next »

[evilasa]

Well today's been an interesting day hasn't it. Found myself quite badly virused this afternoon when firefox closed suddenly for no apparent reason. Anyways, it killed off spybot s&d, all of the microsoft security and pretty much stopped me doing anything much. I ended up running malwarebytes in safe mode and took it out that way. Seems to have gone, but it's severely knackered my system. I can connect to websites but am getting an error message each time i do saying there's a java file that it can't find. I can't run any executables. Spybot s&d is switched off and i can't have a look at turning it back on cos it's an executable. Same for MS security which means i am currently without any antivirus anything other than malwarebytes. I also can't play cos Atrinik is an executable. If anyone can help me I'd greatly appreciate it, otherwise it could be time for a full system thingybob and take it back to factory settings 

[ddhanna]

you are still infected..... pm me and i will give you some help.

[evilasa]

It's spreading again. Can't run malwarebytes any more. Can't execute anything via start menu any more. Not sure if i can use system restore any more. Might have to go into safe mode and kill everything quickly.

[Ghost]

Dang, that is horrible bro.

[idicus]

OMG, Evil, reboot and go inot safe mode with interent, update antimalware  and then run it

[evilasa]

Managed to run malwarebytes again in safemode last nite it picked up nothing. Tried combofix as per DDHanna's instructions and got an error. The last log file looked like this :-
=== Verbose logging started: 3/25/2011  7:41:49  Build type: SHIP UNICODE 3.01.4000.2435  Calling process: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\7zS1.tmp\avgmfapx.exe ===
MSI (c) (94:98) [07:41:49:484]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Documents and Settings\All Users\Application Data\MFAData\pack\AVGx86.msi' against software restriction policy
MSI (c) (94:98) [07:41:49:484]: SOFTWARE RESTRICTION POLICY: C:\Documents and Settings\All Users\Application Data\MFAData\pack\AVGx86.msi has a digital signature
MSI (c) (94:98) [07:41:49:593]: SOFTWARE RESTRICTION POLICY: C:\Documents and Settings\All Users\Application Data\MFAData\pack\AVGx86.msi is permitted to run at the 'unrestricted' authorization level.
MSI (c) (94:98) [07:41:49:593]: Failed to connect to server. Error: 0x800401F0

