WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93083 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Malwarebytes shows 2 Hijack.windowsupdates which cannot be removed

Started by Shalgi , Jan 18 2014 08:51 AM

Please log in to reply

32 replies to this topic

#16 oldman960

Forum God

Retired Classroom Teacher
14,770 posts

Posted 23 January 2014 - 09:32 PM

Hi Shalgi,

Try running ESET in Safe Mode with Networking. You security programs won't be running so no need to disable them.

Proud Graduate of the WTT Classroon
If you are happy with the help you recieved, please consider making a Donation
Curiosity didn't kill the cat. Ignorance did, curiosity was framed.
Learn how to protect Yourself

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

Advertisements

Register to Remove

#17 Shalgi

New Member

Authentic Member
17 posts

Posted 24 January 2014 - 08:28 AM

Hi,

Thanks for the idea, but unfortunately, running in safemode still produced a message regarding a proxy.

What should i do?

#18 oldman960

Forum God

Retired Classroom Teacher
14,770 posts

Posted 25 January 2014 - 06:58 AM

Hi Shalgi,

I haven't forgotten about. There doesn't seem to be a definitive solution to the proxy issue with ESET. I'm trying to get a different online scanner to work. They seem to change them a bit over time.

Meanwhile any issues with the computer?

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

#19 Shalgi

New Member

Authentic Member
17 posts

Posted 25 January 2014 - 11:14 AM

Hi oldman960,

Everything seems good at the moment, except for this ticks that started in the harddrive.

Thank you for not forgetting me.

#20 oldman960

Forum God

Retired Classroom Teacher
14,770 posts

Posted 26 January 2014 - 01:27 AM

Hi Shalgi,

Next, Double click on OTL.exe

Under the Custom Scans/Fixes box at the bottom, paste in the following
please note the fix starts with the :

:Services

:Commands
[emptytemp]
[createrestorepoint]

Then click the Run Fix button at the top

Let the program run unhindered
Please save the resulting log to be posted in your next reply.

Please post the OTL log.

I did this with Internet Explorer. Don't panic if during the scan you see it list several infected files. These are probably just cookies.

Disable your Antivirus and Firewall.

Go to Panda Active Scan.

Make sure the box beside Full scan is checked
Click Scan now
You may get a yellow Security bar at the top of your browser, click it to install the Active X component.
Next click install
You may recieve an Error during the update, click try again
If you recieve a yellow security bar warning click on it and click run add-on

Once the update is complete the scan will start.

After the scan is complete click the Export to button. You can save the log Active Scan.txt to a location og your choosing. Please post the log in your next reply,

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

#21 Shalgi

New Member

Authentic Member
17 posts

Posted 27 January 2014 - 11:28 AM

Hi,

Thank you for the guidence, here are the logs.

OTL:

All processes killed

========== SERVICES/DRIVERS ==========

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Aviv Shalgi

->Temp folder emptied: 349037794 bytes

->Temporary Internet Files folder emptied: 57554898 bytes

->Java cache emptied: 8900801 bytes

->Google Chrome cache emptied: 266585772 bytes

->Flash cache emptied: 593555 bytes

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

->Flash cache emptied: 41085 bytes

User: LocalService

->Temp folder emptied: 66016 bytes

->Temporary Internet Files folder emptied: 32902 bytes

User: LogMeInRemoteUser

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

->Flash cache emptied: 41085 bytes

User: LogMeInRemoteUser.AVIV

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 67 bytes

->Flash cache emptied: 41085 bytes

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 4304997 bytes

%systemroot%\System32 .tmp files removed: 59409 bytes

%systemroot%\System32\dllcache .tmp files removed: 6645988 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 71770682 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 730.00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.69.0 log created on 01262014_192101

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Panda:

;***********************************************************************************************************************************************************************************

ANALYSIS: 2014-01-27 19:29:32

PROTECTIONS: 2

MALWARE: 6

SUSPECTS: 1

;***********************************************************************************************************************************************************************************

