Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Google redirect virus/vista/IE9 affected/Firefox unaffected

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby pgmigg » August 31st, 2013, 8:14 pm

Hello Mark,

I tried a Google search of a couple of the sites I had trouble with earlier, and right now, it seems fine.
Nice to read it! :D But we need to make a few more steps...

Please do the following:

Step 1.
Show Hidden and System files
  1. Close all programs so that you are at your desktop.
  2. Press Image.
  3. Click the Start Search box on the Start Menu
  4. Copy and paste the following value, in the open text entry box:
    control folders
  5. Click on the View tab, then under the "Hidden files and folders" section
    • SELECT "Show hidden files and folders"
    • Remove check mark from check box "Hide extensions for known file types"
    • Remove check mark from check box "Hide protected operating system files"
  6. Press the Apply, then the OK buttons.

Step 2.
Upload File/Files for testing
  1. Please go to jotti.org or Virustotal
  2. Copy/Paste the following files to upload them one by one for scanning:
    C:\Users\Mark\Desktop\flash\orenzow documents sept 23\Orenzow documents\downloads\mediacoder_8731.exe
    C:\Users\Public\Orenzow documents\dvd and cd collections\Drive Directory\downloads\mediacoder_8731.exe
    C:\Users\Public\Orenzow documents\Galaxy Backup\App_Backup_Restore\com.alienmanfc6.wheresmyandroid-78-v4.1.1.apk
  3. Press Submit - this will submit the file for testing.
    Note: If you will see a message "File already analysed", please click on "Reanalyse" button.
  4. Please wait for all the scanners to finish.
  5. Then copy and paste every permalink (web address) in your next response.
    Example of web address:
    Image

Please include in your next reply:
  1. Do you have any problems executing the instructions?
  2. The resulting web links after online file scan by Virus Total.
  3. Do you see any changes in computer behavior?

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3181
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00
Advertisement
Register to Remove

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby penmark » September 1st, 2013, 7:47 am

pgmigg,

Continuing thanks for working with me on this. Here are the permalinks from the three scans:

https://www.virustotal.com/en/file/aed3 ... 378034839/

https://www.virustotal.com/en/file/aed3 ... 378035567/

https://www.virustotal.com/en/file/24a7 ... 378035759/

Regards,

Mark
penmark
Regular Member
 
Posts: 15
Joined: August 23rd, 2013, 1:31 pm

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby pgmigg » September 1st, 2013, 12:33 pm

Hello Mark,

Continuing thanks for working with me on this.
You are very welcome, Mark! :D

Step 1.
OTL - Run Fix Script
You should still have OTL.exe on your desktop.
Important! Close all applications and windows so that you have nothing open and are at your Desktop.
  1. Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
  2. Underneath Output at the top, make sure Standard Output is selected.
  3. Copy and Paste the following code into the Image text box. Do not include the words Code: Select All
    Code: Select all
    :Commands
    [createrestorepoint]
    
    :Files
    C:\Users\Mark\Desktop\flash\orenzow documents sept 23\Orenzow documents\downloads\mediacoder_8731.exe
    C:\Users\Public\Orenzow documents\dvd and cd collections\Drive Directory\downloads\mediacoder_8731.exe
    C:\Users\Public\Orenzow documents\Galaxy Backup\App_Backup_Restore\com.alienmanfc6.wheresmyandroid-78-v4.1.1.apk
    
    :Commands
    [emptytemp]
    
  4. Click under the Custom Scan/Fixes box and paste the copied text.
  5. Click the Run Fix button. If prompted... click OK.
  6. OTL may ask to reboot the machine. Please do so if asked.
  7. Let the program run unhindered and reboot the PC when it is done.
    When the computer reboots, and you start your usual account, a Notepad text file will appear.
  8. Copy the contents of that file and post it in your next reply. The log can also be found, based on the date/time it was created, as C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log

Step 2.
Hide Hidden and System files
  1. Close all programs so that you are at your desktop.
  2. Press Image.
  3. Click the Start Search box on the Start Menu
  4. Copy and paste the following value, in the open text entry box:
    control folders
  5. Click on the View tab, then under the "Hidden files and folders" section
    • UNSELECT "Show hidden files and folders"
    • Place check mark in check box "Hide extensions for known file types"
    • Place check mark in check box "Hide protected operating system files"
  6. Press the Apply, then the OK buttons.

Please include in your next reply:
  1. Do you have any problems executing the instructions?
  2. Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run
  3. Do you see any changes in computer behavior?

Please do not hesitate to divide the post into multiple if it is too long...

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3181
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby penmark » September 1st, 2013, 11:12 pm

Again, thanks for your continuing help. I really appreciate it. Here is the contents of the log file:

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== FILES ==========
C:\Users\Mark\Desktop\flash\orenzow documents sept 23\Orenzow documents\downloads\mediacoder_8731.exe moved successfully.
C:\Users\Public\Orenzow documents\dvd and cd collections\Drive Directory\downloads\mediacoder_8731.exe moved successfully.
C:\Users\Public\Orenzow documents\Galaxy Backup\App_Backup_Restore\com.alienmanfc6.wheresmyandroid-78-v4.1.1.apk moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Admin
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: IUSR_NMPR
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Lauren
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mark
->Temp folder emptied: 4215559 bytes
->Temporary Internet Files folder emptied: 51651 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 18127232 bytes
->Google Chrome cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 506 bytes

User: Mcx1
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mcx2
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mcx2.HPA6257C
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Penny
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 355 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 21.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 09012013_223233

Files\Folders moved on Reboot...
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF78BE.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF7903.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF7970.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF799D.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF7A12.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF7A98.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF7AD8.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF7B72.tmp not found!
File move failed. C:\Windows\temp\nmsmc_DQLWinService.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

I would like to mention that upon rebooting, I get the RegSvr32 box, which says: The module, "C:\Users\Mark\AppData\Local\VST\idr20009.dll" failed to load. Make sure the binary is stored at the specified path or debug it to check for problems with the binary or dependent .DLL files. The specified module could not be found.

Regards,

Mark
penmark
Regular Member
 
Posts: 15
Joined: August 23rd, 2013, 1:31 pm

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby pgmigg » September 2nd, 2013, 11:44 am

Hello Mark,

I would like to mention that upon rebooting, I get the RegSvr32 box, which says: The module, "C:\Users\Mark\AppData\Local\VST\idr20009.dll" failed to load. Make sure the binary is stored at the specified path or debug it to check for problems with the binary or dependent .DLL files. The specified module could not be found.
Thank you that you mentioned about it. This issue will be our next round in fight... ;)

Step 1.
OTL - Run Fix Script
You should still have OTL.exe on your desktop.
Important! Close all applications and windows so that you have nothing open and are at your Desktop.
  1. Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
  2. Underneath Output at the top, make sure Standard Output is selected.
  3. Copy and Paste the following code into the Image text box. Do not include the words 'Code: Select all'
    Code: Select all
    :Commands
    [CREATERESTOREPOINT]
    
    :OTL
    O4 - HKU\S-1-5-21-397070735-3145188438-542509979-1001..\Run: [VirtualStore] C:\Users\Mark\AppData\Local\Microsoft\VirtualStore\eppjhdpnij.dll (Microsoft Corporation)
    O4 - HKU\S-1-5-21-397070735-3145188438-542509979-1001..\Run: [VST Update] C:\Windows\System32\regsvr32.exe (Microsoft Corporation)
    
    :Files
    C:\Users\Mark\AppData\Local\Microsoft\VirtualStore
    C:\Users\Mark\AppData\Local\VST
    
    :Commands
    [EMPTYTEMP]
    
  4. Click under the Custom Scan/Fixes box and paste the copied text.
  5. Click the Run Fix button. If prompted... click OK.
  6. OTL may ask to reboot the machine. Please do so if asked.
  7. Let the program run unhindered and reboot the PC when it is done.
    When the computer reboots, and you start your usual account, a Notepad text file will appear.
  8. Copy the contents of that file and post it in your next reply. The log can also be found, based on the date/time it was created, as C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log

Step 2.
SystemLook
Please download SystemLook_x64.exe by jpshortstuff and save it to your Desktop.
Alternate download site.
  1. Right click on SystemLook.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
    If you receive an "Open file - security warning"... asking "Do you want to run this file?", press the Run button.
  2. Highlight and copy the following entries into SystemLook's main text entry window. Do not include the words 'Code: Select all':
    Code: Select all
    :filefind
    *eppjhdpnij*
    *idr200*
    
    :folderfind
    *VirtualStore*
    *VST*
    
    :Regfind
    eppjhdpnij
    idr200
    VirtualStore
    VST
    
    
  3. Press the Look button to start the scan.
    When finished, a Notepad window will open with the results of the scan.
    A file will be created (on your Desktop) with the results of the scan, named SystemLook.txt
  4. Please post the contents of the SystemLook.txt file in your next reply.

