Author Topic: Help with uninstalling a malicious program.  (Read 15223 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help with uninstalling a malicious program.
« Reply #45 on: August 05, 2014, 07:14:15 PM »
Hmm it did not find the key for some reason

Lets look for it

Open FRST
In the search box type :

kb77600

Then press the Search Registry button
It will generate a search.txt post that

REDACTED

  • Guest
Re: Help with uninstalling a malicious program.
« Reply #46 on: August 05, 2014, 07:46:19 PM »
Here it is.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help with uninstalling a malicious program.
« Reply #47 on: August 05, 2014, 08:01:15 PM »
Ahh it was in the 3264 node area

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|MSR
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\3370BB972A85C684AA209FAB9B92FE8F
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\236DF1FAA1794F8F3284A6B3707E1CC3
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\250DC36C9F85E77D4EEF7C0EEBEA1026
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\79D0AD36027CCA6C9F09A089A62E490A
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95B49B48096B9048F14B3F11E5F81DBC
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9B4877D8E5E1CB32CD2D8183E09B1C0D
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A8FA161602EC3C45207B4B49B6355E50
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4FC80FC59A0CB0F990D98D200FAE25E
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3370BB972A85C684AA209FAB9B92FE8F
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{79BB0733-58A2-486C-AA02-F9BAB929EFF8}
REBOOT:

 
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that


REDACTED

  • Guest
Re: Help with uninstalling a malicious program.
« Reply #48 on: August 05, 2014, 08:19:40 PM »
YES!!! That did the trick! Thanks for all your help! Here is the log.  ;D

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help with uninstalling a malicious program.
« Reply #49 on: August 05, 2014, 08:30:03 PM »
Run Delfix again to remove FRST :)