"This tab has been recovered" and Google Redirect viruses

a50a50 · March 16, 2013

Maybe these two conditions are being caused by the same problem, but for a week or so, my computer has been having alot of "tab recoveries." It has done that before, but in the last couple of days it has gotten much worse. I decided to try to research the problem last night. To my surprise, all links that came up were redirected elsewhere. Then, I just tried searching other things, like definitions of words, and the same thing happened.

I came to this site this morning and, based on your instructions, downloaded, updated and ran malwarebytes. It found only two registry items. I deleted them, restarted the computer, and both problems (automatic tab recovery and google redirects) happened within five minutes.

I am attaching the two DDS reports here and look forward to your advice as to the next step.

dds.txt

attach.txt

a50a50 · March 16, 2013

Sorry, I just realized that I was supposed to copy and paste the two reports. Here they are:

DDS (Ver_2012-11-20.01) - NTFS_x86

Internet Explorer: 8.0.6001.18702

BrowserJavaVersion: 10.9.2

Run by Steve at 11:36:25 on 2013-03-16

Microsoft Windows XP Home Edition

5.1.2600.3.1252.1.1033.18.2047.1310 [GMT -4:00]

.

============== Running Processes ================

.

C:\Program Files\AVG9\avgchsvx.exe

C:\Program Files\AVG9\avgrsx.exe

C:\Program Files\AVG9\avgcsrvx.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\LEXPPS.EXE

C:\Program Files\Roxio\BackOnTrack\Disaster

Recovery\SaibSVC.exe

C:\Program Files\AVG9\avgwdsvc.exe

C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE

C:\Program Files\Java\jre7\bin\jqs.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\AVG9\avgam.exe

C:\Program Files\AVG9\avgnsx.exe

C:\Program Files\AVG9\avgemc.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\AVG9\avgcsrvx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\QuickTime\qttask.exe

C:\WINDOWS\system32\RUNDLL32.EXE

K:\Program Files\Roxio 2010\Roxio

Burn\RoxioBurnLauncher.exe

C:\PROGRA~1\AVG9\avgtray.exe

C:\Program Files\Common Files\Java\Java

Update\jusched.exe

C:\Program Files\Spybot - Search &

Destroy\TeaTimer.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\WINDOWS\system32\VxBlockServer.exe

C:\Program Files\AVG9\avgcsrvx.exe

C:\WINDOWS\SoftwareDistribution\Download\40f74533

b1065d6f45b12ab01c680a17\update\update.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\system32\svchost.exe -k DcomLaunch

C:\WINDOWS\system32\svchost.exe -k rpcss

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k imgsvc

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/

BHO: AcroIEHlprObj Class:

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

c:\program files\adobe\acrobat

7.0\activex\AcroIEHelper.dll

BHO: AVG Safe Search:

{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -

c:\program files\avg9\avgssie.dll

BHO: Spybot-S&D IE Protection:

{53707962-6F74-2D53-2644-206D7942484F} -

c:\program files\spybot - search &

destroy\SDHelper.dll

BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} -

BHO: Java Plug-In SSV Helper:

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -

c:\program files\java\jre7\bin\ssv.dll

BHO: Windows Live Sign-in Helper:

{9030D464-4C02-4ABF-8ECC-5164760863C6} -

c:\program files\common files\microsoft

shared\windows live\WindowsLiveLogin.dll

BHO: Java Plug-In 2 SSV Helper:

{DBC80044-A445-435b-BC74-9C25C1C588A9} -

c:\program files\java\jre7\bin\jp2ssv.dll

EB: {32683183-48a0-441b-a342-7c2a440a9478} -

uRun: [spybotSD TeaTimer] c:\program files\spybot

- search & destroy\TeaTimer.exe

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [DAEMON Tools] "c:\program files\daemon

tools\daemon.exe" -lang 1033 -noicon

uRun: [Adobe] rundll32 "c:\documents and

settings\steve\local settings\application

data\apple

computer\adobe\kmxhaf.dll",NVDisplayCoInstallW

uRun: [Nova Development] rundll32 "c:\documents

and settings\steve\local settings\application

data\capcom\nova

development\oknomw.dll",DiagnosisW

uRun: [GNU] RUNDLL32.EXE "c:\documents and

settings\steve\local settings\application

data\gnu\nupvakpm.dll",DllGetClassObject

mRun: [NvCplDaemon] RUNDLL32.EXE

c:\windows\system32\NvCpl.dll,NvStartup

mRun: [RTHDCPL] RTHDCPL.EXE

mRun: [RoxWatchTray] "c:\program files\common

files\roxio

shared\12.0\sharedcom\RoxWatchTray12.exe"