MSI (c) (94:98) [07:41:49:609]: End dialog not enabled
MSI (c) (94:98) [07:41:49:609]: Original package ==> C:\Documents and Settings\All Users\Application Data\MFAData\pack\AVGx86.msi
MSI (c) (94:98) [07:41:49:609]: Package we're running from ==> C:\Documents and Settings\All Users\Application Data\MFAData\pack\AVGx86.msi
MSI (c) (94:98) [07:41:49:656]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A276502A-8979-44FB-8090-90CF72F22ABC}'.
MSI (c) (94:98) [07:41:49:656]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (94:98) [07:41:49:671]: MSCOREE not loaded loading copy from system32
MSI (c) (94:98) [07:41:49:781]: Machine policy value 'TransformsSecure' is 0
MSI (c) (94:98) [07:41:49:781]: User policy value 'TransformsAtSource' is 0
MSI (c) (94:98) [07:41:49:781]: Machine policy value 'DisablePatch' is 0
MSI (c) (94:98) [07:41:49:781]: Machine policy value 'AllowLockdownPatch' is 0
MSI (c) (94:98) [07:41:49:781]: Machine policy value 'DisableLUAPatching' is 0
MSI (c) (94:98) [07:41:49:781]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (c) (94:98) [07:41:49:781]: APPCOMPAT: looking for appcompat database entry with ProductCode '{A276502A-8979-44FB-8090-90CF72F22ABC}'.
MSI (c) (94:98) [07:41:49:781]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (94:98) [07:41:49:781]: Transforms are not secure.
MSI (c) (94:98) [07:41:49:781]: No Command Line.
MSI (c) (94:98) [07:41:49:781]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{CF00323A-8143-4EC3-A9E6-3BF0B8099EBC}'.
MSI (c) (94:98) [07:41:49:781]: Product Code passed to Engine.Initialize:           '(none)'
MSI (c) (94:98) [07:41:49:781]: Product Code from property table before transforms: '{A276502A-8979-44FB-8090-90CF72F22ABC}'
MSI (c) (94:98) [07:41:49:781]: Product Code from property table after transforms:  '{A276502A-8979-44FB-8090-90CF72F22ABC}'
MSI (c) (94:98) [07:41:49:781]: Product not registered: beginning first-time install
MSI (c) (94:98) [07:41:49:781]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (c) (94:98) [07:41:49:781]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (c) (94:98) [07:41:49:781]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (94:98) [07:41:49:781]: Adding new sources is allowed.
MSI (c) (94:98) [07:41:49:781]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (c) (94:98) [07:41:49:781]: Package name extracted from package path: 'AVGx86.msi'
MSI (c) (94:98) [07:41:49:781]: Package to be registered: 'Avgx86.msi'
MSI (c) (94:98) [07:41:49:781]: Note: 1: 2729
MSI (c) (94:98) [07:41:49:796]: Note: 1: 2729
MSI (c) (94:98) [07:41:49:796]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (94:98) [07:41:49:796]: Machine policy value 'DisableMsi' is 0
MSI (c) (94:98) [07:41:49:796]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (94:98) [07:41:49:796]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (94:98) [07:41:49:796]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (c) (94:98) [07:41:49:796]: Running product '{A276502A-8979-44FB-8090-90CF72F22ABC}' with elevated privileges: Product is assigned.
MSI (c) (94:98) [07:41:49:796]: TRANSFORMS property is now:
MSI (c) (94:98) [07:41:49:796]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'.
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Application Data
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Favorites
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\NetHood
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\My Documents
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\PrintHood
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Recent
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\SendTo
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Templates
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Local Settings\Application Data
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\My Documents\My Pictures
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu\Programs\Administrative Tools
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu\Programs
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Desktop
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Templates
MSI (c) (94:98) [07:41:49:796]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI (c) (94:98) [07:41:49:796]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (94:98) [07:41:49:796]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (94:98) [07:41:49:796]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (94:98) [07:41:49:796]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'ge'.
MSI (c) (94:98) [07:41:49:796]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (94:98) [07:41:49:796]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Documents and Settings\All Users\Application Data\MFAData\pack\AVGx86.msi'.
MSI (c) (94:98) [07:41:49:796]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Documents and Settings\All Users\Application Data\MFAData\pack\AVGx86.msi'.
=== Logging started: 3/25/2011  7:41:49 ===
MSI (c) (94:98) [07:41:49:796]: Note: 1: 2205 2:  3: PatchPackage
MSI (c) (94:98) [07:41:49:796]: Machine policy value 'DisableRollback' is 0
MSI (c) (94:98) [07:41:49:796]: User policy value 'DisableRollback' is 0
MSI (c) (94:98) [07:41:49:796]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
MSI (c) (94:98) [07:41:49:796]: MsiOpenPackageEx is returning 0
MSI (c) (94:98) [07:41:49:796]: MsiOpenPackage is returning 0
MSI (c) (94:98) [07:41:49:796]: PROPERTY CHANGE: Modifying UIBYMFA property. Its current value is '0'. Its new value: '1'.
MSI (c) (94:98) [07:41:49:796]: PROPERTY CHANGE: Modifying PRODTYPE property. Its current value is 'AVG'. Its new value: 'AV'.
MSI (c) (94:98) [07:41:49:796]: Doing action: FatalError
Action 7:41:49: FatalError.
Action start 7:41:49: FatalError.
Action ended 7:41:49: FatalError. Return value 0.
MSI (c) (94:98) [07:41:49:812]: Doing action: UserExit
Action 7:41:49: UserExit.
Action start 7:41:49: UserExit.
Action ended 7:41:49: UserExit. Return value 0.
MSI (c) (94:98) [07:41:49:812]: Doing action: ExitDialog
Action 7:41:49: ExitDialog.
Action start 7:41:49: ExitDialog.
Action ended 7:41:49: ExitDialog. Return value 0.
MSI (c) (94:98) [07:41:49:812]: Doing action: PublishMsiPhase1
Action 7:41:49: PublishMsiPhase1.
Action start 7:41:49: PublishMsiPhase1.
MSI (c) (94:78) [07:41:49:828]: Invoking remote custom action. DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\MSI2.tmp, Entrypoint: PublishMsiPhase
MSI (c) (94:80) [07:41:49:859]: Cloaking enabled.
MSI (c) (94:80) [07:41:49:859]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (94:80) [07:41:49:859]: Connected to service for CA interface.
1: AvgMsi: MSIphase started.
Action ended 7:41:49: PublishMsiPhase1. Return value 1.
