Spyware / Malware / Virus Removal

Help needed to determine if PC is infected

56 min read

Looking for the outcome? Ask AI

LDTate

Post #16December 27, 2010, 6:46 PM UTC

Copy/paste the text in the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Take your mouse, and place your cursor at the beginning of the text in the box below, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. Now over the empty Notepad box, right click your mouse again, and select 'paste' and you will have copied and pasted the text.

KillAll::

Register::
[-HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

RegLockDel:: 
[HKEY_USERS\S-1-5-21-1060284298-839522115-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{6175B6E8-3D5E-8729-2540-D055604E5C59}*]
[HKEY_USERS\S-1-5-21-1060284298-839522115-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9C6CF11F-216C-07F5-E86A-095ECC1154CA}*]

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:
1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …

[external image: Posted Image]

Drag CFScript.txt into ComboFix.exe

Then post the results log using Copy / Paste

Also please describe how your computer behaves at the moment.

ToddB

Post #17December 28, 2010, 12:58 AM UTC

LDTate-

Carried out your instructions above but still getting the Autocheck error at startup. I really appreciate your assistance with this and any further direction you could provide would be appreciated. I have attached my log below. THANK YOU!

ComboFix 10-12-26.01 - User 12/27/2010 15:58:19.6.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1150 [GMT -6:00]
Running from: c:\documents and settings\[removed]\Desktop\Virus Stuff\ComboFix.exe
Command switches used :: c:\documents and settings\User.MARCIA-6X7H850P\Desktop\CFScript.txt
AV: AVG Anti-Virus 2011 *Disabled/Outdated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: BitDefender Antivirus *Disabled/Updated* {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: BitDefender Firewall *Disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
.

((((((((((((((((((((((((( Files Created from 2010-11-27 to 2010-12-27 )))))))))))))))))))))))))))))))
.

2010-12-26 21:12 . 2010-12-26 21:12 ——– d—–w- c:\documents and settings\Administrator.MARCIA-6X7H850P\Application Data\BitDefender
2010-12-26 21:00 . 2010-12-26 21:00 ——– d—–w- c:\documents and settings\Guest\Application Data\TuneUp Software
2010-12-26 20:57 . 2010-12-26 20:57 ——– d—–w- c:\documents and settings\Guest\Application Data\BitDefender
2010-12-26 20:50 . 2010-12-26 20:50 ——– d—–w- c:\documents and settings\Guest\Local Settings\Application Data\VS Revo Group
2010-12-25 21:24 . 2010-12-25 21:24 ——– d—–w- c:\windows\system32\FxsTmp
2010-12-25 21:22 . 2010-12-25 21:22 ——– d—–w- c:\windows\addins
2010-12-25 21:22 . 2003-03-31 12:00 31744 -c–a-w- c:\windows\system32\dllcache\fxsroute.dll
2010-12-25 21:22 . 2003-03-31 12:00 31744 —-a-w- c:\windows\system32\fxsroute.dll
2010-12-25 21:22 . 2003-03-31 12:00 132608 -c–a-w- c:\windows\system32\dllcache\fxsclntr.dll
2010-12-25 21:22 . 2003-03-31 12:00 132608 —-a-w- c:\windows\system32\fxsclntR.dll
2010-12-25 21:22 . 2003-03-31 12:00 11264 -c–a-w- c:\windows\system32\dllcache\fxssend.exe
2010-12-25 21:22 . 2003-03-31 12:00 11264 —-a-w- c:\windows\system32\fxssend.exe
2010-12-25 21:22 . 2003-03-31 12:00 111104 -c–a-w- c:\windows\system32\dllcache\fxscfgwz.dll
2010-12-25 21:22 . 2003-03-31 12:00 111104 —-a-w- c:\windows\system32\fxscfgwz.dll
2010-12-23 16:06 . 2010-12-23 16:06 ——– d—–w- c:\windows\system32\wbem\Repository
2010-12-23 07:25 . 2010-12-23 07:25 97549 —-a-w- c:\windows\system32\drivers\klick.dat
2010-12-23 07:25 . 2010-12-23 07:25 113933 —-a-w- c:\windows\system32\drivers\klin.dat
2010-12-23 07:20 . 2010-12-23 21:57 ——– d—–w- c:\documents and settings\All Users.WINDOWS\Application Data\Kaspersky Lab
2010-12-23 07:16 . 2010-12-23 07:16 ——– d—–w- c:\documents and settings\All Users.WINDOWS\Application Data\Kaspersky Lab Setup Files
2010-12-23 04:33 . 2010-12-21 00:09 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-23 04:33 . 2010-12-23 07:48 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-12-23 04:33 . 2010-12-21 00:08 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-12-23 00:12 . 2010-12-23 00:19 ——– d—–w- c:\documents and settings\All Users.WINDOWS\Application Data\BitDefender
2010-12-23 00:12 . 2010-12-23 00:14 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\BitDefender
2010-12-23 00:12 . 2010-12-23 00:12 ——– d—–w- c:\program files\BitDefender
2010-12-23 00:00 . 2010-12-23 00:13 ——– d—–w- c:\program files\Common Files\BitDefender
2010-12-22 23:56 . 2010-12-22 23:59 37099 —-a-w- C:\BdUninstallTool2010.12.22-05.56.18.reg
2010-12-22 21:23 . 2010-12-22 21:23 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\QuickScan
2010-12-22 21:21 . 2010-12-22 22:42 520994 —-a-w- c:\documents and settings\All Users.WINDOWS\Application Data\bdinstall.bin
2010-12-22 03:40 . 2008-04-14 10:42 146432 -c–a-w- c:\windows\system32\dllcache\regedit.exe
2010-12-22 03:40 . 2008-04-14 10:42 146432 ——w- c:\windows\regedit.exe
2010-12-19 03:00 . 2010-12-19 03:00 ——– d—–w- c:\program files\Free ISO Creator
2010-12-14 22:53 . 2010-12-14 22:53 ——– d—–w- c:\program files\Windows Script Control
2010-12-14 22:53 . 2010-12-14 22:53 ——– d—–w- c:\program files\Common Files\e.World
2010-12-14 00:00 . 2010-12-14 00:00 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\MetaProducts
2010-12-14 00:00 . 2009-03-02 19:55 73728 —-a-w- c:\windows\system32\SUO.cpl
2010-12-13 23:59 . 2010-12-14 00:00 ——– d—–w- c:\program files\StartUp Organizer
2010-12-13 22:34 . 2010-12-13 22:35 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\GetRightToGo
2010-12-08 05:11 . 2010-12-25 21:25 ——– d—–w- c:\program files\Business Objects
2010-12-05 02:41 . 2010-11-23 23:16 31552 —-a-w- c:\windows\system32\TURegOpt.exe
2010-12-05 02:41 . 2010-11-23 23:11 29504 —-a-w- c:\windows\system32\uxtuneup.dll
2010-12-05 02:40 . 2010-12-05 02:41 ——– d—–w- c:\program files\TuneUp Utilities 2011
2010-12-05 01:09 . 2003-06-25 22:05 266360 —-a-w- c:\windows\system32\TweakUI.exe
2010-11-29 03:59 . 2010-12-18 23:53 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\Smart PC Solutions
2010-11-28 05:55 . 2010-11-28 05:55 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\iNViSiBLE
2010-11-28 05:49 . 2010-11-28 05:52 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\.moneydance
2010-11-28 05:48 . 2010-11-28 05:48 ——– d—–w- c:\program files\Moneydance
2010-11-28 05:48 . 2010-11-28 05:48 ——– d—–w- c:\program files\Common Files\i4j_jres
2010-11-27 22:36 . 2010-11-28 03:50 ——– d—–w- c:\program files\SUPERAntiSpyware

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-23 03:04 . 2009-11-10 23:03 106464 —-a-w- c:\windows\system32\drivers\bdhv.sys
2010-12-23 03:04 . 2009-11-10 23:04 153448 —-a-w- c:\windows\system32\drivers\bdfm.sys
2010-12-23 03:04 . 2009-07-24 17:26 291352 —-a-w- c:\windows\system32\drivers\bdfsfltr.sys
2010-12-23 02:59 . 2009-10-19 22:04 111312 —-a-w- c:\windows\system32\drivers\bdfndisf.sys
2010-12-08 05:19 . 2010-06-16 02:19 1748416 -c–a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\VisualStudio\9.0\1033\ResourceCache.dll
2010-11-18 18:12 . 2010-05-21 23:35 81920 —-a-w- c:\windows\system32\isign32.dll
2010-11-12 02:14 . 2010-06-06 22:07 18368 -c–a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\VSA\9.0\1033\ResourceCache.dll
2010-11-06 00:26 . 2003-03-31 12:00 916480 —-a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26 . 2003-03-31 12:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26 . 2003-03-31 12:00 1469440 ——w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2010-05-25 16:35 385024 —-a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2003-03-31 12:00 40960 —-a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:13 . 2003-03-31 12:00 290048 —-a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25 . 2003-03-31 12:00 1853312 —-a-w- c:\windows\system32\win32k.sys
2010-10-11 02:32 . 2010-10-11 02:32 73728 -c–a-w- c:\windows\system32\javacpl.cpl
2010-10-11 02:32 . 2010-10-11 02:32 423656 -c–a-w- c:\windows\system32\deployJava1.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2010-08-25 14:36 70264 —-a-w- c:\program files\Internet Download Manager\IDMShellExt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Controlled StartUp"="c:\program files\StartUp Organizer\Ctrl.exe" [2009-03-02 193576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152]

c:\documents and settings\user\Start Menu\Programs\Startup\
OpenOffice.org 2.3.lnk - c:\program files\OpenOffice.org 2.3\program\quickstart.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MaxRecentDocs"= 4 (0x4)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IfxWlxEN]
2006-03-10 20:20 434176 —-a-w- c:\windows\system32\IfxWlxEN.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0autocheck c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Internet Download Manager\\IDMan.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017

R0 shpf;Sony HDD Protection Filter Driver;c:\windows\system32\drivers\shpf.sys [3/11/2002 1:55 AM 9216]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [8/25/2010 8:40 AM 76768]
R1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\system32\drivers\psd.sys [11/29/2005 5:50 PM 36768]
R1 RsFx0103;RsFx0103 Driver;c:\windows\system32\drivers\RsFx0103.sys [3/30/2009 2:09 AM 239336]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/17/2010 12:25 PM 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 12:41 PM 67656]
R1 UsbFltr;WayTechUSBFilterDriver;c:\windows\system32\drivers\UsbFltr.sys [6/6/2010 7:57 PM 6144]
R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [9/22/2009 8:22 AM 85128]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [12/22/2010 10:33 PM 363344]
R2 MsDtsServer100;SQL Server Integration Services 10.0;c:\program files\Microsoft SQL Server\100\DTS\Binn\MsDtsSrvr.exe [7/10/2008 12:22 AM 218136]
R2 MSSQLFDLauncher;SQL Full-text Filter Daemon Launcher (MSSQLSERVER);c:\program files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [7/10/2008 12:15 AM 31256]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [11/23/2010 5:13 PM 1483072]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [11/10/2009 5:04 PM 153448]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [10/19/2009 4:04 PM 111312]
R3 DKRtWrt;DKRtWrt;c:\windows\system32\drivers\DKRtWrt.sys [10/21/2010 1:08 PM 44368]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [8/29/2006 7:31 PM 36352]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [12/22/2010 10:33 PM 20952]
R3 PTDWBus;Curitel PC Card Composite Device driver (UDP);c:\windows\system32\drivers\PTDWBus.sys [7/19/2007 10:38 AM 27392]
R3 PTDWMdm;Curitel PC Card Drivers (UDP);c:\windows\system32\drivers\PTDWMdm.sys [7/19/2007 10:38 AM 41728]
R3 PTDWVsp;Curitel PC Card Diagnostic Serial Port (UDP);c:\windows\system32\drivers\PTDWVsp.sys [7/19/2007 10:38 AM 39808]
R3 PWCTLDRV;The NECHostController Filter Driver;c:\windows\system32\drivers\PWCTLDRV.sys [7/19/2007 10:38 AM 5888]
R3 SPI;Sony Programmable I/O Control Device;c:\windows\system32\drivers\SonyPI.sys [5/21/2010 12:29 PM 71961]
R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [5/26/2010 11:26 AM 808448]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [10/7/2010 12:34 PM 10064]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 1:16 PM 130384]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [10/19/2009 4:06 PM 183880]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [7/18/2010 9:58 PM 23456]
S3 icsak;icsak;\??\c:\program files\CheckPoint\ZAForceField\AK\icsak.sys –> c:\program files\CheckPoint\ZAForceField\AK\icsak.sys [?]
S3 pwi_bus;Curitel PC Card Composite Device driver (WDM);c:\windows\system32\DRIVERS\pwi_bus.sys –> c:\windows\system32\DRIVERS\pwi_bus.sys [?]
S3 pwi_mdfl;Curitel PC Card Filter;c:\windows\system32\DRIVERS\pwi_mdfl.sys –> c:\windows\system32\DRIVERS\pwi_mdfl.sys [?]
S3 pwi_mdm;Curitel PC Card Drivers;c:\windows\system32\DRIVERS\pwi_mdm.sys –> c:\windows\system32\DRIVERS\pwi_mdm.sys [?]
S3 pwi_oflt;Curitel PC Card OHCI Filter;c:\windows\system32\DRIVERS\pwi_oflt.sys –> c:\windows\system32\DRIVERS\pwi_oflt.sys [?]
S3 pwi_serd;Curitel PC Card Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\pwi_serd.sys –> c:\windows\system32\DRIVERS\pwi_serd.sys [?]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [8/19/2010 9:08 PM 27064]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [5/25/2010 7:33 PM 11520]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [3/31/2003 6:00 AM 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 1:16 PM 753504]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\sqladhlp.exe [7/10/2008 1:49 AM 47128]
S4 ReportServer;SQL Server Reporting Services (MSSQLSERVER);c:\program files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [3/30/2009 1:16 AM 1113448]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
bdx REG_MULTI_SZ scan

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder

2010-12-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]

2010-12-05 c:\windows\Tasks\Security Platform Backup Schedule.job
- c:\program files\Infineon\Security Platform Software\SpBackupWz.exe [2006-03-10 20:33]

2010-12-27 c:\windows\Tasks\User_Feed_Synchronization-{06B1BC02-2B9F-4237-AF0C-834FD0BDA026}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 09:31]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
mStart Page = about:blank
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: {2643ABF9-63C0-479C-B0A1-DBCEAEB940B7} = 69.78.96.14 66.174.92.14
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-27 16:06
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MySQL]
"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.1\bin\mysqld\" –defaults-file=\"c:\program files\MySQL\MySQL Server 5.1\my.ini\" MySQL"
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-1060284298-839522115-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{6175B6E8-3D5E-8729-2540-D055604E5C59}*]
"kaggmdejllmffnhbnbhiod"=hex:61,61,00,00
"faggmdejamki"=hex:66,61,6a,68,68,67,6e,63,68,6a,65,6d,00,00

[HKEY_USERS\S-1-5-21-1060284298-839522115-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9C6CF11F-216C-07F5-E86A-095ECC1154CA}*]
"oakejaihmocgedmecojhjmchapjlnm"=hex:6a,61,6f,68,62,68,67,6d,64,6f,6a,64,6f,6f,
65,68,6b,67,69,6b,00,54
"naielbhcbbjkfininppakggoecap"=hex:6a,61,6f,68,62,68,67,6d,64,6f,6a,64,6f,6f,
65,68,6b,67,69,6b,00,54

