Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

I get "redirected" when click on a search link

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: I get "redirected" when click on a search link

Unread postby Kimo » August 15th, 2010, 10:53 pm

Hi Turdledove:
Got back home sooner than I expected. I downloaded ComboFix and saved to desktop.

Went to the page that explains how to disable Avast. It said to right click on the Avast icon in the tray and click the one that says something like "Stop-access." That not exactly what it called it but when I right click the Avast icon these are the options that pop-up -

Open Avast intrface
Avast shields control > options on this one are
disable for 10 seconds
disable for 1 hour
disable until computer is restarted
disable permanently
Silent/Gaming Mode
Show last pop-up message
Registration Information
About Avast

So should I click the "disable until computer is restarted" under the Avast shields control?

Additionally, I clicked on Run, typed in "firewall.cpl" and it says "Windows firewall is helping to protect your computer" and the "on" circle has the dot in it. Should I click on the "Off (not recommended)" circle?

As always thanks for your help.

Kimo
Kimo
Regular Member
 
Posts: 19
Joined: August 5th, 2010, 10:20 pm
Advertisement
Register to Remove

Re: I get "redirected" when click on a search link

Unread postby turtledove » August 16th, 2010, 1:23 pm

Good Day Kimo,

Yes, select the Disable until reboot in Avast. You may select Off in Windows Firewall, but re-enable once Combofix has finished and before going online.

Thanks for asking.

turtledove.
User avatar
turtledove
Retired Graduate
 
Posts: 4398
Joined: February 13th, 2006, 3:26 am
Location: California

Re: I get "redirected" when click on a search link

Unread postby Kimo » August 17th, 2010, 7:30 am

WaaaHooo!!! I think you fixed it.

I completed your last instructions last night. The first time I tried to run ComboFix it got to the screen that said, "This normally takes 10 minutes. A badly infected machine can take double that." Well, 3 hours are more later I still had that screen with a yellow blinking cursor, which would seem to indicate that ComboFix was still running. But I had doubts everything was going right. So I tried to close it and found computer was locked up. Tried Control/Alt/Delete but wasn't for sure which process to stop. so the only thing I knew to do was unplug it. Which I did and then rebooted. I disabled Avast and restarted ComboFix. It completed this time and generated the following log-

ComboFix 10-08-16.03 - James Powers 08/17/2010 3:04.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.243 [GMT -5:00]
Running from: c:\documents and settings\James Powers\Desktop\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Downloaded Program Files\ODCTOOLS
c:\windows\system32\1488069715.dat
c:\windows\system32\dumphive.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe

Infected copy of c:\windows\system32\drivers\redbook.sys was found and disinfected
Restored copy from - Kitty had a snack :p
.
((((((((((((((((((((((((( Files Created from 2010-07-17 to 2010-08-17 )))))))))))))))))))))))))))))))
.

2010-08-13 04:22 . 2010-08-13 04:23 -------- d-----w- c:\program files\ERUNT
2010-08-12 05:12 . 2010-08-12 05:31 -------- d-----w- C:\rsit
2010-08-05 01:18 . 2010-08-05 01:18 -------- d-----w- c:\documents and settings\James Powers\Application Data\Uniblue
2010-08-04 21:30 . 2010-08-04 21:30 -------- d-----w- C:\$AVG
2010-08-04 18:17 . 2010-06-28 20:37 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-08-04 18:17 . 2010-06-28 20:32 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-08-04 18:17 . 2010-06-28 20:33 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-08-04 18:16 . 2010-06-28 20:37 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-08-04 18:16 . 2010-06-28 20:32 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-08-04 18:16 . 2010-06-28 20:32 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-08-04 18:16 . 2010-06-28 20:32 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-08-04 18:15 . 2010-06-28 20:57 38848 ----a-w- c:\windows\avastSS.scr
2010-08-04 18:15 . 2010-06-28 20:57 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-08-04 02:37 . 2010-08-12 02:10 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9
2010-08-04 01:42 . 2010-08-04 01:42 -------- d-----w- c:\windows\system32\wbem\Repository
2010-08-04 01:41 . 2010-08-04 05:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-08-02 03:31 . 2010-08-02 03:52 -------- d-----w- c:\documents and settings\James Powers\Local Settings\Application Data\AskToolbar
2010-08-02 03:13 . 2010-08-04 01:41 -------- d-----w- c:\program files\Ask.com

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-12 05:28 . 2009-07-15 13:51 -------- d-----w- c:\program files\Trend Micro
2010-08-12 02:20 . 2009-07-15 13:56 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-08-12 02:17 . 2006-05-02 13:51 -------- d-----w- c:\program files\Java
2010-08-12 01:57 . 2009-03-31 03:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-08-05 01:00 . 2010-08-05 01:00 388096 ----a-r- c:\documents and settings\James Powers\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-08-04 17:53 . 2010-08-04 17:53 1615200 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgssie.dll
2010-08-04 17:53 . 2010-08-04 17:53 1373536 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgssff.dll
2010-08-04 17:53 . 2010-08-04 17:53 1107296 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgxpl.dll
2010-08-04 17:53 . 2010-08-04 17:53 4368224 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgcorex.dll
2010-08-04 02:37 . 2009-07-15 13:49 -------- d-----w- c:\program files\AVG
2010-07-31 02:14 . 2007-06-24 02:16 -------- d-----w- c:\program files\iLuminaStarter
2010-07-01 21:46 . 2010-06-30 05:25 308424 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-06-30 21:32 . 2006-05-08 23:09 68752 -c--a-w- c:\documents and settings\James Powers\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-06-30 05:20 . 2010-06-30 05:20 -------- d-----w- c:\program files\MSBuild
2010-06-30 05:19 . 2010-06-30 05:19 -------- d-----w- c:\program files\Reference Assemblies
2010-06-20 16:37 . 2008-01-20 00:11 -------- d-----w- c:\program files\FinePixViewer
2010-05-21 23:41 . 2010-05-21 23:41 348160 -c--a-w- c:\documents and settings\James Powers\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-7de05ee6-n\msvcr71.dll
2010-05-21 23:41 . 2010-05-21 23:41 503808 -c--a-w- c:\documents and settings\James Powers\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-7de05ee6-n\msvcp71.dll
2010-05-21 23:41 . 2010-05-21 23:41 499712 -c--a-w- c:\documents and settings\James Powers\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-7de05ee6-n\jmc.dll
2006-12-17 22:57 . 2006-07-10 11:38 88 -csh--r- c:\windows\system32\B6D36EF558.sys
2007-01-04 02:57 . 2006-05-21 15:09 5852 -csha-w- c:\windows\system32\KGyGaAvL.sys
.

------- Sigcheck -------

[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9425B72F40257B45D45D24773273DAD0 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9425B72F40257B45D45D24773273DAD0 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[7] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . ACCF5A9A1FFAA490F33DBA1C632B95E1 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
[-] 2006-04-20 . 1DBF125862891817F374F407626967F4 . 359808 . . [5.1.2600.2892] . . c:\windows\$NtUninstallKB941644$\tcpip.sys
[-] 2006-01-13 . 5562CC0A47B2AEF06D3417B733F3C195 . 360448 . . [5.1.2600.2827] . . c:\windows\$hf_mig$\KB913446\SP2QFE\tcpip.sys
[-] 2006-01-13 . 583E063FDC888CA30D05C2724B0D7EF4 . 359808 . . [5.1.2600.2827] . . c:\windows\$NtUninstallKB917953$\tcpip.sys
[7] 2004-08-04 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB913446$\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSKDetectorExe"="c:\program files\McAfee\SpamKiller\MSKDetct.exe" [2005-08-12 1121792]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 81920]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-04-06 94208]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-04-06 77824]
"DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-10-05 94208]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-09-08 122940]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-03-26 177472]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696]
"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 39264]

c:\documents and settings\James Powers\Start Menu\Programs\Startup\
DING!.lnk - c:\program files\Southwest Airlines\Ding\Ding.exe [2006-6-22 462848]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2006-5-2 24576]
ExifLauncher2.lnk - c:\program files\FinePixViewer\QuickDCF2.exe [2008-1-19 303104]
HotSync Manager.lnk - c:\program files\Palm\Hotsync.exe [2004-6-9 471040]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [8/4/2010 1:17 PM 165456]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [8/4/2010 1:17 PM 17744]
S0 iykyyhlo;iykyyhlo;c:\windows\system32\drivers\klliults.dat --> c:\windows\system32\drivers\klliults.dat [?]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [6/3/2010 7:01 PM 136176]
.
Contents of the 'Scheduled Tasks' folder
c:\windows\Tasks\Ad-Aware Update (Daily 2).job

2010-08-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 18:34]

2010-08-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-04 00:01]

2010-08-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-04 00:01]
.
.
------- Supplementary Scan -------
.
DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9 ... ontrol.CAB
FF - ProfilePath - c:\documents and settings\James Powers\Application Data\Mozilla\Firefox\Profiles\qhu3qfxr.default\
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
.
- - - - ORPHANS REMOVED - - - -

ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-17 03:17
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iykyyhlo]
"ImagePath"="system32\drivers\klliults.dat"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3816)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\windows\system32\bgsvcgen.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Canon\CAL\CALMAIN.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2010-08-17 03:24:30 - machine was rebooted
ComboFix-quarantined-files.txt 2010-08-17 08:24

Pre-Run: 91,344,084,992 bytes free
Post-Run: 91,515,248,640 bytes free

- - End Of File - - 1D8B63A0C60A83B5D08A3AE279068F09


After ComboFix completed I turned the Windows firewall back on. Avast was already activated, I guess when Combofix completed it Rebooted. I don't know I was asleep but when I roll the cursor on the Avast icon it says,"Your system is secured."

I went online to the msn.com page did a search and clicked on one of the search results and it when to the page - no problem.

I assume you want me to try it for a period of time before I delete the things from my desktop?

Thank you very, very much for your time and expertise to correct this problem.

Kimo
Kimo
Regular Member
 
Posts: 19
Joined: August 5th, 2010, 10:20 pm

Re: I get "redirected" when click on a search link

Unread postby turtledove » August 17th, 2010, 11:34 am

Good Day Kimo,

Your are welcome :) You've done well yourself also.

Good news about your search. I'll go through these logs and be sure if anything else needs dealt with before removing any tools yet.
I'll return as soon as possible.

Thanks

turtledove
User avatar
turtledove
Retired Graduate
 
Posts: 4398
Joined: February 13th, 2006, 3:26 am
Location: California

Re: I get "redirected" when click on a search link

Unread postby turtledove » August 17th, 2010, 5:10 pm

Good Day Kimo,

Please copy or print these out for easy reference.

Let's get AVG cleaned up. It left some files after uninstalling.

AVG Cleanup

  • Click here to download the AVG removal tool and save it to your Desktop.
  • Double-click avgremover.exe to run the tool.
    NOTE: To run the tool in Vista, right-click avgremover.exe and select Run as Administrator.
  • Click Yes at the warning.
  • Allow the computer to reboot to finish removal.


ComboFix - CFScript
WARNING !
This script is for THIS user and computer ONLY!
Using this tool incorrectly could damage your Operating System... preventing it from starting again!


You will not have Internet access when you execute ComboFix. All open windows will need to be closed!

  1. Please open Notepad and copy/paste all the text below... into the window:
    Code: Select all
    KILLALL::
    
    File::
    c:\windows\system32\B6D36EF558.sys
    c:\windows\system32\drivers\klliults.dat
    c:\windows\Tasks\Ad-Aware Update (Daily 2).job
    
    Folder::
    c:\program files\SUPERAntiSpyware
    c:\documents and settings\All Users\Application Data\Lavasoft
    c:\documents and settings\All Users\Application Data\avg9
    C:\$AVG
    
    Driver::
    klliults.dat
    
    Registry::
    [-HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iykyyhlo]
    
    Reboot::
  2. Save it to your desktop as CFScript.txt
  3. Please disable any Antivirus or Firewall as you did in the previous step. Please close all open application windows.
  4. Drag the CFScript.txt (icon) into the ComboFix.exe icon... as seen in the image below:

    Image

    This will cause ComboFix to run again.
    Do Not use your keyboard or mouse click anywhere in the ComboFix window, as this may cause the program to stall or crash.
    Do Not touch your computer when ComboFix is running!

    When finished... Notepad will open ... ComboFix will produce a log file called "log.txt".
  5. Please copy/paste the contents of log.txt... in your next reply.

** Enable your Antivirus and Firewall, before connecting to the Internet again! **


Ask toolbar

I would remove this toolbar. You can read more about it HERE.

  • Click Start
  • Go to Control Panel
  • Go to Add/Remove Programs
  • Find and click Remove for the following (if present) Do not worry if it is not.:

    ASk toolbar

NOTE: Take care when answering any questions posed by an uninstaller. Some questions may be worded to deceive you into keeping the program.

You can delete the folders from here (Red items only):
c:\documents and settings\James Powers\Local Settings\Application Data\AskToolbar
c:\program files\Ask.com



Viewpoint Manager is considered as foistware instead of malware since it is installed without user's approval but doesn't spy or do anything bad. This may change,read Viewpoint to Plunge Into Adware.

I recommend that you remove the Viewpoint products; however, decide for yourself.

To uninstall the the Viewpoint components :
  1. Click Start, point to Settings, and then click Control Panel.
  2. In Control Panel, double-click Add or Remove Programs.
  3. In Add or Remove Programs, highlight >>Viewpoint component<< , click Remove. Do not worry if it is not present.
    If not in Add/Remove, if you wish to remove Viewpoint delete the following (Red items only):
    c:\program files\Viewpoint if the folder is still present.




    ESET online scannner


    Note: You can use either Internet Explorer or Mozilla FireFox for this scan.


    • Hold down Control then click on the following link to open a new window to ESET online scannner
    • Then click on: Image
      Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
      All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
    • Select the option YES, I accept the Terms of Use then click on: Image
    • When prompted allow the Add-On/Active X to install.
    • Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
    • Now click on Advanced Settings and select the following:
      • Scan for potentially unwanted applications
      • Scan for potentially unsafe applications
      • Enable Anti-Stealth Technology
    • Now click on: Image
    • The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
    • When completed the Online Scan will begin automatically.
    • Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
    • When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
    • Now click on: Image
    • Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
    • Copy and paste that log as a reply to this topic.


Rootkit Warning

One or more of the identified infections you had was related to a rootkit component.
Rootkits are very dangerous because they use advanced techniques as a means of accessing a computer system that bypasses security mechanisms and steal sensitive information which they send back to the hacker.
Many rootkits can hook into the Windows 32-bit kernel, and patch several APIs to hide new registry keys and files they install.
Remote attackers use rootkits as part of an exploit to gain unauthorized access to a computer and take control of it without your knowledge.

If your computer was used for online banking, has credit card information or other sensitive data on it, you should immediately disconnect from the Internet until your system is cleaned. All passwords should be changed immediately to include those used for banking, email, eBay, Paypal and online forums. You should consider them to be compromised. They should be changed by using a different computer and not the infected one. If not, an attacker may get the new passwords and transaction information. Banking and credit card institutions should be notified of the possible security breach.
Because your computer was compromised please read How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

Although the rootkit has been identified and appears to have been removed, your PC may be compromised and there is no way to be sure the computer can ever be trusted again.
It is dangerous and incorrect to assume that because the rootkit has been removed the computer is now secure.
Further, in some instances an infection may have caused so much damage to your system that it cannot be completely cleaned or repaired. The malware may leave so many remnants behind that security tools cannot find them. Many experts in the security community believe that once infected with this type of malware, the best course of action is to wipe the drive clean, reformat and reinstall the OS. Please read:

"When should I re-format? How should I reinstall?"
"Help: I Got Hacked. Now What Do I Do?"
"Where to draw the line? When to recommend a format and reinstall?"

Should you decide not to follow that advice we cannot guarantee your computer to be trustworthy or that the malware removal has been completely successful.

Post
Log from New C:\ComboFix.txt
C:\Program Files\ESET\EsetOnlineScanner\log.txt

Thank you

turtledove
User avatar
turtledove
Retired Graduate
 
Posts: 4398
Joined: February 13th, 2006, 3:26 am
Location: California

Re: I get "redirected" when click on a search link

Unread postby Kimo » August 17th, 2010, 9:23 pm

Turtledove: I just realized I have been spelling your name with a d instead of a T. Sorry about that.

