Strong signal - prośba o pomoc

[aneszka]

Dzień dobry,
zwracam się z prośbą w usunięciu wirusa Strong Signal. Poniżej załączniki z FRST. Z góry olbrzymie dzięki za pomoc!

[ordynat]

1)

Strong Signal (HKLM\...\Strong Signal) (Version: 2.0.5548.10045 - Strong Signal) <==== ATTENTION!

Spróbuj odinstalować ten program.

2) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ (SCAN), a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ (CLEANING), to kliknij na niego.

3) Otwórz Notatnik i wklej w nim:

BHO: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll [2015-03-11] ()
C:\Program Files\Strong Signal
FF Extension: Strong Signal - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\uuedz90z.default-1427651934964\Extensions\{70d7db02-623e-44ed-b5a4-769e869a9322}.xpi [2015-03-29]
CHR Extension: (PriceGong) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok [2013-09-28]
CHR Extension: (Strong Signal) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jahepoliaomnhnejhcjbapfailjpapek [2015-03-12]
C:\Program Files\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe
C:\Program Files\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\2\plugin.exe
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\3\plugin.exe
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\5\plugin.exe
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugins\6\plugin.exe
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
Reg: reg delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\lollipop" /f
c:\users\admin\appdata\local\lollipop
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_f4b0b18b-8409-41de-a3a2-205cd3d9ed35
HKU\S-1-5-21-2807985465-3132455651-165434718-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_f4b0b18b-8409-41de-a3a2-205cd3d9ed35
HKU\S-1-5-21-2807985465-3132455651-165434718-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchamong.com/searchview.php?query={searchTerms}&cat=webs&bar=true
HKU\S-1-5-21-2807985465-3132455651-165434718-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchamong.com/searchview.php?query={searchTerms}&cat=webs&bar=true
HKU\S-1-5-21-2807985465-3132455651-165434718-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.searchgol.com/?babsrc=HP_ss&mntrId=34BCD0DF9A2B9687&affID=119357&tt=250913_cpn2&tsp=5018
URLSearchHook: HKLM - BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll No File
SearchScopes: HKLM -> DefaultScope {154d339e-ccaa-49a5-9b38-6878ad4220bc} URL = http://q.search-simple.com/?affID=bl_f4b0b18b-8409-41de-a3a2-205cd3d9ed35&q={searchTerms}
SearchScopes: HKLM -> OldSearch URL = http://www.searchamong.com/searchview.php?query={searchTerms}&cat=webs&bar=true
SearchScopes: HKLM -> {154d339e-ccaa-49a5-9b38-6878ad4220bc} URL = http://q.search-simple.com/?affID=bl_f4b0b18b-8409-41de-a3a2-205cd3d9ed35&q={searchTerms}
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
HKLM\...\Run: [] => [X]
AppInit_DLLs: c:\progra~2\bitguard\261694~1.246\{c16c1~1\bitguard.dll => c:\progra~2\bitguard\261694~1.246\{c16c1~1\bitguard.dll File Not Found
c:\progra~2\bitguard
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-2807985465-3132455651-165434718-1000 -> DefaultScope {154d339e-ccaa-49a5-9b38-6878ad4220bc} URL = http://q.search-simple.com/?affID=bl_f4b0b18b-8409-41de-a3a2-205cd3d9ed35&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2807985465-3132455651-165434718-1000 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-2807985465-3132455651-165434718-1000 -> OldSearch URL = http://www.bing.com/search?FORM=UP97DF&PC=UP97&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2807985465-3132455651-165434718-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=34BCD0DF9A2B9687&affID=119357&tt=250913_cpn2&tsp=5018
SearchScopes: HKU\S-1-5-21-2807985465-3132455651-165434718-1000 -> {154d339e-ccaa-49a5-9b38-6878ad4220bc} URL = http://q.search-simple.com/?affID=bl_f4b0b18b-8409-41de-a3a2-205cd3d9ed35&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2807985465-3132455651-165434718-1000 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKU\S-1-5-21-2807985465-3132455651-165434718-1000 -> {DF935799-AC40-417F-8BB3-09B62B5AA461} URL = http://www.searchamong.com/searchview.php?query={searchTerms}&cat=webs&bar=true
BHO: No Name -> {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} -> No File
BHO: BitTorrentBar Toolbar -> {88c7f2aa-f93f-432c-8f0e-b7d85967a527} -> C:\Program Files\BitTorrentBar\prxtbBitT.dll No File
Toolbar: HKLM - BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll No File
Toolbar: HKU\S-1-5-21-2807985465-3132455651-165434718-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_616_bl-is-19__alt__ddc_dsssyctab_bd_com
FF DefaultSearchEngine: Yahoo! Search
FF SelectedSearchEngine: Yahoo! Search
FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bg_616_bl-is-19__alt__ddc_dss_bd_com&p={searchTerms}
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-03]
CHR RestoreOnStartup: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18__alt__ddc_dsssyc_bd_com"
CHR StartupUrls: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-18__alt__ddc_dsssyc_bd_com"
CHR DefaultSearchKeyword: Default -> yahoo.com
CHR DefaultNewTabURL: Default -> http://search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_616_bl-is-18__alt__ddc_dsssyctab_bd_com
CHR HKLM\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files\PriceGong\2.6.4\pricegong.crx [2012-03-18]
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [556304 2015-05-09] ()
R2 Update Mgr StrongSignal; C:\Program Files\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [478992 2015-05-09] ()
S2 BitGuard; C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [X]
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix.


----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)

Odinstaluj ten program, bo i tak widać, że z niego nie korzystasz, nie jest Ci potrzebny.
.
Zainstaluj nowszą, bezpieczniejszą wersję Javy:
>http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html (wybierz: Windows x86 Offline)
.

[aneszka]

Przeogromne dzięki! Wszystko działa normalnie! Jeszcze raz ukłony i miłego weekendu.