MSI (c) (94:98) [07:41:49:937]: Doing action: CallCreateFakeVdb
Action 7:41:49: CallCreateFakeVdb.
Action start 7:41:49: CallCreateFakeVdb.
MSI (c) (94:D4) [07:41:49:953]: Invoking remote custom action. DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\MSI3.tmp, Entrypoint: CreateFakeVdb
Action ended 7:41:49: CallCreateFakeVdb. Return value 1.
MSI (c) (94:98) [07:41:49:968]: Doing action: ReadCurrentLN
Action 7:41:49: ReadCurrentLN.
Action start 7:41:49: ReadCurrentLN.
MSI (c) (94:DC) [07:41:49:984]: Invoking remote custom action. DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\MSI4.tmp, Entrypoint: ReadCurrentLN
1: AvgMsi: No current license number found: -536805315 (0xe001003d)
Action ended 7:41:50: ReadCurrentLN. Return value 1.
MSI (c) (94:98) [07:41:50:015]: Doing action: LaunchConditions
Action 7:41:50: LaunchConditions. Evaluating launch conditions
Action start 7:41:50: LaunchConditions.
MSI (c) (94:98) [07:41:50:015]: Note: 1: 2205 2:  3: LaunchCondition
MSI (c) (94:98) [07:41:50:015]: Note: 1: 2228 2:  3: LaunchCondition 4: SELECT `Condition`, `Description` FROM `LaunchCondition`
Action ended 7:41:50: LaunchConditions. Return value 0.
MSI (c) (94:98) [07:41:50:015]: Doing action: PrepareDlg
Action 7:41:50: PrepareDlg.
Action start 7:41:50: PrepareDlg.
Action ended 7:41:50: PrepareDlg. Return value 0.
MSI (c) (94:98) [07:41:50:015]: Doing action: SetReinstallMode_Inst
Action 7:41:50: SetReinstallMode_Inst.
Action start 7:41:50: SetReinstallMode_Inst.
MSI (c) (94:98) [07:41:50:015]: PROPERTY CHANGE: Adding REINSTALLMODE property. Its value is 'ocmus'.
Action ended 7:41:50: SetReinstallMode_Inst. Return value 1.
MSI (c) (94:98) [07:41:50:015]: Doing action: FindRelatedProducts
Action 7:41:50: FindRelatedProducts. Searching for related applications
Action start 7:41:50: FindRelatedProducts.
Action ended 7:41:50: FindRelatedProducts. Return value 1.
MSI (c) (94:98) [07:41:50:015]: Doing action: SetPkgInfo
Action 7:41:50: SetPkgInfo.
Action start 7:41:50: SetPkgInfo.
MSI (c) (94:98) [07:41:50:015]: PROPERTY CHANGE: Adding PKGINFO property. Its value is 'ProdVer=10.0.1204, ProdType=AV*, Installed=, WinVer=501*, WinBuild=2600, SP=2, WinType=1, SafeMode=0'.
Action ended 7:41:50: SetPkgInfo. Return value 1.
MSI (c) (94:98) [07:41:50:015]: Doing action: CallDetectFltMgr
Action 7:41:50: CallDetectFltMgr.
Action start 7:41:50: CallDetectFltMgr.
MSI (c) (94:E4) [07:41:50:031]: Invoking remote custom action. DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\MSI5.tmp, Entrypoint: DetectFltMgr
1: AvgMsi: Begin of DetectFltMgr, hInstall: 149 (0x00000095)
MSI (c) (94!D0) [07:41:50:046]: PROPERTY CHANGE: Adding FLTMGRDETECTED property. Its value is '1'.
1: AvgMsi: End of DetectFltMgr, result: 0 (0x00000000)
Action ended 7:41:50: CallDetectFltMgr. Return value 1.
MSI (c) (94:98) [07:41:50:046]: Doing action: SetSystemFolder32
Action 7:41:50: SetSystemFolder32.
Action start 7:41:50: SetSystemFolder32.
MSI (c) (94:98) [07:41:50:046]: PROPERTY CHANGE: Adding AVGSYSTEMFOLDER property. Its value is 'C:\WINDOWS\system32\'.
Action ended 7:41:50: SetSystemFolder32. Return value 1.
MSI (c) (94:98) [07:41:50:046]: Doing action: CallDetectSafeMode
Action 7:41:50: CallDetectSafeMode.
Action start 7:41:50: CallDetectSafeMode.
MSI (c) (94:E8) [07:41:50:062]: Invoking remote custom action. DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\MSI6.tmp, Entrypoint: DetectSafeMode
MSI (c) (94!EC) [07:41:50:093]: PROPERTY CHANGE: Modifying SAFEMODE property. Its current value is '0'. Its new value: '1'.
1: AvgMsi: Safe mode detected, set flag result: 0 (0x00000000)
Action ended 7:41:50: CallDetectSafeMode. Return value 1.
MSI (c) (94:98) [07:41:50:093]: Doing action: AppSearch
Action 7:41:50: AppSearch. Searching for installed applications
Action start 7:41:50: AppSearch.
AppSearch: Property: USERREG, Signature: SgnUSER
MSI (c) (94:98) [07:41:50:093]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: PROPERTY CHANGE: Adding USERREG property. Its value is 'ge'.
AppSearch: Property: COMPANYREG, Signature: SgnCOMPANY
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: DEFLANGID, Signature: SgnDefLangId
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVG78XCHG, Signature: RegS_Avg78ExchgSrvPlugin
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\ORNIC\AVG4ES2K 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVG7LOTUS, Signature: RegS_Avg7Lotus
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Grisoft\AVG4LN 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVG8LOTUS, Signature: RegS_Avg8Lotus
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Avg\AVG4LN 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVG7SHRPNT, Signature: RegS_Avg7ShrPnt
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Grisoft\AVG4SPS 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVG8SHRPNT, Signature: RegS_Avg8ShrPnt
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Avg\AVG4SPS 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVG7X, Signature: RegS_Avg7x
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg7Uninstall 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_ASHAMPOO, Signature: RegS_AVAshampoo
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ashampoo AntiVirus_is1 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVAST, Signature: RegS_AVAvast
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\avast! 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVIRA, Signature: RegS_AVAvira
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir Windows Workstation 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVIRADESKTOP, Signature: RegS_AVAviraDesktop
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avira AntiVir Desktop 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_BULLGUARD, Signature: RegS_AVBullGuard
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BullGuard 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_CA1, Signature: RegS_AVCA1
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VETWIN32Vp5 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_CA2, Signature: RegS_AVCA2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{166478EA-A017-43C0-BE42-7560BD5A646B} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_CLAMAV, Signature: RegS_AVClamAV
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AB36D136-DC66-4611-A98D-14B5A433CEEE} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_COMODO, Signature: RegS_AVCOMODO
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\COMODO Internet Security 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_COMODOSS, Signature: RegS_AVCOMODOSS