Please include in your next reply:
  1. Do you have any problems executing the instructions?
  2. Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run
  3. Contents of the SystemLook.txt log file
  4. Do you see any changes in computer behavior?

Please do not hesitate to divide the post into multiple if it is too long...

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3181
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby penmark » September 2nd, 2013, 7:35 pm

Continued thanks.

Results of OTL:

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-397070735-3145188438-542509979-1001\Software\Microsoft\Windows\CurrentVersion\Run\\VirtualStore not found.
File C:\Users\Mark\AppData\Local\Microsoft\VirtualStore\eppjhdpnij.dll not found.
Registry value HKEY_USERS\S-1-5-21-397070735-3145188438-542509979-1001\Software\Microsoft\Windows\CurrentVersion\Run\\VST Update deleted successfully.
File move failed. C:\Windows\System32\regsvr32.exe scheduled to be moved on reboot.
========== FILES ==========
C:\Users\Mark\AppData\Local\Microsoft\VirtualStore folder moved successfully.
C:\Users\Mark\AppData\Local\VST folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Admin
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: IUSR_NMPR
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Lauren
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mark
->Temp folder emptied: 4202958 bytes
->Temporary Internet Files folder emptied: 218914 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 17998695 bytes
->Google Chrome cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Mcx1
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mcx2
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mcx2.HPA6257C
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Penny
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 53218 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 21.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 09022013_181256

Files\Folders moved on Reboot...
File move failed. C:\Windows\System32\regsvr32.exe scheduled to be moved on reboot.
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF9E20.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF9E2A.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF9E3D.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF9E47.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF9E59.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF9E64.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF9E78.tmp not found!
File\Folder C:\Users\Mark\AppData\Local\Temp\~DF9E82.tmp not found!
File move failed. C:\Windows\temp\nmsmc_DQLWinService.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Results of System Look (note: I did not see any reference to x64 when running this file):

SystemLook 30.07.11 by jpshortstuff
Log created at 18:32 on 02/09/2013 by Mark
Administrator - Elevation successful

========== filefind ==========

Searching for "*eppjhdpnij*"
No files found.

Searching for "*idr200*"
C:\_OTL\MovedFiles\09022013_181256\C_Users\Mark\AppData\Local\VST\idr20009.idx --a---- 2054 bytes [15:42 22/08/2013] [15:42 22/08/2013] 17199819D0CB91333374B0B0235220AA

========== folderfind ==========

Searching for "*VirtualStore*"
C:\Users\Admin\AppData\Local\VirtualStore d------ [18:31 29/03/2008]
C:\Users\Guest\AppData\Local\VirtualStore d------ [23:24 01/03/2008]
C:\Users\Lauren\AppData\Local\VirtualStore d------ [21:00 28/12/2007]
C:\Users\Mark\AppData\Local\VirtualStore d------ [22:01 24/11/2007]
C:\Users\Mcx1\AppData\Local\VirtualStore d------ [02:45 09/11/2009]
C:\Users\Mcx2\AppData\Local\VirtualStore d------ [21:03 02/04/2010]
C:\Users\Mcx2.HPA6257C\AppData\Local\VirtualStore d------ [02:38 21/05/2011]
C:\Users\Penny\AppData\Local\VirtualStore d------ [16:54 25/11/2007]
C:\_OTL\MovedFiles\09022013_181256\C_Users\Mark\AppData\Local\Microsoft\VirtualStore d------ [15:29 21/08/2013]

Searching for "*VST*"
C:\Program Files\iTunes\iTunes.Resources\da.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\da.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\da.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\de.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\de.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\de.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\en.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\en.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\en.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\es.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\es.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\es.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\fi.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\fi.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\fi.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\fr.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\fr.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\fr.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\it.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\it.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\it.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\ja.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\ja.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\ja.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\ko.lproj\AppleTVStream.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\ko.lproj\AppleTVStreamingPrefsBar.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\ko.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:40 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\nb.lproj\AppleTVStream.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\nb.lproj\AppleTVStreamingPrefsBar.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\nb.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\nl.lproj\AppleTVStream.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\nl.lproj\AppleTVStreamingPrefsBar.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\nl.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\pl.lproj\AppleTVStream.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\pl.lproj\AppleTVStreamingPrefsBar.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\pl.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\pt.lproj\AppleTVStream.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\pt.lproj\AppleTVStreamingPrefsBar.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\pt.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\AppleTVStream.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\AppleTVStreamingPrefsBar.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\ru.lproj\AppleTVStream.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\ru.lproj\AppleTVStreamingPrefsBar.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\ru.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\sv.lproj\AppleTVStream.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\sv.lproj\AppleTVStreamingPrefsBar.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\sv.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\AppleTVStream.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\AppleTVStreamingPrefsBar.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\AppleTVStream.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\AppleTVStreamingPrefsBar.nib d------ [12:41 08/10/2011]
C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\DevicePrefsGeneralAppleTVStreaming.nib d------ [12:41 08/10/2011]
C:\Windows\System32\DRVSTORE d----c- [03:27 03/12/2009]
C:\Windows\System32\DriverStore\FileRepository\hphpa2vst4wu.inf_bb74dc69 d------ [00:41 12/05/2008]
C:\Windows\winsxs\x86_microsoft-windows-drvstore_31bf3856ad364e35_6.0.6000.16386_none_eebd932f469a1cb5 d------ [11:18 02/11/2006]
C:\Windows\winsxs\x86_microsoft-windows-drvstore_31bf3856ad364e35_6.0.6001.18000_none_f0f4552b43852d89 d------ [14:08 22/03/2009]
C:\Windows\winsxs\x86_microsoft-windows-drvstore_31bf3856ad364e35_6.0.6002.18005_none_f2dfce3740a6f8d5 d------ [23:02 31/03/2010]
C:\Windows\winsxs\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a34c8be7e666d60e d------ [12:41 02/11/2006]
C:\Windows\winsxs\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.1.6002.18005_en-us_6f9d94347f3f0b4f d------ [23:04 31/03/2010]
C:\_OTL\MovedFiles\09022013_181256\C_Users\Mark\AppData\Local\VST d------ [15:29 21/08/2013]

========== Regfind ==========

Searching for "eppjhdpnij"
No data found.

Searching for "idr200"
No data found.

Searching for "VirtualStore"
[HKEY_CURRENT_USER\Software\Classes\VirtualStore]
[HKEY_USERS\S-1-5-21-397070735-3145188438-542509979-1001\Software\Classes\VirtualStore]
[HKEY_USERS\S-1-5-21-397070735-3145188438-542509979-1001_Classes\VirtualStore]

