Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

RegSvr32 Problem


  • This topic is locked This topic is locked
21 replies to this topic

#1 jay1977

jay1977

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:42 AM

Posted 16 March 2015 - 02:35 PM

 Hiya im new to the forum and am hoping someone can help me with an annoying problem that only occurred in the last few days.I have a Dell Lattitude E6410 laptop, running Windows 8.1 Pro with Media Centre, i5 Processor at 2.67ghz....don't know if you needed all that info? lol. Anyway i have been getting 2 RegSvr32 pop ups at start up one saying...

 

The Module

 

"C:\Users\Jay\AppData\Loca...\klpmanppgoqbnde.dll"

 

failed to load.

 

 

Make sure the binary is stored at the specific path or debugit to check for problems with the binary or dependant .DLL Files.

 

The specific module could not be found.

 

The second one says the same except "C:\Users\Jay\AppData\Local\AWSworks\wptcikk.dll"

 

failed to load.

 

 

I have looked on the internet trying to find a resolve...i have ran the scannow from cmd at first i had error messages so i restored health thinking that would sort the problem but to no avail, ive also ran ccleaner, Malwarebytes, Comodo anti virus and super anti spyware but still have the problem so any help would be greatly appreciated  


Edited by Queen-Evie, 16 March 2015 - 03:23 PM.
moved from Windows 8 to Am I Infected


BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 AM

Posted 16 March 2015 - 02:46 PM

Hi jay1977 :)

Let's take a look at these shall we?

sUc2qjf.pngAutoruns - Start-up Entries
Follow the instructions below to give me an Autoruns log containing your start-up entries:
  • Download Autoruns.zip from the Sysinternals Suite webpage;
  • Extract the content of the Autoruns.zip folder where you want, then go in the folder, right-click on Autoruns.exe and select Run as Administrator;
  • Accept the EULA on opening, then wait for all the entries to load;
  • Click on File then Save and save the file to a location easily accessible;
  • Go on ge.tt and upload the Autoruns file you saved;
  • Once done, post the download URL of your uploaded file in your next reply;
3Al62Pm.pngMiniToolBox
  • Download MiniToolBox and move the executable file to your Desktop;
  • Execute MiniToolBox and check the following options:
    • List Installed Programs;
    • List Last 10 Event Viewer Errors;
      Yjt97o0.png
  • Once this is done, click on Go and wait for the scan to complete;
  • Once the scan is complete, a log will open. Please copy/paste the content of the output log in your next reply;

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 jay1977

jay1977
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:42 AM

Posted 16 March 2015 - 02:58 PM

Ok i did the autoruns thing but when i tried to save it just humg and said not responding although it did leave a file on the desktop which ive uploaded hope you can read it also here is the mini tool box scan...

`

MiniToolBox by Farbar  Version: 09-03-2015
Ran by Jay (administrator) on 16-03-2015 at 19:56:44
Running from "C:\Users\Jay\Desktop"
Microsoft Windows 8.1 Pro with Media Center  (X64)
Model: Latitude E6410 Manufacturer: Dell Inc.
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (03/16/2015 07:51:26 PM) (Source: Application Error) (User: )
Description: Faulting application name: autoruns.exe, version: 13.2.0.0, time stamp: 0x54fc841a
Faulting module name: autoruns.exe, version: 13.2.0.0, time stamp: 0x54fc841a
Exception code: 0xc0000005
Fault offset: 0x0000e3eb
Faulting process id: 0x1af4
Faulting application start time: 0xautoruns.exe0
Faulting application path: autoruns.exe1
Faulting module path: autoruns.exe2
Report Id: autoruns.exe3
Faulting package full name: autoruns.exe4
Faulting package-relative application ID: autoruns.exe5

Error: (03/16/2015 07:11:26 PM) (Source: Application Error) (User: )
Description: Faulting application name: Service_KMS.exe, version: 13.3.0.0, time stamp: 0x53b06ef6
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0x00000000
Fault offset: 0x00007ffaa94d0399
Faulting process id: 0x628
Faulting application start time: 0xService_KMS.exe0
Faulting application path: Service_KMS.exe1
Faulting module path: Service_KMS.exe2
Report Id: Service_KMS.exe3
Faulting package full name: Service_KMS.exe4
Faulting package-relative application ID: Service_KMS.exe5

Error: (03/16/2015 00:52:47 PM) (Source: Application Hang) (User: )
Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1414

Start Time: 01d05fe761171728

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 555d1b88-cbdb-11e4-827f-90004eee2f85

