Strong signal

[maliniak92]

Witam.

Przesyłam logi:

[ordynat]

1) Odinstaluj te programy:

mystartsearch uninstall (HKLM-x32\...\mystartsearch uninstall) (Version: - mystartsearch) <==== ATTENTION
Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C1902}) (Version: 12.25.2.60 - APN, LLC) <==== ATTENTION
Strong Signal (HKLM-x32\...\Strong Signal) (Version: 2.0.5522.42387 - Strong Signal) <==== ATTENTION!

2) Użyj Adw-Cleaner http://www.programosy.pl/program,adwcleaner.html
najpierw kliknij na SZUKAJ, a dopiero po zakończeniu skanowania, gdy uaktywni się przycisk USUŃ, to kliknij na niego.

3) Otwórz Notatnik i wklej w nim:

BHO-x32: Strong Signal -> {c723a437-2eaf-466d-a95b-3fa0966bf88c} -> C:\Program Files (x86)\Strong Signal\Extensions\c723a437-2eaf-466d-a95b-3fa0966bf88c.dll [2015-02-14] ()
C:\Program Files (x86)\Strong Signal
FF Extension: Strong Signal - C:\Users\Karolek\AppData\Roaming\Mozilla\Firefox\Profiles\5uw8q1ym.default\Extensions\{f318d533-127c-4630-af87-2d2b706e5282}.xpi [2015-02-14]
R2 Service Mgr StrongSignal; C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce\plugincontainer.exe [636152 2015-03-16] ()
R2 Update Mgr StrongSignal; C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce\updater.exe [432888 2015-03-16] ()
C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
Reg: reg delete "HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes" /f
Reg: reg delete "HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes" /f
C:\Program Files (x86)\AskPartnerNetwork
C:\Program Files (x86)\XTab
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1949592 2015-02-14] (APN)
HKLM-x32\...\Run: [] => [X]
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&q={searchTerms}
HKU\S-1-5-21-320547457-2041515029-3647522490-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465
HKU\S-1-5-21-320547457-2041515029-3647522490-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&q={searchTerms}
SearchScopes: HKU\S-1-5-21-320547457-2041515029-3647522490-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&ts=1423874023&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-320547457-2041515029-3647522490-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&ts=1423874023&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-320547457-2041515029-3647522490-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&ts=1423874023&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-320547457-2041515029-3647522490-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&ts=1423874023&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-320547457-2041515029-3647522490-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465&ts=1423874023&type=default&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1423873940&from=smt&uid=ST500LM012XHN-M500MBB_S2RSJ9GCB01465
FF SearchPlugin: C:\Users\Karolek\AppData\Roaming\Mozilla\Firefox\Profiles\5uw8q1ym.default\searchplugins\ask-search.xml [2015-03-15]
FF Extension: Fast Start - C:\Users\Karolek\AppData\Roaming\Mozilla\Firefox\Profiles\5uw8q1ym.default\Extensions\faststartff@gmail.com [2015-02-14]
FF Extension: FF Toolbar - C:\Users\Karolek\AppData\Roaming\Mozilla\Firefox\Profiles\5uw8q1ym.default\Extensions\fftoolbar2014@etech.com [2015-02-14]
FF Extension: Search App by Ask - C:\Users\Karolek\AppData\Roaming\Mozilla\Firefox\Profiles\5uw8q1ym.default\Extensions\toolbar_ORJ-SPE@apn.ask.com.xpi [2015-02-14]
FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\Karolek\AppData\Roaming\Mozilla\Firefox\Profiles\5uw8q1ym.default\extensions\fftoolbar2014@etech.com
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Karolek\AppData\Roaming\Mozilla\Firefox\Profiles\5uw8q1ym.default\extensions\faststartff@gmail.com
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [177560 2015-01-31] (APN LLC.)
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158896 2015-01-16] (XTab system)
S2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -service [X
C:\Program Files (x86)\XTab
2015-02-14 01:33 - 2015-02-14 01:33 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-02-14 01:32 - 2015-02-14 13:09 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-02-14 01:32 - 2015-02-14 01:32 - 00000000 ____D () C:\Users\Karolek\AppData\Roaming\mystartsearch
C:\Users\Karolek\Downloads\DAEMON-Tools-Lite(12708)-dp.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST.
Uruchom FRST i kliknij przycisk Fix.

----------------------
Jeśli będzie OK, to będziemy kończyć:
Otwórz Notatnik i wklej w nim:

DeleteQuarantine:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.
przez SHIFT+DEL usuń pozostały folder C:\FRST.

W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL).
.