• Ogłoszenie:

Strong signal nie pozwala mi na normalne korzystanie z sieci

Bezpieczeństwo systemów, usuwanie wirusów, dobieranie programów antywirusowych. Obowiązkowe logi w tym dziale: trzy z FRST + Gmer.

Strong signal nie pozwala mi na normalne korzystanie z sieci

Postprzez lirra 27 Maj 2015, 23:16

reklama
Witam,

zwracam się z prośbą o pomoc w pozbyciu się Strong Signal, bo nie mogę normalnie korzystać z internetu bez przerwy pojawiają się reklamy, nie mogę nawet swobodnie przeczytać artykułów, bo po kilka razy przekierowuje mnie na jakieś bezsensowne strony
w załączeniu raporty z FRST
z góry dziękuję za pomoc

pozdrawiam :)
Załączniki
FRST.txt
(30.89 KiB) Ściągnięto 14 razy
AdwCleaner%5BS2%5D.txt
(1.04 KiB) Ściągnięto 22 razy
Addition.txt
(40.29 KiB) Ściągnięto 20 razy
lirra
~user
 
Posty: 1
Dołączenie: 27 Maj 2015, 23:03



Strong signal nie pozwala mi na normalne korzystanie z sieci

Postprzez ordynat 28 Maj 2015, 07:59

Jakiś dziwny ten Twój Adw-Cleaner: w logach widać śmieci, które Adw-Cleaner powinien automatycznie usunąć - a nie wykrył ich nawet.

1) Odinstaluj te programy:
key-find uninstall (HKLM-x32\...\key-find uninstall) (Version: - key-find) <==== ATTENTION!
PriceFountain (remove only) (HKU\S-1-5-21-3231156370-3860646667-1155949181-1001\...\PriceFountain) (Version: 1.1.0.5 - Price Fountain) <==== ATTENTION!


2) Otwórz Notatnik i wklej w nim:
CHR Extension: (Strong Signal) - C:\Users\li\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcbclklbfcinjjelmpfncldpoempfmmk [2015-02-06]
C:\ProgramData\WindowsMangerProtect
C:\Program Files (x86)\XTab
C:\Users\li\AppData\Local\PriceFountain
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
HKU\S-1-5-21-3231156370-3860646667-1155949181-1001\...\Run: [pricefountainw.exe] => C:\Users\li\AppData\Local\PriceFountain\pricefountainw.exe [462336 2015-02-03] (Price Fountain)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_f48b4420-6177-4c7c-9f88-76c20f046fb6
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.key-find.com/?type=hp&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=ds&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.key-find.com/web/?type=ds&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hp&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hp&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=ds&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.key-find.com/web/?type=ds&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&q={searchTerms}
HKU\S-1-5-21-3231156370-3860646667-1155949181-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://q.search-simple.com/?affID=bl_f48b4420-6177-4c7c-9f88-76c20f046fb6
HKU\S-1-5-21-3231156370-3860646667-1155949181-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.key-find.com/?type=hp&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://q.search-simple.com/?affID=bl_f48b4420-6177-4c7c-9f88-76c20f046fb6&q={searchTerms}
SearchScopes: HKLM -> OldSearch URL = http://www.key-find.com/web/?type=ds&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://q.search-simple.com/?affID=bl_f48b4420-6177-4c7c-9f88-76c20f046fb6&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=ds&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?type=ds&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3231156370-3860646667-1155949181-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_f48b4420-6177-4c7c-9f88-76c20f046fb6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3231156370-3860646667-1155949181-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://q.search-simple.com/?affID=bl_f48b4420-6177-4c7c-9f88-76c20f046fb6&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3231156370-3860646667-1155949181-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&ts=1423160311&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3231156370-3860646667-1155949181-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&ts=1423160311&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3231156370-3860646667-1155949181-1001 -> {33BEEC0D-0789-4511-A834-86B926F02196} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&ts=1423160311&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3231156370-3860646667-1155949181-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.key-find.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097&ts=1423160311&type=default&q={searchTerms}
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-01-16] (Thinknice Co. Limited)
BHO-x32: PriceFountain -> {b608cc98-54de-4775-96c9-097de398500c} -> C:\Users\li\AppData\Local\PriceFountain\PriceFountainIE.dll [2015-01-11] ()
BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
CHR HomePage: Default -> hxxp://www.key-find.com/?type=hp&ts=1423160286&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WX31A14M3097M3097
CHR RestoreOnStartup: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-19__alt__ddc_dsssyc_bd_com"
CHR StartupUrls: Default -> "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-19__alt__ddc_dsssyc_bd_com"
CHR DefaultSearchKeyword: Default -> yahoo.com
CHR DefaultNewTabURL: Default -> http://search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_616_bl-is-19__alt__ddc_dsssyctab_bd_com
OPR StartupUrls: "hxxp://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-19__alt__ddc_dsssyc_bd_com"
OPR Extension: (Strong Signal) - C:\Users\li\AppData\Roaming\Opera Software\Opera Stable\Extensions\lcbclklbfcinjjelmpfncldpoempfmmk [2015-05-01]
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [487056 2015-02-05] (SysTool PasSame LIMITED) <==== ATTENTION
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix.



----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:
DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.

=================

Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie.
.
ordynat
~user
 
Posty: 4765
Dołączenie: 02 Kwi 2010, 11:18
Pochwały: 866




Powróć do Bezpieczeństwo

Kto jest na forum

Użytkownicy przeglądający to forum: qheajxe oraz 5 gości