1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive [InActive] Can't Install AVGFREE, Says another program is Running.

Discussion in 'Malware and Virus Removal Archive' started by Pepse, 2008/10/30.

Page 2 of 3
  1. 2008/11/12
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Yes, do not select Green Items. It is deselected upon selecting All Items.

    If you want to go manually, run that Registry Search Tool for McAfee again and post the log so I can see if anything has changed.
     
    noahdfear,
    #21
  2. 2008/11/12
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    If you are talking about the MCPR from McAfee I tried to run it again and it failed because it is already running. Same problem I had last night when dealing with McAfee Techs.

    Pepse.
     
    Pepse,
    #22


  3. to hide this advert.

  4. 2008/11/12
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    I was referring to this post.

    Have you rebooted since last night? Did it startup by itself (the MCPR tool)?
     
    noahdfear,
    #23
  5. 2008/11/12
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    Yes I have rebooted this computer a few times since last night. I don't leave a windows computer running very long.

    Anyway I'll deal with that link, now.

    Later. Pepse.
     
    Pepse,
    #24
  6. 2008/11/12
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    Windows Registry Editor Version 5.00

    ; Registry Search 2.0 by Bobbi Flekman © 2005
    ; Version: 2.0.5.0

    ; Results at 11/12/2008 10:31:06 PM for strings:
    ; 'mcafee'
    ; Strings excluded from search:
    ; (None)
    ; Search in:
    ; Registry Keys Registry Values Registry Data
    ; HKEY_LOCAL_MACHINE HKEY_USERS


    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{70AE37AD-5507-4fe0-9691-563A55D71F18}]
    @= "McAfee Proxy Service "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{EBB89BE8-5749-41A9-9075-2882789A91A4}]
    @= "McAfee Personal Firewall Alert "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EBE1406-BE0E-44E6-AE10-247A0C5AEDCF}]
    @= "McAfee Virtual Technician "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MVT.MVTControl]
    @= "McAfee Virtual Technician "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MVT.MVTControl.4300]
    @= "McAfee Virtual Technician "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{19F4CECD-60C0-49D3-86F9-839544C513CF}\1.0\0\win32]
    @= "c:\\program files\\mcafee\\msc\\mcoemmgr.exe "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{19F4CECD-60C0-49D3-86F9-839544C513CF}\1.0\HELPDIR]
    @= "c:\\program files\\mcafee\\msc\\ "

    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\MVT]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn]
    ; Contents of value:
    ; %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\McAfee\McAfee SecurityCenter.lnk
    "OEM1 "=hex(2):25,00,41,00,4c,00,4c,00,55,00,53,00,45,00,52,00,53,00,50,00,52,\
    00,4f,00,46,00,49,00,4c,00,45,00,25,00,5c,00,4d,00,69,00,63,00,72,00,6f,00,\
    73,00,6f,00,66,00,74,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,5c,\
    00,53,00,74,00,61,00,72,00,74,00,20,00,4d,00,65,00,6e,00,75,00,5c,00,50,00,\
    72,00,6f,00,67,00,72,00,61,00,6d,00,73,00,5c,00,4d,00,63,00,41,00,66,00,65,\
    00,65,00,5c,00,4d,00,63,00,41,00,66,00,65,00,65,00,20,00,53,00,65,00,63,00,\
    75,00,72,00,69,00,74,00,79,00,43,00,65,00,6e,00,74,00,65,00,72,00,2e,00,6c,\
    00,6e,00,6b,00,00,00

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFEAVFK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFEBOPK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFEHIDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFERKDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{78F7355C-0D25-4D20-9402-084A73314E9A} "= "v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe|Name=McAfee Network Agent|Edge=FALSE| "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MFEAVFK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MFEBOPK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MFEHIDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_MFERKDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{78F7355C-0D25-4D20-9402-084A73314E9A} "= "v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe|Name=McAfee Network Agent|Edge=FALSE| "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFEAVFK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFEBOPK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFEHIDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFERKDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{78F7355C-0D25-4D20-9402-084A73314E9A} "= "v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe|Name=McAfee Network Agent|Edge=FALSE| "

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1453edc0_0]
    @= "{0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\\Device\\HarddiskVolume2\\Program Files\\McAfee\\MSC\\mcupdui.exe%b{00000000-0000-0000-0000-000000000000} "

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1ce1d2f4_0]
    @= "{0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\\Device\\HarddiskVolume2\\Program Files\\McAfee\\MSK\\MskAlert.exe%b{00000000-0000-0000-0000-000000000000} "

