Strong signal ads

[KubaDrakkar]

Witam,
chyba trafiłem do polskiego centrum pomocy w usuwaniu Strong Signal
Proszę o pomoc w pozbyciu się tych uciążliwych reklam, wykracza to poza moją wiedzę.
Załączam raporty.

[ordynat]

Otwórz Notatnik i wklej w nim:

BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
C:\Program Files (x86)\Strong Signal
FF Extension: Strong Signal - C:\Users\PanDamian\AppData\Roaming\Mozilla\Firefox\Profiles\wdgh0boq.default\Extensions\{6dc74982-0c33-45a3-aaec-8285d2089296}.xpi [2014-12-17]
C:\ProgramData\saovvenusshaRe
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
CustomCLSID: HKU\S-1-5-21-1201768096-271526387-3764603461-1000_Classes\CLSID\{83B0E426-D4EE-11D4-BEDF-BAB7F1EEA455}\InprocServer32 -> C:\Program Files\Autodesk\3ds Max 2009\addflow4.ocx No File
Task: {0E9427BE-0A4A-43E6-90A0-8BFEDC71EBF6} - System32\Tasks\ROC_JAN2013_TB_rmv => C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe
Task: {503C1E18-F74A-4A82-A2FF-6ECCE352AD6A} - System32\Tasks\QtraxPlayer => 673994736.portal.qtrax.com
Task: {E971006A-AFC7-41D5-BB90-2F0B9604A691} - System32\Tasks\DSite => C:\Users\PANDAM~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Users\PANDAM~1\AppData\Roaming\DSite
Task: C:\Windows\Tasks\DSite.job => C:\Users\PANDAM~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job => C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe
C:\Program Files (x86)\AVG Secure Search
HKU\S-1-5-21-1201768096-271526387-3764603461-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1201768096-271526387-3764603461-1000\...\MountPoints2: D - D:\lge.exe
HKU\S-1-5-21-1201768096-271526387-3764603461-1000\...\Winlogon: [Shell] C:\Users\PanDamian\fswagz.exe,explorer.exe <==== ATTENTION
C:\Users\PanDamian\fswagz.exe
URLSearchHook: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 - (No Name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No File
URLSearchHook: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 - (No Name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - No File
SearchScopes: HKLM-x32 -> DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933
SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933
SearchScopes: HKLM-x32 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.pu-results.info/?l=1&q={searchTerms}&pid=708&r=2013/05/09&hid=3459734067&lg=EN&cc=PL
SearchScopes: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C6390023540C9F2D&affID=119357&tsp=4947
SearchScopes: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> {043C5167-00BB-4324-AF7E-62013FAEDACF} URL = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp
SearchScopes: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C6390023540C9F2D&affID=119357&tsp=4947
SearchScopes: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933
SearchScopes: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.pu-results.info/?l=1&q={searchTerms}&pid=708&r=2013/05/09&hid=3459734067&lg=EN&cc=PL
Toolbar: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> No Name - {BA14329E-9550-4989-B3F2-9732E92D17CC} - No File
Toolbar: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll No File
Toolbar: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> No Name - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No File
Toolbar: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> No Name - {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No File
Toolbar: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
Toolbar: HKU\S-1-5-21-1201768096-271526387-3764603461-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 WPRO_40_1340; system32\drivers\WPRO_40_1340.sys [X]
C:\Users\PanDamian\AppData\Local\Temp*.html
C:\Users\Public\lame.exe
C:\Users\Public\lame_enc.dll
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij przycisk Fix.
Powstanie plik fixlog.txt.
Daj ten log.

Uruchom FRST.
W polu SEARCH wklej:

explorer.exe

kliknij na przycisk "Search Files".
Raport z tego będzie tam, gdzie jest FRST.
.

[KubaDrakkar]

Przesyłam log i raport jakie wyprodukował FRST

[ordynat]

FRST nie wykrył fałszywego "explorer.exe", na szczęście.

Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.

[KubaDrakkar]

Wielkie dzięki!
Pozbyłem się reklam, wszystko działa dobrze.
Podziwiam za pomoc jakiej udzielasz tylu ludziom.