Question - I downloaded the AVG removal tool. I clicked on it and then on "yes" to remove AVG. Then for a split second a black background pop-up box appears and a bunch of white letters scroll down and then it disappears. I waited several minutes for it to reboot but it never did. I tried it again same result. So I did a search on AVG and this is what came up - well I was going to copy and paste but it is not working. However there are several files in addition to the two AVG removal files. One of them is AVG 8.5 in Documents and Settings. So I assume the removal tool did not work. What now??

Thanks Kimo
Kimo
Regular Member
 
Posts: 19
Joined: August 5th, 2010, 10:20 pm

Re: I get "redirected" when click on a search link

Unread postby turtledove » August 17th, 2010, 11:21 pm

Good evening Kimo,

Thanks for that information.

Please go on with the next steps. We can take care of the AVG leftovers the CFScript does not after that.


turtledove
User avatar
turtledove
Retired Graduate
 
Posts: 4398
Joined: February 13th, 2006, 3:26 am
Location: California

Re: I get "redirected" when click on a search link

Unread postby Kimo » August 18th, 2010, 11:34 pm

TurtleDove:

I completed your last set of instructions except for the part of using the AVG removal tool to remove remaining components of AVG. As I said earlier I can do a search on AVG and several items come up including AVG 8.5. However, I just noticed the following AVGRemover NotePad file on my desktop (it is very long and forum won't accept all of it. I'll put some of it in another post)-

2010-08-18 00:56:10,571 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013)
2010-08-18 00:56:10,603 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
2010-08-18 00:56:10,603 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d)
2010-08-18 00:56:10,603 WARN AvgDir param empty.
2010-08-18 00:56:10,603 WARN AvgDataDir param empty.
2010-08-18 00:56:37,356 INFO AvgRemover runs in attempt number 1
2010-08-18 00:56:37,356 INFO ***** Services *****
2010-08-18 00:56:37,356 INFO Processing service avg8emc
2010-08-18 00:56:37,372 INFO Service avg8emc is not installed
2010-08-18 00:56:37,372 DEBUG Service avg8emc RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service avg8emc are not present
2010-08-18 00:56:37,372 INFO Processing service avgfws8
2010-08-18 00:56:37,372 INFO Service avgfws8 is not installed
2010-08-18 00:56:37,372 DEBUG Service avgfws8 RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service avgfws8 are not present
2010-08-18 00:56:37,372 INFO Processing service avg8wd
2010-08-18 00:56:37,372 INFO Service avg8wd is not installed
2010-08-18 00:56:37,372 DEBUG Service avg8wd RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service avg8wd are not present
2010-08-18 00:56:37,372 INFO Processing service AvgWFPx
2010-08-18 00:56:37,372 INFO Service AvgWFPx is not installed
2010-08-18 00:56:37,372 DEBUG Service AvgWFPx RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service AvgWFPx are not present
2010-08-18 00:56:37,372 INFO Processing service AvgWFPa
2010-08-18 00:56:37,372 INFO Service AvgWFPa is not installed
2010-08-18 00:56:37,372 DEBUG Service AvgWFPa RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service AvgWFPa are not present
2010-08-18 00:56:37,372 INFO Processing service AvgMfx86
2010-08-18 00:56:37,372 INFO Service AvgMfx86 is not installed
2010-08-18 00:56:37,372 DEBUG Service AvgMfx86 RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service AvgMfx86 are not present
2010-08-18 00:56:37,372 INFO Processing service AvgMfx64
2010-08-18 00:56:37,372 INFO Service AvgMfx64 is not installed
2010-08-18 00:56:37,372 DEBUG Service AvgMfx64 RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service AvgMfx64 are not present
2010-08-18 00:56:37,372 INFO Processing service AvgLdx86
2010-08-18 00:56:37,372 INFO Service AvgLdx86 is not installed
2010-08-18 00:56:37,372 DEBUG Service AvgLdx86 RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service AvgLdx86 are not present
2010-08-18 00:56:37,372 INFO Processing service AvgLdx64
2010-08-18 00:56:37,372 INFO Service AvgLdx64 is not installed
2010-08-18 00:56:37,372 DEBUG Service AvgLdx64 RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service AvgLdx64 are not present
2010-08-18 00:56:37,372 INFO Processing service AvgTdiX
2010-08-18 00:56:37,372 INFO Service AvgTdiX is not installed
2010-08-18 00:56:37,372 DEBUG Service AvgTdiX RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service AvgTdiX are not present
2010-08-18 00:56:37,372 INFO Processing service AvgTdiA
2010-08-18 00:56:37,372 INFO Service AvgTdiA is not installed
2010-08-18 00:56:37,372 DEBUG Service AvgTdiA RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service AvgTdiA are not present
2010-08-18 00:56:37,372 INFO Processing service AvgRkx86
2010-08-18 00:56:37,372 INFO Service AvgRkx86 is not installed
2010-08-18 00:56:37,372 DEBUG Service AvgRkx86 RegCleanup
2010-08-18 00:56:37,372 DEBUG Registry keys for service AvgRkx86 are not present
2010-08-18 00:56:37,372 INFO Processing service AvgRkx64
2010-08-18 00:56:37,388 INFO Service AvgRkx64 is not installed
2010-08-18 00:56:37,388 DEBUG Service AvgRkx64 RegCleanup
2010-08-18 00:56:37,388 DEBUG Registry keys for service AvgRkx64 are not present
2010-08-18 00:56:37,388 INFO Processing service avg9emc
2010-08-18 00:56:37,388 INFO Service avg9emc is not installed
2010-08-18 00:56:37,388 DEBUG Service avg9emc RegCleanup
2010-08-18 00:56:37,388 DEBUG Registry keys for service avg9emc are not present
2010-08-18 00:56:37,388 INFO Processing service avgfws9
2010-08-18 00:56:37,388 INFO Service avgfws9 is not installed
2010-08-18 00:56:37,388 DEBUG Service avgfws9 RegCleanup
2010-08-18 00:56:37,388 DEBUG Registry keys for service avgfws9 are not present
2010-08-18 00:56:37,388 INFO Processing service avg9wd
2010-08-18 00:56:37,388 INFO Service avg9wd is not installed
2010-08-18 00:56:37,388 DEBUG Service avg9wd RegCleanup
2010-08-18 00:56:37,388 DEBUG Registry keys for service avg9wd are not present
2010-08-18 00:56:37,388 INFO Processing service AVGIDSAgent
2010-08-18 00:56:37,388 INFO Service AVGIDSAgent is not installed
2010-08-18 00:56:37,388 DEBUG Service AVGIDSAgent RegCleanup
2010-08-18 00:56:37,388 DEBUG Registry keys for service AVGIDSAgent are not present
2010-08-18 00:56:37,388 INFO Processing service AVGIDSShimxpx
2010-08-18 00:56:37,388 INFO Service AVGIDSShimxpx is not installed
2010-08-18 00:56:37,388 DEBUG Service AVGIDSShimxpx RegCleanup
2010-08-18 00:56:37,388 DEBUG Registry keys for service AVGIDSShimxpx are not present
2010-08-18 00:56:37,388 INFO Processing service AVGIDSFilterxpx
2010-08-18 00:56:37,388 INFO Service AVGIDSFilterxpx is not installed
2010-08-18 00:56:37,403 DEBUG Service AVGIDSFilterxpx RegCleanup
2010-08-18 00:56:37,403 DEBUG Registry keys for service AVGIDSFilterxpx are not present
2010-08-18 00:56:37,403 INFO Processing service AVGIDSDriverxpx
2010-08-18 00:56:37,403 INFO Service AVGIDSDriverxpx is not installed
2010-08-18 00:56:37,403 DEBUG Service AVGIDSDriverxpx RegCleanup
2010-08-18 00:56:37,403 DEBUG Registry keys for service AVGIDSDriverxpx are not present
2010-08-18 00:56:37,403 INFO Processing service AVGIDSShimvtx
2010-08-18 00:56:37,403 INFO Service AVGIDSShimvtx is not installed
2010-08-18 00:56:37,403 DEBUG Service AVGIDSShimvtx RegCleanup
2010-08-18 00:56:37,403 DEBUG Registry keys for service AVGIDSShimvtx are not present
2010-08-18 00:56:37,403 INFO Processing service AVGIDSFiltervtx
2010-08-18 00:56:37,403 INFO Service AVGIDSFiltervtx is not installed
2010-08-18 00:56:37,403 DEBUG Service AVGIDSFiltervtx RegCleanup
2010-08-18 00:56:37,403 DEBUG Registry keys for service AVGIDSFiltervtx are not present
2010-08-18 00:56:37,403 INFO Processing service AVGIDSDrivervtx
2010-08-18 00:56:37,403 INFO Service AVGIDSDrivervtx is not installed
2010-08-18 00:56:37,403 DEBUG Service AVGIDSDrivervtx RegCleanup
2010-08-18 00:56:37,403 DEBUG Registry keys for service AVGIDSDrivervtx are not present
2010-08-18 00:56:37,403 INFO Processing service AVGIDSFiltervta
2010-08-18 00:56:37,403 INFO Service AVGIDSFiltervta is not installed
2010-08-18 00:56:37,403 DEBUG Service AVGIDSFiltervta RegCleanup
2010-08-18 00:56:37,403 DEBUG Registry keys for service AVGIDSFiltervta are not present
2010-08-18 00:56:37,403 INFO Processing service AVGIDSDrivervta
2010-08-18 00:56:37,403 INFO Service AVGIDSDrivervta is not installed
2010-08-18 00:56:37,419 DEBUG Service AVGIDSDrivervta RegCleanup
2010-08-18 00:56:37,419 DEBUG Registry keys for service AVGIDSDrivervta are not present
2010-08-18 00:56:37,419 INFO Processing service AVGIDSShimw7x
2010-08-18 00:56:37,419 INFO Service AVGIDSShimw7x is not installed
2010-08-18 00:56:37,419 DEBUG Service AVGIDSShimw7x RegCleanup
2010-08-18 00:56:37,419 DEBUG Registry keys for service AVGIDSShimw7x are not present
2010-08-18 00:56:37,419 INFO Processing service AVGIDSFilterw7x
2010-08-18 00:56:37,419 INFO Service AVGIDSFilterw7x is not installed
2010-08-18 00:56:37,419 DEBUG Service AVGIDSFilterw7x RegCleanup
2010-08-18 00:56:37,419 DEBUG Registry keys for service AVGIDSFilterw7x are not present
2010-08-18 00:56:37,419 INFO Processing service AVGIDSDriverw7x
2010-08-18 00:56:37,419 INFO Service AVGIDSDriverw7x is not installed
2010-08-18 00:56:37,419 DEBUG Service AVGIDSDriverw7x RegCleanup
2010-08-18 00:56:37,419 DEBUG Registry keys for service AVGIDSDriverw7x are not present
2010-08-18 00:56:37,419 INFO Processing service AVGIDSFilterw7a
2010-08-18 00:56:37,419 INFO Service AVGIDSFilterw7a is not installed
2010-08-18 00:56:37,419 DEBUG Service AVGIDSFilterw7a RegCleanup
2010-08-18 00:56:37,419 DEBUG Registry keys for service AVGIDSFilterw7a are not present
2010-08-18 00:56:37,419 INFO Processing service AVGIDSDriverw7a
2010-08-18 00:56:37,419 INFO Service AVGIDSDriverw7a is not installed
2010-08-18 00:56:37,419 DEBUG Service AVGIDSDriverw7a RegCleanup
2010-08-18 00:56:37,419 DEBUG Registry keys for service AVGIDSDriverw7a are not present
2010-08-18 00:56:37,419 INFO Processing service AVGIDSErHrxpx
2010-08-18 00:56:37,419 INFO Service AVGIDSErHrxpx is not installed
2010-08-18 00:56:37,419 DEBUG Service AVGIDSErHrxpx RegCleanup
2010-08-18 00:56:37,419 DEBUG Registry keys for service AVGIDSErHrxpx are not present
2010-08-18 00:56:37,434 INFO Processing service AVGIDSErHrvtx
2010-08-18 00:56:37,434 INFO Service AVGIDSErHrvtx is not installed
2010-08-18 00:56:37,434 DEBUG Service AVGIDSErHrvtx RegCleanup
2010-08-18 00:56:37,434 DEBUG Registry keys for service AVGIDSErHrvtx are not present
2010-08-18 00:56:37,434 INFO Processing service AVGIDSErHrvta
2010-08-18 00:56:37,434 INFO Service AVGIDSErHrvta is not installed
2010-08-18 00:56:37,434 DEBUG Service AVGIDSErHrvta RegCleanup
2010-08-18 00:56:37,434 DEBUG Registry keys for service AVGIDSErHrvta are not present
2010-08-18 00:56:37,434 INFO Processing service AVGIDSErHrw7x
2010-08-18 00:56:37,434 INFO Service AVGIDSErHrw7x is not installed
2010-08-18 00:56:37,434 DEBUG Service AVGIDSErHrw7x RegCleanup
2010-08-18 00:56:37,434 DEBUG Registry keys for service AVGIDSErHrw7x are not present
2010-08-18 00:56:37,434 INFO Processing service AVGIDSErHrw7a
2010-08-18 00:56:37,434 INFO Service AVGIDSErHrw7a is not installed
2010-08-18 00:56:37,434 DEBUG Service AVGIDSErHrw7a RegCleanup
2010-08-18 00:56:37,434 DEBUG Registry keys for service AVGIDSErHrw7a are not present
2010-08-18 00:56:37,434 INFO ***** Registry keys and values *****
2010-08-18 00:56:37,434 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2010-08-18 00:56:37,434 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove
2010-08-18 00:56:37,434 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present
2010-08-18 00:56:37,434 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2010-08-18 00:56:37,450 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove
2010-08-18 00:56:37,450 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present
2010-08-18 00:56:37,450 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found
2010-08-18 00:56:37,450 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt ForceRemove
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt not found
2010-08-18 00:56:37,450 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found
2010-08-18 00:56:37,450 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
2010-08-18 00:56:37,450 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
2010-08-18 00:56:37,450 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
2010-08-18 00:56:37,450 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}
2010-08-18 00:56:37,450 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove
2010-08-18 00:56:37,450 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found
2010-08-18 00:56:37,450 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 00:56:37,450 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 00:56:37,450 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 00:56:37,450 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar
2010-08-18 00:56:37,466 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove
2010-08-18 00:56:37,466 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present
2010-08-18 00:56:37,466 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 00:56:37,466 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 00:56:37,466 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 00:56:37,466 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2010-08-18 00:56:37,466 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove
2010-08-18 00:56:37,466 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present
2010-08-18 00:56:37,466 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2010-08-18 00:56:37,466 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove
2010-08-18 00:56:37,466 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present
2010-08-18 00:56:37,466 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
2010-08-18 00:56:37,466 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify
2010-08-18 00:56:37,466 DEBUG Reading SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs failed (error: e001003d)
2010-08-18 00:56:37,466 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify failed
2010-08-18 00:56:37,466 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 00:56:37,466 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 00:56:37,466 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 00:56:37,481 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 00:56:37,481 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 00:56:37,481 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 00:56:37,481 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 00:56:37,481 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 00:56:37,481 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 00:56:37,481 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 00:56:37,481 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 00:56:37,481 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 00:56:37,481 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2010-08-18 00:56:37,481 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove
2010-08-18 00:56:37,481 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present
2010-08-18 00:56:37,481 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2010-08-18 00:56:37,497 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY Remove
2010-08-18 00:56:37,497 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY is not present
2010-08-18 00:56:37,497 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found
2010-08-18 00:56:37,497 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall ForceRemove
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall not found
2010-08-18 00:56:37,497 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall ForceRemove
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall not found
2010-08-18 00:56:37,497 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2010-08-18 00:56:37,497 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2010-08-18 00:56:37,497 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2010-08-18 00:56:37,497 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
2010-08-18 00:56:37,497 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
2010-08-18 00:56:37,497 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\Classes\.avgdi
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\Classes\.avgdi not found
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\AVG\Clients
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\AVG\Clients ForceRemove
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\AVG\Clients not found
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\AVG\AVG8
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\AVG\AVG8 not found
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\AVG\AVG9
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\AVG\AVG IDS
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\AVG\AVG IDS ForceRemove
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\AVG\AVG IDS not found
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\AVG
2010-08-18 00:56:37,513 DEBUG Value SOFTWARE\AVG:DumpType Remove
2010-08-18 00:56:37,513 INFO Value SOFTWARE\AVG:DumpType is not present
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\AVG
2010-08-18 00:56:37,513 DEBUG Key SOFTWARE\AVG Remove
2010-08-18 00:56:37,513 INFO Processing registry SOFTWARE\AVG Security Toolbar
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2010-08-18 00:56:37,528 INFO Processing registry SOFTWARE\AVG\AVG8
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\AVG\AVG8 not found
2010-08-18 00:56:37,528 INFO Processing registry SOFTWARE\AVG\AVG9
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove
2010-08-18 00:56:37,528 INFO Processing registry SOFTWARE\AVG
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\AVG Remove
2010-08-18 00:56:37,528 INFO Processing registry SOFTWARE\AVG Security Toolbar
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2010-08-18 00:56:37,528 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
2010-08-18 00:56:37,528 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} Remove
2010-08-18 00:56:37,528 INFO Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} is not present
2010-08-18 00:56:37,528 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 00:56:37,528 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 00:56:37,528 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser
2010-08-18 00:56:37,544 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove
2010-08-18 00:56:37,544 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present
2010-08-18 00:56:37,544 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 00:56:37,544 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 00:56:37,544 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 00:56:37,544 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2010-08-18 00:56:37,544 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2010-08-18 00:56:37,544 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2010-08-18 00:56:37,544 INFO Processing registry aAvgAPI.AvgBro
2010-08-18 00:56:37,544 DEBUG Key aAvgAPI.AvgBro ForceRemove
2010-08-18 00:56:37,544 DEBUG Key aAvgAPI.AvgBro not found
2010-08-18 00:56:37,544 INFO Processing registry AVG.Office
2010-08-18 00:56:37,544 DEBUG Key AVG.Office ForceRemove
2010-08-18 00:56:37,544 DEBUG Key AVG.Office not found
2010-08-18 00:56:37,544 INFO Processing registry AVG.Office.8
2010-08-18 00:56:37,544 DEBUG Key AVG.Office.8 ForceRemove
2010-08-18 00:56:37,544 DEBUG Key AVG.Office.8 not found
2010-08-18 00:56:37,544 INFO Processing registry avgtoolbar.AVGTOOLBAR
2010-08-18 00:56:37,544 DEBUG Key avgtoolbar.AVGTOOLBAR ForceRemove
2010-08-18 00:56:37,544 DEBUG Key avgtoolbar.AVGTOOLBAR not found
2010-08-18 00:56:37,544 INFO Processing registry avgtoolbar.AVGTOOLBARMenu Button
2010-08-18 00:56:37,544 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove
2010-08-18 00:56:37,544 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button not found
2010-08-18 00:56:37,544 INFO Processing registry avgtoolbar.AVGTOOLBARToggle Button
2010-08-18 00:56:37,544 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove
2010-08-18 00:56:37,544 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button not found
2010-08-18 00:56:37,544 INFO Processing registry LinkScannerIE.NavFilter
2010-08-18 00:56:37,544 DEBUG Key LinkScannerIE.NavFilter ForceRemove
2010-08-18 00:56:37,559 INFO Processing registry LinkScannerIE.NavFilter.1
2010-08-18 00:56:37,559 DEBUG Key LinkScannerIE.NavFilter.1 ForceRemove
2010-08-18 00:56:37,559 INFO Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA}
2010-08-18 00:56:37,559 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove
2010-08-18 00:56:37,559 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found
2010-08-18 00:56:37,559 INFO Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}
2010-08-18 00:56:37,559 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove
2010-08-18 00:56:37,559 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found
2010-08-18 00:56:37,559 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2010-08-18 00:56:37,559 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2010-08-18 00:56:37,559 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2010-08-18 00:56:37,559 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2010-08-18 00:56:37,559 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2010-08-18 00:56:37,559 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2010-08-18 00:56:37,559 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2010-08-18 00:56:37,559 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2010-08-18 00:56:37,559 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2010-08-18 00:56:37,559 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}
2010-08-18 00:56:37,559 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove
2010-08-18 00:56:37,559 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found
2010-08-18 00:56:37,559 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F}
2010-08-18 00:56:37,559 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove
2010-08-18 00:56:37,559 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found
2010-08-18 00:56:37,559 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990}
2010-08-18 00:56:37,575 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove
2010-08-18 00:56:37,575 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found
2010-08-18 00:56:37,575 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
2010-08-18 00:56:37,575 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
2010-08-18 00:56:37,575 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
2010-08-18 00:56:37,575 INFO Processing registry CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7}
2010-08-18 00:56:37,575 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} ForceRemove
2010-08-18 00:56:37,575 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} not found
2010-08-18 00:56:37,575 INFO Processing registry CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2010-08-18 00:56:37,575 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2010-08-18 00:56:37,575 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2010-08-18 00:56:37,575 INFO Processing registry CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 00:56:37,575 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 00:56:37,575 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 00:56:37,575 INFO Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D}
2010-08-18 00:56:37,575 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove
2010-08-18 00:56:37,575 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found
2010-08-18 00:56:37,575 INFO Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C}
2010-08-18 00:56:37,575 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove
2010-08-18 00:56:37,575 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found
2010-08-18 00:56:37,575 INFO Processing registry Interface\{7F24AABF-C822-4C18-9432-21433208F4DC}
2010-08-18 00:56:37,575 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} ForceRemove
2010-08-18 00:56:37,575 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} not found
2010-08-18 00:56:37,575 INFO Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30}
2010-08-18 00:56:37,575 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove
2010-08-18 00:56:37,591 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found
2010-08-18 00:56:37,591 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
2010-08-18 00:56:37,591 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
2010-08-18 00:56:37,591 INFO Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}
2010-08-18 00:56:37,591 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove
2010-08-18 00:56:37,591 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found
2010-08-18 00:56:37,591 INFO Processing registry TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 00:56:37,591 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 00:56:37,591 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
Kimo
Regular Member
 
