Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

fake av


  • Please log in to reply
10 replies to this topic

#1 willhippy

willhippy

  • Members
  • 157 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bethlehem. PA
  • Local time:08:31 AM

Posted 26 August 2015 - 09:33 AM

good morning,

I followed the instructions and ran super anti spyware  and malwarebyts and still have it. Tried to run combofix but would not run in win 10. It pops up at various times and have to shut off with task manager, It only happens in chrome. I would like to use chrome  but if I have to I can delete it.

thank you in advance for your help 



BC AdBot (Login to Remove)

 


#2 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:02:31 PM

Posted 26 August 2015 - 09:58 AM

Hello,

 

Let's try this:

 

Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

rKill.exe
http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/
 

§  Double-click on the Rkill desktop icon to run the tool.

§  If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.

§  black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.

§  If not, delete the file, then download and use the one provided in Link 2.

§  Do not reboot until instructed.

§  If the tool does not run from any of the links provided, please let me know.

If normal mode still doesn't work, run the tool from safe mode.

When the scan is done Notepad will open with rKill log.
Post it in your next reply.

NOTE. rKill.txt log will also be present on your desktop.

-------

 

Please download AdwCleaner by Xplode onto your desktop.

§  Close all open programs and internet browsers.

§  Double click on adwcleaner.exe to run the tool.

§  In EULA window click I agree.

§  In Options uncheck Reset Winsock settings.

§  Click on Scan button.

§  When the scan has finished click on Cleaning button.

§  Your computer will be rebooted automatically. A text file will open after the restart.

§  Please post the contents of that logfile with your next reply.

§  You can find the logfile at C:\AdwCleaner[C1].txt as well.

--------

 

Please download Junkware Removal Tool to your desktop.

§  Shut down your protection software now to avoid potential conflicts.

§  Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

§  The tool will open and start scanning your system.

§  Please be patient as this can take a while to complete depending on your system's specifications.

§  On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

§  Post the contents of JRT.txt into your next message.

-----

 

Run MBAM again:

§  Click on the History tab > Application Logs.

§  Double click on the Scan Log which shows the Date and time of the scan just performed.

§  Click 'Export'.

§  Click 'Copy to Clipboard'

§  Paste the contents of the clipboard into your reply.

-------


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#3 willhippy

willhippy
  • Topic Starter

  • Members
  • 157 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bethlehem. PA
  • Local time:08:31 AM

Posted 26 August 2015 - 05:27 PM

thank you for the quick response.

here is mbam log:

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 8/26/2015
Scan Time: 5:03 PM
Logfile: 
Administrator: Yes
 
Version: 2.1.8.1057
Malware Database: v2015.08.26.08
Rootkit Database: v2015.08.16.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows 10
CPU: x64
File System: NTFS
User: will
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 531843
Time Elapsed: 1 hr, 10 min, 14 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 0
(No malicious items detected)
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 0
(No malicious items detected)
 
Files: 0
(No malicious items detected)
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)
Rkill:
 
Rkill 2.8.1 by Lawrence Abrams (Grinler)
Copyright 2008-2015 BleepingComputer.com
More Information about Rkill can be found at this link:
 
Program started at: 08/26/2015 09:19:30 AM in x64 mode.
Windows Version: Windows 10 Home 
 
Checking for Windows services to stop:
 
 * No malware services found to stop.
 
Checking for processes to terminate:
 
 * No malware processes found to kill.
 
Checking Registry for malware related settings:
 
 * No issues found in the Registry.
 
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
 
Performing miscellaneous checks:
 
 * Windows Defender Disabled
 
   [HKLM\SOFTWARE\Microsoft\Windows Defender]
   "DisableAntiSpyware" = dword:00000001
 
Checking Windows Service Integrity: 
 
 * E1G60 [Missing Service]
 * HdAudAddService [Missing Service]
 
 * gpsvc => %windir%\system32\svchost.exe -k GPSvcGroup [Incorrect ImagePath]
 
Searching for Missing Digital Signatures: 
 
 * No issues found.
 
Checking HOSTS File: 
 
 * HOSTS file entries found: 
 
  127.0.0.1       localhost
 
Program finished at: 08/26/2015 09:21:38 AM
Execution time: 0 hours(s), 2 minute(s), and 7 seconds(s)
ADW:
# AdwCleaner v5.003 - Logfile created 26/08/2015 at 16:07:18
# Updated 20/08/2015 by Xplode
# Database : 2015-08-25.1 [Server]
# Operating system : Windows 10 Home  (x64)
# Username : will - WILL-LAPTOP
# Running from : E:\Downloads\AdwCleaner (1).exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
[-] Folder Deleted : C:\Users\will\AppData\Local\slimware utilities inc
[-] Folder Deleted : C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\oalbpfagfhfkcmklpdanadjpbfdedndn
[-] Folder Deleted : C:\Users\will\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjlohfdjcjhmfcabomglnciodlnplhk
 
***** [ Files ] *****
 
[-] File Deleted : C:\Users\will\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage
[-] File Deleted : C:\Users\will\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage-journal
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Registry ] *****
 
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{58124A0B-DC32-4180-9BFF-E0E21AE34026}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\Compete
 
***** [ Web browsers ] *****
 
 
*************************
 
:: Proxy settings cleared
:: Winsock settings cleared
:: Chrome policies deleted
 
########## EOF - C:\AdwCleaner\AdwCleaner[C9].txt - [1660 bytes] ##########
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.8 (08.24.2015:1)
OS: Windows 10 Home x64
Ran by will on Wed 08/26/2015 at 16:16:11.82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Tasks
 
Successfully deleted: [Task] C:\WINDOWS\system32\tasks\SlimCleaner Run
Successfully deleted: [Task] C:\WINDOWS\system32\tasks\Wise Turbo Checker
Successfully deleted: [Task] C:\WINDOWS\Tasks\Wise Turbo Checker.job
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Clients\StartMenuInternet\Torch.KH6RXXLCPUM5EKXKFM5CSU24HI
 
 
 
~~~ Files
 
Successfully deleted: [File] C:\Users\will\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ajpgkpeckebdhofmmjfgcjjiiejpodla_0.localstorage
Successfully deleted: [File] C:\Users\will\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ajpgkpeckebdhofmmjfgcjjiiejpodla_0.localstorage-journal
Successfully deleted: [File] C:\Users\will\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_aoiidodopnnhiflaflbfeblnojefhigh_0.localstorage
 
 
 
~~~ Folders
 
Successfully deleted: [Folder] C:\ProgramData\google
Successfully deleted: [Folder] C:\ProgramData\iobit\driver booster
Successfully deleted: [Folder] C:\ProgramData\productdata
Successfully deleted: [Folder] C:\users\Public\Documents\downloaded installers
Successfully deleted: [Folder] C:\Users\Public\thunder network
Successfully deleted: [Folder] C:\Users\will\AppData\Roaming\update~1
 
 
 
~~~ FireFox
 
Failed to delete: [Folder] C:\Users\will\AppData\Roaming\mozilla\firefox\profiles\prpdnca2.default-1339788854758\extensions\iobit@mybrowserbar.com
 
 
 
~~~ Chrome
 
Successfully deleted: [Folder] C:\Users\will\Appdata\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla
Successfully deleted: [Folder] C:\Users\will\Appdata\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj
Successfully deleted: [Folder] C:\Users\will\Appdata\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil
 
[C:\Users\will\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
 
[C:\Users\will\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
ajpgkpeckebdhofmmjfgcjjiiejpodla
bmnlcjabgnpnenekpadlanbbkooimhnj
elicpjhcidhpjomhibiffojpinpmmpil
 
[C:\Users\will\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
 
[C:\Users\will\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
  ajpgkpeckebdhofmmjfgcjjiiejpodla,
  bmnlcjabgnpnenekpadlanbbkooimhnj,
  elicpjhcidhpjomhibiffojpinpmmpil
]
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 08/26/2015 at 16:55:24.21
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 


#4 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:02:31 PM

Posted 26 August 2015 - 05:30 PM

Do you still have fake av problem?


