Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Being redirected by malware to utrack.pw and other sites in Chrome


  • This topic is locked This topic is locked
18 replies to this topic

#1 ReverseSeija

ReverseSeija

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 02 November 2015 - 05:41 PM

Hello there, Seija here, my toshiba laptop using windows 7 service pack 1 32 bits has been infected with malware that redirects google chrome into various malicious sites, like utrack.pw and reimageplus while using google chrome or open new tabs, i tried using programs like ccleaner, malwarebytes or hitmanpro and installing avast free to get rid of this but the problem persisted, i made a new topic on this link : http://www.bleepingcomputer.com/forums/t/594904/being-redirected-to-utrackpw-reimageplus-and-other-sites-in-chrome/ . I was told to run various scans and after that i was told to make a new topic here because MBAR detected some malicious item. I generated the required logs using FRST, the FRST.txt log file is too big to be pasted in the topic so i attached  FRST.txt and Addition.txt.  Attached File  Addition.txt   60.8KB   1 downloadsAttached File  FRST.txt   63.6KB   7 downloads



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:35 PM

Posted 04 November 2015 - 11:54 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===



Press the windows key Windows_Logo_key.gif+ r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.
Please copy the entire contents of the code box below to the a new file.
 
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKU\S-1-5-21-2069420895-2628185817-1826839548-1000\...\Winlogon: [Shell] C:\windows\Explorer.exe [2133504 2011-02-25] (Microsoft Corporation) <==== ATTENTION
ShellIconOverlayIdentifiers: [4SyncOverlay1] -> {2012DE06-50C0-48BD-ACDE-88F95D4CAD1F} =>  No File
ShellIconOverlayIdentifiers: [4SyncOverlay2] -> {C72C6188-BEF2-46E5-A89A-52F0ED75219E} =>  No File
ShellIconOverlayIdentifiers: [4SyncOverlay3] -> {C92F6BC2-AF61-4C0E-80E0-939B8282DDB7} =>  No File
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKU\S-1-5-21-2069420895-2628185817-1826839548-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yahoo.com/?fr=avantsearch6
URLSearchHook: HKLM -> Default = {FE69C007-C452-4d3e-86D2-1730DF8BC871}
SearchScopes: HKLM -> DefaultScope value is missing
Toolbar: HKU\S-1-5-21-2069420895-2628185817-1826839548-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-2069420895-2628185817-1826839548-1000 -> No Name - {FD6D0D57-F67F-4E2D-A5F7-0C4C2C820470} -  No File
Toolbar: HKU\S-1-5-21-2069420895-2628185817-1826839548-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [No File]
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
CHR Extension: (Avast Online Security) - C:\Users\marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-10-30]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-30]
S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [X]
S3 fdrawcmd; \??\C:\windows\system32\drivers\fdrawcmd.sys [X]
S3 XDva397; \??\C:\windows\system32\XDva397.sys [X]
S3 XDva401; \??\C:\windows\system32\XDva401.sys [X]
S3 XDva402; \??\C:\windows\system32\XDva402.sys [X]
S3 XDva404; \??\C:\windows\system32\XDva404.sys [X]
S3 XDva405; \??\C:\windows\system32\XDva405.sys [X]
S3 XDva409; \??\C:\windows\system32\XDva409.sys [X]
S3 XDva410; \??\C:\windows\system32\XDva410.sys [X]
S3 XDva413; \??\C:\windows\system32\XDva413.sys [X]
S3 XDva424; \??\C:\windows\system32\XDva424.sys [X]
S3 XFDriver; \??\C:\Program Files\Xfire2\XFDriver.sys [X]
S3 xhunter1; \??\C:\windows\xhunter1.sys [X]
AlternateDataStreams: C:\ProgramData\TEMP:0B174FAE

End
Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

How is the computer running now?

Edited by nasdaq, 04 November 2015 - 11:55 AM.


#3 ReverseSeija

ReverseSeija
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 04 November 2015 - 03:16 PM

Thanks for the reply, i ran the fix and restarted my laptop but after opening chrome i was redirected to utrack.pw again,

  bmpkYlo.png

 

here is the log generated by FRST:

 

Fix result of Farbar Recovery Scan Tool (x86) Version:31-10-2015
Ran by marcelo (2015-11-04 17:57:17) Run:1
Running from C:\Users\marcelo\Desktop
Loaded Profiles: marcelo (Available Profiles: marcelo & Invitado)
Boot Mode: Normal
 
==============================================
 
fixlist content:
*****************
start
 
CreateRestorePoint:
EmptyTemp:
CloseProcesses:
 
HKU\S-1-5-21-2069420895-2628185817-1826839548-1000\...\Winlogon: [Shell] C:\windows\Explorer.exe [2133504 2011-02-25] (Microsoft Corporation) <==== ATTENTION
ShellIconOverlayIdentifiers: [4SyncOverlay1] -> {2012DE06-50C0-48BD-ACDE-88F95D4CAD1F} =>  No File
ShellIconOverlayIdentifiers: [4SyncOverlay2] -> {C72C6188-BEF2-46E5-A89A-52F0ED75219E} =>  No File
ShellIconOverlayIdentifiers: [4SyncOverlay3] -> {C92F6BC2-AF61-4C0E-80E0-939B8282DDB7} =>  No File
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKU\S-1-5-21-2069420895-2628185817-1826839548-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yahoo.com/?fr=avantsearch6
URLSearchHook: HKLM -> Default = {FE69C007-C452-4d3e-86D2-1730DF8BC871}
SearchScopes: HKLM -> DefaultScope value is missing
Toolbar: HKU\S-1-5-21-2069420895-2628185817-1826839548-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-2069420895-2628185817-1826839548-1000 -> No Name - {FD6D0D57-F67F-4E2D-A5F7-0C4C2C820470} -  No File
Toolbar: HKU\S-1-5-21-2069420895-2628185817-1826839548-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [No File]
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
CHR Extension: (Avast Online Security) - C:\Users\marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-10-30]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-30]
S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [X]
S3 fdrawcmd; \??\C:\windows\system32\drivers\fdrawcmd.sys [X]
S3 XDva397; \??\C:\windows\system32\XDva397.sys [X]
S3 XDva401; \??\C:\windows\system32\XDva401.sys [X]
S3 XDva402; \??\C:\windows\system32\XDva402.sys [X]
S3 XDva404; \??\C:\windows\system32\XDva404.sys [X]
S3 XDva405; \??\C:\windows\system32\XDva405.sys [X]
S3 XDva409; \??\C:\windows\system32\XDva409.sys [X]
S3 XDva410; \??\C:\windows\system32\XDva410.sys [X]
S3 XDva413; \??\C:\windows\system32\XDva413.sys [X]
S3 XDva424; \??\C:\windows\system32\XDva424.sys [X]
S3 XFDriver; \??\C:\Program Files\Xfire2\XFDriver.sys [X]
S3 xhunter1; \??\C:\windows\xhunter1.sys [X]
AlternateDataStreams: C:\ProgramData\TEMP:0B174FAE
 
End
*****************
 
Restore point was successfully created.
Processes closed successfully.
HKU\S-1-5-21-2069420895-2628185817-1826839548-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value removed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\4SyncOverlay1" => key removed successfully.
"HKCR\CLSID\{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F}" => key removed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\4SyncOverlay2" => key removed successfully.
"HKCR\CLSID\{C72C6188-BEF2-46E5-A89A-52F0ED75219E}" => key removed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\4SyncOverlay3" => key removed successfully.
"HKCR\CLSID\{C92F6BC2-AF61-4C0E-80E0-939B8282DDB7}" => key removed successfully.
"HKLM\SOFTWARE\Policies\Google" => key removed successfully.
HKU\S-1-5-21-2069420895-2628185817-1826839548-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks\\ => value removed successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKU\S-1-5-21-2069420895-2628185817-1826839548-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found. 
HKU\S-1-5-21-2069420895-2628185817-1826839548-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FD6D0D57-F67F-4E2D-A5F7-0C4C2C820470} => value removed successfully.
HKCR\CLSID\{FD6D0D57-F67F-4E2D-A5F7-0C4C2C820470} => key not found. 
HKU\S-1-5-21-2069420895-2628185817-1826839548-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found. 
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully.
"HKLM\Software\MozillaPlugins\@nexon.net/NxGame" => key removed successfully.
"HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => key removed successfully.
C:\Users\marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki => moved successfully
"HKLM\SOFTWARE\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki" => key removed successfully.
Could not move "C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx" => Scheduled to move on reboot.
EagleXNt => service removed successfully.
fdrawcmd => service removed successfully.
XDva397 => service removed successfully.
XDva401 => service removed successfully.
XDva402 => service removed successfully.
XDva404 => service removed successfully.
XDva405 => service removed successfully.
XDva409 => service removed successfully.
XDva410 => service removed successfully.
XDva413 => service removed successfully.
XDva424 => service removed successfully.
XFDriver => service removed successfully.
xhunter1 => service removed successfully.
"C:\ProgramData\TEMP" => ":0B174FAE" ADS not found.
EmptyTemp: => 693.4 MB temporary data Removed.
 
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-11-04 18:05:00)
 
"C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx" => Could not move
 
==== End of Fixlog 18:05:00 ====


#4 nasdaq

nasdaq

  • Malware Response Team
  • 40,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:35 PM

Posted 05 November 2015 - 09:31 AM

Reset Chrome...
Open Google Chrome, click on menu icon google-chrome-setting-icon.png which is located right side top of the google chrome.
 
Click "Settings" then "Show advanced settings" at the bottom of the screen.
 
Click "Reset browser settings" button.
 
Clear your cache and cookies
https://support.google.com/chromebook/answer/183083?hl=en
Select "From the beginning of time"

Restart the computer normally.

Restart Chrome.


How is it now

#5 ReverseSeija

ReverseSeija
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 06 November 2015 - 08:07 PM

Hello again i tried what you said on Chrome and after some time it keeps redirecting to various malicious sites



#6 nasdaq

nasdaq

  • Malware Response Team
  • 40,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:35 PM

Posted 07 November 2015 - 09:15 AM

Let me check further.

Temporarily disable your AV program so it does not interfere.
Info on how to disable your security applications How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides.

