} - System32\Tasks\FoxTab => C:\Users\Magda\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
C:\Users\Magda\AppData\Local\foxtab_speeddial.crx
C:\windows\Tasks\FoxTab.job
C:\Users\Magda\AppData\Roaming\do-search
C:\ProgramData\WindowsMangerProtect
C:\ProgramData\IHProtectUpDate
C:\Program Files (x86)\XTab
C:\Users\Magda\Downloads\install_flash_player.exe
C:\Users\Magda\Downloads\Adobe-Flash-Player(13091)-dp.exe
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-16] (SysTool PasSame LIMITED)
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-03-10] (XTab system)
CHR HKLM-x32\...\Chrome\Extension: [dchmpbaclbiioedakpcldenooikekokm] - C:\Users\Magda\AppData\Local\foxtab_speeddial.crx [2013-11-04]
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [dchmpbaclbiioedakpcldenooikekokm] - C:\Users\Magda\AppData\Local\foxtab_speeddial.crx [2013-11-04]
CHR HKU\S-1-5-21-4224060179-2402737609-1760804883-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dchmpbaclbiioedakpcldenooikekokm] - C:\Users\Magda\AppData\Local\foxtab_speeddial.crx [2013-11-04]
CHR Extension: (Foxtab Speed Dial) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dchmpbaclbiioedakpcldenooikekokm [2013-11-20]
CHR Extension: (Foxtab Speed Dial) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchmpbaclbiioedakpcldenooikekokm [2014-06-18]
CHR DefaultSearchURL: Default -> http://do-search.com/web/?type=dspp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&q={searchTerms}
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.4.600\_platform_specific\win_x86\widevinecdmadapter.dll No File
CHR HomePage: Default -> hxxp://do-search.com/?type=hppp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351
CHR StartupUrls: Default -> "hxxp://do-search.com/?type=hppp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351"
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\i5k7lg2w.default\extensions\searchengine@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\i5k7lg2w.default\extensions\fftoolbar2014@etech.com
FF SearchPlugin: C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\i5k7lg2w.default\searchplugins\do-search.xml [2015-04-06]
FF Extension: FF Toolbar - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\i5k7lg2w.default\Extensions\fftoolbar2014@etech.com [2015-04-06]
FF Extension: Search Enginer - C:\Users\Magda\AppData\Roaming\Mozilla\Firefox\Profiles\i5k7lg2w.default\Extensions\searchengine@gmail.com [2015-03-16]
FF DefaultSearchEngine: do-search
FF Homepage: hxxp://do-search.com/?type=hppp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-03-10] (Thinknice Co. Limited)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1426535629&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1426535629&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1426535629&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1426535629&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&q={searchTerms}
HKU\S-1-5-21-4224060179-2402737609-1760804883-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://do-search.com/?type=hppp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351
HKU\S-1-5-21-4224060179-2402737609-1760804883-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=dspp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&q={searchTerms}
HKU\S-1-5-21-4224060179-2402737609-1760804883-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hppp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351
HKU\S-1-5-21-4224060179-2402737609-1760804883-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=dspp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4224060179-2402737609-1760804883-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4224060179-2402737609-1760804883-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&ts=1426535674&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4224060179-2402737609-1760804883-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&ts=1426535674&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4224060179-2402737609-1760804883-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&ts=1426535674&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4224060179-2402737609-1760804883-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=dspp&ts=1426535665&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4224060179-2402737609-1760804883-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=SAMSUNGXHM641JI_S266J1MZ401351401351&ts=1426535674&type=default&q={searchTerms}
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
C:\Program Files (x86)\Mobogenie
HKLM-x32\...\Run: [] => [X]
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.
Uruchom FRST i kliknij przycisk Fix.

Uruchom Google Chrome
> Naciśnij klawisze: lewy Alt+F i kliknij przycisk Ustawienia >
> Sekcja: Po uruchomieniu > wybierz: Otwórz konkretną stronę lub zestaw stron >
> Kliknij: Wybierz strony >
> Usuń: do-search.com, wpisz nowy adres strony głównej i kliknij przycisk OK.


----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.