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#5 willhippy

willhippy
  • Topic Starter

  • Members
  • 157 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bethlehem. PA
  • Local time:08:31 AM

Posted 27 August 2015 - 01:52 PM

good afternoon. 
the fake av is gone. now I got another one

this is part of it. I took screenshot but couldn't figute out how to attatch it

the page at V5456kkdsq8.xyseer4952-computerhacked-risk-call-immediately.xyz

crutial programing error alert

 

  

      



#6 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:02:31 PM

Posted 27 August 2015 - 04:50 PM

Please, post screenshot on sendspace.com

 

 

 

Download Security Check from here or here and save it to your Desktop.

§  Double-click SecurityCheck.exe

§  Follow the onscreen instructions inside of the black box.

§  Notepad document should open automatically called checkup.txt; please post the contents of that document.

------

 

Kaspersky Virus Removal Tool

Please download Kaspersky Virus Removal Tool from here.

§  Right click on KVRT.exe and select Run as Administrator.

§  Read the EULA, then select Accept.

§  Wait for Kaspersky Virus Removal Tool to initialize.

§  In the main screen, select Change parameters, place a checkmark in System drive, then click OK.

§  Click Start scan.

§  Wait for Kaspersky Virus Removal Tool to complete scanning.

§  When the scan is finished, select Neutralize all for all detected objects.

§  Close Kaspersky Virus Removal Tool when done.

Informe me if something is detected.

-------

 

Emsisoft Emergency Kit

Please download Emsisoft Emergency Kit and save it to your desktop. Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop. Leave all settings as they are and click the Extract button at the bottom. A folder named EEK will be created in the root of the drive (usually c:\).

 

  • After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
  • The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates. Please click Yes so that it downloads the latest database updates.
  • When the update process is complete, a new button will appear in the lower-left corner that says Back. Click on this button to return to the Overview screen.
  • Click on Scan to be taken to the scan options. If you are asked if you want the scanner to scan for Potentially Unwanted Programs, then click Yes.
  • Click on the Malware Scan button to start the scan.
  • When the scan is completed click the Quarantine selected objects button. Note, this option is only available if malicious objects were detected during the scan.
  • When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
  • Please save the log in Notepad on your desktop, and attach it to your next reply.
  • When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.

I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#7 willhippy

willhippy
  • Topic Starter

  • Members
  • 157 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bethlehem. PA
  • Local time:08:31 AM

Posted 27 August 2015 - 07:09 PM

good evening,

here are the scans

 Kaspersky didn't find anything.

Security check

 Results of screen317's Security Check version 1.008  

   x64 (UAC is enabled)  

 Internet Explorer 11  

``````````````Antivirus/Firewall Check:`````````````` 

 Windows Firewall Enabled!  

Windows Defender   

COMODO Antivirus   

 Antivirus up to date!  

`````````Anti-malware/Other Utilities Check:````````` 

 SpywareBlaster 5.2    

 Duplicate Cleaner Free 3.2.4  

 ProcessCleaner 1.96    

 SlimCleaner     

 JavaFX 2.1.1    

 Java 8 Update 45  

 Java version 32-bit out of Date! 

 Adobe Flash Player 18.0.0.232  

 Mozilla Firefox (40.0.2) 

 Google Chrome (44.0.2403.155) 

 Google Chrome (44.0.2403.157) 

````````Process Check: objlist.exe by Laurent````````  

 Comodo Firewall cmdagent.exe 

