[Discussion] For victims of RazerChat. How to know if you're still infected by it.

[0726/093612:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\Clients{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade or Value: SendsPings does not exist. [0726/093612:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\Clients{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade or Value: WebAccessible does not exist. [0726/093612:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\Clients{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade or Value: RunAsUser does not exist. [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Google\Update\Clients{FDA71E6F-AC4C-4a00-8B70-9958A68906BF} [0726/093613:VERBOSE1:install_util.cc(455)] Deleting registry key Software\Google\Update\Clients{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\Commands\quick-enable-cf [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Google\Update\ClientStateMedium{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\ClientState{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} or Value: oeminstall does not exist. [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\ClientState{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} or Value: eulaaccepted does not exist. [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\ClientStateMedium{8A69D345-D564-463c-AFF1-A69D9E530F96} or Value: usagestats does not exist. [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\ClientState{8A69D345-D564-463c-AFF1-A69D9E530F96} or Value: usagestats does not exist. [0726/093613:VERBOSE1:conditional_work_item_list.cc(17)] Evaluating InUseUpdateWorkItemList condition... [0726/093613:VERBOSE1:conditional_work_item_list.cc(22)] No work to do in condition work item list InUseUpdateWorkItemList [0726/093613:VERBOSE1:conditional_work_item_list.cc(17)] Evaluating RegularUpdateWorkItemList condition... [0726/093613:VERBOSE1:conditional_work_item_list.cc(19)] Beginning conditional work item list [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\Clients{8A69D345-D564-463c-AFF1-A69D9E530F96} or Value: opv does not exist. [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\Clients{8A69D345-D564-463c-AFF1-A69D9E530F96} or Value: cpv does not exist. [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\Clients{8A69D345-D564-463c-AFF1-A69D9E530F96} or Value: cmd does not exist. [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\Clients{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} or Value: opv does not exist. [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\Clients{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} or Value: cpv does not exist. [0726/093613:INFO:delete_reg_value_work_item.cc(51)] (delete value) Key: Software\Google\Update\Clients{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D} or Value: cmd does not exist. [0726/093613:VERBOSE1:work_item_list.cc(52)] list execution succeeded [0726/093613:VERBOSE1:work_item_list.cc(52)] list execution succeeded [0726/093613:VERBOSE1:install.cc(223)] First install of version 44.0.2403.107 [0726/093613:VERBOSE1:installer_state.cc(615)] ap: -stage:updating_channels-multi-chrome-full [0726/093613:VERBOSE1:install.cc(111)] Creating all-users Desktop "Google Chrome" shortcut to C:\Program Files (x86)\Google\Chrome\Application\chrome.exe. [0726/093613:VERBOSE1:install.cc(111)] Creating per-user Quick Launch "Google Chrome" shortcut to C:\Program Files (x86)\Google\Chrome\Application\chrome.exe. [0726/093613:VERBOSE1:install.cc(111)] Creating all-users Start menu/Google Chrome "Google Chrome" shortcut to C:\Program Files (x86)\Google\Chrome\Application\chrome.exe and pinning to the taskbar. [0726/093613:VERBOSE1:install.cc(131)] Adding Chrome to Media player list at Software\Microsoft\MediaPlayer\ShimInclusionList\chrome.exe [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Microsoft\MediaPlayer\ShimInclusionList\chrome.exe [0726/093613:VERBOSE1:install.cc(461)] Registering Chrome as browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Classes\ChromeHTML [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Classes\ChromeHTML\DefaultIcon [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Classes\ChromeHTML\shell [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Classes\ChromeHTML\shell\open [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Classes\ChromeHTML\shell\open\command [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe [0726/093613:VERBOSE1:work_item_list.cc(52)] list execution succeeded [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Clients\StartMenuInternet\Google Chrome [0726/093613:VERBOSE1:create_reg_key_work_item.cc(77)] created Software\Clients\StartMenuInternet\Google Chrome\shell

/r/GlobalOffensiveTrade Thread Parent