Searching for "VST"
[HKEY_CURRENT_USER\Software\VST]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-drvstore.resources_31bf3856ad364e35_6.0.6000.16386_en-us_8f5e257481536df0]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-drvstore_31bf3856ad364e35_6.0.6000.16386_none_eebd932f469a1cb5]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-drvstore_31bf3856ad364e35_6.0.6001.18000_none_f0f4552b43852d89]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-drvstore_31bf3856ad364e35_6.0.6002.18005_none_f2dfce3740a6f8d5]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a34c8be7e666d60e]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.1.6002.18005_en-us_6f9d94347f3f0b4f]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-help-netvsta_31bf3856ad364e35_6.0.6000.16386_none_7a8394f4886ee397]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-help-netvsta_31bf3856ad364e35_6.1.6002.18005_none_46d49d41214718d8]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-help-privstatement_31bf3856ad364e35_6.0.6000.16386_none_498b76699db64150]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-drvstore.resources_31bf3856ad364e35_en-us_1990c4147a998f86]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-drvstore_31bf3856ad364e35_none_cae33b79483c5fa9]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-drvstore_31bf3856ad364e35_none_cae33b79483c5fa9\f256!drvstore.dll]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_804fdf3652ecbcd8]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_804fdf3652ecbcd8\f256!netvsta.h1s]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-help-netvsta_31bf3856ad364e35_none_a072a4fbcf24bb57]
[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-help-privstatement_31bf3856ad364e35_none_1d7653e3e9393f26]
[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\x86_microsoft-windows-drvstore.resources_31bf3856ad364e35_en-us_1990c4147a998f86]
[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\x86_microsoft-windows-drvstore_31bf3856ad364e35_none_cae33b79483c5fa9]
[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_804fdf3652ecbcd8]
[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\x86_microsoft-windows-help-netvsta_31bf3856ad364e35_none_a072a4fbcf24bb57]
[HKEY_LOCAL_MACHINE\COMPONENTS\Winners\x86_microsoft-windows-help-privstatement_31bf3856ad364e35_none_1d7653e3e9393f26]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.vbk]
@="VST.VitalBook"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\awdvstub.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4BDB35AC-F955-43DD-932C-C7DDF084E12F}]
@="MVStyleInfo Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4BDB35AC-F955-43DD-932C-C7DDF084E12F}\InprocServer32]
@="C:\Program Files\Common Files\muvee Technologies\030625\mvStyleInfo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4BDB35AC-F955-43DD-932C-C7DDF084E12F}\ProgID]
@="StyleInfo.MVStyleInfo.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4BDB35AC-F955-43DD-932C-C7DDF084E12F}\VersionIndependentProgID]
@="StyleInfo.MVStyleInfo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{657C7A59-4FEC-4C06-A354-607B1EB184FB}\InprocServer32]
@="C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbevst.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A7949A2D-4692-40CB-9A98-D4DB2B59872E}\InprocServer32]
@="C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbevst.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BB38F476-AA98-455c-AF3A-E3226E9D41C0}\InprocServer32]
@="C:\Windows\system32\hpovst11.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BCB67D4D-2096-36BE-974C-A003FC95041B}]
@="System.Runtime.CompilerServices.CallConvStdcall"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BCB67D4D-2096-36BE-974C-A003FC95041B}\InprocServer32]
"Class"="System.Runtime.CompilerServices.CallConvStdcall"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BCB67D4D-2096-36BE-974C-A003FC95041B}\InprocServer32\2.0.0.0]
"Class"="System.Runtime.CompilerServices.CallConvStdcall"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BCB67D4D-2096-36BE-974C-A003FC95041B}\InprocServer32\4.0.0.0]
"Class"="System.Runtime.CompilerServices.CallConvStdcall"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BCB67D4D-2096-36BE-974C-A003FC95041B}\ProgId]
@="System.Runtime.CompilerServices.CallConvStdcall"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C6A168A1-CF31-4351-95FD-40077E8A5A54}\InprocServer32]
@="C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbevst.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\c:|Program Files|Hewlett-Packard|HP System Information|ar-SA|HPSI.resources.dll]
"HPSI.resources,Version="2.0.12.1",Culture="ar-SA",ProcessorArchitecture="MSIL",FileVersion="65535.0.0.0""="0epA&rKTG@)Rz(]F9)}-HP_ASL>5`ygs_vSt8kWGD8Ir_ly"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\C6BD1954B293F2C40998508A5A1ADE85]
"1033\proffax.dot"=")l1^Vn-}f(ZXfeAR6.jiWordFaxesFiles>VsT]jI{jf(=1&L[-81-][^0]\Professional Fax.dot"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21E7E662-4A52-4939-96FC-E0A8DE1F105A}]
@="ITvStationTuner"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{26D808DE-E03E-4112-AD1A-1591B02B644A}]
@="ITvStationTunerNotify"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{28122E12-6C9A-46DF-BE10-940E21A12237}]
@="IMVStyle"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{282D1395-B52B-41D8-B13F-2DB102344E28}]
@="IMVStyleInfo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{282D1396-B52B-41D8-B13F-2DB102344E28}]
@="IMVStyleInfo2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2C3F25FA-EC89-452E-9A37-25D21A342539}]
@="ITvStationAutoTune"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3901A765-AB91-4ba9-A553-5B8538DEB840}]
@="IWscAVStatus"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5EF2C94C-3935-45EC-95DD-67AB0B237223}]
@="IMVStyleInfo3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8E17A5CD-1160-32DC-8548-407E7C3827C9}]
@="_CallConvStdcall"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E63A3134-580C-4079-B551-F1C6D7C5B88C}]
@="ITvStationAutoTuneNotify"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\StyleInfo.MVStyleInfo]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\StyleInfo.MVStyleInfo]
@="MVStyleInfo Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\StyleInfo.MVStyleInfo\CurVer]
@="StyleInfo.MVStyleInfo.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\StyleInfo.MVStyleInfo.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\StyleInfo.MVStyleInfo.1]
@="MVStyleInfo Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\System.Runtime.CompilerServices.CallConvStdcall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\System.Runtime.CompilerServices.CallConvStdcall]
@="System.Runtime.CompilerServices.CallConvStdcall"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{923E2347-9D68-4FDB-9FC0-BB36A4E44BA4}\1.0\0\win32]
@="C:\Program Files\Common Files\muvee Technologies\030625\mvStyleInfo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A1D48491-19A0-432C-8865-BDA5BE867C7B}\1.0\0\win32]
@="C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbevst.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VST.VitalBook]
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0033]
"_DeviceName_01"="ATI AVStream Analog Capture"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0033]
"ATV_TvTunerFilter"="ATI AVStream Analog Tuner"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0033]
"ATV_TvAudioFilter"="ATI AVStream Analog TV Audio"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0033]
"ATV_XBarFilter"="ATI AVStream Analog Xbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0033]
"_DeviceName_02"="ATI AVStream Analog Capture"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0037]
"ATV_SpecialAudioDevice"="FusionHDTV, AvStream Audio Capture"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0048]
"_DeviceName_01"="ATI AVStream Analog Capture"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0048]
"_DeviceName_02"="ATI AVStream Analog Capture"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0048]
"ATV_TvTunerFilter"="ATI AVStream Analog Tuner"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0048]
"ATV_TvAudioFilter"="ATI AVStream Analog TV Audio"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0048]
"ATV_XBarFilter"="ATI AVStream Analog Xbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0057]
"_DeviceName_01"="ATI T200 AVStream Analog Capture"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0059]
"_DeviceName_01"="ATI AVStream Analog Capture"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0059]
"ATV_TvTunerFilter"="ATI AVStream Analog Tuner"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0059]
"ATV_TvAudioFilter"="ATI AVStream Analog TV Audio"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0059]
"ATV_XBarFilter"="ATI AVStream Analog Xbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Cyberlink\Common\CLRec4\DevMetaData\0092]
"_DeviceName_01"="ATI AVStream Analog Capture"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{1B343C8C-F170-4829-8481-E163317C5830}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{2A697B53-0DE3-42DA-B41D-C3F804B1C538}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{5ECB3A3C-980B-4D12-9724-25DCB07A1F47}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{69995C7A-062A-4A90-A4DF-8C22895DF522}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{7AB3A249-FB81-416B-917A-A2A10E74C503}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{7BE4D7A3-591B-4aff-89E1-2B0DE81D2113}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_F922651AD36DADE59756BB9CB900A74834B0879B\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{7E6066E6-8B5B-4100-B0FA-1D9E9B663CBA}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{81063354-9060-42B2-A000-1EBE96778AA9}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{881F5DE8-9367-4B81-A325-E91BBC6472F9}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{91F7F3F3-CE80-48C3-8327-7D24A0A5716A}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{996A2FAA-7514-4628-9D12-A8FC34A0016E}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{AAD47011-8518-4608-9656-951DA35B587B}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{C73CA646-73B3-4AEF-A136-C37505745174}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{E8843212-F0FC-4C3B-BFF3-D51829CB4F19}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\GEAR Software\DIFx\{F59A9E08-A6A4-4ACF-91F2-D0344956C30B}]
"Path"="C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\GEARAspiWDM.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\Hewlett-Packard\Product Assistant\hprbevst]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Assistance\Client\1.0\Namespaces\Windows\en-US\Titles]
