The problem we have here, is that different tools are showing different results.
ADWCleaner shows that the following registry keys are present ...
HKEY_LOCAL_MACHINE\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
HKEY_LOCAL_MACHINE\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
... which on a 64 bit system indicate keys controlling a 64 bit process.
FRST and SystemLook said that they weren't present and FRST said instead that the following were present ...
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\{12A61307-94CD-4F8E-94BC-918E511FAA81}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
HKEY_USERS\S-1-5-18\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
... which on a 64 bit system indicate keys controlling a 32 bit process.
I need to find out which I can trust, so I'd like if I can to have 2 scans that tell me the same thing.
Can you run another search with me using FRST, using the instructions in my earlier post ...
viewtopic.php?p=641088#p641088Can you also run a new search for me using SystemLook, using the directions below ...
- Double-click SystemLook.exe to run it.
- Copy the content of the following codebox into the main textfield: (don't include Code: Select all)
- Code: Select all
:regfind
12A61307-94CD-4F8E-94BC-918E511FAA81
12DA0E6F-5543-440C-BAA2-28BF01070AFA
- Click the Look button to start the scan.
- When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled
SystemLook.txt