Strong signal ads - prośba o pomoc

[lancetowaty]

Hej,
Proszę o pomoc w usunięciu strong signal ads. Poniżej wklejam raporty.
Pozdrawiam,
L.

[ordynat]

1) Odinstaluj te programy:
Browser Extensions (HKU\S-1-5-21-2270216008-237702622-998938242-1001\...\{3A787631-66A2-4634-B928-A37E73B58FB6}) (Version: 2.8 - Spigot, Inc.) <==== ATTENTION
do-search uninstall (HKLM-x32\...\do-search uninstall) (Version: - do-search)
Strong Signal (HKLM-x32\...\Strong Signal) (Version: 2.0.5552.1062 - Strong Signal) <==== ATTENTION!
Search Protection (HKU\S-1-5-21-2270216008-237702622-998938242-1001\...\Search Protection) (Version: 11.2.0.2 - Spigot, Inc.) <==== ATTENTION

2) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ, a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ, to kliknij na niego.

3) Otwórz Notatnik i wklej w nim:

BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll [2015-03-15] ()
C:\Program Files (x86)\Strong Signal
FF Extension: Strong Signal - C:\Users\JacekS\AppData\Roaming\Mozilla\Firefox\Profiles\uwo7kacz.default\Extensions\{02df6ed9-d89d-425c-afc3-3a79ad6ce5ef}.xpi [2015-03-08]
FF Extension: Strong Signal - C:\Users\JacekS\AppData\Roaming\Mozilla\Firefox\Profiles\uwo7kacz.default\Extensions\{38557805-f7a3-4a68-ba6e-ee08fbcdb280}.xpi [2015-03-15]
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [639224 2015-03-25] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [559864 2015-03-25] ()
C:\Users\JacekS\AppData\Roaming\Search Protection
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\ProgramData\WindowsMangerProtect
C:\Program Files (x86)\XTab
HKU\S-1-5-21-2270216008-237702622-998938242-1001\...\Run: [Search Protection] => C:\Users\JacekS\AppData\Roaming\Search Protection\SP.EXE
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-03-06] (Thinknice Co. Limited)
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://do-search.com/web/?type=ds&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://do-search.com/web/?type=ds&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&q={searchTerms}
HKU\S-1-5-21-2270216008-237702622-998938242-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://do-search.com/?type=hp&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?type=ds&ts=1425839847&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2270216008-237702622-998938242-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&ts=1425840394&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2270216008-237702622-998938242-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&ts=1425840394&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2270216008-237702622-998938242-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&ts=1425840394&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2270216008-237702622-998938242-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&ts=1425840394&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2270216008-237702622-998938242-1001 -> {3E2CA3C7-8A60-4F87-A4C2-6DEF52E95B7A} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&ts=1425840394&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2270216008-237702622-998938242-1001 -> {B103E0A4-A59A-4B27-848F-8AAA3EA47339} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&ts=1425840394&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2270216008-237702622-998938242-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD10JPCX-24UE4T0_WD-WX21A24F9779F9779&ts=1425840394&type=default&q={searchTerms}
FF SearchPlugin: C:\Users\JacekS\AppData\Roaming\Mozilla\Firefox\Profiles\uwo7kacz.default\searchplugins\yahoo_ff.xml [2015-03-15]
FF Extension: Fast Start - C:\Users\JacekS\AppData\Roaming\Mozilla\Firefox\Profiles\uwo7kacz.default\Extensions\istart_ffnt@gmail.com [2015-03-19]
FF Extension: Zoom It - C:\Users\JacekS\AppData\Roaming\Mozilla\Firefox\Profiles\uwo7kacz.default\Extensions\zzoomit@zoom.com [2015-03-08]
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\JacekS\AppData\Roaming\Mozilla\Firefox\Profiles\uwo7kacz.default\extensions\searchengine@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [istart_ffnt@gmail.com] - C:\Users\JacekS\AppData\Roaming\Mozilla\Firefox\Profiles\uwo7kacz.default\extensions\istart_ffnt@gmail.com
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158848 2015-03-06] (XTab system)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-03-08] (SysTool PasSame LIMITED)
C:\ProgramData\IHProtectUpDate
C:\Users\JacekS\AppData\Roaming\do-search
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.
Uruchom FRST i kliknij przycisk Fix.

----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.