Prośba o pomoc z usunięciem strong signal

[aleada]

Bardzo proszę o pomoc w usunięciu tego wirusa? czy cokolwiek to jest;

frst: http://wklej.org/id/1645533/
Additional: wklej.org/id/1645537/

Totalnie się nie znam, sugeruję innymi postami.

[ordynat]

1) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ, a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ, to kliknij na niego.

2) Otwórz Notatnik i wklej w nim:

BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
C:\Program Files (x86)\Strong Signal
FF Extension: Strong Signal - C:\Users\Aleksandra\AppData\Roaming\Mozilla\Firefox\Profiles\yzlxdyn1.default\Extensions\{b0831b08-26e0-4e79-be2c-d45ab7387aaf}.xpi [2015-02-20]
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
C:\ProgramData\WindowsMangerProtect
C:\Program Files (x86)\XTab\ProtectService.exe
C:\Program Files (x86)\XTab
C:\Program Files (x86)\WiseEnhance\updateWiseEnhance.exe
C:\Program Files (x86)\WiseEnhance\bin\utilWiseEnhance.exe
C:\Program Files (x86)\WiseEnhance
Reg: reg delete "HKCU\software\microsoft\windows\currentversion\explorer\mountpoints2" /f
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1423841779&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1423841779&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1423841856&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1423841856&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1423841779&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1423841779&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&q={searchTerms}
HKU\S-1-5-21-36385982-244926655-1508247068-1002\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dspp&ts=1423841856&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&q={searchTerms}
HKU\S-1-5-21-36385982-244926655-1508247068-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1423841856&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W
HKU\S-1-5-21-36385982-244926655-1508247068-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dspp&ts=1423841856&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&q={searchTerms}
SearchScopes: HKU\S-1-5-21-36385982-244926655-1508247068-1002 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dspp&ts=1423841856&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&q={searchTerms}
SearchScopes: HKU\S-1-5-21-36385982-244926655-1508247068-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&ts=1423841897&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-36385982-244926655-1508247068-1002 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&ts=1423841897&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-36385982-244926655-1508247068-1002 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=dspp&ts=1423841856&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&q={searchTerms}
SearchScopes: HKU\S-1-5-21-36385982-244926655-1508247068-1002 -> {75E58FE0-9510-4C79-B344-C6747CFD6A90} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&ts=1423841897&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-36385982-244926655-1508247068-1002 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W&ts=1423841897&type=default&q={searchTerms}
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll (Thinknice Co. Limited)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1423841779&from=smt&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBDB10050W
FF SelectedSearchEngine: mystartsearch
R2 Update WiseEnhance; C:\Program Files (x86)\WiseEnhance\updateWiseEnhance.exe [316704 2014-05-06] ()
R2 Util WiseEnhance; C:\Program Files (x86)\WiseEnhance\bin\utilWiseEnhance.exe [317728 2014-05-13] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-13] (SysTool PasSame LIMITED)
R1 {2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gw64; C:\Windows\System32\drivers\{2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gw64.sys [61120 2014-04-24] (StdLib)
S3 massfilter; \SystemRoot\System32\drivers\massfilter.sys [X]
R3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X]
S3 ZTEusbmdm6k; \SystemRoot\system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnet; \SystemRoot\system32\DRIVERS\ZTEusbnet.sys [X]
S3 ZTEusbnmea; \SystemRoot\system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; \SystemRoot\system32\DRIVERS\ZTEusbser6k.sys [X]
C:\ProgramData\IHProtectUpDate
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij przycisk Fix.

Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.

[aleada]

Zadziałało. Dziękuję bardzo!