"netvsta"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-drvstore_31bf3856ad364e35_0.0.0.0_none_14ce4ad88baf69bf]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_0.0.0.0_en-us_c95d43912b7c2318]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ComponentDetect\x86_microsoft-windows-help-netvsta_31bf3856ad364e35_0.0.0.0_none_a0944c9dcd8430a1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\da.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\da.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\da.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\de.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\de.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\de.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\en.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\en.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\en.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\es.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\es.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\es.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\fi.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\fi.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\fi.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\fr.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\fr.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\fr.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\it.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\it.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\it.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\ja.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\ja.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\ja.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\ko.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\ko.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\ko.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\nb.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\nb.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\nb.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\nl.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\nl.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\nl.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\pl.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\pl.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\pl.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\pt.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\pt.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\pt.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\ru.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\ru.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\ru.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\sv.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\sv.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\sv.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\AppleTVStream.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\AppleTVStreamingPrefsBar.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\DevicePrefsGeneralAppleTVStreaming.nib\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\004C2CAF96EDCCC43B864D8445BE9C01]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\nl.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\011CE4D45FEA87E4EB32DBC3438A88D9]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\fi.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0277768210B6C2D40AE73709FA7B6C4A]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\ru.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02CFFE9F363491F44A92D86010828FC1]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\03C0F5D1A99AF2C48BE4942C41D58D0B]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\it.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1279B8F897586034DBBB20AF9456D530]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\en.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12C23072389C00446A6D1D3005C8F5AA]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\157AB79417B16054A806CF24B1AB89C8]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\fi.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\164EDC0FCDC356047BF5CB009B9AE075]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\es.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\16763DAFBCC84714A99212CE9AA2405C]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\177E271072F47284FA40BEFC6961FCCF]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\ko.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1D235DE83EFDC294E90D678AF1B36024]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\pl.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1D44A000E5D6B8147AEB718756857F88]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1D4CC8EEA5095224C98ACCAC64A521C2]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\de.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EBB8064AF499AC41882D0BF0EB65D13]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\ja.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\303B10BC400074240B7BEB659D9D2484]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\pl.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\32B1876E11F6DAF42BBC150AACBCA913]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\de.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\35579DAAEDB57E344BFABEC17C7F6DCB]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\376BED91839EF864C94B0D56A5FBBC4E]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\en.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BADF9AC79C7E8A4F8E8B04DD47C6DDD]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\ko.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EC45F1448F962E4581E53874C18E704]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\sv.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4E79AB4C830B78C49B735B49AE1A97FC]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\522D82EACBABBBC408F94D6254BD000F]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\de.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\59E403FF11CFF754D856B7D7CB4A7F35]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\fr.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\650ECD1625E56484FB185CDA4EE797EA]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\es.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68FBDA6782E48644DBF7613C7B78786A]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\ja.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A2A9659268BF2841926443AE6A12504]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\nl.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6EAE14E7EB44EAC4DBECCD9CB059DA52]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\da.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71D55208E6455F549934CC5A5FC2E4E5]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\sv.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76192A4F92F3B2B47934317305D858B6]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\it.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76925D70B9DA1FE4AA445A521A814870]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\ko.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\77A614C5A9A47A04FB9DE3FFB179AB75]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7B44A422B90CB4B4EB9496D1BD2A4EB9]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\nl.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\81A21CDA14EAD49408578F773B5FDA3B]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90BB5D7D4C4FF334FA454FD515E2502C]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\es.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\952F6326B6D01F54DB938F9F7874E4F8]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\en.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\99A5897762825B242A853209A37CFA8C]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\nb.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D217E8614993E04685068B34E7F1AFF]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\ru.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E96B8454BE0E3E4ABA3295E19F87B4E]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\it.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9FF5EC9A61EB89F49860DD1C42EFE8ED]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\da.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A2600D486FFDA1545A7DC4C28F997701]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\nb.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC88CEA93FB8B6743ABF17F0E8878BFB]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\fr.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACA3A8C0AF38CC645AA9145A0331DA44]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\nb.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AFB6B7390C0E2824C80833B467C6A379]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\fi.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4382F7DECEE6004E8A9A3034EA4DBB8]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\da.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B594D17A0A916D0478FDFD441594EE14]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\pl.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B90E32DC3E3D4264FACAFD0CDB9150E9]
"1026B0516E9EBFD469E0CCDB35BFDDDE"="C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbevst.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD423AF842AD980498E6C088D49CA935]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\fr.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C187A5D5C70D2A7489B41A8508431773]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\sv.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C395456FE7DEB3445B406809A88661F9]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\en_GB.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C46940801A0E89A45A699A2BB38817DF]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\ru.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C8A23058A288FAF4D9E8AF73A0128251]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\ja.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEF5AFA60C56FF144A33E0740F5F969D]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D1E7CFC02DD7B32458314286300A9DAD]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\pt.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D7EC64F07897345AFDE0423FF65205]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\pt.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB0EC4240AB6A3B3F8406FE2B93377BA]
"8BF2823BB47845043865E93B198A629F"="C?\Program Files\Common Files\muvee Technologies\030625\mvStyleInfo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F78115CA9FEA0194A9C656F2E09271BE]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\pt.lproj\AppleTVStreamingPrefsBar.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FCAB641429DF0004C8B962DB3E896176]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\AppleTVStream.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFCE56F2B34B82F43A6F218F91651374]
"A7C59996A26009A44AFDC82298D55F22"="C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\DevicePrefsGeneralAppleTVStreaming.nib\objects.xib"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7DC1B83906C7E194AA09F18188612804\Features]
"CapturePTB"="1m9KO.4?D@[6%3`uyPnt$.%E$7{y@9]Dr1qIs1O0Pz!`.OBnb8~$?4)DLzV-d]f4tT(hJ=Xh5c-5NCD1Q&-)4r+2s=_?yB-]7GoU.%.[!Eh5]AXSIgb_Lrs(=4}M.2otb?$Te!M]]6=$7ymN$fHo9@`%@5'S5Yu?E%Gj[X6V_@D)$Z!jzfcUjq%.`!.h^?P!X6vV%{YHykP&x`tSj?pCSazXX{gzgl&%3a{*J?-+6X3)X7dhR9DP'64Rz8rKV*-XK]8j_LSWT[0qT@`7cSb-6}TEAh@wq3PYZ8`qOocQ.4L()nl=PJ5fp8(M!QA[Y4Dk?4XVyBE@RA4M'WLR_[7m*]}ZRthr_=a8jbMI[Sxeh`p_w39Fl9zpWG9=nP8W[Gnn@SX!^?!$29qU1s5pehSYdR,Qd=YKphh[B*,lq^5sg!C+D@jo)~]BzkUVe0r%+~dq'A0UCv3xKtMxkyQ+EO+w'=fT`+)VsTDiXxO3k-,iu?FQX534?h_sj-oE2af'B@5b?m9dNC}pK@4pHL3h]@nvl?2k+W[VNK~2T.Jgs=v3?p(DVAvUmMKUV'o&g@=]X)mxOMXt=Rs*1m^n{=r&nM.fsGqe@~cTghLfW=Xb2zAJD?MZ^yvgEp]{)=fY@v3(x@bqA23C1o!Q$9ms~MdmyF2?MPa47fyjt=hlPsV^YMDGQ-UOz-W~V=b[pCS!bu=!MediaCapture"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9040211900063D11C8EF10054038389C\Features]
"WordFaxesFiles"="}.~0`xhkf(7)dqFgkW_B'0~0`xhkf(7)dqFgkW_B(ReZR@_kf(1rcqFgkW_BRsT]jI{jf(=1&L[-81-]TsT]jI{jf(=1&L[-81-](',*iLJQ&?*+hIQPTobt8PGuDG*%eAnYRIcr4nJzZ[eHwzqH0?GDg}6deiqJosT]jI{jf(=1&L[-81-]VsT]jI{jf(=1&L[-81-]WORDWizAndTempFiles"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\92002D988750D8D479A996C5D8688886\Features]
