Virtumonde Removal - RegSearch, ERUNT, Easy Cleaner
- *probot* ( None was found )
- *a*k3book* ( 2 are in ComboFix quarantine )
- *ans2000* ( 1 is in ComboFix quarantine )
- "lightscribe* ( None was found )
Registry Search by Bobbi Flekman
The RegSearch.txt for Probot and Probot SE is below.
Windows Registry Editor Version 5.00
; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.6.0
; Results at 10/25/2009 1:17:35 PM for strings:
; 'probot'
; 'probot se'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS
[HKEY_USERS\S-1-5-21-755137727-2013218922-164856062-1005\Software\Microsoft\Search Assistant\ACMru\5603]
"002"="*probot*"
; End Of The Log...
This Lightscribe is another pesky remnant. It does not appear at all in Add/Remove Programs nor in a search for files/folders.
I ran the RegSearch of Bobbi Flekman for "Lightscribe". Surprisingly, the search result is quite long. Perhaps the word "lightscribe" is also used in other ways. The RegSearch.txt is quite long (112 kB) with many long numbers. Rather than annoying you and others, I have attached RegSearchLightscribe.zip .
ERUNT and REGEDIT4
I have just run ERUNT and REGEDIT4, taking note of 'no empty space' , 'one empty line' , and reboot.
Easy Cleaner - Registry Cleaner
Yeh, I have seen many pros and cons about this topic. Its something like the ckicken and egg - who is first. Since this is coming from you first hand, unlike just reading about it somewhere, I will gladly uninstall Easy Cleaner.
Other Queries
1. In what way is ERUNT better than the Windows inbuilt registry backup ?
2. In the Attach.txt, there are many security updates for IE7. I no longer use IE7 but I can STILL see it in files and folders, after upgrading to IE8. I understand you might not be a MS employee with privileged information. Can these IE7 security updates be removed ?
We are a very small family. It's only the very rare mischievous friend or visitor that could pose a worry. I have a new password now.
I have searched all files and folders for -
- *probot* ( None was found )
- *a*k3book* ( 2 are in ComboFix quarantine )
- *ans2000* ( 1 is in ComboFix quarantine )
- "lightscribe* ( None was found )
Registry Search by Bobbi Flekman
The RegSearch.txt for Probot and Probot SE is below.
Windows Registry Editor Version 5.00
; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.6.0
; Results at 10/25/2009 1:17:35 PM for strings:
; 'probot'
; 'probot se'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS
[HKEY_USERS\S-1-5-21-755137727-2013218922-164856062-1005\Software\Microsoft\Search Assistant\ACMru\5603]
"002"="*probot*"
; End Of The Log...
This Lightscribe is another pesky remnant. It does not appear at all in Add/Remove Programs nor in a search for files/folders.
I ran the RegSearch of Bobbi Flekman for "Lightscribe". Surprisingly, the search result is quite long. Perhaps the word "lightscribe" is also used in other ways. The RegSearch.txt is quite long (112 kB) with many long numbers. Rather than annoying you and others, I have attached RegSearchLightscribe.zip .
ERUNT and REGEDIT4
I have just run ERUNT and REGEDIT4, taking note of 'no empty space' , 'one empty line' , and reboot.
Easy Cleaner - Registry Cleaner
Yeh, I have seen many pros and cons about this topic. Its something like the ckicken and egg - who is first. Since this is coming from you first hand, unlike just reading about it somewhere, I will gladly uninstall Easy Cleaner.
Other Queries
1. In what way is ERUNT better than the Windows inbuilt registry backup ?
2. In the Attach.txt, there are many security updates for IE7. I no longer use IE7 but I can STILL see it in files and folders, after upgrading to IE8. I understand you might not be a MS employee with privileged information. Can these IE7 security updates be removed ?
