Strong signal

[ToServeAndProtect]

Proszę o pomoc w usunięciu strong signal

Przed OTL i FRST zapuszczony był ADW Cleaner

OTL
EXTRAS

FRST
ADDITION

[ordynat]

1) Odinstaluj te programy:

EZDownloader (HKLM-x32\...\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - EZDownloader) <==== ATTENTION
NoMore Ads (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - NoMore Ads) <==== ATTENTION

2) Otwórz Notatnik i wklej w nim:

C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe
C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [478992 2015-05-28] ()
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\PluginContainer.exe [556304 2015-05-28] ()
BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll No File
C:\Program Files (x86)\Strong Signal
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
C:\Users\LukaszA.RRC\AppData\Roaming\omiga-plus
C:\Windows\Minidump\*.dmp
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.delta-homes.com/?type=sc&ts=1432150622&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm05203&uid=LITEONITXLMT-256M6MXmSATAX256GB_TW0XXM305508541L4294
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.delta-homes.com/?type=sc&ts=1432150622&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm05203&uid=LITEONITXLMT-256M6MXmSATAX256GB_TW0XXM305508541L4294
FF SearchPlugin: C:\Users\LukaszA.RRC\AppData\Roaming\Mozilla\Firefox\Profiles\q5o4a2qw.default\searchplugins\delta-homes.xml [2015-05-28]
FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\LukaszA.RRC\AppData\Roaming\Mozilla\Firefox\Profiles\q5o4a2qw.default\extensions\sweetsearch@gmail.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com/?type=sc&ts=1432150622&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm05203&uid=LITEONITXLMT-256M6MXmSATAX256GB_TW0XXM305508541L4294
BHO-x32: youtubeadblocker -> {15533ac4-a9cd-438f-bc15-3d4092704b43} -> C:\Program Files (x86)\youtubeadblocker\NTO0kYzzDU9Cmf.dll No File
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll No File
BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\XTab\SupTab.dll No File
BHO-x32: SalePlus -> {93d429f9-8f0b-4466-a61f-5faac0448e10} -> C:\Program Files (x86)\SalePlus\8JID85KT91Td6u.dll No File
BHO-x32: FuinoDeeals -> {99e8d035-ba07-496a-a1a6-0692d6c537d8} -> C:\Program Files (x86)\FuinoDeeals\zKmOIF0VWxbZSJ.dll No File
C:\Program Files (x86)\FuinoDeeals
C:\Program Files (x86)\SalePlus
C:\Program Files (x86)\XTab
C:\Program Files (x86)\youtubeadblocker
BHO: youtubeadblocker -> {15533ac4-a9cd-438f-bc15-3d4092704b43} -> C:\Program Files (x86)\youtubeadblocker\NTO0kYzzDU9Cmf.x64.dll No File
BHO: SalePlus -> {93d429f9-8f0b-4466-a61f-5faac0448e10} -> C:\Program Files (x86)\SalePlus\8JID85KT91Td6u.x64.dll No File
BHO: FuinoDeeals -> {99e8d035-ba07-496a-a1a6-0692d6c537d8} -> C:\Program Files (x86)\FuinoDeeals\zKmOIF0VWxbZSJ.x64.dll No File
SearchScopes: HKLM-x32 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.coolsearches.info/?l=1&q={searchTerms}&pid=22894&r=2015/03/24&hid=13021953153117528104&lg=EN&cc=PL&unqvl=85
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422958496&from=cor&uid=LITEONITXLMT-256M6MXmSATAX256GB_TW0XXM305508541L4294&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1422958496&from=cor&uid=LITEONITXLMT-256M6MXmSATAX256GB_TW0XXM305508541L4294&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1422958496&from=cor&uid=LITEONITXLMT-256M6MXmSATAX256GB_TW0XXM305508541L4294&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1422958496&from=cor&uid=LITEONITXLMT-256M6MXmSATAX256GB_TW0XXM305508541L4294&q={searchTerms}
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.exe
Uruchom FRST i kliknij przycisk Fix.

3)

CHR dev: Chrome dev build detected! <======= ATTENTION

Odinstaluj tę dziurawą wersję Google Chrome.
Zainstaluj stąd > http://www.google.com/chrome/


---------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.

=================

Jeśli natomiast problem nie zniknie, to przeinstalujesz przeglądarkę, na której to jeszcze będzie.

========================================================

Error - 2015-05-28 08:49:11 | Computer Name = LukaszA-E7240.RRC | Source = WinMgmt | ID = 10
Description =

Aby automatycznie rozwiązać ten problem, kliknij > Fix.it. na stronie http://support2.microsoft.com/kb/2545227/en-us
Następnie kliknij przycisk Uruchom w oknie dialogowym Pobieranie pliku i wykonaj kroki w kreatorze Fix.it.
(Link zapasowy > http://www.mediafire.com/download/6hwcm6b77098cbb/MicrosoftFixit50688.msi )
.
.

Autor postu otrzymał pochwałę

[ToServeAndProtect]

FIXLIST

Nowe:
FRST
ADDITION

Chrome jest normalny zainstalowany

[ordynat]

Sadząc po nowych logach, to jest już OK.
.

[ToServeAndProtect]

dzięki, usunięte