"TaxCut_Federal_Program"="2%BKi_4W9@MA[`*7Tj_vpR]V$@++p=USy-zN'J]p_,Igy.0M[@bbxtJrdYxZI@B_!xZ~F9St0qHs-bG+z+gHT4Dn9@vyPWTuv`[?oEWIHVZo^9&PH0HH2^PG*aL`PSA{f@Ku5Eh2~KpMoJbH%YNQj9olAS*=7S(*VK(l?814-ADL5r,wk!zl0rFIHa%'SA,,_]WAQ%p%hu)~r_ngr8Z9emfVEF'nA^l.w4,6W={%NXI@~WldlTUlUFax{8)3@@]$T]4q={5QD&9[]A=@VET^=POSNfB9ugLtu=GMe%4QXC++q!`XxH?y~@dD={,%4*[M7_j}a@qJ[9?OEbDNGyRDsT[+xrc--=j?!54!]B!EKQj^BbJkQ9yd7'YAVeAvAY.yB58S?AQ!sB]oKo[aN4j'6vQi@??`NU4jq$B5~4ylH%y@$@^+qieUH.^V{a'aN,5R@=%`BhNX?q@0+bK(FTR]]9xx_~[OiP_i_lv,mTMr[@*f)h.bR$q&`p0UY&o~x8aF)}DFssdb[D29uaXwh849(?7tXC8B{x_guITG??}oq8rO}toxEEND9D4Tb?5+V~-X%SdtPr`DS^.jUA(SNlF.JNIvRy]UjwVB-@Mq43mDI7[JDilC74WCo?-sl_K~3_@d@AtH?Kt6N?I$tnWW&F4Frd{*J`M&p9fgjBlPY(z9aq.rNcR2!=VllwBO3{Ez]brH'[IPt8q7aW4)3Jkfkz&2tI-v~@g.+Qc%JL}2f%H^*`xfk9FWjOlByyt4*fcQvJ0lbA_,R@V7pN4aGd+vJTjEH@gYQlm(m$w?s~mPemYAu8)w%gL)94~.CmE8-8Xzt9%D1K4MV`Da9`k=2^(Ad=Y,~U7
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AD6DC32C85915A34DA0D959356270EE2\Features]
"SyncServices"="B!R`&!X5h(x+BfN%lrLWbNDe^PT.]9(OOREG%F(l6_c6om-L{=oa'[h[`C=I+$$L4!9KM@wG,y?5@3]Y@sWxGxrFo@iG92_'1g(g@b+Ow*h8h(},bDI&lrLWpHY4QmV4t8E41z,+lSb+,dxj-&?!A=+wje5b@WF`x{T!b5kd)9TL9JiDr^i^kVhI!9j3)@Xs$i%hR!^*oC5'1E&P?=6KF33rF)?+fCq8n5eP9A'{BAbLKEOzx+v)KtPV}8]uLpl-I8FBlFdge1s6X=78q,xuqa%@nu[Z=$jbN?*)xKaGNwXsJ%qXul_5h(P1vjw%lrLW+bW1C+h8h(K0sxI&lrLWJ.A7rl_5h(G5Wfw%lrLWc,Wc-+h8h(598[I&lrLW4m'i.30%Z@`*kD3?~Xe)6zt55+h8h(62EeI&lrLW=q(FnJ@$w@oSSn+,wcY-h4ymOE,sj9x,uXO'$6Me@{j9[&IK1A?$]NlHjn0D1Om2N+h8h(i~t-J&lrLW3to9G4.9h(v3&]r%lrLW-}?C7$e`'9k_,n@234[Ad`=6'x2dE?lLA)y=h=zG(l*)Q?J_W9z[{.twevnqn,]se(]NY8r}kp_PssV6hX!cW+h8h(yYVNJ&lrLW7IU+R'+ck@4qjB19m)!VwU+x=6H5h(I[s!!U.{{H.f}g[Uj9h(^'cv-,$wkRZ46_HVj9h(MUh`.,$wkRPd0+KVj9h(iNnc.,$wkRK0q^LVj9h(4g=e.,$wkR8C)~OVj9h(DcMg.,$wkReB^eQVj9h(qmuh.,$wkR`o}$SVj9h(Gqbi.,$wkR!O8UVVj9h(uw!n.,$wkR8kh5XVj9h(O4^o.,$wkRFQNbZVj9h(,skq.,$wkRZ1Sb^
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FFAB74A0FF4D3DB469AC202AE26A7222\Features]
"HP_ASL"="tbiLK?P!V9=Ed^CWt5pfFvGYzMkc+At9{bAxx}&9Q9qnmro{q@`wsB1[i2azpvKye7F9b9?Cvwsf~=2&~&@7jIuio?s~b$Irm@HPKp9B?qXAb9j^2]upO1f&r'9iZtsG!9L0+B+N4506'mJ]0)5yl@j=%y(b$pquxi67j.Z,h=m[4$m.41=U~O?h?*E4}=voBzyJ4~0bW1-=p**0%=_vS^0ae-_AdCF0vaOtm9oylj^Q,idx=h7%J[{-,=ef4hD51=v(.I24tr1yU@%ge+lrVkWO812,(jNV2Aqe%}=!&*`QXFfehU62~?^c@cKBI87ex*cc-HDj}8x![PzxCkGC+r@+-},c99*0HLsl,5UkeTMf$Up(&AR{ip,-^$s&t[RQ!Xg)z?tTee?b!tFv7EF9=xbET@J8eE.,*8,MSSe6B+JJB=LcHVJq~PTvpBV_WwgQ_98Y[kS*j5_5`mffVPt~N=}.2tUx,X(eA*J1ZPB?-?}yJmszLFSQWiFy&wC$J=$'lRuHV0{&QF$]5G8FS=wWP]kw@9LI`ea'3giRS9o.hJpQOksvk?F*Ia.*~9TW`6-BNT4k-RsK^PE$C=_C85XTr2~,memC`R,Q?=7VWqs'w?$g55{s3N_6-=+J?co_keK!wwG)eYED'=A,4Ho`X8WTMZn.X^U*V?t[gIcriyVd8H9^z8nv,?.$LUr$}]=&9l+Y3r53JAB$^jUI6O{d7Ey}$3CT&9*&o`zuEl,f_13H+?7mg=%GXB(.R@-A73ToarAPW=by]JSFp,~!F)ch-ZU2s@M^)W&!w[W2@R!{])Pp+@y.Xo,NuBo(!)^s1Zo'7?IK-4g'6A=?Xo1v0+VMZ@b+8y)Bvat5uv[(?GwJk83
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-drvstore.resources_31bf3856ad364e35_6.0.6000.16386_en-us_8f5e257481536df0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-drvstore_31bf3856ad364e35_6.0.6000.16386_none_eebd932f469a1cb5]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-drvstore_31bf3856ad364e35_6.0.6001.18000_none_f0f4552b43852d89]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-drvstore_31bf3856ad364e35_6.0.6002.18005_none_f2dfce3740a6f8d5]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a34c8be7e666d60e]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_6.1.6002.18005_en-us_6f9d94347f3f0b4f]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-help-netvsta_31bf3856ad364e35_6.0.6000.16386_none_7a8394f4886ee397]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-help-netvsta_31bf3856ad364e35_6.1.6002.18005_none_46d49d41214718d8]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-help-privstatement_31bf3856ad364e35_6.0.6000.16386_none_498b76699db64150]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-drvstore.resources_31bf3856ad364e35_en-us_1990c4147a998f86]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-drvstore_31bf3856ad364e35_none_cae33b79483c5fa9]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-drvstore_31bf3856ad364e35_none_cae33b79483c5fa9\f256!drvstore.dll]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_804fdf3652ecbcd8]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_804fdf3652ecbcd8\f256!netvsta.h1s]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-help-netvsta_31bf3856ad364e35_none_a072a4fbcf24bb57]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-help-privstatement_31bf3856ad364e35_none_1d7653e3e9393f26]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-drvstore.resources_31bf3856ad364e35_en-us_1990c4147a998f86]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-drvstore_31bf3856ad364e35_none_cae33b79483c5fa9]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-help-netvsta.resources_31bf3856ad364e35_en-us_804fdf3652ecbcd8]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-help-netvsta_31bf3856ad364e35_none_a072a4fbcf24bb57]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_microsoft-windows-help-privstatement_31bf3856ad364e35_none_1d7653e3e9393f26]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink]
"Andale Sans for VST"="L_10646.TTF,Lucida Sans Unicode TAHOMA.TTF,Tahoma MICROSS.TTF,Microsoft Sans Serif MSGOTHIC.TTC,MS UI Gothic"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink]
"Thorndale for VST"="L_10646.TTF,Lucida Sans Unicode TAHOMA.TTF,Tahoma MICROSS.TTF,Microsoft Sans Serif MSGOTHIC.TTC,MS UI Gothic"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"Andale Sans for VST (TrueType)"="ANDSNVS.TTF"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"Andale Sans for VST Bold (TrueType)"="ANDSVSB.TTF"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"Andale Sans for VST Bold Italic (TrueType)"="ANDSVSBI.TTF"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"Andale Sans for VST Italic (TrueType)"="ANDSVSI.TTF"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"Thorndale for VST (TrueType)"="THORNVS_.TTF"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"Thorndale for VST Bold (TrueType)"="THORNVSB.TTF"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"Thorndale for VST Italic (TrueType)"="THORNVSI.TTF"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"Thorndale for VST Bold Italic (TrueType)"="THORVSBI.TTF"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\PackageInstallation\Windows NT x86\DriverPackages\hphpa2vst4wu.inf_bb74dc69]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\PackageInstallation\Windows NT x86\DriverPackages\hphpa2vst4wu.inf_bb74dc69]
"DriverStorePath"="C:\Windows\System32\DriverStore\FileRepository\hphpa2vst4wu.inf_bb74dc69\hphpa2vst4wu.inf"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\PackageInstallation\Windows NT x86\DriverPackages\hphpa2vst4wu.inf_bb74dc69]
"CabPath"="C:\Windows\system32\spool\DRIVERS\W32X86\PCC\hphpa2vst4wu.inf_bb74dc69.cab"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\8.0\FeatureLockdown\cDefaultLaunchAttachmentPerms]
"tBuiltInPermList"="version:1|.ade:3|.adp:3|.app:3|.asp:3|.bas:3|.bat:3|.bz:3|.bz2:3|.chm:3|.class:3|.cmd:3|.com:3|.command:3|.cpl:3|.crt:3|.csh:3|.desktop:3|.dll:3|.exe:3|.fxp:3|.gz:3|.hex:3|.hlp:3|.hqx:3|.hta:3|.inf:3|.ini:3|.ins:3|.isp:3|.its:3|.job:3|.js:3|.jse:3|.ksh:3|.lnk:3|.lzh:3|.mad:3|.maf:3|.mag:3|.mam:3|.maq:3|.mar:3|.mas:3|.mat:3|.mau:3|.mav:3|.maw:3|.mda:3|.mdb:3|.mde:3|.mdt:3|.mdw:3|.mdz:3|.msc:3|.msi:3|.msp:3|.mst:3|.ocx:3|.ops:3|.pcd:3|.pi:3|.pif:3|.prf:3|.prg:3|.pst:3|.rar:3|.reg:3|.scf:3|.scr:3|.sct:3|.sea:3|.shb:3|.shs:3|.sit:3|.tar:3|.tgz:3|.tmp:3|.url:3|.vb:3|.vbe:3|.vbs:3|.vsmacros:3|.vss:3|.vst:3|.vsw:3|.webloc:3|.ws:3|.wsc:3|.wsf:3|.wsh:3|.zip:3|.zlo:3|.zoo:3|.pdf:2|.fdf:2"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0036&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_003E&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0054&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0055&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0266]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0267]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_036F]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_037E]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_037F]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_03E7]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_03F6]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_03F7]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CriticalDeviceDatabase\SBP2#VST_TECHNOLOGIESINC.&VST_THIN_FIREWIRE_DRIVE&CmdSetId104d8&GenDisk]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Photosmart 8400 Series]
"InfPath"="C:\Windows\System32\DriverStore\FileRepository\hphpa2vst4wu.inf_bb74dc69\hphpa2vst4wu.inf"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\System\nvstor]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\System\nvstor]
"EventMessageFile"="%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\nvstor.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nvstor]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nvstor]
"ImagePath"="\SystemRoot\system32\drivers\nvstor.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0036&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_003E&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0054&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0055&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0266]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0267]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_036F]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_037E]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_037F]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_03E7]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_03F6]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_03F7]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\CriticalDeviceDatabase\SBP2#VST_TECHNOLOGIESINC.&VST_THIN_FIREWIRE_DRIVE&CmdSetId104d8&GenDisk]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Photosmart 8400 Series]
"InfPath"="C:\Windows\System32\DriverStore\FileRepository\hphpa2vst4wu.inf_bb74dc69\hphpa2vst4wu.inf"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\nvstor]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\nvstor]
"EventMessageFile"="%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\nvstor.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\nvstor]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\nvstor]
"ImagePath"="\SystemRoot\system32\drivers\nvstor.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0036&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_003E&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0054&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0055&CC_0104]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0266]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_0267]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_036F]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_037E]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_037F]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_03E7]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_03F6]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PCI#VEN_10DE&DEV_03F7]
"Service"="nvstor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\SBP2#VST_TECHNOLOGIESINC.&VST_THIN_FIREWIRE_DRIVE&CmdSetId104d8&GenDisk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers\Version-3\HP Photosmart 8400 Series]
"InfPath"="C:\Windows\System32\DriverStore\FileRepository\hphpa2vst4wu.inf_bb74dc69\hphpa2vst4wu.inf"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\nvstor]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\nvstor]
"EventMessageFile"="%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\nvstor.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvstor]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvstor]
"ImagePath"="\SystemRoot\system32\drivers\nvstor.sys"
[HKEY_USERS\S-1-5-21-397070735-3145188438-542509979-1001\Software\VST]