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):e0,a1,23,af,68,fc,2d,6a,cb,34,5f,bf,47,3b,62,7f,b7,d2,33,0e,96,
27,2e,b5,dc,b8,92,b1,c9,d5,77,69,f1,05,b4,49,db,0c,65,0e,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):8f,d2,4d,a1,8f,eb,94,ad,30,43,d0,63,83,f2,01,57,f0,c1,28,fd,a3,
b1,76,9e,ce,65,77,04,5b,b1,78,29,37,3d,3d,76,92,d0,05,90,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(1772)
c:\windows\system32\IfxWlxEN.dll

- - - - - - - > 'explorer.exe'(3440)
c:\windows\system32\WININET.dll
c:\program files\Internet Download Manager\IDMShellExt.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\Diskeeper Corporation\Diskeeper\DkService.exe
c:\windows\system32\IFXTCS.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\Sony\SmartWi Connection Utility\SmartWiService.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\verizon wireless\venturi\Client\ventc.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\windows\system32\wscntfy.exe
c:\program files\Intel\Wireless\bin\ZCfgSvc.exe
c:\program files\Intel\Wireless\Bin\ifrmewrk.exe
c:\program files\Apoint\Apoint.exe
c:\progra~1\Intel\Wireless\Bin\Dot1XCfg.exe
c:\program files\IObit\Advanced SystemCare 3\AWC.exe
c:\program files\Apoint\Apntex.exe
.
**************************************************************************
.
Completion time: 2010-12-27 16:13:37 - machine was rebooted
ComboFix-quarantined-files.txt 2010-12-27 22:13
ComboFix2.txt 2010-12-27 17:49
ComboFix3.txt 2010-12-27 17:03
ComboFix4.txt 2010-12-26 16:38
ComboFix5.txt 2010-12-27 21:57

Pre-Run: 71,210,975,232 bytes free
Post-Run: 71,223,377,920 bytes free

- - End Of File - - F9E9D2DB98FEEF668E84F6A212C66470

LDTate

Post #18December 28, 2010, 1:18 AM UTC

KillAll::

File::
c:\progra~1\AVG\AVG10\avgchsvx.exe
c:\progra~1\AVG\AVG10\avgrsx.exe


Folder::
c:\progra~1\AVG\AVG10

Registry::

ToddB

Post #19December 28, 2010, 4:15 AM UTC

LDTate-

Thought this one worked since it looks like Combo Fix picked up c:\progra~1\AVG\AVG10\avgchsvx.exe" and "c:\progra~1\AVG\AVG10\avgrsx.exe" Correct? However when I boot I still get the same skipping autocheck error that I have been receiving. If AVG and these file have been removed should that be the case?

I have pasted the results below.

THANK YOU!

ComboFix 10-12-26.01 - User 12/27/2010 21:17:01.7.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1344 [GMT -6:00]
Running from: c:\documents and settings\[removed]\Desktop\Virus Stuff\ComboFix.exe
Command switches used :: c:\documents and settings\User.MARCIA-6X7H850P\Desktop\CFScript.txt
AV: AVG Anti-Virus 2011 *Disabled/Outdated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: BitDefender Antivirus *Disabled/Updated* {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: BitDefender Firewall *Disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}

FILE ::
"c:\progra~1\AVG\AVG10\avgchsvx.exe"
"c:\progra~1\AVG\AVG10\avgrsx.exe"
.

((((((((((((((((((((((((( Files Created from 2010-11-28 to 2010-12-28 )))))))))))))))))))))))))))))))
.

2010-12-26 21:12 . 2010-12-26 21:12 ——– d—–w- c:\documents and settings\Administrator.MARCIA-6X7H850P\Application Data\BitDefender
2010-12-26 21:00 . 2010-12-26 21:00 ——– d—–w- c:\documents and settings\Guest\Application Data\TuneUp Software
2010-12-26 20:57 . 2010-12-26 20:57 ——– d—–w- c:\documents and settings\Guest\Application Data\BitDefender
2010-12-26 20:50 . 2010-12-26 20:50 ——– d—–w- c:\documents and settings\Guest\Local Settings\Application Data\VS Revo Group
2010-12-25 21:24 . 2010-12-25 21:24 ——– d—–w- c:\windows\system32\FxsTmp
2010-12-25 21:22 . 2010-12-25 21:22 ——– d—–w- c:\windows\addins
2010-12-25 21:22 . 2003-03-31 12:00 31744 -c–a-w- c:\windows\system32\dllcache\fxsroute.dll
2010-12-25 21:22 . 2003-03-31 12:00 31744 —-a-w- c:\windows\system32\fxsroute.dll
2010-12-25 21:22 . 2003-03-31 12:00 132608 -c–a-w- c:\windows\system32\dllcache\fxsclntr.dll
2010-12-25 21:22 . 2003-03-31 12:00 132608 —-a-w- c:\windows\system32\fxsclntR.dll
2010-12-25 21:22 . 2003-03-31 12:00 11264 -c–a-w- c:\windows\system32\dllcache\fxssend.exe
2010-12-25 21:22 . 2003-03-31 12:00 11264 —-a-w- c:\windows\system32\fxssend.exe
2010-12-25 21:22 . 2003-03-31 12:00 111104 -c–a-w- c:\windows\system32\dllcache\fxscfgwz.dll
2010-12-25 21:22 . 2003-03-31 12:00 111104 —-a-w- c:\windows\system32\fxscfgwz.dll
2010-12-23 16:06 . 2010-12-23 16:06 ——– d—–w- c:\windows\system32\wbem\Repository
2010-12-23 07:25 . 2010-12-23 07:25 97549 —-a-w- c:\windows\system32\drivers\klick.dat
2010-12-23 07:25 . 2010-12-23 07:25 113933 —-a-w- c:\windows\system32\drivers\klin.dat
2010-12-23 07:20 . 2010-12-23 21:57 ——– d—–w- c:\documents and settings\All Users.WINDOWS\Application Data\Kaspersky Lab
2010-12-23 07:16 . 2010-12-23 07:16 ——– d—–w- c:\documents and settings\All Users.WINDOWS\Application Data\Kaspersky Lab Setup Files
2010-12-23 04:33 . 2010-12-21 00:09 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-23 04:33 . 2010-12-23 07:48 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-12-23 04:33 . 2010-12-21 00:08 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-12-23 00:12 . 2010-12-23 00:19 ——– d—–w- c:\documents and settings\All Users.WINDOWS\Application Data\BitDefender
2010-12-23 00:12 . 2010-12-23 00:14 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\BitDefender
2010-12-23 00:12 . 2010-12-23 00:12 ——– d—–w- c:\program files\BitDefender
2010-12-23 00:00 . 2010-12-23 00:13 ——– d—–w- c:\program files\Common Files\BitDefender
2010-12-22 23:56 . 2010-12-22 23:59 37099 —-a-w- C:\BdUninstallTool2010.12.22-05.56.18.reg
2010-12-22 21:23 . 2010-12-22 21:23 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\QuickScan
2010-12-22 21:21 . 2010-12-22 22:42 520994 —-a-w- c:\documents and settings\All Users.WINDOWS\Application Data\bdinstall.bin
2010-12-22 03:40 . 2008-04-14 10:42 146432 -c–a-w- c:\windows\system32\dllcache\regedit.exe
2010-12-22 03:40 . 2008-04-14 10:42 146432 ——w- c:\windows\regedit.exe
2010-12-19 03:00 . 2010-12-19 03:00 ——– d—–w- c:\program files\Free ISO Creator
2010-12-14 22:53 . 2010-12-14 22:53 ——– d—–w- c:\program files\Windows Script Control
2010-12-14 22:53 . 2010-12-14 22:53 ——– d—–w- c:\program files\Common Files\e.World
2010-12-14 00:00 . 2010-12-14 00:00 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\MetaProducts
2010-12-14 00:00 . 2009-03-02 19:55 73728 —-a-w- c:\windows\system32\SUO.cpl
2010-12-13 23:59 . 2010-12-14 00:00 ——– d—–w- c:\program files\StartUp Organizer
2010-12-13 22:34 . 2010-12-13 22:35 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\GetRightToGo
2010-12-08 05:11 . 2010-12-25 21:25 ——– d—–w- c:\program files\Business Objects
2010-12-05 02:41 . 2010-11-23 23:16 31552 —-a-w- c:\windows\system32\TURegOpt.exe
2010-12-05 02:41 . 2010-11-23 23:11 29504 —-a-w- c:\windows\system32\uxtuneup.dll
2010-12-05 02:40 . 2010-12-05 02:41 ——– d—–w- c:\program files\TuneUp Utilities 2011
2010-12-05 01:09 . 2003-06-25 22:05 266360 —-a-w- c:\windows\system32\TweakUI.exe
2010-11-29 03:59 . 2010-12-18 23:53 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\Smart PC Solutions
2010-11-28 05:55 . 2010-11-28 05:55 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\iNViSiBLE
2010-11-28 05:49 . 2010-11-28 05:52 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\.moneydance
2010-11-28 05:48 . 2010-11-28 05:48 ——– d—–w- c:\program files\Moneydance
2010-11-28 05:48 . 2010-11-28 05:48 ——– d—–w- c:\program files\Common Files\i4j_jres

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-23 03:04 . 2009-11-10 23:03 106464 —-a-w- c:\windows\system32\drivers\bdhv.sys
2010-12-23 03:04 . 2009-11-10 23:04 153448 —-a-w- c:\windows\system32\drivers\bdfm.sys
2010-12-23 03:04 . 2009-07-24 17:26 291352 —-a-w- c:\windows\system32\drivers\bdfsfltr.sys
2010-12-23 02:59 . 2009-10-19 22:04 111312 —-a-w- c:\windows\system32\drivers\bdfndisf.sys
2010-12-08 05:19 . 2010-06-16 02:19 1748416 -c–a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\VisualStudio\9.0\1033\ResourceCache.dll
2010-11-18 18:12 . 2010-05-21 23:35 81920 —-a-w- c:\windows\system32\isign32.dll
2010-11-12 02:14 . 2010-06-06 22:07 18368 -c–a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\VSA\9.0\1033\ResourceCache.dll
2010-11-06 00:26 . 2003-03-31 12:00 916480 —-a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26 . 2003-03-31 12:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26 . 2003-03-31 12:00 1469440 ——w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2010-05-25 16:35 385024 —-a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2003-03-31 12:00 40960 —-a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:13 . 2003-03-31 12:00 290048 —-a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25 . 2003-03-31 12:00 1853312 —-a-w- c:\windows\system32\win32k.sys
2010-10-11 02:32 . 2010-10-11 02:32 73728 -c–a-w- c:\windows\system32\javacpl.cpl
2010-10-11 02:32 . 2010-10-11 02:32 423656 -c–a-w- c:\windows\system32\deployJava1.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2010-08-25 14:36 70264 —-a-w- c:\program files\Internet Download Manager\IDMShellExt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Controlled StartUp"="c:\program files\StartUp Organizer\Ctrl.exe" [2009-03-02 193576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152]

c:\documents and settings\user\Start Menu\Programs\Startup\
OpenOffice.org 2.3.lnk - c:\program files\OpenOffice.org 2.3\program\quickstart.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MaxRecentDocs"= 4 (0x4)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IfxWlxEN]
2006-03-10 20:20 434176 —-a-w- c:\windows\system32\IfxWlxEN.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0autocheck c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Internet Download Manager\\IDMan.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017

R0 shpf;Sony HDD Protection Filter Driver;c:\windows\system32\drivers\shpf.sys [3/11/2002 1:55 AM 9216]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [8/25/2010 8:40 AM 76768]
R1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\system32\drivers\psd.sys [11/29/2005 5:50 PM 36768]
R1 RsFx0103;RsFx0103 Driver;c:\windows\system32\drivers\RsFx0103.sys [3/30/2009 2:09 AM 239336]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/17/2010 12:25 PM 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 12:41 PM 67656]
R1 UsbFltr;WayTechUSBFilterDriver;c:\windows\system32\drivers\UsbFltr.sys [6/6/2010 7:57 PM 6144]
R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [9/22/2009 8:22 AM 85128]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [12/22/2010 10:33 PM 363344]
R2 MsDtsServer100;SQL Server Integration Services 10.0;c:\program files\Microsoft SQL Server\100\DTS\Binn\MsDtsSrvr.exe [7/10/2008 12:22 AM 218136]
R2 MSSQLFDLauncher;SQL Full-text Filter Daemon Launcher (MSSQLSERVER);c:\program files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [7/10/2008 12:15 AM 31256]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [11/23/2010 5:13 PM 1483072]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [11/10/2009 5:04 PM 153448]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [10/19/2009 4:04 PM 111312]
R3 DKRtWrt;DKRtWrt;c:\windows\system32\drivers\DKRtWrt.sys [10/21/2010 1:08 PM 44368]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [8/29/2006 7:31 PM 36352]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [12/22/2010 10:33 PM 20952]
R3 PTDWBus;Curitel PC Card Composite Device driver (UDP);c:\windows\system32\drivers\PTDWBus.sys [7/19/2007 10:38 AM 27392]
R3 PTDWMdm;Curitel PC Card Drivers (UDP);c:\windows\system32\drivers\PTDWMdm.sys [7/19/2007 10:38 AM 41728]
R3 PTDWVsp;Curitel PC Card Diagnostic Serial Port (UDP);c:\windows\system32\drivers\PTDWVsp.sys [7/19/2007 10:38 AM 39808]
R3 PWCTLDRV;The NECHostController Filter Driver;c:\windows\system32\drivers\PWCTLDRV.sys [7/19/2007 10:38 AM 5888]
R3 SPI;Sony Programmable I/O Control Device;c:\windows\system32\drivers\SonyPI.sys [5/21/2010 12:29 PM 71961]
R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [5/26/2010 11:26 AM 808448]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [10/7/2010 12:34 PM 10064]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 1:16 PM 130384]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [10/19/2009 4:06 PM 183880]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [7/18/2010 9:58 PM 23456]
S3 icsak;icsak;\??\c:\program files\CheckPoint\ZAForceField\AK\icsak.sys –> c:\program files\CheckPoint\ZAForceField\AK\icsak.sys [?]
S3 pwi_bus;Curitel PC Card Composite Device driver (WDM);c:\windows\system32\DRIVERS\pwi_bus.sys –> c:\windows\system32\DRIVERS\pwi_bus.sys [?]
S3 pwi_mdfl;Curitel PC Card Filter;c:\windows\system32\DRIVERS\pwi_mdfl.sys –> c:\windows\system32\DRIVERS\pwi_mdfl.sys [?]
S3 pwi_mdm;Curitel PC Card Drivers;c:\windows\system32\DRIVERS\pwi_mdm.sys –> c:\windows\system32\DRIVERS\pwi_mdm.sys [?]
S3 pwi_oflt;Curitel PC Card OHCI Filter;c:\windows\system32\DRIVERS\pwi_oflt.sys –> c:\windows\system32\DRIVERS\pwi_oflt.sys [?]
S3 pwi_serd;Curitel PC Card Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\pwi_serd.sys –> c:\windows\system32\DRIVERS\pwi_serd.sys [?]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [8/19/2010 9:08 PM 27064]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [5/25/2010 7:33 PM 11520]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [3/31/2003 6:00 AM 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 1:16 PM 753504]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\sqladhlp.exe [7/10/2008 1:49 AM 47128]
S4 ReportServer;SQL Server Reporting Services (MSSQLSERVER);c:\program files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [3/30/2009 1:16 AM 1113448]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
bdx REG_MULTI_SZ scan

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder

2010-12-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]