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3c6d6d68_0]
    @= "{0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\\Device\\HarddiskVolume2\\Program Files\\McAfee\\VirusScan\\mcvsshld.exe%b{00000000-0000-0000-0000-000000000000} "

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3c8c54f0_0]
    @= "{0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\\Device\\HarddiskVolume2\\Program Files\\McAfee\\MPF\\MC\\MpfAlert.exe%b{00000000-0000-0000-0000-000000000000} "

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\57d9c734_0]
    @= "{0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\\Device\\HarddiskVolume2\\PROGRA~1\\McAfee\\VIRUSS~1\\mcvsshld.exe%b{00000000-0000-0000-0000-000000000000} "

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mcafee.com]

    [HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
    "C:\\Users\\joann\\AppData\\Local\\Temp\\MCPR.tmp\\MCCLEA~1.EXE "= "McAfee CleanUp Tool "
    "C:\\Users\\joann\\AppData\\Local\\Temp\\MCPR.tmp\\McClnUI.exe "= "McAfee CleanUp Tool UI "
    "C:\\Users\\joann\\Downloads\\mvtapp.exe "= "McAfee Virtual Technician Application "

    ; End Of The Log...
     
    Pepse,
    #25
  7. 2008/11/13
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Before we get started I need some registry exports.
    Highlight and copy the contents of the code box below.
    Code:
    reg query HKLM\SOFTWARE\Classes\AppID\{70AE37AD-5507-4fe0-9691-563A55D71F18} /s>log.txt
reg query HKLM\SOFTWARE\Classes\AppID\{EBB89BE8-5749-41A9-9075-2882789A91A4} /s>>log.txt
reg query HKLM\SOFTWARE\Classes\CLSID\{2EBE1406-BE0E-44E6-AE10-247A0C5AEDCF} /s>>log.txt
reg query HKLM\SOFTWARE\Classes\TypeLib\{19F4CECD-60C0-49D3-86F9-839544C513CF} /s>>log.txt
reg query HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore /s>>log.txt
reg query  "HKLM\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware" /s>>log.txt
start notepad log.txt
exit
cls
    Click Start>Run and type cmd then hit enter to open a command window. Right click in the command window and select paste. The command window will close on it's own and a log will open. Post that log here please.
     
    noahdfear,
    #26
  8. 2008/11/13
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EBE1406-BE0E-44E6-AE10-247A0C5AEDCF}\InprocServer32
    (Default) REG_SZ C:\Windows\Downloaded Program Files\mvt.dll
    ThreadingModel REG_SZ Both

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EBE1406-BE0E-44E6-AE10-247A0C5AEDCF}\ProgID
    (Default) REG_SZ MVT.MVTControl.4300

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EBE1406-BE0E-44E6-AE10-247A0C5AEDCF}\Programmable

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EBE1406-BE0E-44E6-AE10-247A0C5AEDCF}\TypeLib
    (Default) REG_SZ {1D018BFF-12AF-4795-B865-9D216969E8FC}

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EBE1406-BE0E-44E6-AE10-247A0C5AEDCF}\VersionIndependentProgID
    (Default) REG_SZ MVT.MVTControl


    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{19F4CECD-60C0-49D3-86F9-839544C513CF}\1.0
    (Default) REG_SZ mcoemmgr 1.0 Type Library

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{19F4CECD-60C0-49D3-86F9-839544C513CF}\1.0\0

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{19F4CECD-60C0-49D3-86F9-839544C513CF}\1.0\0\win32

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{19F4CECD-60C0-49D3-86F9-839544C513CF}\1.0\FLAGS
    (Default) REG_SZ 0

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{19F4CECD-60C0-49D3-86F9-839544C513CF}\1.0\HELPDIR


    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware
    DisableMonitoring REG_DWORD 0x1
     