Posts: 19
Joined: August 5th, 2010, 10:20 pm

Re: I get "redirected" when click on a search link

Unread postby Kimo » August 18th, 2010, 11:43 pm

Continuing the AVGRemoval note pad file.

2010-08-18 00:56:37,591 INFO ***** Files and folders *****
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 0
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 1
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 2
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 3
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 4
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 5
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 6
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 7
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 8
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 9
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 10
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 11
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 12
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 13
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 14
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 15
2010-08-18 00:56:37,591 DEBUG Missing ParentDir path for fileItem number 16
2010-08-18 00:56:37,591 DEBUG Processing item C:\Documents and Settings\James Powers\Application Data\AVGTOOLBAR
2010-08-18 00:56:37,591 INFO Directory C:\Documents and Settings\James Powers\Application Data\AVGTOOLBAR not found
2010-08-18 00:56:37,591 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 00:56:37,591 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0
2010-08-18 00:56:37,591 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0 not found
2010-08-18 00:56:37,591 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0
2010-08-18 00:56:37,591 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0 not found
2010-08-18 00:56:37,591 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.5
2010-08-18 00:56:37,591 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.5 not found
2010-08-18 00:56:37,606 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.5
2010-08-18 00:56:37,606 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.5 not found
2010-08-18 00:56:37,606 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg 8.0.lnk
2010-08-18 00:56:37,606 INFO File C:\Documents and Settings\All Users\Desktop\avg 8.0.lnk not found
2010-08-18 00:56:37,606 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk
2010-08-18 00:56:37,606 INFO File C:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk not found
2010-08-18 00:56:37,606 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg 8.5.lnk
2010-08-18 00:56:37,606 INFO File C:\Documents and Settings\All Users\Desktop\avg 8.5.lnk not found
2010-08-18 00:56:37,606 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg free 8.5.lnk
2010-08-18 00:56:37,606 INFO File C:\Documents and Settings\All Users\Desktop\avg free 8.5.lnk not found
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 27
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 28
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 29
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 30
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 31
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 32
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 33
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 34
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 35
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 36
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 37
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 38
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 39
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 40
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 41
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 42
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 43
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 44
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 45
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 46
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 47
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 48
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 49
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 50
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 51
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 52
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 53
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 54
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 55
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 56
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 57
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 58
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 59
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 60
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 61
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 62
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 63
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 64
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 65
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 66
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 67
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 68
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 69
2010-08-18 00:56:37,606 DEBUG Missing ParentDir path for fileItem number 70
2010-08-18 00:56:37,606 DEBUG Processing item C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Languages
2010-08-18 00:56:37,606 INFO Directory C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Languages not found
2010-08-18 00:56:37,606 DEBUG Processing item C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2010-08-18 00:56:37,606 INFO Directory C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar not found
2010-08-18 00:56:37,606 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 00:56:37,606 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg 9.0.lnk
2010-08-18 00:56:37,606 INFO File C:\Documents and Settings\All Users\Desktop\avg 9.0.lnk not found
2010-08-18 00:56:37,622 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg free 9.0.lnk
2010-08-18 00:56:37,622 INFO File C:\Documents and Settings\All Users\Desktop\avg free 9.0.lnk not found
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 76
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 77
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 78
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 79
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 80
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 81
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 82
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 83
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 84
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 85
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 86
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 87
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 88
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 89
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 90
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 91
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 92
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 93
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 94
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 95
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 96
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 97
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 98
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 99
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 100
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 101
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 102
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 103
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 104
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 105
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 106
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 107
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 108
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 109
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 110
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 111
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 112
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 113
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 114
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 115
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 116
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 117
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 118
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 119
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 120
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 121
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 122
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 123
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 124
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 125
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 126
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 127
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 128
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 129
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 130
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 131
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 132
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 133
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 134
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 135
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 136
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 137
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 138
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 139
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 140
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 141
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 142
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 143
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 144
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 145
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 146
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 147
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 148
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 149
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 150
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 151
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 152
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 153
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 154
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 155
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 156
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 157
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 158
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 159
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 160
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 161
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 162
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 163
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 164
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 165
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 166
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 167
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 168
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 169
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 170
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 171
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 172
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 173
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 174
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 175
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 176
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 177
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 178
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 179
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 180
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 181
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 182
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 183
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 184
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 185
2010-08-18 00:56:37,622 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 00:56:37,622 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 00:56:37,622 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 00:56:37,622 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 00:56:37,622 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 00:56:37,622 DEBUG Processing item C:\WINDOWS\System32\Drivers\avg
2010-08-18 00:56:37,622 INFO Directory C:\WINDOWS\System32\Drivers\avg not found
2010-08-18 00:56:37,622 DEBUG Processing item C:\WINDOWS\System32
2010-08-18 00:56:37,622 DEBUG Processing item C:\Program Files\AVG
2010-08-18 00:56:37,622 DEBUG Directory C:\Program Files\AVG not deleted (error c0070091)
2010-08-18 00:56:37,622 DEBUG Missing ParentDir path for fileItem number 194
2010-08-18 00:56:37,622 INFO ***** Avg Fw NDIS driver *****
2010-08-18 00:56:38,778 INFO FW NDIS driver not present
2010-08-18 01:02:44,905 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013)
2010-08-18 01:02:44,905 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
2010-08-18 01:02:44,905 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d)
2010-08-18 01:02:44,905 WARN AvgDir param empty.
2010-08-18 01:02:44,905 WARN AvgDataDir param empty.
2010-08-18 01:02:50,703 INFO AvgRemover runs in attempt number 1
2010-08-18 01:02:50,703 INFO ***** Services *****
2010-08-18 01:02:50,703 INFO Processing service avg8emc
2010-08-18 01:02:50,703 INFO Service avg8emc is not installed
2010-08-18 01:02:50,703 DEBUG Service avg8emc RegCleanup
2010-08-18 01:02:50,703 DEBUG Registry keys for service avg8emc are not present
2010-08-18 01:02:50,703 INFO Processing service avgfws8
2010-08-18 01:02:50,703 INFO Service avgfws8 is not installed
2010-08-18 01:02:50,703 DEBUG Service avgfws8 RegCleanup
2010-08-18 01:02:50,703 DEBUG Registry keys for service avgfws8 are not present
2010-08-18 01:02:50,703 INFO Processing service avg8wd
2010-08-18 01:02:50,703 INFO Service avg8wd is not installed
2010-08-18 01:02:50,703 DEBUG Service avg8wd RegCleanup
2010-08-18 01:02:50,703 DEBUG Registry keys for service avg8wd are not present
2010-08-18 01:02:50,703 INFO Processing service AvgWFPx
2010-08-18 01:02:50,703 INFO Service AvgWFPx is not installed
2010-08-18 01:02:50,703 DEBUG Service AvgWFPx RegCleanup
2010-08-18 01:02:50,703 DEBUG Registry keys for service AvgWFPx are not present
2010-08-18 01:02:50,703 INFO Processing service AvgWFPa
2010-08-18 01:02:50,703 INFO Service AvgWFPa is not installed
2010-08-18 01:02:50,703 DEBUG Service AvgWFPa RegCleanup
2010-08-18 01:02:50,703 DEBUG Registry keys for service AvgWFPa are not present
2010-08-18 01:02:50,703 INFO Processing service AvgMfx86
2010-08-18 01:02:50,703 INFO Service AvgMfx86 is not installed
2010-08-18 01:02:50,718 DEBUG Service AvgMfx86 RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service AvgMfx86 are not present
2010-08-18 01:02:50,718 INFO Processing service AvgMfx64
2010-08-18 01:02:50,718 INFO Service AvgMfx64 is not installed
2010-08-18 01:02:50,718 DEBUG Service AvgMfx64 RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service AvgMfx64 are not present
2010-08-18 01:02:50,718 INFO Processing service AvgLdx86
2010-08-18 01:02:50,718 INFO Service AvgLdx86 is not installed
2010-08-18 01:02:50,718 DEBUG Service AvgLdx86 RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service AvgLdx86 are not present
2010-08-18 01:02:50,718 INFO Processing service AvgLdx64
2010-08-18 01:02:50,718 INFO Service AvgLdx64 is not installed
2010-08-18 01:02:50,718 DEBUG Service AvgLdx64 RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service AvgLdx64 are not present
2010-08-18 01:02:50,718 INFO Processing service AvgTdiX
2010-08-18 01:02:50,718 INFO Service AvgTdiX is not installed
2010-08-18 01:02:50,718 DEBUG Service AvgTdiX RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service AvgTdiX are not present
2010-08-18 01:02:50,718 INFO Processing service AvgTdiA
2010-08-18 01:02:50,718 INFO Service AvgTdiA is not installed
2010-08-18 01:02:50,718 DEBUG Service AvgTdiA RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service AvgTdiA are not present
2010-08-18 01:02:50,718 INFO Processing service AvgRkx86
2010-08-18 01:02:50,718 INFO Service AvgRkx86 is not installed
2010-08-18 01:02:50,718 DEBUG Service AvgRkx86 RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service AvgRkx86 are not present
2010-08-18 01:02:50,718 INFO Processing service AvgRkx64
2010-08-18 01:02:50,718 INFO Service AvgRkx64 is not installed
2010-08-18 01:02:50,718 DEBUG Service AvgRkx64 RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service AvgRkx64 are not present
2010-08-18 01:02:50,718 INFO Processing service avg9emc
2010-08-18 01:02:50,718 INFO Service avg9emc is not installed
2010-08-18 01:02:50,718 DEBUG Service avg9emc RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service avg9emc are not present
2010-08-18 01:02:50,718 INFO Processing service avgfws9
2010-08-18 01:02:50,718 INFO Service avgfws9 is not installed
2010-08-18 01:02:50,718 DEBUG Service avgfws9 RegCleanup
2010-08-18 01:02:50,718 DEBUG Registry keys for service avgfws9 are not present
2010-08-18 01:02:50,718 INFO Processing service avg9wd
2010-08-18 01:02:50,734 INFO Service avg9wd is not installed
2010-08-18 01:02:50,734 DEBUG Service avg9wd RegCleanup
2010-08-18 01:02:50,734 DEBUG Registry keys for service avg9wd are not present
2010-08-18 01:02:50,734 INFO Processing service AVGIDSAgent
2010-08-18 01:02:50,734 INFO Service AVGIDSAgent is not installed
2010-08-18 01:02:50,734 DEBUG Service AVGIDSAgent RegCleanup
2010-08-18 01:02:50,734 DEBUG Registry keys for service AVGIDSAgent are not present
2010-08-18 01:02:50,734 INFO Processing service AVGIDSShimxpx
2010-08-18 01:02:50,734 INFO Service AVGIDSShimxpx is not installed
2010-08-18 01:02:50,734 DEBUG Service AVGIDSShimxpx RegCleanup