2010-12-05 c:\windows\Tasks\Security Platform Backup Schedule.job
- c:\program files\Infineon\Security Platform Software\SpBackupWz.exe [2006-03-10 20:33]

2010-12-27 c:\windows\Tasks\User_Feed_Synchronization-{06B1BC02-2B9F-4237-AF0C-834FD0BDA026}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 09:31]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
mStart Page = about:blank
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: {2643ABF9-63C0-479C-B0A1-DBCEAEB940B7} = 69.78.96.14 66.174.92.14
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-27 21:26
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MySQL]
"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.1\bin\mysqld\" –defaults-file=\"c:\program files\MySQL\MySQL Server 5.1\my.ini\" MySQL"
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-1060284298-839522115-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{6175B6E8-3D5E-8729-2540-D055604E5C59}*]
"kaggmdejllmffnhbnbhiod"=hex:61,61,00,00
"faggmdejamki"=hex:66,61,6a,68,68,67,6e,63,68,6a,65,6d,00,00

[HKEY_USERS\S-1-5-21-1060284298-839522115-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9C6CF11F-216C-07F5-E86A-095ECC1154CA}*]
"oakejaihmocgedmecojhjmchapjlnm"=hex:6a,61,6f,68,62,68,67,6d,64,6f,6a,64,6f,6f,
65,68,6b,67,69,6b,00,54
"naielbhcbbjkfininppakggoecap"=hex:6a,61,6f,68,62,68,67,6d,64,6f,6a,64,6f,6f,
65,68,6b,67,69,6b,00,54

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):e0,a1,23,af,68,fc,2d,6a,cb,34,5f,bf,47,3b,62,7f,b7,d2,33,0e,96,
27,2e,b5,dc,b8,92,b1,c9,d5,77,69,f1,05,b4,49,db,0c,65,0e,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):8f,d2,4d,a1,8f,eb,94,ad,30,43,d0,63,83,f2,01,57,f0,c1,28,fd,a3,
b1,76,9e,ce,65,77,04,5b,b1,78,29,37,3d,3d,76,92,d0,05,90,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(1800)
c:\windows\system32\IfxWlxEN.dll

- - - - - - - > 'explorer.exe'(600)
c:\windows\system32\WININET.dll
c:\program files\Internet Download Manager\IDMShellExt.dll
c:\windows\system32\msi.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\Diskeeper Corporation\Diskeeper\DkService.exe
c:\windows\system32\IFXTCS.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\Sony\SmartWi Connection Utility\SmartWiService.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\verizon wireless\venturi\Client\ventc.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\windows\system32\wscntfy.exe
c:\program files\Intel\Wireless\bin\ZCfgSvc.exe
c:\program files\Intel\Wireless\Bin\ifrmewrk.exe
c:\program files\Apoint\Apoint.exe
c:\progra~1\Intel\Wireless\Bin\Dot1XCfg.exe
c:\program files\IObit\Advanced SystemCare 3\AWC.exe
c:\program files\Apoint\Apntex.exe
.
**************************************************************************
.
Completion time: 2010-12-27 21:33:32 - machine was rebooted
ComboFix-quarantined-files.txt 2010-12-28 03:33
ComboFix2.txt 2010-12-27 22:13
ComboFix3.txt 2010-12-27 17:49
ComboFix4.txt 2010-12-27 17:03
ComboFix5.txt 2010-12-28 03:14

Pre-Run: 71,200,927,744 bytes free
Post-Run: 71,215,087,616 bytes free

- - End Of File - - B235F673AF6F8A266361E38DD830E19D

LDTate

Post #20December 28, 2010, 12:48 PM UTC

Click Start > Run > type in Msconfig tap enter.

Look for anything that has AVG and uncheck it.

After you uncheck it and rebooting, you'll be using Selective startup.
When you see the box popup that tells you that, just put a Check in the Box to not show that when you startup. That's how I run mine.

ToddB

Post #21December 29, 2010, 3:20 AM UTC

LDtate-

I could not find anything with “AVG” in msconfig and after some thought I did some registry searches and came up with some registries when I did a search on “AVG10”. I went ahead and deleted them and it appears to have taken care of the avg skipping autocheck problem that I had. Now I am getting a “cannot find autochk.exe” skipping autocheck and I am going to do some research on a fix for that. I did do a combofix run and it still looks like AVG AV 2011 is still there. I don’t get it! I was hoping I could get you to take a look at my last ComboFix report just to make sure everything else looks okay. . I would REALLY appreciate it! In your opinion is having a disabled and outdated version of AVG AV 2011 a problem when it comes to using my other AV? THANK YOU for your GREAT assistance!

ComboFix 10-12-28.01 - User 12/28/2010 20:28:27.8.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1481 [GMT -6:00]
Running from: c:\documents and settings\[removed]\Desktop\Virus Stuff\ComboFix.exe
AV: AVG Anti-Virus 2011 *Disabled/Outdated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: BitDefender Antivirus *Disabled/Updated* {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: BitDefender Firewall *Enabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
.

((((((((((((((((((((((((( Files Created from 2010-11-28 to 2010-12-29 )))))))))))))))))))))))))))))))
.

2010-12-26 21:12 . 2010-12-26 21:12 ——– d—–w- c:\documents and settings\Administrator.MARCIA-6X7H850P\Application Data\BitDefender
2010-12-26 21:00 . 2010-12-26 21:00 ——– d—–w- c:\documents and settings\Guest\Application Data\TuneUp Software
2010-12-26 20:57 . 2010-12-26 20:57 ——– d—–w- c:\documents and settings\Guest\Application Data\BitDefender
2010-12-26 20:50 . 2010-12-26 20:50 ——– d—–w- c:\documents and settings\Guest\Local Settings\Application Data\VS Revo Group
2010-12-25 21:24 . 2010-12-25 21:24 ——– d—–w- c:\windows\system32\FxsTmp
2010-12-25 21:22 . 2010-12-25 21:22 ——– d—–w- c:\windows\addins
2010-12-25 21:22 . 2003-03-31 12:00 31744 -c–a-w- c:\windows\system32\dllcache\fxsroute.dll
2010-12-25 21:22 . 2003-03-31 12:00 31744 —-a-w- c:\windows\system32\fxsroute.dll
2010-12-25 21:22 . 2003-03-31 12:00 132608 -c–a-w- c:\windows\system32\dllcache\fxsclntr.dll
2010-12-25 21:22 . 2003-03-31 12:00 132608 —-a-w- c:\windows\system32\fxsclntR.dll
2010-12-25 21:22 . 2003-03-31 12:00 11264 -c–a-w- c:\windows\system32\dllcache\fxssend.exe
2010-12-25 21:22 . 2003-03-31 12:00 11264 —-a-w- c:\windows\system32\fxssend.exe
2010-12-25 21:22 . 2003-03-31 12:00 111104 -c–a-w- c:\windows\system32\dllcache\fxscfgwz.dll
2010-12-25 21:22 . 2003-03-31 12:00 111104 —-a-w- c:\windows\system32\fxscfgwz.dll
2010-12-23 16:06 . 2010-12-23 16:06 ——– d—–w- c:\windows\system32\wbem\Repository
2010-12-23 07:25 . 2010-12-23 07:25 97549 —-a-w- c:\windows\system32\drivers\klick.dat
2010-12-23 07:25 . 2010-12-23 07:25 113933 —-a-w- c:\windows\system32\drivers\klin.dat
2010-12-23 07:20 . 2010-12-23 21:57 ——– d—–w- c:\documents and settings\All Users.WINDOWS\Application Data\Kaspersky Lab
2010-12-23 07:16 . 2010-12-23 07:16 ——– d—–w- c:\documents and settings\All Users.WINDOWS\Application Data\Kaspersky Lab Setup Files
2010-12-23 04:33 . 2010-12-21 00:09 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-23 04:33 . 2010-12-23 07:48 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-12-23 04:33 . 2010-12-21 00:08 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-12-23 00:12 . 2010-12-23 00:19 ——– d—–w- c:\documents and settings\All Users.WINDOWS\Application Data\BitDefender
2010-12-23 00:12 . 2010-12-23 00:14 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\BitDefender
2010-12-23 00:12 . 2010-12-23 00:12 ——– d—–w- c:\program files\BitDefender
2010-12-23 00:00 . 2010-12-23 00:13 ——– d—–w- c:\program files\Common Files\BitDefender
2010-12-22 23:56 . 2010-12-22 23:59 37099 —-a-w- C:\BdUninstallTool2010.12.22-05.56.18.reg
2010-12-22 21:23 . 2010-12-22 21:23 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\QuickScan
2010-12-22 21:21 . 2010-12-22 22:42 520994 —-a-w- c:\documents and settings\All Users.WINDOWS\Application Data\bdinstall.bin
2010-12-22 03:40 . 2008-04-14 10:42 146432 -c–a-w- c:\windows\system32\dllcache\regedit.exe
2010-12-22 03:40 . 2008-04-14 10:42 146432 ——w- c:\windows\regedit.exe
2010-12-19 03:00 . 2010-12-19 03:00 ——– d—–w- c:\program files\Free ISO Creator
2010-12-14 22:53 . 2010-12-14 22:53 ——– d—–w- c:\program files\Windows Script Control
2010-12-14 22:53 . 2010-12-14 22:53 ——– d—–w- c:\program files\Common Files\e.World
2010-12-14 00:00 . 2010-12-14 00:00 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\MetaProducts
2010-12-14 00:00 . 2009-03-02 19:55 73728 —-a-w- c:\windows\system32\SUO.cpl
2010-12-13 23:59 . 2010-12-14 00:00 ——– d—–w- c:\program files\StartUp Organizer
2010-12-13 22:34 . 2010-12-13 22:35 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\GetRightToGo
2010-12-08 05:11 . 2010-12-25 21:25 ——– d—–w- c:\program files\Business Objects
2010-12-05 02:41 . 2010-11-23 23:16 31552 —-a-w- c:\windows\system32\TURegOpt.exe
2010-12-05 02:41 . 2010-11-23 23:11 29504 —-a-w- c:\windows\system32\uxtuneup.dll
2010-12-05 02:40 . 2010-12-05 02:41 ——– d—–w- c:\program files\TuneUp Utilities 2011
2010-12-05 01:09 . 2003-06-25 22:05 266360 —-a-w- c:\windows\system32\TweakUI.exe
2010-11-29 03:59 . 2010-12-18 23:53 ——– d—–w- c:\documents and settings\User.MARCIA-6X7H850P\Application Data\Smart PC Solutions

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-23 03:04 . 2009-11-10 23:03 106464 —-a-w- c:\windows\system32\drivers\bdhv.sys
2010-12-23 03:04 . 2009-11-10 23:04 153448 —-a-w- c:\windows\system32\drivers\bdfm.sys
2010-12-23 03:04 . 2009-07-24 17:26 291352 —-a-w- c:\windows\system32\drivers\bdfsfltr.sys
2010-12-23 02:59 . 2009-10-19 22:04 111312 —-a-w- c:\windows\system32\drivers\bdfndisf.sys
2010-12-08 05:19 . 2010-06-16 02:19 1748416 -c–a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\VisualStudio\9.0\1033\ResourceCache.dll
2010-11-18 18:12 . 2010-05-21 23:35 81920 —-a-w- c:\windows\system32\isign32.dll
2010-11-12 02:14 . 2010-06-06 22:07 18368 -c–a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\VSA\9.0\1033\ResourceCache.dll
2010-11-06 00:26 . 2003-03-31 12:00 916480 —-a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26 . 2003-03-31 12:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26 . 2003-03-31 12:00 1469440 ——w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2010-05-25 16:35 385024 —-a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2003-03-31 12:00 40960 —-a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:13 . 2003-03-31 12:00 290048 —-a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25 . 2003-03-31 12:00 1853312 —-a-w- c:\windows\system32\win32k.sys
2010-10-11 02:32 . 2010-10-11 02:32 73728 -c–a-w- c:\windows\system32\javacpl.cpl
2010-10-11 02:32 . 2010-10-11 02:32 423656 -c–a-w- c:\windows\system32\deployJava1.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2010-08-25 14:36 70264 —-a-w- c:\program files\Internet Download Manager\IDMShellExt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Controlled StartUp"="c:\program files\StartUp Organizer\Ctrl.exe" [2009-03-02 193576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152]

c:\documents and settings\user\Start Menu\Programs\Startup\
OpenOffice.org 2.3.lnk - c:\program files\OpenOffice.org 2.3\program\quickstart.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MaxRecentDocs"= 4 (0x4)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IfxWlxEN]
2006-03-10 20:20 434176 —-a-w- c:\windows\system32\IfxWlxEN.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Internet Download Manager\\IDMan.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017

R0 shpf;Sony HDD Protection Filter Driver;c:\windows\system32\drivers\shpf.sys [3/11/2002 1:55 AM 9216]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [8/25/2010 8:40 AM 76768]
R1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\system32\drivers\psd.sys [11/29/2005 5:50 PM 36768]
R1 RsFx0103;RsFx0103 Driver;c:\windows\system32\drivers\RsFx0103.sys [3/30/2009 2:09 AM 239336]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/17/2010 12:25 PM 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 12:41 PM 67656]
R1 UsbFltr;WayTechUSBFilterDriver;c:\windows\system32\drivers\UsbFltr.sys [6/6/2010 7:57 PM 6144]
R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [9/22/2009 8:22 AM 85128]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [12/22/2010 10:33 PM 363344]
R2 MsDtsServer100;SQL Server Integration Services 10.0;c:\program files\Microsoft SQL Server\100\DTS\Binn\MsDtsSrvr.exe [7/10/2008 12:22 AM 218136]
R2 MSSQLFDLauncher;SQL Full-text Filter Daemon Launcher (MSSQLSERVER);c:\program files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [7/10/2008 12:15 AM 31256]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [11/23/2010 5:13 PM 1483072]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [11/10/2009 5:04 PM 153448]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [10/19/2009 4:04 PM 111312]
R3 DKRtWrt;DKRtWrt;c:\windows\system32\drivers\DKRtWrt.sys [10/21/2010 1:08 PM 44368]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [8/29/2006 7:31 PM 36352]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [12/22/2010 10:33 PM 20952]
R3 PTDWBus;Curitel PC Card Composite Device driver (UDP);c:\windows\system32\drivers\PTDWBus.sys [7/19/2007 10:38 AM 27392]
R3 PTDWMdm;Curitel PC Card Drivers (UDP);c:\windows\system32\drivers\PTDWMdm.sys [7/19/2007 10:38 AM 41728]
R3 PTDWVsp;Curitel PC Card Diagnostic Serial Port (UDP);c:\windows\system32\drivers\PTDWVsp.sys [7/19/2007 10:38 AM 39808]
R3 PWCTLDRV;The NECHostController Filter Driver;c:\windows\system32\drivers\PWCTLDRV.sys [7/19/2007 10:38 AM 5888]
R3 SPI;Sony Programmable I/O Control Device;c:\windows\system32\drivers\SonyPI.sys [5/21/2010 12:29 PM 71961]
R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [5/26/2010 11:26 AM 808448]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [10/7/2010 12:34 PM 10064]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 1:16 PM 130384]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [10/19/2009 4:06 PM 183880]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [7/18/2010 9:58 PM 23456]
S3 icsak;icsak;\??\c:\program files\CheckPoint\ZAForceField\AK\icsak.sys –> c:\program files\CheckPoint\ZAForceField\AK\icsak.sys [?]
S3 pwi_bus;Curitel PC Card Composite Device driver (WDM);c:\windows\system32\DRIVERS\pwi_bus.sys –> c:\windows\system32\DRIVERS\pwi_bus.sys [?]
S3 pwi_mdfl;Curitel PC Card Filter;c:\windows\system32\DRIVERS\pwi_mdfl.sys –> c:\windows\system32\DRIVERS\pwi_mdfl.sys [?]
S3 pwi_mdm;Curitel PC Card Drivers;c:\windows\system32\DRIVERS\pwi_mdm.sys –> c:\windows\system32\DRIVERS\pwi_mdm.sys [?]
S3 pwi_oflt;Curitel PC Card OHCI Filter;c:\windows\system32\DRIVERS\pwi_oflt.sys –> c:\windows\system32\DRIVERS\pwi_oflt.sys [?]
S3 pwi_serd;Curitel PC Card Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\pwi_serd.sys –> c:\windows\system32\DRIVERS\pwi_serd.sys [?]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [8/19/2010 9:08 PM 27064]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [5/25/2010 7:33 PM 11520]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [3/31/2003 6:00 AM 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 1:16 PM 753504]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\sqladhlp.exe [7/10/2008 1:49 AM 47128]
S4 ReportServer;SQL Server Reporting Services (MSSQLSERVER);c:\program files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [3/30/2009 1:16 AM 1113448]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
bdx REG_MULTI_SZ scan