PROTECTIONS

Description Version Active Updated

;===================================================================================================================================================================================

AVG 7.5.432 7.5.432 No No

McAfee Anti-Virus and Anti-Spyware No Yes

;===================================================================================================================================================================================

MALWARE

Id Description Type Active Severity Disinfectable Disinfected Location

;===================================================================================================================================================================================

00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\documents and settings\aviv shalgi\cookies\aviv_shalgi@doubleclick[1].txt

00167642 Cookie/Com.com TrackingCookie No 0 Yes No c:\documents and settings\aviv shalgi\cookies\aviv_shalgi@com[1].txt

00167704 Cookie/Xiti TrackingCookie No 0 Yes No c:\documents and settings\aviv shalgi\cookies\aviv_shalgi@xiti[1].txt

00168109 Cookie/Adtech TrackingCookie No 0 Yes No c:\documents and settings\aviv shalgi\cookies\aviv_shalgi@adtech[1].txt

00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\documents and settings\aviv shalgi\cookies\aviv_shalgi@advertising[2].txt

00194327 Cookie/Go TrackingCookie No 0 Yes No c:\documents and settings\aviv shalgi\cookies\aviv_shalgi@go[1].txt

;===================================================================================================================================================================================

SUSPECTS

Sent Location

;===================================================================================================================================================================================

No d:\matlab2012a\toolbox\rtw\targets\xpc\xpc\bin\udp2tcp.exe

;===================================================================================================================================================================================

VULNERABILITIES

Id Severity Description

;===================================================================================================================================================================================

#22 oldman960

Forum God

Retired Classroom Teacher
14,770 posts

Posted 27 January 2014 - 07:01 PM

Hi Shalgi,

That looks good. There are some renmants of an old AVG install. We can clean it with a tool.

Download
avg remover. Save it your Desktop.

Just double click it to run it. Please be patient it may take a bit of time if the tool needs to stop any services before it can remove them.

A log should be produced when it's finished.

We'll clean up the tools after you post back.

Can you describe the clicks you hear? Are they load sharp clicks or more of a softer somewhat drawn out tick?

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

#23 Shalgi

New Member

Authentic Member
17 posts

Posted 28 January 2014 - 02:38 PM

Hi oldman,

Thank you for the idea.

Here's the log:

2014-01-28 20:31:10,000 INFO AvgRemover 2012.0.5

-------------------------------------------------------

2014-01-28 20:31:10,140 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013)

2014-01-28 20:31:10,140 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)

2014-01-28 20:31:10,156 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d)

2014-01-28 20:31:10,156 INFO Command line: "C:\Documents and Settings\Aviv Shalgi\Desktop\avg_remover_stf_x86_2012_2125.exe"

2014-01-28 20:31:10,156 WARN AvgDir param empty.

2014-01-28 20:31:10,156 WARN AvgDataDir param empty.

2014-01-28 20:31:21,109 INFO AvgRemover runs in attempt number 1

2014-01-28 20:31:21,109 INFO Attempting to unregister AVG from the Windows Security Center.

2014-01-28 20:31:21,109 INFO Attempting to uninstall AVG Identity Protection.

2014-01-28 20:31:21,140 INFO Attempting to uninstall toolbar

2014-01-28 20:31:21,140 INFO ***** Msi data *****

2014-01-28 20:31:21,140 DEBUG No product code found for our upgrade codes, nothing to do here

2014-01-28 20:31:21,140 INFO ***** Exchange&Outlook plugins data *****

2014-01-28 20:31:21,140 INFO Removing AvgOutlook addin

2014-01-28 20:31:21,156 INFO AvgOutlook Removing HKCR addin keys x86

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'avgoutlook.Addin': 0xe001003d

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'avgoutlook.Addin.1': 0xe001003d

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'CLSID\{9F39046C-801E-4E15-8CD9-ACF0ACF29048}': 0xe001003d