2010-08-18 01:02:50,734 DEBUG Registry keys for service AVGIDSShimxpx are not present
2010-08-18 01:02:50,734 INFO Processing service AVGIDSFilterxpx
2010-08-18 01:02:50,734 INFO Service AVGIDSFilterxpx is not installed
2010-08-18 01:02:50,734 DEBUG Service AVGIDSFilterxpx RegCleanup
2010-08-18 01:02:50,734 DEBUG Registry keys for service AVGIDSFilterxpx are not present
2010-08-18 01:02:50,734 INFO Processing service AVGIDSDriverxpx
2010-08-18 01:02:50,734 INFO Service AVGIDSDriverxpx is not installed
2010-08-18 01:02:50,734 DEBUG Service AVGIDSDriverxpx RegCleanup
2010-08-18 01:02:50,734 DEBUG Registry keys for service AVGIDSDriverxpx are not present
2010-08-18 01:02:50,734 INFO Processing service AVGIDSShimvtx
2010-08-18 01:02:50,734 INFO Service AVGIDSShimvtx is not installed
2010-08-18 01:02:50,734 DEBUG Service AVGIDSShimvtx RegCleanup
2010-08-18 01:02:50,734 DEBUG Registry keys for service AVGIDSShimvtx are not present
2010-08-18 01:02:50,734 INFO Processing service AVGIDSFiltervtx
2010-08-18 01:02:50,734 INFO Service AVGIDSFiltervtx is not installed
2010-08-18 01:02:50,734 DEBUG Service AVGIDSFiltervtx RegCleanup
2010-08-18 01:02:50,734 DEBUG Registry keys for service AVGIDSFiltervtx are not present
2010-08-18 01:02:50,734 INFO Processing service AVGIDSDrivervtx
2010-08-18 01:02:50,750 INFO Service AVGIDSDrivervtx is not installed
2010-08-18 01:02:50,750 DEBUG Service AVGIDSDrivervtx RegCleanup
2010-08-18 01:02:50,750 DEBUG Registry keys for service AVGIDSDrivervtx are not present
2010-08-18 01:02:50,750 INFO Processing service AVGIDSFiltervta
2010-08-18 01:02:50,750 INFO Service AVGIDSFiltervta is not installed
2010-08-18 01:02:50,750 DEBUG Service AVGIDSFiltervta RegCleanup
2010-08-18 01:02:50,750 DEBUG Registry keys for service AVGIDSFiltervta are not present
2010-08-18 01:02:50,750 INFO Processing service AVGIDSDrivervta
2010-08-18 01:02:50,750 INFO Service AVGIDSDrivervta is not installed
2010-08-18 01:02:50,750 DEBUG Service AVGIDSDrivervta RegCleanup
2010-08-18 01:02:50,750 DEBUG Registry keys for service AVGIDSDrivervta are not present
2010-08-18 01:02:50,750 INFO Processing service AVGIDSShimw7x
2010-08-18 01:02:50,750 INFO Service AVGIDSShimw7x is not installed
2010-08-18 01:02:50,750 DEBUG Service AVGIDSShimw7x RegCleanup
2010-08-18 01:02:50,750 DEBUG Registry keys for service AVGIDSShimw7x are not present
2010-08-18 01:02:50,750 INFO Processing service AVGIDSFilterw7x
2010-08-18 01:02:50,750 INFO Service AVGIDSFilterw7x is not installed
2010-08-18 01:02:50,750 DEBUG Service AVGIDSFilterw7x RegCleanup
2010-08-18 01:02:50,750 DEBUG Registry keys for service AVGIDSFilterw7x are not present
2010-08-18 01:02:50,750 INFO Processing service AVGIDSDriverw7x
2010-08-18 01:02:50,750 INFO Service AVGIDSDriverw7x is not installed
2010-08-18 01:02:50,750 DEBUG Service AVGIDSDriverw7x RegCleanup
2010-08-18 01:02:50,750 DEBUG Registry keys for service AVGIDSDriverw7x are not present
2010-08-18 01:02:50,750 INFO Processing service AVGIDSFilterw7a
2010-08-18 01:02:50,750 INFO Service AVGIDSFilterw7a is not installed
2010-08-18 01:02:50,750 DEBUG Service AVGIDSFilterw7a RegCleanup
2010-08-18 01:02:50,750 DEBUG Registry keys for service AVGIDSFilterw7a are not present
2010-08-18 01:02:50,750 INFO Processing service AVGIDSDriverw7a
2010-08-18 01:02:50,765 INFO Service AVGIDSDriverw7a is not installed
2010-08-18 01:02:50,765 DEBUG Service AVGIDSDriverw7a RegCleanup
2010-08-18 01:02:50,765 DEBUG Registry keys for service AVGIDSDriverw7a are not present
2010-08-18 01:02:50,765 INFO Processing service AVGIDSErHrxpx
2010-08-18 01:02:50,765 INFO Service AVGIDSErHrxpx is not installed
2010-08-18 01:02:50,765 DEBUG Service AVGIDSErHrxpx RegCleanup
2010-08-18 01:02:50,765 DEBUG Registry keys for service AVGIDSErHrxpx are not present
2010-08-18 01:02:50,765 INFO Processing service AVGIDSErHrvtx
2010-08-18 01:02:50,765 INFO Service AVGIDSErHrvtx is not installed
2010-08-18 01:02:50,765 DEBUG Service AVGIDSErHrvtx RegCleanup
2010-08-18 01:02:50,765 DEBUG Registry keys for service AVGIDSErHrvtx are not present
2010-08-18 01:02:50,765 INFO Processing service AVGIDSErHrvta
2010-08-18 01:02:50,765 INFO Service AVGIDSErHrvta is not installed
2010-08-18 01:02:50,765 DEBUG Service AVGIDSErHrvta RegCleanup
2010-08-18 01:02:50,765 DEBUG Registry keys for service AVGIDSErHrvta are not present
2010-08-18 01:02:50,765 INFO Processing service AVGIDSErHrw7x
2010-08-18 01:02:50,765 INFO Service AVGIDSErHrw7x is not installed
2010-08-18 01:02:50,765 DEBUG Service AVGIDSErHrw7x RegCleanup
2010-08-18 01:02:50,765 DEBUG Registry keys for service AVGIDSErHrw7x are not present
2010-08-18 01:02:50,765 INFO Processing service AVGIDSErHrw7a
2010-08-18 01:02:50,765 INFO Service AVGIDSErHrw7a is not installed
2010-08-18 01:02:50,765 DEBUG Service AVGIDSErHrw7a RegCleanup
2010-08-18 01:02:50,765 DEBUG Registry keys for service AVGIDSErHrw7a are not present
2010-08-18 01:02:50,765 INFO ***** Registry keys and values *****
2010-08-18 01:02:50,765 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2010-08-18 01:02:50,765 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove
2010-08-18 01:02:50,781 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present
2010-08-18 01:02:50,781 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2010-08-18 01:02:50,781 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove
2010-08-18 01:02:50,781 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present
2010-08-18 01:02:50,781 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found
2010-08-18 01:02:50,781 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt ForceRemove
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt not found
2010-08-18 01:02:50,781 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found
2010-08-18 01:02:50,781 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
2010-08-18 01:02:50,781 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
2010-08-18 01:02:50,781 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
2010-08-18 01:02:50,781 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}
2010-08-18 01:02:50,781 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove
2010-08-18 01:02:50,781 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found
2010-08-18 01:02:50,781 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:02:50,781 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:02:50,796 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:02:50,796 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar
2010-08-18 01:02:50,796 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove
2010-08-18 01:02:50,796 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present
2010-08-18 01:02:50,796 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:02:50,796 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:02:50,796 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:02:50,796 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2010-08-18 01:02:50,796 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove
2010-08-18 01:02:50,796 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present
2010-08-18 01:02:50,796 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2010-08-18 01:02:50,796 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove
2010-08-18 01:02:50,796 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present
2010-08-18 01:02:50,796 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
2010-08-18 01:02:50,796 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify
2010-08-18 01:02:50,796 DEBUG Reading SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs failed (error: e001003d)
2010-08-18 01:02:50,796 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify failed
2010-08-18 01:02:50,796 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 01:02:50,796 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 01:02:50,796 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 01:02:50,796 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 01:02:50,812 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 01:02:50,812 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 01:02:50,812 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 01:02:50,812 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 01:02:50,812 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 01:02:50,812 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 01:02:50,812 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 01:02:50,812 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 01:02:50,812 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2010-08-18 01:02:50,812 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove
2010-08-18 01:02:50,812 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present
2010-08-18 01:02:50,812 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2010-08-18 01:02:50,812 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY Remove
2010-08-18 01:02:50,812 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY is not present
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall ForceRemove
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall not found
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall ForceRemove
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall not found
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Classes\.avgdi
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove
2010-08-18 01:02:50,828 DEBUG Key SOFTWARE\Classes\.avgdi not found
2010-08-18 01:02:50,828 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG\Clients
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\Clients ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\Clients not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG\AVG8
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG8 not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG\AVG9
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG9 not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG\AVG IDS
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG IDS ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG IDS not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG
2010-08-18 01:02:50,843 DEBUG Value SOFTWARE\AVG:DumpType Remove
2010-08-18 01:02:50,843 DEBUG Value SOFTWARE\AVG:DumpType not present - Key not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG Remove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG Security Toolbar
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG\AVG8
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG8 not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG\AVG9
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG\AVG9 not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG Remove
2010-08-18 01:02:50,843 DEBUG Key SOFTWARE\AVG not found
2010-08-18 01:02:50,843 INFO Processing registry SOFTWARE\AVG Security Toolbar
2010-08-18 01:02:50,859 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2010-08-18 01:02:50,859 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2010-08-18 01:02:50,859 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
2010-08-18 01:02:50,859 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} Remove
2010-08-18 01:02:50,859 INFO Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} is not present
2010-08-18 01:02:50,859 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:02:50,859 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:02:50,859 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:02:50,859 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser
2010-08-18 01:02:50,859 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove
2010-08-18 01:02:50,859 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present
2010-08-18 01:02:50,859 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:02:50,859 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:02:50,859 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:02:50,859 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2010-08-18 01:02:50,859 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2010-08-18 01:02:50,859 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2010-08-18 01:02:50,859 INFO Processing registry aAvgAPI.AvgBro
2010-08-18 01:02:50,859 DEBUG Key aAvgAPI.AvgBro ForceRemove
2010-08-18 01:02:50,859 DEBUG Key aAvgAPI.AvgBro not found
2010-08-18 01:02:50,859 INFO Processing registry AVG.Office
2010-08-18 01:02:50,859 DEBUG Key AVG.Office ForceRemove
2010-08-18 01:02:50,875 DEBUG Key AVG.Office not found
2010-08-18 01:02:50,875 INFO Processing registry AVG.Office.8
2010-08-18 01:02:50,875 DEBUG Key AVG.Office.8 ForceRemove
2010-08-18 01:02:50,875 DEBUG Key AVG.Office.8 not found
2010-08-18 01:02:50,875 INFO Processing registry avgtoolbar.AVGTOOLBAR
2010-08-18 01:02:50,875 DEBUG Key avgtoolbar.AVGTOOLBAR ForceRemove
2010-08-18 01:02:50,875 DEBUG Key avgtoolbar.AVGTOOLBAR not found
2010-08-18 01:02:50,875 INFO Processing registry avgtoolbar.AVGTOOLBARMenu Button
2010-08-18 01:02:50,875 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove
2010-08-18 01:02:50,875 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button not found
2010-08-18 01:02:50,875 INFO Processing registry avgtoolbar.AVGTOOLBARToggle Button
2010-08-18 01:02:50,875 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove
2010-08-18 01:02:50,875 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button not found
2010-08-18 01:02:50,875 INFO Processing registry LinkScannerIE.NavFilter
2010-08-18 01:02:50,875 DEBUG Key LinkScannerIE.NavFilter ForceRemove
2010-08-18 01:02:50,875 DEBUG Key LinkScannerIE.NavFilter not found
2010-08-18 01:02:50,875 INFO Processing registry LinkScannerIE.NavFilter.1
2010-08-18 01:02:50,875 DEBUG Key LinkScannerIE.NavFilter.1 ForceRemove
2010-08-18 01:02:50,875 DEBUG Key LinkScannerIE.NavFilter.1 not found
2010-08-18 01:02:50,875 INFO Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA}
2010-08-18 01:02:50,875 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove
2010-08-18 01:02:50,875 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found
2010-08-18 01:02:50,875 INFO Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}
2010-08-18 01:02:50,875 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove
2010-08-18 01:02:50,875 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found
2010-08-18 01:02:50,875 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2010-08-18 01:02:50,875 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2010-08-18 01:02:50,875 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2010-08-18 01:02:50,875 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2010-08-18 01:02:50,875 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2010-08-18 01:02:50,875 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2010-08-18 01:02:50,875 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2010-08-18 01:02:50,890 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2010-08-18 01:02:50,890 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2010-08-18 01:02:50,890 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}
2010-08-18 01:02:50,890 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove
2010-08-18 01:02:50,890 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found
2010-08-18 01:02:50,890 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F}
2010-08-18 01:02:50,890 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove
2010-08-18 01:02:50,890 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found
2010-08-18 01:02:50,890 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990}
2010-08-18 01:02:50,890 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove
2010-08-18 01:02:50,890 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found
2010-08-18 01:02:50,890 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
2010-08-18 01:02:50,890 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
2010-08-18 01:02:50,890 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
2010-08-18 01:02:50,890 INFO Processing registry CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7}
2010-08-18 01:02:50,890 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} ForceRemove
2010-08-18 01:02:50,890 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} not found
2010-08-18 01:02:50,890 INFO Processing registry CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2010-08-18 01:02:50,890 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2010-08-18 01:02:50,890 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2010-08-18 01:02:50,890 INFO Processing registry CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:02:50,890 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:02:50,890 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:02:50,890 INFO Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D}
2010-08-18 01:02:50,906 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove
2010-08-18 01:02:50,906 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found
2010-08-18 01:02:50,906 INFO Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C}
2010-08-18 01:02:50,906 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove
2010-08-18 01:02:50,906 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found
2010-08-18 01:02:50,906 INFO Processing registry Interface\{7F24AABF-C822-4C18-9432-21433208F4DC}
2010-08-18 01:02:50,906 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} ForceRemove
2010-08-18 01:02:50,906 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} not found
2010-08-18 01:02:50,906 INFO Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30}
2010-08-18 01:02:50,906 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove
2010-08-18 01:02:50,906 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found
2010-08-18 01:02:50,906 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
2010-08-18 01:02:50,906 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
2010-08-18 01:02:50,906 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
2010-08-18 01:02:50,906 INFO Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}
2010-08-18 01:02:50,906 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove
2010-08-18 01:02:50,906 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found
2010-08-18 01:02:50,906 INFO Processing registry TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:02:50,906 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:02:50,906 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
Kimo
Regular Member
 