Download Zeok tool from here

When the download appears, save to the Desktop.
On the Desktop, right-click the Zoek.exe file and select: Run as Administrator
(Give it a few seconds to appear.)

Next, copy/paste the entire script inside the code box below to the input field of Zoek:
process;
installer-list;
installedprogs;
startupall;
firefoxlook; 
chromelook;
srinfo;
Now...
Close any open Browsers.
Click the Run script button, and wait. It takes a few minutes to run all the script.

When the tool finishes, the zoek-results.log is opened in Notepad.
The log is also found on the systemdrive, normally C:\
If a reboot is needed, the log is opened after the reboot.

Please attach the zoek-results.log in your reply.

#7 ReverseSeija

ReverseSeija
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 07 November 2015 - 10:59 AM

Hello there, i ran the program and now here is the log:

 

 
Zoek.exe v5.0.0.1 Updated 05-November-2015
Tool run by marcelo on 07/11/2015 at 12:40:39.89.
Microsoft Windows 7 Home Basic  6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\marcelo\Desktop\zoek.exe [Scan all users] [Script inserted] 
 
==== System Restore Info ======================
 
07/11/2015 12:49:06 Zoek.exe System Restore Point Created Successfully.
 
==== Windows Installer Info ======================
 
?????  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\68BA3748FF8C4E342848D9D107D0F4D7]C:\windows\Installer\31e21a.msi
Ace of Spades [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DA8B7306B5D705D4B9AC5A684CE4FE43]C:\windows\Installer\5dc66e.msi
Adobe AIR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\042D4720D1D4ADF4A963900FEBDC82F8]c:\windows\Installer\2ec2a.msi
Adobe Download Assistant [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\716B12E5E25F01BB299F8CBAC297A9A8]C:\windows\Installer\15aa57.msi
AMD Accelerated Video Transcoding [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\68790572C9D1445C859C227ADED57096]C:\windows\Installer\6976377.msi
AMD Catalyst Control Center [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DFA1C73D44B45B218B33A17A27C5234A]C:\windows\Installer\697635f.msi
AMD Catalyst Install Manager [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\029AFEF759007D7A3C4990E6A145075C]C:\windows\Installer\69760bd.msi
AMD Drag and Drop Transcoding [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3937763E469F2472801C5CC60F5D3791]C:\windows\Installer\697636b.msi
AMD Fuel [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1F8DE3E671A77B234109D3F2CFADF3CB]C:\windows\Installer\69762c2.msi
AMD Wireless Display v3.0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9C862F86B3E8F2CE4B1F820755F63E03]C:\windows\Installer\69760c3.msi
Apple Mobile Device Support [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2180BD1E06D2BD34EA90C607729DB382]C:\windows\Installer\ec7601.msi
Apple Software Update [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\46B5A9879DD95AB419A50FCFA0B1B7EF]C:\windows\Installer\ec7607.msi
Application Insights Tools for Visual Studio 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7FD924F9DD8F089469376EADAC10F2C6]C:\windows\Installer\2aaafd3.msi
Azure AD Authentication Connected Service [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\165CAEF36FC16D140B3FEBDC9D8CA8B1]C:\windows\Installer\2aaafbb.msi
AzureTools.Notifications  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\263AC5E16B930DB49B0C96FC510FEF2A]C:\windows\Installer\2aab02e.msi
Bamboo Dock [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B16DFD0942286C00D3969A386BA093E4]C:\windows\Installer\d95710.msi
Blend for Visual Studio SDK for .NET 4.5 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\08735E734493A6A448F22717828E16E6]C:\windows\Installer\2aaaf75.msi
Bonjour  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2F5519759897D9468219D52080EEDB5]C:\windows\Installer\ec75fb.msi
Catalyst Control Center - Branding [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\619E0F9578B790F488B858F0F370005B]C:\windows\Installer\69762bb.msi
Catalyst Control Center Graphics Previews Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\773B5BE622DBE2E277F2A499E3CA83DF]C:\windows\Installer\69762c8.msi
Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A2C8C184467D9B7E18551356047E0128]C:\windows\Installer\69760b6.msi
Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\69D28EA3D2575051F870FF59406D0D5E]C:\windows\Installer\6976352.msi
ccc-utility  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\39E7F4417D1CBABA86BBE12DBB698B66]C:\windows\Installer\6976358.msi
CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E06271A827562ED1E6372C793A01391C]C:\windows\Installer\6976346.msi
CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AE692100123639D1D6705C469633B6F6]C:\windows\Installer\697634c.msi
CCC Help Czech [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0F2275825D958649ABF62789A5C29E13]C:\windows\Installer\69762ce.msi
CCC Help Danish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F3F9B565716395868B12F601537384D9]C:\windows\Installer\69762d4.msi
CCC Help Dutch [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AF8E680C544770E431016461CE21E07E]C:\windows\Installer\6976316.msi
CCC Help English [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\482DAB679553EE52BAC8BFAA08242BB4]C:\windows\Installer\69762e6.msi
CCC Help Finnish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F5C069112A2FC1A18F4852972AE207AB]C:\windows\Installer\69762f2.msi
CCC Help French [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9B604F4EB91333C245EC484AD64AB7BF]C:\windows\Installer\69762f8.msi
CCC Help German [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDE6B2F14739723BF8E83EA16F8A500B]C:\windows\Installer\69762da.msi
CCC Help Greek [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5159CA1307F51D147F041B79B8D884AE]C:\windows\Installer\69762e0.msi
CCC Help Hungarian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0EE6F38AE24A8D66886B094A57065256]C:\windows\Installer\69762fe.msi
CCC Help Italian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\47C869D1002513347FD4383E70797B63]C:\windows\Installer\6976304.msi
CCC Help Japanese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5155378D5BD0DBCD3C30733DD24E63F3]C:\windows\Installer\697630a.msi
CCC Help Korean [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6EE88F2C343D689F8E1F0F212B49EC7A]C:\windows\Installer\6976310.msi
CCC Help Norwegian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E31B2618E698FD04BE032525FB52CC30]C:\windows\Installer\697631c.msi
CCC Help Polish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0207C777D20437F44D8C3B57FA5BFC7F]C:\windows\Installer\6976322.msi
CCC Help Portuguese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FFE0E2D372E709DE08A9E795BF50EA36]C:\windows\Installer\6976328.msi
CCC Help Russian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1CAC86B299B5564398284EAF2BEA30A6]C:\windows\Installer\697632e.msi
CCC Help Spanish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9C9A85CE8D2241AF87E5738B2C09AAD8]C:\windows\Installer\69762ec.msi
CCC Help Swedish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6065FB80B29B9D1955E0544CE08F1264]C:\windows\Installer\6976334.msi
CCC Help Thai [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\59EFA0E899051BC13A1DB1BF52641F1F]C:\windows\Installer\697633a.msi
CCC Help Turkish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3AA090E73AA1F947C4F261DC8B6156F1]C:\windows\Installer\6976340.msi
D3DX10  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7BD4C90EC03660F46A13E87A329932FA]C:\windows\Installer\833764.msi
Dark Souls Prepare to Die Edition [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1AF0D4E4088FBCC499A9050100002800]C:\windows\Installer\19a8f11.msi
Dotfuscator and Analytics Community Edition 5.18.1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A1FD09899E016324491BE1AF4A90F931]C:\windows\Installer\2aab046.msi
Far Cry (Patch 1.3) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EA721A12FAD27B043847433C6E9225C1]C:\windows\Installer\20009f9.msi
Galer¡a de fotos [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CECEF7F8F880D1345ABFB2951E6E9934]C:\windows\Installer\ad2b867.msi
Google Chrome Frame [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0863A9E848E3BAC399DC661DDFC4997A]C:\windows\Installer\16a90.msi
Google Earth [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AF057718A6CED58499106038EAF6DF1F]C:\windows\Installer\132a9e0.msi
Google Update Helper [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E]C:\windows\Installer\27e7e6.msi
Google Update Helper [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A089CE062ADB6BC44A720BA745894BAC]C:\windows\Installer\2b96b45.msi
Hacer clic y ejecutar de Microsoft Office 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D600A0C00000000000F01FEC]C:\windows\Installer\48e40.msi
HydraVision  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B9F7EC98FD4B585836B8B68D70DA9E7C]C:\windows\Installer\6976365.msi
IconPackager  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\36C40FB60CAE91F4E988A94745397EFB]C:\windows\Installer\54b767.msi
Installer  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\48F21E79330C2AD4792D5F043C2E29AE]C:\windows\Installer\44c6ab8.msi
Java 7 Update 17 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4EA42A62D9304AC4784BF238120771FF]C:\windows\Installer\3132cd.msi
Java™ 6 Update 20 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4EA42A62D9304AC4784BF238120602FF]C:\Windows\Installer\12b49.msi
JavaFX 2.1.1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F6071111A6667304777712318267D401]C:\windows\Installer\f43561.msi
Junk Mail filter update [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4E13C004F69768E4F8CD3C4CAFCC8674]C:\windows\Installer\ad2b61d.msi
Microsoft .NET Framework 4 Client Profile JPN Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\62897B4135E82C03D888828B27C609FF]C:\windows\Installer\31e216.msi
Microsoft .NET Framework 4 Multi-Targeting Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A84FEFC8BFBCAE3B85AEDF4A82A76EC]C:\windows\Installer\2aaaed2.msi
