tuman
2 Styczeń 2015 10:35
#1
Witam,
bardzo proszę o pomoc w usunięciu Faster Light. Nie potrafię go odinstalować, ponieważ nie ma go w liście programów w panelu sterowania - może kryć się pod jakąś inną nazwą? A może należy szukać gdzie indziej? Objawy to: od kilku dni reklamy sygnowane Faster Light, samoistna zmiana adresu w przeglądarce i przekierowanie na jakąś stronę z reklamami oraz spowolniony komputer oczywiście.
AdwCleaner oraz Farbar Recovery Scan Tool już skanowały, ale nadal to cholerstwo jest. Nie potrafię sobie z tym poradzić, dlatego jeszcze raz proszę o pomoc.
OTL http://wklej.org/id/1581500/
Extras http://wklej.org/id/1581506/
FRST http://wklej.org/id/1581509/
AdwCleaner http://wklej.org/id/1581521/
tuman
2 Styczeń 2015 10:54
#3
Acorus
2 Styczeń 2015 11:06
#4
Odinstaluj Norton Internet Security lub avast! Antivirus,McAfee Security Scan Plus.Otwórz notatnik systemowy i wklej:
Task: {371F7F89-3636-4810-AE6C-BDCBE70E4A17} - \Program aktualizacji online firmy Adobe. No Task File ==== ATTENTION
HKLM\...\Run: [] = [X]
HKLM\...\Run: [RtHDVBg] = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [896032 2010-03-22] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-2854678878-2454927857-3525892233-1000\...\Run: [] = [X]
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\bip_camera1.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\btassist1.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\cfaddgadgets.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\cfmain.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\cfprofile.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\eccenter1.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\hwsetup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\ndstray.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\teco.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\todisc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\topi.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tosbtproc1.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\toshibaservicestation.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tosramutil.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tpchviewer.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\trexlauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tsleep.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\twebcamera.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\usrguide.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\wirelessftp1.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2854678878-2454927857-3525892233-1000 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2854678878-2454927857-3525892233-1000 - {3EF164B4-6896-48F3-B0F4-860ECCFA1660} URL = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-2854678878-2454927857-3525892233-1000 - {CE95908F-8160-4595-B6F6-1DA44EC7B955} URL = http://www.amazon.co.uk/gp/search?ie=UTF8keywords={searchTerms}tag=tochibauk-win7-ie-search-21index=blendedlinkCode=ur2
SearchScopes: HKU\S-1-5-21-2854678878-2454927857-3525892233-1001 - {2EC0DD8D-79A1-4FFC-97B6-F9027BD8018E} URL = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-2854678878-2454927857-3525892233-1001 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-2854678878-2454927857-3525892233-1001 - {8B840783-C0DC-44C3-A999-9DA9AF00E581} URL =
SearchScopes: HKU\S-1-5-21-2854678878-2454927857-3525892233-1001 - {D936FE59-9F22-4CFD-B934-048FFBC48005} URL = http://www.amazon.co.uk/gp/search?ie=UTF8keywords={searchTerms}tag=tochibauk-win7-ie-search-21index=blendedlinkCode=ur2
CHR Extension: (Faster Light) - C:\Users\Vobis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbgbdinkchdlbniomfkieilppkmmfimc [2014-12-28]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [Not Found]
S2 Update Faster Light; "C:\Program Files (x86)\Faster Light\updateFasterLight.exe" [X]
S2 Util Faster Light; "C:\Program Files (x86)\Faster Light\bin\utilFasterLight.exe" [X]
2015-01-01 19:46 - 2015-01-01 20:52 - 00000000 ____ D () C:\AdwCleaner
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
tuman
2 Styczeń 2015 12:56
#5
Ogromne dzięki!
Domyślam się, że trzeba jeszcze usunąć folder FRST z dysku C, tak?