`````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 

````````````````````End of Log`````````````````````` 

 
Emsisoft

Emsisoft Emergency Kit - Version 10.0
Last update: 8/27/2015 7:28:57 PM
User account: WILL-LAPTOP\will
 
Scan settings:
 
Scan type: Malware Scan
Objects: Rootkits, Memory, Traces, Files
 
Detect PUPs: On
Scan archives: Off
ADS Scan: On
File extension filter: Off
Advanced caching: On
Direct disk access: Off
 
Scan start: 8/27/2015 7:29:50 PM
C:\WINDOWS\Tasks\RegSERVO.job detected: Application.AdTask (A)
Value: HKEY_USERS\S-1-5-21-1958726619-2033566604-2034206773-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR detected: Setting.DisableTaskMgr (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS detected: Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-1958726619-2033566604-2034206773-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS detected: Setting.DisableRegistryTools (A)
C:\Users\will\Downloads\epm.exe detected: Application.InstallAd (A)
E:\Downloads\Malwarebytes Anti-Malware Premium 2.0.2.1012 Final Incl Keys\Keygen\Keygen.exe detected: Trojan.Generic.11647162 (B)
E:\Downloads\NirSoft\lsasecretsview.exe detected: Application.Nirsoft.K (B)
E:\Downloads\NirSoft\mailpv.exe detected: Gen:Variant.Application.NirSoft.1 (B)
E:\Downloads\NirSoft\wirelesskeyview.exe detected: Application.Nirsoft.K (B)
E:\Downloads\SlimCleaner-setup.exe detected: Application.Win32.InstallClean (A)
 
Scanned 105661
Found 10
 
Scan end: 8/27/2015 8:02:26 PM
Scan time: 0:32:36
 
E:\Downloads\SlimCleaner-setup.exe Quarantined Application.Win32.InstallClean (A)
E:\Downloads\NirSoft\wirelesskeyview.exe Quarantined Application.Nirsoft.K (B)
E:\Downloads\NirSoft\mailpv.exe Quarantined Gen:Variant.Application.NirSoft.1 (B)
E:\Downloads\NirSoft\lsasecretsview.exe Quarantined Application.Nirsoft.K (B)
E:\Downloads\Malwarebytes Anti-Malware Premium 2.0.2.1012 Final Incl Keys\Keygen\Keygen.exe Quarantined Trojan.Generic.11647162 (B)
C:\Users\will\Downloads\epm.exe Quarantined Application.InstallAd (A)
Value: HKEY_USERS\S-1-5-21-1958726619-2033566604-2034206773-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantined Setting.DisableRegistryTools (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantined Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-1958726619-2033566604-2034206773-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Quarantined Setting.DisableTaskMgr (A)
C:\WINDOWS\Tasks\RegSERVO.job Quarantined Application.AdTask (A)
 
Quarantined 10


#8 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:02:31 PM

Posted 28 August 2015 - 02:45 AM

It seems that Emsisoft removed some legitimate stuff, if you use this programs, you can un-quarantine:

 

 

E:\Downloads\SlimCleaner-setup.exe Quarantined Application.Win32.InstallClean (A)

E:\Downloads\NirSoft\wirelesskeyview.exe Quarantined Application.Nirsoft.K ( B)
E:\Downloads\NirSoft\mailpv.exe Quarantined Gen:Variant.Application.NirSoft.1 ( B)
E:\Downloads\NirSoft\lsasecretsview.exe Quarantined Application.Nirsoft.K ( B)

 

Also, I see Keygen for MBAM:

 

 

 

E:\Downloads\Malwarebytes Anti-Malware Premium 2.0.2.1012 Final Incl Keys\Keygen\Keygen.exe detected: Trojan.Generic.11647162

 

I don't support piracy.

 

------

 

Do you still see that message? If yes:

 

 

Please download MiniToolBox, save it to your desktop and run it.
Checkmark the following checkboxes:

§  Flush DNS

§  Report IE Proxy Settings

§  Reset IE Proxy Settings

§  Report FF Proxy Settings

§  Reset FF Proxy Settings

§  List IP configuration

§  List Winsock Entries

§  List Installed Programs

 

Click Go and post the result (MTB.txt). A copy of MTB.txt will be saved in the same directory the tool is run.

----------------------

 

Run MBAM again:

 

§  On the Dashboard, click the 'Update Now >>' link.

§  After the update completes, on Settings tab, set under Detection and Protection next options: 

1. 'Scan for rootkits'

2. Non-Malware Protection, for 'PUP detections', check, 'Threat detections as malware' option.

§  Return to Dashboard, click the Scan Now >> button.

§  A Threat Scan will begin.

§  When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.

§  In most cases, a restart will be required.

§  Wait for the prompt to restart the computer to appear, than click on Yes.

§  After the restart once you are back at your desktop, open MBAM once more.

§  Click on the History tab > Application Logs.

§  Double click on the Scan Log which shows the Date and time of the scan just performed.

§  Click 'Export'.

§  Click 'Copy to Clipboard'

§  Paste the contents of the clipboard into your reply.

--------

 

If this doesn't help...

 

Reset Chrome (http://www.howtogeek.com/171924/how-to-reset-your-web-browser-to-its-default-settings/)

Click on "Customize and control Google Chrome":
Click "Settings" then "Show advanced settings" at the bottom of the screen.
Click "Reset browser settings" button.
Restart Chrome.

---------

 

Tell me the status in next reply.

 


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#9 willhippy

willhippy
  • Topic Starter

  • Members
  • 157 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bethlehem. PA
  • Local time:08:31 AM

Posted 28 August 2015 - 09:09 AM

good morning,

 

I don't use pirated software.  I loaned this laptop to my son about 2 weeks ago, guess he did it.

I reset Chrome.

I think it is ok now  :bananas:

here are logs:

Malwarebytes Anti-Malware

www.malwarebytes.org

 

 

Update, 8/28/2015 8:06 AM, SYSTEM, WILL-LAPTOP, Manual, AKA IP Database, 2015.8.25.1, 2015.8.28.2, 

Update, 8/28/2015 8:06 AM, SYSTEM, WILL-LAPTOP, Manual, AKA Domain Database, 2015.8.25.1, 2015.8.27.4, 

Update, 8/28/2015 8:06 AM, SYSTEM, WILL-LAPTOP, Manual, Malware Database, 2015.8.26.8, 2015.8.28.2, 

Scan, 8/28/2015 9:42 AM, SYSTEM, WILL-LAPTOP, Manual, Start:8/28/2015 8:09 AM, Duration:1 hr 31 min 46 sec, Threat Scan, Completed, 0 Malware Detections, 1 Non-Malware Detection, 

Error, 8/28/2015 9:46 AM, SYSTEM, WILL-LAPTOP, Protection, IsLicensed, 13, 

Protection, 8/28/2015 9:46 AM, SYSTEM, WILL-LAPTOP, Protection, Malware Protection, Stopping, 

Protection, 8/28/2015 9:46 AM, SYSTEM, WILL-LAPTOP, Protection, Malware Protection, Stopped, 

 

(end)

 

MiniToolBox by Farbar  Version: 14-04-2015

Ran by will (administrator) on 28-08-2015 at 08:02:35

Running from "E:\Downloads"

Microsoft Windows 10 Home  (X64)

Model: Inspiron N5110 Manufacturer: Dell Inc.

Boot Mode: Normal

***************************************************************************

 

========================= Flush DNS: ===================================

 

Windows IP Configuration

 

Successfully flushed the DNS Resolver Cache.

 

========================= IE Proxy Settings: ============================== 

 

Proxy is not enabled.

No Proxy Server is set.

 

"Reset IE Proxy Settings": IE Proxy Settings were reset.

 

========================= FF Proxy Settings: ============================== 

 

 

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

 

========================= IP Configuration: ================================

 

Realtek PCIe FE Family Controller = Local Area Connection (Connected)

Intel® Centrino® Wireless-N 1030 Driver = Wireless Network Connection (Media disconnected)

Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected)

 

 

# ----------------------------------

# IPv4 Configuration

# ----------------------------------

pushd interface ipv4

 

reset

set global

 

 

popd

# End of IPv4 configuration

 

 

 

Windows IP Configuration

 

   Host Name . . . . . . . . . . . . : will-laptop

   Primary Dns Suffix  . . . . . . . : 

   Node Type . . . . . . . . . . . . : Hybrid

   IP Routing Enabled. . . . . . . . : No

   WINS Proxy Enabled. . . . . . . . : No

   DNS Suffix Search List. . . . . . : domain.actdsltmp

 

Wireless LAN adapter Wireless Network Connection:

 

   Media State . . . . . . . . . . . : Media disconnected