Posts: 19
Joined: August 5th, 2010, 10:20 pm

Re: I get "redirected" when click on a search link

Unread postby Kimo » August 18th, 2010, 11:48 pm

Post 3 of the AVGRemoval file

ForceRemove
2010-08-18 01:02:50,906 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:02:50,906 INFO ***** Files and folders *****
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 0
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 1
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 2
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 3
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 4
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 5
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 6
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 7
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 8
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 9
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 10
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 11
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 12
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 13
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 14
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 15
2010-08-18 01:02:50,906 DEBUG Missing ParentDir path for fileItem number 16
2010-08-18 01:02:50,906 DEBUG Processing item C:\Documents and Settings\James Powers\Application Data\AVGTOOLBAR
2010-08-18 01:02:50,906 INFO Directory C:\Documents and Settings\James Powers\Application Data\AVGTOOLBAR not found
2010-08-18 01:02:50,906 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:02:50,906 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0
2010-08-18 01:02:50,906 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0 not found
2010-08-18 01:02:50,906 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0
2010-08-18 01:02:50,906 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0 not found
2010-08-18 01:02:50,921 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.5
2010-08-18 01:02:50,921 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.5 not found
2010-08-18 01:02:50,921 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.5
2010-08-18 01:02:50,921 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.5 not found
2010-08-18 01:02:50,921 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg 8.0.lnk
2010-08-18 01:02:50,921 INFO File C:\Documents and Settings\All Users\Desktop\avg 8.0.lnk not found
2010-08-18 01:02:50,921 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk
2010-08-18 01:02:50,921 INFO File C:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk not found
2010-08-18 01:02:50,921 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg 8.5.lnk
2010-08-18 01:02:50,921 INFO File C:\Documents and Settings\All Users\Desktop\avg 8.5.lnk not found
2010-08-18 01:02:50,921 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg free 8.5.lnk
2010-08-18 01:02:50,921 INFO File C:\Documents and Settings\All Users\Desktop\avg free 8.5.lnk not found
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 27
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 28
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 29
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 30
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 31
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 32
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 33
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 34
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 35
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 36
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 37
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 38
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 39
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 40
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 41
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 42
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 43
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 44
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 45
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 46
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 47
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 48
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 49
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 50
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 51
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 52
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 53
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 54
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 55
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 56
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 57
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 58
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 59
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 60
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 61
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 62
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 63
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 64
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 65
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 66
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 67
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 68
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 69
2010-08-18 01:02:50,921 DEBUG Missing ParentDir path for fileItem number 70
2010-08-18 01:02:50,921 DEBUG Processing item C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Languages
2010-08-18 01:02:50,921 INFO Directory C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Languages not found
2010-08-18 01:02:50,921 DEBUG Processing item C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2010-08-18 01:02:50,921 INFO Directory C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar not found
2010-08-18 01:02:50,937 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:02:50,937 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg 9.0.lnk
2010-08-18 01:02:50,937 INFO File C:\Documents and Settings\All Users\Desktop\avg 9.0.lnk not found
2010-08-18 01:02:50,937 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg free 9.0.lnk
2010-08-18 01:02:50,937 INFO File C:\Documents and Settings\All Users\Desktop\avg free 9.0.lnk not found
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 76
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 77
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 78
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 79
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 80
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 81
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 82
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 83
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 84
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 85
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 86
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 87
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 88
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 89
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 90
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 91
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 92
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 93
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 94
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 95
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 96
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 97
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 98
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 99
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 100
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 101
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 102
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 103
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 104
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 105
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 106
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 107
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 108
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 109
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 110
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 111
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 112
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 113
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 114
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 115
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 116
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 117
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 118
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 119
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 120
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 121
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 122
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 123
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 124
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 125
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 126
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 127
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 128
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 129
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 130
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 131
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 132
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 133
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 134
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 135
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 136
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 137
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 138
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 139
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 140
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 141
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 142
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 143
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 144
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 145
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 146
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 147
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 148
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 149
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 150
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 151
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 152
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 153
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 154
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 155
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 156
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 157
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 158
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 159
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 160
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 161
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 162
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 163
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 164
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 165
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 166
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 167
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 168
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 169
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 170
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 171
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 172
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 173
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 174
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 175
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 176
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 177
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 178
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 179
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 180
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 181
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 182
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 183
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 184
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 185
2010-08-18 01:02:50,937 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:02:50,937 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:02:50,937 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:02:50,937 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:02:50,937 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:02:50,937 DEBUG Processing item C:\WINDOWS\System32\Drivers\avg
2010-08-18 01:02:50,937 INFO Directory C:\WINDOWS\System32\Drivers\avg not found
2010-08-18 01:02:50,937 DEBUG Processing item C:\WINDOWS\System32
2010-08-18 01:02:50,937 DEBUG Processing item C:\Program Files\AVG
2010-08-18 01:02:50,937 DEBUG Directory C:\Program Files\AVG not deleted (error c0070091)
2010-08-18 01:02:50,937 DEBUG Missing ParentDir path for fileItem number 194
2010-08-18 01:02:50,937 INFO ***** Avg Fw NDIS driver *****
2010-08-18 01:02:51,187 INFO FW NDIS driver not present
2010-08-18 01:09:42,834 DEBUG Avg9Uninstall\Directories key failed to open (error: e0010013)
2010-08-18 01:09:42,834 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
2010-08-18 01:09:42,834 DEBUG Reading HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion:ProgramFilesDir (x86) value failed (error: e001003d)
2010-08-18 01:09:42,849 WARN AvgDir param empty.
2010-08-18 01:09:42,849 WARN AvgDataDir param empty.
2010-08-18 01:09:53,351 INFO AvgRemover runs in attempt number 1
2010-08-18 01:09:53,351 INFO ***** Services *****
2010-08-18 01:09:53,351 INFO Processing service avg8emc
2010-08-18 01:09:53,351 INFO Service avg8emc is not installed
2010-08-18 01:09:53,351 DEBUG Service avg8emc RegCleanup
2010-08-18 01:09:53,351 DEBUG Registry keys for service avg8emc are not present
2010-08-18 01:09:53,351 INFO Processing service avgfws8
2010-08-18 01:09:53,351 INFO Service avgfws8 is not installed
2010-08-18 01:09:53,351 DEBUG Service avgfws8 RegCleanup
2010-08-18 01:09:53,351 DEBUG Registry keys for service avgfws8 are not present
2010-08-18 01:09:53,351 INFO Processing service avg8wd
2010-08-18 01:09:53,351 INFO Service avg8wd is not installed
2010-08-18 01:09:53,351 DEBUG Service avg8wd RegCleanup
2010-08-18 01:09:53,351 DEBUG Registry keys for service avg8wd are not present
2010-08-18 01:09:53,351 INFO Processing service AvgWFPx
2010-08-18 01:09:53,351 INFO Service AvgWFPx is not installed
2010-08-18 01:09:53,351 DEBUG Service AvgWFPx RegCleanup
2010-08-18 01:09:53,351 DEBUG Registry keys for service AvgWFPx are not present
2010-08-18 01:09:53,351 INFO Processing service AvgWFPa
2010-08-18 01:09:53,351 INFO Service AvgWFPa is not installed
2010-08-18 01:09:53,351 DEBUG Service AvgWFPa RegCleanup
2010-08-18 01:09:53,351 DEBUG Registry keys for service AvgWFPa are not present
2010-08-18 01:09:53,351 INFO Processing service AvgMfx86
2010-08-18 01:09:53,351 INFO Service AvgMfx86 is not installed
2010-08-18 01:09:53,351 DEBUG Service AvgMfx86 RegCleanup
2010-08-18 01:09:53,351 DEBUG Registry keys for service AvgMfx86 are not present
2010-08-18 01:09:53,351 INFO Processing service AvgMfx64
2010-08-18 01:09:53,351 INFO Service AvgMfx64 is not installed
2010-08-18 01:09:53,351 DEBUG Service AvgMfx64 RegCleanup
2010-08-18 01:09:53,351 DEBUG Registry keys for service AvgMfx64 are not present
2010-08-18 01:09:53,351 INFO Processing service AvgLdx86
2010-08-18 01:09:53,351 INFO Service AvgLdx86 is not installed
2010-08-18 01:09:53,351 DEBUG Service AvgLdx86 RegCleanup
2010-08-18 01:09:53,351 DEBUG Registry keys for service AvgLdx86 are not present
2010-08-18 01:09:53,351 INFO Processing service AvgLdx64
2010-08-18 01:09:53,366 INFO Service AvgLdx64 is not installed
2010-08-18 01:09:53,366 DEBUG Service AvgLdx64 RegCleanup
2010-08-18 01:09:53,366 DEBUG Registry keys for service AvgLdx64 are not present
2010-08-18 01:09:53,366 INFO Processing service AvgTdiX
2010-08-18 01:09:53,366 INFO Service AvgTdiX is not installed
2010-08-18 01:09:53,366 DEBUG Service AvgTdiX RegCleanup
2010-08-18 01:09:53,366 DEBUG Registry keys for service AvgTdiX are not present
2010-08-18 01:09:53,366 INFO Processing service AvgTdiA
2010-08-18 01:09:53,366 INFO Service AvgTdiA is not installed
2010-08-18 01:09:53,366 DEBUG Service AvgTdiA RegCleanup
2010-08-18 01:09:53,366 DEBUG Registry keys for service AvgTdiA are not present
2010-08-18 01:09:53,366 INFO Processing service AvgRkx86
2010-08-18 01:09:53,366 INFO Service AvgRkx86 is not installed
2010-08-18 01:09:53,366 DEBUG Service AvgRkx86 RegCleanup
2010-08-18 01:09:53,366 DEBUG Registry keys for service AvgRkx86 are not present
2010-08-18 01:09:53,366 INFO Processing service AvgRkx64
2010-08-18 01:09:53,366 INFO Service AvgRkx64 is not installed
2010-08-18 01:09:53,366 DEBUG Service AvgRkx64 RegCleanup
2010-08-18 01:09:53,366 DEBUG Registry keys for service AvgRkx64 are not present
2010-08-18 01:09:53,366 INFO Processing service avg9emc
2010-08-18 01:09:53,366 INFO Service avg9emc is not installed
2010-08-18 01:09:53,366 DEBUG Service avg9emc RegCleanup
2010-08-18 01:09:53,366 DEBUG Registry keys for service avg9emc are not present
2010-08-18 01:09:53,366 INFO Processing service avgfws9
2010-08-18 01:09:53,366 INFO Service avgfws9 is not installed
2010-08-18 01:09:53,366 DEBUG Service avgfws9 RegCleanup
2010-08-18 01:09:53,366 DEBUG Registry keys for service avgfws9 are not present
2010-08-18 01:09:53,366 INFO Processing service avg9wd
2010-08-18 01:09:53,366 INFO Service avg9wd is not installed
2010-08-18 01:09:53,366 DEBUG Service avg9wd RegCleanup
2010-08-18 01:09:53,366 DEBUG Registry keys for service avg9wd are not present
2010-08-18 01:09:53,366 INFO Processing service AVGIDSAgent
2010-08-18 01:09:53,382 INFO Service AVGIDSAgent is not installed
2010-08-18 01:09:53,382 DEBUG Service AVGIDSAgent RegCleanup
2010-08-18 01:09:53,382 DEBUG Registry keys for service AVGIDSAgent are not present
2010-08-18 01:09:53,382 INFO Processing service AVGIDSShimxpx
2010-08-18 01:09:53,382 INFO Service AVGIDSShimxpx is not installed
2010-08-18 01:09:53,382 DEBUG Service AVGIDSShimxpx RegCleanup
2010-08-18 01:09:53,382 DEBUG Registry keys for service AVGIDSShimxpx are not present
2010-08-18 01:09:53,382 INFO Processing service AVGIDSFilterxpx
2010-08-18 01:09:53,382 INFO Service AVGIDSFilterxpx is not installed
2010-08-18 01:09:53,382 DEBUG Service AVGIDSFilterxpx RegCleanup
2010-08-18 01:09:53,382 DEBUG Registry keys for service AVGIDSFilterxpx are not present
2010-08-18 01:09:53,382 INFO Processing service AVGIDSDriverxpx
2010-08-18 01:09:53,382 INFO Service AVGIDSDriverxpx is not installed
2010-08-18 01:09:53,382 DEBUG Service AVGIDSDriverxpx RegCleanup
2010-08-18 01:09:53,382 DEBUG Registry keys for service AVGIDSDriverxpx are not present
2010-08-18 01:09:53,382 INFO Processing service AVGIDSShimvtx
2010-08-18 01:09:53,382 INFO Service AVGIDSShimvtx is not installed
2010-08-18 01:09:53,382 DEBUG Service AVGIDSShimvtx RegCleanup
2010-08-18 01:09:53,382 DEBUG Registry keys for service AVGIDSShimvtx are not present
2010-08-18 01:09:53,382 INFO Processing service AVGIDSFiltervtx
2010-08-18 01:09:53,382 INFO Service AVGIDSFiltervtx is not installed
2010-08-18 01:09:53,382 DEBUG Service AVGIDSFiltervtx RegCleanup
2010-08-18 01:09:53,382 DEBUG Registry keys for service AVGIDSFiltervtx are not present
2010-08-18 01:09:53,382 INFO Processing service AVGIDSDrivervtx
2010-08-18 01:09:53,382 INFO Service AVGIDSDrivervtx is not installed
2010-08-18 01:09:53,382 DEBUG Service AVGIDSDrivervtx RegCleanup
2010-08-18 01:09:53,382 DEBUG Registry keys for service AVGIDSDrivervtx are not present
2010-08-18 01:09:53,382 INFO Processing service AVGIDSFiltervta
2010-08-18 01:09:53,397 INFO Service AVGIDSFiltervta is not installed
2010-08-18 01:09:53,397 DEBUG Service AVGIDSFiltervta RegCleanup
2010-08-18 01:09:53,397 DEBUG Registry keys for service AVGIDSFiltervta are not present
2010-08-18 01:09:53,397 INFO Processing service AVGIDSDrivervta
2010-08-18 01:09:53,397 INFO Service AVGIDSDrivervta is not installed
2010-08-18 01:09:53,397 DEBUG Service AVGIDSDrivervta RegCleanup
2010-08-18 01:09:53,397 DEBUG Registry keys for service AVGIDSDrivervta are not present
2010-08-18 01:09:53,397 INFO Processing service AVGIDSShimw7x
2010-08-18 01:09:53,397 INFO Service AVGIDSShimw7x is not installed
2010-08-18 01:09:53,397 DEBUG Service AVGIDSShimw7x RegCleanup
2010-08-18 01:09:53,397 DEBUG Registry keys for service AVGIDSShimw7x are not present
2010-08-18 01:09:53,397 INFO Processing service AVGIDSFilterw7x
2010-08-18 01:09:53,397 INFO Service AVGIDSFilterw7x is not installed
2010-08-18 01:09:53,397 DEBUG Service AVGIDSFilterw7x RegCleanup
2010-08-18 01:09:53,397 DEBUG Registry keys for service AVGIDSFilterw7x are not present
2010-08-18 01:09:53,397 INFO Processing service AVGIDSDriverw7x
2010-08-18 01:09:53,397 INFO Service AVGIDSDriverw7x is not installed
2010-08-18 01:09:53,397 DEBUG Service AVGIDSDriverw7x RegCleanup
2010-08-18 01:09:53,397 DEBUG Registry keys for service AVGIDSDriverw7x are not present
2010-08-18 01:09:53,397 INFO Processing service AVGIDSFilterw7a
2010-08-18 01:09:53,397 INFO Service AVGIDSFilterw7a is not installed
2010-08-18 01:09:53,397 DEBUG Service AVGIDSFilterw7a RegCleanup
2010-08-18 01:09:53,397 DEBUG Registry keys for service AVGIDSFilterw7a are not present
2010-08-18 01:09:53,397 INFO Processing service AVGIDSDriverw7a
2010-08-18 01:09:53,397 INFO Service AVGIDSDriverw7a is not installed
2010-08-18 01:09:53,397 DEBUG Service AVGIDSDriverw7a RegCleanup
2010-08-18 01:09:53,397 DEBUG Registry keys for service AVGIDSDriverw7a are not present
2010-08-18 01:09:53,397 INFO Processing service AVGIDSErHrxpx
2010-08-18 01:09:53,413 INFO Service AVGIDSErHrxpx is not installed
2010-08-18 01:09:53,413 DEBUG Service AVGIDSErHrxpx RegCleanup
2010-08-18 01:09:53,413 DEBUG Registry keys for service AVGIDSErHrxpx are not present
2010-08-18 01:09:53,413 INFO Processing service AVGIDSErHrvtx
2010-08-18 01:09:53,413 INFO Service AVGIDSErHrvtx is not installed
2010-08-18 01:09:53,413 DEBUG Service AVGIDSErHrvtx RegCleanup
2010-08-18 01:09:53,413 DEBUG Registry keys for service AVGIDSErHrvtx are not present
2010-08-18 01:09:53,413 INFO Processing service AVGIDSErHrvta
2010-08-18 01:09:53,413 INFO Service AVGIDSErHrvta is not installed
2010-08-18 01:09:53,413 DEBUG Service AVGIDSErHrvta RegCleanup
2010-08-18 01:09:53,413 DEBUG Registry keys for service AVGIDSErHrvta are not present
2010-08-18 01:09:53,413 INFO Processing service AVGIDSErHrw7x
2010-08-18 01:09:53,413 INFO Service AVGIDSErHrw7x is not installed
2010-08-18 01:09:53,413 DEBUG Service AVGIDSErHrw7x RegCleanup
2010-08-18 01:09:53,413 DEBUG Registry keys for service AVGIDSErHrw7x are not present
2010-08-18 01:09:53,413 INFO Processing service AVGIDSErHrw7a
2010-08-18 01:09:53,413 INFO Service AVGIDSErHrw7a is not installed
2010-08-18 01:09:53,413 DEBUG Service AVGIDSErHrw7a RegCleanup
2010-08-18 01:09:53,413 DEBUG Registry keys for service AVGIDSErHrw7a are not present
2010-08-18 01:09:53,413 INFO ***** Registry keys and values *****
2010-08-18 01:09:53,413 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2010-08-18 01:09:53,413 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove
2010-08-18 01:09:53,413 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present
2010-08-18 01:09:53,413 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
2010-08-18 01:09:53,429 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove
2010-08-18 01:09:53,429 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present
2010-08-18 01:09:53,429 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found
2010-08-18 01:09:53,429 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt ForceRemove
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg9Alrt not found
2010-08-18 01:09:53,429 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found
2010-08-18 01:09:53,429 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
2010-08-18 01:09:53,429 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
2010-08-18 01:09:53,429 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
2010-08-18 01:09:53,429 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}
2010-08-18 01:09:53,429 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove
2010-08-18 01:09:53,429 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found