mRun: [QuickTime Task] "c:\program

files\quicktime\qttask.exe" -atboottime

mRun: [nwiz] nwiz.exe /install

mRun: [NvMediaCenter] RUNDLL32.EXE

c:\windows\system32\NvMcTray.dll,NvTaskbarInit

mRun: [Desktop Disc Tool] "k:\program files\roxio

2010\roxio burn\RoxioBurnLauncher.exe"

mRun: [AdobeCS4ServiceManager] "c:\program

files\common

files\adobe\cs4servicemanager\CS4ServiceManager.e

xe" -launchedbylogin

mRun: [AVG9_TRAY] c:\progra~1\avg9\avgtray.exe

mRun: [sunJavaUpdateSched] "c:\program

files\common files\java\java update\jusched.exe"

dRun: [Adobe] rundll32 "c:\documents and

settings\steve\local settings\application

data\apple

computer\adobe\kmxhaf.dll",NVDisplayCoInstallW

dRun: [Nova Development] rundll32 "c:\documents

and settings\steve\local settings\application

data\capcom\nova

development\oknomw.dll",DiagnosisW

uPolicies-Explorer: NoDriveTypeAutoRun =

dword:323

uPolicies-Explorer: NoDriveAutoRun =

dword:67108863

uPolicies-Explorer: NoDrives = dword:0

mPolicies-Explorer: NoDriveAutoRun =

dword:67108863

mPolicies-Explorer: NoDriveTypeAutoRun =

dword:323

mPolicies-Explorer: NoDrives = dword:0

mPolicies-Windows\System:

Allow-LogonScript-NetbiosDisabled = dword:1

mPolicies-Explorer: NoDriveTypeAutoRun =

dword:323

mPolicies-Explorer: NoDriveAutoRun =

dword:67108863

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -

{53707962-6F74-2D53-2644-206D7942484F} -

c:\program files\spybot - search &

destroy\SDHelper.dll

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} -

%windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} -

c:\program files\messenger\msmsgs.exe

.

INFO: HKCU has more than 50 listed domains.

If you wish to scan all of them, select the

'Force scan all domains' option.

.

INFO: HKLM has more than 50 listed domains.

If you wish to scan all of them, select the

'Force scan all domains' option.

.

DPF: DirectAnimation Java Classes -

file://c:\windows\java\classes\dajava.cab

DPF: Microsoft XML Parser for Java -

file://c:\windows\java\classes\xmldso.cab

DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} -

hxxp://www.apple.com/qtactivex/qtplugin.cab

DPF: {17492023-C23A-453E-A040-C7C580BBF700} -

hxxp://go.microsoft.com/fwlink/?linkid=39204

DPF: {33564D57-9980-0010-8000-00AA00389B71} -

hxxp://download.microsoft.com/download/D/0/D/D0DD

87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} -

hxxp://download.eset.com/special/eos/OnlineScanne

r.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} -

hxxp://fpdownload.macromedia.com/get/flashplayer/

current/polarbear/ultrashim.cab

Handler: linkscanner -

{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -

c:\program files\avg9\avgpp.dll

Notify: avgrsstarter - avgrsstx.dll

SSODL: WPDShServiceObj -

{AAA288BA-9A4C-45B0-95D7-94D524869DB5} -

c:\windows\system32\WPDShServiceObj.dll

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and

settings\steve\application

data\mozilla\firefox\profiles\q7of971q.default\

FF - prefs.js: network.proxy.type - 0

FF - plugin: c:\documents and

settings\steve\local settings\application

data\unity\webplayer\loader\npUnity3D32.dll

FF - plugin: c:\program

files\java\jre7\bin\plugin2\npjp2.dll

FF - plugin:

c:\windows\system32\macromed\flash\NPSWF32_11_6_6

02_168.dll

FF - plugin:

c:\windows\system32\npDeployJava1.dll

FF - plugin: c:\windows\system32\npptools.dll

FF - plugin: c:\windows\system32\npwmsdrm.dll

FF - plugin: k:\program files\mozilla

firefox\plugins\npCouponPrinter.dll

FF - plugin: k:\program files\mozilla

firefox\plugins\npMozCouponPrinter.dll

.