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\COMODO SafeSurf 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_COMODOAV, Signature: RegS_AVComodoAV
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{4255A182-CAD9-4214-A19B-7BA7FB633BBD} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_CYBERSCRUB, Signature: RegS_AVCyberScrub
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0906B442-D0EC-4FE2-B666-95C82EF8B8A6} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_ESET, Signature: RegS_AVEset
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BBC8862B-BFC8-475D-9BB8-93289703BD33} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_FS2009, Signature: RegS_AVFS2009
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Anti-Virus 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_KASPERSKY1, Signature: RegS_AVKaspersky1
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6580C5A3-2336-4EC5-85F1-3448C5F6208A} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_KASPERSKY2, Signature: RegS_AVKaspersky2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_KERIO, Signature: RegS_AVKerio
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{82B1150E-9B37-49FC-83EB-D52197D900D0} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_MCAFEE, Signature: RegS_AVMsAfee
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MSC 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_MCAFEEFW, Signature: RegS_AVMcAfeeFW
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4471FF45-62BD-11D6-B259-00C04FF4B435} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_MCAFEEVSHE, Signature: RegS_AVMcAfeeVSHE
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E4DC62CE-5F95-11D6-B254-00C04FF4B435} 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_NORTON, Signature: RegS_AVNorton
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NAV 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_MSSESSENTIALS, Signature: RegS_AVMSSEssentials
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Security Essentials 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_OUTPOSTFW, Signature: RegS_AVOutpostFW
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Agnitum Outpost Firewall Pro_is1 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_OUTPOSTSS, Signature: RegS_AVOutpostSS
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:109]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Agnitum Outpost Security Suite Pro_is1 3: 2
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_PANDA, Signature: RegS_AVPanda
MSI (c) (94:98) [07:41:50:109]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{98032D6F-3EE6-4646-B68C-40BF012AC89B} 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_PCTOOLS, Signature: RegS_AVPCTools
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC Tools AntiVirus_is1 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_TRENDMICRO, Signature: RegS_AVTrendMicro
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{718D791F-F4E8-4aa7-98A6-15FDED17BDD0} 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_TRENDMICROTB, Signature: RegS_AVTrendMicroTB
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\TrendSecure\ProToolbar 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_TRUSTPORT, Signature: RegS_AVTrustPort
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{275280D7-9061-4334-BDBF-BC624B4A782C}_is1 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_ZONE, Signature: RegS_AVZone
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVAST5, Signature: RegS_AVAST5
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\avast5 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_ESCANCORP, Signature: RegS_ESCANCORP
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eScan Corporate for Windows_is1 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_ESCANIS, Signature: RegS_ESCANIS
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eScan Internet Security for Windows_is1 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_ESCANISSMB, Signature: RegS_ESCANISSMB
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eScan Internet Security for SMB_is1 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_ESCANAV, Signature: RegS_ESCANAV
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eScan Anti-Virus (AV) Edition for Windows_is1 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_ESCANAVSMB, Signature: RegS_ESCANAVSMB
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eScan Anti-Virus (AV) Edition for SMB_is1 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_KINGSOFT, Signature: RegS_KINGSOFT
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Kingsoft Internet Security 9 Plus 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_RISING, Signature: RegS_RISING
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ris 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_EWIDO1, Signature: RegS_AVEwido1
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\ewido\anti-malware 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_EWIDO2, Signature: RegS_AVEwido2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\ewido anti-malware 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_EWIDO3, Signature: RegS_AVEwido3
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\ewido anti-spyware 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_EWIDO4, Signature: RegS_AVEwido4
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\ewido\security suite 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVGASPY, Signature: RegS_AVAVGASpy
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Grisoft\AVGAntiSpyware 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_XPLLS, Signature: RegS_AVXPLLS
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{64200143-5619-49E6-8317-96152F1275EF} 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVGARKT, Signature: RegS_AVAVGARkt
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Grisoft\AVGAntiRootKit 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: FFDETECTED_VERSION, Signature: RegS_FFVERSION
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: FFDETECTED_VERSION2, Signature: RegS_FFVERSION2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: PROPERTY CHANGE: Adding FFDETECTED_VERSION2 property. Its value is '3.6.16 (en-GB)'.
AppSearch: Property: COPYFILES_SETUPDIR8, Signature: RegS_RA8_SetupDir
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\AVG\Avg8 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: COPYFILES_SETUPDIR9, Signature: RegS_RA9_SetupDir
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\AVG\Avg9 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVG8X, Signature: RegS_Avg8x