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder

2010-12-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]

2010-12-05 c:\windows\Tasks\Security Platform Backup Schedule.job
- c:\program files\Infineon\Security Platform Software\SpBackupWz.exe [2006-03-10 20:33]

2010-12-29 c:\windows\Tasks\User_Feed_Synchronization-{06B1BC02-2B9F-4237-AF0C-834FD0BDA026}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 09:31]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
mStart Page = about:blank
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: {2643ABF9-63C0-479C-B0A1-DBCEAEB940B7} = 69.78.96.14 66.174.92.14
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-28 20:36
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MySQL]
"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.1\bin\mysqld\" –defaults-file=\"c:\program files\MySQL\MySQL Server 5.1\my.ini\" MySQL"
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-1060284298-839522115-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{6175B6E8-3D5E-8729-2540-D055604E5C59}*]
"kaggmdejllmffnhbnbhiod"=hex:61,61,00,00
"faggmdejamki"=hex:66,61,6a,68,68,67,6e,63,68,6a,65,6d,00,00

[HKEY_USERS\S-1-5-21-1060284298-839522115-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9C6CF11F-216C-07F5-E86A-095ECC1154CA}*]
"oakejaihmocgedmecojhjmchapjlnm"=hex:6a,61,6f,68,62,68,67,6d,64,6f,6a,64,6f,6f,
65,68,6b,67,69,6b,00,54
"naielbhcbbjkfininppakggoecap"=hex:6a,61,6f,68,62,68,67,6d,64,6f,6a,64,6f,6f,
65,68,6b,67,69,6b,00,54

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):e0,a1,23,af,68,fc,2d,6a,cb,34,5f,bf,47,3b,62,7f,b7,d2,33,0e,96,
27,2e,b5,dc,b8,92,b1,c9,d5,77,69,f1,05,b4,49,db,0c,65,0e,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):8f,d2,4d,a1,8f,eb,94,ad,30,43,d0,63,83,f2,01,57,f0,c1,28,fd,a3,
b1,76,9e,ce,65,77,04,5b,b1,78,29,37,3d,3d,76,92,d0,05,90,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(1888)
c:\windows\system32\IfxWlxEN.dll

- - - - - - - > 'explorer.exe'(2672)
c:\windows\system32\WININET.dll
c:\program files\Internet Download Manager\IDMShellExt.dll
c:\windows\system32\msi.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2010-12-28 20:40:53
ComboFix-quarantined-files.txt 2010-12-29 02:40
ComboFix2.txt 2010-12-28 03:33
ComboFix3.txt 2010-12-27 22:13
ComboFix4.txt 2010-12-27 17:49
ComboFix5.txt 2010-12-29 02:26

Pre-Run: 71,970,467,840 bytes free
Post-Run: 71,968,591,872 bytes free

- - End Of File - - C6593847A7275B5CB626C3FCA477027F

LDTate

Post #22December 29, 2010, 12:23 PM UTC

here's links to AVG uninstallers:

AVG > AVG Removal Tool (x86) - AVG Removal Tool (x64)
AVG Identity Protection > AVGIDPUninstaller