   Connection-specific DNS Suffix  . : domain.actdsltmp

   Description . . . . . . . . . . . : Intel® Centrino® Wireless-N 1030

   Physical Address. . . . . . . . . : BC-77-37-3F-D9-32

   DHCP Enabled. . . . . . . . . . . : Yes

   Autoconfiguration Enabled . . . . : Yes

 

Wireless LAN adapter Local Area Connection* 3:

 

   Media State . . . . . . . . . . . : Media disconnected

   Connection-specific DNS Suffix  . : 

   Description . . . . . . . . . . . : Microsoft Hosted Network Virtual Adapter

   Physical Address. . . . . . . . . : BC-77-37-3F-D9-33

   DHCP Enabled. . . . . . . . . . . : Yes

   Autoconfiguration Enabled . . . . : Yes

 

Ethernet adapter Local Area Connection:

 

   Connection-specific DNS Suffix  . : domain.actdsltmp

   Description . . . . . . . . . . . : Realtek PCIe FE Family Controller

   Physical Address. . . . . . . . . : 78-2B-CB-E6-6E-82

   DHCP Enabled. . . . . . . . . . . : Yes

   Autoconfiguration Enabled . . . . : Yes

   Link-local IPv6 Address . . . . . : fe80::1841:5ac4:5e29:10f6%7(Preferred) 

   IPv4 Address. . . . . . . . . . . : 192.168.1.6(Preferred) 

   Subnet Mask . . . . . . . . . . . : 255.255.255.0

   Lease Obtained. . . . . . . . . . : Friday, August 28, 2015 3:06:14 AM

   Lease Expires . . . . . . . . . . : Friday, September 04, 2015 7:56:29 AM

   Default Gateway . . . . . . . . . : 192.168.1.1

   DHCP Server . . . . . . . . . . . : 192.168.1.1

   DHCPv6 IAID . . . . . . . . . . . : 343419851

   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-C4-ED-05-78-2B-CB-E6-6E-82

   DNS Servers . . . . . . . . . . . : 8.26.56.26

                                       156.154.70.22

   NetBIOS over Tcpip. . . . . . . . : Enabled

 

Tunnel adapter isatap.domain.actdsltmp:

 

   Connection-specific DNS Suffix  . : domain.actdsltmp

   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2

   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

   DHCP Enabled. . . . . . . . . . . : No

   Autoconfiguration Enabled . . . . : Yes

   Link-local IPv6 Address . . . . . : fe80::5efe:192.168.1.6%17(Preferred) 

   Default Gateway . . . . . . . . . : 

   DHCPv6 IAID . . . . . . . . . . . : 285212672

   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-C4-ED-05-78-2B-CB-E6-6E-82

   DNS Servers . . . . . . . . . . . : 8.26.56.26

                                       156.154.70.22

   NetBIOS over Tcpip. . . . . . . . : Disabled

 

Ethernet adapter Bluetooth Network Connection:

 

   Media State . . . . . . . . . . . : Media disconnected

   Connection-specific DNS Suffix  . : 

   Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)

   Physical Address. . . . . . . . . : BC-77-37-3F-D9-36

   DHCP Enabled. . . . . . . . . . . : Yes

   Autoconfiguration Enabled . . . . : Yes

 

Tunnel adapter Teredo Tunneling Pseudo-Interface:

 

   Connection-specific DNS Suffix  . : 

   Description . . . . . . . . . . . : Microsoft Teredo Tunneling Adapter

   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

   DHCP Enabled. . . . . . . . . . . : No

   Autoconfiguration Enabled . . . . : Yes

   IPv6 Address. . . . . . . . . . . : 2001:0:9d38:90d7:184e:3078:b7a3:a2aa(Preferred) 

   Link-local IPv6 Address . . . . . : fe80::184e:3078:b7a3:a2aa%3(Preferred) 

   Default Gateway . . . . . . . . . : ::

   DHCPv6 IAID . . . . . . . . . . . : 385875968

   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-C4-ED-05-78-2B-CB-E6-6E-82

   NetBIOS over Tcpip. . . . . . . . : Disabled

Server:  ns1.recursive.dns.com

Address:  8.26.56.26

 

Name:    google.com.domain.actdsltmp

Addresses:  fe80:1::225:90ff:fe19:4b12

 92.242.144.50

 

 

Pinging google.com [173.194.121.33] with 32 bytes of data:

Reply from 173.194.121.33: bytes=32 time=31ms TTL=57

Reply from 173.194.121.33: bytes=32 time=32ms TTL=57

 

Ping statistics for 173.194.121.33:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 31ms, Maximum = 32ms, Average = 31ms

Server:  ns1.recursive.dns.com

Address:  8.26.56.26

 

Name:    yahoo.com.domain.actdsltmp

Addresses:  fe80:1::225:90ff:fe19:4b12

 92.242.144.50

 

 

Pinging yahoo.com [206.190.36.45] with 32 bytes of data:

Reply from 206.190.36.45: bytes=32 time=106ms TTL=53

Reply from 206.190.36.45: bytes=32 time=105ms TTL=53

 

Ping statistics for 206.190.36.45:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 105ms, Maximum = 106ms, Average = 105ms

 

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

 

Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================

Interface List

  2...bc 77 37 3f d9 32 ......Intel® Centrino® Wireless-N 1030

 15...bc 77 37 3f d9 33 ......Microsoft Hosted Network Virtual Adapter

  7...78 2b cb e6 6e 82 ......Realtek PCIe FE Family Controller

 17...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2

 19...bc 77 37 3f d9 36 ......Bluetooth Device (Personal Area Network)

  1...........................Software Loopback Interface 1

  3...00 00 00 00 00 00 00 e0 Microsoft Teredo Tunneling Adapter

===========================================================================

 

IPv4 Route Table

===========================================================================

Active Routes:

Network Destination        Netmask          Gateway       Interface  Metric

          0.0.0.0          0.0.0.0      192.168.1.1      192.168.1.6     20

        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306

        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306

  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306

      192.168.1.0    255.255.255.0         On-link       192.168.1.6    276

      192.168.1.6  255.255.255.255         On-link       192.168.1.6    276

    192.168.1.255  255.255.255.255         On-link       192.168.1.6    276

        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306

        224.0.0.0        240.0.0.0         On-link       192.168.1.6    276

  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306

  255.255.255.255  255.255.255.255         On-link       192.168.1.6    276

===========================================================================

Persistent Routes:

  None

 

IPv6 Route Table

===========================================================================

Active Routes:

 If Metric Network Destination      Gateway

  3    306 ::/0                     On-link

  1    306 ::1/128                  On-link

  3    306 2001::/32                On-link

  3    306 2001:0:9d38:90d7:184e:3078:b7a3:a2aa/128

                                    On-link

  7    276 fe80::/64                On-link

  3    306 fe80::/64                On-link

 17    281 fe80::5efe:192.168.1.6/128

                                    On-link

  7    276 fe80::1841:5ac4:5e29:10f6/128

                                    On-link

  3    306 fe80::184e:3078:b7a3:a2aa/128

                                    On-link

  1    306 ff00::/8                 On-link

  7    276 ff00::/8                 On-link

  3    306 ff00::/8                 On-link

===========================================================================

Persistent Routes:

  None

========================= Winsock entries =====================================

 

Catalog5 01 C:\WINDOWS\SysWOW64\NLAapi.dll [64000] (Microsoft Corporation)

Catalog5 02 C:\WINDOWS\SysWOW64\napinsp.dll [54784] (Microsoft Corporation)

Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation)

Catalog5 04 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation)

Catalog5 05 C:\WINDOWS\SysWOW64\wshbth.dll [51200] (Microsoft Corporation)

Catalog5 06 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog5 07 C:\WINDOWS\SysWOW64\winrnr.dll [23552] (Microsoft Corporation)

Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

Catalog9 12 C:\WINDOWS\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)

x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [79872] (Microsoft Corporation)

x64-Catalog5 02 C:\Windows\System32\napinsp.dll [67072] (Microsoft Corporation)

