lh
New Helpee
Posts: 36
|
Post by lh on Jul 9, 2014 22:34:09 GMT -8
I have uninstalled everything except:
{AEB719FD-EDB0-43E9-B524-90F97C1E6499}" = System Update kb70007
I could not find this among the programs.
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Jul 9, 2014 22:37:11 GMT -8
Look for System Update kb70007 and not the {number}
Quads
|
|
lh
New Helpee
Posts: 36
|
Post by lh on Jul 9, 2014 23:21:50 GMT -8
There is no such program in the files. I could find nothing titled " System Update kb70007"
I figure if it were there, it'd be between Stronghold and Team Fortress II (when the list is organized alphabetically).
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Jul 9, 2014 23:48:51 GMT -8
looking back at the FRST log ahhhhhhh
System Update kb70007 (x32 Version: 1.0.0 - MSR) Hidden
I will have to create a frst script tomorrow so that it is no longer hidden and will appear in the list for you.
Quads
|
|
lh
New Helpee
Posts: 36
|
Post by lh on Jul 9, 2014 23:57:53 GMT -8
Hidden? Wow. I wonder what that program does/did, and how it got on.
Thank you very much so far for your tremendous help.
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Jul 10, 2014 10:10:54 GMT -8
In with the other objects, I did break apart (like into jigsaw pieces) this one to as seen in the fix log by
[2120] C:\Windows\Microsoft\SystemUpdatekb70007\WindowsUpdater.exe => Process closed successfully. [2672] C:\Program Files (x86)\MSR\Privoxy\privoxy.exe => Process closed successfully SystemUpdatekb70007 => Service deleted successfully. C:\Windows\Microsoft\SystemUpdatekb70007\WindowsUpdater.exe => Moved successfully.
C:\Program Files (x86)\MSR\Privoxy\privoxy.exe => Moved successfully. C:\Windows\Microsoft\SystemUpdatekb70007\InstallerLibrary.dll => Moved successfully.
C:\Windows\Microsoft\SystemUpdatekb70007\Installer.dll => Moved successfully.
C:\Program Files (x86)\MSR\Privoxy\mgwz.dll => Moved successfully. C:\Program Files (x86)\MSR => Moved successfully. C:\Windows\Microsoft\SystemUpdatekb70007 => Moved successfully.
You may want to read carefully all of this message first before starting the steps.
NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Download the script attached, needs to be the same file name as well (fixlist.txt), have it on the Desktop, so that fixlist.txt is next to FRST64.exe,
DO NOT DRAG AND DROP to download the script, it won't work for FRST (Right click on the attachment link (not the normal left click) and from the menu choose Save As or Save Link as.)
The script tells FRST what to do.
Start FRST that is on the desktop When the tool opens click Yes to disclaimer. (if it still does)
Press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) please post it to your reply (attach or paste)
Quads
|
|
lh
New Helpee
Posts: 36
|
Post by lh on Jul 10, 2014 14:32:44 GMT -8
Here is the Fixlog:
--------------
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-07-2014 01 Ran by Michael and Anna at 2014-07-10 17:31:53 Run:3 Running from C:\Users\Michael and Anna\Desktop Boot Mode: Normal ==============================================
Content of fixlist: ***************** <!DOCTYPE HTML> <!--[if IE 7]><html class="ie7"><![endif]--><!--[if IE 8]><html class="ie8"><![endif]--><!--[if IE 9]><html class="ie9"><![endif]--><!--[if gt IE 9]><!--> <html> <!--<![endif]--> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8" /> <title>Oops, there was an error! | Malware Removal </title> <link rel="alternate" type="application/rss+xml" href="http://qmalwareremoval.freeforums.net/rss/public" /> <link rel="shortcut icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> <link rel="icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> <meta property="og:url" content="http://qmalwareremoval.freeforums.net/attachment/download/1028" /> <meta property="og:title" content="Oops, there was an error! | Malware Removal " /> <meta property="og:description" content="Visit our forum at: qmalwareremoval.freeforums.net" /> <meta name="twitter:card" content="summary" /> <meta name="twitter:site" content="@proboards" /> <meta name="twitter:app:id:iphone" content="307880732" /> <meta name="twitter:app:url:iphone" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> <meta name="twitter:app:id:ipad" content="307880732" /> <meta name="twitter:app:url:ipad" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> <meta name="twitter:app:id:googleplay" content="com.quoord.tapatalkpro.activity" /> <meta name="twitter:app:url:googleplay" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" />