ToddB

Post #23December 29, 2010, 5:47 PM UTC

LDTate- I have tried these AVG uninstallers with no luck. I don't know if this is the proper topic to be address here but I have included the latest AVG Remover log. If you would have any ideals on which direction to go from here it would be appreciated. Thank you! 2010-12-29 16:35:19,187 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013) 2010-12-29 16:35:19,203 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013) 2010-12-29 16:35:19,203 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d) 2010-12-29 16:35:19,203 INFO Command line: "C:\Documents and Settings\User.MARCIA-6X7H850P\Desktop\AVG Remover\avg_remover_stf_x86_2011_1165.exe" 2010-12-29 16:35:19,203 WARN AvgDir param empty. 2010-12-29 16:35:19,203 WARN AvgAdminDir param empty. 2010-12-29 16:35:19,203 WARN AvgDataDir param empty. 2010-12-29 16:35:23,593 INFO AvgRemover runs in attempt number 1 2010-12-29 16:35:23,593 INFO ***** Msi data ***** 2010-12-29 16:35:23,703 DEBUG No product code found for our upgrade codes, nothing to do here 2010-12-29 16:35:23,703 INFO ***** Exchange&Outlook plugins data ***** 2010-12-29 16:35:23,703 INFO Removing AvgOutlook addin 2010-12-29 16:35:23,703 INFO AvgOutlook Removing HKCR addin keys x86 2010-12-29 16:35:23,703 INFO Removing Sharepoint plugin if exists 2010-12-29 16:35:23,703 INFO Removing Antispam plugin for Exchange 2000/2003 if exists 2010-12-29 16:35:23,703 DEBUG Stopping service 'MSExchangeIS' to remove VSAPI plugin… 2010-12-29 16:35:23,703 DEBUG Service MSExchangeIS Stop failed (error: c0070424) 2010-12-29 16:35:23,703 DEBUG Exchange&Outlook plugins removal failed with error 0xc0070424 2010-12-29 16:35:23,703 INFO ***** Services ***** 2010-12-29 16:35:23,703 INFO Processing service avg8emc, it can take several minutes… 2010-12-29 16:35:23,703 INFO Service avg8emc is not installed 2010-12-29 16:35:23,703 DEBUG Service avg8emc RegCleanup 2010-12-29 16:35:23,703 DEBUG Registry keys for service avg8emc are not present 2010-12-29 16:35:23,703 INFO Processing service avgfws8, it can take several minutes… 2010-12-29 16:35:23,703 INFO Service avgfws8 is not installed 2010-12-29 16:35:23,703 INFO Processing service avg8wd, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgWFPx, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgWFPa, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service avg9wd, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgMfx86, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgMfx64, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgLdx86, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgLdx64, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgTdiX, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgTdiA, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgRkx86, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AvgRkx64, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service avg9emc, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service avgfws9, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service avgfws, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AVGIDSAgent, it can take several minutes… 2010-12-29 16:35:23,703 INFO Processing service AVGIDSShimxpx, it can take several minutes… 2010-12-29 16:35:29,046 DEBUG Service avgfws8 RegCleanup 2010-12-29 16:35:29,281 INFO Processing service AVGIDSDrivervtx, it can take several minutes… 2010-12-29 16:35:30,312 INFO Processing service AVGIDSFilterw7a, it can take several minutes… 2010-12-29 16:35:31,312 DEBUG Registry keys for service avgfws8 are not present 2010-12-29 16:35:32,328 INFO Processing service AVGIDSErHrvta, it can take several minutes… 2010-12-29 16:35:32,828 INFO Service AVGIDSDrivervtx is not installed 2010-12-29 16:35:33,093 DEBUG Service AVGIDSDrivervtx RegCleanup 2010-12-29 16:35:33,093 DEBUG Registry keys for service AVGIDSDrivervtx are not present 2010-12-29 16:35:33,093 INFO Service AVGIDSFilterw7a is not installed 2010-12-29 16:35:33,343 DEBUG Service AVGIDSFilterw7a RegCleanup 2010-12-29 16:35:33,343 DEBUG Registry keys for service AVGIDSFilterw7a are not present 2010-12-29 16:35:33,343 INFO Service AVGIDSErHrvta is not installed 2010-12-29 16:35:33,593 DEBUG Service AVGIDSErHrvta RegCleanup 2010-12-29 16:35:33,593 DEBUG Registry keys for service AVGIDSErHrvta are not present 2010-12-29 16:35:33,593 INFO Service AVGIDSAgent is not installed 2010-12-29 16:35:33,593 INFO Service AVGIDSShimxpx is not installed 2010-12-29 16:35:33,593 INFO Service avgfws is not installed 2010-12-29 16:35:33,593 INFO Service avgfws9 is not installed 2010-12-29 16:35:33,593 INFO Service avg9emc is not installed 2010-12-29 16:35:33,593 INFO Service AvgRkx64 is not installed 2010-12-29 16:35:33,593 INFO Service AvgRkx86 is not installed 2010-12-29 16:35:33,593 INFO Service AvgTdiA is not installed 2010-12-29 16:35:33,593 INFO Service AvgTdiX is not installed 2010-12-29 16:35:33,593 INFO Service AvgLdx64 is not installed 2010-12-29 16:35:33,593 INFO Service AvgLdx86 is not installed 2010-12-29 16:35:33,593 INFO Service AvgMfx64 is not installed 2010-12-29 16:35:33,593 INFO Service AvgMfx86 is not installed 2010-12-29 16:35:33,593 INFO Service avg9wd is not installed 2010-12-29 16:35:33,593 INFO Service AvgWFPa is not installed 2010-12-29 16:35:33,593 INFO Service AvgWFPx is not installed 2010-12-29 16:35:33,593 INFO Service avg8wd is not installed 2010-12-29 16:35:33,593 INFO Processing service AVGIDSErHrvtx, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSErHrxpx, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSDriverw7a, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSDriverw7x, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSFilterw7x, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSShimw7x, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSDrivervta, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSFiltervta, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSFiltervtx, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSShimvtx, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSDriverxpx, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSFilterxpx, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSErHrw7x, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service AVGIDSErHrw7a, it can take several minutes… 2010-12-29 16:35:33,593 INFO Processing service avgwd, it can take several minutes… 2010-12-29 16:35:40,046 DEBUG Service AvgRkx64 RegCleanup 2010-12-29 16:35:41,046 DEBUG Service AvgLdx64 RegCleanup 2010-12-29 16:35:41,046 DEBUG Service AvgTdiX RegCleanup 2010-12-29 16:35:41,046 DEBUG Service AvgTdiA RegCleanup 2010-12-29 16:35:41,046 DEBUG Service AvgRkx86 RegCleanup 2010-12-29 16:35:41,046 DEBUG Service avg9emc RegCleanup 2010-12-29 16:35:42,046 DEBUG Service avg9wd RegCleanup 2010-12-29 16:35:42,046 DEBUG Service AvgMfx86 RegCleanup 2010-12-29 16:35:42,046 DEBUG Service AvgMfx64 RegCleanup 2010-12-29 16:35:42,046 DEBUG Service AvgLdx86 RegCleanup 2010-12-29 16:35:42,046 DEBUG Service avgfws9 RegCleanup 2010-12-29 16:35:42,046 DEBUG Service avgfws RegCleanup 2010-12-29 16:35:42,046 DEBUG Service AVGIDSShimxpx RegCleanup 2010-12-29 16:35:42,046 DEBUG Service AVGIDSAgent RegCleanup 2010-12-29 16:35:42,468 INFO Processing service AvgAdminServer, it can take several minutes… 2010-12-29 16:35:43,046 DEBUG Service avg8wd RegCleanup 2010-12-29 16:35:43,046 DEBUG Service AvgWFPx RegCleanup 2010-12-29 16:35:43,046 DEBUG Service AvgWFPa RegCleanup 2010-12-29 16:35:45,000 INFO Service AVGIDSErHrw7a is not installed 2010-12-29 16:35:45,500 DEBUG Registry keys for service AvgRkx64 are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service AvgLdx64 are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service AvgTdiX are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service AvgTdiA are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service AvgRkx86 are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service avg9emc are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service avg9wd are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service AvgMfx86 are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service AvgMfx64 are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service AvgLdx86 are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service avgfws9 are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service avgfws are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service AVGIDSShimxpx are not present 2010-12-29 16:35:45,500 DEBUG Registry keys for service AVGIDSAgent are not present 2010-12-29 16:35:46,000 DEBUG Registry keys for service avg8wd are not present 2010-12-29 16:35:46,000 DEBUG Registry keys for service AvgWFPx are not present 2010-12-29 16:35:46,000 DEBUG Registry keys for service AvgWFPa are not present 2010-12-29 16:35:46,000 INFO Service AvgAdminServer is not installed 2010-12-29 16:35:46,000 INFO Service avgwd is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSErHrw7x is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSFilterxpx is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSDriverxpx is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSShimvtx is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSFiltervtx is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSFiltervta is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSDrivervta is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSShimw7x is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSFilterw7x is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSDriverw7x is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSDriverw7a is not installed 2010-12-29 16:35:46,000 INFO Service AVGIDSErHrxpx is not installed 2010-12-29 16:35:46,015 INFO Service AVGIDSErHrvtx is not installed 2010-12-29 16:35:46,515 DEBUG Service AvgAdminServer RegCleanup 2010-12-29 16:35:47,281 DEBUG Service AVGIDSFilterxpx RegCleanup 2010-12-29 16:35:47,531 DEBUG Service AVGIDSDriverxpx RegCleanup 2010-12-29 16:35:47,781 DEBUG Service AVGIDSShimvtx RegCleanup 2010-12-29 16:35:48,031 DEBUG Service AVGIDSFiltervtx RegCleanup 2010-12-29 16:35:48,281 DEBUG Service AVGIDSFiltervta RegCleanup 2010-12-29 16:35:48,531 DEBUG Service AVGIDSDrivervta RegCleanup 2010-12-29 16:35:48,796 DEBUG Service AVGIDSShimw7x RegCleanup 2010-12-29 16:35:49,046 DEBUG Service AVGIDSFilterw7x RegCleanup 2010-12-29 16:35:49,296 DEBUG Service AVGIDSDriverw7x RegCleanup 2010-12-29 16:35:49,546 DEBUG Service AVGIDSDriverw7a RegCleanup 2010-12-29 16:35:49,796 DEBUG Service AVGIDSErHrxpx RegCleanup 2010-12-29 16:35:50,078 DEBUG Registry keys for service AvgAdminServer are not present 2010-12-29 16:35:50,078 DEBUG Service AVGIDSErHrvtx RegCleanup 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSFilterxpx are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSDriverxpx are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSShimvtx are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSFiltervtx are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSFiltervta are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSDrivervta are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSShimw7x are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSFilterw7x are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSDriverw7x are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSDriverw7a are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSErHrxpx are not present 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSErHrvtx are not present 2010-12-29 16:35:50,078 DEBUG Service AVGIDSErHrw7x RegCleanup 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSErHrw7x are not present 2010-12-29 16:35:50,078 DEBUG Service avgwd RegCleanup 2010-12-29 16:35:50,078 DEBUG Registry keys for service avgwd are not present 2010-12-29 16:35:50,078 DEBUG Service AVGIDSErHrw7a RegCleanup 2010-12-29 16:35:50,078 DEBUG Registry keys for service AVGIDSErHrw7a are not present 2010-12-29 16:35:50,078 INFO ***** Avg Fw NDIS driver(separate process) ***** 2010-12-29 16:35:50,578 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013) 2010-12-29 16:35:50,578 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013) 2010-12-29 16:35:50,578 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d) 2010-12-29 16:35:50,578 INFO Command line: "C:\Documents and Settings\User.MARCIA-6X7H850P\Desktop\AVG Remover\avg_remover_stf_x86_2011_1165.exe" /ndisonly /skipask 2010-12-29 16:35:51,343 WARN AvgDir param empty. 2010-12-29 16:35:51,593 WARN AvgAdminDir param empty. 2010-12-29 16:35:51,843 WARN AvgDataDir param empty. 2010-12-29 16:35:52,109 INFO AvgRemover runs in attempt number 1 2010-12-29 16:35:52,359 INFO ***** Avg Fw NDIS driver ***** 2010-12-29 16:35:52,609 INFO …this operation can take several minutes… 2010-12-29 16:35:52,875 INFO FW removing policy 2010-12-29 16:35:58,171 INFO FW NDIS driver not present 2010-12-29 16:35:58,437 DEBUG Remove NDIS driver pass, next uninstalation step is 10, old was 1 2010-12-29 16:35:58,437 INFO ***** end of Fw NDIS separated process ***** 2010-12-29 16:35:58,937 INFO ***** Drivers ***** 2010-12-29 16:35:59,187 INFO ***** Running AVG process ***** 2010-12-29 16:35:59,546 INFO ***** Registry keys and values ***** 2010-12-29 16:35:59,812 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions 2010-12-29 16:36:00,328 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove 2010-12-29 16:36:00,328 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present 2010-12-29 16:36:00,828 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions 2010-12-29 16:36:01,328 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove 2010-12-29 16:36:01,328 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present 2010-12-29 16:36:01,843 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt 2010-12-29 16:36:02,343 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove 2010-12-29 16:36:02,343 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found 2010-12-29 16:36:02,343 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt 2010-12-29 16:36:02,843 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt ForceRemove 2010-12-29 16:36:02,843 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt not found 2010-12-29 16:36:02,843 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms 2010-12-29 16:36:03,343 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove 2010-12-29 16:36:03,343 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found 2010-12-29 16:36:03,343 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg 2010-12-29 16:36:03,859 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove 2010-12-29 16:36:03,859 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found 2010-12-29 16:36:03,859 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg 2010-12-29 16:36:04,359 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove 2010-12-29 16:36:04,359 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found 2010-12-29 16:36:04,359 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} 2010-12-29 16:36:04,875 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove 2010-12-29 16:36:04,875 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found 2010-12-29 16:36:04,875 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2010-12-29 16:36:05,390 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2010-12-29 16:36:05,390 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2010-12-29 16:36:05,390 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar 2010-12-29 16:36:05,890 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove 2010-12-29 16:36:05,890 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present 2010-12-29 16:36:06,390 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2010-12-29 16:36:06,906 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2010-12-29 16:36:06,906 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2010-12-29 16:36:06,906 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions 2010-12-29 16:36:07,406 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove 2010-12-29 16:36:07,406 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present 2010-12-29 16:36:07,921 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions 2010-12-29 16:36:08,421 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove 2010-12-29 16:36:08,421 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present 2010-12-29 16:36:08,921 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows 2010-12-29 16:36:09,421 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify 2010-12-29 16:36:09,421 DEBUG Reading SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs failed (error: e001003d) 2010-12-29 16:36:09,421 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify failed 2010-12-29 16:36:09,421 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved 2010-12-29 16:36:09,937 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove 2010-12-29 16:36:09,937 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present 2010-12-29 16:36:10,453 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved 2010-12-29 16:36:10,953 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove 2010-12-29 16:36:10,953 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present 2010-12-29 16:36:11,453 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved 2010-12-29 16:36:11,968 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove 2010-12-29 16:36:11,968 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present 2010-12-29 16:36:12,468 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved 2010-12-29 16:36:12,968 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove 2010-12-29 16:36:12,968 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present 2010-12-29 16:36:13,484 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2010-12-29 16:36:13,984 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove 2010-12-29 16:36:13,984 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present 2010-12-29 16:36:14,484 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2010-12-29 16:36:15,000 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY Remove 2010-12-29 16:36:15,000 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY is not present 2010-12-29 16:36:15,515 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall 2010-12-29 16:36:16,015 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove 2010-12-29 16:36:16,015 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found 2010-12-29 16:36:16,015 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall 2010-12-29 16:36:16,515 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall ForceRemove 2010-12-29 16:36:16,515 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall not found 2010-12-29 16:36:16,515 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall 2010-12-29 16:36:17,031 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall ForceRemove 2010-12-29 16:36:17,031 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall not found 2010-12-29 16:36:17,031 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} 2010-12-29 16:36:17,781 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove 2010-12-29 16:36:17,781 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found 2010-12-29 16:36:17,781 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} 2010-12-29 16:36:18,281 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove 2010-12-29 16:36:18,281 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found 2010-12-29 16:36:18,281 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} 2010-12-29 16:36:18,796 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove 2010-12-29 16:36:18,796 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found 2010-12-29 16:36:18,796 INFO Processing registry SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} 2010-12-29 16:36:19,296 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove 2010-12-29 16:36:19,296 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found 2010-12-29 16:36:19,296 INFO Processing registry SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} 2010-12-29 16:36:19,828 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove 2010-12-29 16:36:19,828 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found 2010-12-29 16:36:19,828 INFO Processing registry SOFTWARE\Classes\AvgDiagFile 2010-12-29 16:36:20,078 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove 2010-12-29 16:36:20,078 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found 2010-12-29 16:36:20,078 INFO Processing registry SOFTWARE\Classes\AvgDiagFile 2010-12-29 16:36:20,328 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove 2010-12-29 16:36:20,328 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found 2010-12-29 16:36:20,328 INFO Processing registry SOFTWARE\Classes\.avgdi 2010-12-29 16:36:20,593 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove 2010-12-29 16:36:20,593 DEBUG Key SOFTWARE\Classes\.avgdi not found 2010-12-29 16:36:20,593 INFO Processing registry SOFTWARE\Classes\.avgdx 2010-12-29 16:36:20,843 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove 2010-12-29 16:36:20,843 DEBUG Key SOFTWARE\Classes\.avgdx not found 2010-12-29 16:36:20,843 INFO Processing registry SOFTWARE\Classes\.avgdx 2010-12-29 16:36:21,093 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove 2010-12-29 16:36:21,093 DEBUG Key SOFTWARE\Classes\.avgdx not found 2010-12-29 16:36:21,093 INFO Processing registry SOFTWARE\Classes\.avgdx 2010-12-29 16:36:21,359 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove 2010-12-29 16:36:21,359 DEBUG Key SOFTWARE\Classes\.avgdx not found 2010-12-29 16:36:21,359 INFO Processing registry SOFTWARE\Classes\.avgdx 2010-12-29 16:36:21,609 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove 2010-12-29 16:36:21,609 DEBUG Key SOFTWARE\Classes\.avgdx not found 2010-12-29 16:36:21,609 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension 2010-12-29 16:36:22,109 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove 2010-12-29 16:36:22,109 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found 2010-12-29 16:36:22,140 INFO Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension 2010-12-29 16:36:22,640 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove 2010-12-29 16:36:22,640 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found 2010-12-29 16:36:22,640 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension 2010-12-29 16:36:23,140 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove 2010-12-29 16:36:23,140 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found 2010-12-29 16:36:23,140 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension 2010-12-29 16:36:23,656 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2010-12-29 16:36:23,656 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension not found 2010-12-29 16:36:23,656 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension 2010-12-29 16:36:24,156 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2010-12-29 16:36:24,156 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension not found 2010-12-29 16:36:24,156 INFO Processing registry SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension 2010-12-29 16:36:24,656 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2010-12-29 16:36:24,656 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension not found 2010-12-29 16:36:24,656 INFO Processing registry SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension 2010-12-29 16:36:25,171 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2010-12-29 16:36:25,171 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension not found 2010-12-29 16:36:25,171 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension 2010-12-29 16:36:25,687 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2010-12-29 16:36:25,687 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension not found 2010-12-29 16:36:25,687 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension 2010-12-29 16:36:26,187 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2010-12-29 16:36:26,187 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension not found 2010-12-29 16:36:26,187 INFO Processing registry SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner 2010-12-29 16:36:26,703 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner ForceRemove 2010-12-29 16:36:26,703 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner not found 2010-12-29 16:36:26,703 INFO Processing registry SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner 2010-12-29 16:36:27,203 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner ForceRemove 2010-12-29 16:36:27,203 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner not found 2010-12-29 16:36:27,203 INFO Processing registry SOFTWARE\Classes\avgsbg.state 2010-12-29 16:36:27,453 DEBUG Key SOFTWARE\Classes\avgsbg.state ForceRemove 2010-12-29 16:36:27,453 DEBUG Key SOFTWARE\Classes\avgsbg.state not found 2010-12-29 16:36:27,453 INFO Processing registry SOFTWARE\Classes\avgsbg.state 2010-12-29 16:36:27,703 DEBUG Key SOFTWARE\Classes\avgsbg.state ForceRemove 2010-12-29 16:36:27,703 DEBUG Key SOFTWARE\Classes\avgsbg.state not found 2010-12-29 16:36:27,703 INFO Processing registry SOFTWARE\Classes\avgsbg.state.1 2010-12-29 16:36:28,218 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 ForceRemove 2010-12-29 16:36:28,250 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 not found 2010-12-29 16:36:28,250 INFO Processing registry SOFTWARE\Classes\avgsbg.state.1 2010-12-29 16:36:28,750 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 ForceRemove 2010-12-29 16:36:28,750 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 not found 2010-12-29 16:36:28,781 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter 2010-12-29 16:36:29,281 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter ForceRemove 2010-12-29 16:36:29,281 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter not found 2010-12-29 16:36:29,281 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter 2010-12-29 16:36:29,812 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter ForceRemove 2010-12-29 16:36:29,812 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter not found 2010-12-29 16:36:29,812 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter.1 2010-12-29 16:36:30,312 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 ForceRemove 2010-12-29 16:36:30,328 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 not found 2010-12-29 16:36:30,328 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter.1 2010-12-29 16:36:30,843 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 ForceRemove 2010-12-29 16:36:30,843 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 not found 2010-12-29 16:36:30,843 INFO Processing registry SOFTWARE\Classes\MicroScanner.MicroScanner 2010-12-29 16:36:31,359 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner ForceRemove 2010-12-29 16:36:31,359 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner not found 2010-12-29 16:36:31,359 INFO Processing registry SOFTWARE\Classes\MicroScanner.MicroScanner 2010-12-29 16:36:31,859 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner ForceRemove 2010-12-29 16:36:31,859 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner not found 2010-12-29 16:36:31,859 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AVGSE.DLL 2010-12-29 16:36:32,359 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AVGSE.DLL ForceRemove 2010-12-29 16:36:32,359 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AVGSE.DLL not found 2010-12-29 16:36:32,359 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2010-12-29 16:36:32,875 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY Remove 2010-12-29 16:36:32,875 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY is not present 2010-12-29 16:36:33,375 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2010-12-29 16:36:33,875 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY Remove 2010-12-29 16:36:33,875 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY is not present 2010-12-29 16:36:34,375 INFO Processing registry SOFTWARE\Classes\AppID\avgsbg.DLL 2010-12-29 16:36:34,890 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL ForceRemove 2010-12-29 16:36:34,890 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL not found 2010-12-29 16:36:34,890 INFO Processing registry SOFTWARE\Classes\AppID\avgsbg.DLL 2010-12-29 16:36:35,390 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL ForceRemove 2010-12-29 16:36:35,390 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL not found 2010-12-29 16:36:35,390 INFO Processing registry SYSTEM\ControlSet001\Control\GroupOrderList 2010-12-29 16:36:35,906 DEBUG Value SYSTEM\ControlSet001\Control\GroupOrderList:AVG Remove 2010-12-29 16:36:35,906 INFO Value SYSTEM\ControlSet001\Control\GroupOrderList:AVG is not present 2010-12-29 16:36:36,406 INFO Processing registry SYSTEM\ControlSet001\services\Avg 2010-12-29 16:36:36,921 DEBUG Key SYSTEM\ControlSet001\services\Avg ForceRemove 2010-12-29 16:36:36,921 DEBUG Key SYSTEM\ControlSet001\services\Avg not found 2010-12-29 16:36:36,921 INFO Processing registry SYSTEM\ControlSet001\services\Avgfwfd 2010-12-29 16:36:37,421 DEBUG Key SYSTEM\ControlSet001\services\Avgfwfd ForceRemove 2010-12-29 16:36:37,421 DEBUG Key SYSTEM\ControlSet001\services\Avgfwfd not found 2010-12-29 16:36:37,421 INFO Processing registry SYSTEM\ControlSet001\services\AVG Security Toolbar Service 2010-12-29 16:36:37,937 DEBUG Key SYSTEM\ControlSet001\services\AVG Security Toolbar Service ForceRemove 2010-12-29 16:36:37,937 DEBUG Key SYSTEM\ControlSet001\services\AVG Security Toolbar Service not found 2010-12-29 16:36:37,937 INFO Processing registry SYSTEM\ControlSet001\services\Avgfws 2010-12-29 16:36:38,437 DEBUG Key SYSTEM\ControlSet001\services\Avgfws ForceRemove 2010-12-29 16:36:38,437 DEBUG Key SYSTEM\ControlSet001\services\Avgfws not found 2010-12-29 16:36:38,437 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSAgent 2010-12-29 16:36:38,937 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSAgent ForceRemove 2010-12-29 16:36:38,937 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSAgent not found 2010-12-29 16:36:38,937 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSDriver 2010-12-29 16:36:39,437 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSDriver ForceRemove 2010-12-29 16:36:39,437 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSDriver not found 2010-12-29 16:36:39,437 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSEH 2010-12-29 16:36:39,953 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSEH ForceRemove 2010-12-29 16:36:39,953 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSEH not found 2010-12-29 16:36:39,953 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSFilter 2010-12-29 16:36:40,453 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSFilter ForceRemove 2010-12-29 16:36:40,453 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSFilter not found 2010-12-29 16:36:40,453 INFO Processing registry SYSTEM\ControlSet001\services\avgldx64 2010-12-29 16:36:40,968 DEBUG Key SYSTEM\ControlSet001\services\avgldx64 ForceRemove 2010-12-29 16:36:40,968 DEBUG Key SYSTEM\ControlSet001\services\avgldx64 not found 2010-12-29 16:36:40,968 INFO Processing registry SYSTEM\ControlSet001\services\avgldx86 2010-12-29 16:36:41,468 DEBUG Key SYSTEM\ControlSet001\services\avgldx86 ForceRemove 2010-12-29 16:36:41,468 DEBUG Key SYSTEM\ControlSet001\services\avgldx86 not found 2010-12-29 16:36:41,468 INFO Processing registry SYSTEM\ControlSet001\services\avgmfx64 2010-12-29 16:36:41,984 DEBUG Key SYSTEM\ControlSet001\services\avgmfx64 ForceRemove 2010-12-29 16:36:41,984 DEBUG Key SYSTEM\ControlSet001\services\avgmfx64 not found 2010-12-29 16:36:41,984 INFO Processing registry SYSTEM\ControlSet001\services\avgmfx86 2010-12-29 16:36:42,484 DEBUG Key SYSTEM\ControlSet001\services\avgmfx86 ForceRemove 2010-12-29 16:36:42,484 DEBUG Key SYSTEM\ControlSet001\services\avgmfx86 not found 2010-12-29 16:36:42,484 INFO Processing registry SYSTEM\ControlSet001\services\avgrkx64 2010-12-29 16:36:42,984 DEBUG Key SYSTEM\ControlSet001\services\avgrkx64 ForceRemove 2010-12-29 16:36:42,984 DEBUG Key SYSTEM\ControlSet001\services\avgrkx64 not found 2010-12-29 16:36:42,984 INFO Processing registry SYSTEM\ControlSet001\services\avgrkx86 2010-12-29 16:36:43,500 DEBUG Key SYSTEM\ControlSet001\services\avgrkx86 ForceRemove 2010-12-29 16:36:43,500 DEBUG Key SYSTEM\ControlSet001\services\avgrkx86 not found 2010-12-29 16:36:43,500 INFO Processing registry SYSTEM\ControlSet001\services\avgtdia 2010-12-29 16:36:44,000 DEBUG Key SYSTEM\ControlSet001\services\avgtdia ForceRemove 2010-12-29 16:36:44,000 DEBUG Key SYSTEM\ControlSet001\services\avgtdia not found 2010-12-29 16:36:44,000 INFO Processing registry SYSTEM\ControlSet001\services\avgtdix 2010-12-29 16:36:44,500 DEBUG Key SYSTEM\ControlSet001\services\avgtdix ForceRemove 2010-12-29 16:36:44,500 DEBUG Key SYSTEM\ControlSet001\services\avgtdix not found 2010-12-29 16:36:44,500 INFO Processing registry SYSTEM\ControlSet001\services\avgwd 2010-12-29 16:36:45,015 DEBUG Key SYSTEM\ControlSet001\services\avgwd ForceRemove 2010-12-29 16:36:45,015 DEBUG Key SYSTEM\ControlSet001\services\avgwd not found 2010-12-29 16:36:45,015 INFO Processing registry SYSTEM\ControlSet001\services\avgfwdx 2010-12-29 16:36:45,515 DEBUG Key SYSTEM\ControlSet001\services\avgfwdx ForceRemove 2010-12-29 16:36:45,515 DEBUG Key SYSTEM\ControlSet001\services\avgfwdx not found 2010-12-29 16:36:45,515 INFO Processing registry SYSTEM\ControlSet001\services\avgfwda 2010-12-29 16:36:46,031 DEBUG Key SYSTEM\ControlSet001\services\avgfwda ForceRemove 2010-12-29 16:36:46,031 DEBUG Key SYSTEM\ControlSet001\services\avgfwda not found 2010-12-29 16:36:46,031 INFO Processing registry SYSTEM\ControlSet002\services\Avg 2010-12-29 16:36:46,531 DEBUG Key SYSTEM\ControlSet002\services\Avg ForceRemove 2010-12-29 16:36:46,531 DEBUG Key SYSTEM\ControlSet002\services\Avg not found 2010-12-29 16:36:46,531 INFO Processing registry SYSTEM\ControlSet002\services\Avgfwfd 2010-12-29 16:36:47,031 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd ForceRemove 2010-12-29 16:36:47,031 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd not found 2010-12-29 16:36:47,031 INFO Processing registry SYSTEM\ControlSet002\services\AVG Security Toolbar Service 2010-12-29 16:36:47,546 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service ForceRemove 2010-12-29 16:36:47,546 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service not found 2010-12-29 16:36:47,546 INFO Processing registry SYSTEM\ControlSet002\services\Avgfws 2010-12-29 16:36:48,046 DEBUG Key SYSTEM\ControlSet002\services\Avgfws ForceRemove 2010-12-29 16:36:48,046 DEBUG Key SYSTEM\ControlSet002\services\Avgfws not found 2010-12-29 16:36:48,046 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSAgent 2010-12-29 16:36:48,546 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent ForceRemove 2010-12-29 16:36:48,546 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent not found 2010-12-29 16:36:48,546 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSDriver 2010-12-29 16:36:49,062 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver ForceRemove 2010-12-29 16:36:49,062 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver not found 2010-12-29 16:36:49,062 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSEH 2010-12-29 16:36:49,562 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH ForceRemove 2010-12-29 16:36:49,562 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH not found 2010-12-29 16:36:49,562 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSFilter 2010-12-29 16:36:50,062 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter ForceRemove 2010-12-29 16:36:50,062 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter not found 2010-12-29 16:36:50,062 INFO Processing registry SYSTEM\ControlSet002\services\avgldx64 2010-12-29 16:36:50,562 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 ForceRemove 2010-12-29 16:36:50,562 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 not found 2010-12-29 16:36:50,562 INFO Processing registry SYSTEM\ControlSet002\services\avgldx86 2010-12-29 16:36:51,093 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 ForceRemove 2010-12-29 16:36:51,093 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 not found 2010-12-29 16:36:51,093 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx64 2010-12-29 16:36:51,593 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 ForceRemove 2010-12-29 16:36:51,593 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 not found 2010-12-29 16:36:51,593 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx86 2010-12-29 16:36:52,093 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 ForceRemove 2010-12-29 16:36:52,093 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 not found 2010-12-29 16:36:52,093 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx64 2010-12-29 16:36:52,593 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 ForceRemove 2010-12-29 16:36:52,593 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 not found 2010-12-29 16:36:52,593 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx86 2010-12-29 16:36:53,109 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 ForceRemove 2010-12-29 16:36:53,109 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 not found 2010-12-29 16:36:53,109 INFO Processing registry SYSTEM\ControlSet002\services\avgtdia 2010-12-29 16:36:53,609 DEBUG Key SYSTEM\ControlSet002\services\avgtdia ForceRemove 2010-12-29 16:36:53,609 DEBUG Key SYSTEM\ControlSet002\services\avgtdia not found 2010-12-29 16:36:53,609 INFO Processing registry SYSTEM\ControlSet002\services\avgtdix 2010-12-29 16:36:54,109 DEBUG Key SYSTEM\ControlSet002\services\avgtdix ForceRemove 2010-12-29 16:36:54,125 DEBUG Key SYSTEM\ControlSet002\services\avgtdix not found 2010-12-29 16:36:54,125 INFO Processing registry SYSTEM\ControlSet002\services\avgwd 2010-12-29 16:36:54,625 DEBUG Key SYSTEM\ControlSet002\services\avgwd ForceRemove 2010-12-29 16:36:54,625 DEBUG Key SYSTEM\ControlSet002\services\avgwd not found 2010-12-29 16:36:54,625 INFO Processing registry SYSTEM\ControlSet002\services\avgfwdx 2010-12-29 16:36:55,125 DEBUG Key SYSTEM\ControlSet002\services\avgfwdx ForceRemove 2010-12-29 16:36:55,125 DEBUG Key SYSTEM\ControlSet002\services\avgfwdx not found 2010-12-29 16:36:55,125 INFO Processing registry SYSTEM\ControlSet002\services\avgfwda 2010-12-29 16:36:55,625 DEBUG Key SYSTEM\ControlSet002\services\avgfwda ForceRemove 2010-12-29 16:36:55,625 DEBUG Key SYSTEM\ControlSet002\services\avgfwda not found 2010-12-29 16:36:55,625 INFO Processing registry SYSTEM\ControlSet002\services\Avg 2010-12-29 16:36:56,140 DEBUG Key SYSTEM\ControlSet002\services\Avg ForceRemove 2010-12-29 16:36:56,140 DEBUG Key SYSTEM\ControlSet002\services\Avg not found 2010-12-29 16:36:56,140 INFO Processing registry SYSTEM\ControlSet002\services\Avgfwfd 2010-12-29 16:36:56,656 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd ForceRemove 2010-12-29 16:36:56,656 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd not found 2010-12-29 16:36:56,656 INFO Processing registry SYSTEM\ControlSet002\services\AVG Security Toolbar Service 2010-12-29 16:36:57,156 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service ForceRemove 2010-12-29 16:36:57,156 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service not found 2010-12-29 16:36:57,156 INFO Processing registry SYSTEM\ControlSet002\services\Avgfws 2010-12-29 16:36:57,656 DEBUG Key SYSTEM\ControlSet002\services\Avgfws ForceRemove 2010-12-29 16:36:57,656 DEBUG Key SYSTEM\ControlSet002\services\Avgfws not found 2010-12-29 16:36:57,656 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSAgent 2010-12-29 16:36:58,171 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent ForceRemove 2010-12-29 16:36:58,171 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent not found 2010-12-29 16:36:58,171 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSDriver 2010-12-29 16:36:58,671 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver ForceRemove 2010-12-29 16:36:58,671 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver not found 2010-12-29 16:36:58,671 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSEH 2010-12-29 16:36:59,171 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH ForceRemove 2010-12-29 16:36:59,171 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH not found 2010-12-29 16:36:59,171 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSFilter 2010-12-29 16:36:59,671 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter ForceRemove 2010-12-29 16:36:59,671 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter not found 2010-12-29 16:36:59,671 INFO Processing registry SYSTEM\ControlSet002\services\avgldx64 2010-12-29 16:37:00,187 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 ForceRemove 2010-12-29 16:37:00,187 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 not found 2010-12-29 16:37:00,187 INFO Processing registry SYSTEM\ControlSet002\services\avgldx86 2010-12-29 16:37:00,687 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 ForceRemove 2010-12-29 16:37:00,687 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 not found 2010-12-29 16:37:00,687 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx64 2010-12-29 16:37:01,203 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 ForceRemove 2010-12-29 16:37:01,203 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 not found 2010-12-29 16:37:01,203 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx86 2010-12-29 16:37:01,718 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 ForceRemove 2010-12-29 16:37:01,718 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 not found 2010-12-29 16:37:01,718 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx64 2010-12-29 16:37:02,218 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 ForceRemove 2010-12-29 16:37:02,218 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 not found 2010-12-29 16:37:02,218 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx86 2010-12-29 16:37:02,718 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 ForceRemove 2010-12-29 16:37:02,718 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 not found 2010-12-29 16:37:02,718 INFO Processing registry SYSTEM\ControlSet002\services\avgtdia 2010-12-29 16:37:03,234 DEBUG Key SYSTEM\ControlSet002\services\avgtdia ForceRemove 2010-12-29 16:37:03,234 DEBUG Key SYSTEM\ControlSet002\services\avgtdia not found 2010-12-29 16:37:03,234 INFO Processing registry SYSTEM\ControlSet002\services\avgtdix 2010-12-29 16:37:03,734 DEBUG Key SYSTEM\ControlSet002\services\avgtdix ForceRemove 2010-12-29 16:37:03,734 DEBUG Key SYSTEM\ControlSet002\services\avgtdix not found 2010-12-29 16:37:03,734 INFO Processing registry SYSTEM\ControlSet002\services\avgwd 2010-12-29 16:37:04,234 DEBUG Key SYSTEM\ControlSet002\services\avgwd ForceRemove 2010-12-29 16:37:04,234 DEBUG Key SYSTEM\ControlSet002\services\avgwd not found 2010-12-29 16:37:04,234 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGFWS 2010-12-29 16:37:04,734 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGFWS ForceRemove 2010-12-29 16:37:04,734 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGFWS not found 2010-12-29 16:37:04,734 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSAGENT 2010-12-29 16:37:05,250 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSAGENT ForceRemove 2010-12-29 16:37:05,250 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSAGENT failed (error e0010058) 2010-12-29 16:37:05,750 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVER 2010-12-29 16:37:06,265 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVER ForceRemove 2010-12-29 16:37:06,265 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVER failed (error e0010058) 2010-12-29 16:37:06,765 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSEH 2010-12-29 16:37:07,281 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSEH ForceRemove 2010-12-29 16:37:07,281 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSEH failed (error e0010058) 2010-12-29 16:37:07,781 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSFILTER 2010-12-29 16:37:08,281 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSFILTER ForceRemove 2010-12-29 16:37:08,281 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSFILTER failed (error e0010058) 2010-12-29 16:37:08,796 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIM 2010-12-29 16:37:09,296 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIM ForceRemove 2010-12-29 16:37:09,296 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIM failed (error e0010058) 2010-12-29 16:37:09,796 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX86 2010-12-29 16:37:10,312 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX86 ForceRemove 2010-12-29 16:37:10,312 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX86 failed (error e0010058) 2010-12-29 16:37:10,812 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX86 2010-12-29 16:37:11,328 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX86 ForceRemove 2010-12-29 16:37:11,328 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX86 not found 2010-12-29 16:37:11,328 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX86 2010-12-29 16:37:11,828 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX86 ForceRemove 2010-12-29 16:37:11,828 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX86 failed (error e0010058) 2010-12-29 16:37:12,343 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX64 2010-12-29 16:37:12,843 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX64 ForceRemove 2010-12-29 16:37:12,843 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX64 not found 2010-12-29 16:37:12,843 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX64 2010-12-29 16:37:13,343 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX64 ForceRemove 2010-12-29 16:37:13,343 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX64 not found 2010-12-29 16:37:13,343 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX64 2010-12-29 16:37:13,843 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX64 ForceRemove 2010-12-29 16:37:13,843 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX64 not found 2010-12-29 16:37:13,843 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIX 2010-12-29 16:37:14,359 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIX ForceRemove 2010-12-29 16:37:14,359 WARN Deleting key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIX failed (error e0010058) 2010-12-29 16:37:14,859 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIA 2010-12-29 16:37:15,375 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIA ForceRemove 2010-12-29 16:37:15,375 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIA not found 2010-12-29 16:37:15,375 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWD 2010-12-29 16:37:15,875 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWD ForceRemove 2010-12-29 16:37:15,875 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWD not found 2010-12-29 16:37:15,875 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG9WD 2010-12-29 16:37:16,390 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG9WD ForceRemove 2010-12-29 16:37:16,390 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG9WD not found 2010-12-29 16:37:16,390 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVERXPX 2010-12-29 16:37:16,890 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVERXPX ForceRemove 2010-12-29 16:37:16,890 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVERXPX not found 2010-12-29 16:37:16,890 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSERHRXPX 2010-12-29 16:37:17,406 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSERHRXPX ForceRemove 2010-12-29 16:37:17,406 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSERHRXPX not found 2010-12-29 16:37:17,406 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIMXPX 2010-12-29 16:37:17,906 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIMXPX ForceRemove 2010-12-29 16:37:17,906 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIMXPX not found 2010-12-29 16:37:17,906 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGFWS 2010-12-29 16:37:18,406 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGFWS ForceRemove 2010-12-29 16:37:18,406 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGFWS not found 2010-12-29 16:37:18,406 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSAGENT 2010-12-29 16:37:18,921 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSAGENT ForceRemove 2010-12-29 16:37:18,921 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSAGENT failed (error e0010058) 2010-12-29 16:37:19,421 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVER 2010-12-29 16:37:19,921 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVER ForceRemove 2010-12-29 16:37:19,921 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVER failed (error e0010058) 2010-12-29 16:37:20,437 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSEH 2010-12-29 16:37:20,937 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSEH ForceRemove 2010-12-29 16:37:20,937 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSEH failed (error e0010058) 2010-12-29 16:37:21,453 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSFILTER 2010-12-29 16:37:21,953 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSFILTER ForceRemove 2010-12-29 16:37:21,953 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSFILTER failed (error e0010058) 2010-12-29 16:37:22,468 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIM 2010-12-29 16:37:22,968 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIM ForceRemove 2010-12-29 16:37:22,968 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIM failed (error e0010058) 2010-12-29 16:37:23,468 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX86 2010-12-29 16:37:23,968 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX86 ForceRemove 2010-12-29 16:37:23,968 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX86 failed (error e0010058) 2010-12-29 16:37:24,484 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX86 2010-12-29 16:37:24,984 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX86 ForceRemove 2010-12-29 16:37:24,984 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX86 not found 2010-12-29 16:37:24,984 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX86 2010-12-29 16:37:25,484 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX86 ForceRemove 2010-12-29 16:37:25,484 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX86 failed (error e0010058) 2010-12-29 16:37:26,000 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX64 2010-12-29 16:37:26,515 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX64 ForceRemove 2010-12-29 16:37:26,515 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX64 not found 2010-12-29 16:37:26,515 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX64 2010-12-29 16:37:27,015 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX64 ForceRemove 2010-12-29 16:37:27,015 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX64 not found 2010-12-29 16:37:27,015 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX64 2010-12-29 16:37:27,515 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX64 ForceRemove 2010-12-29 16:37:27,515 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX64 not found 2010-12-29 16:37:27,515 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIX 2010-12-29 16:37:28,031 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIX ForceRemove 2010-12-29 16:37:28,031 WARN Deleting key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIX failed (error e0010058) 2010-12-29 16:37:28,531 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIA 2010-12-29 16:37:29,031 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIA ForceRemove 2010-12-29 16:37:29,031 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIA not found 2010-12-29 16:37:29,031 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWD 2010-12-29 16:37:29,546 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWD ForceRemove 2010-12-29 16:37:29,546 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWD not found 2010-12-29 16:37:29,546 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG9WD 2010-12-29 16:37:30,046 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG9WD ForceRemove 2010-12-29 16:37:30,046 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG9WD not found 2010-12-29 16:37:30,046 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVERXPX 2010-12-29 16:37:30,546 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVERXPX ForceRemove 2010-12-29 16:37:30,546 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVERXPX not found 2010-12-29 16:37:30,546 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSERHRXPX 2010-12-29 16:37:31,046 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSERHRXPX ForceRemove 2010-12-29 16:37:31,046 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSERHRXPX not found 2010-12-29 16:37:31,046 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIMXPX 2010-12-29 16:37:31,578 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIMXPX ForceRemove 2010-12-29 16:37:31,578 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIMXPX not found 2010-12-29 16:37:31,578 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGFWS 2010-12-29 16:37:32,078 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGFWS ForceRemove 2010-12-29 16:37:32,078 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGFWS not found 2010-12-29 16:37:32,078 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSAGENT 2010-12-29 16:37:32,578 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSAGENT ForceRemove 2010-12-29 16:37:32,578 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSAGENT not found 2010-12-29 16:37:32,578 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVER 2010-12-29 16:37:33,078 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVER ForceRemove 2010-12-29 16:37:33,078 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVER not found 2010-12-29 16:37:33,078 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSEH 2010-12-29 16:37:33,593 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSEH ForceRemove 2010-12-29 16:37:33,593 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSEH not found 2010-12-29 16:37:33,593 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSFILTER 2010-12-29 16:37:34,093 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSFILTER ForceRemove 2010-12-29 16:37:34,093 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSFILTER not found 2010-12-29 16:37:34,093 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIM 2010-12-29 16:37:34,593 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIM ForceRemove 2010-12-29 16:37:34,609 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIM not found 2010-12-29 16:37:34,609 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX86 2010-12-29 16:37:35,109 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX86 ForceRemove 2010-12-29 16:37:35,109 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX86 not found 2010-12-29 16:37:35,109 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX86 2010-12-29 16:37:35,609 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX86 ForceRemove 2010-12-29 16:37:35,609 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX86 not found 2010-12-29 16:37:35,609 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX86 2010-12-29 16:37:36,109 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX86 ForceRemove 2010-12-29 16:37:36,109 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX86 not found 2010-12-29 16:37:36,109 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX64 2010-12-29 16:37:36,640 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX64 ForceRemove 2010-12-29 16:37:36,640 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX64 not found 2010-12-29 16:37:36,656 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX64 2010-12-29 16:37:37,156 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX64 ForceRemove 2010-12-29 16:37:37,156 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX64 not found 2010-12-29 16:37:37,156 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX64 2010-12-29 16:37:37,671 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX64 ForceRemove 2010-12-29 16:37:37,671 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX64 not found 2010-12-29 16:37:37,671 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIX 2010-12-29 16:37:38,171 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIX ForceRemove 2010-12-29 16:37:38,171 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIX not found 2010-12-29 16:37:38,171 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIA 2010-12-29 16:37:38,671 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIA ForceRemove 2010-12-29 16:37:38,671 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIA not found 2010-12-29 16:37:38,671 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWD 2010-12-29 16:37:39,187 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWD ForceRemove 2010-12-29 16:37:39,187 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWD not found 2010-12-29 16:37:39,187 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVG9WD 2010-12-29 16:37:39,687 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVG9WD ForceRemove 2010-12-29 16:37:39,687 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVG9WD not found 2010-12-29 16:37:39,687 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVERXPX 2010-12-29 16:37:40,187 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVERXPX ForceRemove 2010-12-29 16:37:40,187 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVERXPX not found 2010-12-29 16:37:40,187 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSERHRXPX 2010-12-29 16:37:40,687 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSERHRXPX ForceRemove 2010-12-29 16:37:40,687 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSERHRXPX not found 2010-12-29 16:37:40,703 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIMXPX 2010-12-29 16:37:41,203 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIMXPX ForceRemove 2010-12-29 16:37:41,203 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIMXPX not found 2010-12-29 16:37:41,203 INFO Processing registry SOFTWARE\AVG\Clients 2010-12-29 16:37:41,453 DEBUG Key SOFTWARE\AVG\Clients ForceRemove 2010-12-29 16:37:41,453 DEBUG Key SOFTWARE\AVG\Clients not found 2010-12-29 16:37:41,453 INFO Processing registry SOFTWARE\AVG\AVG8 2010-12-29 16:37:41,718 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove 2010-12-29 16:37:41,718 DEBUG Key SOFTWARE\AVG\AVG8 not found 2010-12-29 16:37:41,718 INFO Processing registry SOFTWARE\AVG\AVG9 2010-12-29 16:37:41,968 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove 2010-12-29 16:37:41,968 DEBUG Key SOFTWARE\AVG\AVG9 not found 2010-12-29 16:37:41,968 INFO Processing registry SOFTWARE\AVG\AVG10 2010-12-29 16:37:42,218 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove 2010-12-29 16:37:42,250 DEBUG Key SOFTWARE\AVG\AVG10 not found 2010-12-29 16:37:42,250 INFO Processing registry SOFTWARE\AVG\AVG10 2010-12-29 16:37:42,500 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove 2010-12-29 16:37:42,500 DEBUG Key SOFTWARE\AVG\AVG10 not found 2010-12-29 16:37:42,531 INFO Processing registry SOFTWARE\AVG\AVG IDS 2010-12-29 16:37:42,781 DEBUG Key SOFTWARE\AVG\AVG IDS ForceRemove 2010-12-29 16:37:42,781 DEBUG Key SOFTWARE\AVG\AVG IDS not found 2010-12-29 16:37:42,781 INFO Processing registry SOFTWARE\AVG\AVG IDS 2010-12-29 16:37:43,062 DEBUG Key SOFTWARE\AVG\AVG IDS ForceRemove 2010-12-29 16:37:43,062 DEBUG Key SOFTWARE\AVG\AVG IDS not found 2010-12-29 16:37:43,062 