============= SERVICES / DRIVERS ===============

.

R0

AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers

\avgrkx86.sys [2009-10-23 52872]

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys

[2010-7-23 64288]

R0 SahdIa32;HDD Filter

Driver;c:\windows\system32\drivers\SahdIa32.sys

[2010-6-30 21488]

R0 SaibIa32;Volume Filter

Driver;c:\windows\system32\drivers\SaibIa32.sys

[2010-6-30 15856]

R1 AvgLdx86;AVG Free AVI Loader Driver

x86;c:\windows\system32\drivers\avgldx86.sys

[2009-1-4 226016]

R1 AvgMfx86;AVG Free On-access Scanner Minifilter

Driver

x86;c:\windows\system32\drivers\avgmfx86.sys

[2007-5-13 29712]

R1 AvgTdiX;AVG Free8 Network

Redirector;c:\windows\system32\drivers\avgtdix.sy

s [2009-1-4 243152]

R1

c2scsi;c2scsi;c:\windows\system32\drivers\c2scsi.

sys [2008-4-27 244736]

R1 SaibVd32;Virtual Disk

Driver;c:\windows\system32\drivers\SaibVd32.sys

[2010-6-30 25584]

R2 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269;Roxio

SAIB Service;c:\program

files\roxio\backontrack\disaster

recovery\SaibSVC.exe [2009-6-2 457200]

R2

acedrv11;acedrv11;c:\windows\system32\drivers\ACE

DRV11.sys [2008-1-23 501560]

R2 avg9emc;AVG E-mail Scanner;c:\program

files\avg9\avgemc.exe [2010-6-21 921952]

R2 avg9wd;AVG WatchDog;c:\program

files\avg9\avgwdsvc.exe [2010-6-21 308136]

S0 oqovp;oqovp; [x]

S0

Winda43;Winda43;c:\windows\system32\drivers\winda

43.sys -->

c:\windows\system32\drivers\Winda43.sys [?]

S1 MpKsla8ba781a;MpKsla8ba781a;\??\c:\program

files\windows live safety

center\mpksla8ba781a.sys --> c:\program

files\windows live safety

center\MpKsla8ba781a.sys [?]

S1 MpKslbe4c5fe5;MpKslbe4c5fe5;\??\c:\program

files\windows live safety

center\mpkslbe4c5fe5.sys --> c:\program

files\windows live safety

center\MpKslbe4c5fe5.sys [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET

Framework NGEN

v4.0.30319_X86;c:\windows\microsoft.net\framework

\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 RoxLiveShare10;LiveShare P2P Server

10;"c:\program files\common files\roxio

shared\10.0\sharedcom\roxliveshare10.exe" -->

c:\program files\common files\roxio

shared\10.0\sharedcom\RoxLiveShare10.exe [?]

S2 RoxWatch12;Roxio Hard Drive Watcher

12;c:\program files\common files\roxio

shared\12.0\sharedcom\RoxWatch12.exe [2009-7-24

219632]

S2

SessionLauncher;SessionLauncher;c:\docume~1\steve

\locals~1\temp\dx9\sessionlauncher.exe -->

c:\docume~1\steve\locals~1\temp\dx9\SessionLaunch

er.exe [?]

S3 BRDriver;BRDriver;c:\documents and

settings\all users\application

data\bitraider\BRDriver.sys [2013-3-14 63784]

S3 BRSptSvc;BitRaider Mini-Support

Service;c:\documents and settings\all

users\application data\bitraider\BRSptSvc.exe

[2013-3-7 1134872]

S3 RoxMediaDB12;RoxMediaDB12;c:\program

files\common files\roxio

shared\12.0\sharedcom\RoxMediaDB12.exe [2009-7-24

1116656]

S3 WPFFontCache_v0400;Windows Presentation

Foundation Font Cache

4.0.0.0;c:\windows\microsoft.net\framework\v4.0.3

0319\wpf\WPFFontCache_v0400.exe [2010-3-18

753504]

S4 CinemaNow Service;CinemaNow Service;c:\program

files\cinemanow\cinemanow media

manager\CinemaNowSvc.exe [2009-6-23 127352]

.

=============== File Associations ===============

.