2010-08-18 01:09:53,429 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:09:53,429 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:09:53,429 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:09:53,429 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar
2010-08-18 01:09:53,429 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove
2010-08-18 01:09:53,444 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present
2010-08-18 01:09:53,444 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:09:53,444 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:09:53,444 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:09:53,444 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2010-08-18 01:09:53,444 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove
2010-08-18 01:09:53,444 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present
2010-08-18 01:09:53,444 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
2010-08-18 01:09:53,444 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove
2010-08-18 01:09:53,444 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present
2010-08-18 01:09:53,444 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
2010-08-18 01:09:53,444 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify
2010-08-18 01:09:53,444 DEBUG Reading SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs failed (error: e001003d)
2010-08-18 01:09:53,444 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify failed
2010-08-18 01:09:53,444 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 01:09:53,444 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 01:09:53,444 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 01:09:53,460 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 01:09:53,460 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 01:09:53,460 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 01:09:53,460 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 01:09:53,460 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 01:09:53,460 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 01:09:53,460 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
2010-08-18 01:09:53,460 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
2010-08-18 01:09:53,460 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
2010-08-18 01:09:53,460 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2010-08-18 01:09:53,460 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove
2010-08-18 01:09:53,460 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present
2010-08-18 01:09:53,460 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
2010-08-18 01:09:53,460 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY Remove
2010-08-18 01:09:53,460 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG9_TRAY is not present
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG9Uninstall not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Classes\.avgdi
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\.avgdi not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2010-08-18 01:09:53,476 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2010-08-18 01:09:53,476 INFO Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG\Clients
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\Clients ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\Clients not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG\AVG8
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG8 not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG\AVG9
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG9 not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG\AVG IDS
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG IDS ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG IDS not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG
2010-08-18 01:09:53,491 DEBUG Value SOFTWARE\AVG:DumpType Remove
2010-08-18 01:09:53,491 DEBUG Value SOFTWARE\AVG:DumpType not present - Key not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG Remove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG Security Toolbar
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG\AVG8
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG8 not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG\AVG9
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG9 ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG\AVG9 not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG Remove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\AVG Security Toolbar
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG Security Toolbar ForceRemove
2010-08-18 01:09:53,491 DEBUG Key SOFTWARE\AVG Security Toolbar not found
2010-08-18 01:09:53,491 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
2010-08-18 01:09:53,491 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} Remove
2010-08-18 01:09:53,491 INFO Value SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks:{A3BC75A2-1F87-4686-AA43-5347D756017C} is not present
2010-08-18 01:09:53,507 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:09:53,507 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:09:53,507 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:09:53,507 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser
2010-08-18 01:09:53,507 DEBUG Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Remove
2010-08-18 01:09:53,507 INFO Value SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser:{CCC7A320-B3CA-4199-B1A6-9F516DD69829} is not present
2010-08-18 01:09:53,507 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:09:53,507 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:09:53,507 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:09:53,507 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2010-08-18 01:09:53,507 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2010-08-18 01:09:53,507 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2010-08-18 01:09:53,507 INFO Processing registry aAvgAPI.AvgBro
2010-08-18 01:09:53,507 DEBUG Key aAvgAPI.AvgBro ForceRemove
2010-08-18 01:09:53,507 DEBUG Key aAvgAPI.AvgBro not found
2010-08-18 01:09:53,507 INFO Processing registry AVG.Office
2010-08-18 01:09:53,507 DEBUG Key AVG.Office ForceRemove
2010-08-18 01:09:53,507 DEBUG Key AVG.Office not found
2010-08-18 01:09:53,507 INFO Processing registry AVG.Office.8
2010-08-18 01:09:53,507 DEBUG Key AVG.Office.8 ForceRemove
2010-08-18 01:09:53,507 DEBUG Key AVG.Office.8 not found
2010-08-18 01:09:53,507 INFO Processing registry avgtoolbar.AVGTOOLBAR
2010-08-18 01:09:53,507 DEBUG Key avgtoolbar.AVGTOOLBAR ForceRemove
2010-08-18 01:09:53,507 DEBUG Key avgtoolbar.AVGTOOLBAR not found
2010-08-18 01:09:53,507 INFO Processing registry avgtoolbar.AVGTOOLBARMenu Button
2010-08-18 01:09:53,507 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove
2010-08-18 01:09:53,507 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button not found
2010-08-18 01:09:53,507 INFO Processing registry avgtoolbar.AVGTOOLBARToggle Button
2010-08-18 01:09:53,522 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove
2010-08-18 01:09:53,522 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button not found
2010-08-18 01:09:53,522 INFO Processing registry LinkScannerIE.NavFilter
2010-08-18 01:09:53,522 DEBUG Key LinkScannerIE.NavFilter ForceRemove
2010-08-18 01:09:53,522 DEBUG Key LinkScannerIE.NavFilter not found
2010-08-18 01:09:53,522 INFO Processing registry LinkScannerIE.NavFilter.1
2010-08-18 01:09:53,522 DEBUG Key LinkScannerIE.NavFilter.1 ForceRemove
2010-08-18 01:09:53,522 DEBUG Key LinkScannerIE.NavFilter.1 not found
2010-08-18 01:09:53,522 INFO Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA}
2010-08-18 01:09:53,522 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove
2010-08-18 01:09:53,522 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found
2010-08-18 01:09:53,522 INFO Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}
2010-08-18 01:09:53,522 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove
2010-08-18 01:09:53,522 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found
2010-08-18 01:09:53,522 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
2010-08-18 01:09:53,522 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
2010-08-18 01:09:53,522 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
2010-08-18 01:09:53,522 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2010-08-18 01:09:53,522 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2010-08-18 01:09:53,522 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2010-08-18 01:09:53,522 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
2010-08-18 01:09:53,522 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
2010-08-18 01:09:53,522 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
2010-08-18 01:09:53,522 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}
2010-08-18 01:09:53,522 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove
2010-08-18 01:09:53,522 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found
2010-08-18 01:09:53,522 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F}
2010-08-18 01:09:53,522 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove
2010-08-18 01:09:53,522 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found
2010-08-18 01:09:53,522 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990}
2010-08-18 01:09:53,538 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found
2010-08-18 01:09:53,538 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
2010-08-18 01:09:53,538 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
2010-08-18 01:09:53,538 INFO Processing registry CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7}
2010-08-18 01:09:53,538 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key CLSID\{9781B2D1-AF27-474F-A3A5-C0763FBDF3B7} not found
2010-08-18 01:09:53,538 INFO Processing registry CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}
2010-08-18 01:09:53,538 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found
2010-08-18 01:09:53,538 INFO Processing registry CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:09:53,538 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:09:53,538 INFO Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D}
2010-08-18 01:09:53,538 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found
2010-08-18 01:09:53,538 INFO Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C}
2010-08-18 01:09:53,538 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found
2010-08-18 01:09:53,538 INFO Processing registry Interface\{7F24AABF-C822-4C18-9432-21433208F4DC}
2010-08-18 01:09:53,538 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key Interface\{7F24AABF-C822-4C18-9432-21433208F4DC} not found
2010-08-18 01:09:53,538 INFO Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30}
2010-08-18 01:09:53,538 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found
2010-08-18 01:09:53,538 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
2010-08-18 01:09:53,538 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
2010-08-18 01:09:53,538 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
2010-08-18 01:09:53,554 INFO Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}
2010-08-18 01:09:53,554 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove
2010-08-18 01:09:53,554 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found
2010-08-18 01:09:53,554 INFO Processing registry TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
2010-08-18 01:09:53,554 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} ForceRemove
2010-08-18 01:09:53,554 DEBUG Key TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found
2010-08-18 01:09:53,554 INFO ***** Files and folders *****
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 0
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 1
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 2
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 3
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 4
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 5
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 6
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 7
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 8
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 9
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 10
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 11
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 12
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 13
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 14
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 15
2010-08-18 01:09:53,554 DEBUG Missing ParentDir path for fileItem number 16
2010-08-18 01:09:53,554 DEBUG Processing item C:\Documents and Settings\James Powers\Application Data\AVGTOOLBAR
2010-08-18 01:09:53,554 INFO Directory C:\Documents and Settings\James Powers\Application Data\AVGTOOLBAR not found
2010-08-18 01:09:53,554 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:09:53,554 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0
2010-08-18 01:09:53,554 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0 not found
2010-08-18 01:09:53,554 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0
2010-08-18 01:09:53,554 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0 not found
2010-08-18 01:09:53,554 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.5
2010-08-18 01:09:53,554 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg 8.5 not found
2010-08-18 01:09:53,554 DEBUG Processing item C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.5
2010-08-18 01:09:53,554 INFO Directory C:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.5 not found
2010-08-18 01:09:53,554 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg 8.0.lnk
2010-08-18 01:09:53,554 INFO File C:\Documents and Settings\All Users\Desktop\avg 8.0.lnk not found
2010-08-18 01:09:53,554 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk
2010-08-18 01:09:53,554 INFO File C:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk not found
2010-08-18 01:09:53,569 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg 8.5.lnk
2010-08-18 01:09:53,569 INFO File C:\Documents and Settings\All Users\Desktop\avg 8.5.lnk not found
2010-08-18 01:09:53,569 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg free 8.5.lnk
2010-08-18 01:09:53,569 INFO File C:\Documents and Settings\All Users\Desktop\avg free 8.5.lnk not found
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 27
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 28
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 29
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 30
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 31
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 32
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 33
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 34
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 35
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 36
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 37
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 38
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 39
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 40
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 41
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 42
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 43
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 44
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 45
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 46
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 47
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 48
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 49
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 50
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 51
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 52
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 53
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 54
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 55
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 56
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 57
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 58
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 59
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 60
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 61
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 62
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 63
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 64
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 65
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 66
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 67
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 68
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 69
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 70
2010-08-18 01:09:53,569 DEBUG Processing item C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Languages
2010-08-18 01:09:53,569 INFO Directory C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\Languages not found
2010-08-18 01:09:53,569 DEBUG Processing item C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2010-08-18 01:09:53,569 INFO Directory C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar not found
2010-08-18 01:09:53,569 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:09:53,569 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg 9.0.lnk
2010-08-18 01:09:53,569 INFO File C:\Documents and Settings\All Users\Desktop\avg 9.0.lnk not found
2010-08-18 01:09:53,569 DEBUG Processing item C:\Documents and Settings\All Users\Desktop\avg free 9.0.lnk
2010-08-18 01:09:53,569 INFO File C:\Documents and Settings\All Users\Desktop\avg free 9.0.lnk not found
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 76
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 77
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 78
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 79
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 80
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 81
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 82
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 83
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 84
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 85
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 86
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 87
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 88
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 89
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 90
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 91
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 92
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 93
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 94
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 95
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 96
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 97
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 98
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 99
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 100
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 101
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 102
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 103
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 104
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 105
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 106
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 107
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 108
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 109
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 110
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 111
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 112
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 113
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 114
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 115
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 116
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 117
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 118
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 119
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 120
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 121
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 122
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 123
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 124
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 125
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 126
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 127
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 128
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 129
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 130
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 131
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 132
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 133
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 134
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 135
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 136
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 137
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 138
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 139
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 140
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 141
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 142
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 143
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 144
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 145
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 146
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 147
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 148
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 149
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 150
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 151
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 152
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 153
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 154
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 155
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 156
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 157
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 158
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 159
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 160
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 161
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 162
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 163
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 164
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 165
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 166
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 167
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 168
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 169
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 170
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 171
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 172
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 173
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 174
2010-08-18 01:09:53,569 DEBUG Missing ParentDir path for fileItem number 175
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 176
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 177
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 178
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 179
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 180
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 181
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 182
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 183
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 184
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 185
2010-08-18 01:09:53,585 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:09:53,585 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:09:53,585 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:09:53,585 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:09:53,585 DEBUG Processing item C:\WINDOWS\System32\Drivers
2010-08-18 01:09:53,585 DEBUG Processing item C:\WINDOWS\System32\Drivers\avg
2010-08-18 01:09:53,585 INFO Directory C:\WINDOWS\System32\Drivers\avg not found
2010-08-18 01:09:53,585 DEBUG Processing item C:\WINDOWS\System32
2010-08-18 01:09:53,585 DEBUG Processing item C:\Program Files\AVG
2010-08-18 01:09:53,585 DEBUG Directory C:\Program Files\AVG not deleted (error c0070091)
2010-08-18 01:09:53,585 DEBUG Missing ParentDir path for fileItem number 194
2010-08-18 01:09:53,585 INFO ***** Avg Fw NDIS driver *****
2010-08-18 01:09:53,819 INFO FW NDIS driver not present
Kimo
Regular Member
 