INFO Processing registry SOFTWARE\AVG 2010-12-29 16:37:43,312 DEBUG Value SOFTWARE\AVG:DumpType Remove 2010-12-29 16:37:43,312 DEBUG Value SOFTWARE\AVG:DumpType not present - Key not found 2010-12-29 16:37:43,312 INFO Processing registry SOFTWARE\AVG\AvgAdmin10 2010-12-29 16:37:43,562 DEBUG Key SOFTWARE\AVG\AvgAdmin10 ForceRemove 2010-12-29 16:37:43,578 DEBUG Key SOFTWARE\AVG\AvgAdmin10 not found 2010-12-29 16:37:43,578 INFO Processing registry SOFTWARE\AVG\AvgAdmin10 2010-12-29 16:37:43,843 DEBUG Key SOFTWARE\AVG\AvgAdmin10 ForceRemove 2010-12-29 16:37:43,843 DEBUG Key SOFTWARE\AVG\AvgAdmin10 not found 2010-12-29 16:37:43,843 INFO Processing registry SOFTWARE\AVG 2010-12-29 16:37:44,093 DEBUG Key SOFTWARE\AVG ForceRemove 2010-12-29 16:37:44,093 DEBUG Key SOFTWARE\AVG not found 2010-12-29 16:37:44,093 INFO Processing registry SOFTWARE\AVG 2010-12-29 16:37:44,343 DEBUG Key SOFTWARE\AVG ForceRemove 2010-12-29 16:37:44,343 DEBUG Key SOFTWARE\AVG not found 2010-12-29 16:37:44,343 INFO Processing registry SOFTWARE\AVG Security Toolbar 2010-12-29 16:37:44,593 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove 2010-12-29 16:37:44,593 DEBUG Key SOFTWARE\AVG Security Toolbar not found 2010-12-29 16:37:44,593 INFO Processing registry SOFTWARE\AVG Security Toolbar 2010-12-29 16:37:44,843 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove 2010-12-29 16:37:44,843 DEBUG Key SOFTWARE\AVG Security Toolbar not found 2010-12-29 16:37:44,843 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG 2010-12-29 16:37:45,359 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG ForceRemove 2010-12-29 16:37:45,359 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG not found 2010-12-29 16:37:45,359 INFO Processing registry SOFTWARE\AVG\AVG8 2010-12-29 16:37:45,609 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove 2010-12-29 16:37:45,609 DEBUG Key SOFTWARE\AVG\AVG8 not found 2010-12-29 16:37:45,609 INFO Processing registry SOFTWARE\AVG\AVG9 2010-12-29 16:37:45,859 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove 2010-12-29 16:37:45,859 DEBUG Key SOFTWARE\AVG\AVG9 not found 2010-12-29 16:37:45,859 INFO Processing registry SOFTWARE\AVG\AVG10 2010-12-29 16:37:46,109 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove 2010-12-29 16:37:46,109 DEBUG Key SOFTWARE\AVG\AVG10 not found 2010-12-29 16:37:46,109 INFO Processing registry SOFTWARE\AVG\AVG10 2010-12-29 16:37:46,359 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove 2010-12-29 16:37:46,359 DEBUG Key SOFTWARE\AVG\AVG10 not found 2010-12-29 16:37:46,359 INFO Processing registry SOFTWARE\AVG 2010-12-29 16:37:46,609 DEBUG Key SOFTWARE\AVG ForceRemove 2010-12-29 16:37:46,609 DEBUG Key SOFTWARE\AVG not found 2010-12-29 16:37:46,609 INFO Processing registry SOFTWARE\AVG 2010-12-29 16:37:46,890 DEBUG Key SOFTWARE\AVG ForceRemove 2010-12-29 16:37:46,890 DEBUG Key SOFTWARE\AVG not found 2010-12-29 16:37:46,890 INFO Processing registry SOFTWARE\AVG Security Toolbar 2010-12-29 16:37:47,140 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove 2010-12-29 16:37:47,140 DEBUG Key SOFTWARE\AVG Security Toolbar not found 2010-12-29 16:37:47,140 INFO Processing registry SOFTWARE\AVG Security Toolbar 2010-12-29 16:37:47,390 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove 2010-12-29 16:37:47,390 DEBUG Key SOFTWARE\AVG Security Toolbar not found 2010-12-29 16:37:47,390 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks 2010-12-29 16:37:47,890 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} Remove 2010-12-29 16:37:47,890 INFO Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} is not present 2010-12-29 16:37:48,390 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2010-12-29 16:37:48,906 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2010-12-29 16:37:48,906 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2010-12-29 16:37:48,906 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser 2010-12-29 16:37:49,406 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove 2010-12-29 16:37:49,406 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present 2010-12-29 16:37:49,906 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2010-12-29 16:37:50,421 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2010-12-29 16:37:50,421 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2010-12-29 16:37:50,421 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} 2010-12-29 16:37:50,921 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove 2010-12-29 16:37:50,921 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found 2010-12-29 16:37:50,921 INFO Processing registry SOFTWARE\AppDataLow\Avg 2010-12-29 16:37:51,171 DEBUG Key SOFTWARE\AppDataLow\Avg ForceRemove 2010-12-29 16:37:51,171 DEBUG Key SOFTWARE\AppDataLow\Avg not found 2010-12-29 16:37:51,171 INFO Processing registry SOFTWARE\AppDataLow\Software\AVG Security Toolbar 2010-12-29 16:37:51,671 DEBUG Key SOFTWARE\AppDataLow\Software\AVG Security Toolbar ForceRemove 2010-12-29 16:37:51,687 DEBUG Key SOFTWARE\AppDataLow\Software\AVG Security Toolbar not found 2010-12-29 16:37:51,687 INFO Processing registry .avgdxa 2010-12-29 16:37:51,953 DEBUG Key .avgdxa ForceRemove 2010-12-29 16:37:51,953 DEBUG Key .avgdxa not found 2010-12-29 16:37:51,953 INFO Processing registry aAvgAPI.AvgBro 2010-12-29 16:37:52,203 DEBUG Key aAvgAPI.AvgBro ForceRemove 2010-12-29 16:37:52,203 DEBUG Key aAvgAPI.AvgBro not found 2010-12-29 16:37:52,203 INFO Processing registry AVG.Office 2010-12-29 16:37:52,453 DEBUG Key AVG.Office ForceRemove 2010-12-29 16:37:52,453 DEBUG Key AVG.Office not found 2010-12-29 16:37:52,453 INFO Processing registry AVG.Office.8 2010-12-29 16:37:52,703 DEBUG Key AVG.Office.8 ForceRemove 2010-12-29 16:37:52,703 DEBUG Key AVG.Office.8 not found 2010-12-29 16:37:52,703 INFO Processing registry AvgDiagFile 2010-12-29 16:37:52,953 DEBUG Key AvgDiagFile ForceRemove 2010-12-29 16:37:52,953 DEBUG Key AvgDiagFile not found 2010-12-29 16:37:52,953 INFO Processing registry AvgDiagExFile 2010-12-29 16:37:53,203 DEBUG Key AvgDiagExFile ForceRemove 2010-12-29 16:37:53,203 DEBUG Key AvgDiagExFile not found 2010-12-29 16:37:53,203 INFO Processing registry avgtoolbar.AVGTOOLBAR 2010-12-29 16:37:53,453 DEBUG Key avgtoolbar.AVGTOOLBAR ForceRemove 2010-12-29 16:37:53,453 DEBUG Key avgtoolbar.AVGTOOLBAR not found 2010-12-29 16:37:53,453 INFO Processing registry avgtoolbar.AVGTOOLBARMenu Button 2010-12-29 16:37:53,968 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove 2010-12-29 16:37:53,968 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button not found 2010-12-29 16:37:53,968 INFO Processing registry avgtoolbar.AVGTOOLBARToggle Button 2010-12-29 16:37:54,468 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove 2010-12-29 16:37:54,468 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button not found 2010-12-29 16:37:54,468 INFO Processing registry LinkScannerIE.NavFilter 2010-12-29 16:37:54,718 DEBUG Key LinkScannerIE.NavFilter ForceRemove 2010-12-29 16:37:54,718 DEBUG Key LinkScannerIE.NavFilter not found 2010-12-29 16:37:54,718 INFO Processing registry LinkScannerIE.NavFilter.1 2010-12-29 16:37:54,984 DEBUG Key LinkScannerIE.NavFilter.1 ForceRemove 2010-12-29 16:37:54,984 DEBUG Key LinkScannerIE.NavFilter.1 not found 2010-12-29 16:37:54,984 INFO Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} 2010-12-29 16:37:55,484 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove 2010-12-29 16:37:55,484 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found 2010-12-29 16:37:55,484 INFO Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} 2010-12-29 16:37:55,984 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove 2010-12-29 16:37:55,984 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found 2010-12-29 16:37:55,984 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} 2010-12-29 16:37:56,484 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove 2010-12-29 16:37:56,484 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found 2010-12-29 16:37:56,484 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} 2010-12-29 16:37:57,015 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove 2010-12-29 16:37:57,015 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found 2010-12-29 16:37:57,015 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} 2010-12-29 16:37:57,515 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove 2010-12-29 16:37:57,515 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found 2010-12-29 16:37:57,515 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} 2010-12-29 16:37:58,015 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove 2010-12-29 16:37:58,015 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found 2010-12-29 16:37:58,015 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} 2010-12-29 16:37:58,515 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove 2010-12-29 16:37:58,515 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found 2010-12-29 16:37:58,515 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990} 2010-12-29 16:37:59,031 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove 2010-12-29 16:37:59,031 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found 2010-12-29 16:37:59,031 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} 2010-12-29 16:37:59,531 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove 2010-12-29 16:37:59,531 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found 2010-12-29 16:37:59,531 INFO Processing registry CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} 2010-12-29 16:38:00,031 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} ForceRemove 2010-12-29 16:38:00,031 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} not found 2010-12-29 16:38:00,031 INFO Processing registry CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} 2010-12-29 16:38:00,546 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove 2010-12-29 16:38:00,546 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found 2010-12-29 16:38:00,546 INFO Processing registry CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2010-12-29 16:38:01,046 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2010-12-29 16:38:01,046 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2010-12-29 16:38:01,046 INFO Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} 2010-12-29 16:38:01,546 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove 2010-12-29 16:38:01,546 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found 2010-12-29 16:38:01,546 INFO Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} 2010-12-29 16:38:02,078 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove 2010-12-29 16:38:02,078 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found 2010-12-29 16:38:02,078 INFO Processing registry Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} 2010-12-29 16:38:02,578 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} ForceRemove 2010-12-29 16:38:02,578 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} not found 2010-12-29 16:38:02,578 INFO Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} 2010-12-29 16:38:03,078 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove 2010-12-29 16:38:03,078 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found 2010-12-29 16:38:03,078 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} 2010-12-29 16:38:03,578 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove 2010-12-29 16:38:03,578 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found 2010-12-29 16:38:03,578 INFO Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} 2010-12-29 16:38:04,093 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove 2010-12-29 16:38:04,093 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found 2010-12-29 16:38:04,093 INFO Processing registry TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2010-12-29 16:38:04,593 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2010-12-29 16:38:04,593 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2010-12-29 16:38:04,593 INFO Processing registry CLSID\{8B39AD4E-1AB3-4AE1-B533-706F1CACED83} 2010-12-29 16:38:05,093 DEBUG Key CLSID\{8B39AD4E-1AB3-4AE1-B533-706F1CACED83} ForceRemove 2010-12-29 16:38:05,093 DEBUG Key CLSID\{8B39AD4E-1AB3-4AE1-B533-706F1CACED83} not found 2010-12-29 16:38:05,093 INFO Processing registry CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} 2010-12-29 16:38:05,609 DEBUG Key CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove 2010-12-29 16:38:05,609 DEBUG Key CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found 2010-12-29 16:38:05,609 INFO Processing registry CLSID\{DC182551-99C7-4e28-A8F3-8DCFC4745C4C} 2010-12-29 16:38:06,109 DEBUG Key CLSID\{DC182551-99C7-4e28-A8F3-8DCFC4745C4C} ForceRemove 2010-12-29 16:38:06,109 DEBUG Key CLSID\{DC182551-99C7-4e28-A8F3-8DCFC4745C4C} not found 2010-12-29 16:38:06,109 DEBUG Removing Session Manager values 2010-12-29 16:38:06,109 DEBUG Registry remover failed for some registry item(s) 2010-12-29 16:38:06,109 INFO ***** Files and folders ***** 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 0 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 1 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 2 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 3 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 4 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 5 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 6 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 7 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 8 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 9 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 10 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 11 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 12 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 13 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 14 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 15 2010-12-29 16:38:06,359 DEBUG Missing ParentDir path for fileItem number 16 2010-12-29 16:38:06,359 DEBUG Processing item 'C:\Documents and Settings\User.MARCIA-6X7H850P\Application Data\AVGTOOLBAR' 2010-12-29 16:38:06,359 INFO Directory 'C:\Documents and Settings\User.MARCIA-6X7H850P\Application Data\AVGTOOLBAR' not found 2010-12-29 16:38:06,875 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2010-12-29 16:38:06,875 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\avg 8.0' 2010-12-29 16:38:06,875 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\avg 8.0' not found 2010-12-29 16:38:07,390 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\avg free 8.0' 2010-12-29 16:38:07,390 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\avg free 8.0' not found 2010-12-29 16:38:07,890 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\avg 8.5' 2010-12-29 16:38:07,890 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\avg 8.5' not found 2010-12-29 16:38:08,390 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\avg free 8.5' 2010-12-29 16:38:08,390 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\avg free 8.5' not found 2010-12-29 16:38:08,906 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg 8.0.lnk' 2010-12-29 16:38:08,906 INFO File 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg 8.0.lnk' not found 2010-12-29 16:38:09,406 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg free 8.0.lnk' 2010-12-29 16:38:09,406 INFO File 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg free 8.0.lnk' not found 2010-12-29 16:38:09,906 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg 8.5.lnk' 2010-12-29 16:38:09,906 INFO File 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg 8.5.lnk' not found 2010-12-29 16:38:10,421 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg free 8.5.lnk' 2010-12-29 16:38:10,421 INFO File 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg free 8.5.lnk' not found 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 27 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 28 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 29 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 30 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 31 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 32 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 33 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 34 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 35 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 36 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 37 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 38 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 39 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 40 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 41 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 42 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 43 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 44 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 45 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 46 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 47 2010-12-29 16:38:10,921 DEBUG Missing ParentDir path for fileItem number 48 2010-12-29 16:38:10,921 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG Security Toolbar\Languages' 2010-12-29 16:38:10,921 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG Security Toolbar\Languages' not found 2010-12-29 16:38:11,421 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG Security Toolbar\Update' 2010-12-29 16:38:11,421 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG Security Toolbar\Update' not found 2010-12-29 16:38:11,937 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG Security Toolbar' 2010-12-29 16:38:11,937 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG Security Toolbar' not found 2010-12-29 16:38:12,453 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2010-12-29 16:38:12,453 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg 9.0.lnk' 2010-12-29 16:38:12,453 INFO File 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg 9.0.lnk' not found 2010-12-29 16:38:12,953 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg free 9.0.lnk' 2010-12-29 16:38:12,953 INFO File 'C:\Documents and Settings\All Users.WINDOWS\Desktop\avg free 9.0.lnk' not found 2010-12-29 16:38:13,453 DEBUG Missing ParentDir path for fileItem number 55 2010-12-29 16:38:13,453 DEBUG Missing ParentDir path for fileItem number 56 2010-12-29 16:38:13,453 DEBUG Missing ParentDir path for fileItem number 57 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 58 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 59 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 60 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 61 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 62 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 63 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 64 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 65 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 66 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 67 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 68 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 69 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 70 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 71 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 72 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 73 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 74 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 75 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 76 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 77 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 78 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 79 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 80 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 81 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 82 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 83 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 84 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 85 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 86 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 87 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 88 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 89 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 90 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 91 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 92 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 93 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 94 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 95 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 96 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 97 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 98 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 99 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 100 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 101 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 102 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 103 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 104 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 105 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 106 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 107 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 108 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 109 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 110 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 111 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 112 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 113 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 114 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 115 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 116 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 117 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 118 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 119 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 120 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 121 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 122 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 123 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 124 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 125 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 126 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 127 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 128 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 129 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 130 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 131 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 132 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 133 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 134 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 135 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 136 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 137 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 138 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 139 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 140 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 141 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 142 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 143 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 144 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 145 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 146 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 147 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 148 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 149 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 150 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 151 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 152 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 153 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 154 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 155 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 156 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 157 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 158 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 159 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 160 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 161 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 162 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 163 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 164 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 165 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 166 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 167 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 168 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 169 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 170 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 171 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 172 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 173 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 174 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 175 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 176 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 177 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 178 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 179 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 180 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 181 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 182 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 183 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 184 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 185 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 186 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 187 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 188 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 189 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 190 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 191 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 192 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 193 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 194 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 195 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 196 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 197 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 198 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 199 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 200 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 201 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 202 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 203 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 204 2010-12-29 16:38:13,468 DEBUG Missing ParentDir path for fileItem number 205 2010-12-29 16:38:13,468 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2010-12-29 16:38:13,468 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2010-12-29 16:38:13,468 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2010-12-29 16:38:13,468 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2010-12-29 16:38:13,468 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2010-12-29 16:38:13,468 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2010-12-29 16:38:13,468 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\AVG' 2010-12-29 16:38:13,468 INFO Directory 'C:\WINDOWS\System32\Drivers\AVG' not found 2010-12-29 16:38:13,984 DEBUG Processing item 'C:\WINDOWS\System32' 2010-12-29 16:38:13,984 DEBUG Processing item 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget' 2010-12-29 16:38:13,984 INFO Directory 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget' not found 2010-12-29 16:38:14,484 DEBUG Missing ParentDir path for fileItem number 215 2010-12-29 16:38:14,484 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10\SetupCoreBackup' 2010-12-29 16:38:14,484 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10\SetupCoreBackup' not found 2010-12-29 16:38:15,000 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10\SetupBackup' 2010-12-29 16:38:15,000 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10\SetupBackup' not found 2010-12-29 16:38:15,500 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10\Chjw' 2010-12-29 16:38:15,500 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10\Chjw' not found 2010-12-29 16:38:16,000 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10\Antispam' 2010-12-29 16:38:16,000 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10\Antispam' not found 2010-12-29 16:38:16,515 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10' 2010-12-29 16:38:16,515 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Application Data\AVG10' not found 2010-12-29 16:38:17,015 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\AVG 2011' 2010-12-29 16:38:17,015 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\AVG 2011' not found 2010-12-29 16:38:17,531 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\AVG FREE 2011' 2010-12-29 16:38:17,531 INFO Directory 'C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\AVG FREE 2011' not found 2010-12-29 16:38:18,046 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Desktop\AVG 2011.lnk' 2010-12-29 16:38:18,046 INFO File 'C:\Documents and Settings\All Users.WINDOWS\Desktop\AVG 2011.lnk' not found 2010-12-29 16:38:18,546 DEBUG Processing item 'C:\Documents and Settings\All Users.WINDOWS\Desktop\AVG FREE 2011.lnk' 2010-12-29 16:38:18,546 INFO File 'C:\Documents and Settings\All Users.WINDOWS\Desktop\AVG FREE 2011.lnk' not found 2010-12-29 16:38:19,046 DEBUG Processing item 'C:\WINDOWS\SysWOW64\Drivers\AVG' 2010-12-29 16:38:19,046 INFO Directory 'C:\WINDOWS\SysWOW64\Drivers\AVG' not found 2010-12-29 16:38:19,546 DEBUG Missing ParentDir path for fileItem number 226