    Pepse,
    #27
  9. 2008/11/13
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Highlight and copy the contents of the code box below.
    Code:
    @echo off
reg delete HKLM\SOFTWARE\Classes\AppID\{70AE37AD-5507-4fe0-9691-563A55D71F18} /f
reg delete HKLM\SOFTWARE\Classes\AppID\{EBB89BE8-5749-41A9-9075-2882789A91A4} /f
reg delete HKLM\SOFTWARE\Classes\CLSID\{2EBE1406-BE0E-44E6-AE10-247A0C5AEDCF} /f
reg delete HKLM\SOFTWARE\Classes\TypeLib\{19F4CECD-60C0-49D3-86F9-839544C513CF} /f
reg delete  "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mcafee.com" /f
reg delete HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules /v {78F7355C-0D25-4D20-9402-084A73314E9A} /f
reg delete HKLM\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules /v {78F7355C-0D25-4D20-9402-084A73314E9A} /f
reg delete HKLM\SOFTWARE\McAfee /f
reg delete HKLM\SOFTWARE\Classes\MVT.MVTControl /f
reg delete HKLM\SOFTWARE\Classes\MVT.MVTControl.4300 /f
reg add  "HKLM\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware" /v DisableMonitoring /t REG_DWORD /d 0 /f
reg query  "HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore" /s>log.txt
reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn /s>>log.txt
start notepad log.txt
exit
cls
    Click Start>Run and type cmd then hit enter to open a command window. Right click in the command window and select paste. The command window will close on it's own and a log will open. Post that log here please.
     
    noahdfear,
    #28
  10. 2008/11/13
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1453edc0_0

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1cd2e2de_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\explorer.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1ce1d2f4_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\McAfee\MSK\MskAlert.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2d2b320c_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\FreeCell\FreeCell.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2d2b320c_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2dbef3be_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\eMachines Game Console\GameConsole-wt.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\369d3f12_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Penguins!\penguins.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3c6d6d68_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\McAfee\VirusScan\mcvsshld.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3c8c54f0_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\McAfee\MPF\MC\MpfAlert.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\4a8931a6_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Polar Bowler\Polar.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\57d9c734_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\PROGRA~1\McAfee\VIRUSS~1\mcvsshld.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\598ef310_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Chuzzle Deluxe\Chuzzle.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\598ef310_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5accedae_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\John Deere American Farmer\JohnDeere.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5accedae_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5b804905_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Crave\Global Operations\binkplay.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5b804905_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\6366133_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|#%b{A9EF3FD9-4240-455E-A4D5-F2B3301887B2}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\68698176_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\Hearts\Hearts.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\68698176_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\80c0243_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Diner Dash\Diner Dash.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\80c0243_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\858126c4_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Polar Golfer\golf.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\8b0a0f85_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\CdRom0\AutoRun.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\9c01ae20_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\9c2ccbe1_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Digital Image 2006\pi.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\a1f5eaf0_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Bejeweled 2 Deluxe\WinBej2.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\a1f5eaf0_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\abcf0cce_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Crave\Global Operations\globalops.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\abcf0cce_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\afd3f730_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\b306d27c_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\System32\ntvdm.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\b306d27c_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\b95d7838_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Yahoo!\Messenger\YahooMessenger.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\be0b424b_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\c172fb3c_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\JEOPARDY\JEOPARDY!.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\c297aa3b_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\BigFix\bigfix.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\c77175c_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Oberon Media\Dream Day Wedding\DreamDayWedding.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\c8e700eb_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Internet Explorer\iexplore.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d0e52e3f_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\FATE\Fate.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d2c2866_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\Purble Place\PurblePlace.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d2c2866_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d76052a0_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\Solitaire\Solitaire.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d76052a0_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d9cf4069_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\System32\rundll32.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\daa438b_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\System32\spool\drivers\w32x86\3\lxctjswx.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\dc8cf8f_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Magellan\Magellan RoadMate Tools\Shell2.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e24b4d31_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Movie Maker\MOVIEMK.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e24b4d31_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e4b49f7b_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\SCRABBLE\Scrabble.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e4b49f7b_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e5f53f33_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Windows Photo Gallery\WindowsPhotoGallery.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e5f53f33_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\f6f4bed1_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\System32\spool\drivers\w32x86\3\lxctpswx.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\fd4bcf6e_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\fd4bcf6e_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000


    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn
    OEM0 REG_EXPAND_SZ %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\AOL 9.0.lnk
    OEM1 REG_EXPAND_SZ %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\McAfee\McAfee SecurityCenter.lnk
    OEM2 REG_EXPAND_SZ %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Games\- eMachines Game Console -.lnk
     
    Pepse,
    #29
  11. 2008/11/13
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Highlight and copy the contents of the code box below.
    Code:
    @echo off
reg delete  "HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1ce1d2f4_0" /f
reg delete  "HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3c6d6d68_0" /f
reg delete  "HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3c8c54f0_0" /f
reg delete  "HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\57d9c734_0" /f
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn  /v OEM1 /f
exit
cls
    Click Start>Run and type cmd then hit enter to open a command window. Right click in the command window and select paste. The command window will close on it's own.