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'CLSID\{F083C5AB-08AD-4ABF-A2BE-8FA5C7D2F10A}': 0xe001003d

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'AppID\avgoutlook.DLL': 0xe001003d

2014-01-28 20:31:21,156 INFO AvgOutlook Removing HKCR addin keys x64

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'avgoutlook.Addin': 0xe001003d

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'avgoutlook.Addin.1': 0xe001003d

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'CLSID\{9F39046C-801E-4E15-8CD9-ACF0ACF29048}': 0xe001003d

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'CLSID\{F083C5AB-08AD-4ABF-A2BE-8FA5C7D2F10A}': 0xe001003d

2014-01-28 20:31:21,156 DEBUG Failed to delete key 'AppID\avgoutlook.DLL': 0xe001003d

2014-01-28 20:31:21,156 INFO Removing Sharepoint plugin if exists

2014-01-28 20:31:21,156 DEBUG Failed to open key 'Software\Microsoft\Shared Tools\Web Server Extensions\AVScanner': 0xe0010013

2014-01-28 20:31:21,156 INFO Removing Antispam plugin for Exchange 2000/2003 if exists

2014-01-28 20:31:21,156 DEBUG Stopping service 'MSExchangeIS' to remove VSAPI plugin...

2014-01-28 20:31:21,156 DEBUG Service MSExchangeIS Stop failed (error: c0070424)

2014-01-28 20:31:21,156 DEBUG Exchange&Outlook plugins removal failed with error 0xc0070424

2014-01-28 20:31:21,156 INFO ***** Services *****

2014-01-28 20:31:21,156 INFO Processing service avg8emc, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service avgfws8, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service avg8wd, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AvgWFPx, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AvgWFPa, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AvgMfx86, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service avg8emc is not installed

2014-01-28 20:31:21,156 INFO Processing service avg9wd, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service avg8wd is not installed

2014-01-28 20:31:21,156 INFO Service avgfws8 is not installed

2014-01-28 20:31:21,156 INFO Processing service AvgMfx64, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AvgWFPx is not installed

2014-01-28 20:31:21,156 INFO Processing service AvgLdx86, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AvgWFPa is not installed

2014-01-28 20:31:21,156 DEBUG Service avg8emc RegCleanup

2014-01-28 20:31:21,156 INFO Processing service AvgLdx64, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AvgTdiX, it can take several minutes...

2014-01-28 20:31:21,156 DEBUG Service avg8wd RegCleanup

2014-01-28 20:31:21,156 DEBUG Service avgfws8 RegCleanup

2014-01-28 20:31:21,156 INFO Processing service AvgTdiA, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AvgWfpX, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AvgMfx86 is not installed

2014-01-28 20:31:21,156 INFO Service avg9wd is not installed

2014-01-28 20:31:21,156 INFO Processing service AvgWfpA, it can take several minutes...

2014-01-28 20:31:21,156 DEBUG Service AvgWFPx RegCleanup

2014-01-28 20:31:21,156 INFO Processing service AvgRkx64, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AvgRkx86, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service avg9emc, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service avgfws9, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AvgMfx64 is not installed

2014-01-28 20:31:21,156 DEBUG Service AvgWFPa RegCleanup

2014-01-28 20:31:21,156 INFO Processing service avgfws, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSAgent, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AvgLdx86 is not installed

2014-01-28 20:31:21,156 INFO Processing service AVGIDSWatcher, it can take several minutes...

2014-01-28 20:31:21,156 DEBUG Registry keys for service avg8wd are not present

2014-01-28 20:31:21,156 DEBUG Service AvgMfx86 RegCleanup

2014-01-28 20:31:21,156 DEBUG Registry keys for service avgfws8 are not present

2014-01-28 20:31:21,156 INFO Service AvgTdiX is not installed

2014-01-28 20:31:21,156 DEBUG Service avg9wd RegCleanup

2014-01-28 20:31:21,156 DEBUG Registry keys for service avg8emc are not present

2014-01-28 20:31:21,156 INFO Service AvgLdx64 is not installed

2014-01-28 20:31:21,156 INFO Processing service AVGIDSFilterxpx, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AvgWfpX is not installed

2014-01-28 20:31:21,156 INFO Processing service AVGIDSShimxpx, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSDriverxpx, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSFiltervta, it can take several minutes...

2014-01-28 20:31:21,156 DEBUG Registry keys for service AvgWFPx are not present

2014-01-28 20:31:21,156 INFO Service AvgWfpA is not installed

2014-01-28 20:31:21,156 INFO Service AvgTdiA is not installed

2014-01-28 20:31:21,156 INFO Processing service AVGIDSFiltervtx, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSShimvtx, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSShimw7x, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSDrivervta, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSDrivervtx, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AvgRkx64 is not installed

2014-01-28 20:31:21,156 INFO Service avg9emc is not installed

2014-01-28 20:31:21,156 INFO Service AvgRkx86 is not installed

2014-01-28 20:31:21,156 DEBUG Service AvgMfx64 RegCleanup

2014-01-28 20:31:21,156 INFO Processing service AVGIDSFilterw7x, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service avgfws9 is not installed

2014-01-28 20:31:21,156 INFO Processing service AVGIDSDriverw7x, it can take several minutes...

2014-01-28 20:31:21,156 DEBUG Service AvgLdx86 RegCleanup

2014-01-28 20:31:21,156 INFO Processing service AVGIDSErHrxpx, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service avgfws is not installed

2014-01-28 20:31:21,156 DEBUG Registry keys for service AvgWFPa are not present

2014-01-28 20:31:21,156 INFO Processing service AVGIDSDriverw7a, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSFilterw7a, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AVGIDSAgent is not installed

2014-01-28 20:31:21,156 DEBUG Service AvgTdiX RegCleanup

2014-01-28 20:31:21,156 DEBUG Registry keys for service AvgMfx86 are not present

2014-01-28 20:31:21,156 INFO Service AVGIDSWatcher is not installed

2014-01-28 20:31:21,156 DEBUG Registry keys for service avg9wd are not present

2014-01-28 20:31:21,156 DEBUG Service AvgLdx64 RegCleanup

2014-01-28 20:31:21,156 INFO Processing service AVGIDSErHrvtx, it can take several minutes...

2014-01-28 20:31:21,156 DEBUG Service AvgWfpX RegCleanup

2014-01-28 20:31:21,156 INFO Processing service AVGIDSErHrvta, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSErHrw7x, it can take several minutes...

2014-01-28 20:31:21,156 INFO Processing service AVGIDSErHrw7a, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AVGIDSFilterxpx is not installed

2014-01-28 20:31:21,156 INFO Processing service avgwd, it can take several minutes...

2014-01-28 20:31:21,156 INFO Service AVGIDSShimxpx is not installed

2014-01-28 20:31:21,156 DEBUG Service AvgWfpA RegCleanup

2014-01-28 20:31:21,156 INFO Service AVGIDSDriverxpx is not installed

2014-01-28 20:31:21,156 DEBUG Service AvgTdiA RegCleanup

2014-01-28 20:31:21,156 INFO Service AVGIDSFiltervta is not installed

2014-01-28 20:31:21,156 INFO Service AVGIDSFiltervtx is not installed

2014-01-28 20:31:21,156 INFO Service AVGIDSShimvtx is not installed

2014-01-28 20:31:21,156 INFO Service AVGIDSShimw7x is not installed

2014-01-28 20:31:21,156 DEBUG Service AvgRkx64 RegCleanup

2014-01-28 20:31:21,156 INFO Service AVGIDSDrivervta is not installed

2014-01-28 20:31:21,156 DEBUG Service avg9emc RegCleanup

2014-01-28 20:31:21,156 DEBUG Service AvgRkx86 RegCleanup

2014-01-28 20:31:21,156 INFO Service AVGIDSDrivervtx is not installed

2014-01-28 20:31:21,156 DEBUG Registry keys for service AvgMfx64 are not present

2014-01-28 20:31:21,156 DEBUG Service avgfws9 RegCleanup

2014-01-28 20:31:21,156 INFO Service AVGIDSFilterw7x is not installed

2014-01-28 20:31:21,156 DEBUG Registry keys for service AvgLdx86 are not present

2014-01-28 20:31:21,156 INFO Service AVGIDSDriverw7x is not installed

2014-01-28 20:31:21,156 DEBUG Service avgfws RegCleanup

2014-01-28 20:31:21,156 INFO Service AVGIDSErHrxpx is not installed

2014-01-28 20:31:21,156 DEBUG Service AVGIDSAgent RegCleanup

2014-01-28 20:31:21,171 INFO Service AVGIDSDriverw7a is not installed

2014-01-28 20:31:21,171 DEBUG Registry keys for service AvgTdiX are not present

2014-01-28 20:31:21,171 INFO Service AVGIDSFilterw7a is not installed

2014-01-28 20:31:21,171 DEBUG Service AVGIDSWatcher RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service AvgLdx64 are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AvgWfpX are not present

2014-01-28 20:31:21,171 INFO Service AVGIDSErHrvtx is not installed

2014-01-28 20:31:21,171 INFO Service AVGIDSErHrvta is not installed

2014-01-28 20:31:21,171 DEBUG Service AVGIDSFilterxpx RegCleanup

2014-01-28 20:31:21,171 INFO Service AVGIDSErHrw7x is not installed

2014-01-28 20:31:21,171 INFO Service AVGIDSErHrw7a is not installed

2014-01-28 20:31:21,171 DEBUG Service AVGIDSShimxpx RegCleanup

2014-01-28 20:31:21,171 DEBUG Service AVGIDSDriverxpx RegCleanup

2014-01-28 20:31:21,171 INFO Service avgwd is not installed

2014-01-28 20:31:21,171 DEBUG Registry keys for service AvgWfpA are not present

2014-01-28 20:31:21,171 DEBUG Service AVGIDSFiltervta RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service AvgTdiA are not present

2014-01-28 20:31:21,171 DEBUG Service AVGIDSFiltervtx RegCleanup

2014-01-28 20:31:21,171 DEBUG Service AVGIDSShimvtx RegCleanup

2014-01-28 20:31:21,171 DEBUG Service AVGIDSShimw7x RegCleanup

2014-01-28 20:31:21,171 DEBUG Service AVGIDSDrivervta RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service AvgRkx64 are not present

2014-01-28 20:31:21,171 DEBUG Service AVGIDSDrivervtx RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service avg9emc are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AvgRkx86 are not present

2014-01-28 20:31:21,171 DEBUG Service AVGIDSFilterw7x RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service avgfws9 are not present

2014-01-28 20:31:21,171 DEBUG Service AVGIDSDriverw7x RegCleanup

2014-01-28 20:31:21,171 DEBUG Service AVGIDSErHrxpx RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service avgfws are not present

2014-01-28 20:31:21,171 DEBUG Service AVGIDSDriverw7a RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSAgent are not present

2014-01-28 20:31:21,171 DEBUG Service AVGIDSFilterw7a RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSWatcher are not present

2014-01-28 20:31:21,171 DEBUG Service AVGIDSErHrvtx RegCleanup

2014-01-28 20:31:21,171 DEBUG Service AVGIDSErHrvta RegCleanup

2014-01-28 20:31:21,171 DEBUG Service AVGIDSErHrw7x RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSFilterxpx are not present

2014-01-28 20:31:21,171 DEBUG Service AVGIDSErHrw7a RegCleanup

2014-01-28 20:31:21,171 DEBUG Service avgwd RegCleanup

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSShimxpx are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSDriverxpx are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSFiltervta are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSDrivervta are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSDrivervtx are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSDriverw7a are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSDriverw7x are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSErHrxpx are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSFilterw7a are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSShimvtx are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSShimw7x are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSErHrw7x are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSErHrvta are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSErHrw7a are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service avgwd are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSErHrvtx are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSFiltervtx are not present

2014-01-28 20:31:21,171 DEBUG Registry keys for service AVGIDSFilterw7x are not present

2014-01-28 20:31:21,171 INFO ***** Avg Fw NDIS driver(separate process) *****

2014-01-28 20:31:21,265 INFO AvgRemover 2012.0.5

-------------------------------------------------------

2014-01-28 20:31:21,265 DEBUG Deleting stuck RunOnce value from registry.

2014-01-28 20:31:21,265 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013)

2014-01-28 20:31:21,265 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)

2014-01-28 20:31:21,265 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d)

2014-01-28 20:31:21,265 INFO Command line: "C:\Documents and Settings\Aviv Shalgi\Desktop\avg_remover_stf_x86_2012_2125.exe" /ndisonly /skipask

2014-01-28 20:31:21,265 WARN AvgDir param empty.

2014-01-28 20:31:21,265 WARN AvgDataDir param empty.

2014-01-28 20:31:21,265 INFO AvgRemover runs in attempt number 1

2014-01-28 20:31:21,265 INFO ***** Avg Fw NDIS driver *****

2014-01-28 20:31:21,265 INFO ...this operation can take several minutes...

2014-01-28 20:31:21,265 INFO FW removing policy

2014-01-28 20:31:25,187 INFO FW NDIS driver not present

2014-01-28 20:31:25,187 DEBUG Remove NDIS driver pass, next uninstalation step is 10, old was 1

2014-01-28 20:31:25,187 INFO ***** end of Fw NDIS separated process *****

2014-01-28 20:31:25,187 INFO ***** Drivers *****

2014-01-28 20:31:25,187 INFO ***** Running AVG process *****

2014-01-28 20:31:27,562 INFO ***** Registry keys and values *****

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove

2014-01-28 20:31:27,562 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove

2014-01-28 20:31:27,562 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1E73965B-8B48-48be-9C8D-68B920ABC1C4} Remove

2014-01-28 20:31:27,562 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1E73965B-8B48-48be-9C8D-68B920ABC1C4} is not present

2014-01-28 20:31:27,562 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found

2014-01-28 20:31:27,562 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt not found

2014-01-28 20:31:27,562 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg10Alrt

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg10Alrt ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg10Alrt not found

2014-01-28 20:31:27,562 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg2012Alrt

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg2012Alrt ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg2012Alrt not found

2014-01-28 20:31:27,562 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found

2014-01-28 20:31:27,562 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found

2014-01-28 20:31:27,562 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}

2014-01-28 20:31:27,562 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

2014-01-28 20:31:27,562 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove

2014-01-28 20:31:27,562 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

2014-01-28 20:31:27,562 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove

2014-01-28 20:31:27,562 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove

2014-01-28 20:31:27,562 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify

2014-01-28 20:31:27,562 DEBUG Reading SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs failed (error: e001003d)

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify failed

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove

2014-01-28 20:31:27,562 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove

2014-01-28 20:31:27,562 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove

2014-01-28 20:31:27,562 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove

2014-01-28 20:31:27,562 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present

2014-01-28 20:31:27,562 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run

2014-01-28 20:31:27,562 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove

2014-01-28 20:31:27,578 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run

2014-01-28 20:31:27,578 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY Remove

2014-01-28 20:31:27,578 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY is not present

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82}

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82}

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\CLSID\{6E801D47-45B7-4D10-8268-DBBD5C233F82} not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Classes\AvgDiagFile

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Classes\AvgDiagFile

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Classes\.avgdi

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\.avgdi not found

2014-01-28 20:31:27,578 INFO Processing registry SOFTWARE\Classes\.avgdx

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\.avgdx ForceRemove

2014-01-28 20:31:27,578 DEBUG Key SOFTWARE\Classes\.avgdx not found