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg8Uninstall 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_AVG9X, Signature: RegS_Avg9x
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9Uninstall 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_SALS8, Signature: RegS_AVSALS8
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg8LsUninstall 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: AVP_SALS9, Signature: RegS_AVSALS9
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avg9LsUninstall 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: FWSETUPKEY, Signature: RegS_FwSetupKey
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\AVG\AVG10\FwSetup 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: OUTLOOK2010INSTALLED, Signature: RegS_Outlook2010
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\14.0\Outlook\InstallRoot 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: OUTLOOK2007INSTALLED, Signature: RegS_Outlook2007
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\Outlook\InstallRoot 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: OUTLOOK2003INSTALLED, Signature: RegS_Outlook2003
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\11.0\Outlook\InstallRoot 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: OUTLOOKXPINSTALLED, Signature: RegS_OutlookXP
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\Outlook\InstallRoot 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: OUTLOOK2000INSTALLED, Signature: RegS_Outlook2000
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\9.0\Outlook\InstallRoot 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: THEBAT34INSTALLED, Signature: CompS_TheBat34
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: THEBAT2INSTALLED, Signature: RegS_TheBat2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:125]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\The Bat! 3: 2
MSI (c) (94:98) [07:41:50:125]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_MSEXCHG2003, Signature: RegS_MSExchg2003
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Setup 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_MSEXCHG2007, Signature: RegS_MSExchg2007
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\v8.0\Setup 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_EDGEROLE2007, Signature: RegS_IsEdgeRole2007
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\v8.0\EdgeTransportRole 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_HUBROLE2007, Signature: RegS_IsHubRole2007
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\v8.0\HubTransportRole 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_MAILBOXROLE2007, Signature: RegS_IsMailboxRole2007
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\v8.0\MailboxRole 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_MSEXCHG2010, Signature: RegS_MSExchg2010
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14\Setup 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_EDGEROLE2010, Signature: RegS_IsEdgeRole2010
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14\EdgeTransportRole 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_HUBROLE2010, Signature: RegS_IsHubRole2010
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14\HubTransportRole 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_MAILBOXROLE2010, Signature: RegS_IsMailboxRole2010
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14\MailboxRole 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_MSSHRP_WSS20, Signature: RegS_MSShrpWss20
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\Web Server Extensions\6.0 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
AppSearch: Property: IS_MSSHRP_WSS30, Signature: RegS_MSShrpWss30
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: Signature 3: -2147287038
MSI (c) (94:98) [07:41:50:140]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\Web Server Extensions\12.0 3: 2
MSI (c) (94:98) [07:41:50:140]: Note: 1: 2262 2: DrLocator 3: -2147287038
Action ended 7:41:50: AppSearch. Return value 1.
MSI (c) (94:98) [07:41:50:140]: Doing action: SetToolbarFiltered
Action 7:41:50: SetToolbarFiltered.
Action start 7:41:50: SetToolbarFiltered.
MSI (c) (94:F0) [07:41:50:156]: Invoking remote custom action. DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\MSI7.tmp, Entrypoint: CheckToolbarFilter
MSI (c) (94!F4) [07:41:50:328]: PROPERTY CHANGE: Adding AVGMSILOG property. Its value is 'Feature filter was not found for producttype AV'.
Action ended 7:41:50: SetToolbarFiltered. Return value 1.
MSI (c) (94:98) [07:41:50:328]: Doing action: CheckAVbyWSC
Action 7:41:50: CheckAVbyWSC.
Action start 7:41:50: CheckAVbyWSC.
MSI (c) (94:F8) [07:41:50:343]: Invoking remote custom action. DLL: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\MSI8.tmp, Entrypoint: GetBlockingProductByWSC
1: AvgMsi: GetAVProductFromWSC started
1: AvgMsi: AV from WSC: : -2147417831 (0x80010119)
Action ended 7:41:50: CheckAVbyWSC. Return value 1.
MSI (c) (94:98) [07:41:50:593]: PROPERTY CHANGE: Modifying LANGID property. Its current value is '_'. Its new value: '1033'.
MSI (c) (94:98) [07:41:50:593]: PROPERTY CHANGE: Adding OEMID property. Its value is '0'.
MSI (c) (94:98) [07:41:50:593]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (c) (94:98) [07:41:50:593]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '0'.
MSI (c) (94:98) [07:41:50:593]: PROPERTY CHANGE: Modifying LICNUM property. Its current value is '**********'. Its new value: '**********'.
MSI (c) (94:98) [07:41:56:609]: PROPERTY CHANGE: Adding FEG property. Its value is 'FEG'.
MSI (c) (94:98) [07:41:56:609]: Doing action: CCPSearch
Action 7:41:56: CCPSearch. Searching for qualifying products
Action start 7:41:56: CCPSearch.
MSI (c) (94:98) [07:41:56:609]: Note: 1: 2205 2:  3: CCPSearch
MSI (c) (94:98) [07:41:56:609]: Note: 1: 2228 2:  3: CCPSearch 4: SELECT `Signature_` FROM `CCPSearch`
Action ended 7:41:56: CCPSearch. Return value 0.
MSI (c) (94:98) [07:41:56:609]: Doing action: RMCCPSearch
Action 7:41:56: RMCCPSearch. Searching for qualifying products
Action start 7:41:56: RMCCPSearch.
MSI (c) (94:98) [07:41:56:609]: Note: 1: 2205 2:  3: CCPSearch
MSI (c) (94:98) [07:41:56:609]: Note: 1: 2228 2:  3: CCPSearch 4: SELECT `Signature_` FROM `CCPSearch`
Action ended 7:41:56: RMCCPSearch. Return value 0.
MSI (c) (94:98) [07:41:56:609]: Doing action: ValidateProductID
Action 7:41:56: ValidateProductID.
Action start 7:41:56: ValidateProductID.
Action ended 7:41:56: ValidateProductID. Return value 1.
MSI (c) (94:98) [07:41:56:625]: Doing action: CostInitialize
Action 7:41:56: CostInitialize. Computing space requirements
Action start 7:41:56: CostInitialize.