ShellExec: Graffiti5 Keyframer.exe:

open=c:\program files\boris fx, inc.\boris

graffiti 5.2\Graffiti5 Keyframer.exe

ShellExec: regsvr32.exe: RegDLL=regsvr32 %1

ShellExec: regsvr32.exe: UnRegDLL=regsvr32 /u %1

.

=============== Created Last 30 ================

.

2013-03-15 05:18:23 -------- d-----w-

c:\documents and settings\steve\local

settings\application data\GNU

2013-03-07 21:52:24 -------- d-----w-

c:\documents and settings\all users\application

data\bitraider

.

==================== Find3M ====================

.

2013-02-17 20:14:54 71024 ----a-w-

c:\windows\system32\FlashPlayerCPLApp.cpl

2013-02-17 20:14:54 691568 ----a-w-

c:\windows\system32\FlashPlayerApp.exe

2013-02-08 04:25:11 1409 ----a-w-

c:\windows\QTFont.for

2013-01-16 01:35:28 226016 ----a-w-

c:\windows\system32\drivers\avgldx86.sys

.

=================== ROOTKIT ====================

.

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector

0.4.2 by Gmer, http://www.gmer.net

Windows 5.1.2600 Disk: WDC_WD2500KS-00MJB0

rev.02.01C03 -> Harddisk0\DR0 ->

\Device\Ide\IdeDeviceP2T0L0-f

.

device: opened successfully

user: MBR read successfully

.

Disk trace:

called modules: ntoskrnl.exe CLASSPNP.SYS

disk.sys SahdIa32.sys >>UNKNOWN [0x8A0BD4B1]<<

c:\windows\system32\drivers\SahdIa32.sys Sonic

Solutions

_asm { PUSH EBP; MOV EBP, ESP; PUSH ECX; MOV EAX,

[EBP+0x8]; CMP EAX, [0x8a0c493c]; MOV EAX,

[0x8a0c4ab0]; PUSH EBX; PUSH ESI; MOV ESI,

[EBP+0xc]; MOV EBX, [ESI+0x60]; PUSH EDI; JNZ

0x20; MOV [EBP+0x8], EAX; }

1 nt!IofCallDriver[0x804E13B9] ->

\Device\Harddisk0\DR0[0x8A6CBAB8]

3 CLASSPNP[0xF7657FD7] ->

nt!IofCallDriver[0x804E13B9] -> [0x8A6CCBB0]

5 SahdIa32[0xF7688939] ->

nt!IofCallDriver[0x804E13B9] -> [0x8A6E2B00]

\Driver\atapi[0x8A316168] -> IRP_MJ_CREATE ->

0x8A0BD4B1

error: Read A device attached to the system is

not functioning.

kernel: MBR read successfully

_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00;

STI ; PUSH AX; POP ES; PUSH AX; POP DS; CLD ; MOV

SI, 0x7c1b; MOV DI, 0x61b; PUSH AX; PUSH DI; MOV

CX, 0x1e5; REP MOVSB ; RETF ; MOV BP, 0x7be; MOV

CL, 0x4; CMP [bP+0x0], CH; JL 0x2e; JNZ 0x3a; }

detected disk devices:

detected hooks:

\Driver\atapi DriverStartIo -> 0x8A0BD2E2

user & kernel MBR OK

Warning: possible TDL3 rootkit infection !

.

============= FINISH: 11:38:02.85 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS

LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows XP Home Edition

Boot Device: \Device\HarddiskVolume1

Install Date: 1/4/2009 6:49:47 PM

System Uptime: 3/16/2013 11:25:43 AM (0 hours

ago)

.

Motherboard: ASUSTeK Computer INC. | |

P5LD2-Deluxe

Processor: Intel® Pentium® D

CPU 3.20GHz | Socket 775 | 3211/200mhz

.

==== Disk Partitions =========================

.

A: is Removable

C: is FIXED (NTFS) - 233 GiB total, 7.932 GiB

free.

D: is CDROM ()

E: is CDROM ()

G: is Removable

H: is Removable

I: is CDROM ()

J: is CDROM ()

K: is FIXED (NTFS) - 465 GiB total, 6.406 GiB

free.

L: is FIXED (NTFS) - 187 GiB total, 6.851 GiB

free.

M: is FIXED (NTFS) - 280 GiB total, 0.309 GiB

free.

N: is FIXED (NTFS) - 488 GiB total, 1.86 GiB

free.

O: is FIXED (NTFS) - 443 GiB total, 58.548 GiB

free.

.

==== Disabled Device Manager Items =============

.

Class GUID:

{4D36E96C-E325-11CE-BFC1-08002BE10318}

Description:

Device ID: ROOT\MEDIA\0000

Manufacturer:

Name:

PNP Device ID: ROOT\MEDIA\0000

Service:

.

==== System Restore Points ===================

.

RP59: 3/15/2013 9:41:46 PM - System Checkpoint

RP60: 3/16/2013 11:23:22 AM - Software

Distribution Service 3.0

.

==== Installed Programs ======================

.

010 Editor 3.0.2

3D Ripper DX v1.8.1

3DS Max DDS Plug-In

7-Zip 9.22beta

AAC Decoder

Adobe AIR

Adobe Anchor Service CS4

Adobe Bridge CS4

Adobe CMaps CS4

Adobe Color - Photoshop Specific CS4

Adobe Color EU Extra Settings CS4

Adobe Color JA Extra Settings CS4

Adobe Color NA Recommended Settings CS4

Adobe Color Video Profiles CS CS4

Adobe CS4 American English Speech Analysis Models

Adobe CSI CS4

Adobe Default Language CS4

Adobe Device Central CS4

Adobe Drive CS4

Adobe Dynamiclink Support

Adobe Encore CS4

Adobe Encore CS4 Codecs

Adobe ExtendScript Toolkit CS4

Adobe Extension Manager CS4

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Fonts All

Adobe Linguistics CS4

Adobe Media Encoder CS4

Adobe Media Encoder CS4 Additional Exporter

Adobe Media Encoder CS4 Dolby

Adobe Media Encoder CS4 Exporter

Adobe Media Encoder CS4 Importer

Adobe Media Player

Adobe OnLocation CS4

Adobe Output Module

Adobe PDF Library Files CS4

Adobe Photoshop CS4

Adobe Photoshop CS4 Support

Adobe Premiere Pro CS4

Adobe Premiere Pro CS4 Functional Content

Adobe Premiere Pro CS4 Third Party Content

Adobe Reader 7.0

Adobe Search for Help

Adobe Service Manager Extension

Adobe Setup

Adobe SVG Viewer 3.0

Adobe Type Support CS4

Adobe Update Manager CS4

Adobe WinSoft Linguistics Plugin

Adobe XMP Panels CS4

AdobeColorCommonSetRGB

Anno 1404

AnswerWorks Runtime

AT&T Natural Voices Charles v. 1.4

AT&T Natural Voices Mel v. 1.4

AT&T Natural Voices Mike v. 1.4

audioGnome

audioGnome Active Installer

AutoUpdate

AV Voice Changer Software DIAMOND 7.0

AVG 9.0

Baldur's Gate II - Shadows of Amn

BCL easyConverter SDK 1.0.0 Module

Bejeweled 3

Better Homes and Gardens Landscaping and Deck

Designer 7.0

BitRaider Web Client

Black & White® 2

Blaine's Custom Dreamy Look Title

Boris Graffiti

C-Dilla Licence Management System

CamStudio OSS Desktop Recorder

Camtasia Studio 7

Catan - The Computer Game

CD Audio Reader Filter (remove only)

CinemaNow Media Manager

Cities In Motion

City Life Deluxe

CivCity

Civilization: Call To Power DVD

Clash of Civilizations

CleanMem

Connect

Coupon Printer for Windows

Data Lifeguard Diagnostic for Windows 1.21

Data Lifeguard Tools

DirectVobSub 2.41.5005

DirectX 9 Runtime

DirectXInstallService

DivX Codec

DivX Converter

DivX Player

DivX Plus DirectShow Filters

DivX Version Checker

DivX Web Player

DScaler 5 Mpeg Decoders

Dungeon Keeper 2

Easy MP3 Downloader

EMC 10 Content

Emperor - RotMK Bonus Campaign

Emperor: Rise of the Middle Kingdom 1.0.1.0

Empire Earth II

Empire Earth III

ESET Online Scanner v3

EVGA Display Driver

Family Tree Maker 2008

ffdshow [rev 2527] [2008-12-19]

Flip Words 2

FormTool 6

Gadwin PrintScreen

Game Extractor 2.0

gBurner

GetFLV Pro 8.9.7.3

GIMP 2.6.8

GOM Player

H.264 Decoder

Hallmark Card Studio 2007 Deluxe

Hallmark Card Studio 2009

Heroes of Annihilated Empires

Heroes of Might and Magic V - Tribes of the East

Heroes of Might and Magic V Collector Edition

Hotfix for Microsoft .NET Framework 3.5 SP1

(KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1

(KB958484)

Hotfix for Windows XP (KB2443685)

Hotfix for Windows XP (KB2570791)

Hotfix for Windows XP (KB2633952)

Hotfix for Windows XP (KB2756822)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB961118)

Hotfix for Windows XP (KB970653-v3)

Hotfix for Windows XP (KB976098-v2)

Hotfix for Windows XP (KB979306)

Hotfix for Windows XP (KB981793)

Hoyle Card Games

Icewind Dale II

ImgBurn

IrfanView (remove only)

Java 7 Update 9

Java Auto Updater

Java 6 Update 17

JavaFX 2.1.1

K-Lite Codec Pack 2.89 Full

kuler

Lexmark Photo Center

Lexmark Z700-P700 Series

Magic Bullet Looks Studio

Magic ISO Maker v5.4 (build 0239)

Magic The Gathering - Duels of the Planeswalkers

2012

Magic The Gathering - Duels of the Planeswalkers

2013

Magic Workstation 0.94f

Malwarebytes Anti-Malware version 1.70.0.1100

Marvel Ultimate Alliance - Forge Mod

Marvel Vs

Marvel - Ultimate Alliance

Marvell Miniport Driver

Media Player Codec Pack 3.3.1

MediaMonkey 3.2

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Security Update

(KB2656353)

Microsoft .NET Framework 1.1 Security Update

(KB2656370)

Microsoft .NET Framework 1.1 Security Update

(KB979906)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Choice Guard

Microsoft Games for Windows - LIVE

Redistributable

Microsoft IntelliPoint 6.2

Microsoft Kernel-Mode Driver Framework Feature

Pack 1.5

Microsoft Mathematics

Microsoft Money 2006

Microsoft National Language Support Downlevel

APIs

Microsoft Office 2000 Professional

Microsoft Primary Interoperability Assemblies

2005

Microsoft Text-to-Speech Engine 4.0 (English)

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 ATL Update kb973924 -

x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable -

KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86

9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86

9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable -

10.0.30319

Microsoft WSE 3.0

Microsoft WSE 3.0 Runtime

MilkShape 3D 1.8.4

MKV Splitter

MONOGRAM AMR Splitter/Decoder (remove only)

Mozilla Firefox 5.0 (x86 en-US)

MSVCRT

MSXML 4.0 SP2 (KB927978)

MSXML 4.0 SP2 (KB936181)

MSXML 4.0 SP2 (KB973688)

MSXML 6.0 Parser (KB933579)

MSXML4 Parser

MTG GamePack for Magic Workstation

MySims™

Neverwinter Nights

NextUp.com-NeoSpeech Paul16 Voice

NVIDIA Drivers

NVIDIA Photoshop Plug-ins

NVIDIA PhysX

Oblivion

OpenAL

OpenSource DTS/AC3/DD+ Source Filter (remove

only)

OpenSource Flash Video Splitter (remove only)

OpenTTD 1.0.3

PC Probe II

PDF Settings CS4

Photoshop Camera Raw

Pinnacle Studio 12

Pinnacle Studio 12 Ultimate Plugins

Pinnacle Video Driver

PowerISO

Prison Tycoon 3

proDAD Vitascene 1.0

ProtectDisc Driver, Version 11

QuickTime

RamBooster

RCT3 Soaked

Realtek High Definition Audio Driver

Realtime Landscaping Architect 2

Reel Deal Card Games

ResumeMaker Professional

Revo Uninstaller 1.92

RGS-CardMaster v6.1.3

Rise of Nations

RollerCoaster Tycoon® 3

Roxio Activation Module

Roxio BackOnTrack

Roxio Burn

Roxio Burn Manager

Roxio Burn Manager CDB

Roxio CinePlayer

Roxio CinePlayer Decoder Pack

Roxio Creator 2010 Pro

Roxio Disaster Recovery

Roxio File Backup

Roxio PhotoShow

Roxio Venue

Roxio Video Capture USB

ScriptVOX Studio

Security Update for Microsoft .NET Framework 3.5

SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5

SP1 (KB2657424)

Security Update for Microsoft .NET Framework 3.5

SP1 (KB2736416)