Microsoft .NET Framework 4.5 Multi-Targeting Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0F269E650BF476C388BDE9AAE6FE4C39]C:\windows\Installer\2aaae66.msi
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\26C7153D5A86FC73297F390C928A6918]C:\windows\Installer\2aaae3c.msi
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0076C0A639AEC2738817CDFC311D064A]C:\windows\Installer\2aaae36.msi
Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps (ENU) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\644B322AD3CE130328D8158808A07B28]C:\windows\Installer\2aaae60.msi
Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\29D3C679CED06A738A07FFF41CC80D92]C:\windows\Installer\2aaae5a.msi
Microsoft .NET Framework 4.5.1 SDK [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D6295A911E66CF6458D461A31AA0253D]C:\windows\Installer\2aab07b.msi
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\023CF092A5F2E92388044C91B37D9AEE]C:\windows\Installer\2aaae48.msi
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4BFA149B15881A33E927C0334D364CC1]C:\windows\Installer\2aaae42.msi
Microsoft .NET Framework 4.6 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4755C4440EB6E323B9DD29F2C6C3A440]C:\windows\Installer\2945857.msi
Microsoft .NET Framework 4.6 SDK [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\73D5195B736062A43AAA5CCDF9583607]C:\windows\Installer\2aab075.msi
Microsoft .NET Framework 4.6 Targeting Pack (ENU) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6EBEC3D3AE0484C479DF37282818BAA4]C:\windows\Installer\2aaae54.msi
Microsoft .NET Framework 4.6 Targeting Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7A4A6CC22CAA9C64D9BB73725B59F456]C:\windows\Installer\2aaae4e.msi
Microsoft Agents for Visual Studio 2015 Preview - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FE79075B83F5C8430818D4F0B08757E7]C:\windows\Installer\2aab01c.msi
Microsoft Agents for Visual Studio 2015 Preview [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\76EC73EC0662EE0308B58728C93C55B4]C:\windows\Installer\2aab016.msi
Microsoft Application Error Reporting [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000021599B0090400000000000F01FEC]C:\windows\Installer\833769.msi
Microsoft Azure Mobile Services Connected Service [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F4E5944A8125BF84A82D3F7006119B1E]C:\windows\Installer\2aaafc1.msi
Microsoft Azure Mobile Services SDK V2.0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A45CE00A61EC6FC41AA4C58FA1F10EF3]C:\windows\Installer\2aab034.msi
Microsoft Azure Mobile Services Tools for Visual Studio - v1.4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4DAA6355A047775448D324183D3F7062]C:\windows\Installer\2aab040.msi
Microsoft Azure Shared Components for Visual Studio 2015 - v1.5 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EC49061254CE27346B6CF0B2D85E6297]C:\windows\Installer\2aab03a.msi
Microsoft Azure Storage Connected Service [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FD3A4A6CE1A55284D8835E0BC091B613]C:\windows\Installer\2aaafc7.msi
Microsoft Blend for Visual Studio 2015 - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\856FB1C611F41A439814A6C7F7B28871]C:\windows\Installer\2aaaf6f.msi
Microsoft Blend for Visual Studio 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EBCCF007B0CADB93197C804995FACF6A]C:\windows\Installer\2aaaf69.msi
Microsoft Build Tools 14.0 (x86) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\15F7341DA68775F49AC98F9EF4ABB18D]C:\windows\Installer\2aaae12.msi
Microsoft Build Tools Language Resources 14.0 (x86) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\83B88E7A68864744D9588ABA5ECF8DE0]C:\windows\Installer\2aaae18.msi
Microsoft Expression Blend SDK for .NET 4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\79C1A3B9163AE364887144F4F988DCEF]C:\windows\Installer\2aaaf87.msi
Microsoft Games for Windows - LIVE Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3128052F989958E40A8727EB849371FE]c:\windows\Installer\17ccd4f.msi
Microsoft Games for Windows Marketplace [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C7030BC4E565144468EBD02F4EBF28C8]c:\windows\Installer\17ccd49.msi
Microsoft Help Viewer 2.2 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A8850375AC33C373D9077F6106B5752D]C:\windows\Installer\2aab09d.msi
Microsoft NuGet - Visual Studio 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3D213BF2F82E49036BDE7400F0521D39]C:\windows\Installer\2aaafaf.msi
Microsoft Office Access MUI (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000041095100A0C00000000000F01FEC]C:\windows\Installer\10c87cd.msi
Microsoft Office Excel MUI (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000041096100A0C00000000000F01FEC]C:\windows\Installer\10c878e.msi
Microsoft Office OneNote MUI (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000041091A00A0C00000000000F01FEC]C:\windows\Installer\10c87d3.msi
Microsoft Office Outlook Connector [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004159A700A0C00000000000F01FEC]C:\windows\Installer\ad2b880.msi
Microsoft Office Outlook MUI (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109A100A0C00000000000F01FEC]C:\windows\Installer\10c8795.msi
Microsoft Office PowerPoint MUI (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000041098100A0C00000000000F01FEC]C:\windows\Installer\10c8787.msi
Microsoft Office Proof (Basque) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100D2400000000000F01FEC]C:\windows\Installer\10c87a1.msi
Microsoft Office Proof (Catalan) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10030400000000000F01FEC]C:\windows\Installer\10c87a7.msi
Microsoft Office Proof (English) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10090400000000000F01FEC]C:\windows\Installer\10c87bf.msi
Microsoft Office Proof (French) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100C0400000000000F01FEC]C:\windows\Installer\10c87b9.msi
Microsoft Office Proof (Galician) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10065400000000000F01FEC]C:\windows\Installer\10c879b.msi
Microsoft Office Proof (Portuguese (Brazil)) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F10061400000000000F01FEC]C:\windows\Installer\10c87ad.msi
Microsoft Office Proof (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109F100A0C00000000000F01FEC]C:\windows\Installer\10c87b3.msi
Microsoft Office Proofing (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109C200A0C00000000000F01FEC]C:\windows\Installer\10c87c5.msi
Microsoft Office Publisher MUI (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000041099100A0C00000000000F01FEC]C:\windows\Installer\10c87da.msi
Microsoft Office Shared MUI (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E600A0C00000000000F01FEC]C:\windows\Installer\10c8781.msi
Microsoft Office Single Image 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000000000000F01FEC]C:\windows\Installer\10c87ea.msi
Microsoft Office Word MUI (Spanish) 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109B100A0C00000000000F01FEC]C:\windows\Installer\10c87e1.msi
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004159D70090400000000000F01FEC]C:\windows\Installer\ad2b7ec.msi
Microsoft Portable Library Multi-Targeting Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CF3DC11C0A7F29A3B883205D6E7CF9EA]C:\windows\Installer\2aaaea4.msi
Microsoft Portable Library Multi-Targeting Pack Language Pack - enu [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\080E40CE89881F53097C5E69C5860ACD]C:\windows\Installer\2aaaeaa.msi
Microsoft Silverlight [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7314F9862C648A4DB8BE2A5B47BE100]c:\Windows\Installer\18142.msi
Microsoft SQL Server 2005 Compact Edition [ENU] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D034B0FAA6BD374B960AAD30DF10D8B]C:\windows\Installer\8337a6.msi
Microsoft SQL Server 2014 Management Objects  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F5954772A2CB21B42AB5C0733A07940B]C:\windows\Installer\2aab097.msi
Microsoft SQL Server 2014 T-SQL Language Service  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A7E80D741A29B9840BFB14556194B7EC]C:\windows\Installer\2aaae9e.msi
Microsoft SQL Server 2014 Transact-SQL ScriptDom  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2BAB043C12A99B144A56A77C1BFD77E3]C:\windows\Installer\2aaae98.msi
Microsoft SQL Server Compact 4.0 SP1 ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4E1CA37772F56FD49A23F7DD3EC560D9]C:\windows\Installer\2aab08b.msi
Microsoft System CLR Types for SQL Server 2014 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\56BFF8174E6F26D468F1DE01DE239C63]C:\windows\Installer\2aab091.msi
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3e43b73803c7c394f8a6b2f0402e19c2]C:\windows\Installer\29e45.msi
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\b25099274a207264182f8181add555d0]C:\windows\Installer\274b433.msi
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\c1c4f01781cc94c4c8fb1542c0981a2a]C:\windows\Installer\61cab9.msi
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6F9E66FF7E38E3A3FA41D89E8A906A4A]C:\windows\Installer\96dc548.msi
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D20352A90C039D93DBF6126ECE614057]c:\Windows\Installer\12b5e.msi
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CFD2C1F142D260E3CB8B271543DA9F98]c:\windows\Installer\61a5b.msi
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E815EB96CCE9A53884E7857C57002F0]c:\windows\Installer\61caea.msi
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D5E3C0FEDA1E123187686FED06E995A]c:\windows\Installer\b09720.msi
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C025571B2A687A53689168CD7369889B]C:\windows\Installer\17433ae.msi
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DC8A59DBF9D1DA5389A1E3975220E6BB]C:\windows\Installer\174338b.msi
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\22BEFC8F7E2A1793E9ADB411DEFE1C58]C:\windows\Installer\1ea30d.msi
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\21EE4A31AE32173319EEFE3BD6FDFFE3]C:\windows\Installer\1ea307.msi