MSI (c) (94:98) [07:41:56:625]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (c) (94:98) [07:41:56:656]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (c) (94:98) [07:41:56:656]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
Action ended 7:41:56: CostInitialize. Return value 1.
MSI (c) (94:98) [07:41:56:656]: Doing action: FileCost
Action 7:41:56: FileCost. Computing space requirements
Action start 7:41:56: FileCost.
MSI (c) (94:98) [07:41:56:671]: Note: 1: 2205 2:  3: MsiAssembly
MSI (c) (94:98) [07:41:56:687]: Note: 1: 2205 2:  3: Class
MSI (c) (94:98) [07:41:56:687]: Note: 1: 2262 2: Extension 3: -2147287038
MSI (c) (94:98) [07:41:56:687]: Note: 1: 2205 2:  3: TypeLib
MSI (c) (94:98) [07:41:56:687]: Note: 1: 2262 2: IniFile 3: -2147287038
Action ended 7:41:56: FileCost. Return value 1.
MSI (c) (94:98) [07:41:56:687]: Doing action: SetUSERReg
Action 7:41:56: SetUSERReg.
Action start 7:41:56: SetUSERReg.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Modifying USER property. Its current value is '_'. Its new value: 'ge'.
Action ended 7:41:56: SetUSERReg. Return value 1.
MSI (c) (94:98) [07:41:56:687]: Doing action: SetCOMPANYReg
Action 7:41:56: SetCOMPANYReg.
Action start 7:41:56: SetCOMPANYReg.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Deleting COMPANY property. Its current value is '_'.
Action ended 7:41:56: SetCOMPANYReg. Return value 1.
MSI (c) (94:98) [07:41:56:687]: Doing action: CostFinalize
Action 7:41:56: CostFinalize. Computing space requirements
Action start 7:41:56: CostFinalize.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (c) (94:98) [07:41:56:687]: Note: 1: 2205 2:  3: Patch
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding AVGVAULTFOLDER property. Its value is 'C:\$AVG\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding AVGVAULTCHJWFOLDER property. Its value is 'C:\$AVG\$CHJW\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding AVGVAULTVAULTFOLDER property. Its value is 'C:\$AVG\$VAULT\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding AVGVERMENUFOLDER property. Its value is 'C:\Documents and Settings\All Users\Start Menu\Programs\AVG 2011\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding STSADMDIR property. Its value is 'C:\StsAdmDr\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding SysWowDrivers property. Its value is 'C:\WINDOWS\system32\Drivers\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding SYSWOWDRIVERSAVG property. Its value is 'C:\WINDOWS\system32\Drivers\AVG\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding SysDrivers property. Its value is 'C:\WINDOWS\system32\Drivers\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding SYSDRIVERSAVG property. Its value is 'C:\WINDOWS\system32\Drivers\AVG\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding MFADATA property. Its value is 'C:\Documents and Settings\All Users\Application Data\MFAData\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding MFADATAPACK property. Its value is 'C:\Documents and Settings\All Users\Application Data\MFAData\pack\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding AVGVERCADFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding AVGAPIFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\avgapi\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding SETUPBACKUPFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\SetupBackup\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding ADMINCLIFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\admincli\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding CADIDSFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSQUARANTINEFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\quarantine\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSPROFILEFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\profile\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOXFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX9FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\9\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX8FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\8\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX7FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\7\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX6FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\6\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX5FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\5\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX4FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\4\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX3FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\3\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX2FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\2\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX1FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\1\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSOUTBOX0FOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\outbox\0\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSMALWAREFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\malwareprofile\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSLOGFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\log\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSDOWNLOADFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\download\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding IDSCONFIGFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\config\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding AVGCHJWFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\Chjw\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding AVGDUMPSFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\Dumps\'.
MSI (c) (94:98) [07:41:56:687]: PROPERTY CHANGE: Adding AVGTEMPFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\Temp\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding CFGALLFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\cfgall\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding CFGFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\Cfg\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding LSDBFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\lsdb\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding LSDBPREVFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\lsdb\prev\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGAMFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\avgam\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding EMCFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\EMC\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding EMCQUEUEFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\EMC\Queue\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding EMCQUEUETEMPFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\EMC\Queue\TEMP\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding EMCQUEUEOUTFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\EMC\Queue\OUT\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding EMCQUEUEACTIVEFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\EMC\Queue\ACTIVE\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding EMCLOGFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\EMC\log\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding UPDATEFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\update\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding UPDPREPFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\update\prepare\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding UPDDWNLFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\update\download\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding UPDDWNLADSFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\update\download\ads\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding UPDBKPFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\update\backup\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding SCANLOGSFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\scanlogs\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGCADIDPFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGIDPCFGFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\config\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGIDPCFGUSFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\IDS\config\EN_US\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding LOGFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\log\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding IDPLOGFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\log\IDP\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding IDPLOGLOGFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\log\IDP\log\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding ANTISPAMFOLDER property. Its value is 'C:\Documents and Settings\All Users\Application Data\AVG10\Antispam\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding WINSIDEBAR property. Its value is 'C:\Program Files\Windows Sidebar\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding SHAREDGADGETS property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETZHTWFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\zh-TW\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETZHCNFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\zh-CN\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETTRFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\tr\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETSRFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\sr\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETSKFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\sk\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETRUFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\ru\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETPTBRFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\pt-BR\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETPTFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\pt\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETPLFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\pl\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETNLFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\nl\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETMSFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\ms\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETKOFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\ko\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETJAFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\ja\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETITFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\it\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETIDFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\id\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETHUFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\hu\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETHIFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\hi\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETFRFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\fr\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETESLAFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\es-LA\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETESFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\es\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETENUSFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\en-US\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETDEFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\de\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETDAFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\da\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETCSFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\cs\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGGADGETIMGFOLDER property. Its value is 'C:\Program Files\Windows Sidebar\Shared Gadgets\AVG.Gadget\images\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGFOLDER property. Its value is 'C:\Program Files\AVG\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGVERFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGVERTBFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\Toolbar\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding TUNEUPFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\PCTuneup\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGVERSHAREPNTFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\Sharepoint\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGVERXCHGFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\Exchange\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGVERXCHGVSAPIFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\Exchange\VSAPI\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGVERXCHGFLTRFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\Exchange\Filters\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGIDPFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\Identity Protection\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGIDPAGNTFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\Identity Protection\Agent\'.
MSI (c) (94:98) [07:41:56:703]: PROPERTY CHANGE: Adding AVGIDPQUARANTINEFOLDER property. Its value is 'C:\Program Files\AVG\AVG10\Identity Protection\Agent\quarantine\'.
MSI

[ddhanna]

i just sent you a pm..... if you get it to run, copy the text file and share it....... it will have alot of information on it that may help with other issues.

[evilasa]

Okies I saw my mistake when I went to re-download it this morning. I'd hit that big green DOWNLOAD button which i'd failed to notice was an ad-link for some AVG prog. This time I downloaded the right one, and did as DDHanna said, and it ran fine first time. Everything worked like you said. With the exception that it appears to have found nothing, everything ( other than the new short pause on up-loading like it states ) looks the same, the error messages are still there    Of course it's entirely possible that there's no virus left after the bits malwarebytes picked up and removed after the first couple of scans, and it's just totally screwed up my registry etc. Last malwarebytes scan found nothing too. Spybot s&d I daren't try again cos when i had the virus, it just turned the power off half way theough a scan, several times. Not sure what to try next, am open to suggestions though.

[NiteStar]

Hope you get cher pooter back up & running soon, Asa. Atrinik's just not the same without you!

[evilasa]

Seems it's still there somewhere. Found a SetUp.exe file yesterday where there shouldn't be one ( in mymusic! ) and deleted it. Am slowly losing commands to, I have no volume and refresh button doesn't work any more. Can't restore cos i don't have the wondows disks. Gonna have to buy a new tower i think, anyone wanna gimme 275 squids?

[Mamoru]

Sent you a pm
~Kiana~

[evilasa]

Ok, so CombiFix, Malwarebytes and Stinger are all showing me as being clear. Nothing's getting worse, and I have refresh command back. I think I may have killed it. My machine is still screwed though, I can't execute stuff, ( rundll file is missing ) and I can't fix stuff cos the way things need to work to fix my problems needs stuff that's broken. If that makes any sense. Probably gonna get a family friend to look at it over the next week or so, so although I think it's ok, I'll be away for a while longer yet.

And to Kiana...I'm not sure, I can't even run DXDiag. Although I might try it with Globalmemorystatuslie activated and see if that fixes it.

And DDHanna...thanks for all your help man, think i'd have chucked this thing in the bin if it wasn't for your help. The .com bit's been very useful, it's the only way I could get Stinger working aswell.

[ddhanna]

now you need to do a repair install of windows.... borrow a windows xp disk (same type as you have, ie Home or Pro) boot from it.... after booting from it it will ask if you want to repair windows.... on the first one, dont... just click next then press F8... now you will have a screen that askes if you want to do a repair install. that will over write your windows files and repair alot of things.....you will not lose anything with this repair install....
if it works correctly, you will need to do all the windows updates you can... (the system may not run that great until you do). once you have all the updates installed, the machine should be running pretty good.

things you will need.
1 a copy of windows xp (not a restore disk) (make sure it is the same version you have IE home or Pro, if you are not sure, look at your key that is on your computer)
2 your CD key that should be on your computer somewhere (try the back or sides, 25 letter/numbers)
3 time to install it....
4 time for alll the updates



the other option is to save your data and do a fresh install, to be honest, this would probably be your best option because you will get rid of any little hiccups that your system may have had and may still have after the repair.
let me know if i can help....

[evilasa]

Ok, so things I learned since my last post. I have no windows disks, emachines preinstalled it on here apparently, awkward sods. Not certain about being able to do all that DDHannah, might see if I can get hold of some from somewhere if things go wrong tho. I still have one or more viruses on here, although they are almost impossible to find but aren't actually doing much right now. I've managed to re-install firefox and java, and killed another multitude of viruses with various programs ( malwarebytes & spybot s&d took most of them out, but both are missing some ). I still have a windows security override virus, which is annoying me, but otherwise everything looks more or less normal again. I'll be back in game once i've shifted this son-of-a-bitch, which hopefully will be soon.

[Floozy]

I'm not qualified to contribute with suggestions to your particular problem my friend - admiring your fortitude as I would have given up long ago and bought a new computer (as happened recently),  but am crossing fingers and mentally sending wishes that everything goes well for you.

Love Floozy