x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)

x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)

x64-Catalog5 05 C:\Windows\System32\wshbth.dll [62976] (Microsoft Corporation)

x64-Catalog5 06 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog5 07 C:\Windows\System32\winrnr.dll [31744] (Microsoft Corporation)

x64-Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)

x64-Catalog9 01 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 02 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 03 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 04 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 05 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 06 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 07 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 08 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 09 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 10 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 11 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

x64-Catalog9 12 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)

 

 

=========================== Installed Programs ============================

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 17.0.0.124 - Adobe Systems Incorporated) Hidden

Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Refresh Manager (x32 Version: 1.8.0 - Adobe Systems Incorporated) Hidden

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.4.154 - Adobe Systems, Inc.)

Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)

Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden

AIO_CDA_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden

AIO_Scan (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden

Amazon Kindle (HKCU\...\Amazon Kindle) (Version:  - Amazon)

AMD APP SDK Runtime (Version: 2.4.595.1 - Advanced Micro Devices Inc.) Hidden

Any Video Converter Ultimate 5.5.3 (HKLM-x32\...\Any Video Converter Ultimate_is1) (Version:  - Any-Video-Converter.com)

Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{06A333EA-4E9D-4848-865F-FE5A1E12AB30}) (Version: 8.2.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ArcSoft Collage Creator (HKLM-x32\...\{8AB0E0DC-E80D-43D5-956C-7A4840938411}) (Version:  - ArcSoft)

ATI Catalyst Install Manager (HKLM\...\{95808236-DE32-EC77-0D88-11AF9C7CF80D}) (Version: 3.0.820.0 - ATI Technologies, Inc.)

Avery Wizard 4.0 (HKLM-x32\...\{7196E6BD-4B65-43F9-9D30-73A8E58D0E84}) (Version: 4.0.103 - Avery)

Belarc Advisor 8.4 (HKLM-x32\...\Belarc Advisor) (Version: 8.4.0.0 - Belarc Inc.)

BenVista PhotoZoom Classic 6.0 (HKCU\...\PhotoZoom Classic 6) (Version: 6.0 - BenVista Ltd.)

BlackBox ISO Burner v2.0 (HKLM-x32\...\BlackBox ISO Burner v2.0) (Version:  - )

Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.60 - Atheros Communications)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden

Cerber AntiVirus (Version: 0.1.1652 - Mega HighTech S.L.) Hidden

COMODO Antivirus (HKLM\...\{2736B6BD-31EC-4FC8-A48C-F0A5C914C0B6}) (Version: 7.0.55655.4142 - COMODO Security Solutions Inc.)

Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 43.3.3.185 - Comodo)

Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden

Cropper (HKLM-x32\...\{26F29691-9764-4FC4-A5BF-A515DE8C23E6}) (Version: 1.9.4 - Fusion8Design)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Daphne_x64 (HKLM\...\{0E86DAB8-B08C-4714-BEAF-EAFCAC362B96}) (Version: 1.52.0 - DRK)

davehope.co.uk Product Key Finder (HKLM-x32\...\Product Key Finder_is1) (Version:  - davehope.co.uk)

Debenu PDF Tools 3.1.0.20 (HKLM-x32\...\Debenu PDF Tools) (Version: 3.1.0.20 - Debenu)

Definition Update for Microsoft Office 2010 (KB3054979) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{48BA0374-E8FE-4789-8430-3D25A95CBF9D}) (Version:  - Microsoft)

Dell System Detect - 1  (HKCU\...\73f463568823ebbe) (Version: 5.13.0.1 - Dell)

Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.1200.101.218 - ALPS ELECTRIC CO., LTD.)

Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.1 - Synaptics Incorporated)

Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 1.40.05 - Creative Technology Ltd)

Dell WLAN and Bluetooth Client Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Dell Inc.)

Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden

Digital Line Detect (HKLM-x32\...\{E646DCF0-5A68-11D5-B229-002078017FBF}) (Version: 1.21 - BVRP Software, Inc)

DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC)

DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden

Dropbox (HKCU\...\Dropbox) (Version: 3.6.9 - Dropbox, Inc.)

dupeGuru (HKLM\...\{C11DACBD-8863-4AA4-94AD-708602F6F7EF}) (Version: 3.9.1 - Hardcoded Software)

dupeGuru Music Edition (HKLM\...\{C51BC104-8666-4F9C-8072-715AE1A69A75}) (Version: 6.8.1 - Hardcoded Software)

dupeGuru Picture Edition (HKLM\...\{C9A60D50-28B0-4BCB-B720-1ECACA351F09}) (Version: 2.10.1 - Hardcoded Software)

Duplicate Cleaner Free 3.2.4 (HKLM-x32\...\Duplicate Cleaner Free) (Version: 3.2.4 - DigitalVolcano Software Ltd)

DVD Flick 1.3.0.7 (HKLM-x32\...\DVD Flick_is1) (Version: 1.3.0.7 - Dennis Meuwissen)

eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden

FastStone Capture 7.8 (HKLM-x32\...\FastStone Capture) (Version: 7.8 - FastStone Soft)

FastStone Image Viewer 5.3 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.3 - FastStone Soft)

Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden

Fotosizer 2.04 (HKLM-x32\...\Fotosizer) (Version: 2.04.0.535 - Fotosizer.com)

Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 2.7.40.126 - Foxit Software Inc.)

Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.1.0.306 - Foxit Software Inc.)

Free Disc Burner version 3.0.25.1122 (HKLM-x32\...\Free Disc Burner_is1) (Version: 3.0.25.1122 - DVDVideoSoft Ltd.)

Free Studio version 6.4.0.1107 (HKLM-x32\...\Free Studio_is1) (Version: 6.4.0.1107 - DVDVideoSoft Ltd.)

Glary Utilities 5.30 (HKLM-x32\...\Glary Utilities 5) (Version: 5.30.0.50 - Glarysoft Ltd)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.157 - Google Inc.)

Google Drive (HKLM-x32\...\{12ADFB82-D5A3-43E4-B2F4-FCD9B690315B}) (Version: 1.24.9931.5480 - Google, Inc.)

Google Earth Pro (HKLM-x32\...\{44FC61F0-2F8A-11E3-8CAE-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden

GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

Hornil StylePix (HKCU\...\Hornil StylePix) (Version: 1.11.4.0 - Hornil Co.)

HP Customer Experience Enhancements (x32 Version: 6.0.3.1 - Hewlett-Packard) Hidden

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Photo Creations (HKCU\...\HP Photo Creations) (Version: 1.0.0.18862 - HP)

HP Photosmart 6520 series Basic Device Software (HKLM\...\{1151BCF8-3246-4E34-9C17-22E66318C41C}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Photosmart 6520 series Help (HKLM-x32\...\{D3293275-1002-41F5-BC37-099B4251FF5B}) (Version: 28.0.0 - Hewlett Packard)

HP Photosmart 6520 series Product Improvement Study (HKLM\...\{F144E07C-4019-4092-BE25-B57819C97D2F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Photosmart All-In-One Driver Software 13.0 Rel. A (HKLM\...\{17016DA1-F040-4032-BD36-34DD317BC9D5}) (Version: 13.0 - HP)

HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)

HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Assistant (HKLM-x32\...\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}) (Version: 8.0.29.6 - Hewlett-Packard Company)

HP Support Solutions Framework (HKLM-x32\...\{F6A11738-3EE4-4573-AEA5-6CD5D491C167}) (Version: 12.0.30.81 - Hewlett-Packard Company)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden

HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden

HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden

HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden

HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

Icecream Media Converter version 1.46 (HKLM-x32\...\{896F1686-6F72-480B-B60B-336E7F8A2EE2}_is1) (Version: 1.46 - Icecream Apps)

IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6421.0 - IDT)

IHA_MessageCenter (HKLM-x32\...\{834265C4-CDF4-44D3-BD24-31531617EFB8}) (Version: 1.8.70 - Verizon)

ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

inSSIDer 3 (HKLM-x32\...\{A80CEA4E-74C1-4F9F-806B-E1D9AFC01768}) (Version: 3.0.7.48 - MetaGeek, LLC)

Intel PROSet Wireless (Version:  - ) Hidden

Intel® Chipset Device Software (Version: 10.0.13 - Intel Corporation) Hidden

Intel® Chipset Device Software (x32 Version: 10.0.13 - Intel® Corporation) Hidden

Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel® Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3074 - Intel Corporation)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)

Intel® Processor Identification Utility (HKLM-x32\...\{A92A4DB0-CD37-42D1-BE1D-603D53C24328}) (Version: 1.0.0.0 - Intel Corporation)

Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}) (Version: 1.0.0.0454 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)

Intel® PROSet/Wireless WiMAX Software (HKLM\...\{FBCA6D68-2FBE-4A52-8EAA-856CFEA714C8}) (Version: 6.01.0000 - Intel Corporation)

iRecordMax Sound Recorder v7.1.3 (HKLM-x32\...\iRecordMax Sound Recorder_is1) (Version:  - iRecordMax Inc.)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)

iTunes (HKLM\...\{0FB81B1A-1329-4905-8080-058E530CD6D9}) (Version: 12.2.0.145 - Apple Inc.)

Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)

Java Auto Updater (x32 Version: 2.8.45.14 - Oracle Corporation) Hidden

JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)

JetBrains PyCharm Community Edition 4.5.1 (HKLM-x32\...\PyCharm Community Edition 4.5.1) (Version: 141.1245 - JetBrains s.r.o.)

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version:  - LastPass)

LG USB Modem driver (HKLM-x32\...\{C3ABE126-2BB2-4246-BFE1-6797679B3579}) (Version:  - )

Live! Cam Avatar Creator (HKLM-x32\...\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}) (Version: 4.6.3009.1 - Creative Technology Ltd)

Logitech SetPoint 6.61 (HKLM\...\sp6) (Version: 6.61.15 - Logitech)

Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 5.3 - Paramount Software (UK) Ltd.)

Macrium Reflect Free Edition (Version: 5.3.7290 - Paramount Software (UK) Ltd.) Hidden

Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)

Maxtor Central Axis Manager (HKLM-x32\...\InstallShield_{560EFF7F-252D-4841-89CD-4EEB76D5FC1F}) (Version: 2.60.0050 - Seagate Technology)

Maxtor Central Axis Manager (x32 Version: 2.60.0050 - Seagate Technology) Hidden

MediaMonkey 4.1 (HKLM-x32\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.)

Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden

Microsoft .NET Framework 4.5.2 (Version: 4.5.51209 - Microsoft Corporation) Hidden

Microsoft Access database engine 2010 (English) (HKLM-x32\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Camera Codec Pack (HKLM\...\{D553E8CC-5C56-4B06-AC1A-A443DFF31092}) (Version: 6.3.9723.0 - Microsoft Corporation)

Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.11761.0_neutral_~_8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden

Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)

Microsoft Mouse and Keyboard Center (Version: 2.3.188.0 - Microsoft Corporation) Hidden

Microsoft Office Access MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0409-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)

Microsoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (HKLM-x32\...\{95140000-007D-0409-0000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)

Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft Streets & Trips 2013 (HKLM-x32\...\{C82185E8-C27B-4EF4-2013-4444BC2C2B6D}) (Version: 19.0.17.2200 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{a55ac379-46b0-461a-95b1-fef5c08443f2}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.50908 - Microsoft Corporation) Hidden

Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden

Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

MiniTool Partition Wizard Free 9.0 (HKLM-x32\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)

Modem Diagnostic Tool (HKLM\...\{0335701D-8E28-4A7F-B0EF-312974755BB2}) (Version: 1.0.28.0 - Dell)

MotoCast (HKLM-x32\...\{5401CEE8-3C2D-4835-A802-213306537FF4}) (Version: 2.0.31 - Motorola Mobility)

Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.4.5 - Motorola Mobility)

Motorola Device Software Update (x32 Version: 13.09.3001 - Motorola Mobility) Hidden

MOTOROLA MEDIA LINK (x32 Version: 1.9.0002.0 - Motorola) Hidden

Motorola Mobile Drivers Installation 6.3.0 (HKLM\...\{759E6A2F-1F01-45EF-A0C4-22F1B56CB975}) (Version: 6.3.0 - Motorola Mobility LLC)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 40.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 40.0.2 (x86 en-US)) (Version: 40.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.2 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden

MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyDriveConnect 3.3.0.1812 (HKLM-x32\...\MyDriveConnect) (Version: 3.3.0.1812 - TomTom)

Nero Abstract Themes (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden

Nero BackItUp (HKLM-x32\...\{0420F95C-11FF-4E02-B967-6CC22B188F9F}) (Version: 5.2.9001 - Nero AG)

Nero BackItUp 11 (x32 Version: 6.2.18400.2.100 - Nero AG) Hidden

Nero BackItUp 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden

Nero BackItUp and Burn (HKLM-x32\...\{E08CC458-41FB-4BB5-9B08-2C83DB55A5B9}) (Version: 1.2.0017.1 - Nero AG)

Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 12.0.4000 - Nero AG)

Nero Blu-ray Player (x32 Version: 12.1.20081 - Nero AG) Hidden

Nero Burning ROM 11 (x32 Version: 11.2.10300.0.0 - Nero AG) Hidden

Nero Burning ROM 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden

Nero BurnRights (HKLM-x32\...\{397516AE-7DFE-4F90-84E0-BD616D559434}) (Version: 3.6.17002 - Nero AG)

Nero Cliparts (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 11.2.0009 - Nero AG) Hidden

Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden

Nero Core Components (x32 Version: 11.4.0016 - Nero AG) Hidden

Nero CoverDesigner 11 (x32 Version: 6.0.11000.13.100 - Nero AG) Hidden

Nero CoverDesigner 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden

Nero Disc Menus 1 (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Disc Menus 2 (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Disc Menus 3 (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Disc Menus Basic (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Effects Basic (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Express (HKLM-x32\...\{6C3CF7AC-5AB0-42D9-93C0-68166A57AFB6}) (Version: 9.6.11002 - Nero AG)

Nero Express 11 (x32 Version: 11.2.10300.0.0 - Nero AG) Hidden

Nero Express 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden

Nero Family and Events Themes (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Football (Soccer) Themes (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Holiday and Sports Themes (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Image Samples (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1003 - Nero AG)

Nero Kwik Themes Basic (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero MediaHome (x32 Version: 1.28.4100 - Nero AG) Hidden

Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

Nero PiP Effects 1 (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero PiP Effects Basic (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Prerequisite Installer 1.0 (HKLM-x32\...\{E4B86819-E9B8-4089-963B-DF5E70E7A05E}) (Version: 11.0.13100 - Nero AG)

Nero Recode 11 (x32 Version: 5.2.11300.0.0 - Nero AG) Hidden

Nero Recode 11 Help (CHM) (x32 Version: 11.0.10600 - Nero AG) Hidden

Nero RescueAgent (HKLM-x32\...\{51E2F9B3-A972-4F58-B4EF-4D9676D9F5D1}) (Version: 2.6.13002 - Nero AG)

Nero RescueAgent 11 (x32 Version: 4.0.10600.10.100 - Nero AG) Hidden

Nero RescueAgent 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden

Nero SharedVideoCodecs (x32 Version: 1.0.16006 - Nero AG) Hidden