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23026 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C1C069EBDAB76ED3B8A16261EF358254]C:\windows\Installer\2aaae72.msi
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23026 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\55E3652ACEB38283D8765E8E9B8E6B57]C:\windows\Installer\2aaae6c.msi
Microsoft Visual Studio 2015 Devenv [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2243F1CF49C08713DA59E38A98FD55FA]C:\windows\Installer\2aaae86.msi
Microsoft Visual Studio 2015 Devenv Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9892D37190B609A388915AE3349F8981]C:\windows\Installer\2aaae92.msi
Microsoft Visual Studio 2015 Diagnostic Tools - x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4D7A4919CAF95E149AC84CD054D7D584]C:\windows\Installer\2aab0b5.msi
Microsoft Visual Studio 2015 Diagnostic Tools - x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AAD11ABC724A29249A4E6720360E2D9B]C:\windows\Installer\2aab0af.msi
Microsoft Visual Studio 2015 Diagnostic Tools - x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C5DE4F4113EA1114DBBBEE26AC92C58C]C:\windows\Installer\2aab0a3.msi
Microsoft Visual Studio 2015 Performance Collection Tools - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B9F8F9A773405444AAE76D6D9F067E1D]C:\windows\Installer\2aaaf9d.msi
Microsoft Visual Studio 2015 Performance Collection Tools [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B48E62FBFC50BD34592DA9D90ED2129B]C:\windows\Installer\2aaaf97.msi
Microsoft Visual Studio 2015 Performance Debugger Web Views [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\12F2CDB3830C2E84FACFFE7E4AB97EB5]C:\windows\Installer\2aaaf8d.msi
Microsoft Visual Studio 2015 Preparation [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\94CC99E9503D24D4CA43C63702261B24]C:\windows\Installer\2aab0c7.msi
Microsoft Visual Studio 2015 Preparation [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9A76C9198ED292949A01BC580E905BBC]C:\windows\Installer\2aab0d3.msi
Microsoft Visual Studio 2015 Preparation [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A4A13A39C7910F346978F7CF743CD344]C:\windows\Installer\2aab0cd.msi
Microsoft Visual Studio 2015 Profiling Tools [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\35A81F90CA4B78B47A28D522AA208C2A]C:\windows\Installer\2aab0a9.msi
Microsoft Visual Studio 2015 SDK - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1CE47A76D98A35533BD81DD79419DCF2]C:\windows\Installer\2aaaecb.msi
Microsoft Visual Studio 2015 Shell (Minimum) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5876A0309A3CAD73580344C4236092AF]C:\windows\Installer\2aaae79.msi
Microsoft Visual Studio 2015 Shell (Minimum) Interop Assemblies [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4F3D3444132ACC534817BC068F3AEFB3]C:\windows\Installer\2aaae80.msi
Microsoft Visual Studio 2015 Shell (Minimum) Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\65235FF7FAB7AFE3194BBD563FE75B9E]C:\windows\Installer\2aaae8c.msi
Microsoft Visual Studio 2015 Team Explorer Language Pack - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\691831201F952763F99BFB68085759E2]C:\windows\Installer\2aab028.msi
Microsoft Visual Studio 2015 Test Tools Language Pack - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EE45814E6A8D30E44BD20E00C6423A60]C:\windows\Installer\2aab010.msi
Microsoft Visual Studio 2015 Windows Diagnostic Tools - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6CB9FD9CD80B7454DB792FBBCB3C07BF]C:\windows\Installer\2aaafeb.msi
Microsoft Visual Studio 2015 Windows Diagnostic Tools [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6A98DACD82B1E9C4184E3A017130AC5D]C:\windows\Installer\2aaafd9.msi
Microsoft Visual Studio 2015 XAML Application Timeline - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\89BA1882879810C478DF03FD6413AF88]C:\windows\Installer\2aaaff1.msi
Microsoft Visual Studio 2015 XAML Application Timeline [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\09F8B07CAEA58394AB65FA0DE5FC0357]C:\windows\Installer\2aaafdf.msi
Microsoft Visual Studio 2015 XAML Designer - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0AB18E2E8B707E638B0628029530A94E]C:\windows\Installer\2aaaf63.msi
Microsoft Visual Studio 2015 XAML Designer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A1BA66017E1CE483A9F1932D2C4517DB]C:\windows\Installer\2aaaf5d.msi
Microsoft Visual Studio 2015 XAML Visual Diagnostics - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AF4436ACD075E9F4880F8CD819A986B0]C:\windows\Installer\2aaaff7.msi
Microsoft Visual Studio 2015 XAML Visual Diagnostics [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8270A63A7553E7042AC5F2E8EDE68C85]C:\windows\Installer\2aaafe5.msi
Microsoft Visual Studio Community 2015 - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\643DD4C59B2DB7B339029A00945D4EB8]C:\windows\Installer\2aaaec5.msi
Microsoft Visual Studio Community 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\06F460ED2256013369565B3E7EB86383]C:\windows\Installer\2aaaebb.msi
Microsoft Visual Studio Connected Services [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\28EE78B1D1BEC244093A8DB6809E7B1A]C:\windows\Installer\2aaafb5.msi
Microsoft Visual Studio Services Hub [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3601CC391A2052F41AA33C151AD048DD]C:\windows\Installer\2aaae0c.msi
Microsoft Visual Studio Team Foundation Server 2015 Office Integration (x86) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CA201F309D705C63C819D5012B2271F4]C:\windows\Installer\2aaae1e.msi
Microsoft Visual Studio Team Foundation Server 2015 Office Integration Language Pack (x86) - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\586B7C67D1684CA3889A0B4177F78225]C:\windows\Installer\2aaae24.msi
Microsoft Visual Studio Team Foundation Server 2015 Storyboarding (x86) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2DCA718F5ACE77239B7C0FCB9D8528BE]C:\windows\Installer\2aaae2a.msi
Microsoft Visual Studio Team Foundation Server 2015 Storyboarding Language Pack (x86) - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F0C499587ACE1438A66F72994E39D2C]C:\windows\Installer\2aaae30.msi
Microsoft VisualStudio JavaScript Language Service [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\95159489941387649A59FD1F0AF2D7BC]C:\windows\Installer\2aaaf81.msi
Microsoft VisualStudio JavaScript Project System [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5C421642E0062F44E89049E072BDD110]C:\windows\Installer\2aaaf7b.msi
Microsoft XNA Framework Redistributable 4.0 Refresh [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EDE8C96D5CBBB634E8E05C6A3D11FCF4]C:\windows\Installer\3c65e1d.msi
Microsoft.VisualStudio.Office365  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F7639E1DC7F59104697B5469F76DD04B]C:\windows\Installer\2aaafcd.msi
MorphVOX Pro [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\33502C8E288869746AE6A7F428B12F91]C:\windows\Installer\15a3d0.msi
Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5AEC3F31C2E9E4C4F9F00DBD83C94F9A]C:\windows\Installer\ad2b871.msi
Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9F77C6DEE7D4C744E90CA912D2705553]C:\windows\Installer\ad2b7d2.msi
MSVCRT  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A6C64DD86500CEF47BA082BB611A1FF1]C:\windows\Installer\83375f.msi
MSVCRT Redists [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\04C6BC071FD81E11DBFC0FD42AA3C585]C:\windows\Installer\143bd70.msi
MSVCRT Redists [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\11291704A90DFD11AB0300313D6D9992]C:\windows\Installer\135412f.msi
MSVCRT110  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8CDD41E806AE81E43B3E917301D4B5AD]C:\windows\Installer\ad2b50b.msi
MSXML 4.0 SP2 (KB954430) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDA39468D428E8B4DB27C8D5DC5CA217]c:\windows\Installer\3541edd.msi
MSXML 4.0 SP2 (KB973688) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E8A266FCD4F2A1409E1C8110F44DBCE]c:\windows\Installer\299600d.msi
MSXML 4.0 SP3 Parser (KB2721691) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0CA5B553EEEC5C24DAD4F7C3DF08C663]c:\windows\Installer\85391.msi
MSXML 4.0 SP3 Parser (KB2758694) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\09AB59D18F4FCE748A2844C1993DC0E1]c:\windows\Installer\205b9302.msi
MSXML 4.0 SP3 Parser [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1F764691F11C67F458B88521DA8CB349]C:\windows\Installer\96dc550.msi
Multi-Device Hybrid Apps using C# - Templates - ENU [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93799D213DFF1673A86A9F920EEF04E7]C:\windows\Installer\2aaaf51.msi
NVIDIA PhysX [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F173C5F32AE852F4D9D30D4B25E6A3AE]C:\windows\Installer\eb5627.msi
osu!  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6242953CE135011419D1FBCE2EEC82C4]C:\windows\Installer\1c45349.msi
PDF Architect [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B69A8D681191F3C4AA61B0740E354E29]C:\windows\Installer\3ed1e4.msi
Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3F8FF16062258724A8BA82C2B120F485]C:\windows\Installer\ad2b81d.msi
Photo Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\47499F033EBE43140AB26FDC83FC2E34]C:\windows\Installer\ad2b6ed.msi
PlayReady PC Runtime x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DAAE5ACC4F29A7B45BEE4192C466BA16]C:\Windows\Installer\18123.msi
PreEmptive Analytics Visual Studio Components [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DD81A634C2F5C3B489E5DAC3310BCC52]C:\windows\Installer\2aab04c.msi
Python 3.2.5 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\33DAA3EA0971F5143A0D36CF88F94DE9]C:\windows\Installer\1789b11.msi
Roslyn Language Services - x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7E5891C65C1E59A368FEC22664F5513C]C:\windows\Installer\2aab0c1.msi
Roslyn Language Services - x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B92074B526E1FF0309E69684152C7228]C:\windows\Installer\2aab0bb.msi
Skype Click to Call [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9A1221D6FB710CE4182F723DE03C7010]C:\windows\Installer\132dc4e.msi