<link rel="stylesheet" type="text/css" media="screen" href="http://d.storage.proboards.com/f/Default/forum_159.css" id="forum_style"> <link rel="stylesheet" type="text/css" media="print" href="http://d.storage.proboards.com/f/print.css"> <script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"></script> <script type="text/javascript" src="http://d.storage.proboards.com/f/forum_159.js"></script> <script type="text/javascript">proboards.data([['ad_free',0],['time_style',0],['military_time',0],['timezone',"guest"],['serverDate',1405030835000],['search-query-min',3],['search-query-max',50],['is_current_user_guest',"1"],['plugin_max_key_length',4000],['plugin_max_super_forum_key_length',32000],['login_url',"https://login.proboards.com/login/5448498/1"],['register_url',"https://login.proboards.com/register/5448498"]]);</script> <script type="text/javascript">proboards.plugin._plugins["pixeldepth_icon_to_name"] = { settings: {"images_users":[{"image_url":"","image_title":"","replace_name":"0","users":["1"]}],"images_groups":[{"image_url":"http://www.gettyicons.com/free-icons/141/ginux/png/24/antivirus_24.png","image_title":"","replace_name":"0","groups":["4"]}]} };</script>
</head> <body> <div id="wrapper"> <header> <div id="banner-container" role="banner"> <h2 id="banner"> <a id="logo" href="/">Malware Removal </a> </h2> </div> <a id="navigation-skip" href="#content" accesskey="s" class="aria-hidden" title="Skip Navigation">Skip Navigation</a> <a href="#" accesskey="d" title="Open Menu" onclick="proboards.hotkeys.activate(Keys.d); return false;"></a> <div id="navigation-menu" class="ui-helper-clearfix"> <ul role="navigation"> <li> <a href="/" accesskey="1"> Home </a> </li> <li> <a href="/help" accesskey="6"> Help </a> </li> <li> <a href="/search" accesskey="4"> Search </a> </li> </ul> <p id="welcome"> Welcome Guest. Please <a href="https://login.proboards.com/login/5448498/1">Login</a> or <a href="https://login.proboards.com/register/5448498">Register</a>. </p> </div> </header> <div id="navigation-tree"> <div class="nav-tree-wrapper"><ul id="nav-tree" class="ui-helper-clearfix" role="navigation"><li id="nav-tree-branch-0" class="nav-tree-branch ui-helper-clearfix"><div itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"><a href="/" itemprop="url"><span itemprop="title">Malware Removal </span></a></div><span class="menu_arrow"><span></span></span></li></ul></div><div class="popup_html"> <ul id="nav-tree-menu-0" role="navigation"> <li class="nav-tree-cat-2"><a href="/#category-2"><span class="item-text">System Security</span><div class="clear"></div></a> <ul role="navigation"> <li class="nav-tree-board-2"><a href="http://qmalwareremoval.freeforums.net/board/2/malware-removal-protected"><span class="item-text">Malware Removal (Protected)</span><div class="clear"></div></a></li> <li class="nav-tree-board-6"><a href="http://qmalwareremoval.freeforums.net/board/6/security-software"><span class="item-text">Security Software</span><div class="clear"></div></a></li> </ul> </li> <li class="nav-tree-cat-3"><a href="/#category-3"><span class="item-text">Windows and Software Problems (not due to infection)</span><div class="clear"></div></a> <ul role="navigation"> <li class="nav-tree-board-3"><a href="http://qmalwareremoval.freeforums.net/board/3/windows"><span class="item-text">Windows</span><div class="clear"></div></a></li> <li class="nav-tree-board-4"><a href="http://qmalwareremoval.freeforums.net/board/4/third-party-software"><span class="item-text">Third Party Software </span><div class="clear"></div></a></li> </ul> </li> <li class="nav-tree-cat-1"><a href="/#category-1"><span class="item-text">General</span><div class="clear"></div></a> <ul role="navigation"> <li class="nav-tree-board-1"><a href="http://qmalwareremoval.freeforums.net/board/1/general-board"><span class="item-text">General Board</span><div class="clear"></div></a></li> <li class="nav-tree-board-7"><a href="http://qmalwareremoval.freeforums.net/board/7/penthouse-play-pen"><span class="item-text">Penthouse Play Pen</span><div class="clear"></div></a></li> </ul> </li> </ul></div><script type="text/javascript"> var offset = ($.browser.msie && parseInt($.browser.version) == 8) ? '3 -1' : '3 0'; $('#nav-tree-menu-0') .addClass('nav-tree-menu') .menu({ position: { my: 'left top', at: 'left bottom', offset: offset, of: $('#nav-tree-branch-0'), collision: 'flipfit' }, button: $('#nav-tree-branch-0'), showDelay: 400, show: function() { var self = $(this); // Make sure all other menus are closed $('.popup_html > ul').not(self).menu('hide'); $(document).on('mousemove', function(e) { var elem = $(e.target); if(elem.parents('#nav-tree, .popup_html').length == 0 && !elem.is('#nav-tree, .popup_html') && !$('#nav-tree-menu-0').data('hotkey-open')) { self.menu('hide'); $(document).unbind('mousemove'); } }); } }); </script> </div> <div id="top-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> <script type="text/javascript"> oz_api = 'valuation'; oz_site = '7781/12408'; oz_zone = '135274'; oz_ad_slot_size = '728x90'; </script> <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> <script type="text/javascript"> $(document).ready(function() { $('#top-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); var f = $('#top-ad-banner iframe'); var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=ATF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.48498566093166&uid=0'; if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { u = u + '&rtp=' + rp_valuation.estimate.tier; } f.attr('src', u); }); </script> </div> <script type="text/javascript"> $(window).load(function() { var topAd = $('#top-ad-banner'); if (topAd.prop('scrollHeight') < 90) { topAd.css('height', 'auto').html( '<b>Please consider supporting this website by disabling your ad-blocker.<br />' + 'This website does not use audio ads, popups, or other annoyances. Thank you!</b>' ); $("head").append('<style type="text/css">#top-ad-banner { display: block !important; }</style>'); } }); </script><script type="text/javascript" src="http://storage.proboards.com/5448498/j/Dox5kMQpamIWhhKOo03B.js" data-plugin="2" data-component="3"></script> <div id="content" role="main"> <div class="container error"> <div class="title-bar"> <h2>Oops, there was an error!</h2> </div> <div class="content pad-all cap-bottom auto-overflow"> Guests do not have access to download attachments. Please log in and try again. </div> </div> </div> <script type="text/javascript" src="http://ads.pro-market.net/ads/scripts/site-131222.js"></script><script type="text/javascript"> (function() { var nstrack = document.createElement("script"), el_nstrack = document.getElementsByTagName("script")[0]; nstrack.async = true; nstrack.src = "http://track.netshelter.net/async/js/sites/proboards.com-async.js"; el_nstrack.parentNode.insertBefore(nstrack, el_nstrack); })(); </script><div style="margin-bottom: 2px; text-align: center;"><a href="https://www.proboards.com/store/add_cart/ad_free/50000/qmalwareremoval.freeforums.net/1">Click here to remove banner ads from this forum.</a></div> <div id="bottom-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> <script type="text/javascript"> oz_api = 'valuation'; oz_site = '7781/12408'; oz_zone = '135276'; oz_ad_slot_size = '728x90'; </script> <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> <script type="text/javascript"> $(document).ready(function() { $('#bottom-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); var f = $('#bottom-ad-banner iframe'); var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=BTF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.514538108119964&uid=0'; if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { u = u + '&rtp=' + rp_valuation.estimate.tier; } f.attr('src', u); }); </script> </div> <footer role="contentinfo"> <p class="footer-text"> This Forum Hosted For FREE By <a href="http://www.proboards.com/" target="_blank">ProBoards</a><br /> Get Your Own <a href="http://www.proboards.com/" target="_blank">Free Message Boards & Free Forums</a>! </p> <div class="footer-links"> <a href="http://www.proboards.com/tos" accesskey="8">Terms of Service</a> | <a href="http://www.proboards.com/privacy">Privacy Policy</a> | <a href="http://www.proboards.com/privacy#enhanced">Notice</a> | <a href="http://www.viglink.com/policies/ftc" target="_blank">FTC Disclosure</a> | <a href="http://www.proboards.com/report-abuse" accesskey="7">Report Abuse</a> | <a href="http://www.proboards.com/mobile-forum-app">Mobile</a> | <a href="http://www.proboards.com/ads"><b>Advertise Here</b></a> </div> </footer> <script type="text/javascript"> var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-3734504-3']); _gaq.push(['_setDomainName', 'none']); _gaq.push(['_setAllowLinker', true]); _gaq.push(['_trackPageview']);
(function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })(); </script> <script type="text/javascript"> var vglnk; $(document).ready(function() { vglnk = { api_url: '//api.viglink.com/api', key: 'bbb516d91daee20498798694a42dd559' }; var vglnkSrc = ('https:' == document.location.protocol ? vglnk.api_url : '//cdn.viglink.com/api') + '/vglnk.js'; // VigLink ProBoards Convert Code (using above key) var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = vglnkSrc; document.body.appendChild(s); }); </script>
</div> </body> </html> *****************
==== End of Fixlog ====
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Jul 10, 2014 15:14:07 GMT -8
You are not doing it right again.
No wonder sometimes computers have troubles, and it is not the computers fault
Quads
|
|
lh
New Helpee
Posts: 36
|
Post by lh on Jul 10, 2014 21:44:23 GMT -8
Okay. Hang tight.
|
|
lh
New Helpee
Posts: 36
|
Post by lh on Jul 10, 2014 21:49:43 GMT -8
Tried again. Hope I got it right this time. I could swear I did this last time, but I could be wrong:
------
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-07-2014 01 Ran by Michael and Anna at 2014-07-11 00:47:36 Run:4 Running from C:\Users\Michael and Anna\Desktop Boot Mode: Normal ==============================================
Content of fixlist: ***************** start System Update kb70007 (x32 Version: 1.0.0 - MSR) Hidden end *****************
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AEB719FD-EDB0-43E9-B524-90F97C1E6499}\\SystemComponent => value deleted successfully.
==== End of Fixlog ====
|
|