    Now, please repeat the search for McAfee and lets see what's left.
     
    noahdfear,
    #30
  12. 2008/11/13
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    I ran a search in Start>Run and the only thing that turned up is what is in that "log.txt ".

    Pepse
     
    Pepse,
    #31
  13. 2008/11/13
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    You need to repeat the Registry Search Tool for McAfee again and post the results, as described here.
     
    noahdfear,
    #32
  14. 2008/11/13
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    Windows Registry Editor Version 5.00

    ; Registry Search 2.0 by Bobbi Flekman © 2005
    ; Version: 2.0.5.0

    ; Results at 11/13/2008 8:55:01 PM for strings:
    ; 'mcafee'
    ; Strings excluded from search:
    ; (None)
    ; Search in:
    ; Registry Keys Registry Values Registry Data
    ; HKEY_LOCAL_MACHINE HKEY_USERS


    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MVT.MVTControl.4300]
    @= "McAfee Virtual Technician "

    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\MVT]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn]
    ; Contents of value:
    ; %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\McAfee\McAfee SecurityCenter.lnk
    "OEM1 "=hex(2):25,00,41,00,4c,00,4c,00,55,00,53,00,45,00,52,00,53,00,50,00,52,\
    00,4f,00,46,00,49,00,4c,00,45,00,25,00,5c,00,4d,00,69,00,63,00,72,00,6f,00,\
    73,00,6f,00,66,00,74,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,5c,\
    00,53,00,74,00,61,00,72,00,74,00,20,00,4d,00,65,00,6e,00,75,00,5c,00,50,00,\
    72,00,6f,00,67,00,72,00,61,00,6d,00,73,00,5c,00,4d,00,63,00,41,00,66,00,65,\
    00,65,00,5c,00,4d,00,63,00,41,00,66,00,65,00,65,00,20,00,53,00,65,00,63,00,\
    75,00,72,00,69,00,74,00,79,00,43,00,65,00,6e,00,74,00,65,00,72,00,2e,00,6c,\
    00,6e,00,6b,00,00,00

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFEAVFK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFEBOPK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFEHIDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFERKDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{78F7355C-0D25-4D20-9402-084A73314E9A} "= "v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe|Name=McAfee Network Agent|Edge=FALSE| "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MFEAVFK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MFEBOPK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MFEHIDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MFERKDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{78F7355C-0D25-4D20-9402-084A73314E9A} "= "v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe|Name=McAfee Network Agent|Edge=FALSE| "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFEAVFK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFEBOPK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFEHIDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFERKDK\0000]
    "DeviceDesc "= "McAfee Inc. "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{78F7355C-0D25-4D20-9402-084A73314E9A} "= "v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe|Name=McAfee Network Agent|Edge=FALSE| "

    ; End Of The Log...
     
    Pepse,
    #33
  15. 2008/11/13
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Need to look at another key before proceeding with manual editing.

    Highlight and copy the contents of the code box below.
    Code:
    @echo off
reg query HKLM\SYSTEM\Select>log.txt
start notepad log.txt
exit
cls
    Click Start>Run and type cmd then hit enter to open a command window. Right click in the command window and select paste. The command window will close on it's own and open a log. Post the contents of that log.
     
    noahdfear,
    #34
  16. 2008/11/13
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1453edc0_0