SkypeT 7.12 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9A9450A669B1C894CACB933400F1BE91]C:\windows\Installer\1313507.msi
Steam  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9C8928403D4AB094F99FBA20A329833F]C:\windows\Installer\912a70.msi
SWAT 4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02FCC1E821E94284DB95A79D0E84D68D]C:\windows\Installer\44c6aae.msi
swMSM  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7C43C21609E58D74B9C5F017D78D7262]C:\windows\Installer\27c057.msi
System Requirements Lab CYRI [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B80BCF3F257ED444680A60434A3F2BD3]C:\windows\Installer\7380586.msi
System Requirements Lab Detection [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\33FF63A5A560FE94CA34324EC9D0DED5]C:\windows\Installer\203ba18.msi
Team Explorer for Microsoft Visual Studio 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EA592197A0B32223E996628C1C608E1D]C:\windows\Installer\2aab022.msi
Test Tools for Microsoft Visual Studio 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1EFBBAE9DEE79D74F88B127D4E080875]C:\windows\Installer\2aab00a.msi
Tools for .Net 3.5 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\65EC0961132295E409600A78D649E98A]C:\windows\Installer\2aab085.msi
Toshiba Book Place [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\44CD7C293DADEF948BB99FC2B69A3A13]C:\Windows\Installer\18129.msi
TOSHIBA Bulletin Board [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\ABD7BF2BCEEC1F14CB3233329D26096F]C:\Windows\Installer\12b59.msi
TOSHIBA Disc Creator [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\19C330F6BCC30B74D9191A98D456E028]C:\windows\Installer\1906dc.msi
TOSHIBA Face Recognition [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C24E037CA539BB540A5C735E32D411B1]C:\windows\Installer\73a77.msi
TOSHIBA HDD/SSD Alert [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8442234DFA6B61348B958D0A8ED4BC83]C:\Windows\Installer\12b54.msi
TOSHIBA ReelTime [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D79B0DC89E6439244B762AD49BD66BBD]C:\Windows\Installer\12b63.msi
TOSHIBA Value Added Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A72DDEF603BFE54FB855B7204B6248C]C:\windows\Installer\73a7c.msi
TOSHIBA Web Camera Application [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1098C3F63DBED074788FCA12F0E6E520]C:\windows\Installer\73a6f.msi
TuneUp Utilities 2013 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8CBDBA4C18C19C24FBCFA48615E1E9F4]C:\windows\Installer\17f5dc.msi
TuneUp Utilities Language Pack (es-ES) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\08878D30EEE17F54B9AB8DA2DD49060D]C:\windows\Installer\17f5d8.msi
Vegas Pro 10.0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\085A3EB3A90DFD11D9B800313D6D9992]C:\windows\Installer\1354137.msi
Visor de Microsoft PowerPoint [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004159FA00A0C00000000000F01FEC]C:\windows\Installer\2491c7.msi
Visual C++ Compiler/Tools X86 Base Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4855200808814C53FA003D5127D63D0B]C:\windows\Installer\2aaaedf.msi
Visual C++ Compiler/Tools X86 Base Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7C8265EC4FAEE63E83ACC5A4853D58C]C:\windows\Installer\2aaaed9.msi
Visual C++ Compiler/Tools X86 Base Resource Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C71E04E9550E5593D8D8DD519AAC2A05]C:\windows\Installer\2aaaf21.msi
Visual C++ Compiler/Tools X86 Base Resource Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D72F6BF4C6B833434B7452CF2A2489F5]C:\windows\Installer\2aaaf27.msi
Visual C++ IDE Base Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6835544B8CEEBDA36BB31FF001D8409A]C:\windows\Installer\2aaaef1.msi
Visual C++ IDE Base Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DF0AF0C3224380D31B9FFB43EBD71EB2]C:\windows\Installer\2aaaf15.msi
Visual C++ IDE Base Resource Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\07390D6E1B4D12430A6F54FD9699BEDE]C:\windows\Installer\2aaaf45.msi
Visual C++ IDE Base Resource Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7394EF3DC7BC3EF3581267348BE6A6AA]C:\windows\Installer\2aaaf33.msi
Visual C++ IDE Common Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B2036A1B7DF9F23CA1CC7B077D6122A]C:\windows\Installer\2aaaeeb.msi
Visual C++ IDE Common Resource Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E62FA47C07E5AC03CA31AF318A3DAB9C]C:\windows\Installer\2aaaf2d.msi
Visual C++ IDE Core Professional Plus Resource Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FF05F0C58F255E1348D2872849F1DA93]C:\windows\Installer\2aaaf4b.msi
Visual C++ IDE Debugger Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F7CB97020D148EC3BB421DCD92D24E8C]C:\windows\Installer\2aaaef7.msi
Visual C++ IDE Debugger Resource Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D5A25F730491CEC3DAA6637CAEC35345]C:\windows\Installer\2aaaf39.msi
Visual C++ IDE Professional Core Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\273CF3472A1BA5A3FB022EFA42346558]C:\windows\Installer\2aaaf1b.msi
Visual C++ Library PGO X86 Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BF6C8D426E9169E39AF44DCF4EBC6C0D]C:\windows\Installer\2aaaee5.msi
Visual C++ MSBuild ARM Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B35065A89D01C33308F2DF08C4D4D653]C:\windows\Installer\2aaaefd.msi
Visual C++ MSBuild Base Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F4EAB483332676E3993A7862682494D3]C:\windows\Installer\2aaaf03.msi
Visual C++ MSBuild Base Resource Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F100D4A5A546A303DBA3932AEE060F22]C:\windows\Installer\2aaaf3f.msi
Visual C++ MSBuild X64 Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\48BB6A26D62123134A2F2B05FB9BBAF3]C:\windows\Installer\2aaaf09.msi
Visual C++ MSBuild X86 Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\14E768F5223009530BE92B3D81ECBB1F]C:\windows\Installer\2aaaf0f.msi
WCF Data Services 5.6.4 Runtime [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DB7E58BDDD2B4D343B0C327D5B725B79]C:\windows\Installer\2aaafa3.msi
WCF Data Services Tools for Microsoft Visual Studio 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E805B3A083651744CB9C59E48186BC68]C:\windows\Installer\2aaafa9.msi
Windows Espc Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C8A2FA24BBE6E2D3B91F165373F9ABCB]C:\windows\Installer\2aab052.msi
Windows Espc Resource Package [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\881D49CF80E17073D9324F11874D6446]C:\windows\Installer\2aab058.msi
Windows Live Communications Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A9BB4540A7A24124DBFF39F7A717A144]C:\windows\Installer\ad2b58f.msi
Windows Live Essentials [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CB91EEF1C0F64E2428FFBF95F71614FD]C:\windows\Installer\ad2b809.msi
Windows Live ID Sign-in Assistant [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F78F652845587544C8D3F3334296D7F9]C:\windows\Installer\ad2b522.msi
Windows Live Installer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E5DC424C50AEE3D45BAD9F1F941E3DCA]C:\windows\Installer\ad2b54d.msi
Windows Live Mail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6EF458071FB396C4490DEB8B1201E243]C:\windows\Installer\ad2b655.msi
Windows Live Mail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9284196956FDEA04A813F6E369ABBEDB]C:\windows\Installer\ad2b851.msi
Windows Live Messenger [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E5E5322F18873924B9F6402B06F9FB0F]C:\windows\Installer\ad2b615.msi
Windows Live Messenger [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F8E961BD2335FBD40B5848AAC2733340]C:\windows\Installer\ad2b82d.msi
Windows Live MIME IFilter [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\641749B1B663DC24685D129939ECE32E]C:\windows\Installer\ad2b627.msi
Windows Live Photo Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0DFE6B9C10F4ABB4384793DA993ADE27]C:\windows\Installer\ad2b5f6.msi
Windows Live PIMT Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\512BD8A6DCB777340B51E254143A7E6C]C:\windows\Installer\ad2b59f.msi
Windows Live SOXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D3B0C7EF9B051594EB873A12BC8F5625]C:\windows\Installer\ad2b577.msi
Windows Live SOXE Definitions [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DCA246A8A3EC32A48A1B0A7FBE212B41]C:\windows\Installer\ad2b56c.msi
Windows Live UX Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4F1DBCC4CEECA254C98B6465B4053151]C:\windows\Installer\ad2b5bd.msi
Windows Live UX Platform Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\449F36C3E3087A943B2A8BBA33318E38]C:\windows\Installer\ad2b7f8.msi
Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1B641C2DD849FE743878D5C1B689F0C7]C:\windows\Installer\ad2b696.msi
Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\73044910631DEE540A7004E3DA29F97C]C:\windows\Installer\ad2b87c.msi
Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CEB97C797F348DB46A7A580C52E784A8]C:\windows\Installer\ad2b7e8.msi
Windows Live Writer Resources [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\22EA03080AF708845A839860DEFB944F]C:\windows\Installer\ad2b841.msi
Windows Phone SDK 8.0 Assemblies for Visual Studio 2015 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4A33CAED50BF6C23A8DAF72BA678766E]C:\windows\Installer\2aaaf57.msi
Windows Software Development Kit DirectX x86 Remote [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6828BC1A3BFC589A7D9927A1F0A2723F]C:\windows\Installer\2aab05f.msi
Windows Software Development Kit DirectX x86 Remote [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DAD0306A0061767F8CDD7C22DAEFF8CB]C:\windows\Installer\2aab06f.msi
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4003DA6594B0F7696F280B65056BA187]C:\windows\Installer\2aab067.msi
WinZip 15.0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\166F59DC4C5A5F446AAACEDD192C041C]C:\windows\Installer\617dfa.msi
WMV9/VC-1 Video Playback [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\047BC9186A52ED103654AE8B07C9C776]C:\windows\Installer\1cf1e.msi
 