-= EOF =-

Thanks,

Mark
penmark
Regular Member
 
Posts: 15
Joined: August 23rd, 2013, 1:31 pm

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby pgmigg » September 2nd, 2013, 11:42 pm

Hello Mark,

Results of System Look (note: I did not see any reference to x64 when running this file):
Sorry - it was my mistake given you wrong link label but proper link. :oops: What is important is that in the end you took the right tool! :)

This is my general post for when your logs show no more signs of malware.
Before I give you instructions how to keep your computer clean and secure, you need to make a few additional steps.

Step 1.
Latest Java Installation Needed!

Attention: Print these instructions or copy them. You will be closing your browser!!

DOWNLOAD LATEST VERSION
  1. Get the latest version (7u25) of Java Runtime Environment (JRE)... © Sun Microsystems, Inc.
  2. Click the "Download JRE" button to the right.
  3. Check "Accept License Agreement "
  4. Locate the entry for Windows i86 Offline and click on the associated file name jre-7u25-windows-i586.exe , save the file to your desktop.

INSTALL Java
  1. Close all open applications (standard), especially your browser.
  2. From desktop please double-click on jre-7u25-windows-i586.exe to install the newest version.
  3. Follow the on-screen directions and when installation is completed successfully, reboot your computer normally.
  4. Once the computer has been restarted, you can delete the "downloaded" installation file from your desktop.
OPTIONAL:
To prevent some unnecessary JAVA components from running when you boot your computer each time...
  1. Go to Control Panel and click on the JAVA icon.
  2. Press the Update tab and UNCHECK "Check for Updates Automatically". (You can check for updates manually.)
      Reply "Never Check" to the warning prompt.
  3. Now press the Advanced tab. Press the [+] to expand the "Miscellaneous" options.
  4. UNCHECK "Java Quick Starter".
  5. Press Apply and OK. Then close the Java Control Panel. Close and exit Control Panel.

Step 2.
Update Adobe Reader
Your version of Adobe Reader is out-of-date. There are serious security issues with older versions of Adobe Reader.

Please download the current version of Adobe Reader...Copyright © Adobe Systems Inc.
Please UNCHECK the box for the: Free McAfee® Security Scan Plus.
  1. Click the yellow Download now button. If you don't already have Adobe DLM... you may receive a prompt.
    Adobe DLM software removal instructions available here, if wanted.
  2. The Adobe installer will check your system and begin the installation process. Use the default installation parameters.
  3. When the installation is complete, please Close and re-open your Internet browser.

Adobe Reader XI - recommended (safety) program settings
When the program is open, click on Edit and select Preferences. In the categories below, use these settings:
  • Javascript - Uncheck Enable Acrobat Javascript.
  • Security (Enhanced) - Uncheck Automatically trust sites from my Win OS security zones.
  • Trust Manager- Uncheck Allow opening of non-PDF file attachments with external applications.

Step 3.
OTL - Run Fix Script
You should still have OTL on your desktop.
Important! Close all applications and windows so that you have nothing open and are at your Desktop.
  1. Double-click on OTL.exe to run it.
  2. Copy and Paste the following code into the Image text box. Do not include the word Code
    Code: Select all
    :Commands
    [CREATERESTOREPOINT]
    [EMPTYTEMP]
    [CLEARALLRESTOREPOINTS]
    
  3. Click under the Custom Scan/Fixes box and paste the copied text.
  4. Click the Run Fix button. If prompted... click OK.
  5. OTL may ask to reboot the machine. Please do so if asked.

Step 4.
OTL-Cleanup
You should still have OTL on your desktop.
  1. Double-click on OTL.exe to run it.
  2. Press the CleanUp button.
  3. When done, you will be prompted to reboot your system to finish file removal, please select OK to reboot your computer.

Then:
Please don't forget to enable all your defense software!

Finally:
Please click HERE to find a
short guide to staying safer online.


Please don't hesitate to ask any additional questions.

Stay Safe! ;)
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3181
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby penmark » September 3rd, 2013, 9:05 am

pgmigg,

Thanks again for all your help.

While trying to install Adobe Reader XI in step 2, I got a warning box telling me that Adobe 8.3 is using files that need to be updated by this setup. I did a search of open apps in the Task Manager and didn't see Adobe 8.3 running. I retried but got the same results. Do you have any suggestions for how I can proceed with the Adobe Reader XI installation?

Also, in one of your first posts, you said to delete Weather Bug, but I did not find it on my system to delete. Was that a general instruction, or was it specific to me? If specific to me, do you have any suggestions on how I should delete something I cannot see?

Thanks,

Mark
penmark
Regular Member
 
Posts: 15
Joined: August 23rd, 2013, 1:31 pm

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby pgmigg » September 3rd, 2013, 11:31 am

Hello Mark,

While trying to install Adobe Reader XI in step 2, I got a warning box telling me that Adobe 8.3 is using files that need to be updated by this setup. I did a search of open apps in the Task Manager and didn't see Adobe 8.3 running. I retried but got the same results. Do you have any suggestions for how I can proceed with the Adobe Reader XI installation?
Good question, thank you!