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1cd2e2de_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\explorer.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1ce1d2f4_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\McAfee\MSK\MskAlert.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2d2b320c_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\FreeCell\FreeCell.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2d2b320c_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2dbef3be_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\eMachines Game Console\GameConsole-wt.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\369d3f12_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Penguins!\penguins.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3c6d6d68_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\McAfee\VirusScan\mcvsshld.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3c8c54f0_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\McAfee\MPF\MC\MpfAlert.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\4a8931a6_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Polar Bowler\Polar.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\57d9c734_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\PROGRA~1\McAfee\VIRUSS~1\mcvsshld.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\598ef310_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Chuzzle Deluxe\Chuzzle.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\598ef310_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5accedae_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\John Deere American Farmer\JohnDeere.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5accedae_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5b804905_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Crave\Global Operations\binkplay.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5b804905_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\6366133_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|#%b{A9EF3FD9-4240-455E-A4D5-F2B3301887B2}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\68698176_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\Hearts\Hearts.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\68698176_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\80c0243_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Diner Dash\Diner Dash.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\80c0243_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\858126c4_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Polar Golfer\golf.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\8b0a0f85_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\CdRom0\AutoRun.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\9c01ae20_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\9c2ccbe1_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Digital Image 2006\pi.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\a1f5eaf0_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\Bejeweled 2 Deluxe\WinBej2.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\a1f5eaf0_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\abcf0cce_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Crave\Global Operations\globalops.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\abcf0cce_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\afd3f730_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\b306d27c_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\System32\ntvdm.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\b306d27c_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\b95d7838_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Yahoo!\Messenger\YahooMessenger.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\be0b424b_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\c172fb3c_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\JEOPARDY\JEOPARDY!.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\c297aa3b_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\BigFix\bigfix.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\c77175c_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Oberon Media\Dream Day Wedding\DreamDayWedding.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\c8e700eb_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Internet Explorer\iexplore.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d0e52e3f_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\FATE\Fate.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d2c2866_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\Purble Place\PurblePlace.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d2c2866_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d76052a0_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\Solitaire\Solitaire.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d76052a0_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d9cf4069_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\System32\rundll32.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\daa438b_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\System32\spool\drivers\w32x86\3\lxctjswx.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\dc8cf8f_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Magellan\Magellan RoadMate Tools\Shell2.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e24b4d31_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Movie Maker\MOVIEMK.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e24b4d31_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e4b49f7b_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\eMachines Games\SCRABBLE\Scrabble.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e4b49f7b_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e5f53f33_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Windows Photo Gallery\WindowsPhotoGallery.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e5f53f33_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\f6f4bed1_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Windows\System32\spool\drivers\w32x86\3\lxctpswx.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\fd4bcf6e_0
    (Default) REG_SZ {0.0.0.00000000}.{01924fbe-aff3-482d-80f0-ee165daab3d1}|\Device\HarddiskVolume2\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe%b{00000000-0000-0000-0000-000000000000}

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\fd4bcf6e_0\{219ED5A0-9CBF-4F3A-B927-37C9E5C5F14F}
    3 REG_BINARY 04000000000000000000803F00000000
    4 REG_BINARY 042000000000000010000000000000000000803F0000803F
    5 REG_BINARY 0B000000000000000000000000000000


    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn
    OEM0 REG_EXPAND_SZ %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\AOL 9.0.lnk
    OEM1 REG_EXPAND_SZ %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\McAfee\McAfee SecurityCenter.lnk
    OEM2 REG_EXPAND_SZ %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Games\- eMachines Game Console -.lnk
     
    Pepse,
    #35
  17. 2008/11/13
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Oops ... made an error on last export. Again, I've edited the above post. Please repeat. :eek:
     
    noahdfear,
    #36
  18. 2008/11/13
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    HKEY_LOCAL_MACHINE\SYSTEM\Select
    Current REG_DWORD 0x1
    Default REG_DWORD 0x1
    Failed REG_DWORD 0x0
    LastKnownGood REG_DWORD 0x1
     
    Pepse,
    #37
  19. 2008/11/13
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    OK, here's the list of keys and values to be deleted. Recommend you first export the HKEY_LOCAL_MACHINE hive.



    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MVT.MVTControl.4300

    HKEY_LOCAL_MACHINE\SOFTWARE\McAfee

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn
    OEM1 <----- delete this value only!

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFEAVFK

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFEBOPK

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFEHIDK

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MFERKDK


    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
    {78F7355C-0D25-4D20-9402-084A73314E9A} <----- delete this value only!

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFEAVFK
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFEBOPK

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFEHIDK

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MFERKDK

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
    {78F7355C-0D25-4D20-9402-084A73314E9A} <----- delete this value only!



    You will likely be unable to remove some of the keys, particularly the Legacy keys, without first changing permissions on them. Let me know how you make out otherwise, and/or if you need specific instructions for anything.
     
    noahdfear,
    #38
  20. 2008/11/13
    Pepse

    Pepse Well-Known Member Thread Starter

    Joined:
    2002/01/08
    Messages:
    328
    Likes Received:
    1
    How do I export the key>

    Pepse.
     
    Pepse,
    #39
  21. 2008/11/13
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Click the HKEY_LOCAL_MACHINE key once to select it, then right click and select Export.
    Save in an easy to access location as;

    Filename: HKLM
    Save as type: Registration Files (*.reg)

    Note there is a box below that should be marked, showing the selected branch as HKEY_LOCAL_MACHINE
     
    noahdfear,
    #40
Page 2 of 3

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...