Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Cannot delete Registry entry

11 Jul 2013   #41
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Run another scan with FRST


64-Bit Version OS Farbar Recovery Scan Tool x64 <===== Download Link

Drag the FRST64.exe from the Downloads folder to your Desktop

Right click on FRST64.exe and choose

When the tool opens click Yes on the disclaimer window .

Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file

Note   Note
The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt


Please upload both logs in your reply.(FRST.txt and Addition.txt)

FRST.txt and Addition.txt will be on the Desktop

Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .


My System SpecsSystem Spec
.
12 Jul 2013   #42
parhamjl

Windows 7 ultimate 64 Service Pack 1
 
 

Addition.txt and FRST.txt from Farbar included.


Attached Files
File Type: txt Addition.txt (39.2 KB, 2 views)
File Type: txt FRST.txt (82.0 KB, 3 views)
My System SpecsSystem Spec
12 Jul 2013   #43
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Open up Notepad . Paste the highlighted text into notepad


start
() C:\Program Files (x86)\Everything\Everything.exe
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll [X]
MountPoints2: {abcd23e1-4bf3-11df-9200-a4badbf9ed02} - H:\LaunchU3.exe -a
HKLM-x32\...\Run: [Virtual Account Numbers] - C:\PROGRA~2\VIRTUA~1\CitiVAN.exe /lang=en_RG /dontopenmycards [398336 2013-03-04] (Orbiscom Ltd. All rights reserved.)
HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)
HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)
HKU\Guest\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)
HKU\HomeGroupUser$\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation)
HKU\Lynn Standard Accoun\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [39408 2010-10-26] (Google Inc.)
Startup: C:\ProgramData\Start Menu\Programs\Startup\Constant Guard.lnk
ShortcutTarget: Constant Guard.lnk -> C:\Program Files (x86)\Constant Guard Protection Suite\IDVault.exe (No File)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coIEPlg.dll (Symantec Corporation)
CHR DefaultSearchURL: (SecureSearch) - http://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_1&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
CHR DefaultSuggestURL: (SecureSearch) - "suggest_url": ""
C:\ec893aea03bddf72e311869621
C:\Users\Lynn\AppData\Local\{D7C4A414-607E-4795-B3D0-A01E2F0EA11D}
C:\ProgramData\Syscon
C:\Windows\Tasks\SA.DAT
C:\Windows\BRWMARK.INI
C:\Users\Lynn\AppData\Roaming\1O1L1I1PtF1F1C1N
end


Click on File .... Save As
FIle Name : Fixlist.txt
Save as type : All Files
Location : Desktop

Open FRST64.exe again and click on the [FIX] button . Once complete it will create a new file called FixLog.txt upload the log with your reply

Then run

TDSSKILLER

download link TDSSKiller

Right-click the program and select: Extract to tdsskiller\


A TDSSKiller folder is found on your Desktop.
Open the folder, and double-click the TDSSKiller application.


When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK


Press: Start Scan


If a suspicious object is detected, the default action is Skip, leave it as is, and click on: Continue
If malicious objects are found, they show in the Scan results.
Ensure Cure (the default) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)


When done, the tool outputs its log to the disk with the Windows Operating System, normally C:\


Logs have a name like:
C:\TDSSKiller.X.X.X_12.04.2013_15.31.43_log.txt


Please post the TDSSKiller log in your reply.
My System SpecsSystem Spec
.

12 Jul 2013   #44
parhamjl

Windows 7 ultimate 64 Service Pack 1
 
 

Files included. TDSSKiller apparently did not find any problem.


Attached Files
File Type: txt TDSSKiller.2.8.18.0_12.07.2013_12.27.14_log.txt (153.8 KB, 2 views)
File Type: txt Fixlog.txt (2.3 KB, 3 views)
My System SpecsSystem Spec
12 Jul 2013   #45
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Lets see what an online scanner locates

On
Hold down Control and click on ESET Online Scanner to open ESET OnlineScan in a new window
Click the button
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
Scan potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

On or
Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
Right click on choose on your desktop
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
Scan potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.
My System SpecsSystem Spec
12 Jul 2013   #46
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Start Google Chrome, click on 3 bar button icon in the top right corner.
Choose ‘Settings’ > ‘Search’ > ‘Manage Search Engines’.
Next select your preferred search engine and click on ‘Make Default’.


Remove any Securesearch.lavasoft.com

Do the same for extensions tab

Restart browser after completion.
My System SpecsSystem Spec
13 Jul 2013   #47
parhamjl

Windows 7 ultimate 64 Service Pack 1
 
 

ESETScan.txt enclosed. Took nearly 9 hours, partly because of the large Windows Backup and Computer Image files on Drive D where I keep most of my backups and non-system data. Not surprising they contained several malware files because the backups were from earlier versions of the computer. They are apparently now cleaned, but are expendable if needed for safety.

The Esetsmart scan, again almost 9 hours, did not find any problems.

Loaded Chrome and removed reference to Securesearch.lavasoft.com


Attached Files
File Type: txt ESETScan.txt (3.9 KB, 2 views)
My System SpecsSystem Spec
13 Jul 2013   #48
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Any issues ?
My System SpecsSystem Spec
13 Jul 2013   #49
parhamjl

Windows 7 ultimate 64 Service Pack 1
 
 

No issues that are apparent. My computer seems to be clean. I really appreciate your help.
My System SpecsSystem Spec
13 Jul 2013   #50
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

I'd delete the old System Restore and create a new one

To delete : System Protection Restore Points - Delete

To Create a new one : System Restore Point - Create
My System SpecsSystem Spec
Reply

 Cannot delete Registry entry




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Can you copy a WinXP Pro registry entry into Win 7 registry
Hello, Background: 1. I have a program I use always, I have the install disks and can install it on Win 7 Pro x64. It is a 32 bit program. However, this program had a critical patch issued as a download way back when and this patch cannot be installed on the 7 system, because the installer is...
General Discussion
An entry in registry missing
I want gain an access to com ports and require changed in registry entry of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\PNP0501 but it seems the folder is not there. I have tried regcleaner and reg fix did not help. thanks
Drivers
Default program registry entry
Hi. We are installing OpenOffice on several hundred computers and we want to set it as the default program for .doc, .docx, .ppt, .pptx, etc. files. Where is this information stored in the registry so we can push out the registry changes via a logon script? Thanks!
Software
Registry Entry to delete specific User Profile entries
I work for a University as a Lab Manager where we have over 300 computers running Domain Profiles. We have begun updating from XP to 7 and started to notice TEMP profiles being created. I have figured out how to resolve the issue by going to the registry ...
General Discussion
Unable to delete empty registry entry
I ran Auslogics Registry Cleaner, and it found many errors, and deleted all but one of the registry entries. I ran it a few more times, and it was still unable to delete it. So, I went into the registry and tried to manually delete it. Regedit tells me that it is "Unable to delete all specific...
General Discussion
What is the strange registry entry and how can I delete it?
I have the following registry key that appears to do nothing but keeps re-creating itself: HKEY_CURRENT_USER\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon This key contains a Shell value that points to an empty directory on my system: C:\Users\Birk\AppData\Local\bc53345c\X If I...
Software


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:10.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App