Nero SoundTrax 11 (x32 Version: 5.0.10700.6.100 - Nero AG) Hidden

Nero SoundTrax 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.13600.45.0 - Nero AG) Hidden

Nero Video 11 (x32 Version: 8.2.16000.4.100 - Nero AG) Hidden

Nero Video 11 Help (CHM) (x32 Version: 11.0.10300 - Nero AG) Hidden

Nero Video Samples (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero Video Transitions 1 (x32 Version: 16.0.10002 - Nero AG) Hidden

Nero WaveEditor 11 (x32 Version: 6.2.11300.0.100 - Nero AG) Hidden

Nero WaveEditor 11 Help (CHM) (x32 Version: 11.0.10400 - Nero AG) Hidden

nero.prerequisites.msi (x32 Version: 11.0.20017 - Nero AG) Hidden

neroxml (x32 Version: 1.0.0 - Nero AG) Hidden

Netwaiting (HKLM-x32\...\{3F92ABBB-6BBF-11D5-B229-002078017FBF}) (Version: 2.5.59 - BVRP Software, Inc)

Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden

Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden

NirSoft WirelessNetView (HKLM-x32\...\NirSoft WirelessNetView) (Version:  - )

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.2 - Notepad++ Team)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

OverDrive for Windows (HKLM-x32\...\{36994F59-D10D-46DD-A040-C5D095C2A3E9}) (Version: 3.4.1 - OverDrive, Inc.)

PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden

Perfect Effects 4.0.4 (HKLM-x32\...\{385E6A4D-A440-43E2-9BAF-A012FB5FC2E2}) (Version: 4.0.4 - onOne Software)

Perfect Effects 8 (HKLM-x32\...\{ABC791C9-E95B-40C8-8BDD-F5E84E2E268B}) (Version: 8.1.0 - onOne Software)

Perfect Effects 9 (HKLM-x32\...\Perfect Effects 9 PE) (Version: 9.5.0 - on1)

Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Plex Home Theater (HKLM-x32\...\Plex Home Theater) (Version: 1.3.5 - Plex inc)

Plex Media Server (HKLM-x32\...\{7425d872-d65d-42c9-8c6d-7a8a529a4b50}) (Version: 0.9.1107 - Plex, Inc.)

Plex Media Server (x32 Version: 0.9.1107 - Plex, Inc.) Hidden

Postimage version 1.0.1 (HKLM-x32\...\{B8BAF53F-4680-44A4-AF64-9934F924676B}_is1) (Version: 1.0.1 - Postimage)

PrintMaster (HKLM-x32\...\{A35C2323-3CEA-405C-9569-EF5DDE930B2F}) (Version:  - Broderbund LLC)

ProcessCleaner 1.96 (HKLM-x32\...\ProcessCleaner) (Version: 1.96 - ProcessCleaner)

ProductKeyDecryptor v5.0 (HKLM-x32\...\ProductKeyDecryptor) (Version: 5.0 - SecurityXploded)

PT Photo Editor 2.1.2 (HKLM\...\{5C65692A-A64B-4B54-8E1E-429A56979DB0}_is1) (Version: 2.1.2 - PHOTO-TOOLBOX.COM)

Punch! Super Home Suite (HKLM-x32\...\Punch! Super Home Suite) (Version:  - )

Python 2.7.10 (64-bit) (HKLM\...\{E2B51919-207A-43EB-AE78-733F9C6797C3}) (Version: 2.7.10150 - Python Software Foundation)

Python 3.4.3 (HKLM-x32\...\{CCD588A7-8D55-49F1-A30C-47FAB40889ED}) (Version: 3.4.16490 - Python Software Foundation)

Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.09.20 - Dell Inc.)

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Readiris Pro 12 (HKLM-x32\...\{A24F20F6-3BE3-4D25-BD0C-D7AEF7D180D4}) (Version: 12.00.5639 - I.R.I.S.)

Real Alternative 2.0.2 Lite (HKLM-x32\...\RealAlt_is1) (Version: 2.0.2 - )

RealDownloader (x32 Version: 18.0.1.10 - RealNetworks, Inc.) Hidden

RealDownloader (x32 Version: 18.0.1.9 - RealNetworks) Hidden

RealNetworks - Microsoft Visual C++ 2005 Runtime (x32 Version: 8.0 - RealNetworks) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden

RealPlayer (HKLM-x32\...\RealPlayer 15.0) (Version: 15.0.5 - RealNetworks)

Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.73.618.2013 - Realtek)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)

REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0134 - REALTEK Semiconductor Corp.)

RealTimes (RealPlayer) (HKLM-x32\...\RealPlayer 18.0) (Version: 18.0.1 - RealNetworks)

RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.39.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.39.0 - Renesas Electronics Corporation) Hidden

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

SanDisk_Button_Manager.exe (HKCU\...\{7994634D-6165-49f7-A296-F60D4F87E1EC}SanDisk_Button_Manager.exe) (Version: 3.3.19269 - Gemalto N.V.)

Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden

Scratch 2 Offline Editor (HKLM-x32\...\edu.media.mit.Scratch2Editor) (Version: 434.1 - MIT Media Lab)

Scratch 2 Offline Editor (x32 Version: 255.1 - MIT Media Lab) Hidden

Screenshot Captor 4.8.5 (HKLM-x32\...\ScreenshotCaptor_is1) (Version:  - )

Serif PanoramaPlus X4 (HKLM-x32\...\{35EDE682-4AE5-47D6-B44F-103F859951DC}) (Version: 4.0.3.010 - Serif (Europe) Ltd)

Serif PhotoPlus X4 (HKLM-x32\...\{AFA3224E-8AD6-4EFA-9DBA-A2E499F30282}) (Version: 14.0.2.013 - Serif (Europe) Ltd)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden

ShellTools (Version: 2.0.1 - Moon Software) Hidden

ShellTools 2.0.1 (HKLM-x32\...\ShellTools 2.0.1) (Version: 2.0.1 - Moon Software)

Shockwave (HKLM-x32\...\Shockwave) (Version:  - )

Shotty - Tiny but impressive screenshot utility (HKLM\...\2e730c18-03e8-4d1d-8fc2-0ee3ea04a765) (Version: 2.0.2.216 - Thomas Baumann)

Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.13.13771 - Skype Technologies S.A.)

Skype™ 7.7 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.103 - Skype Technologies S.A.)

SlimCleaner (HKLM-x32\...\{6B8D6199-EE44-4FD7-813A-6D8C62C9B384}) (Version: 4.0.30878 - SlimWare Utilities, Inc.)

SmartClose 1.3 (HKLM-x32\...\SmartClose.{7F22CBCB-92B5-4F5D-9A34-BB690215BEF2}_is1) (Version: 1.3 - BM-productions)

SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden

SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden

Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)

SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)

Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden

SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1204 - SUPERAntiSpyware.com)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Explorer 6.4.1 (HKLM-x32\...\{40F485F7-6478-4896-B0D5-F94BE677EB78}_is1) (Version:  - Mister Group)

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)

Texas Hold'em 3D XP Championship (HKLM-x32\...\Texas Hold'em 3D XP Championship) (Version: 1.0.1.0 - Selectsoft Publishing)

The Dude (HKLM-x32\...\Dude) (Version:  - )

TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - TomTom)

TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)

Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden

Tweaking.com - Simple System Tweaker (HKLM-x32\...\Tweaking.com - Simple System Tweaker) (Version: 2.1.0 - Tweaking.com)

UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden

Update for Microsoft Access 2010 (KB2965300) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{11E3BBC0-B7CA-41E7-BE61-B19AC8E8A136}) (Version:  - Microsoft)

Update for Microsoft Excel 2010 (KB2589348) 32-Bit Edition (HKLM-x32\...\{90140000-0016-0409-0000-0000000FF1CE}_Office14.SingleImage_{A7C2902F-C60B-428F-BDD7-ECE4DC0A2CA1}) (Version:  - Microsoft)

Update for Microsoft Excel 2010 (KB2589348) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{A7C2902F-C60B-428F-BDD7-ECE4DC0A2CA1}) (Version:  - Microsoft)

Update for Microsoft Excel 2010 (KB2589348) 32-Bit Edition (HKLM-x32\...\{90140000-001B-0409-0000-0000000FF1CE}_Office14.SingleImage_{A7C2902F-C60B-428F-BDD7-ECE4DC0A2CA1}) (Version:  - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2881026) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{E9B182C4-9B69-4A42-A799-C145FED67701}) (Version:  - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2881026) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E9B182C4-9B69-4A42-A799-C145FED67701}) (Version:  - Microsoft)

Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8BEEA2FC-D416-428A-B52A-A3ED45921151}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition (HKLM-x32\...\{90140000-006E-0409-0000-0000000FF1CE}_Office14.SingleImage_{8BEEA2FC-D416-428A-B52A-A3ED45921151}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-0015-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-0016-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-0019-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-001B-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0409-1000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-002C-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-006E-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-00A1-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-0115-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-0116-0409-1000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition (HKLM-x32\...\{90140000-0117-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA28304-D86F-4ACA-97FA-D126E0D02416}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589282) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D2D05EF6-7BD4-4857-A638-27F454941717}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589318) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{091CB6F9-4347-4084-A572-7C320DA7D686}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589386) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A4F91D60-654C-4892-BFD3-0D41ADA649B6}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2597089) 32-Bit Edition (HKLM-x32\...\{90140000-006E-0409-0000-0000000FF1CE}_Office14.SingleImage_{A12F43A5-CF0B-44E3-942F-2441CD442F0D}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2687275) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{0B7744D2-1FDD-4843-9987-7CE11B79F370}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D1C4AD0B-CC79-41D2-8D6A-571E7B30658C}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{C1954E2B-1672-4E5C-B564-F8CB2D08345B}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2910896) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{A7AA9E77-A9F4-4596-8AFD-4910FF258C3D}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2965296) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{D8F534DE-6213-4C81-AEAA-CE89182352B4}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2965301) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{44F6677A-EC0A-4A4C-8D2D-B640FA1A6A20}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2965301) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{44F6677A-EC0A-4A4C-8D2D-B640FA1A6A20}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB3054873) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9C9636BD-37A7-43F7-BB00-5C7606B42D27}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB3054962) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{1FD09F33-2F6B-4C10-BBA1-31F8FE68F912}) (Version:  - Microsoft)

Update for Microsoft Office 2010 (KB3054964) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{12B2F697-82C9-49A5-AA11-18806D3B3681}) (Version:  - Microsoft)

Update for Microsoft OneNote 2010 (KB2956075) 32-Bit Edition (HKLM-x32\...\{90140000-00A1-0409-0000-0000000FF1CE}_Office14.SingleImage_{82148027-13B5-4920-97F3-6A44A29B83D0}) (Version:  - Microsoft)

Update for Microsoft OneNote 2010 (KB2965297) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{1306C813-D03A-4FB1-AF83-C437CC454655}) (Version:  - Microsoft)

Update for Microsoft OneNote 2010 (KB2965297) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{1306C813-D03A-4FB1-AF83-C437CC454655}) (Version:  - Microsoft)

Update for Microsoft Outlook 2010 (KB3055041) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{EC4F1871-5E9A-4238-B49F-817E973ADF68}) (Version:  - Microsoft)

Update for Microsoft Outlook 2010 (KB3055041) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{48133637-4DD6-4E69-BFB8-10B96B0F72EA}) (Version:  - Microsoft)

Update for Microsoft Outlook Social Connector 2010 (KB2553308) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E7C8C158-9575-4120-AF5E-5CCEF2DD6761}) (Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2880517) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{DF548669-AAED-467B-A074-AE2B72A4A871}) (Version:  - Microsoft)

Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)

Update for Microsoft Visio Viewer 2010 (KB2881021) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{30B9D112-E68C-461D-B370-6D0B6AD61AC6}) (Version:  - Microsoft)

UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden

uRex DVD Ripper Platinum (HKCU\...\uRexDVDRipperPlatinum) (Version:  - uRexsoft, Inc. All Rights Reserved.)

USB2.0 ATV (HKLM-x32\...\USB2.0 ATV) (Version:  - )

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Verizon WiFi Activation (HKLM-x32\...\Verizon WiFi Activation_is1) (Version:  - Verizon)

Video Converter Factory Pro (HKCU\...\VideoConverterFactoryPro) (Version:  - WonderFox Soft, Inc. All Rights Reserved.)

Video Downloader (x32 Version: 1.0.0 - RealNetworks) Hidden

VisiPics V1.31 (HKLM-x32\...\VisiPics_is1) (Version:  - Ozone)

Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

Vz In-Home Agent (HKLM-x32\...\VzInHomeAgent) (Version: 9.0.73.0 - Verizon)

WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden

Welcome App (Start-up experience) (x32 Version: 11.0.23500.0.0 - Nero AG) Hidden

Whois View v1.0.112603 (HKLM-x32\...\Whois View_is1) (Version:  - Softnik Technologies)

Wi-Fi Connect (HKLM-x32\...\{C29CE41A-3268-4A5C-8B29-5799906785E9}) (Version: 2.20.0229.0817 - Verizon Business Global LLC)

WiFi Password Revealer (HKLM-x32\...\WiFi Password Revealer_is1) (Version: 1.0.0.7 - Magical Jelly Bean)

Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Family Safety (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Family Safety (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation)

WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)

WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)

WinX HD Video Converter Deluxe 5.5.2 (HKLM-x32\...\WinX HD Video Converter Deluxe_is1) (Version:  - Digiarty Software, Inc.)

Wise Care 365 version 2.94 (HKLM-x32\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 2.94 - WiseCleaner.com, Inc.)

Wise Plugin Manager 1.01 (HKLM-x32\...\Wise Plugin Manager_is1) (Version: 1.01 - WiseCleaner.com, Inc.)

Wise Program Uninstaller 1.63 (HKLM-x32\...\Wise Program Uninstaller_is1) (Version: 1.63 - WiseCleaner.com, Inc.)

WonderFox DVD Video Converter version 7.0 (HKLM-x32\...\{278D58D4-2B08-4ABF-957C-F0A2F8A1FBB7}_is1) (Version: 7.0 - WonderFox Soft, Inc)

Xmarks for IE (HKLM-x32\...\{C56BBAC8-0DD2-4CE4-86E0-F2BDEABDD0CF}) (Version: 127.0.160 - Xmarks)

Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version:  - Yahoo! Inc.)

 

**** End of log ****



#10 severac

severac

  • Members
  • 872 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Serbia
  • Local time:02:31 PM

Posted 28 August 2015 - 10:18 AM

Great.  :thumbup2: 

 

Empty your temp folders using TFC (Temporary File Cleaner)

§  Please download TFC by Old Timer and save it to your desktop.
alternate download link

§  Save any unsaved work. (TFC will close ALL open programs including your browser!)

§  Double-click on TFC.exe to run it. (If you are using Vista or above, right-click on the file and choose "Run As Administrator".)

§  Click the Start button to begin the cleaning process and let it run uninterrupted to completion.

§  Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway allowing Windows to load normally (not into Safe Mode) to ensure a complete clean.

-------------

 

This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download  DelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:

§  Activate UAC (optional; some users prefer to keep it off)

§  Remove disinfection tools

§  Create registry backup

§  Purge System Restore

Now click "Run" and wait patiently.
Once finished, a logfile will be created. You don't have to attach it to your next reply.

---------


I would like to help you to remove malware. Let's look inside.   :busy:

But I don't know to solve all PC problems.  :smash: 

 


#11 willhippy

willhippy
  • Topic Starter

  • Members
  • 157 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bethlehem. PA
  • Local time:08:31 AM

Posted 28 August 2015 - 01:39 PM

thank you

 

everything seems good now. :clapping:






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users