First Light - FTSU #uninstall

Dla specjalistów Bezpieczeństwo
#1

Witam,

 

Za namową użytkownika Acorus dodaje nowy temat.

Jak widzę nie tylko ja mam kłopot z niechcianym First Light, mam nadzieję że ten post będzie wartościowy dla osób szukających pomocy w usunięciu First Light.

 

Wklej.org:

FRST - http://wklej.org/id/1577380/

Addition - http://wklej.org/id/1577382/

 

THX

#2

Otwórz notatnik systemowy i wklej:

ShellIconOverlayIdentifiers: [SugarSyncBackedUp] - {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} = No File
ShellIconOverlayIdentifiers: [SugarSyncPending] - {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} = No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] - {A759AFF6-5851-457D-A540-F4ECED148351} = No File
ShellIconOverlayIdentifiers: [SugarSyncShared] - {1574C9EF-7D58-488F-B358-8B78C1538F51} = No File
GroupPolicy: Group Policy on Chrome detected ======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
CHR Extension: (Faster Light) - C:\Users\Lenny PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\homiajjamnfjffkhehgijpolacellkag [2014-12-18]
R1 {442ad619-2fad-4d96-9434-49e6d1c6e280}Gw64; C:\Windows\System32\drivers\{442ad619-2fad-4d96-9434-49e6d1c6e280}Gw64.sys [48792 2014-12-20] (StdLib)
R1 {ca6b750a-d001-404b-be03-93ff7fa91d1b}Gw64; C:\Windows\System32\drivers\{ca6b750a-d001-404b-be03-93ff7fa91d1b}Gw64.sys [48792 2014-12-17] (StdLib)
R1 {db4225e9-90b8-4ca5-99da-da423e504d3d}Gw64; C:\Windows\System32\drivers\{db4225e9-90b8-4ca5-99da-da423e504d3d}Gw64.sys [48792 2014-12-18] (StdLib)
2014-12-21 11:37 - 2014-12-20 22:46 - 00048792 _____ (StdLib) C:\WINDOWS\system32\Drivers\{442ad619-2fad-4d96-9434-49e6d1c6e280}Gw64.sys
2014-12-18 15:11 - 2014-12-18 05:38 - 00048792 _____ (StdLib) C:\WINDOWS\system32\Drivers\{db4225e9-90b8-4ca5-99da-da423e504d3d}Gw64.sys
2014-12-17 16:15 - 2014-12-17 02:30 - 00048792 _____ (StdLib) C:\WINDOWS\system32\Drivers\{ca6b750a-d001-404b-be03-93ff7fa91d1b}Gw64.sys
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#3

Ok.

 

AdwCleaner niczego nie znalazł poza kilkoma logami. O to chodziło?

 

AdwCleaner Report:
 
# AdwCleaner v4.106 - Report created 27/12/2014 at 16:18:01
# Updated 21/12/2014 by Xplode
# Database : 2014-12-21.4 [Live]
# Operating System : Windows 8.1  (64 bits)
# Username : Lenny PC - LENNY
# Running from : C:\Users\Lenny PC\Downloads\adwcleaner_4.106.exe
# Option : Scan
 
*****[Services]*****
 
 
*****[Files / Folders]*****
 
 
*****[Scheduled Tasks]*****
 
 
*****[Shortcuts]*****
 
 
*****[Registry]*****
 
Key Found : HKCU\Software\InstallCore
Key Found : [x64] HKCU\Software\InstallCore
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
 
*****[Browsers]*****
 
-\\ Internet Explorer v11.0.9600.17416
 
 
-\\ Google Chrome v39.0.2171.95
 
 
*************************
 
AdwCleaner[R0].txt - [1336 octets] - [27/12/2014 16:18:01]
 
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1396 octets] ##########

 

 

AHA

Przy ponownym rozruchu Chrome wykrył i zatrzymał First Light