==== Installed Programs ======================
 
 Tools for .Net 3.5  
"O–"ˆ'z"V Ver1.06a  
"O–"¤'z"V'¾ Ver1.10aŸAŸbŸvŸf?[Ÿg  
"O–?©Z"` 'ÞOñ" ver 0.01b  
"O–?SÆY~O  
"O–ŸXŸJŸCŸAŸS?[Ÿi?EOô'z<«<¢?¡P-KURENAI-  
"O–ŸXŸJŸCŸAŸS?[Ÿi?EOô'z<«<¢?¡P  
?????  
?û-‰'Þ%S  
æTorrent  
3D Ripper DX v1.8.2  
7-Zip 9.20  
Ace of Spades  
Adobe AIR  
Adobe Download Assistant  
Adobe Flash Player 19 ActiveX  
Adobe Flash Player 19 NPAPI  
Adobe Shockwave Player 12.0  
Aliens vs. Predator 2  
AMD Accelerated Video Transcoding  
AMD Catalyst Control Center  
AMD Catalyst Install Manager  
AMD Drag and Drop Transcoding  
AMD Fuel  
AMD Steady Video Plug-In   
AMD Wireless Display v3.0  
Apple Mobile Device Support  
Apple Software Update  
Application Insights Tools for Visual Studio 2015  
Arcana Heart 3 LOVE MAX  
ASIO4ALL  
Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver  
Audacity 2.0.4  
Avast Free Antivirus  
AVP2_5pack_2010  
Azure AD Authentication Connected Service  
AzureTools.Notifications  
Bamboo Dock  
Banda ancha m¢vil  
Bandicam  
Bandisoft MPEG-1 Decoder  
Battle.net  
Blend for Visual Studio SDK for .NET 4.5  
Bonjour  
Brawlhalla  
Call Of Cthulhu DCoTE  
Call of Duty® 4 - Modern Warfare™ 1.6 Patch  
Call of Duty® 4 - Modern Warfare™ 1.7 Patch  
Canon MP250 series MP Drivers  
Catalyst Control Center - Branding  
Catalyst Control Center Graphics Previews Common  
Catalyst Control Center InstallProxy  
Catalyst Control Center Localization All  
ccc-utility  
CCC Help Chinese Standard  
CCC Help Chinese Traditional  
CCC Help Czech  
CCC Help Danish  
CCC Help Dutch  
CCC Help English  
CCC Help Finnish  
CCC Help French  
CCC Help German  
CCC Help Greek  
CCC Help Hungarian  
CCC Help Italian  
CCC Help Japanese  
CCC Help Korean  
CCC Help Norwegian  
CCC Help Polish  
CCC Help Portuguese  
CCC Help Russian  
CCC Help Spanish  
CCC Help Swedish  
CCC Help Thai  
CCC Help Turkish  
CCleaner  
CDisplay 1.8  
Cheating-Death 4.33.4  
Choujigen Game Neptune  
CommView for WiFi  
Condemned - Criminal Origins  
Conexant HD Audio  
Counter-Strike 1.6  
Crashday  
Cry of Fear  
D3DX10  
Dark Souls Prepare to Die Edition  
DB Browser for SQLite  
Dead Space 2  
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition  
Desert Storm  
Digital - A Love Story 1.1  
Doom 3 BFG Edition  
Dotfuscator and Analytics Community Edition 5.18.1  
Doxillion, convertidor de documentos  
Elsword  
Explorer Suite IV  
Ÿ}ŸWŸJŸ<ŸoŸgŸ<ŸAŸS?[ŸiNEXT?EOô'z<«<¢'MP  
Facebook Video Calling 3.1.0.521  
Far Cry (Patch 1.3)  
FARO LS 1.1.406.58  
FEAR  
FL Studio 11  
FlowStone FL 3.0  
FormatFactory 3.0.1  
Free Alarm Clock 2.3.1  
Free Video to JPG Converter version 5.0.28.812  
FTL version 1.03.3  
Galer¡a de fotos  
Gameforge Live 2.0.8  
GameSpy Arcade  
GameTracker Lite  
GDevelop versi¢n 4.0  
GIMP 2.8.4  
GOM Player  
Google Chrome  
Google Chrome Frame  
Google Earth  
Google Talk Plugin  
Google Update Helper  
Hacer clic y ejecutar de Microsoft Office 2010  
HandBrake 0.10.1  
Hatsune Miku English Vocaloid3 Library  
Hatsune Miku Vocaloid3 Library  
Heroes of the Storm  
Hitman Blood Money  
Hitman: Contracts  
Hotline Miami 2 - Wrong Number  
HydraVision  
Hyperdimension Neptunia Re Birth1  
Hyperdimension Neptunia Re Birth2  
IconPackager  
Installer  
Java 7 Update 55  
Java Auto Updater  
Java™ 6 Update 20  
JavaFX 2.1.1  
Junk Mail filter update  
K-Lite Codec Pack 8.7.0 (Basic)  
Kagamine Rin Vocaloid3 Library  
Katawa Shoujo  
LAME v3.99.3 (for Windows)  
Lifeless Planet  
Lightshot-5.3.0.0  
Malwarebytes Anti-Malware versi¢n 2.2.0.1024  
Manhunt 2  
Max Payne 3  
Media Player Classic - Home Cinema 1.6.1.4235  
MEGAsync  
Microsoft .NET Framework 4 Client Profile JPN Language Pack  
Microsoft .NET Framework 4 Client Profile Language Pack - ???  
Microsoft .NET Framework 4 Multi-Targeting Pack  
Microsoft .NET Framework 4.5 Multi-Targeting Pack  
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack  
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU)  
Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps  
Microsoft .NET Framework 4.5.1 RC Multi-Targeting Pack for Windows Store Apps (ENU)  
Microsoft .NET Framework 4.5.1 SDK  
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack  
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU)  
Microsoft .NET Framework 4.6  
Microsoft .NET Framework 4.6 SDK  
Microsoft .NET Framework 4.6 Targeting Pack  
Microsoft .NET Framework 4.6 Targeting Pack (ENU)  
Microsoft Agents for Visual Studio 2015 Preview - ENU  
Microsoft Agents for Visual Studio 2015 Preview  
Microsoft Application Error Reporting  
Microsoft AppLocale  
Microsoft Azure Mobile Services Connected Service  
Microsoft Azure Mobile Services SDK V2.0  
Microsoft Azure Mobile Services Tools for Visual Studio - v1.4  
Microsoft Azure Shared Components for Visual Studio 2015 - v1.5  
Microsoft Azure Storage Connected Service  
Microsoft Blend for Visual Studio 2015 - ENU  
Microsoft Blend for Visual Studio 2015  
Microsoft Build Tools 14.0 (x86)  
Microsoft Build Tools Language Resources 14.0 (x86)  
Microsoft Expression Blend SDK for .NET 4  
Microsoft Games for Windows - LIVE Redistributable  
Microsoft Games for Windows Marketplace  
Microsoft Help Viewer 2.2  
Microsoft NuGet - Visual Studio 2015  
Microsoft Office Access MUI (Spanish) 2010  
Microsoft Office Excel MUI (Spanish) 2010  
Microsoft Office Home and Student 2010  
Microsoft Office OneNote MUI (Spanish) 2010  
Microsoft Office Outlook Connector  
Microsoft Office Outlook MUI (Spanish) 2010  
Microsoft Office PowerPoint MUI (Spanish) 2010  
Microsoft Office Proof (Basque) 2010  
Microsoft Office Proof (Catalan) 2010  
Microsoft Office Proof (English) 2010  
Microsoft Office Proof (French) 2010  
Microsoft Office Proof (Galician) 2010  
Microsoft Office Proof (Portuguese (Brazil)) 2010  
Microsoft Office Proof (Spanish) 2010  
Microsoft Office Proofing (Spanish) 2010  
Microsoft Office Publisher MUI (Spanish) 2010  
Microsoft Office Shared MUI (Spanish) 2010  
Microsoft Office Single Image 2010  
Microsoft Office Word MUI (Spanish) 2010  
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit  
Microsoft Portable Library Multi-Targeting Pack  
Microsoft Portable Library Multi-Targeting Pack Language Pack - enu  
Microsoft Silverlight  
Microsoft SkyDrive  
Microsoft SQL Server 2005 Compact Edition [ENU]  
Microsoft SQL Server 2014 Management Objects   
Microsoft SQL Server 2014 T-SQL Language Service   
Microsoft SQL Server 2014 Transact-SQL ScriptDom   
Microsoft SQL Server Compact 4.0 SP1 ENU  
Microsoft System CLR Types for SQL Server 2014  
Microsoft Visual C++ 2005 Redistributable  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161  
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219  
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610  
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030  
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030  
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030  
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005  
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501  
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005  
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005  
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026  
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23026  
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23026  
Microsoft Visual Studio 2015 Devenv  
Microsoft Visual Studio 2015 Devenv Resources  
Microsoft Visual Studio 2015 Diagnostic Tools - x86  
Microsoft Visual Studio 2015 Performance Collection Tools - ENU  
Microsoft Visual Studio 2015 Performance Collection Tools  
Microsoft Visual Studio 2015 Performance Debugger Web Views  
Microsoft Visual Studio 2015 Preparation  
Microsoft Visual Studio 2015 Profiling Tools  
Microsoft Visual Studio 2015 SDK - ENU  
Microsoft Visual Studio 2015 Shell (Minimum)  
Microsoft Visual Studio 2015 Shell (Minimum) Interop Assemblies  
Microsoft Visual Studio 2015 Shell (Minimum) Resources  
Microsoft Visual Studio 2015 Team Explorer Language Pack - ENU  
Microsoft Visual Studio 2015 Test Tools Language Pack - ENU  
Microsoft Visual Studio 2015 Tools for Unity  
Microsoft Visual Studio 2015 Windows Diagnostic Tools - ENU  
Microsoft Visual Studio 2015 Windows Diagnostic Tools  
Microsoft Visual Studio 2015 XAML Application Timeline - ENU  
Microsoft Visual Studio 2015 XAML Application Timeline  
Microsoft Visual Studio 2015 XAML Designer - ENU  
Microsoft Visual Studio 2015 XAML Designer  
Microsoft Visual Studio 2015 XAML Visual Diagnostics - ENU  
Microsoft Visual Studio 2015 XAML Visual Diagnostics  
Microsoft Visual Studio Community 2015 - ENU  
Microsoft Visual Studio Community 2015  
Microsoft Visual Studio Connected Services  
Microsoft Visual Studio Services Hub  
Microsoft Visual Studio Team Foundation Server 2015 Office Integration (x86)  
Microsoft Visual Studio Team Foundation Server 2015 Office Integration Language Pack (x86) - ENU  
Microsoft Visual Studio Team Foundation Server 2015 Storyboarding (x86)  
Microsoft Visual Studio Team Foundation Server 2015 Storyboarding Language Pack (x86) - ENU  
Microsoft VisualStudio JavaScript Language Service  
Microsoft VisualStudio JavaScript Project System  
Microsoft Windows Application Compatibility Database  
Microsoft XNA Framework Redistributable 4.0 Refresh  
Microsoft.VisualStudio.Office365  
Miku Dark Vocaloid3 Library  
Miku Sweet Vocaloid3 Library  
MorphVOX Pro  
Mortal Kombat 4 Enhanced parche gold  
Mount&Blade Warband  
Movie Maker  
Mozilla Firefox 40.0.3 (x86 es-MX)  
Mozilla Maintenance Service  
MSVCRT  
MSVCRT Redists  
MSVCRT110  
MSXML 4.0 SP2 (KB954430)  
MSXML 4.0 SP2 (KB973688)  
MSXML 4.0 SP3 Parser  
MSXML 4.0 SP3 Parser (KB2721691)  
MSXML 4.0 SP3 Parser (KB2758694)  
Multi-Device Hybrid Apps using C# - Templates - ENU  
Notepad++  
NSIS Hisoutensoku English  
NVIDIA PhysX  
Oô'-ŸXŸJŸCŸhŸSŸtŸg  
oO  
OpenAL  
Origin  
osu  
Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN  
PDF Architect  
PDFCreator  
Photo Common  
Photo Gallery  
Plague - Inc Evolved v0.7.3  
PlayReady PC Runtime x86  
Pok‚mon Reloaded Beta 14.2 14.2  
PreEmptive Analytics Visual Studio Components  
Project64 1.6  
Python 3.2.5  
Quake 1 versi¢n Repack By Matius  
Quake Live  
QuickTime Alternative 3.2.2  
Raptr  
Realtek USB 2.0 Card Reader  
Realtek WLAN Driver  
Repack  
Rin Sweet Vocaloid3 Library  
Rin Warm Vocaloid3 Library  
Robocraft version 0.3.290  
RocketDock 1.3.5  
Rockstar Games Social Club  
Roslyn Language Services - x86  
SecondLifeViewer (remove only)  
Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition  
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition  
Silent Hill  
Silent Hill 2 - Directors Cut  
Skype Click to Call  
SkypeT 7.12  
Source SDK Base 2006  
Source SDK Base 2007  
Steam  
Sublime Text Build 3065  
Super Hexagon version 1.00  
SWAT 4 - The Stetchkov Syndicate  
SWAT 4  
SWAT4 Server Browser Alternative v1.61  
Swivel  
swMSM  
Synaptics Pointing Device Driver  
System Requirements Lab CYRI  
System Requirements Lab Detection  
Team Explorer for Microsoft Visual Studio 2015  
TeamSpeak 3 Client  
TeamViewer 8  
Telegram Desktop version 0.9.10  
Test Tools for Microsoft Visual Studio 2015  
The King of Fighters 2002 Unlimited Match  
Tom Clancy's Rainbow Six 3: Athena Sword 1.10.016  
Tom Clancy's Rainbow Six 3: Iron Wrath 1.00.000  
Tom Clancy's Rainbow Six 3: Raven Shield 1.60.412  
TOSHIBA Application and Driver Installer  
TOSHIBA Assist  
Toshiba Book Place  
TOSHIBA Bulletin Board  
TOSHIBA Disc Creator  
TOSHIBA Face Recognition  
TOSHIBA Hardware Setup  
TOSHIBA HDD/SSD Alert  
TOSHIBA Media Controller  
TOSHIBA Quality Application  
TOSHIBA ReelTime  
TOSHIBA Service Station  
TOSHIBA Supervisor Password  
TOSHIBA Value Added Package  
TOSHIBA VIDEO PLAYER  
TOSHIBA Web Camera Application  
Touhou Kaku Seiga by andrea_37  
TuneUp Utilities 2013  
TuneUp Utilities Language Pack (es-ES)  
UltraISO Premium V9.12  
UltraStar Deluxe  
Unity (32-bit)  
Unity Web Player  
Unlocker 1.9.2  
Unturned  
Update for  (KB2504637)  
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition  
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition  
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2837583) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition  
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition  
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition  
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition  
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition  
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition  
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition  
UTAU ???????  
Vector Magic  
Vegas Pro 10.0  
Video Booth  
VideoPad, software para edici¢n de v¡deo  
Visor de Microsoft PowerPoint  
Visual C++ Compiler/Tools X86 Base Package  
Visual C++ Compiler/Tools X86 Base Resource Package  
Visual C++ IDE Base Package  
Visual C++ IDE Base Resource Package  
Visual C++ IDE Common Package  
Visual C++ IDE Common Resource Package  
Visual C++ IDE Core Professional Plus Resource Package  
Visual C++ IDE Debugger Package  
Visual C++ IDE Debugger Resource Package  
Visual C++ IDE Professional Core Package  
Visual C++ Library PGO X86 Package  
Visual C++ MSBuild ARM Package  
Visual C++ MSBuild Base Package  
Visual C++ MSBuild Base Resource Package  
Visual C++ MSBuild X64 Package  
Visual C++ MSBuild X86 Package  
VLC media player 2.0.8  
VOCALOID2 Editor V2.0.2.4J  
VOCALOID2 Expression DB (Standard)  
VOCALOID2 Voice DB (Miku)  
VOCALOID2 VSTi V2.0.2.0  
Voice Changer version 1.5  
Volgarr the Viking v2.0.0.1 1.0  
Voxal Voice Changer  
Wacom  
WCF Data Services 5.6.4 Runtime  
WCF Data Services Tools for Microsoft Visual Studio 2015  
WebTablet FB Plugin 32 bit  
Winamp  
WinCDEmu  
Windows Espc Package  
Windows Espc Resource Package  
Windows Live Communications Platform  
Windows Live Essentials  
Windows Live ID Sign-in Assistant  
Windows Live Installer  
Windows Live Mail  
Windows Live Messenger  
Windows Live MIME IFilter  
Windows Live Photo Common  
Windows Live PIMT Platform  
Windows Live SOXE  
Windows Live SOXE Definitions  
Windows Live UX Platform  
Windows Live UX Platform Language Pack  
Windows Live Writer  
Windows Live Writer Resources  
Windows Phone SDK 8.0 Assemblies for Visual Studio 2015  
Windows Software Development Kit DirectX x86 Remote  
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote  
WinPcap 4.1.2  
WinRAR 4.11 (32-bit)  
WinZip 15.0  
WMV9/VC-1 Video Playback  
Wondershare Filmora(Build 6.0.3)  
 
==== Running Processes ======================
 
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\wininit.exe
C:\windows\system32\csrss.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\atiesrxx.exe
C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
C:\windows\system32\atieclxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\windows\System32\spoolsv.exe
C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
C:\windows\system32\taskhost.exe
C:\Program Files\Tablet\Pen\WacomHost.exe
C:\Program Files\Tablet\Pen\Pen_Tablet.exe
C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files\GameTracker\GSInGameService.exe
C:\Program Files\PDF Architect\HelperService.exe
C:\Program Files\PDF Architect\ConversionService.exe
C:\windows\system32\PnkBstrA.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\windows\system32\TODDSrv.exe
C:\Program Files\Banda ancha movil\UIExec.exe
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Banda ancha movil\AssistantServices.exe
C:\Program Files\Skillbrains\lightshot\5.3.0.0\Lightshot.exe
C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
C:\windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\windows\system32\conhost.exe
C:\windows\system32\conhost.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k secsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\System32\svchost.exe -k swprv
 
==== Startup Registry Enabled ======================
 
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 
[HKEY_USERS\S-1-5-21-2069420895-2628185817-1826839548-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="C:\Users\marcelo\AppData\Local\Google\Update\GoogleUpdate.exe /c"
"Facebook Update"="C:\Users\marcelo\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"
"HydraVisionDesktopManager"="C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"
 
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
 
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartAudio"="C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t"
"ToshibaServiceStation"="C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60"
"TosVolRegulator"="C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe"
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe -H"
"UIExec"="C:\Program Files\Banda ancha movil\UIExec.exe"
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe MSRun"
"Lightshot"="C:\Program Files\Skillbrains\lightshot\Lightshot.exe"
"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "
"SmartFaceVWatcher"="%ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe "
"TPwrMain"="%ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE"
"SmoothView"="%ProgramFiles%\Toshiba\SmoothView\SmoothView.exe "
"00TCrdMain"="%ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe "
"TosSENotify"="C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe"
"TosNC"="%ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe "
"TosReelTimeMonitor"="%ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe "
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="C:\Users\marcelo\AppData\Local\Google\Update\GoogleUpdate.exe /c"
"Facebook Update"="C:\Users\marcelo\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"
"HydraVisionDesktopManager"="C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"
 
==== Startup Registry Disabled ======================
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BambooCore]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="BambooCore"
"hkey"="HKLM"
"command"="C:\\Program Files\\Bamboo Dock\\BambooCore.exe"
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SunJavaUpdateSched"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe\""
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Wondershare Helper Compact.exe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Wondershare Helper Compact.exe"
"hkey"="HKLM"
"command"="C:\\Program Files\\Common Files\\Wondershare\\Wondershare Helper Compact\\WSHelper.exe"
 
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\McAfee Security Scan Plus.lnk"
"backup"="C:\\windows\\pss\\McAfee Security Scan Plus.lnk.CommonStartup"
"backupExtension"=".CommonStartup"
"command"="C:\\PROGRA~1\\MCAFEE~1\\307523~1.318\\SSSCHE~1.EXE "
"item"="McAfee Security Scan Plus"
 
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\avast! Antivirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\BrowserDefendert]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\GamesAppService]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\McComponentHostService]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\MpsSvc]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Steam Client Service]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\TuneUp.UtilitiesSvc]
 
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run-]
"AshSnap"="C:\\Program Files\\Ashampoo\\Ashampoo Snap 5\\ashsnap.exe"
 
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]
"TkBellExe"="\"c:\\program files\\real\\realplayer\\Update\\realsched.exe\" -osboot"
"Adobe ARM"="\"C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""
"SunJavaUpdateSched"="\"C:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe\""
 
 
==== Startup Folders ======================
 
2015-02-06 23:53:59 256000 ----a-w- C:\Users\marcelo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler.exe
 
==== Task Scheduler Jobs ======================
 
C:\windows\tasks\Adobe Flash Player Updater.job --a------ C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [18/10/2015 13:13]
C:\windows\tasks\AutoKMS.job --a------ C:\windows\AutoKMS\AutoKMS.exe [15/10/2012 20:30]
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2069420895-2628185817-1826839548-1000Core.job --a------ C:\Users\marcelo\AppData\Local\Facebook\Update\FacebookUpdate.exe [10/03/2014 19:04]
C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2069420895-2628185817-1826839548-1000UA.job --a------ C:\Users\marcelo\AppData\Local\Facebook\Update\FacebookUpdate.exe [10/03/2014 19:04]
C:\windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [29/08/2015 02:16]
C:\windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [29/08/2015 02:16]
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2069420895-2628185817-1826839548-1000Core.job --a------ [Undetermined Task]
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2069420895-2628185817-1826839548-1000UA.job --a------ [Undetermined Task]
 
