Problem z rekalmami: powered by strong signal.

[Schab3k]

Witam, mam problem z reklamami w mojej przeglądarce internetowej. włączają sie nie wiadomo kiedy. Najlepiej powiedzcie mi co zrobić krok po kroku.

Z góry dzięki za pomoc.

[ordynat]

1) Odinstaluj te programy:
omniboxes uninstall (HKLM-x32\...\omniboxes uninstall) (Version: - omniboxes)
SavePass 1.1 (HKLM-x32\...\SavePass 1.1) (Version: 1.36.01.22 - OB) <==== ATTENTION

2) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ (SCAN), a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ (CLEANING), to kliknij na niego.

3) Otwórz Notatnik i wklej w nim:

CHR Extension: (Strong Signal) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aamaaompokdjbebnfbcfobpkklfkmddp [2015-03-30]
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-03-10] (XTab system)
Task: {004B9107-1125-4FC6-8713-A726D17ACEE8} - System32\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-10_user => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-10.exe <==== ATTENTION
Task: {10444F72-ADE7-4C56-A02D-C82159FF0998} - System32\Tasks\{45C4CEA1-8035-495A-A775-C6DF4E94B3F0} => pcalua.exe -a C:\Users\Damian\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=obw
Task: {128B5969-01FC-4D78-AF8C-0EE7617DEEAC} - System32\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-5_user => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-5.exe <==== ATTENTION
C:\Program Files (x86)\SavePass 1.1
C:\Users\Damian\AppData\Roaming\omniboxes
Task: {A1C210A4-1A81-43D9-869E-9F70BD371525} - System32\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-5 => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-5.exe <==== ATTENTION
Task: {CE90B4E3-9370-440D-B6C8-17CBF295F61C} - System32\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-1-6 => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-1-6.exe <==== ATTENTION
Task: {FBB75F03-1CBE-44C0-80CD-CF9EC55BA1C9} - System32\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-1-7 => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-1-6.job => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-1-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-1-7.job => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-1-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-10_user.job => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-10.exe <==== ATTENTION
Task: C:\Windows\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-5.job => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\2846cc36-090b-4510-b3a5-ca756fae0964-5_user.job => C:\Program Files (x86)\SavePass 1.1\2846cc36-090b-4510-b3a5-ca756fae0964-5.exe <==== ATTENTION
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\omniboxes uninstall" /f
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.omniboxes.com/?type=sc&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.omniboxes.com/?type=sc&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357
ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.omniboxes.com/?type=sc&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357
ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.omniboxes.com/?type=sc&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357
ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.omniboxes.com/?type=sc&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357
ShortcutWithArgument: C:\Users\Damian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.omniboxes.com/?type=sc&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357
C:\ProgramData\WindowsMangerProtect
C:\Program Files (x86)\XTab
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=ds&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hppp&ts=1426628288&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&q={searchTerms}
SearchScopes: HKU\S-1-5-21-214667547-1196650246-3898446488-1002 -> {04266EE1-2CA1-44E0-B034-E42D828B8869} URL = http://www.omniboxes.com/web/?utm_source=b&utm_medium=obw&utm_campaign=install_ie&utm_content=ds&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&ts=1426628343&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-214667547-1196650246-3898446488-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.omniboxes.com/web/?utm_source=b&utm_medium=obw&utm_campaign=install_ie&utm_content=ds&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&ts=1426628343&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-214667547-1196650246-3898446488-1002 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.omniboxes.com/web/?utm_source=b&utm_medium=obw&utm_campaign=install_ie&utm_content=ds&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&ts=1426628343&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-214667547-1196650246-3898446488-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?utm_source=b&utm_medium=obw&utm_campaign=install_ie&utm_content=ds&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&ts=1426628343&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-214667547-1196650246-3898446488-1002 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.omniboxes.com/web/?utm_source=b&utm_medium=obw&utm_campaign=install_ie&utm_content=ds&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357&ts=1426628343&type=default&q={searchTerms}
BHO-x32: No Name -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> No File
BHO-x32: No Name -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=1426628276&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357
CHR HomePage: Default -> hxxp://www.omniboxes.com/?type=hppp&ts=1426628288&from=obw&uid=ST1000LM024XHN-M101MBB_S314JU0F821357821357
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-17] (SysTool PasSame LIMITED)
S3 OATool; \??\C:\Users\ADMINI~1\AppData\Local\Temp\OAToolx64.sys [X]
C:\Windows\Minidump\041215-46718-01.dmp
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
C:\ProgramData\IHProtectUpDate
C:\Users\Damian\AppData\Roaming\omniboxes
C:\Users\Damian\AppData\Local\globalUpdate
C:\Program Files (x86)\globalUpdate
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix.

4) Uruchom Google Chrome
> Naciśnij klawisze: lewy Alt+F i kliknij przycisk Ustawienia >
> Sekcja: Po uruchomieniu > wybierz: Otwórz konkretną stronę lub zestaw stron >
> Kliknij: Wybierz strony >
> Usuń: omniboxes.com, wpisz nowy adres strony głównej i kliknij przycisk OK.

----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.