Posts: 19
Joined: August 5th, 2010, 10:20 pm

Re: I get "redirected" when click on a search link

Unread postby Kimo » August 18th, 2010, 11:51 pm

That's the AVGRemoval file. Maybe I should have asked if you wanted to see all of that first.

The following is the log file from Combofix running CFScript.txt -

ComboFix 10-08-16.03 - James Powers 08/18/2010 18:57:09.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.207 [GMT -5:00]
Running from: c:\documents and settings\James Powers\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\James Powers\Desktop\CFScript.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

FILE ::
"c:\windows\system32\B6D36EF558.sys"
"c:\windows\system32\drivers\klliults.dat"
"c:\windows\Tasks\Ad-Aware Update (Daily 2).job"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\$AVG
c:\$avg\$VAULT\V_00000001.fil
c:\$avg\$VAULT\vvfolder.idx
c:\documents and settings\All Users\Application Data\avg9
c:\documents and settings\All Users\Application Data\avg9\Cfg\changecfgreg.cfg
c:\documents and settings\All Users\Application Data\avg9\Cfg\krnl.cfg
c:\documents and settings\All Users\Application Data\avg9\Cfg\mail.cfg
c:\documents and settings\All Users\Application Data\avg9\Cfg\malrep.cfg
c:\documents and settings\All Users\Application Data\avg9\Cfg\scan.cfg
c:\documents and settings\All Users\Application Data\avg9\Cfg\sched.cfg
c:\documents and settings\All Users\Application Data\avg9\Cfg\update.cfg
c:\documents and settings\All Users\Application Data\avg9\Cfg\user.cfg
c:\documents and settings\All Users\Application Data\avg9\CfgAll\falsealarm.cfg
c:\documents and settings\All Users\Application Data\avg9\CfgAll\krnlall.cfg
c:\documents and settings\All Users\Application Data\avg9\CfgAll\updateall.cfg
c:\documents and settings\All Users\Application Data\avg9\Log\avgchjw.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgchjw.log.1
c:\documents and settings\All Users\Application Data\avg9\Log\avgchjw.log.2
c:\documents and settings\All Users\Application Data\avg9\Log\avgchjw.log.3
c:\documents and settings\All Users\Application Data\avg9\Log\avgchjw.log.4
c:\documents and settings\All Users\Application Data\avg9\Log\avgchjw.log.5
c:\documents and settings\All Users\Application Data\avg9\Log\avgchjw.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgchjwsrv.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgchjwsrv.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgcore.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgcore.log.1
c:\documents and settings\All Users\Application Data\avg9\Log\avgcore.log.2
c:\documents and settings\All Users\Application Data\avg9\Log\avgcore.log.3
c:\documents and settings\All Users\Application Data\avg9\Log\avgcore.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgfrw.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgfrw.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgldr.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgldr.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avglng.log
c:\documents and settings\All Users\Application Data\avg9\Log\avglng.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgns.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgns.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgrs.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgrs.log.1
c:\documents and settings\All Users\Application Data\avg9\Log\avgrs.log.2
c:\documents and settings\All Users\Application Data\avg9\Log\avgrs.log.3
c:\documents and settings\All Users\Application Data\avg9\Log\avgrs.log.4
c:\documents and settings\All Users\Application Data\avg9\Log\avgrs.log.5
c:\documents and settings\All Users\Application Data\avg9\Log\avgrs.log.6
c:\documents and settings\All Users\Application Data\avg9\Log\avgrs.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgscan.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgscan.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log.1
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log.2
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log.3
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log.4
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log.5
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log.6
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log.7
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log.8
c:\documents and settings\All Users\Application Data\avg9\Log\avgsched.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgsrm.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgsrm.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgsrmacstat.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgsrmacstat.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgtdi.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgtdi.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgui.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgui.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgupd.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgupd.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgwd.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgwd.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\avgwdsvc.log
c:\documents and settings\All Users\Application Data\avg9\Log\avgwdsvc.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\commonpriv.log
c:\documents and settings\All Users\Application Data\avg9\Log\commonpriv.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\fixcfg.log
c:\documents and settings\All Users\Application Data\avg9\Log\fixcfg.log.lock
c:\documents and settings\All Users\Application Data\avg9\Log\history.xml
c:\documents and settings\All Users\Application Data\avg9\Log\vault.log
c:\documents and settings\All Users\Application Data\avg9\Log\vault.log.lock
c:\documents and settings\All Users\Application Data\avg9\scanlogs\I_00000001.log
c:\documents and settings\All Users\Application Data\avg9\scanlogs\I_00000003.log
c:\documents and settings\All Users\Application Data\avg9\scanlogs\I_00000005.log
c:\documents and settings\All Users\Application Data\avg9\scanlogs\I_00000006.log
c:\documents and settings\All Users\Application Data\avg9\scanlogs\I_00000007.log
c:\documents and settings\All Users\Application Data\avg9\scanlogs\I_00000008.log
c:\documents and settings\All Users\Application Data\avg9\scanlogs\srm.idx
c:\documents and settings\All Users\Application Data\avg9\Temp\01981f16-3e8d-45b0-9bb5-42bf8e3d0c7f-4f0-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\2d3ca751-8489-4e71-a466-3eccd6cb2131-4ec-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\4ae2d249-bdc6-4b6b-93d3-18aa862ac3d6-4a4-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\4d7085bb-e66d-447a-8aa2-f0f163225269-47c-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\63f951af-554c-402f-9032-2e0701b03b87-4dc-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\78e746d8-020e-4fdf-9a0a-84a67e6bb16c-4ec-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\7967ad9d-b815-43f6-b63f-7da7a991c169-524-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\94143e75-a0dd-48ff-b3d0-414425efbd84-4a0-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\96d242f8-7318-4ab5-b434-6b0d086885e4-eac-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\c03f3f34-27cb-4871-9ab4-1a7b4af5dddc-fa0-oopp.tmp
c:\documents and settings\All Users\Application Data\avg9\Temp\file9514.tmp
c:\documents and settings\All Users\Application Data\avg9\update\backup\avg9us.lng
c:\documents and settings\All Users\Application Data\avg9\update\backup\avgcorex.dll
c:\documents and settings\All Users\Application Data\avg9\update\backup\avgfree_us.mht
c:\documents and settings\All Users\Application Data\avg9\update\backup\avgssff.dll
c:\documents and settings\All Users\Application Data\avg9\update\backup\avgssie.dll
c:\documents and settings\All Users\Application Data\avg9\update\backup\avgxpl.dll
c:\documents and settings\All Users\Application Data\avg9\update\backup\box_bottom_red.gif
c:\documents and settings\All Users\Application Data\avg9\update\backup\box_top_red.gif
c:\documents and settings\All Users\Application Data\avg9\update\backup\cf.dat
c:\documents and settings\All Users\Application Data\avg9\update\backup\incavi.avm
c:\documents and settings\All Users\Application Data\avg9\update\backup\install.rdf
c:\documents and settings\All Users\Application Data\avg9\update\backup\sb.dat
c:\documents and settings\All Users\Application Data\avg9\update\backup\sb.dat.xcd
c:\documents and settings\All Users\Application Data\avg9\update\backup\sb2.dat
c:\documents and settings\All Users\Application Data\avg9\update\backup\sc.dat
c:\documents and settings\All Users\Application Data\avg9\update\backup\sc.dat.xcd
c:\documents and settings\All Users\Application Data\avg9\update\backup\searchshield.jar
c:\documents and settings\All Users\Application Data\avg9\update\prepare\temp\cty.cty
c:\documents and settings\All Users\Application Data\Lavasoft
c:\documents and settings\All Users\Application Data\Lavasoft\License\adaware.da2
c:\program files\SUPERAntiSpyware
c:\windows\system32\B6D36EF558.sys
c:\windows\Tasks\Ad-Aware Update (Daily 2).job

.
((((((((((((((((((((((((( Files Created from 2010-07-19 to 2010-08-19 )))))))))))))))))))))))))))))))
.

2010-08-13 04:22 . 2010-08-13 04:23 -------- d-----w- c:\program files\ERUNT
2010-08-12 05:12 . 2010-08-12 05:31 -------- d-----w- C:\rsit
2010-08-05 01:18 . 2010-08-05 01:18 -------- d-----w- c:\documents and settings\James Powers\Application Data\Uniblue
2010-08-04 18:17 . 2010-06-28 20:37 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-08-04 18:17 . 2010-06-28 20:32 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-08-04 18:17 . 2010-06-28 20:33 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-08-04 18:16 . 2010-06-28 20:37 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-08-04 18:16 . 2010-06-28 20:32 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-08-04 18:16 . 2010-06-28 20:32 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-08-04 18:16 . 2010-06-28 20:32 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-08-04 18:15 . 2010-06-28 20:57 38848 ----a-w- c:\windows\avastSS.scr
2010-08-04 18:15 . 2010-06-28 20:57 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-08-04 01:42 . 2010-08-04 01:42 -------- d-----w- c:\windows\system32\wbem\Repository
2010-08-04 01:41 . 2010-08-04 05:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-08-02 03:31 . 2010-08-02 03:52 -------- d-----w- c:\documents and settings\James Powers\Local Settings\Application Data\AskToolbar
2010-08-02 03:13 . 2010-08-04 01:41 -------- d-----w- c:\program files\Ask.com

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-12 05:28 . 2009-07-15 13:51 -------- d-----w- c:\program files\Trend Micro
2010-08-12 02:17 . 2006-05-02 13:51 -------- d-----w- c:\program files\Java
2010-08-05 01:00 . 2010-08-05 01:00 388096 ----a-r- c:\documents and settings\James Powers\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-08-04 02:37 . 2009-07-15 13:49 -------- d-----w- c:\program files\AVG
2010-07-31 02:14 . 2007-06-24 02:16 -------- d-----w- c:\program files\iLuminaStarter
2010-07-01 21:46 . 2010-06-30 05:25 308424 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-06-30 21:32 . 2006-05-08 23:09 68752 -c--a-w- c:\documents and settings\James Powers\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-06-30 05:20 . 2010-06-30 05:20 -------- d-----w- c:\program files\MSBuild
2010-06-30 05:19 . 2010-06-30 05:19 -------- d-----w- c:\program files\Reference Assemblies
2010-06-20 16:37 . 2008-01-20 00:11 -------- d-----w- c:\program files\FinePixViewer
2010-05-21 23:41 . 2010-05-21 23:41 348160 -c--a-w- c:\documents and settings\James Powers\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-7de05ee6-n\msvcr71.dll
2010-05-21 23:41 . 2010-05-21 23:41 503808 -c--a-w- c:\documents and settings\James Powers\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-7de05ee6-n\msvcp71.dll
2010-05-21 23:41 . 2010-05-21 23:41 499712 -c--a-w- c:\documents and settings\James Powers\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-7de05ee6-n\jmc.dll
2007-01-04 02:57 . 2006-05-21 15:09 5852 -csha-w- c:\windows\system32\KGyGaAvL.sys
.

------- Sigcheck -------

[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9425B72F40257B45D45D24773273DAD0 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9425B72F40257B45D45D24773273DAD0 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[7] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . ACCF5A9A1FFAA490F33DBA1C632B95E1 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
[-] 2006-04-20 . 1DBF125862891817F374F407626967F4 . 359808 . . [5.1.2600.2892] . . c:\windows\$NtUninstallKB941644$\tcpip.sys
[-] 2006-01-13 . 5562CC0A47B2AEF06D3417B733F3C195 . 360448 . . [5.1.2600.2827] . . c:\windows\$hf_mig$\KB913446\SP2QFE\tcpip.sys
[-] 2006-01-13 . 583E063FDC888CA30D05C2724B0D7EF4 . 359808 . . [5.1.2600.2827] . . c:\windows\$NtUninstallKB917953$\tcpip.sys
[7] 2004-08-04 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB913446$\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSKDetectorExe"="c:\program files\McAfee\SpamKiller\MSKDetct.exe" [2005-08-12 1121792]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 81920]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-04-06 94208]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-04-06 77824]
"DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-10-05 94208]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-09-08 122940]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-03-26 177472]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696]
"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 39264]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2006-5-2 24576]
ExifLauncher2.lnk - c:\program files\FinePixViewer\QuickDCF2.exe [2008-1-19 303104]
HotSync Manager.lnk - c:\program files\Palm\Hotsync.exe [2004-6-9 471040]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [8/4/2010 1:17 PM 165456]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [8/4/2010 1:17 PM 17744]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [6/3/2010 7:01 PM 136176]
.
Contents of the 'Scheduled Tasks' folder

2010-08-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 18:34]

2010-08-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-04 00:01]

2010-08-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-06-04 00:01]
.
.
------- Supplementary Scan -------
.
DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9 ... ontrol.CAB
FF - ProfilePath - c:\documents and settings\James Powers\Application Data\Mozilla\Firefox\Profiles\qhu3qfxr.default\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-18 19:08
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(4084)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Southwest Airlines\Ding\Ding.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\windows\system32\bgsvcgen.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Canon\CAL\CALMAIN.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2010-08-18 19:12:36 - machine was rebooted
ComboFix-quarantined-files.txt 2010-08-19 00:12
ComboFix2.txt 2010-08-17 08:24

Pre-Run: 91,769,020,416 bytes free
Post-Run: 91,761,364,992 bytes free

- - End Of File - - 0BADA22273EBB89887A9EB3E48A3F88C

Will continue in the next post.
Kimo
Regular Member
 
Posts: 19
Joined: August 5th, 2010, 10:20 pm

Re: I get "redirected" when click on a search link

Unread postby Kimo » August 19th, 2010, 12:03 am

The next item was remove the Ask toolbar.

Didn't know I had it. I didn't knowingly download it and it wasn't on my homepage. But it was not in Add/Remove so I did a search on documents and settings and deleted the Ask Toolbar folder. Same with program files and deleted Ask.com. Sent them both to the Recycle Bin and emptied the Bin.

I have used Ask.com a few times. Should I not use it again?

Viewpoint Manager: I did not have anything called "viewpoint components" in Add/Remove. Had "Viewpoint Media Player" so I removed it. (Maybe it meant to remove any components of Viewpoint?)

Ran ESET Scanner. The following is the log -
ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# IEXPLORE.EXE=7.00.6000.17055 (vista_gdr.100414-0533)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=804f5cb323620c4e8c2d63e53e903383
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2010-08-19 02:56:58
# local_time=2010-08-18 09:56:59 (-0600, Central Daylight Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=768 16777215 100 0 5545091 5545091 0 0
# compatibility_mode=1026 16777214 0 2 33536824 33536824 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=79089
# found=4
# cleaned=0
# scan_time=6495
C:\Documents and Settings\James Powers\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-2f20bbcd-490b2e7d.class Java/TrojanDownloader.OpenStream.NAC trojan 00000000000000000000000000000000 I
C:\Qoobox\Quarantine\C\WINDOWS\system32\Process.exe.vir Win32/PrcView application 00000000000000000000000000000000 I
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP380\A0027765.exe Win32/PrcView application 00000000000000000000000000000000 I
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP380\A0027783.sys Win32/Olmarik.ZC trojan 00000000000000000000000000000000 I


When ESET completed it had the following -
C:\Documents and Settings\James Powers\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-2f20bbcd-490b2e7d.class Java/TrojanDownloader.OpenStream.NAC trojan
C:\Qoobox\Quarantine\C\WINDOWS\system32\Process.exe.vir Win32/PrcView application
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP380\A0027765.exe Win32/PrcView application
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP380\A0027783.sys Win32/Olmarik.ZC trojan

Thank you. Kimo
Kimo
Regular Member
 
Posts: 19
Joined: August 5th, 2010, 10:20 pm

Re: I get "redirected" when click on a search link

Unread postby turtledove » August 19th, 2010, 12:31 am

Good Day Kimo,

Thank you for the logs. I'll check through these and return as soon as possible.

turtledove
User avatar
turtledove
Retired Graduate
 
Posts: 4398
Joined: February 13th, 2006, 3:26 am
Location: California

Re: I get "redirected" when click on a search link

Unread postby turtledove » August 19th, 2010, 12:47 pm

Good Day Kimo,

Please copy or print these instructions for easy reference.

First: Delete this file:
Delete the file from here (Red items only):
C:\Documents and Settings\James Powers\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-2f20bbcd-490b2e7d.class Java/TrojanDownloader.OpenStream.NAC trojan



Update Adobe Reader

    There have been vulnerabilities detected in older versions of Adobe Reader. It is strongly suggested that you update to the current version 9.3.3.

    You can download it from http://www.adobe.com/products/acrobat/readstep2.html
    After installing the latest Adobe Reader, uninstall all previous versions.
    If you already have Adobe Photoshop® Album Starter Edition installed or do not wish to have it installed UNcheck the box which says Also Download Adobe Photoshop® Album Starter Edition.

      If you don't like Adobe Reader (33.5 MB), you can download Foxit PDF Reader(3.5MB) from here. It's a much smaller file to download and uses a lot less resources than Adobe Reader.

      Note: When installing FoxitReader, be careful not to install anything to do with AskBar or other add ons.



Update Java Runtime
You are using an old version of Java. Sun's Java is sometimes updated in order to eliminate the exploitation of vulnerabilities in an existing version. For this reason, it's extremely important that you keep the program up to date, & also remove the older more vulnerable versions from your system. The most current version of Sun Java is: Java Runtime Environment Version 6 Update 21.
  • Download the latest version of Java Runtime Environment (JRE) 6 Here
  • Scroll down to where it says "JDK 6 Update 21 (JDK or JRE)"
  • Click the orange Download JRE button to the right
  • Select the Windows platform from the dropdown menu
  • Read the License Agreement and then check the box that says: "I agree to the Java SE Runtime Environment 6 with JavaFX License Agreement". Click on Continue.The page will refresh
  • Click on the link to download Windows Offline Installation & save the file to your desktop
  • Close any programs you may have running - especially your web browser
  • Go to Start > Settings > Control Panel, double-click on Add/Remove Programs (or Programs and Features-Uninstall Programs in Vista) & remove all older versions of Java
  • Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java(TM) 6) in the name
  • Click the Remove or Change/Remove button. (Select item then select Uninstall in Vista)
  • Repeat as many times as necessary to remove each Java versions
  • Reboot your computer once all Java components are removed
  • Then from your desktop double-click on jre-6u18-windows-i586-p.exe to install the newest version
  • After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
    • On the General tab, under Temporary Internet Files, click the Settings button
    • Next, click on the Delete Files button
    • There are two options in the window to clear the cache - Leave BOTH Checked
        Applications and Applets
        Trace and Log Files
    • Click OK on Delete Temporary Files Window
      Note: This deletes ALL the Downloaded Applications and Applets from the CACHE
    • Click OK to leave the Temporary Files Window
    • Click OK to leave the Java Control Panel



RSIT (Random's System Information Tool)
You should still have this program on your desktop. If so, just ignore the download instructions.
Please download RSIT by random/random... save it to your desktop.

In order for both info and log files to be produced again, I need you to delete the existing RSIT folder:
  1. C:\RSIT <-- delete this entire folder , then...
  2. Double click on RSIT.exe to run it.
  3. Please read the disclaimer... click on Continue.
    RSIT will start running. When done... 2 (Notepad) text files...will be produced.
    The first one, "log.txt", <<will be maximized... the second one, "info.txt", <<will be minimized.
  4. Please post both... "log.txt" and "info.txt", file contents in your next reply.
    (These logs can be lengthy, so post 1 log per reply please.)


Post
New RSIT log.txt and info.txt
Any problems and how your computer is now running.

Thank you,

turtledove
User avatar
turtledove
Retired Graduate
 
Posts: 4398
Joined: February 13th, 2006, 3:26 am
Location: California

Re: I get "redirected" when click on a search link

Unread postby Kimo » August 19th, 2010, 11:03 pm

TurtleDove:

I have completed your last set of instructions. I don't have any problems with Adobe but since Foxit is a smaller file I installed it. Then went to Add/Remove and uninstalled everything labeled Adobe. Did a search on Adobe and I still have an Adobe folder under C:\windows\system32 but computer can't delete it. Says can not delete because it can't read from the file. Installed the latest version of Java. Went to Add/Remove to remove older versions but there was nothing there for Java. However, I did empty the Recycle Bin and there was a folder in the Recycle Bin labeled Javapi. Not sure how it got there.

My computer is doing great. It is nice to be able to click on a search link and it actually goes there. The only problem I can think of, and it has been doing this for some time now, when I reboot or boot and the desktop comes up I have to wait a minute or so until the screen "flickers" before I can connect to the internet. I can click on Soltaire and it will come up but won't connect until the screen flickers, for want of a better term.

Ran RSIT and here is the info.txt file. Will put log.txt in the next post.

info.txt logfile of random's system information tool 1.08 2010-08-19 21:42:38

======Uninstall list======

-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Amazon MP3 Downloader 1.0.3-->C:\Program Files\Amazon\MP3 Downloader\Uninstall.exe
AOLIcon-->MsiExec.exe /I{62BD0AE0-4EB1-4BBB-8F43-B6400C8FEB2C}
Apple Application Support-->MsiExec.exe /I{E1B2DF7C-A176-4A1D-9D32-3CEC5037A524}
Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Avanquest update-->C:\Program Files\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}\Setup.exe -runfromtemp -l0x0009 -removeonly
avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
Avery Wizard 3.1-->MsiExec.exe /I{B4E96960-5F6B-48B9-A5BD-6A5A9BB4F027}
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Canon Camera Access Library-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{901F8ED7-13E8-43EF-B738-2FE89B0588EB} /l1033
Canon Camera Support Core Library-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{A1D0D14A-B776-4907-BC00-5149F2298086} /l1033
Canon Camera Window DC_DV 5 for ZoomBrowser EX-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{A2EB8F2E-6D9B-4F8B-96EB-F976D33F416F}
Canon Camera Window DC_DV 6 for ZoomBrowser EX-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{50E25180-3BDC-4B6D-80A2-3F1F0C9CF39D}
Canon Camera Window DSLR 5 for ZoomBrowser EX-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{0A146245-DB79-4197-BF5D-FE1A699A2CC7}
Canon Camera Window MC 6 for ZoomBrowser EX-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{6C3A75A6-9A90-44A3-A703-82AC1EA6A85D}
Canon MovieEdit Task for ZoomBrowser EX-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{4DBBF091-FACD-422C-B43C-786335BD5398}
Canon MP Navigator 2.0-->"C:\Program Files\Canon\MP Navigator 2.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator 2.0\uninst.ini
Canon PhotoRecord-->MsiExec.exe /X{BBBC2B89-E193-4348-A83C-C8DD8210A4AC}
Canon RAW Image Task for ZoomBrowser EX-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{BAA43DA2-B6C5-46EC-B163-0E8EEAF975A4}
Canon Utilities PhotoStitch 3.1-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{874E44F3-B9A7-4AA1-B4BA-83E5684ED9C6}
Canon ZoomBrowser EX (E)-->MsiExec.exe /X{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}
Conexant D850 56K V.9x DFVc Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1\HXFSETUP.EXE -U -Idel200fk.inf
Critical Update for Windows Media Player 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Dell CinePlayer-->MsiExec.exe /I{43CAC9A1-1993-4F65-9096-7C9AFC2BBF54}
Dell Digital Jukebox Driver-->C:\Program Files\Dell\Digital Jukebox Drivers\DrvUnins.exe /s
Dell Driver Reset Tool-->MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}
Dell Game Console-->"C:\Program Files\WildTangent\Apps\Dell Game Console\Uninstall.exe"
DellSupport-->MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}
Digital Content Portal-->MsiExec.exe /I{6D5FCA42-1486-4E32-AFE8-1B7E2AA59D33}
Digital Line Detect-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText
DING!-->MsiExec.exe /X{84031A18-BA9A-4156-A74F-E05B52DDFCE2}
Documentation & Support Launcher-->MsiExec.exe /X{B0DF58A2-40DF-4465-AA56-38623EC9938C}
Documents To Go-->MsiExec.exe /X{EB807EB6-5179-48B7-98D4-7B4934A57A81}
EducateU-->MsiExec.exe /I{A683A2C0-821C-486F-858C-FA634DB5E864}
ELIcon-->MsiExec.exe /I{4667B940-BB01-428B-986E-A0CC46497BF7}
ERUNT 1.1j-->"C:\Program Files\ERUNT\unins000.exe"
ESET Online Scanner v3-->C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
FinePix Studio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E3B3AB03-8ABC-46CF-8CA9-DB5581E1F368}\SETUP.EXE" -l0x9
FinePixViewer Resource-->C:\Program Files\InstallShield Installation Information\{B44529FF-501E-47CD-A06D-223C161BE058}\SETUP.EXE -runfromtemp -l0x0009 -removeonly
FinePixViewer Ver.5.3-->C:\Program Files\InstallShield Installation Information\{24ED4D80-8294-11D5-96CD-0040266301AD}\SETUP.EXE -runfromtemp -l0x0009 -removeonly
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
FUJIFILM USB Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5490882C-6961-11D5-BAE5-00E0188E010B}\SETUP.EXE"
Games, Music, & Photos Launcher-->MsiExec.exe /X{B6884A07-0305-47AE-9969-8F26FADC17DE}
Garmin City Navigator North America NT 2010.10 Update-->MsiExec.exe /X{301CC8D1-FE75-41ED-9B11-41F006110950}
Garmin City Navigator North America NT 2010.30-->MsiExec.exe /X{71DFAA65-77FA-41F3-A748-013B5A8524A3}
Garmin Communicator Plugin-->MsiExec.exe /X{3A7BF905-F37D-4DFB-8308-EC3AA4617B36}
Garmin USB Drivers-->MsiExec.exe /X{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}
Garmin WebUpdater-->MsiExec.exe /X{D17111CB-C992-42A9-9D56-C19395102AAA}
Google Chrome-->"C:\Program Files\Google\Chrome\Application\5.0.375.126\Installer\setup.exe" --uninstall --system-level
Google Earth-->MsiExec.exe /X{F7B0939E-58DF-11DF-B3A6-005056806466}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HiJackThis-->MsiExec.exe /X{45A66726-69BC-466B-A7A4-12FCBA4883D7}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB979306)-->"C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"
iLumina Gold Starter Edition-->C:\Program Files\iLuminaStarter\Uninstall.exe
ImageMixer VCD2 LE for FinePix-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B093990A-AAF2-44AC-9216-14BB7A2189B6}\SETUP.EXE" -l0x9
Intel(R) Extreme Graphics 2 Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2572
Intel(R) PRO Network Adapters and Drivers-->Prounstl.exe
Intel(R) PROSet for Wired Connections-->MsiExec.exe /I{17334AAF-C9E7-483B-9F45-E3FCAF07FFA7}
iTunes-->MsiExec.exe /I{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3}
Java(TM) 6 Update 21-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216021FF}
Keynote Connector-->C:\WINDOWS\DOWNLO~1\CONNEC~2.EXE /Uninstall
Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins001.exe"
MCU-->MsiExec.exe /I{D2988E9B-C73F-422C-AD4B-A66EBE257120}
Microsoft .NET Framework 1.1 Security Update (KB979906)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Standard Edition 2003-->MsiExec.exe /I{91120409-6000-11D3-8CFE-0150048383C9}
Microsoft Plus! Digital Media Edition Installer-->MsiExec.exe /X{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}
Microsoft Plus! Photo Story 2 LE-->MsiExec.exe /X{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
MobileMe Control Panel-->MsiExec.exe /I{44A91B04-3D0C-47F9-B644-7F682869AFF3}
Modem Helper-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanel
Motorola Driver Installation-->MsiExec.exe /I{52F6065D-27D0-4680-B2BC-C49C9A252459}
Motorola Phone Tools-->C:\Program Files\InstallShield Installation Information\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}\setup.exe -runfromtemp -l0x0009 -removeonly
Mozilla Firefox (3.0.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Musicmatch® Jukebox-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85D3CC30-8859-481A-9654-FD9B74310BEF}\setup.exe" -l0x9 -uninst
NetWaiting-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText
Palm-->MsiExec.exe /X{ADAED43C-BBD9-42C5-8B21-F4FBFA81E3C3}
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
Rhapsody Player Engine-->MsiExec.exe /I{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}
Rhapsody-->C:\PROGRA~1\Rhapsody\Unwise32.exe /A C:\PROGRA~1\Rhapsody\install.log
Roxio DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Roxio MyDVD LE-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Roxio RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Roxio RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Roxio RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Safari-->MsiExec.exe /I{D90AFDE3-3E67-407A-ACA8-F0BAAD012F08}
Security Update for Step By Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Security Update for Step By Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB2183461)-->"C:\WINDOWS\ie7updates\KB2183461-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB974455)-->"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB976325)-->"C:\WINDOWS\ie7updates\KB976325-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB978207)-->"C:\WINDOWS\ie7updates\KB978207-IE7\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 7 (KB982381)-->"C:\WINDOWS\ie7updates\KB982381-IE7\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Security Update for Windows Media Player 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2079403)-->"C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2160329)-->"C:\WINDOWS\$NtUninstallKB2160329$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"
Security Update for Windows XP (KB2286198)-->"C:\WINDOWS\$NtUninstallKB2286198$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Security Update for Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Security Update for Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Security Update for Windows XP (KB977165)-->"C:\WINDOWS\$NtUninstallKB977165$\spuninst\spuninst.exe"
Security Update for Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Security Update for Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Security Update for Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"
Security Update for Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"
Security Update for Windows XP (KB980436)-->"C:\WINDOWS\$NtUninstallKB980436$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981349)-->"C:\WINDOWS\$NtUninstallKB981349$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981852)-->"C:\WINDOWS\$NtUninstallKB981852$\spuninst\spuninst.exe"
Security Update for Windows XP (KB981997)-->"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982214)-->"C:\WINDOWS\$NtUninstallKB982214$\spuninst\spuninst.exe"
Security Update for Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"
Sonic Activation Module-->MsiExec.exe /I{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}
Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Spelling Dictionaries For Adobe Reader Package-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-7E8A450000A7}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Windows Internet Explorer 7 (KB976749)-->"C:\WINDOWS\ie7updates\KB976749-IE7\spuninst\spuninst.exe"
Update for Windows Internet Explorer 7 (KB980182)-->"C:\WINDOWS\ie7updates\KB980182-IE7\spuninst\spuninst.exe"
Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Update for Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Update for Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Update for Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Update for Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Update for Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Update for Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Update for Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
URGE-->MsiExec.exe /I{8BBF6DFD-0AD9-43A7-9FBD-BF065E3866AF}
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)-->rundll32.exe C:\PROGRA~1\DIFX\15B7F172FC21855D\DIFxAppA.dll, DIFxARPUninstallDriverPackage C:\WINDOWS\system32\DRVSTORE\grmnusb_8E661E05CC789A6D1B8ABAA087CF60EDD72AC35D\grmnusb.inf
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 10-->MsiExec.exe /I{33BB4982-DC52-4886-A03B-F4C5C80BEE89}
Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WordPerfect Office 12-->MsiExec.exe /I{AF19F291-F22F-4798-9662-525305AE9E48}

======Security center information======

AV: avast! Antivirus

======System event log======

Computer Name: D2G52Y91
Event Code: 45
Message: The system could not sucessfully load the crash dump driver.

Record Number: 3354
Source Name: Ftdisk
Time Written: 20100804170213.000000-300
Event Type: error
User:

Computer Name: D2G52Y91
Event Code: 29
Message: The time provider NtpClient is configured to acquire time from one or more
time sources, however none of the sources are currently accessible.
No attempt to contact a source will be made for 15 minutes.
NtpClient has no source of accurate time.

Record Number: 3350
Source Name: W32Time
Time Written: 20100804170019.000000-300
Event Type: error
User:

Computer Name: D2G52Y91
Event Code: 17
Message: Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,time.nist.gov'. NtpClient will try the DNS lookup again in 15
minutes.
The error was: A socket operation was attempted to an unreachable host. (0x80072751)

Record Number: 3349
Source Name: W32Time
Time Written: 20100804170019.000000-300
Event Type: error
User:

Computer Name: D2G52Y91
Event Code: 29
Message: The time provider NtpClient is configured to acquire time from one or more
time sources, however none of the sources are currently accessible.
No attempt to contact a source will be made for 14 minutes.
NtpClient has no source of accurate time.

Record Number: 3347
Source Name: W32Time
Time Written: 20100804170014.000000-300
Event Type: error
User:

Computer Name: D2G52Y91
Event Code: 17
Message: Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,time.nist.gov'. NtpClient will try the DNS lookup again in 15
minutes.
The error was: A socket operation was attempted to an unreachable host. (0x80072751)

Record Number: 3346
Source Name: W32Time
Time Written: 20100804170014.000000-300
Event Type: error
User:

=====Application event log=====

Computer Name: D2G52Y91
Event Code: 20
Message:
Record Number: 7470
Source Name: Google Update
Time Written: 20100805160615.000000-300
Event Type: error
User: NT AUTHORITY\SYSTEM

Computer Name: D2G52Y91
Event Code: 473
Message: Catalog Database (1072) Database C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb was partially detached. Error -1032 encountered updating database headers.

Record Number: 7459
Source Name: ESENT
Time Written: 20100804214545.000000-300
Event Type: error
User:

Computer Name: D2G52Y91
Event Code: 439
Message: Catalog Database (1072) Unable to write a shadowed header for file C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb. Error -1032.

Record Number: 7458
Source Name: ESENT
Time Written: 20100804214545.000000-300
Event Type: error
User:

Computer Name: D2G52Y91
Event Code: 490
Message: svchost (1072) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" for read / write access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

Record Number: 7457
Source Name: ESENT
Time Written: 20100804214545.000000-300
Event Type: error
User:

Computer Name: D2G52Y91
Event Code: 20
Message:
Record Number: 7450
Source Name: Google Update
Time Written: 20100804190615.000000-300
Event Type: error
User: NT AUTHORITY\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared;C:\Program Files\QuickTime\QTSystem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0409
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=C:\Program Files\Common Files\Sonic Shared\Sonic Central\
"CLASSPATH"=.;C:\Program Files\Java\j2re1.4.2_03\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\j2re1.4.2_03\lib\ext\QTJava.zip

-----------------EOF-----------------
Kimo
Regular Member
 
Posts: 19
Joined: August 5th, 2010, 10:20 pm
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 486 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware