Spyware / Malware / Virus Removal

Unknown infection/malware ? [Solved]

59 min read

Looking for the outcome? Ask AI

desertrider Topic Starter

Post #1May 20, 2012, 6:01 PM UTC

[After opening an e-mail, The computer stopped responding. I rebooted into safe mode and ran Malwarebytes, and Kaspersky antivirus. Nothing was found. While booting into safe mode and later a normal boot to windows, it takes two to three minutes to get to the desktop. all keypresses are slow to react. I tried to restore to an eariler date but it failed. Initally I couldn't log onto the internet but now, very slowly, it will connect. I also ran Ccleaner, ATF, and OTL. I am posting the extras.txt file from OTL and would appreciate a solution if possible.

Thank You

OTL Extras logfile created on: 5/20/2012 12:13:01 PM - Run 1
OTL by OldTimer - Version 3.2.43.0 Folder = C:\Documents and Settings\JW\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.75 Gb Total Physical Memory | 2.18 Gb Available Physical Memory | 79.29% Memory free
4.64 Gb Paging File | 4.10 Gb Available in Paging File | 88.50% Paging File free
Paging file location(s): D:\pagefile.sys 2096 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78.13 Gb Total Space | 55.80 Gb Free Space | 71.43% Space Free | Partition Type: NTFS
Drive D: | 97.65 Gb Total Space | 86.46 Gb Free Space | 88.53% Space Free | Partition Type: NTFS
Drive E: | 70.91 Gb Total Space | 70.32 Gb Free Space | 99.17% Space Free | Partition Type: NTFS
Drive F: | 200.43 Gb Total Space | 178.33 Gb Free Space | 88.97% Space Free | Partition Type: NTFS
Drive G: | 6.01 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: JIM | User Name: JW | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"G:\setup\hpznui01.exe" = G:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\Program Files\HP\Digital Imaging\{9FEF1A18-8F26-4F49-A5A4-956C12210624}\setup\hpznui01.exe" = C:\Program Files\HP\Digital Imaging\{9FEF1A18-8F26-4F49-A5A4-956C12210624}\setup\hpznui01.exe:*:Enabled:hpznui01.exe – (Hewlett-Packard)
"H:\setup\hpznui01.exe" = H:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe – ()
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Google\Google Earth\client\googleearth.exe" = C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth – (Google)
"D:\pwc_pubs\jre\1.3.1\bin\javaw.exe" = D:\pwc_pubs\jre\1.3.1\bin\javaw.exe:*:Enabled:javaw
"D:\Program Files\Rand McNally\Rand McNally TND Dock\TNDDock.exe" = D:\Program Files\Rand McNally\Rand McNally TND Dock\TNDDock.exe:*:Enabled:TNDDock
"C:\Program Files\AVG\AVG10\avgmfapx.exe" = C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:AVG Installer
"G:\setup\hpznui01.exe" = G:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test – (Microsoft Corporation)
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe" = C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth – (Google)
"C:\WINDOWS\system32\mmc.exe" = C:\WINDOWS\system32\mmc.exe:*:Enabled:Microsoft Management Console – (Microsoft Corporation)
"F:\Program Files\eMule\emule.exe" = F:\Program Files\eMule\emule.exe:*:Disabled:eMule
"C:\Program Files\AVG\AVG10\avgdiagex.exe" = C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Enabled:AVG Diagnostics 2011
"C:\Program Files\AVG\AVG10\avgnsx.exe" = C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Online Shield
"C:\Program Files\AVG\AVG10\avgam.exe" = C:\Program Files\AVG\AVG10\avgam.exe:*:Enabled:AVG Alert manager
"C:\Program Files\AVG\AVG10\avgemcx.exe" = C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Personal E-mail Scanner
"F:\Program Files\Steam\Steam.exe" = F:\Program Files\Steam\Steam.exe:*:Enabled:Steam – (Valve Corporation)
"C:\Program Files\HP\Digital Imaging\{9FEF1A18-8F26-4F49-A5A4-956C12210624}\setup\hpznui01.exe" = C:\Program Files\HP\Digital Imaging\{9FEF1A18-8F26-4F49-A5A4-956C12210624}\setup\hpznui01.exe:*:Enabled:hpznui01.exe – (Hewlett-Packard)
"H:\setup\hpznui01.exe" = H:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe – ()
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit – (Apple Inc.)
"F:\Program Files\Steam\SteamApps\common\call of duty modern warfare 3\iw5sp.exe" = F:\Program Files\Steam\SteamApps\common\call of duty modern warfare 3\iw5sp.exe:*:Enabled:Call of Duty: Modern Warfare 3 – ()
"F:\Program Files\Steam\SteamApps\common\call of duty modern warfare 3\iw5mp_server.exe" = F:\Program Files\Steam\SteamApps\common\call of duty modern warfare 3\iw5mp_server.exe:*:Enabled:Call of Duty: Modern Warfare 3 - Dedicated Server – ()
"F:\Program Files\Steam\SteamApps\common\call of duty modern warfare 3\iw5mp.exe" = F:\Program Files\Steam\SteamApps\common\call of duty modern warfare 3\iw5mp.exe:*:Enabled:Call of Duty: Modern Warfare 3 - Multiplayer – ()
"F:\Program Files\Steam\SteamApps\common\Fallout New Vegas Ultimate Edition Trailer\smp.exe" = F:\Program Files\Steam\SteamApps\common\Fallout New Vegas Ultimate Edition Trailer\smp.exe:*:Disabled:Fallout: New Vegas Ultimate Edition Trailer – (Valve)
"C:\D\pwc_pubs\jre\1.3.1\bin\javaw.exe" = C:\D\pwc_pubs\jre\1.3.1\bin\javaw.exe:*:Disabled:javaw – ()
"F:\Program Files\Steam\SteamApps\common\Scoregasm Trailer\smp.exe" = F:\Program Files\Steam\SteamApps\common\Scoregasm Trailer\smp.exe:*:Disabled:Scoregasm Trailer – (Valve)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller
"{0A042C19-1F48-4952-B3B6-828E8028A187}" = B209a-m
"{0E13CAA3-B5FC-48C0-AA4A-26F5CD0C371C}" = Garmin Lifetime Updater
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{13E0CD71-8363-4C8D-AD06-0D9FD0CAE4E2}" = Rand McNally Dock
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1A22A15D-E88A-427A-90E2-137245143239}" = Garmin Lifetime Updater
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83216029FF}" = Java™ 6 Update 29
"{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}" = Microsoft Games for Windows - LIVE Redistributable
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FA75B40-17C9-4D22-88CA-80A5D52FAB13}" = LightScribe System Software
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{43F6E284-89D5-42D2-AFC6-A651DDBB57AA}" = RR250 CD
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Anti-Virus 2012
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{75247E38-5C9B-45D6-ADF8-E11CB56B4990}" = Network
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager
"{8153ED9A-C94A-426E-9880-5E6775C08B62}" = Apple Mobile Device Support
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{8A809006-C25A-4A3A-9DAB-94659BCDB107}" = NVIDIA PhysX
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{967FB80D-56BD-42EF-A942-9E8C78F984A4}" = Saitek SST Programming Software
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9FEF1A18-8F26-4F49-A5A4-956C12210624}" = HP Photosmart Plus B209a-m All-In-One Driver Software 13.0 Rel .6
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3)
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B65759DD-26C6-4EA6-9014-CA798907EBFD}" = PS_AIO_06_B209a-m_SW_Min
"{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}" = PMB
"{B6FA065F-E1FF-4391-8725-28FDE89B0009}" = Nero BurnExpress
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C6579A65-9CAE-4B31-8B6B-3306E0630A66}" = Apple Software Update
"{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}" = hpPrintProjects
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2AF3E5D-9697-485C-A5AC-E2B9468C446A}" = Safari
"{F3CA05B7-B4C0-4C9B-AAA6-16B868B35DF2}" = TrackIR5
"{F6D6B258-E3CA-4AAC-965A-68D3E3140A8C}" = iTunes
"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"CCleaner" = CCleaner
"CutePDF Writer Installation" = CutePDF Writer 2.8
"Defraggler" = Defraggler
"DivX Setup" = DivX Setup
"Falcon 4.0" = Falcon 4.0
"HiTiles" = HiTiles
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Print Projects" = HP Print Projects 1.0
"HP Smart Web Printing" = HP Smart Web Printing 4.5
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager
"InstallWIX_{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Anti-Virus 2012
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.61.0.1400
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"P&WC Interactive Electronic Technical Manual" = P&WC Interactive Electronic Technical Manual
"PROR" = Microsoft Office Professional 2007
"Speccy" = Speccy
"SplitVision AERO" = SplitVision AERO
"Steam App 42680" = Call of Duty: Modern Warfare 3
"Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer
"Steam App 42750" = Call of Duty: Modern Warfare 3 - Dedicated Server
"VLC media player" = VLC media player 1.1.11
"Windows XP Service Pack" = Windows XP Service Pack 3
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 5/20/2012 7:28:01 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.

Error - 5/20/2012 7:28:01 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.

Error - 5/20/2012 7:28:01 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.

Error - 5/20/2012 7:28:01 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.

Error - 5/20/2012 7:28:01 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.

Error - 5/20/2012 7:28:01 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.

Error - 5/20/2012 7:28:01 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.

Error - 5/20/2012 7:28:01 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.

Error - 5/20/2012 7:28:01 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.

Error - 5/20/2012 11:24:07 AM | Computer Name = JIM | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This operation returned because the timeout period expired.

[ OSession Events ]
Error - 8/28/2011 12:15:49 PM | Computer Name = JIM | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 17204
seconds with 960 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 5/19/2012 10:24:22 PM | Computer Name = JIM | Source = nvgts | ID = 262149
Description = A parity error was detected on \Device\Scsi\nvgts1.

Error - 5/20/2012 12:29:24 AM | Computer Name = JIM | Source = Service Control Manager | ID = 7034
Description = The Ad-Aware service terminated unexpectedly. It has done this 1
time(s).

Error - 5/20/2012 11:27:19 AM | Computer Name = JIM | Source = nvgts | ID = 262149
Description = A parity error was detected on \Device\Scsi\nvgts1.

Error - 5/20/2012 11:27:56 AM | Computer Name = JIM | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
Avgldx86

Error - 5/20/2012 11:46:37 AM | Computer Name = JIM | Source = nvgts | ID = 262153
Description = The device, \Device\Scsi\nvgts1, did not respond within the timeout
period.

Error - 5/20/2012 12:24:05 PM | Computer Name = JIM | Source = nvgts | ID = 262149
Description = A parity error was detected on \Device\Scsi\nvgts1.

Error - 5/20/2012 12:53:44 PM | Computer Name = JIM | Source = nvgts | ID = 262149
Description = A parity error was detected on \Device\Scsi\nvgts1.

Error - 5/20/2012 12:55:21 PM | Computer Name = JIM | Source = nvgts | ID = 262149
Description = A parity error was detected on \Device\Scsi\nvgts1.

Error - 5/20/2012 12:56:45 PM | Computer Name = JIM | Source = nvgts | ID = 262149
Description = A parity error was detected on \Device\Scsi\nvgts1.

Error - 5/20/2012 12:57:06 PM | Computer Name = JIM | Source = nvgts | ID = 262149
Description = A parity error was detected on \Device\Scsi\nvgts1.

< End of report >

Tomk

Post #2May 22, 2012, 3:31 AM UTC

Hi desertrider,

My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for the issues on this machine.
Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.

Your computer seems to be hanging trying to update windows… but I can't tell why, especially without the other OTL log.

Please rerun OTL. There will only be one log this time. Please post it here.

desertrider

Post #3May 23, 2012, 12:59 PM UTC

Thank you for your help. Here is the OTL.txt file you requested.

OTL logfile created on: 5/23/2012 7:46:43 AM - Run 2
OTL by OldTimer - Version 3.2.43.0 Folder = C:\Documents and Settings\JW\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.75 Gb Total Physical Memory | 2.12 Gb Available Physical Memory | 77.10% Memory free
4.64 Gb Paging File | 4.15 Gb Available in Paging File | 89.52% Paging File free
Paging file location(s): D:\pagefile.sys 2096 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78.13 Gb Total Space | 55.56 Gb Free Space | 71.11% Space Free | Partition Type: NTFS
Drive D: | 97.65 Gb Total Space | 86.46 Gb Free Space | 88.53% Space Free | Partition Type: NTFS
Drive E: | 70.91 Gb Total Space | 70.32 Gb Free Space | 99.17% Space Free | Partition Type: NTFS
Drive F: | 200.43 Gb Total Space | 178.06 Gb Free Space | 88.84% Space Free | Partition Type: NTFS
Drive G: | 6.01 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: JIM | User Name: JW | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\JW\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe (Kaspersky Lab ZAO)
PRC - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtblfs.exe (Kaspersky Lab ZAO)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

========== Modules (No Company Name) ==========

MOD - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\qtgui4.dll ()
MOD - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\qtsql4.dll ()
MOD - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\qtscript4.dll ()
MOD - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\qtnetwork4.dll ()
MOD - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\qtcore4.dll ()
MOD - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\qtdeclarative4.dll ()
MOD - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\imageformats\qgif4.dll ()
MOD - C:\WINDOWS\system32\cpwmon2k.dll ()

========== Win32 Services (SafeList) ==========

SRV - (AdobeFlashPlayerUpdateSvc) – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (PMBDeviceInfoProvider) – D:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
SRV - (AVP) – C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe (Kaspersky Lab ZAO)
SRV - (Steam Client Service) – C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (NAUpdate) – C:\Program Files\Nero\Update\NASvc.exe (Nero AG)
SRV - (ForceWare Intelligent Application Manager (IAM)) ForceWare Intelligent Application Manager (IAM) – C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe ()
SRV - (nSvcIp) – C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe ()

========== Driver Services (SafeList) ==========

DRV - (WDICA) – File not found
DRV - (SBRE) – C:\WINDOWS\system32\drivers\SBREdrv.sys File not found
DRV - (PDRFRAME) – File not found
DRV - (PDRELI) – File not found
DRV - (PDFRAME) – File not found
DRV - (PDCOMP) – File not found
DRV - (PCIDump) – File not found
DRV - (lbrtfdc) – File not found
DRV - (i2omgmt) – File not found
DRV - (Changer) – File not found
DRV - (AVGIDSDriver) – system32\DRIVERS\AVGIDSDriver.Sys File not found
DRV - (.avgldx86) – File not found
DRV - (KLIF) – C:\WINDOWS\system32\drivers\klif.sys (Kaspersky Lab)
DRV - (Avgtdix) – C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgrkx86) – C:\WINDOWS\system32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (klim5) – C:\WINDOWS\system32\drivers\klim5.sys (Kaspersky Lab ZAO)
DRV - (kl2) – C:\WINDOWS\system32\drivers\kl2.sys (Kaspersky Lab ZAO)
DRV - (KL1) – C:\WINDOWS\system32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (Avgmfx86) – C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSEH) – C:\WINDOWS\system32\drivers\AVGIDSEH.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSShim) – C:\WINDOWS\system32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSFilter) – C:\WINDOWS\system32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgldx86) – C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (npusbio) – C:\WINDOWS\system32\drivers\npusbio.sys ()
DRV - (Monfilt) – C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) – C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (klmouflt) – C:\WINDOWS\system32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (nvnetbus) – C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) – C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (nvgts) – C:\WINDOWS\system32\drivers\nvgts.sys (NVIDIA Corporation)
DRV - (SaiNtBus) – C:\WINDOWS\system32\drivers\SaiBus.sys (Saitek)
DRV - (SaiMini) – C:\WINDOWS\system32\drivers\SaiMini.sys (Saitek)
DRV - (SaiH053c) – C:\WINDOWS\system32\drivers\SaiH053c.sys (Saitek)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}…00000044b02c96f
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: E:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/12/16 16:16:28 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\[removed] [2012/05/04 19:59:18 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\[removed] [2012/05/04 19:59:19 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/01/03 15:56:53 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/01/03 15:56:53 | 000,000,000 | —D | M]

O1 HOSTS File: ([2012/05/21 15:46:51 | 000,442,832 | R— | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 15217 more lines…
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe (Kaspersky Lab ZAO)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll (NVIDIA)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Reg Error: Key error.)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {8BF7B588-F4AC-4A6E-AF63-F664449EED2E} https://pk.knighttrans.com/wps/PA_1_NO2UF4I…ts/DMPlugin.cab (PDM Plugin2)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/3.0.1.0…inAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DD938FBB-FE52-49EC-A2DB-C9B2CEBC291E}: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - (C:\WINDOWS\system32\klogon.dll) - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/07/09 21:19:05 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2011/09/29 20:41:09 | 000,000,116 | R— | M] () - G:\autorun.inf – [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012/05/20 12:11:26 | 000,595,456 | —- | C] (OldTimer Tools) – C:\Documents and Settings\JW\Desktop\OTL.exe
[2012/05/20 10:59:24 | 000,000,000 | —D | C] – C:\Documents and Settings\JW\Desktop\tdsskiller
[2012/05/20 10:47:56 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\GFI Software
[2012/05/20 10:35:39 | 000,050,688 | —- | C] (Atribune.org) – C:\Documents and Settings\JW\Desktop\ATF_Cleaner.exe
[2012/05/19 20:03:11 | 000,000,000 | RH-D | C] – C:\Documents and Settings\JW\Recent
[2012/04/26 15:49:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Garmin
[9 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/05/23 07:46:00 | 000,000,878 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/05/23 07:43:47 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/05/23 07:43:35 | 000,000,874 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/05/23 07:43:31 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/05/21 21:24:15 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/05/21 18:52:53 | 000,419,488 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/05/21 18:52:53 | 000,070,304 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/05/21 15:46:51 | 000,442,832 | R— | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2012/05/20 12:11:26 | 000,595,456 | —- | M] (OldTimer Tools) – C:\Documents and Settings\JW\Desktop\OTL.exe
[2012/05/20 11:03:00 | 000,302,592 | —- | M] () – C:\Documents and Settings\JW\Desktop\ohgpckp5.exe
[2012/05/20 10:35:40 | 000,050,688 | —- | M] (Atribune.org) – C:\Documents and Settings\JW\Desktop\ATF_Cleaner.exe
[2012/05/19 20:19:24 | 000,000,211 | RHS- | M] () – C:\boot.ini
[2012/05/18 14:45:59 | 000,009,310 | —- | M] () – C:\Documents and Settings\JW\My Documents\cc_20120518_144549.reg
[2012/05/17 16:04:40 | 000,002,539 | —- | M] () – C:\Documents and Settings\JW\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook 2007.lnk
[2012/05/15 10:31:01 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2012/05/14 08:11:25 | 000,004,854 | —- | M] () – C:\Documents and Settings\JW\My Documents\cc_20120514_081119.reg
[2012/05/12 09:41:12 | 000,268,600 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/05/11 20:17:34 | 000,484,554 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/05/11 20:17:34 | 000,080,824 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/05/08 18:56:56 | 000,000,064 | —- | M] () – C:\WINDOWS\System32\rp_stats.dat
[2012/05/08 18:56:56 | 000,000,044 | —- | M] () – C:\WINDOWS\System32\rp_rules.dat
[2012/04/30 07:23:14 | 000,000,682 | —- | M] () – C:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2012/04/29 13:27:31 | 000,000,650 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/04/29 13:24:07 | 000,026,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\userinit.exe
[2012/04/26 15:49:27 | 000,001,561 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Garmin Lifetime Updater.lnk
[9 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/05/20 14:21:43 | 000,001,077 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Windows Live ID.lnk
[2012/05/20 11:03:00 | 000,302,592 | —- | C] () – C:\Documents and Settings\JW\Desktop\ohgpckp5.exe
[2012/05/18 14:45:56 | 000,009,310 | —- | C] () – C:\Documents and Settings\JW\My Documents\cc_20120518_144549.reg
[2012/05/14 08:11:22 | 000,004,854 | —- | C] () – C:\Documents and Settings\JW\My Documents\cc_20120514_081119.reg
[2012/04/29 13:27:31 | 000,000,650 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/04/26 15:49:26 | 000,001,561 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Garmin Lifetime Updater.lnk
[2012/02/22 21:07:45 | 000,236,044 | —- | C] () – C:\Documents and Settings\JW\Local Settings\Application Data\census.cache
[2012/02/22 21:07:40 | 000,175,228 | —- | C] () – C:\Documents and Settings\JW\Local Settings\Application Data\ars.cache
[2012/02/22 20:56:55 | 000,000,036 | —- | C] () – C:\Documents and Settings\JW\Local Settings\Application Data\housecall.guid.cache
[2012/01/03 15:51:02 | 000,201,501 | —- | C] () – C:\WINDOWS\hpoins40.dat
[2012/01/03 15:51:02 | 000,000,992 | —- | C] () – C:\WINDOWS\hpomdl40.dat
[2012/01/03 13:52:49 | 000,192,268 | —- | C] () – C:\WINDOWS\hpoins40.dat.temp
[2011/12/27 15:19:41 | 000,115,369 | —- | C] () – C:\WINDOWS\System32\drivers\klin.dat
[2011/12/27 15:19:41 | 000,097,961 | —- | C] () – C:\WINDOWS\System32\drivers\klick.dat
[2011/12/26 15:37:47 | 000,017,408 | —- | C] () – C:\Documents and Settings\JW\Local Settings\Application Data\WebpageIcons.db
[2011/12/06 17:26:02 | 000,001,324 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/12/02 18:56:50 | 000,000,064 | —- | C] () – C:\WINDOWS\System32\rp_stats.dat
[2011/12/02 18:56:50 | 000,000,044 | —- | C] () – C:\WINDOWS\System32\rp_rules.dat
[2011/11/23 14:26:47 | 000,000,196 | —- | C] () – C:\WINDOWS\wininit.ini
[2011/11/19 14:16:58 | 000,087,552 | —- | C] () – C:\WINDOWS\System32\cpwmon2k.dll
[2011/11/05 13:47:57 | 000,003,584 | —- | C] () – C:\Documents and Settings\JW\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/08/30 21:01:27 | 000,783,756 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1177238915-162531612-725345543-1003-0.dat
[2011/08/30 21:01:27 | 000,273,118 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2011/08/30 14:35:50 | 000,005,876 | —- | C] () – C:\WINDOWS\System32\drivers\nvphy.bin
[2011/08/28 16:27:08 | 000,037,408 | —- | C] () – C:\WINDOWS\System32\drivers\npusbio.sys
[2011/08/26 21:01:00 | 000,232,968 | —- | C] () – C:\WINDOWS\System32\nvdrsdb0.bin
[2011/08/26 21:00:59 | 000,232,968 | —- | C] () – C:\WINDOWS\System32\nvdrsdb1.bin
[2011/08/26 21:00:59 | 000,000,001 | —- | C] () – C:\WINDOWS\System32\nvdrssel.bin
[2011/08/26 21:00:32 | 002,195,030 | —- | C] () – C:\WINDOWS\System32\nvdata.bin
[2011/08/24 07:28:20 | 001,110,476 | —- | C] () – C:\Program Files\7-Zip.exe
[2011/08/23 19:10:54 | 000,155,648 | —- | C] () – C:\WINDOWS\System32\nY.exe
[2011/07/26 19:34:46 | 000,000,992 | —- | C] () – C:\WINDOWS\hpomdl40.dat.temp
[2011/07/23 10:59:57 | 000,172,032 | —- | C] () – C:\WINDOWS\System32\dtsjava.dll
[2011/07/14 17:23:28 | 000,056,708 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2011/07/10 06:50:25 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2011/07/09 21:20:21 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2011/07/09 21:17:26 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/07/09 16:14:18 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2011/07/09 16:13:23 | 000,268,600 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/03/11 13:43:54 | 000,029,763 | —- | C] () – C:\WINDOWS\System32\drivers\klopp.dat

========== LOP Check ==========

[2011/07/10 08:36:49 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\Common Files
[2011/08/30 19:11:29 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Garmin
[2012/05/20 10:47:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GFI Software
[2011/11/06 08:53:52 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LightScribe
[2011/12/26 18:55:15 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MFAData
[2012/04/04 14:49:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\RNDDock
[2011/08/13 12:48:54 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TNDDock
[2011/07/13 20:07:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011/08/30 19:11:03 | 000,000,000 | —D | M] – C:\Documents and Settings\JW\Application Data\Garmin
[2011/07/23 10:25:42 | 000,000,000 | —D | M] – C:\Documents and Settings\JW\Application Data\Sorman

========== Purity Check ==========

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\WINDOWS\$NtUninstallKB24287$] -> Error: Cannot create file handle -> Unknown point type

< End of report >

Tomk

Post #4May 23, 2012, 7:59 PM UTC

desertrider,

OK. Please give this a try:

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link –> http://forums.whatthetech.com/How_Disable_…ams_t96260.html
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Notes:

1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
4. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
5. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

desertrider

Post #5May 23, 2012, 9:55 PM UTC

I'm unable to complete Combofix.exe. It ran, but the first window poped up and said AVG Anti-virus 2011 was running. I uninstalled that program last year and bought Kaspersky AV. That's what is installed now. I did a search, in windows for anything AVG on all my harddrives and nothing came up. I searched the registry using edit/find, and saw lots of AVG entries through out, but don't know if all are related to AVG Antivirus. This is probably part of my issues with the slowdowns and freezes. Is there a way to line by line, remove all trace of AVG? Thank you

Tomk

Post #6May 23, 2012, 11:45 PM UTC

Go to this link: http://download.avg.com/filedir/util/avgre…6_2012_2125.exe

and install and run the AVG removal tool. Then try ComboFix again.

desertrider

Post #7May 24, 2012, 1:39 AM UTC

I ran Combofix.exe again after running this and still have the same error. Would it actually ruin my windows install if I let Combofix run? 2012-05-24 01:11:58,000 INFO AvgRemover 2012.0.5 ——————————————————- 2012-05-24 01:11:58,000 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013) 2012-05-24 01:11:58,000 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013) 2012-05-24 01:11:58,000 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d) 2012-05-24 01:11:58,000 INFO Command line: "C:\Documents and Settings\JW\Desktop\avg_remover_stf_x86_2012_2125.exe" 2012-05-24 01:11:58,000 WARN AvgDir param empty. 2012-05-24 01:11:58,000 WARN AvgDataDir param empty. 2012-05-24 01:11:59,875 INFO AvgRemover runs in attempt number 1 2012-05-24 01:11:59,875 INFO Attempting to unregister AVG from the Windows Security Center. 2012-05-24 01:11:59,875 INFO Attempting to uninstall AVG Identity Protection. 2012-05-24 01:11:59,875 INFO Attempting to uninstall toolbar 2012-05-24 01:11:59,875 INFO ***** Msi data ***** 2012-05-24 01:11:59,875 DEBUG No product code found for our upgrade codes, nothing to do here 2012-05-24 01:11:59,875 INFO ***** Exchange&Outlook plugins data ***** 2012-05-24 01:11:59,875 INFO Removing AvgOutlook addin 2012-05-24 01:11:59,875 INFO AvgOutlook Removing HKCR addin keys x86 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'avgoutlook.Addin': 0xe001003d 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'avgoutlook.Addin.1': 0xe001003d 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'CLSID\{9F39046C-801E-4E15-8CD9-ACF0ACF29048}': 0xe001003d 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'CLSID\{F083C5AB-08AD-4ABF-A2BE-8FA5C7D2F10A}': 0xe001003d 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'AppID\avgoutlook.DLL': 0xe001003d 2012-05-24 01:11:59,875 INFO AvgOutlook Removing HKCR addin keys x64 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'avgoutlook.Addin': 0xe001003d 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'avgoutlook.Addin.1': 0xe001003d 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'CLSID\{9F39046C-801E-4E15-8CD9-ACF0ACF29048}': 0xe001003d 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'CLSID\{F083C5AB-08AD-4ABF-A2BE-8FA5C7D2F10A}': 0xe001003d 2012-05-24 01:11:59,875 DEBUG Failed to delete key 'AppID\avgoutlook.DLL': 0xe001003d 2012-05-24 01:11:59,875 INFO Removing Sharepoint plugin if exists 2012-05-24 01:11:59,875 DEBUG Failed to open key 'Software\Microsoft\Shared Tools\Web Server Extensions\AVScanner': 0xe0010013 2012-05-24 01:11:59,875 DEBUG Failed to open key 'Software\Microsoft\Shared Tools\Web Server Extensions\AVScanner': 0xe0010013 2012-05-24 01:11:59,875 INFO Removing Antispam plugin for Exchange 2000/2003 if exists 2012-05-24 01:11:59,890 DEBUG Stopping service 'MSExchangeIS' to remove VSAPI plugin… 2012-05-24 01:11:59,890 DEBUG Service MSExchangeIS Stop failed (error: c0070424) 2012-05-24 01:11:59,890 DEBUG Exchange&Outlook plugins removal failed with error 0xc0070424 2012-05-24 01:11:59,890 INFO ***** Services ***** 2012-05-24 01:11:59,890 INFO Processing service avg8emc, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service avgfws8, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AvgWFPx, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service avg8emc is not installed 2012-05-24 01:11:59,890 INFO Service AvgWFPx is not installed 2012-05-24 01:11:59,890 DEBUG Service avg8emc RegCleanup 2012-05-24 01:11:59,890 DEBUG Service AvgWFPx RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service avg8emc are not present 2012-05-24 01:11:59,890 INFO Processing service avg8wd, it can take several minutes… 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgWFPx are not present 2012-05-24 01:11:59,890 INFO Service avgfws8 is not installed 2012-05-24 01:11:59,890 DEBUG Service avgfws8 RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service avgfws8 are not present 2012-05-24 01:11:59,890 INFO Service avg8wd is not installed 2012-05-24 01:11:59,890 DEBUG Service avg8wd RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service avg8wd are not present 2012-05-24 01:11:59,890 INFO Processing service AvgWFPa, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AvgWFPa is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgWFPa RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgWFPa are not present 2012-05-24 01:11:59,890 INFO Processing service avg9wd, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service avg9wd is not installed 2012-05-24 01:11:59,890 DEBUG Service avg9wd RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service avg9wd are not present 2012-05-24 01:11:59,890 INFO Processing service AvgMfx64, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AvgLdx64, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AvgMfx86, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AvgTdiA, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AvgLdx64 is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgLdx64 RegCleanup 2012-05-24 01:11:59,890 INFO Service AvgTdiA is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgTdiA RegCleanup 2012-05-24 01:11:59,890 INFO Service AvgMfx86 is not installed 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgTdiA are not present 2012-05-24 01:11:59,890 INFO Processing service AvgLdx86, it can take several minutes… 2012-05-24 01:11:59,890 DEBUG Service AvgMfx86 RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgLdx64 are not present 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgMfx86 are not present 2012-05-24 01:11:59,890 INFO Service AvgMfx64 is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgMfx64 RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgMfx64 are not present 2012-05-24 01:11:59,890 INFO Service AvgLdx86 is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgLdx86 RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgLdx86 are not present 2012-05-24 01:11:59,890 INFO Processing service AvgTdiX, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AvgWfpX, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AvgTdiX is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgTdiX RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgTdiX are not present 2012-05-24 01:11:59,890 INFO Processing service AvgWfpA, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AvgWfpX is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgWfpX RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgWfpX are not present 2012-05-24 01:11:59,890 INFO Service AvgWfpA is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgWfpA RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgWfpA are not present 2012-05-24 01:11:59,890 INFO Processing service AvgRkx86, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AvgRkx86 is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgRkx86 RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgRkx86 are not present 2012-05-24 01:11:59,890 INFO Processing service AvgRkx64, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AvgRkx64 is not installed 2012-05-24 01:11:59,890 DEBUG Service AvgRkx64 RegCleanup 2012-05-24 01:11:59,890 INFO Processing service avg9emc, it can take several minutes… 2012-05-24 01:11:59,890 DEBUG Registry keys for service AvgRkx64 are not present 2012-05-24 01:11:59,890 INFO Service avg9emc is not installed 2012-05-24 01:11:59,890 DEBUG Service avg9emc RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service avg9emc are not present 2012-05-24 01:11:59,890 INFO Processing service avgfws9, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service avgfws, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service avgfws9 is not installed 2012-05-24 01:11:59,890 INFO Service avgfws is not installed 2012-05-24 01:11:59,890 DEBUG Service avgfws9 RegCleanup 2012-05-24 01:11:59,890 DEBUG Service avgfws RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service avgfws9 are not present 2012-05-24 01:11:59,890 DEBUG Registry keys for service avgfws are not present 2012-05-24 01:11:59,890 INFO Processing service AVGIDSAgent, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AVGIDSAgent is not installed 2012-05-24 01:11:59,890 DEBUG Service AVGIDSAgent RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AVGIDSAgent are not present 2012-05-24 01:11:59,890 INFO Processing service AVGIDSWatcher, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AVGIDSWatcher is not installed 2012-05-24 01:11:59,890 DEBUG Service AVGIDSWatcher RegCleanup 2012-05-24 01:11:59,890 INFO Processing service AVGIDSFilterxpx, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AVGIDSShimxpx, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AVGIDSDriverxpx, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AVGIDSFiltervtx, it can take several minutes… 2012-05-24 01:11:59,890 DEBUG Registry keys for service AVGIDSWatcher are not present 2012-05-24 01:11:59,890 INFO Service AVGIDSFilterxpx is not installed 2012-05-24 01:11:59,890 DEBUG Service AVGIDSFilterxpx RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AVGIDSFilterxpx are not present 2012-05-24 01:11:59,890 INFO Service AVGIDSDriverxpx is not installed 2012-05-24 01:11:59,890 DEBUG Service AVGIDSDriverxpx RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AVGIDSDriverxpx are not present 2012-05-24 01:11:59,890 INFO Service AVGIDSFiltervtx is not installed 2012-05-24 01:11:59,890 DEBUG Service AVGIDSFiltervtx RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AVGIDSFiltervtx are not present 2012-05-24 01:11:59,890 INFO Service AVGIDSShimxpx is not installed 2012-05-24 01:11:59,890 DEBUG Service AVGIDSShimxpx RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AVGIDSShimxpx are not present 2012-05-24 01:11:59,890 INFO Processing service AVGIDSShimvtx, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AVGIDSShimvtx is not installed 2012-05-24 01:11:59,890 DEBUG Service AVGIDSShimvtx RegCleanup 2012-05-24 01:11:59,890 DEBUG Registry keys for service AVGIDSShimvtx are not present 2012-05-24 01:11:59,890 INFO Processing service AVGIDSDrivervtx, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AVGIDSFiltervta, it can take several minutes… 2012-05-24 01:11:59,890 INFO Processing service AVGIDSShimw7x, it can take several minutes… 2012-05-24 01:11:59,890 INFO Service AVGIDSFiltervta is not installed 2012-05-24 01:11:59,906 INFO Processing service AVGIDSDriverw7x, it can take several minutes… 2012-05-24 01:11:59,906 DEBUG Service AVGIDSFiltervta RegCleanup 2012-05-24 01:11:59,906 INFO Service AVGIDSShimw7x is not installed 2012-05-24 01:11:59,906 DEBUG Service AVGIDSShimw7x RegCleanup 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSFiltervta are not present 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSShimw7x are not present 2012-05-24 01:11:59,906 INFO Service AVGIDSDriverw7x is not installed 2012-05-24 01:11:59,906 DEBUG Service AVGIDSDriverw7x RegCleanup 2012-05-24 01:11:59,906 INFO Service AVGIDSDrivervtx is not installed 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSDriverw7x are not present 2012-05-24 01:11:59,906 DEBUG Service AVGIDSDrivervtx RegCleanup 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSDrivervtx are not present 2012-05-24 01:11:59,906 INFO Processing service AVGIDSErHrvtx, it can take several minutes… 2012-05-24 01:11:59,906 INFO Processing service AVGIDSErHrxpx, it can take several minutes… 2012-05-24 01:11:59,906 INFO Processing service AVGIDSFilterw7a, it can take several minutes… 2012-05-24 01:11:59,906 INFO Service AVGIDSErHrxpx is not installed 2012-05-24 01:11:59,906 DEBUG Service AVGIDSErHrxpx RegCleanup 2012-05-24 01:11:59,906 INFO Service AVGIDSFilterw7a is not installed 2012-05-24 01:11:59,906 DEBUG Service AVGIDSFilterw7a RegCleanup 2012-05-24 01:11:59,906 INFO Service AVGIDSErHrvtx is not installed 2012-05-24 01:11:59,906 INFO Processing service AVGIDSDriverw7a, it can take several minutes… 2012-05-24 01:11:59,906 DEBUG Service AVGIDSErHrvtx RegCleanup 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSErHrvtx are not present 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSFilterw7a are not present 2012-05-24 01:11:59,906 INFO Service AVGIDSDriverw7a is not installed 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSErHrxpx are not present 2012-05-24 01:11:59,906 DEBUG Service AVGIDSDriverw7a RegCleanup 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSDriverw7a are not present 2012-05-24 01:11:59,906 INFO Processing service AVGIDSErHrvta, it can take several minutes… 2012-05-24 01:11:59,906 INFO Processing service AVGIDSFilterw7x, it can take several minutes… 2012-05-24 01:11:59,906 INFO Service AVGIDSErHrvta is not installed 2012-05-24 01:11:59,906 DEBUG Service AVGIDSErHrvta RegCleanup 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSErHrvta are not present 2012-05-24 01:11:59,906 INFO Processing service AVGIDSErHrw7x, it can take several minutes… 2012-05-24 01:11:59,906 INFO Service AVGIDSErHrw7x is not installed 2012-05-24 01:11:59,906 DEBUG Service AVGIDSErHrw7x RegCleanup 2012-05-24 01:11:59,906 INFO Processing service AVGIDSDrivervta, it can take several minutes… 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSErHrw7x are not present 2012-05-24 01:11:59,906 INFO Service AVGIDSFilterw7x is not installed 2012-05-24 01:11:59,906 DEBUG Service AVGIDSFilterw7x RegCleanup 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSFilterw7x are not present 2012-05-24 01:11:59,906 INFO Service AVGIDSDrivervta is not installed 2012-05-24 01:11:59,906 DEBUG Service AVGIDSDrivervta RegCleanup 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSDrivervta are not present 2012-05-24 01:11:59,906 INFO Processing service avgwd, it can take several minutes… 2012-05-24 01:11:59,906 INFO Service avgwd is not installed 2012-05-24 01:11:59,906 DEBUG Service avgwd RegCleanup 2012-05-24 01:11:59,906 DEBUG Registry keys for service avgwd are not present 2012-05-24 01:11:59,906 INFO Processing service AVGIDSErHrw7a, it can take several minutes… 2012-05-24 01:11:59,906 INFO Service AVGIDSErHrw7a is not installed 2012-05-24 01:11:59,906 DEBUG Service AVGIDSErHrw7a RegCleanup 2012-05-24 01:11:59,906 DEBUG Registry keys for service AVGIDSErHrw7a are not present 2012-05-24 01:11:59,906 INFO ***** Avg Fw NDIS driver(separate process) ***** 2012-05-24 01:11:59,921 INFO AvgRemover 2012.0.5 ——————————————————- 2012-05-24 01:11:59,921 DEBUG Deleting stuck RunOnce value from registry. 2012-05-24 01:11:59,921 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013) 2012-05-24 01:11:59,921 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013) 2012-05-24 01:11:59,921 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d) 2012-05-24 01:11:59,921 INFO Command line: "C:\Documents and Settings\JW\Desktop\avg_remover_stf_x86_2012_2125.exe" /ndisonly /skipask 2012-05-24 01:11:59,921 WARN AvgDir param empty. 2012-05-24 01:11:59,921 WARN AvgDataDir param empty. 2012-05-24 01:11:59,921 INFO AvgRemover runs in attempt number 1 2012-05-24 01:11:59,921 INFO ***** Avg Fw NDIS driver ***** 2012-05-24 01:11:59,921 INFO …this operation can take several minutes… 2012-05-24 01:11:59,921 INFO FW removing policy 2012-05-24 01:12:00,046 INFO FW NDIS driver not present 2012-05-24 01:12:00,046 DEBUG Remove NDIS driver pass, next uninstalation step is 10, old was 1 2012-05-24 01:12:00,046 INFO ***** end of Fw NDIS separated process ***** 2012-05-24 01:12:00,046 INFO ***** Drivers ***** 2012-05-24 01:12:00,046 INFO ***** Running AVG process ***** 2012-05-24 01:12:00,093 INFO ***** Registry keys and values ***** 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions 2012-05-24 01:12:00,093 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove 2012-05-24 01:12:00,093 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions 2012-05-24 01:12:00,093 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove 2012-05-24 01:12:00,093 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions 2012-05-24 01:12:00,093 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1E73965B-8B48-48be-9C8D-68B920ABC1C4} Remove 2012-05-24 01:12:00,093 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1E73965B-8B48-48be-9C8D-68B920ABC1C4} is not present 2012-05-24 01:12:00,093 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found 2012-05-24 01:12:00,093 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt not found 2012-05-24 01:12:00,093 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg10Alrt 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg10Alrt ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg10Alrt not found 2012-05-24 01:12:00,093 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg2012Alrt 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg2012Alrt ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg2012Alrt not found 2012-05-24 01:12:00,093 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found 2012-05-24 01:12:00,093 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found 2012-05-24 01:12:00,093 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} 2012-05-24 01:12:00,093 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2012-05-24 01:12:00,093 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar 2012-05-24 01:12:00,093 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove 2012-05-24 01:12:00,093 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2012-05-24 01:12:00,093 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2012-05-24 01:12:00,093 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions 2012-05-24 01:12:00,093 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove 2012-05-24 01:12:00,093 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions 2012-05-24 01:12:00,093 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove 2012-05-24 01:12:00,093 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows 2012-05-24 01:12:00,093 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify 2012-05-24 01:12:00,093 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs doesn't need to be modified 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved 2012-05-24 01:12:00,093 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove 2012-05-24 01:12:00,093 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present 2012-05-24 01:12:00,093 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved 2012-05-24 01:12:00,109 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove 2012-05-24 01:12:00,109 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved 2012-05-24 01:12:00,109 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove 2012-05-24 01:12:00,109 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved 2012-05-24 01:12:00,109 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove 2012-05-24 01:12:00,109 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2012-05-24 01:12:00,109 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove 2012-05-24 01:12:00,109 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2012-05-24 01:12:00,109 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY Remove 2012-05-24 01:12:00,109 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY is not present 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\AvgDiagFile 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\AvgDiagFile 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\.avgdi 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdi not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\.avgdx 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdx not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\.avgdx 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdx not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\.avgdx 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdx not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\.avgdx 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\.avgdx not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG9 Shell Extension not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\AVG9 Shell Extension not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG9 Shell Extension not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\avgsbg.state 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\avgsbg.state ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\avgsbg.state not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\avgsbg.state 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\avgsbg.state ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\avgsbg.state not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\avgsbg.state.1 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\avgsbg.state.1 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\avgsbg.state.1 not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter.1 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\LinkScannerIE.NavFilter.1 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\LinkScannerIE.NavFilter.1 not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\MicroScanner.MicroScanner 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\MicroScanner.MicroScanner 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\MicroScanner.MicroScanner not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AVGSE.DLL 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AVGSE.DLL ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AVGSE.DLL not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2012-05-24 01:12:00,109 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY Remove 2012-05-24 01:12:00,109 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY is not present 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2012-05-24 01:12:00,109 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY Remove 2012-05-24 01:12:00,109 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG_TRAY is not present 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\AppID\avgsbg.DLL 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL not found 2012-05-24 01:12:00,109 INFO Processing registry SOFTWARE\Classes\AppID\avgsbg.DLL 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SOFTWARE\Classes\AppID\avgsbg.DLL not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\Control\GroupOrderList 2012-05-24 01:12:00,109 DEBUG Value SYSTEM\ControlSet001\Control\GroupOrderList:AVG Remove 2012-05-24 01:12:00,109 INFO Value SYSTEM\ControlSet001\Control\GroupOrderList:AVG is not present 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\Avg 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\Avg ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\Avg not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\Avgfwfd 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\Avgfwfd ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\Avgfwfd not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\AVG Security Toolbar Service 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVG Security Toolbar Service ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVG Security Toolbar Service not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\Avgfws 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\Avgfws ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\Avgfws not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSAgent 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSAgent ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSAgent not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSDriver 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSDriver ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSDriver not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSEH 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSEH ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSEH not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\AVGIDSFilter 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSFilter ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\AVGIDSFilter not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgldx64 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgldx64 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgldx64 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgldx86 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgldx86 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgldx86 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgmfx64 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgmfx64 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgmfx64 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgmfx86 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgmfx86 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgmfx86 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgrkx64 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgrkx64 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgrkx64 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgrkx86 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgrkx86 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgrkx86 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgtdia 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgtdia ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgtdia not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgtdix 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgtdix ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgtdix not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgwd 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgwd ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgwd not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgfwdx 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgfwdx ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgfwdx not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgfwda 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgfwda ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgfwda not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgwfpa 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgwfpa ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgwfpa not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet001\services\avgwfpx 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgwfpx ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet001\services\avgwfpx not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\Avg 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avg ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avg not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\Avgfwfd 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVG Security Toolbar Service 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\Avgfws 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avgfws ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avgfws not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSAgent 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSDriver 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSEH 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSFilter 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgldx64 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgldx86 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx64 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx86 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx64 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx86 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgtdia 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgtdia ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgtdia not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgtdix 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgtdix ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgtdix not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgwd 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgwd ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgwd not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgfwdx 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgfwdx ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgfwdx not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgfwda 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgfwda ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgfwda not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgwfpa 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgwfpa ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgwfpa not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgwfpx 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgwfpx ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgwfpx not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\Avg 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avg ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avg not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\Avgfwfd 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avgfwfd not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVG Security Toolbar Service 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVG Security Toolbar Service not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\Avgfws 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avgfws ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\Avgfws not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSAgent 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSAgent not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSDriver 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSDriver not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSEH 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSEH not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\AVGIDSFilter 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\AVGIDSFilter not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgldx64 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgldx64 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgldx86 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgldx86 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx64 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgmfx64 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgmfx86 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgmfx86 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx64 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 ForceRemove 2012-05-24 01:12:00,109 DEBUG Key SYSTEM\ControlSet002\services\avgrkx64 not found 2012-05-24 01:12:00,109 INFO Processing registry SYSTEM\ControlSet002\services\avgrkx86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\services\avgrkx86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\services\avgtdia 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\services\avgtdia ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\services\avgtdia not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\services\avgtdix 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\services\avgtdix ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\services\avgtdix not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\services\avgwd 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\services\avgwd ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\services\avgwd not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGFWS 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGFWS ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGFWS not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSAGENT 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSAGENT ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSAGENT not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVER 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVER ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVER not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSEH 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSEH ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSEH not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSFILTER 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSFILTER ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSFILTER not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIM 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIM ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIM not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX64 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX64 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGLDX64 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX64 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX64 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGMFX64 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX64 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX64 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGRKX64 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIA 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIA ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTDIA not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWD 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWD ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWD not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG9WD 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG9WD ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG9WD not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVERXPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVERXPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSDRIVERXPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSERHRXPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSERHRXPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSERHRXPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIMXPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIMXPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGIDSSHIMXPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPA 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPA ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGWFPA not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGFWS 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGFWS ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGFWS not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSAGENT 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSAGENT ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSAGENT not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVER 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVER ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVER not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSEH 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSEH ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSEH not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSFILTER 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSFILTER ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSFILTER not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIM 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIM ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIM not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX64 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX64 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGLDX64 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX64 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX64 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGMFX64 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX64 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX64 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGRKX64 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIA 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIA ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTDIA not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWD 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWD ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWD not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG9WD 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG9WD ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG9WD not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVERXPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVERXPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSDRIVERXPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSERHRXPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSERHRXPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSERHRXPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIMXPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIMXPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGIDSSHIMXPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPA 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPA ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGWFPA not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGFWS 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGFWS ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGFWS not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSAGENT 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSAGENT ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSAGENT not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVER 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVER ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVER not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSEH 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSEH ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSEH not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSFILTER 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSFILTER ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSFILTER not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIM 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIM ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIM not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX86 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX86 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX86 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX64 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX64 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGLDX64 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX64 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX64 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGMFX64 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX64 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX64 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGRKX64 not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIA 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIA ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTDIA not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWD 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWD ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWD not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVG9WD 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVG9WD ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVG9WD not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVERXPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVERXPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSDRIVERXPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSERHRXPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSERHRXPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSERHRXPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIMXPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIMXPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGIDSSHIMXPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPX 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPX ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPX not found 2012-05-24 01:12:00,140 INFO Processing registry SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPA 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPA ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGWFPA not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\Clients 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\Clients ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\Clients not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG8 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG8 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG9 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG9 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG10 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG10 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG10 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG10 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG2012 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG2012 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG2012 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG2012 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG2012 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG2012 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG IDS 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG IDS ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG IDS not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG IDS 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG IDS ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG IDS not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG 2012-05-24 01:12:00,140 DEBUG Value SOFTWARE\AVG:DumpType Remove 2012-05-24 01:12:00,140 DEBUG Value SOFTWARE\AVG:DumpType not present - Key not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Remove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Remove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG Security Toolbar 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Security Toolbar not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG Security Toolbar 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Security Toolbar not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG Secure Search 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Secure Search ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Secure Search not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG Secure Search 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Secure Search ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Secure Search not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG8 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG8 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG9 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG9 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG10 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG10 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG10 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG10 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG10 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG2012 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG2012 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG2012 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG\AVG2012 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG2012 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG\AVG2012 not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Remove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Remove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG Security Toolbar 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Security Toolbar not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AVG Security Toolbar 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AVG Security Toolbar not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks 2012-05-24 01:12:00,140 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} Remove 2012-05-24 01:12:00,140 INFO Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} is not present 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B206F26B-E6D1-43A0-8CF7-D3943147F867} 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B206F26B-E6D1-43A0-8CF7-D3943147F867} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B206F26B-E6D1-43A0-8CF7-D3943147F867} not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser 2012-05-24 01:12:00,140 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove 2012-05-24 01:12:00,140 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AppDataLow\Avg 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AppDataLow\Avg ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AppDataLow\Avg not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\AppDataLow\Software\AVG Security Toolbar 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AppDataLow\Software\AVG Security Toolbar ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\AppDataLow\Software\AVG Security Toolbar not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found 2012-05-24 01:12:00,140 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found 2012-05-24 01:12:00,140 INFO Processing registry .avgdxa 2012-05-24 01:12:00,140 DEBUG Key .avgdxa ForceRemove 2012-05-24 01:12:00,140 DEBUG Key .avgdxa not found 2012-05-24 01:12:00,140 INFO Processing registry aAvgAPI.AvgBro 2012-05-24 01:12:00,140 DEBUG Key aAvgAPI.AvgBro ForceRemove 2012-05-24 01:12:00,140 DEBUG Key aAvgAPI.AvgBro not found 2012-05-24 01:12:00,140 INFO Processing registry AVG.Office 2012-05-24 01:12:00,140 DEBUG Key AVG.Office ForceRemove 2012-05-24 01:12:00,140 DEBUG Key AVG.Office not found 2012-05-24 01:12:00,140 INFO Processing registry AVG.Office.8 2012-05-24 01:12:00,140 DEBUG Key AVG.Office.8 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key AVG.Office.8 not found 2012-05-24 01:12:00,140 INFO Processing registry AvgDiagFile 2012-05-24 01:12:00,140 DEBUG Key AvgDiagFile ForceRemove 2012-05-24 01:12:00,140 DEBUG Key AvgDiagFile not found 2012-05-24 01:12:00,140 INFO Processing registry AvgDiagExFile 2012-05-24 01:12:00,140 DEBUG Key AvgDiagExFile ForceRemove 2012-05-24 01:12:00,140 DEBUG Key AvgDiagExFile not found 2012-05-24 01:12:00,140 INFO Processing registry avgtoolbar.AVGTOOLBAR 2012-05-24 01:12:00,140 DEBUG Key avgtoolbar.AVGTOOLBAR ForceRemove 2012-05-24 01:12:00,140 DEBUG Key avgtoolbar.AVGTOOLBAR not found 2012-05-24 01:12:00,140 INFO Processing registry avgtoolbar.AVGTOOLBARMenu Button 2012-05-24 01:12:00,140 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove 2012-05-24 01:12:00,140 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button not found 2012-05-24 01:12:00,140 INFO Processing registry avgtoolbar.AVGTOOLBARToggle Button 2012-05-24 01:12:00,140 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove 2012-05-24 01:12:00,140 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button not found 2012-05-24 01:12:00,140 INFO Processing registry LinkScannerIE.NavFilter 2012-05-24 01:12:00,140 DEBUG Key LinkScannerIE.NavFilter ForceRemove 2012-05-24 01:12:00,140 DEBUG Key LinkScannerIE.NavFilter not found 2012-05-24 01:12:00,140 INFO Processing registry LinkScannerIE.NavFilter.1 2012-05-24 01:12:00,140 DEBUG Key LinkScannerIE.NavFilter.1 ForceRemove 2012-05-24 01:12:00,140 DEBUG Key LinkScannerIE.NavFilter.1 not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found 2012-05-24 01:12:00,140 INFO Processing registry CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2012-05-24 01:12:00,140 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2012-05-24 01:12:00,140 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2012-05-24 01:12:00,140 INFO Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} 2012-05-24 01:12:00,156 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found 2012-05-24 01:12:00,156 INFO Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} 2012-05-24 01:12:00,156 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found 2012-05-24 01:12:00,156 INFO Processing registry Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} 2012-05-24 01:12:00,156 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} not found 2012-05-24 01:12:00,156 INFO Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found 2012-05-24 01:12:00,156 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found 2012-05-24 01:12:00,156 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found 2012-05-24 01:12:00,156 INFO Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found 2012-05-24 01:12:00,156 INFO Processing registry TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found 2012-05-24 01:12:00,156 INFO Processing registry CLSID\{8B39AD4E-1AB3-4AE1-B533-706F1CACED83} 2012-05-24 01:12:00,156 DEBUG Key CLSID\{8B39AD4E-1AB3-4AE1-B533-706F1CACED83} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key CLSID\{8B39AD4E-1AB3-4AE1-B533-706F1CACED83} not found 2012-05-24 01:12:00,156 INFO Processing registry CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} 2012-05-24 01:12:00,156 DEBUG Key CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found 2012-05-24 01:12:00,156 INFO Processing registry CLSID\{DC182551-99C7-4e28-A8F3-8DCFC4745C4C} 2012-05-24 01:12:00,156 DEBUG Key CLSID\{DC182551-99C7-4e28-A8F3-8DCFC4745C4C} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key CLSID\{DC182551-99C7-4e28-A8F3-8DCFC4745C4C} not found 2012-05-24 01:12:00,156 INFO Processing registry CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} 2012-05-24 01:12:00,156 DEBUG Key CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} not found 2012-05-24 01:12:00,156 INFO Processing registry CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} 2012-05-24 01:12:00,156 DEBUG Key CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key CLSID\{B2BFA8E6-DB09-43F4-8469-BC587CB603EB} not found 2012-05-24 01:12:00,156 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} 2012-05-24 01:12:00,156 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found 2012-05-24 01:12:00,156 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} 2012-05-24 01:12:00,156 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found 2012-05-24 01:12:00,156 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} 2012-05-24 01:12:00,156 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove 2012-05-24 01:12:00,156 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found 2012-05-24 01:12:00,156 INFO Processing registry CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} 2012-05-24 01:12:00,171 DEBUG Key CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove 2012-05-24 01:12:00,171 DEBUG Key CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found 2012-05-24 01:12:00,171 INFO Processing registry CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} 2012-05-24 01:12:00,171 DEBUG Key CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove 2012-05-24 01:12:00,171 DEBUG Key CLSID\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found 2012-05-24 01:12:00,171 DEBUG Removing Session Manager values 2012-05-24 01:12:00,171 DEBUG Registry remover failed for some registry item(s) 2012-05-24 01:12:00,171 INFO ***** Files and folders ***** 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 0 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 1 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 2 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 3 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 4 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 5 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 6 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 7 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 8 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 9 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 10 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 11 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 12 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 13 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 14 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 15 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 16 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 17 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 18 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 19 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 20 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 21 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 22 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 23 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 24 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 25 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\JW\Application Data\AVGTOOLBAR' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\JW\Application Data\AVGTOOLBAR' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.5' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.5' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.5' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.5' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\avg 8.0.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\avg 8.0.lnk' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\avg 8.5.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\avg 8.5.lnk' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\avg free 8.5.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\avg free 8.5.lnk' not found 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 36 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 37 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 38 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 39 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 40 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 41 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 42 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 43 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 44 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 45 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 46 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 47 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 48 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 49 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 50 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 51 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 52 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 53 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 54 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 55 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 56 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 57 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Languages' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Languages' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Update' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Update' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG 9.0' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG 9.0' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG FREE 9.0' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG FREE 9.0' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\avg 9.0.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\avg 9.0.lnk' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\avg free 9.0.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\avg free 9.0.lnk' not found 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 66 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 67 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 68 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 69 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 70 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 71 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 72 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 73 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 74 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 75 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 76 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 77 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 78 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 79 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 80 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 81 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 82 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 83 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 84 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 85 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 86 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 87 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 88 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 89 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 90 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 91 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 92 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 93 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 94 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 95 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 96 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 97 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 98 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 99 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 100 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 101 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 102 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 103 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 104 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 105 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 106 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 107 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 108 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 109 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 110 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 111 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 112 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 113 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 114 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 115 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 116 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 117 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 118 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 119 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 120 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 121 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 122 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 123 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 124 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 125 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 126 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 127 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 128 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 129 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 130 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 131 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 132 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 133 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 134 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 135 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 136 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 137 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 138 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 139 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 140 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 141 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 142 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 143 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 144 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 145 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 146 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 147 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 148 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 149 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 150 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 151 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 152 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 153 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 154 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 155 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 156 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 157 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 158 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 159 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 160 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 161 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 162 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 163 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 164 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 165 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 166 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 167 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 168 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 169 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 170 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 171 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 172 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 173 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 174 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 175 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 176 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 177 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 178 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 179 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 180 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 181 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 182 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 183 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 184 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 185 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 186 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 187 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 188 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 189 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 190 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 191 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 192 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 193 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 194 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 195 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 196 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 197 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 198 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 199 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 200 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 201 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 202 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 203 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 204 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 205 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 206 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 207 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 208 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 209 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 210 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 211 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 212 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 213 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 214 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 215 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 216 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 217 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 218 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\AVG' 2012-05-24 01:12:00,171 INFO Directory 'C:\WINDOWS\System32\Drivers\AVG' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidsdriverx.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidsdriverx.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidsdrivera.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidsdrivera.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidsehx.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidsehx.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidseha.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidseha.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidsfilterx.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidsfilterx.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidsfiltera.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidsfiltera.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidsshimx.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidsshimx.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidsshimw8x.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidsshimw8x.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidsuniversalddx.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidsuniversalddx.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers\avgidsuniversaldda.sys' 2012-05-24 01:12:00,171 INFO File 'C:\WINDOWS\System32\Drivers\avgidsuniversaldda.sys' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget' 2012-05-24 01:12:00,171 INFO Directory 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget' not found 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 238 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG10\SetupCoreBackup' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG10\SetupCoreBackup' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG10\SetupBackup' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG10\SetupBackup' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG10\Chjw' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG10\Chjw' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG10\Antispam' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG10\Antispam' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG10' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG10' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG 2011' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG 2011' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG FREE 2011' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG FREE 2011' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\AVG FREE 2011.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\AVG FREE 2011.lnk' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\SysWOW64\Drivers\AVG' 2012-05-24 01:12:00,171 INFO Directory 'C:\WINDOWS\SysWOW64\Drivers\AVG' not found 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 249 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\MFAData\logs' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\MFAData\logs' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\MFAData\pack' 2012-05-24 01:12:00,171 DEBUG Directory C:\Documents and Settings\All Users\Application Data\MFAData\pack not deleted (error c0070091) 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\MFAData\mkt' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\MFAData\mkt' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\MFAData' 2012-05-24 01:12:00,171 DEBUG Directory C:\Documents and Settings\All Users\Application Data\MFAData not deleted (error c0070091) 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG2012\SetupCoreBackup' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG2012\SetupCoreBackup' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG2012\SetupBackup' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG2012\SetupBackup' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG2012\Chjw' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG2012\Chjw' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG2012\Antispam' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG2012\Antispam' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Application Data\AVG2012' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Application Data\AVG2012' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG 2012' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG 2012' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG FREE 2012' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG FREE 2012' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\AVG 2012.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\AVG 2012.lnk' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\AVG FREE 2012.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\AVG FREE 2012.lnk' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\WINDOWS\System32\Drivers' 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG LinkScanner® 9.0' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG LinkScanner® 9.0' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG Standalone LinkScanner' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG Standalone LinkScanner' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Desktop\AVG LinkScanner® 9.0.lnk' 2012-05-24 01:12:00,171 INFO File 'C:\Documents and Settings\All Users\Desktop\AVG LinkScanner® 9.0.lnk' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG' 2012-05-24 01:12:00,171 INFO Directory 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG' not found 2012-05-24 01:12:00,171 DEBUG Processing item 'C:\Program Files\AVG Secure Search' 2012-05-24 01:12:00,171 INFO Directory 'C:\Program Files\AVG Secure Search' not found 2012-05-24 01:12:00,171 DEBUG Missing ParentDir path for fileItem number 269

Tomk

Post #8May 24, 2012, 4:26 AM UTC

Would it actually ruin my windows install if I let Combofix run?

Nope. The problem arises when AVG attacks part of ComboFix not letting it run correctly.

Let's do this:

Double click on OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following
Do Not copy the word CODE
please note the fix starts with the :

:Processes

:OTL
DRV - (AVGIDSDriver) – system32\DRIVERS\AVGIDSDriver.Sys File not found
DRV - (.avgldx86) – File not found
DRV - (Avgtdix) – C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgrkx86) – C:\WINDOWS\system32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) – C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSEH) – C:\WINDOWS\system32\drivers\AVGIDSEH.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSShim) – C:\WINDOWS\system32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSFilter) – C:\WINDOWS\system32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgldx86) – C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart)
[C:\WINDOWS\$NtUninstallKB24287$] -> Error: Cannot create file handle -> Unknown point type

:Files
C:\Program Files\AVG

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top

Let the program run unhindered
Please save the resulting log to be posted in your next reply.
Reboot your computer

Please post the OTL log.

Then go ahead and run ComboFix. Continue even if it still flags AVG.

desertrider

Post #9May 24, 2012, 8:21 PM UTC

Well, I screwed up! I ran the fix, it gave me a file with alot of removal data but I thought it would save a log file, and it didn't. I'm sorry. I re-ran the fix and this is the results. I'm going to run the Combofix.exe now, All processes killed ========== FILES ========== File\Folder C:\Program Files\AVG not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: JW ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 1860470 bytes ->Java cache emptied: 0 bytes ->Apple Safari cache emptied: 0 bytes ->Flash cache emptied: 929 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 6919 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 2.00 mb OTL by OldTimer - Version 3.2.43.0 log created on 05242012_151033 Files\Folders moved on Reboot… C:\Documents and Settings\JW\Local Settings\Temporary Internet Files\Content.IE5\XN1KQPHF\header-728-90[1].htm moved successfully. C:\Documents and Settings\JW\Local Settings\Temporary Internet Files\Content.IE5\XN1KQPHF\iframe[1].htm moved successfully. C:\Documents and Settings\JW\Local Settings\Temporary Internet Files\Content.IE5\XN1KQPHF\jstags[1].htm moved successfully. C:\Documents and Settings\JW\Local Settings\Temporary Internet Files\Content.IE5\700DW8FH\homepage-300-250[1].htm moved successfully. C:\Documents and Settings\JW\Local Settings\Temporary Internet Files\Content.IE5\700DW8FH\iframe[1].htm moved successfully. C:\Documents and Settings\JW\Local Settings\Temporary Internet Files\Content.IE5\700DW8FH\index[1].htm moved successfully. C:\Documents and Settings\JW\Local Settings\Temporary Internet Files\Content.IE5\40OJQH8E\jstags[1].htm moved successfully. C:\Documents and Settings\JW\Local Settings\Temporary Internet Files\AntiPhishing\A0AB7674-8D67-4F4D-B5E1-96FAEADFB79D.dat moved successfully. Registry entries deleted on Reboot…

desertrider

Post #10May 24, 2012, 8:53 PM UTC

Here is the Combofix.txt file.

ComboFix 12-05-23.05 - JW 05/24/2012 15:31:37.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2814.2413 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: AVG Anti-Virus 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Kaspersky Anti-Virus *Disabled/Updated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\JW\WINDOWS
c:\windows\$NtUninstallKB24287$
c:\windows\$NtUninstallKB24287$\640535731
c:\windows\system\ATL.DLL
c:\windows\system32\dllcache\dlimport.exe
c:\windows\system32\dllcache\wmpvis.dll
.
.
((((((((((((((((((((((((( Files Created from 2012-04-24 to 2012-05-24 )))))))))))))))))))))))))))))))
.
.
2012-05-24 19:52 . 2012-05-24 19:52 ——– d—–w- C:\_OTL
2012-05-24 02:09 . 2012-05-24 02:09 ——– d—–w- c:\documents and settings\All Users\Application Data\PC Tools
2012-05-24 02:09 . 2012-05-24 02:09 ——– d—–w- c:\documents and settings\JW\Application Data\Product_RM
2012-05-20 15:47 . 2012-05-20 15:47 ——– d—–w- c:\documents and settings\All Users\Application Data\GFI Software
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-23 20:18 . 2012-03-31 09:37 419488 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2012-05-23 20:18 . 2011-08-27 17:56 70304 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-29 18:24 . 2003-03-31 12:00 26112 —-a-w- c:\windows\system32\userinit.exe
2012-04-11 13:14 . 2003-03-31 12:00 2148352 —-a-w- c:\windows\system32\ntoskrnl.exe
2012-04-11 13:12 . 2003-03-31 12:00 1862272 —-a-w- c:\windows\system32\win32k.sys
2012-04-11 12:35 . 2002-08-29 01:04 2026496 —-a-w- c:\windows\system32\ntkrnlpa.exe
2012-04-04 20:56 . 2012-01-08 23:50 22344 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-03-01 01:25 . 2003-03-31 12:00 832512 —-a-w- c:\windows\system32\wininet.dll
2012-03-01 01:25 . 2004-08-04 07:56 78336 ——w- c:\windows\system32\ieencode.dll
2012-03-01 01:25 . 2003-03-31 12:00 1830912 ——w- c:\windows\system32\inetcpl.cpl
2012-03-01 01:25 . 2003-03-31 12:00 17408 —-a-w- c:\windows\system32\corpol.dll
2012-02-29 14:10 . 2003-03-31 12:00 177664 —-a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10 . 2003-03-31 12:00 148480 —-a-w- c:\windows\system32\imagehlp.dll
2011-08-24 18:52 . 2011-08-24 12:28 1110476 —-a-w- c:\program files\7-Zip.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-25 202296]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\avg\avg10\avgrsx.exe /sync /restart
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 07:37 843712 —-a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2010-09-03 21:19 64104 —-a-w- c:\windows\ALCMTR.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2011-11-02 05:25 59240 —-a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Garmin Lifetime Updater]
2012-01-06 21:30 1446760 —-a-w- f:\program files\Garmin\Lifetime Updater\GarminLifetime.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2011-05-10 07:41 49208 —-a-w- c:\program files\HP\HP Software Update\hpwuschd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2012-01-16 23:22 421736 —-a-w- e:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 ——w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2010-07-09 21:24 13923432 —-a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2010-07-09 21:24 110696 —-a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2010-07-08 04:52 1753192 —-a-w- c:\program files\NVIDIA Corporation\nView\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PMBVolumeWatcher]
2011-08-24 22:30 651832 —-a-w- d:\program files\Sony\PMB\PMBVolumeWatcher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Profiler]
2006-09-05 14:12 184320 —-a-w- c:\program files\Saitek\Software\ProfilerU.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-10-24 20:28 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2010-09-03 21:20 19573352 —-a-w- c:\windows\RTHDCPL.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SaiMfd]
2006-09-28 16:19 126976 —-a-w- c:\program files\Saitek\Software\SaiMfd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2010-09-03 21:20 1833576 —-a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2011-12-28 01:18 1242448 —-a-w- f:\program files\Steam\steam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-06-09 18:06 254696 —-a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Steam Client Service"=3 (0x3)
"ose"=3 (0x3)
"nvsvc"=2 (0x2)
"nSvcIp"=2 (0x2)
"iPod Service"=3 (0x3)
"idsvc"=3 (0x3)
"gupdatem"=3 (0x3)
"gupdate"=2 (0x2)
"ForceWare Intelligent Application Manager (IAM)"=2 (0x2)
"PMBDeviceInfoProvider"=2 (0x2)
"NAUpdate"=3 (0x3)
"LightScribeService"=3 (0x3)
"JavaQuickStarterService"=2 (0x2)
"Apple Mobile Device"=2 (0x2)
"AdobeFlashPlayerUpdateSvc"=3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"f:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\{9FEF1A18-8F26-4F49-A5A4-956C12210624}\\setup\\hpznui01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"e:\\Program Files\\iTunes\\iTunes.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 3\\iw5sp.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 3\\iw5mp_server.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 3\\iw5mp.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\Fallout New Vegas Ultimate Edition Trailer\\smp.exe"=
"c:\\D\\pwc_pubs\\jre\\1.3.1\\bin\\javaw.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\Scoregasm Trailer\\smp.exe"=
.
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-23 257696]
R4 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-08-07 136176]
R4 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-08-07 136176]
R4 NAUpdate;@c:\program files\Nero\Update\NASvc.exe,-200;c:\program files\Nero\Update\NASvc.exe [2010-05-04 503080]
R4 PMBDeviceInfoProvider;PMBDeviceInfoProvider;d:\program files\Sony\PMB\PMBDeviceInfoProvider.exe [2011-08-24 430136]
S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2011-03-04 11352]
S3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys [2011-03-11 34608]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-11-03 19472]
S3 npusbio;npusbio;c:\windows\system32\Drivers\npusbio.sys [2009-12-17 37408]
S3 SaiH053c;SaiH053c;c:\windows\system32\DRIVERS\SaiH053c.sys [2004-07-26 56576]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2011-06-20 21:05 451872 —-a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2012-05-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 20:18]
.
2012-05-15 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 22:57]
.
2012-05-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-07 13:21]
.
2012-05-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-07 13:21]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
LSP: c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll
TCP: DhcpNameServer = [removed] [removed]
DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/3.0.1.0/GarminAxControl.CAB
DPF: {8BF7B588-F4AC-4A6E-AF63-F664449EED2E} - hxxps://pk.knighttrans.com/wps/PA_1_NO2UF4I118ADC026HKQ8KC28K6/applets/DMPlugin.cab
.
- - - - ORPHANS REMOVED - - - -
.
MSConfigStartUp-TNDDOCK - d:\program files\Rand McNally\Rand McNally TND Dock\TNDDock.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-05-24 15:40
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'lsass.exe'(1224)
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll
.
- - - - - - - > 'explorer.exe'(2356)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
.
———————— Other Running Processes ————————
.
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
.
**************************************************************************
.
Completion time: 2012-05-24 15:45:08 - machine was rebooted
ComboFix-quarantined-files.txt 2012-05-24 20:45
.
Pre-Run: 60,081,098,752 bytes free
Post-Run: 60,045,488,128 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
.
- - End Of File - - 2058966A25142171E7C59C37382B2A99

Tomk

Post #11May 24, 2012, 11:10 PM UTC

desertrider,

Looking better.

COMBOFIX-Script

Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:

Registry::
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
"BootExecute"=hex(7):61,75,74,6f,63,68,65,63,6b,20,61,75,74,6f,63,68,6b,20,2a,00,00

Driver::
SBRE

Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

[external image: Posted Image]
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

desertrider

Post #12May 25, 2012, 12:53 AM UTC

ComboFix 12-05-23.05 - JW 05/24/2012 19:37:53.2.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2814.2210 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\JW\Desktop\CFScript.txt
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Legacy_SBRE
——-\Service_SBRE
.
.
((((((((((((((((((((((((( Files Created from 2012-04-25 to 2012-05-25 )))))))))))))))))))))))))))))))
.
.
2012-05-24 19:52 . 2012-05-24 19:52 ——– d—–w- C:\_OTL
2012-05-24 02:09 . 2012-05-24 02:09 ——– d—–w- c:\documents and settings\All Users\Application Data\PC Tools
2012-05-24 02:09 . 2012-05-24 02:09 ——– d—–w- c:\documents and settings\JW\Application Data\Product_RM
2012-05-20 15:47 . 2012-05-20 15:47 ——– d—–w- c:\documents and settings\All Users\Application Data\GFI Software
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-23 20:18 . 2012-03-31 09:37 419488 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2012-05-23 20:18 . 2011-08-27 17:56 70304 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-29 18:24 . 2003-03-31 12:00 26112 —-a-w- c:\windows\system32\userinit.exe
2012-04-11 13:14 . 2003-03-31 12:00 2148352 —-a-w- c:\windows\system32\ntoskrnl.exe
2012-04-11 13:12 . 2003-03-31 12:00 1862272 —-a-w- c:\windows\system32\win32k.sys
2012-04-11 12:35 . 2002-08-29 01:04 2026496 —-a-w- c:\windows\system32\ntkrnlpa.exe
2012-04-04 20:56 . 2012-01-08 23:50 22344 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-03-01 01:25 . 2003-03-31 12:00 832512 —-a-w- c:\windows\system32\wininet.dll
2012-03-01 01:25 . 2004-08-04 07:56 78336 ——w- c:\windows\system32\ieencode.dll
2012-03-01 01:25 . 2003-03-31 12:00 1830912 ——w- c:\windows\system32\inetcpl.cpl
2012-03-01 01:25 . 2003-03-31 12:00 17408 —-a-w- c:\windows\system32\corpol.dll
2012-02-29 14:10 . 2003-03-31 12:00 177664 —-a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10 . 2003-03-31 12:00 148480 —-a-w- c:\windows\system32\imagehlp.dll
2011-08-24 18:52 . 2011-08-24 12:28 1110476 —-a-w- c:\program files\7-Zip.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-25 202296]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 07:37 843712 —-a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2010-09-03 21:19 64104 —-a-w- c:\windows\ALCMTR.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2011-11-02 05:25 59240 —-a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Garmin Lifetime Updater]
2012-01-06 21:30 1446760 —-a-w- f:\program files\Garmin\Lifetime Updater\GarminLifetime.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2011-05-10 07:41 49208 —-a-w- c:\program files\HP\HP Software Update\hpwuschd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2012-01-16 23:22 421736 —-a-w- e:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 ——w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2010-07-09 21:24 13923432 —-a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2010-07-09 21:24 110696 —-a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2010-07-08 04:52 1753192 —-a-w- c:\program files\NVIDIA Corporation\nView\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PMBVolumeWatcher]
2011-08-24 22:30 651832 —-a-w- d:\program files\Sony\PMB\PMBVolumeWatcher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Profiler]
2006-09-05 14:12 184320 —-a-w- c:\program files\Saitek\Software\ProfilerU.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-10-24 20:28 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2010-09-03 21:20 19573352 —-a-w- c:\windows\RTHDCPL.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SaiMfd]
2006-09-28 16:19 126976 —-a-w- c:\program files\Saitek\Software\SaiMfd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2010-09-03 21:20 1833576 —-a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2011-12-28 01:18 1242448 —-a-w- f:\program files\Steam\steam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-06-09 18:06 254696 —-a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Steam Client Service"=3 (0x3)
"ose"=3 (0x3)
"nvsvc"=2 (0x2)
"nSvcIp"=2 (0x2)
"iPod Service"=3 (0x3)
"idsvc"=3 (0x3)
"gupdatem"=3 (0x3)
"gupdate"=2 (0x2)
"ForceWare Intelligent Application Manager (IAM)"=2 (0x2)
"PMBDeviceInfoProvider"=2 (0x2)
"NAUpdate"=3 (0x3)
"LightScribeService"=3 (0x3)
"JavaQuickStarterService"=2 (0x2)
"Apple Mobile Device"=2 (0x2)
"AdobeFlashPlayerUpdateSvc"=3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"f:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\{9FEF1A18-8F26-4F49-A5A4-956C12210624}\\setup\\hpznui01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"e:\\Program Files\\iTunes\\iTunes.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 3\\iw5sp.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 3\\iw5mp_server.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 3\\iw5mp.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\Fallout New Vegas Ultimate Edition Trailer\\smp.exe"=
"c:\\D\\pwc_pubs\\jre\\1.3.1\\bin\\javaw.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"f:\\Program Files\\Steam\\SteamApps\\common\\Scoregasm Trailer\\smp.exe"=
.
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [3/4/2011 2:23 PM 11352]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [3/10/2011 7:34 PM 34608]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [11/2/2009 9:27 PM 19472]
R3 npusbio;npusbio;c:\windows\system32\drivers\npusbio.sys [8/28/2011 4:27 PM 37408]
R3 SaiH053c;SaiH053c;c:\windows\system32\drivers\SaiH053c.sys [7/26/2004 12:54 PM 56576]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 1:16 PM 130384]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [7/10/2011 6:52 AM 1691480]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 1:16 PM 753504]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [3/31/2012 4:37 AM 257696]
S4 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [8/7/2011 8:21 AM 136176]
S4 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [8/7/2011 8:21 AM 136176]
S4 NAUpdate;@c:\program files\Nero\Update\NASvc.exe,-200;c:\program files\Nero\Update\NASvc.exe [5/4/2010 1:07 PM 503080]
S4 PMBDeviceInfoProvider;PMBDeviceInfoProvider;d:\program files\Sony\PMB\PMBDeviceInfoProvider.exe [8/24/2011 5:30 PM 430136]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2011-06-20 21:05 451872 —-a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2012-05-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 20:18]
.
2012-05-15 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 22:57]
.
2012-05-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-07 13:21]
.
2012-05-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-07 13:21]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
LSP: c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll
TCP: DhcpNameServer = [removed] [removed]
DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/3.0.1.0/GarminAxControl.CAB
DPF: {8BF7B588-F4AC-4A6E-AF63-F664449EED2E} - hxxps://pk.knighttrans.com/wps/PA_1_NO2UF4I118ADC026HKQ8KC28K6/applets/DMPlugin.cab
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-05-24 19:43
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'lsass.exe'(1220)
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll
.
- - - - - - - > 'explorer.exe'(2184)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
.
———————— Other Running Processes ————————
.
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
.
**************************************************************************
.
Completion time: 2012-05-24 19:47:31 - machine was rebooted
ComboFix-quarantined-files.txt 2012-05-25 00:47
.
Pre-Run: 59,999,199,232 bytes free
Post-Run: 59,865,149,440 bytes free
.
- - End Of File - - EB802024A3C3FB89489FC49AFF80C9DF

Tomk

Post #13May 25, 2012, 3:31 AM UTC

Download aswMBR.exe to your desktop.

Double click the aswMBR.exe to run it. If asked to download Avast's database please do so.

Click the "Scan" button to start scan
[external image: Posted Image]

On completion of the scan click save log, save it to your desktop and post in your next reply
[external image: Posted Image]

There shall also be a file on your desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) folder. Please attach that zipped file in your next reply.

Also, please let me know how things seem to be running now.

desertrider

Post #14May 25, 2012, 7:37 PM UTC

Things are pretty much back to normal. . I think most of the problem now is my connection with the provider. I seem to be at the end of the line so to speak of the cable in this town. There are connection issues where we lose connection from time to time. Thats what happened last night. Couldn't get back online till this morning. I'd change but this is the best here. I certainaly appreciate you time in helping me. All you folks here go above and beyond. Thank you! aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-05-25 14:15:20 —————————– 14:15:20.171 OS Version: Windows 5.1.2600 Service Pack 3 14:15:20.171 Number of processors: 2 586 0xF06 14:15:20.171 ComputerName: JIM UserName: JW 14:15:20.421 Initialize success 14:16:52.171 AVAST engine defs: 12052500 14:17:22.656 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port2Path0Target0Lun0 14:17:22.656 Disk 0 Vendor: WDC_WD16 10.0 Size: 152627MB BusType: 3 14:17:22.656 Disk 1 \Device\Harddisk1\DR1 -> \Device\Scsi\nvgts1Port2Path1Target1Lun0 14:17:22.656 Disk 1 Vendor: WDC_WD32 21.0 Size: 305245MB BusType: 3 14:17:22.671 Disk 0 MBR read successfully 14:17:22.671 Disk 0 MBR scan 14:17:22.703 Disk 0 Windows XP default MBR code 14:17:22.703 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 80003 MB offset 63 14:17:22.703 Disk 0 Partition - 00 0F Extended LBA 72614 MB offset 163846935 14:17:22.718 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 72614 MB offset 163846998 14:17:22.718 Disk 0 scanning sectors +312560640 14:17:22.781 Disk 0 scanning C:\WINDOWS\system32\drivers 14:17:31.671 Service scanning 14:17:36.531 Service KL1 C:\WINDOWS\system32\DRIVERS\kl1.sys **LOCKED** 5 14:17:36.562 Service kl2 C:\WINDOWS\system32\DRIVERS\kl2.sys **LOCKED** 5 14:17:36.703 Service klim5 C:\WINDOWS\system32\DRIVERS\klim5.sys **LOCKED** 5 14:17:36.718 Service klmouflt C:\WINDOWS\system32\DRIVERS\klmouflt.sys **LOCKED** 5 14:17:44.640 Modules scanning 14:17:49.921 Disk 0 trace - called modules: 14:17:49.953 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll SCSIPORT.SYS nvgts.sys 14:17:49.953 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8aa0dab8] 14:17:49.953 3 CLASSPNP.SYS[b80e8fd7] -> nt!IofCallDriver -> \Device\00000069[0x8aa0b920] 14:17:49.953 5 ACPI.sys[b7f7f620] -> nt!IofCallDriver -> \Device\Scsi\nvgts1Port2Path0Target0Lun0[0x8aa0ca38] 14:17:50.296 AVAST engine scan C:\WINDOWS 14:17:54.093 AVAST engine scan C:\WINDOWS\system32 14:19:55.875 AVAST engine scan C:\WINDOWS\system32\drivers 14:20:06.140 AVAST engine scan C:\Documents and Settings\JW 14:20:54.062 AVAST engine scan C:\Documents and Settings\All Users 14:23:47.593 Scan finished successfully 14:24:12.375 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\JW\Desktop\MBR.dat" 14:24:12.375 The log file has been saved successfully to "C:\Documents and Settings\JW\Desktop\aswMBR.txt"

Attachments:

📎MBR.zip

Tomk

Post #15May 25, 2012, 11:18 PM UTC

You appear to have had a "light" case of a zero access infection. It's a nasty one! Luckily it didn't really take hold of your system. I'd like you to run an online scan (it takes a long time) to see if it finds something I've missed. When you reply back with the log, also please verify for me that your firewall is still working (sometimes zero access kills it). You just need to verify that it is on. If it won't turn on…. we will have more work to do.

ESET Online Scanner:

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.

Please go here then click on: [external image: Posted Image]

Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
Select the option YES, I accept the Terms of Use then click on: [external image: Posted Image]
When prompted allow the Add-On/Active X to install.
Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
Now click on Advanced Settings and select the following:

- Scan for potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth Technology
Now click on: [external image: Posted Image]
The virus signature database… will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
When completed the Online Scan will begin automatically.
Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
Now click on: [external image: Posted Image]
Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
Copy and paste that log as a reply to this topic.

Note: Do not forget to re-enable your Anti-Virus application after running the above scan!

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Unknown infection/malware ? [Solved]

✨ Ask AI

Ask AI