LDTate

Post #24December 29, 2010, 5:53 PM UTC

That's weird.

Other than that, how's it running?

We can also do this:

Click "Start"> "Run"> type in Regedit tap Enter Key

Make sure "My Computer" is highlighted

Click "Edit"> "Find"
Type in AVG Anti-Virus 2011 tap Enter Key.
Right Click on the file if found and select "Delete"

Tap the "F3" Key to find the next entry of the file. Continue using the "F3" Key until it's finished searching.

Close Regedit.

ToddB

Post #25December 30, 2010, 3:58 AM UTC

LDTate- Yes I have run numerous registry searches using the above, “AVG10”, “AVG” (although I was careful with this one) and made numerous registry deletes with those that I thought were AVG in nature but AVG AV 2011 persist for some reason. I am almost tempted to try a repair install of AVG AV 2011 free and then do another uninstall to see if that would do it. Am I making too much of this since it appears that AVG AV 2011 is disabled/outdated and my control panel security center shows that my Bitdefender Anitvirus is updated and scanning? Do you believe it best for me to leave well enough alone at this point? Other than that my Laptop is working GREAT

and I want to once again to THANK YOU for your OUTSTANDING assistance!

LDTate

Post #26December 30, 2010, 12:40 PM UTC

Before installing AVG again, do this:

The following will implement some cleanup procedures as well as reset System Restore points:

For XP:

Click START run
Now type ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the /, it needs to be there.

For Vista / Windows 7

Click START Search
Now type ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the /, it needs to be there.

Here's my usual all clean post

To be on the safe side, I would also change all my passwords.

This infection appears to have been cleaned, but as the malware could be configured to run any program a remote attacker requires, it's impossible to be 100% sure that any machine is clean.

Log looks good

Make your Internet Explorer more secure - This can be done by following these simple instructions:
- From within Internet Explorer click on the Tools menu and then click on Options.
- Click once on the Security tab
- Click once on the Internet icon so it becomes highlighted.
- Click once on the Custom Level button.
- Change the Download signed ActiveX controls to Prompt
- Change the Download unsigned ActiveX controls to Disable
- Change the Initialize and script ActiveX controls not marked as safe to Disable
- Change the Installation of desktop items to Prompt
- Change the Launching programs and files in an IFRAME to Prompt
- Change the Navigate sub-frames across different domains to Prompt
- When all these settings have been made, click on the OK button.
- If it prompts you as to whether or not you want to save the settings, press the Yes button.
- Next press the Apply button and then the OK to exit the Internet Properties page.
Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week
(Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
Use a Firewall - I can not stress how important it is that you use a Firewall on your computer.
Without a firewall your computer is succeptible to being hacked and taken over.
I am very serious about this and see it happen almost every day with my clients.
Simply using a Firewall in its default configuration can lower your risk greatly.
WOT , Web of Trust, As 'Googling' is such an integral part of internet life, this free browser add on warns you about risky websites that try to scam visitors, deliver malware or send spam. It is especially helpful when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
Green to go
Yellow for caution
Red to stop
WOT has an addon available for both Firefox and IE.
Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly.
This will ensure your computer has always the latest security updates available installed on your computer.
If there are new updates to install, install them immediately, reboot your computer, and revisit the site
until there are no more critical updates.

Only run one Anti-Virus and Firewall program.

I would suggest you read:
PC Safety and Security–What Do I Need?.
How to Prevent Malware:

ToddB

Post #27December 30, 2010, 6:48 PM UTC

LDTate- Complete your instructions above. Other than running ComboFix is there another tool that I could use to determine if AVG AV 2011 is still on my machine? Going to play with it awhile longer before I resort to reinstalling AVG AV 2011. I just want to THANK YOU for your assistance with this! This forum and folks that run it are TOP NOTCH in my book!

LDTate

Post #28December 30, 2010, 6:56 PM UTC

DDS would show it

ToddB

Post #29December 31, 2010, 8:11 PM UTC

LDTate- I will use DDS to determine where I sit with AVG AV 2011. Thank you again for sticking with me on this one and for your prompt and helpful assistance!