Please do the following:

Step 1.
Remove Old Acrobat Reader
  1. Click on Start, then click the Start Search box on the Start Menu.
  2. Copy and paste the value below without the words 'Code: Select all' into the open text entry box:
    Code: Select all
     appwiz.cpl 
    and press Enter - the Unistall or change a program list will be opened.
  3. Click an entry if it exists, choose Uninstall, and give permission to continue:
    Adobe Reader 8.3.1
  4. Take extra care in answering questions posed by Uninstaller.
  5. When the program have been uninstalled, please close Control Panel.
  6. Reboot you computer.

Step 2.
Update Adobe Reader
Please download the current version of Adobe Reader...Copyright © Adobe Systems Inc.
Please UNCHECK the box for the: Free McAfee® Security Scan Plus.
  1. Click the yellow Download now button. If you don't already have Adobe DLM... you may receive a prompt.
    Adobe DLM software removal instructions available here, if wanted.
  2. The Adobe installer will check your system and begin the installation process. Use the default installation parameters.
  3. When the installation is complete, please Close and re-open your Internet browser.

Adobe Reader XI - recommended (safety) program settings
When the program is open, click on Edit and select Preferences. In the categories below, use these settings:
  • Javascript - Uncheck Enable Acrobat Javascript.
  • Security (Enhanced) - Uncheck Automatically trust sites from my Win OS security zones.
  • Trust Manager- Uncheck Allow opening of non-PDF file attachments with external applications.

Also, in one of your first posts, you said to delete Weather Bug, but I did not find it on my system to delete. Was that a general instruction, or was it specific to me? If specific to me, do you have any suggestions on how I should delete something I cannot see?
Actually I asked you to uninstall the WeatherBug Gadget. It is special WeatherBug addition for Windows Vista Sidebar. The WeatherBug Warning is the general text but in Step for removing I indicated WeatherBug Gadget exactly. Please remember that it was not a request but my recommendation only.

Let see which programs are installed for now:

Step 3.
MiniToolBox
Please download MiniToolBox.exe ... by Farbar and save it to your Desktop.
  1. Right click MiniToolBox and select "Run As Administrator...", to run the tool.
  2. Check the following in the list:
    • List Installed Programs
  3. Press the Go button.
    A file name Result.txt will be created in the same location where you downloaded MiniToolBox.exe
  4. Close the MiniToolBox window.
  5. Please post the contents of the Result.txt in your next reply.

Please include in your next reply:
  1. Do you have any problems executing the instructions?
  2. Contents of a Result.txt log file after MiniToolBox run
  3. Do you see any changes in computer behavior?

Please do not hesitate to divide the post into multiple if it is too long...

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3181
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby penmark » September 3rd, 2013, 12:12 pm

pgmigg:

Thanks for helping me out with that. Here is the log of the MiniToolBox execution:

iniToolBox by Farbar Version: 13-07-2013
Ran by Mark (administrator) on 03-09-2013 at 12:06:09
Running from "C:\Users\Public\Orenzow documents\Ebay matters\Downloads"
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86)
Boot Mode: Normal
***************************************************************************

=========================== Installed Programs ============================

32 Bit HP CIO Components Installer (Version: 7.1.8)
ABBYY FineReader 6.0 Sprint (Version: 6.00.1395.4512)
Adobe Digital Editions
Adobe Flash Player 10 Plugin (Version: 10.0.42.34)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Reader X (10.1.4) (Version: 10.1.4)
Adobe Shockwave Player (Version: 11)
AIM 7
AnyDVD (Version: 7.2.2.0)
Apple Application Support (Version: 2.0.1)
Apple Mobile Device Support (Version: 3.4.1.2)
Apple Software Update (Version: 2.1.3.127)
Bonjour (Version: 3.0.0.2)
bpd_scan (Version: 3.00.0000)
BPDSoftware (Version: 140.0.000.000)
BPDSoftware_Ini (Version: 1.00.0000)
BufferChm (Version: 140.0.213.000)
CCH Small Firm Services (xulRunner)
Click'N Design 3D (V5) (Version: v5.x.x)
CloneCD
CloneDVD2 (Version: 2.9.3.0)
CloneDVDmobile (Version: 1.9.0.1)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
Creative MediaSource 5 (Version: 5.00)
DeductionPro 2007 (Version: 14.19)
DeductionPro 2008 (Version: 16.04)
DeductionPro 2009 (Version: 17.04)
Destinations (Version: 130.0.0.0)
DeviceDiscovery (Version: 140.0.213.000)
Digital Photo Navigator 1.5
DocMgr (Version: 140.0.65.000)
DocProc (Version: 140.0.100.000)
Download Updater (AOL LLC)
Enhanced Multimedia Keyboard Solution
EPSON Attach To Email (Version: 1.01.0000)
EPSON Copy Utility 3 (Version: 3.3.0.0)
EPSON Event Manager (Version: 1.80.00)
EPSON Perfection V500 Photo Scanner Driver Update
EPSON Perfection V500P User's Guide
EPSON Printer Software
EPSON Scan
EPSON Scan Assistant (Version: 1.11.00)
ESET Online Scanner v3
Fax (Version: 140.0.213.000)
Google Calendar Sync
Google Chrome (Version: 29.0.1547.62)
Google Drive (Version: 1.11.4865.2530)
Google Update Helper (Version: 1.3.21.153)
GoToAssist Corporate (Version: 9.0.0.570)
GPBaseService2 (Version: 140.0.212.000)
H&R Block Basic + Efile + State 2011 (Version: 11.03.7102)
H&R Block Business 2009 (Remove Only)
H&R Block Business 2010 (Remove Only)
H&R Block Business 2012 (Remove Only)
H&R Block New Jersey 2009 (Version: 1.09.3301)
H&R Block New Jersey 2010 (Version: 1.10.3001)
H&R Block New Jersey 2011 (Version: 1.11.3401)
H&R Block New Jersey 2012 (Version: 1.12.6301)
H&R Block New York 2009 (Version: 1.09.4801)
H&R Block New York 2010 (Version: 1.10.4901)
H&R Block New York 2011 (Version: 1.11.4401)
H&R Block New York 2012 (Version: 1.12.7001)
H&R Block Pennsylvania 2012 (Version: 1.12.3501)
H&R Block Premium + Efile + State 2009 (Version: 09.06.6901)
H&R Block Premium + Efile + State 2010 (Version: 10.06.6301)
H&R Block Premium + Efile + State 2012 (Version: 12.07.7803)
Hardware Diagnostic Tools (Version: 5.00.4558.05)
Hewlett-Packard Active Check for Health Check (Version: 1.1.15.2)
Hewlett-Packard Asset Agent for Health Check (Version: 2.0.64.0)
HP Active Support Library (Version: 2.0.12.1)
HP Active Support Library 32 bit components (Version: 2.1.0)
HP Advisor (Version: 3.1.9152.3107)
HP Customer Experience Enhancements (Version: 5.2.0.2296)
HP Customer Feedback (Version: 1.0.0)
HP Customer Participation Program 14.0 (Version: 14.0)
HP Document Manager 2.0 (Version: 2.0)
HP Driver Diagnostics (Version: 1.02.0010)
HP Easy Setup - Frontend (Version: 5.2.0.2304)
HP Imaging Device Functions 14.0 (Version: 14.0)
HP OfficeJet J4600 All-In-One Series (Version: 14.0)
HP On-Screen Cap/Num/Scroll Lock Indicator
HP Photo Creations (Version: 1.0.0.3341)
HP Photosmart Essential 3.5 (Version: 3.5)
HP Photosmart Plus B210 series Basic Device Software (Version: 22.50.231.0)
HP Photosmart Plus B210 series Help (Version: 140.0.54.54)
HP Picasso Media Center Add-In (Version: 1.0.0)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 14.0 (Version: 14.0)
HP Update (Version: 5.005.000.002)
HPDiagnosticAlert (Version: 1.00.0000)
HPPhotoSmartDiscLabelContent1 (Version: 2.04.0000)
HPPhotosmartEssential (Version: 2.04.0000)
HPProductAssistant (Version: 140.0.213.000)
HPSSupply (Version: 140.0.212.000)
Intel(R) Graphics Media Accelerator Driver
Intel(R) Matrix Storage Manager
Intel® Viiv™ Software (Version: 1.6.361.6)
iPodifier (Version: 1.5.0.3)
ISI ResearchSoft - Export Helper
iTunes (Version: 10.4.1.10)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
LightScribe 1.6.45.1 (Version: 1.6.45.1)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
MarketResearch (Version: 140.0.214.000)
MCE Tunes Pro (Version: 2.5)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 60 day trial
Microsoft Office Standard Edition 2003 (Version: 11.0.8173.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Works (Version: 08.05.0818)
Move Media Player
Move Networks Media Player for Internet Explorer
Mozilla Firefox 23.0.1 (x86 en-US) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
muvee autoProducer 6.0 (Version: 6.00.050)
My HP Games (Version: HPCMPQ1804)
MyAttorney Home And Business (Version: 1.00.000)
Netflix in Windows Media Center (Version: 2.0.0.0)
Network (Version: 140.0.215.000)
Norton 360 (Version: 20.4.0.40)
OCR Software by I.R.I.S. 14.0 (Version: 14.0)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
OLYMPUS Master 2 (Version: 1.0.6)
OLYMPUS muvee theaterPack (Version: 1.0.4)
OverDrive Media Console (Version: 2.1.0)
Pdf995
PdfEdit995
Picasa 3 (Version: 3.9)
PowerCinema NE for Everio
PowerDirector Express
PowerProducer (Version: 074511a(3.7)_Vista_JVC)
PSSWCORE (Version: 2.01.0000)
Python 2.5 (Version: 2.5.150)
QuickTime (Version: 7.70.80.34)
Realtek High Definition Audio Driver (Version: 6.0.1.5548)
Rhapsody
Rhapsody Player Engine (Version: 1.0.604)
Roxio Activation Module (Version: 1.0)
Roxio Creator Audio (Version: 3.4.0)
Roxio Creator Basic v9 (Version: 3.4.0)
Roxio Creator Copy (Version: 3.4.0)
Roxio Creator Data (Version: 3.4.0)
Roxio Creator EasyArchive (Version: 3.4.0)
Roxio Creator Tools (Version: 3.4.0)
Roxio Express Labeler 3 (Version: 3.2.1)
Roxio MyDVD Basic v9 (Version: 9.0.572)
Safari (Version: 5.34.50.0)
Scan (Version: 140.0.167.000)
Shop for HP Supplies (Version: 14.0)
SmartWebPrinting (Version: 140.0.213.000)
Snapfish Picture Mover (Version: 1.9.0.16)
Soft Data Fax Modem with SmartCP (Version: 7.74.00)
SolutionCenter (Version: 140.0.214.000)
SpeedFan (remove only)
Spelling Dictionaries Support For Adobe Reader 8 (Version: 8.0.0)
Status (Version: 140.0.256.000)
Symantec Technical Support Web Controls (Version: 3.5.3)
TaxCut New Jersey 2007 (Version: 1.07.3701)
TaxCut New Jersey 2008 (Version: 1.08.2901)
TaxCut New York 2007 (Version: 1.07.5501)
TaxCut New York 2008 (Version: 1.08.4701)
TaxCut Premium + State + Efile 2008 (Version: 08.07.7101)
TaxCut Premium + State 2007 (Version: 07.04.0000)
Toolbox (Version: 140.0.428.000)
TrayApp (Version: 140.0.213.000)
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
VideoToolkit01 (Version: 90.0.146.000)
Viewpoint Media Player
VitalSource Bookshelf (Version: 6.01.0011)
WeatherBug Gadget (Version: 1.0.0.6)
WebReg (Version: 140.0.213.017)
WebSlingPlayer ActiveX (Version: 1.5.7158)
Yahoo! Search Protection
ZENcast Organizer