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 00:22:49 PM) (Source: Application Hang) (User: )
Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 16c0

Start Time: 01d05fe32bee76bf

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 234d19d3-cbd7-11e4-827f-90004eee2f85

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 11:52:43 AM) (Source: Application Hang) (User: )
Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 13ec

Start Time: 01d05fdefade9935

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: f07c57a4-cbd2-11e4-827f-90004eee2f85

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 11:23:30 AM) (Source: Application Hang) (User: )
Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: d3c

Start Time: 01d05fdada6a816a

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: c0bb26f2-cbce-11e4-827f-90004eee2f85

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 11:07:38 AM) (Source: Application Hang) (User: )
Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 15ac

Start Time: 01d05fd8b17dd350

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: a5510b10-cbcc-11e4-827f-90004eee2f85

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 10:59:14 AM) (Source: Application Hang) (User: )
Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: d9c

Start Time: 01d05fd77cca2c67

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 74c99d1f-cbcb-11e4-827f-90004eee2f85

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 10:48:17 AM) (Source: Application Error) (User: )
Description: Faulting application name: Service_KMS.exe, version: 13.3.0.0, time stamp: 0x53b06ef6
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0x00000000
Fault offset: 0x00007ffbdc720399
Faulting process id: 0x440
Faulting application start time: 0xService_KMS.exe0
Faulting application path: Service_KMS.exe1
Faulting module path: Service_KMS.exe2
Report Id: Service_KMS.exe3
Faulting package full name: Service_KMS.exe4
Faulting package-relative application ID: Service_KMS.exe5

Error: (03/16/2015 10:29:23 AM) (Source: Application Hang) (User: )
Description: The program LiveComm.exe version 17.5.9600.20689 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1b94

Start Time: 01d05fd34f547d3f

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 49a7b659-cbc7-11e4-827e-90004eee2f85

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

System errors:
=============
Error: (03/16/2015 07:11:46 PM) (Source: Service Control Manager) (User: )
Description: The Service KMSELDI service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/16/2015 07:09:53 PM) (Source: Service Control Manager) (User: )
Description: The Superfetch service terminated with the following error:
%%1062

Error: (03/16/2015 01:07:08 PM) (Source: Service Control Manager) (User: )
Description: The Service KMSELDI service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/16/2015 10:48:43 AM) (Source: Service Control Manager) (User: )
Description: The Service KMSELDI service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/15/2015 11:01:45 PM) (Source: DCOM) (User: MUSIKMAKER)
Description: {0002DF01-0000-0000-C000-000000000046}

Error: (03/15/2015 11:00:29 PM) (Source: Service Control Manager) (User: )
Description: The Service KMSELDI service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/15/2015 10:58:39 PM) (Source: Service Control Manager) (User: )
Description: The Windows Modules Installer service did not shut down properly after receiving a preshutdown control.

Error: (03/15/2015 09:59:50 PM) (Source: Service Control Manager) (User: )
Description: The Service KMSELDI service terminated unexpectedly.  It has done this 1 time(s).

Error: (03/15/2015 09:58:51 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 21:39:57 on ‎15/‎03/‎2015 was unexpected.

Error: (03/15/2015 07:41:30 PM) (Source: Service Control Manager) (User: )
Description: The Service KMSELDI service terminated unexpectedly.  It has done this 1 time(s).

Microsoft Office Sessions:
=========================
Error: (03/16/2015 07:51:26 PM) (Source: Application Error)(User: )
Description: autoruns.exe13.2.0.054fc841aautoruns.exe13.2.0.054fc841ac00000050000e3eb1af401d0602295863ea7C:\Users\Jay\Downloads\New folder\autoruns.exeC:\Users\Jay\Downloads\New folder\autoruns.exed408d849-cc15-11e4-8281-90004eee2f85

Error: (03/16/2015 07:11:26 PM) (Source: Application Error)(User: )
Description: Service_KMS.exe13.3.0.053b06ef6unknown0.0.0.0000000000000000000007ffaa94d039962801d0601cf12423c0C:\Program Files\KMSpico\Service_KMS.exeunknown3d870097-cc10-11e4-8281-90004eee2f85

Error: (03/16/2015 00:52:47 PM) (Source: Application Hang)(User: )
Description: LiveComm.exe17.5.9600.20689141401d05fe7611717284294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe555d1b88-cbdb-11e4-827f-90004eee2f85microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 00:22:49 PM) (Source: Application Hang)(User: )
Description: LiveComm.exe17.5.9600.2068916c001d05fe32bee76bf4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe234d19d3-cbd7-11e4-827f-90004eee2f85microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 11:52:43 AM) (Source: Application Hang)(User: )
Description: LiveComm.exe17.5.9600.2068913ec01d05fdefade99354294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exef07c57a4-cbd2-11e4-827f-90004eee2f85microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 11:23:30 AM) (Source: Application Hang)(User: )
Description: LiveComm.exe17.5.9600.20689d3c01d05fdada6a816a4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exec0bb26f2-cbce-11e4-827f-90004eee2f85microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 11:07:38 AM) (Source: Application Hang)(User: )
Description: LiveComm.exe17.5.9600.2068915ac01d05fd8b17dd3504294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exea5510b10-cbcc-11e4-827f-90004eee2f85microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 10:59:14 AM) (Source: Application Hang)(User: )
Description: LiveComm.exe17.5.9600.20689d9c01d05fd77cca2c674294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe74c99d1f-cbcb-11e4-827f-90004eee2f85microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (03/16/2015 10:48:17 AM) (Source: Application Error)(User: )
Description: Service_KMS.exe13.3.0.053b06ef6unknown0.0.0.0000000000000000000007ffbdc72039944001d05fd6a077b27aC:\Program Files\KMSpico\Service_KMS.exeunknownf39118f0-cbc9-11e4-827f-90004eee2f85

Error: (03/16/2015 10:29:23 AM) (Source: Application Hang)(User: )
Description: LiveComm.exe17.5.9600.206891b9401d05fd34f547d3f4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe49a7b659-cbc7-11e4-827e-90004eee2f85microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

CodeIntegrity Errors:
===================================
  Date: 2015-03-16 19:49:16.429
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-16 19:37:20.006
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-16 19:26:48.976
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-16 19:11:52.246
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-16 13:12:41.767
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-16 10:54:18.347
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-16 08:25:23.488
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-15 23:00:51.255
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-15 22:53:15.380
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-03-15 22:01:05.091
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

 

=========================== Installed Programs ============================
1.0 (HKLM-x32\...\Dancida VSTi V1.0_is1) (Version:  - )
ABL 2.9.2 (HKLM-x32\...\AudioRealism Bass Line 2_is1) (Version:  - AudioRealism)
Ableton Live 9 Beta (HKLM-x32\...\{F339C2BE-DD75-4888-896F-AD9E38C8B50F}) (Version: 9.0.0.0 - Ableton)
AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.10.34 - STMicroelectronics)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
AnarchyRhythms VST Plug-In (32 bit) (2.5.1.3) (HKLM-x32\...\AnarchyRhythms32bit) (Version: 2.5.1.3 - Anarchy-Rhythms.com)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Beta Bugs BugPack1 VST (HKLM-x32\...\BugPack1) (Version: "1.0.0" - "BetaBugs")
BiFilter v2.3 (HKLM-x32\...\Tone2 BiFilter2_is1) (Version:  - Tone2)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cableguys PanCake 2.2.2 (HKLM\...\PanCake_is1) (Version: 2.2.2 - Cableguys)
Camel Audio Alchemy (HKLM-x32\...\Camel Audio Alchemy) (Version: 1.25.0 - Camel Audio)
Camel Audio Cameleon 5000 v1.7 VSTi (HKLM-x32\...\Camel Audio Cameleon 5000 v1.7 VSTi) (Version:  - )
Catanya 1.0.1 (HKLM-x32\...\{62F13B4D-FD48-4317-8E55-06DB7B397F49}_is1) (Version:  - 7Aliens)
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
Celemony Melodyne version 2.1 (HKLM\...\Celemony Melodyne_is1) (Version:  - Copyright © 2001-2012 Celemony Software GmbH)
COMODO Antivirus (HKLM\...\{18F14F4B-D8A9-4309-817E-3BC0B7664E53}) (Version: 8.0.0.4344 - COMODO Security Solutions Inc.)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 36.1.1.21 - Comodo)
Custom Shop version 1.5.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.5.0 - IK Multimedia)
Dell Command | Update (HKLM-x32\...\{EC542D5D-B608-4145-A8F7-749C02BE6D94}) (Version: 2.0.0 - Dell Inc.)
Dell ControlVault Host Components Installer 64 bit (HKLM\...\{00E61C2A-E507-4662-8534-A0FA48F415AE}) (Version: 2.3.415.120 - Broadcom Corporation)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.0.6584.52 - Dell)
Dell System Detect (HKCU\...\73f463568823ebbe) (Version: 5.13.0.1 - Dell)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1107.101.210 - ALPS ELECTRIC CO., LTD.)
discoDSP Corona (HKLM-x32\...\DDCO_is1) (Version: 4.7 - discoDSP)
discoDSP Discovery Pro (HKLM-x32\...\discoDSP Discovery Pro R5.6_is1) (Version: 5.6 - )
discoDSP Vertigo VSTi v2.6 (HKLM-x32\...\discoDSP Vertigo_is1) (Version:  - )
DMS Dimension 1.0 (HKLM-x32\...\DMS Dimension_is1) (Version:  - )
DriverNavigator 3.4.5 (HKLM\...\DriverNavigator_is1) (Version: 3.4.5.0 - Easeware)
Edison (HKLM-x32\...\Edison) (Version:  - Image-Line)
Elastik v2.6.3 (HKLM\...\{F1B1B18B-A084-42A5-8C7F-2E2F9DC55963}_is1) (Version:  - )
ElectraX Dance and Trance Soundset (HKLM-x32\...\Tone2 ElectraX Dance and Trance Soundset_is1) (Version:  - Tone2)
ElectraX full (HKLM-x32\...\Tone2 ElectraX full_is1) (Version:  - Tone2)
ElectraX Morphing Soundset (HKLM-x32\...\Tone2 ElectraX Morphing Soundset_is1) (Version:  - Tone2)
ElectraX Vintage Soundset (HKLM-x32\...\Tone2 ElectraX Vintage Soundset_is1) (Version:  - Tone2)
ElectraX Voltage Soundset (HKLM-x32\...\Tone2 ElectraX Voltage Soundset_is1) (Version:  - Tone2)
ElectraX Wavetables Expansion (HKLM-x32\...\Tone2 ElectraX Wavetables Expansion_is1) (Version:  - Tone2)
Electronisounds Ubergate VST v1.3 (HKLM-x32\...\Electronisounds Ubergate VST v1.3_is1) (Version:  - )
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version:  - Steinberg Media Technologies GmbH)
EmpressPlugins.Tremolo.VST.v1.0 (HKLM-x32\...\EmpressPlugins Tremolo_is1) (Version:  - )
FabFilter Pro-MB 1.11 (HKLM-x32\...\FabFilter Pro-MB 1.11) (Version:  - )
FabFilter Pro-Q 2.03 (HKLM-x32\...\FabFilter Pro-Q 2.03) (Version:  - )
FilterBank v3.3 (HKLM-x32\...\Tone2 FilterBank3_is1) (Version:  - Tone2)
FireBird plus v1.11.2 (HKLM-x32\...\Tone2 FireBird_is1) (Version:  - Tone2)
FXpansion DCAM Synth Squad (HKLM-x32\...\FXpansion DCAM Synth Squad) (Version: 1.2.0.20 - FXpansion Audio UK Ltd)
FXpansion Maul (HKCU\...\FXpansion Maul) (Version: 1.0.1.1 - FXpansion Audio UK Ltd)
Gater version 1.4 (HKLM-x32\...\{B5230D87-DE1A-447E-89CC-33A3E7DC8978}_is1) (Version: 1.4 - SPC Plugins)
GeekBuddy (HKLM\...\{266FA04F-F0FA-4F7A-AA1E-387A57F579F2}) (Version: 4.19.131 - Comodo Security Solutions Inc)
Gemini 2.0 VSTi Synthesizer (HKLM-x32\...\C5C3DE58-7A08-422E-8709-16DC6FB69438) (Version: 2.0 - Audioxygen)
Gladiator  full (HKLM-x32\...\Tone2 Gladiator full_is1) (Version:  - Tone2)
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
Hardcore (HKLM-x32\...\Hardcore) (Version:  - Image-Line)
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.13.0.003 - HTC Corporation)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6292.0 - IDT)
IK Multimedia Authorization Manager version 1.0.9 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.9 - IK Multimedia)
IL Gross Beat (HKLM-x32\...\IL Gross Beat) (Version:  - Image-Line)
IL Harmless (HKLM-x32\...\IL Harmless) (Version:  - Image-Line)
IL Harmor (HKLM-x32\...\IL Harmor) (Version:  - Image-Line)
IL Juice Pack (HKLM-x32\...\IL Juice Pack) (Version:  - Image-Line)
IL Maximus (HKLM-x32\...\IL Maximus) (Version:  - Image-Line)
IL MiniHost (HKLM-x32\...\IL MiniHost) (Version:  - Image-Line)
IL Minihost Modular (HKLM-x32\...\IL Minihost Modular) (Version:  - Image-Line)
IL Ogun (HKLM-x32\...\IL Ogun) (Version:  - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version:  - Image-Line)
IL Slicex (HKLM-x32\...\IL Slicex) (Version:  - Image-Line)
IL Sytrus (HKLM-x32\...\IL Sytrus) (Version:  - Image-Line)
Intel® Chipset Device Software (Version: 10.0.13 - Intel Corporation) Hidden
Intel® Chipset Device Software (x32 Version: 10.0.13 - Intel® Corporation) Hidden
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version:  - Intel Corporation)
Intel® Network Connections 20.0.10.0 (HKLM\...\PROSetDX) (Version: 20.0.10.0 - Intel)
Intel® Network Connections 20.0.10.0 (Version: 20.0.10.0 - Intel) Hidden
Intel® Turbo Boost Technology Monitor 2.6 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.6.2.0 - Intel)
Intel® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
iZotope BreakTweaker (HKLM-x32\...\iZotope BreakTweaker_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 (HKLM-x32\...\iZotope Iris 2_is1) (Version: 2.00 - iZotope, Inc.)
iZotope Iris 2 Abstract Library (HKLM-x32\...\iZotope Iris 2 Abstract Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 Core Library (HKLM-x32\...\iZotope Iris 2 Core Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 Environments 1 Library (HKLM-x32\...\iZotope Iris 2 Environments 1 Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 Environments 2 Library (HKLM-x32\...\iZotope Iris 2 Environments 2 Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 EuroRack Modular Library (HKLM-x32\...\iZotope Iris 2 EuroRack Modular Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 Objects Library (HKLM-x32\...\iZotope Iris 2 Objects Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 Synthesizers 1 Library (HKLM-x32\...\iZotope Iris 2 Synthesizers 1 Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 Synthesizers 2 Library (HKLM-x32\...\iZotope Iris 2 Synthesizers 2 Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 Toys Library (HKLM-x32\...\iZotope Iris 2 Toys Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Iris 2 Voice Library (HKLM-x32\...\iZotope Iris 2 Voice Library_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Nectar 2 Production Suite (HKLM-x32\...\iZotope Nectar 2 Production Suite_is1) (Version: 2.00 - iZotope, Inc.)
iZotope Ozone 6 Advanced (HKLM-x32\...\iZotope Ozone 6 Advanced_is1) (Version: 6.01 - iZotope, Inc.)
iZotope Stutter Edit (HKLM-x32\...\iZotope Stutter Edit_is1) (Version: 1.05 - iZotope, Inc.)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Java Auto Updater (x32 Version: 2.8.40.26 - Oracle Corporation) Hidden
JBridge (HKLM-x32\...\JBridge) (Version:  - JBridge)
KMSpico v9.3.1 (HKLM\...\KMSpico_is1) (Version: 9.3.1 - )
LinPlug relectro (HKCU\...\LinPlug relectro) (Version:  - )
LinPlug Spectral (HKCU\...\LinPlug Spectral) (Version:  - )
Loomer Cumulus (HKLM-x32\...\Cumulus) (Version:  - Loomer)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Max 6.1.0 (HKLM\...\{33BC130F-F589-43EE-BF5E-9FA4C00E7E0E}) (Version: 136.1.0 - Cycling '74)
MediaMonkey 4.1 (HKLM-x32\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.)
MeldaProduction MTotalBundle 8 (HKLM-x32\...\MeldaProduction MTotalBundle 8) (Version:  - MeldaProduction)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Minecraft1.5.1 (HKLM-x32\...\Minecraft1.5.1) (Version:  - )
MixPad Multitrack Recording Software (HKLM-x32\...\MixPad) (Version: 3.73 - NCH Software)
Morphine (HKLM-x32\...\Morphine) (Version:  - Image-Line)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Nasty Looper 1.0 (HKLM-x32\...\Nasty_0) (Version: 1.0 - beatassist.eu)
Native Instruments Absynth 5 (HKLM-x32\...\Native Instruments Absynth 5) (Version:  - Native Instruments)
Native Instruments Absynth 5 (Version: 5.1.0.1013 - Native Instruments) Hidden
Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version:  - Native Instruments)
Native Instruments FM8 (Version: 1.2.0.1016 - Native Instruments) Hidden
Native Instruments Kontakt 4 (HKLM-x32\...\Native Instruments Kontakt 4) (Version:  - Native Instruments)
Native Instruments Kontakt 4 (Version: 4.0.4.3077 - Native Instruments) Hidden
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.4.0.292 - Native Instruments)
Native Instruments Massive (Version: 1.4.0.292 - Native Instruments) Hidden
Native Instruments Molekular (HKLM-x32\...\Native Instruments Molekular) (Version: 1.0.0.2 - Native Instruments)
Native Instruments Molekular (Version: 1.0.0.2 - Native Instruments) Hidden
Native Instruments Monark (HKLM-x32\...\Native Instruments Monark) (Version:  - Native Instruments)
Native Instruments Monark (Version: 1.0.0.001 - Native Instruments) Hidden
Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version:  - Native Instruments)
Native Instruments Reaktor 5 (Version: 5.8.0.550 - Native Instruments) Hidden
Native Instruments Reaktor Spark (HKLM-x32\...\Native Instruments Reaktor Spark) (Version:  - )
Native Instruments Rounds (HKLM-x32\...\Native Instruments Rounds) (Version: 1.0.0.3 - Native Instruments)
Native Instruments Rounds (Version: 1.0.0.3 - Native Instruments) Hidden
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version:  - Native Instruments)
Native Instruments Service Center (Version: 2.2.6.676 - Native Instruments) Hidden
Native Instruments Skanner XT (HKLM-x32\...\Native Instruments Skanner XT) (Version:  - Native Instruments)
Native Instruments Skanner XT (Version: 1.0.0.001 - Native Instruments) Hidden
Native Instruments Supercharger GT (HKLM-x32\...\Native Instruments Supercharger GT) (Version: 1.1.3.450 - Native Instruments)
Native Instruments Supercharger GT (Version: 1.1.3.450 - Native Instruments) Hidden
Native Instruments Transient Master FX (HKLM-x32\...\Native Instruments Transient Master FX) (Version:  - Native Instruments)
Native Instruments Transient Master FX (Version: 1.0.0.235 - Native Instruments) Hidden
NI Solid Mix Series 1.0.0.0 (Repack) (HKLM\...\NI Solid Mix Series_is1) (Version:  - )
Nicky Romero Kickstart 1.0.6 (HKLM\...\Kickstart_is1) (Version: 1.0.6 - Nicky Romero)
Octopus (HKCU\...\Octopus) (Version:  - )
Ohm Force - Mobilohm VST2 (HKLM-x32\...\Mobilohm VST2) (Version:  - )
Ohm Force - Ohmicide VST (HKLM-x32\...\Ohmicide VST) (Version:  - )
Ohm Force - Quad Frohmage VST2 (HKLM-x32\...\Quad Frohmage VST2) (Version:  - )
Ohm Force - Symptohm VST2 (HKLM-x32\...\Symptohm VST2) (Version:  - )
OhmForce Hematohm VST2 (HKLM-x32\...\Hematohm VST2) (Version:  - )
OhmForce Ohmboyz VST2 (HKLM-x32\...\Ohmboyz VST2) (Version:  - )
OhmForce Predatohm VST2 (HKLM-x32\...\Predatohm VST2) (Version:  - )
Oxium (HKLM\...\Oxium_is1) (Version: 1.5.0 - XILS-lab)
PACE License Support Win64 (HKLM-x32\...\InstallShield_{72ad9d51-0903-4fe7-af5d-33b3185fa6e9}) (Version: 2.4.6.0840 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.4.6.0840 - PACE Anti-Piracy, Inc.) Hidden
PhaseTwo VST plug-in (HKLM-x32\...\PhaseTwo VST plug-in) (Version: 1.0.0 - Audio Damage)
pHATfactory 001 1.0 (1202) (HKLM-x32\...\pHATfactory 001_is1) (Version:  - bitshift audio.)
PoiZone (HKLM-x32\...\PoiZone) (Version:  - Image-Line)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RayBlaster v1.0.1 (HKLM-x32\...\Tone2 RayBlaster_is1) (Version: 1.0.1 - Tone2)
ReaPlugs (HKLM-x32\...\ReaPlugs) (Version:  - )
ReDominator 1.0.1 (HKLM-x32\...\ReDominator_is1) (Version:  - AudioRealism)
reFX Nexus VSTi RTAS v2.2.0 (HKLM-x32\...\reFX Nexus_is1) (Version:  - )
reFX Vanguard 1.7.2 (HKLM-x32\...\reFX Vanguard 1.7.2_is1) (Version:  - )
Replicant VST plug-in (HKLM-x32\...\Replicant VST plug-in) (Version: 1.0.2 - Audio Damage)
RICOH Media Driver ver.2.11.01.02 (HKLM-x32\...\{2B818257-E6C7-4841-8C29-C5C9A982BCE5}) (Version: 2.11.01.02 - RICOH)
Rob Papen Albino 3 (HKCU\...\Rob Papen Albino 3) (Version:  - )
Sakura (HKLM-x32\...\Sakura) (Version:  - Image-Line)
Saurus v1.0 (HKLM-x32\...\Tone2 Saurus_is1) (Version:  - Tone2)
Sawer (HKLM-x32\...\Sawer) (Version:  - Image-Line)
SoundTap Streaming Audio Recorder (HKLM-x32\...\SoundTap) (Version: 2.31 - NCH Software)
SpectrumWorx (64 bit) (HKLM\...\{C7DD85D9-27A8-4157-8556-F2F04A302D21}) (Version: 2.9.3 - Little Endian Ltd.)
SSL X-ORCISM v1.1 (HKLM-x32\...\SSL X-ORCISM) (Version: v1.1 - Solid State Logic)
ST Microelectronics 3 Axis Digital Accelerometer Solution (HKLM-x32\...\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}) (Version: 4.11.0028 - ST Microelectronics)
Sugar Bytes Artillery2 2.3 (HKLM\...\Artillery2_is1) (Version: 2.3 - Sugar Bytes)
Sugar Bytes Consequence 1.5.1 (HKLM\...\Consequence_is1) (Version: 1.5.1 - Sugar Bytes)
Sugar Bytes Consequence Library 1.0 (HKLM\...\Consequence Library_is1) (Version: 1.0 - Sugar Bytes)
Sugar Bytes Cyclop 1.1.1 (HKLM\...\Cyclop_is1) (Version: 1.1.1 - Sugar Bytes)
Sugar Bytes Effectrix 1.4.2 (HKLM\...\Effectrix_is1) (Version: 1.4.2 - Sugar Bytes)
Sugar Bytes Guitarist 1.0.2 (HKLM\...\Guitarist_is1) (Version: 1.0.2 - Sugar Bytes)
Sugar Bytes Robotronic 1.3 (HKLM\...\Robotronic_is1) (Version: 1.3 - Sugar Bytes)
Sugar Bytes Thesys 1.6.2 (HKLM\...\Thesys_is1) (Version: 1.6.2 - Sugar Bytes)
Sugar Bytes Turnado 1.5 (HKLM\...\Turnado_is1) (Version: 1.5 - Sugar Bytes)
Sugar Bytes Unique 1.2 (HKLM\...\Unique_is1) (Version: 1.2 - Sugar Bytes)
Sugar Bytes Vogue 1.3.1 (HKLM\...\Vogue_is1) (Version: 1.3.1 - Sugar Bytes)
Sugar Bytes WOW 1.2 (HKLM\...\WOW_is1) (Version: 1.2 - Sugar Bytes)
Sugar Bytes WOW2 2.0.2 (HKLM\...\WOW2_is1) (Version: 2.0.2 - Sugar Bytes)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1170 - SUPERAntiSpyware.com)
Sylenth1 v2.21 (HKLM-x32\...\Sylenth1_is1) (Version:  - )
TerraTec Komplexer VSTi 1.0.3 (HKLM-x32\...\TerraTec Komplexer_is1) (Version:  - )
Tone2 Warmverb multi-FX full (HKLM-x32\...\Tone2 Warmverb multi-FX full_is1) (Version:  - Tone2)
Toxic Biohazard (HKLM-x32\...\Toxic Biohazard) (Version:  - Image-Line)
T-RackS CS version 4.6.0 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.6.0 - IK Multimedia)
Tremolan version 1.0.0 (HKLM-x32\...\{82F4CCCA-9EFE-47BB-A35E-6EC3E52702AF}_is1) (Version: 1.0.0 - Audiority)
Ultra Video Joiner 6.2.0411 (HKLM-x32\...\Ultra Video Joiner_is1) (Version:  - Aone Software)
UltraISO Premium V9.62 (HKLM-x32\...\UltraISO_is1) (Version:  - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.6.0.0 - Azureus Software, Inc.)
Waldorf Lector v1.03 VST2 VST3 x86 RePack (HKLM-x32\...\Waldorf Lector v1.03 VST2 VST3 x86 RePack_is1) (Version:  - )
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 5.95 - NCH Software)
Waves Complete V9r20 (HKLM-x32\...\{93000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.3.20 - Waves)
WinRAR 5.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
Wondershare TunesGo ( Version 4.2.1 ) (HKLM-x32\...\{0B31C808-8274-460D-8846-C711D40544A0}_is1) (Version: 4.2.1 - Wondershare)

**** End of log ****

 

 
 
Compose a message...
 
Cancel
 
Email preview
 
 
 
 
Compose a message...
 
Cancel
 
Email preview
 
 
 

 


lol the link for the uploaded file is at the bottom of my reply



#4 Queen-Evie

Queen-Evie

    Official Bleepin' G.R.I.T.S. (and proud of it)


  • Members
  • 16,485 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:My own little corner of the universe (somewhere in Alabama). It's OK, they know me here
  • Local time:04:42 AM

Posted 16 March 2015 - 03:32 PM

In looking over your logs, we have seen that you have KMSpico installed which is used in illegally activating Windows operating systems and other software.  Please uninstall this software . Bleeping Computer policy is if it allows you to use software you didn't pay for, for free, its illegal.

 

We will help you once but would not help you again unless they are using legit software, although this is subject to helper discretion.

 

Generally after the first time we don't assist in the future if the one is using pirated software.



#5 jay1977

jay1977
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:42 AM

Posted 16 March 2015 - 03:45 PM

ok uninstalled



#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 AM

Posted 16 March 2015 - 04:04 PM

I cannot open your Autoruns file since it looks like it's also making my Autoruns crash. If you boot in Safe Mode with Networking, are you able to open Autoruns and save the log file normally without it crashing?

http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/#windows8

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#7 jay1977

jay1977
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:42 AM

Posted 16 March 2015 - 04:31 PM

Well i tried it in safe mode with networking but it did the same thing...i =am running the right file aint i? Autoruns.exe...not autorunsc.exe?



#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 AM

Posted 16 March 2015 - 04:39 PM

Alright. Go in your folders with Autoruns.exe is located, hold the Shift click and right-click in the folder. You'll have the option Open a command line here. Select it. From there, enter autorunsc -a > results.txt. A file called results.txt will be created in the folder once the command is done running. Upload that file to ge.tt and give me the download link.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#9 jay1977

jay1977
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:42 AM

Posted 16 March 2015 - 04:43 PM

here you go...

http://ge.tt/29wY2OC2/v/0?c



#10 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 AM

Posted 16 March 2015 - 04:50 PM

Didn't work, try this command autorunsc.exe -a > results.txt What you should see is a bunch of text after in that text file.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#11 jay1977

jay1977
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:42 AM

Posted 16 March 2015 - 04:52 PM

it did exactly the same thing but ive uploaded it anyway

http://ge.tt/9d5E4OC2/v/0?c



#12 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 AM

Posted 16 March 2015 - 04:55 PM

Alright, try this command (looks like it changed since the last time I used it):

autorunsc -a * > results.txt

Worked for me.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#13 jay1977

jay1977
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:42 AM

Posted 16 March 2015 - 04:57 PM

success lol here you go...

http://ge.tt/1ZIm4OC2/v/0?c



#14 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,670 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:42 AM

Posted 16 March 2015 - 04:59 PM

Autoruns didn't detect it. Let's give RogueKiller a go.

RQKuhw1.pngRogueKiller
Pictures are inside the spoiler tags as they are a bit big.
  • Download the right version of RogueKiller for your Windows OS (you can access that information in the System properties window) : RogueKiller (32-bits) | RogueKiller (64-bits) ;
  • Once done, move the executable file to your Desktop and double-click on it to execute it;
  • On opening, a first automatic scan will start, let it complete;
    JiBY5OS.png
  • Once it's done, a prompt will appear asking you to accept the EULA of RogueKiller, click on Accept (your browser will open Adlice's RogueKiller website, you can close it);
    lPtYMCU.png
  • Once you accepted the EULA, click on the Scan button. You can see the progression of the scan via the progress bars in the middle and on the right;
    vM3y3hL.png
  • After the scan is finished, click on the Report button on the left;
  • A notepad window will open, with the RogueKiller Scan report in it. Copy and paste it in your next reply;

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#15 jay1977

jay1977
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:42 AM

Posted 16 March 2015 - 05:03 PM

sorry links don't work???


nevermind i found it


no thats not it...do you have another link please?






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users