==== Other Scheduled Tasks ======================
 
"C:\windows\system32\tasks\Adobe Flash Player Updater" [C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\windows\system32\tasks\AdobeAAMUpdater-1.0-marcelo-PC-marcelo" [C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe]
"C:\windows\system32\tasks\AutoKMS" [C:\windows\AutoKMS\AutoKMS.exe]
"C:\windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\windows\system32\tasks\FacebookUpdateTaskUserS-1-5-21-2069420895-2628185817-1826839548-1000Core" [C:\Users\marcelo\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\windows\system32\tasks\FacebookUpdateTaskUserS-1-5-21-2069420895-2628185817-1826839548-1000UA" [C:\Users\marcelo\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe]
"C:\windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe]
"C:\windows\system32\tasks\GoogleUpdateTaskUserS-1-5-21-2069420895-2628185817-1826839548-1000Core" [C:\Users\marcelo\AppData\Local\Google\Update\GoogleUpdate.exe]
"C:\windows\system32\tasks\GoogleUpdateTaskUserS-1-5-21-2069420895-2628185817-1826839548-1000UA" [C:\Users\marcelo\AppData\Local\Google\Update\GoogleUpdate.exe]
"C:\windows\system32\tasks\Java Update Scheduler" [C:\Program Files\Common Files\Java\Java Update\jusched.exe]
"C:\windows\system32\tasks\RealCreateProcessScheduledTask64241S-1-5-21-2069420895-2628185817-1826839548-1000" [c:\program files\real\realplayer\update\realsched.exe]
"C:\windows\system32\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2069420895-2628185817-1826839548-1000" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe]
"C:\windows\system32\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2069420895-2628185817-1826839548-1000" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe]
"C:\windows\system32\tasks\RealUpgradeLogonTaskS-1-5-21-2069420895-2628185817-1826839548-1000" [C:\Program Files\Real\RealUpgrade\realupgrade.exe]
"C:\windows\system32\tasks\RealUpgradeScheduledTaskS-1-5-21-2069420895-2628185817-1826839548-1000" [C:\Program Files\Real\RealUpgrade\realupgrade.exe]
"C:\windows\system32\tasks\TuneUpUtilities_Task_BkGndMaintenance2013" [C:\Program Files\TuneUp Utilities 2013\OneClick.exe]
"C:\windows\system32\tasks\{76BEBAF4-FDAA-4AF7-A5DA-29678354AA30}" [C:\Program Files\Mozilla Firefox\firefox.exe]
"C:\windows\system32\tasks\{AB1AFF26-6103-4FA6-B865-E0670C13D05B}" [C:\Users\marcelo\Downloads\TERA_GameforgeLiveSetup.exe]
"C:\windows\system32\tasks\{BD0FDFBB-E8F7-4618-B4C2-321E52DF5F7F}" [C:\Program Files\Windows Live\Messenger\msnmsgr.exe]
"C:\windows\system32\tasks\{DDA026B3-695B-4F07-BFD7-E39E4C16FB44}" [C:\Program Files\Mozilla Firefox\firefox.exe]
"C:\windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]
 
==== Firefox Start and Search pages ======================
 
ProfilePath: C:\Users\marcelo\AppData\Roaming\Mozilla\Firefox\Profiles\mxdkhqw1.default
user_pref("browser.search.selectedEngine", "Search");
 
==== Firefox Extensions Registry ======================
 
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [30/10/2015 05:53]
 
==== Firefox Extensions ======================
 
ProfilePath: C:\Users\marcelo\AppData\Roaming\Mozilla\Firefox\Profiles\mxdkhqw1.default
- Firebug - %ProfilePath%\extensions\firebug@software.joehewitt.com.xpi
- ExHentai Easy 2 - %ProfilePath%\extensions\jid1-7NbXi2AqS1oUFw@jetpack.xpi
- NicoFox - %ProfilePath%\extensions\nicofox@littlebtc.xpi
 
AppDir: C:\Program Files\Mozilla Firefox
- Supervisor Kaspersky de vnculos URL - %AppDir%\extensions\linkfilter@kaspersky.ru_bak2
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi
 
==== Firefox Plugins ======================
 
Profilepath: C:\Users\marcelo\AppData\Roaming\Mozilla\Firefox\Profiles\mxdkhqw1.default
260488E2BC07C276D1EDD54CCA086809 - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
7D127425BBE91DF37448A7F44C1DDA52 - C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll - Google Update
3B00376AE69AC2E815425E54DEBFF750 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Photo Gallery
01D93217A9EE48DD37072B671378CC9C - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll - Silverlight Plug-In
025BBEF5A248B09BDC6684747F6EB5BC - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java™ Platform SE 7 U55
290A0130C74ADCD4546BC6900D1665D9 - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.550.14
0205ADAFFDDF04F0F69200E5CFB5FFD9 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
66640A55AEFF3819C94E0A8D40D7E0AD - C:\windows\system32\Adobe\Director\np32dsw_1202122.dll - Shockwave for Director / Shockwave for Director
D1DD233922484435DA2268CE942FB59F - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll - WacomTabletPlugin
674445072A7218F232219D2BB89ABA38 - C:\Users\marcelo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
7D127425BBE91DF37448A7F44C1DDA52 - C:\Users\marcelo\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll - Google Update
3CD19649B2C3023D65E67C056457A2BC - C:\Users\marcelo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
49D429EBF5305FC9ADD7545B7C914333 - C:\Users\marcelo\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
6BEAD7859E8A087BE04556AB5A78855C - C:\Users\marcelo\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer
28986F0A2342A033345EF9E70D395E4F - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrlui.dll - Microsoft® Silverlight
 
 
==== Chromium Look ======================
 
Google Chrome Version: 46.0.2490.80
 
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[30/10/2015 05:53]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[12/10/2015 10:31]
 
Magic Actions for YouTube - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif
Google Drive - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Fantastic platform game that will try to intimidate you and make you give up. - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\diippoclinjdbklinhchgedilfncehbi
Dr. Home - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjlgijgohbojdmngbpfpoidomiipkjih
AdBlock - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Avast Online Security - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Chrome Web Store Payments - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - marcelo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
 
======== System Restore Points ========
 
RP638: 30/10/2015 09:29:42 - Punto de control programado
RP639: 30/10/2015 13:41:18 - Punto de comprobación por HitmanPro
RP640: 30/10/2015 13:42:59 - Punto de comprobación por HitmanPro
RP642: 01/11/2015 03:04:41 - Malwarebytes Anti-Rootkit Restore Point
RP644: 04/11/2015 17:57:26 - Restore Point Created by FRST
RP646: 04/11/2015 20:12:32 - Configured Scarface: The World is Yours
RP648: 07/11/2015 11:58:36 - Windows Defender Checkpoint
RP649: 07/11/2015 12:48:43 - zoek.exe restore point
 
==== C:\zoek_backup content ======================
 
C:\zoek_backup (files=0 folders=0 0 bytes)
 
==== EOF on 07/11/2015 at 12:55:08.07 ======================


#8 nasdaq

nasdaq

  • Malware Response Team
  • 40,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:35 PM

Posted 07 November 2015 - 04:27 PM

Please start the computer in Safe Mode.
How to:
http://windows.microsoft.com/en-ca/windows/start-computer-safe-mode#start-computer-safe-mode=windows-7

Rename the file in bold.
C:\windows\system32\lsass.exe

To:
C:\windows\system32\lsass.exe.old

Type exist to return to the Operating system.

Restart the computer normally.
How is the computer running now?

#9 ReverseSeija

ReverseSeija
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 08 November 2015 - 11:07 PM

Please start the computer in Safe Mode.
How to:
http://windows.microsoft.com/en-ca/windows/start-computer-safe-mode#start-computer-safe-mode=windows-7

Rename the file in bold.
C:\windows\system32\lsass.exe

To:
C:\windows\system32\lsass.exe.old

Type exist to return to the Operating system.

Restart the computer normally.
How is the computer running now?

Hello there, there is something i don't understand from those instructions, after i rename the file, where do i type exist? do i open that program?



#10 nasdaq

nasdaq

  • Malware Response Team
  • 40,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:35 PM

Posted 09 November 2015 - 09:10 AM

I'm sorry to get out of Safe mode after you have renamed the file restart the computer normally.

#11 ReverseSeija

ReverseSeija
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 09 November 2015 - 12:58 PM

Thanks i ran safe mode on windows but i could not rename the file as it said i need permission from TrustedInstaller to make changes on the file:

zrVrrLV.png



#12 nasdaq

nasdaq

  • Malware Response Team
  • 40,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:35 PM

Posted 09 November 2015 - 02:21 PM

Lets find out if you have other versions on your computer

Please run the Farbar Recovery Scan Tool. Enter lsass.exe in the Search Box and hit the File Search button.
Post the content of the Search.txt in your next reply.

#13 ReverseSeija

ReverseSeija
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 10 November 2015 - 12:30 PM

Here it's the search txt content:

 

Farbar Recovery Scan Tool (x86) Version:07-11-2015
Ran by marcelo (2015-11-10 15:11:25)
Running from C:\Users\marcelo\Desktop
Boot Mode: Normal
 
================== Search Files: "lsass.exe" =============
 
C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22465_none_a8a66792d452b56a\lsass.exe
[2013-11-14 15:43][2013-09-24 22:54] 0022016 ____A (Microsoft Corporation) 559C7769B397F07E12725EE55337D4C6 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_a8d76e24d42eb666\lsass.exe
[2012-07-12 02:19][2012-06-02 02:51] 0022528 ____A (Microsoft Corporation) FA7B950E4CA6AA260C4EABA19E03644D [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_a8a284cad4562b09\lsass.exe
[2012-01-17 22:37][2011-11-17 03:24] 0022528 ____A (Microsoft Corporation) FBCB2DFA40862DAA7B1534C9538208A5 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.18270_none_a80cf783bb41b5b7\lsass.exe
[2013-11-14 15:43][2013-09-24 22:49] 0022016 ____A (Microsoft Corporation) 803B370865D907EA21DC0C2B6A8936B5 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_a828bb43bb2beb28\lsass.exe
[2012-01-17 22:37][2011-11-17 03:29] 0022528 ____A (Microsoft Corporation) 81951F51E318AECC2D68559E47485CC4 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_a84828d7bb1480d7\lsass.exe
[2012-01-17 22:37][2011-11-17 03:29] 0022528 ____A (Microsoft Corporation) 81951F51E318AECC2D68559E47485CC4 [File is digitally signed]
 
C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_a851f4adbb0d5141\lsass.exe
[2009-07-13 21:11][2009-07-13 23:14] 0022528 ____A (Microsoft Corporation) F42309C4191C506B71DB5D1126D26318 [File is digitally signed]
 
C:\Windows\System32\lsass.exe
[2013-11-14 15:43][2013-09-24 22:49] 0022016 ____A (Microsoft Corporation) 803B370865D907EA21DC0C2B6A8936B5 [File is digitally signed]
 
====== End of Search ======


#14 nasdaq

nasdaq

  • Malware Response Team
  • 40,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:35 PM

Posted 11 November 2015 - 07:55 AM

The file is good.

What are the current issues with this computer?

#15 ReverseSeija

ReverseSeija
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:35 AM

Posted 11 November 2015 - 09:34 AM

Being redirected into various malicious sites, like utrack.pw and reimageplus randomly while using google chrome, that's the only problem i'm aware of 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users