**** End of log ****

I would be happy to delete any programs you deem problematic, including the WeatherBug gadget if you can tell me how to do it.

I still have to run the OTL Run Fix Script and OTL Cleanup as per the prior instructions, but I am waiting until I get your response to this and take whatever action is necessary.

Thanks.

Mark
penmark
Regular Member
 
Posts: 15
Joined: August 23rd, 2013, 1:31 pm

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby pgmigg » September 4th, 2013, 9:44 am

Hello Mark,

I would be happy to delete any programs you deem problematic, including the WeatherBug gadget if you can tell me how to do it.
In the mean time, please try to uninstall it in the usual way:

Step 1.
Remove Program
  1. Click on Start, then click the Start Search box on the Start Menu.
  2. Copy and paste the value below without the words 'Code: Select all' into the open text entry box:
    Code: Select all
     appwiz.cpl 
    and press Enter - the Unistall or change a program list will be opened.
  3. Click an entry if it exists, choose Uninstall, and give permission to continue:
    WeatherBug Gadget
  4. Take extra care in answering questions posed by Uninstaller.
  5. When the program have been uninstalled, please close Control Panel.
  6. Reboot you computer.

If the WeatherBug Gadget it is not on your list or if you never used it and cannot locate on your screen, please ignore existence of it.
If you know where the WeatherBug Gadget is, please right-click it. Scroll down the contextual menu and click "Remove." Then click "Yes" to confirm your selection.

I still have to run the OTL Run Fix Script and OTL Cleanup as per the prior instructions, but I am waiting until I get your response to this and take whatever action is necessary.
Now you can proceed to the rest of steps:

Step 2.
OTL - Run Fix Script
You should still have OTL on your desktop.
Important! Close all applications and windows so that you have nothing open and are at your Desktop.
  1. Double-click on OTL.exe to run it.
  2. Copy and Paste the following code into the Image text box. Do not include the word Code
    Code: Select all
    :Commands
    [CREATERESTOREPOINT]
    [EMPTYTEMP]
    [CLEARALLRESTOREPOINTS]
    
  3. Click under the Custom Scan/Fixes box and paste the copied text.
  4. Click the Run Fix button. If prompted... click OK.
  5. OTL may ask to reboot the machine. Please do so if asked.

Step 3.
OTL-Cleanup
You should still have OTL on your desktop.
  1. Double-click on OTL.exe to run it.
  2. Press the CleanUp button.
  3. When done, you will be prompted to reboot your system to finish file removal, please select OK to reboot your computer.

Then:
Please don't forget to enable all your defense software!

Finally:
Please click HERE to find a
short guide to staying safer online.


Please don't hesitate to ask any additional questions.

Stay Safe! ;)
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3181
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby penmark » September 4th, 2013, 12:33 pm

Pgmigg,

Ok, I managed to uninstall the WeatherBug gadget, which was not listed in the list of programs in the Control Panel. Thanks for the tip. And I ran the OTL run fix and clean up.

I will read through all the material on virus/malware protection that you provided, but knowing that I use Norton 360, what do you recommend as the best malware protection to go with that? Based on what I read, it looks like the malwarebytes premium (lifetime subscription) may be the way to go, but I'd be interested in your opinion on whether I should use multiple malware programs at the same time along with my Norton 360.

Thanks again for your help and your diligence. I hope I don't need to use this forum again for malware removal, but if I do, I am glad to know there is someone like you out there that I can count on.

Regards and be well.

Mark
penmark
Regular Member
 
Posts: 15
Joined: August 23rd, 2013, 1:31 pm

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby pgmigg » September 4th, 2013, 3:55 pm

Hello Mark,

I will read through all the material on virus/malware protection that you provided, but knowing that I use Norton 360, what do you recommend as the best malware protection to go with that? Based on what I read, it looks like the malwarebytes premium (lifetime subscription) may be the way to go, but I'd be interested in your opinion on whether I should use multiple malware programs at the same time along with my Norton 360.
There are no the best malware defense software because the number of different infection is so huge that no one can work against all. But there are a few very good protection programs like Avast! Free Antivirus or Microsoft Security Essentials.

If you ask about my opinion and my preferences, I have been using for myself Avast Free Antivirus and I bought a few years ago lifetime subscription for Malwarebytes Antimalware.

The running more than one (multiple) antivirus program is not recommended because:
  1. They can conflict with each other.
  2. Report the other antivirus software as malicious.
  3. Antivirus programs use an enormous amount of computer's resources when actively scanning your computer.
  4. Can cause your computer to run slowly, become unstable and even crash.


I strongly suggest you to follow this simple rules!

Thanks again for your help and your diligence. I hope I don't need to use this forum again for malware removal, but if I do, I am glad to know there is someone like you out there that I can count on.
You are very welcome, Mark!

Stay Safe as long as possible! ;)
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3181
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Google redirect virus/vista/IE9 affected/Firefox unaffec

Unread postby Cypher » September 7th, 2013, 10:28 am

As your problems appear to have been resolved, this topic is now closed.

We are pleased we could help you resolve your computer's issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 14959
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 42 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware