I had a client contact me at dinner time yesterday in near hysterics. The desktop of her Windows 7 computer had been overtaken by white screen popups that covered everything and she was working on some very high priority projects and a tight deadline.
I managed to remote into her computer and look at it.
The culprit identified itself as “Amazon Assistant” and a legitimate looking Amazon icon was pinned to the taskbar and associated with an open application. Large white windows were repeatedly popping up and covering all other applications. Closing one only spawned another in a few seconds.
This is not a virus. It is not technically malware. It is a HIJACKER. It takes over your desktop like so many other hijackers that want you to dial a toll-free number for “Microsoft”, “Windows”, “Dell” or some other “brand” support – all of which are bogus.
Looking through the Uninstall Programs list I found Amazon Assistant had been installed January 16 [3 weeks ago]. It could not be uninstalled.
Locating the directory for aa.hta [almost never a legit file extension to find on a PC] proved to be in Program Files[x86]/Amazon/Amazon Assistant
The files in this directory are:
- aa.hta
- aaLoader.dll
- aaMessenger.dll
- amazonAssistantService.exe
There is no way to delete them in normal mode. [not really a surprise. You cannot delete files that are running in memory or locked]
This file is a HIJACKER. AVG identifies it as IDP.Generic
The ONLY way to remove it is to:
- Reboot in SAFE MODE
- Go to Program Files[x86]/Amazon/ and delete the entire Amazon Assistant directory.
- If you’re comfortable editing the registry and have done it thousands of times like I have, run regedit and search for “Amazon”. Delete every ROOT key pertaining to Amazon Assistant.
- in normal mode.
- Go to Control Panel and Programs – Uninstall Amazon Assistant.
- Update AVG [now Avast] and configure it to correctly:
- scan ALL FILES
- Scan for potentially unwanted programs
- Scan archives
- Basically check off every single option for a Deep Scan
- and run a full scan [now Deep Scan].
In searching the web for aa.hta I found 3 questions and responses on the AVG help forums. All the responses were useless. Unfortunately this is typical and goes right along with my experience selling AVG since about 2006 or so. AVG has always made a great product, but their support is absolutely the worst in the industry. They know this. I have spoken to them about it numerous times.
I am personally responsible for selling, installing and configuring over 4,000 AVG products since about 2006. I know what I am doing and have written several blogs on properly configuring both Norton and AVG products for optimal protection. I have removed hundreds of thousands [may actually be millions by now] malware infections over the years.
It would be refreshing to see some actually helpful support from AVG for once.
I have to say I absolutely HATE the new AVG / Avast interface. It is very unfriendly, difficult to configure and it CHANGES SETTINGS THAT I HAVE INTENTIONALLY CONFIGURED FOR OPTIMAL PROTECTION.
Hello. This is Indrek's mom. Sadly he passed away yesterday at 4 PM. He wanted to get his computer fixed. He said there was some type of virus? He drove to his friends house and wanted to ask for help, sadly his drive ended shortly... the police found an open beer container in his car. The investigation said he was on his phone and rammed into a semi-truck. We found this website opened on his laptop that somehow wasn't even touched after the accident. If u can close this topic we would appreciate it very.
Recently my Chrome has been acting odd. It will freeze and stop responding occasionally and I will have to use the Task Manager to close it. After that, Chrome will not open, and I would be forced to restart my computer if I wanted to reopen Chrome. I was mostly fine with that but then the other day a completely blank tab kept opening titled C:\Program Files [x86]\Amazon\Amazon Assisstant\aa.hta the tab will open every few seconds, regardless if it is already open. I downloaded and ran Malwarebytes, and Malwarebytes detected around 50 objects, which I quarantined and then deleted. However, the issue with the C:\Program Files [x86]\Amazon\Amazon Assisstant\aa.hta remained. I ran Malwarebytes again and Malwarebytes told me I have no viruses. Does somebody know what I should do here?
Heather [S-1-5-21-1820616416-2687940189-4037331366-1000 - Administrator - Enabled] => C:\Users\Heather
HomeGroupUser$ [S-1-5-21-1820616416-2687940189-4037331366-1002 - Limited - Enabled]
\==================== Security Center ========================
[If an entry is included in the fixlist, it will be removed.]
AV: Avast Antivirus [Enabled - Up to date] {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender [Disabled - Up to date] {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender [Disabled - Up to date] {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus [Enabled - Up to date] {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
\==================== Installed Programs ======================
[Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.]
64 Bit HP CIO Components Installer [HKLM\...\{BE930E38-7BB3-45B6-85B2-5251F374F844}] [Version: 6.2.2 - Hewlett-Packard] Hidden
8500A909_eDocs [HKLM-x32\...\{B318D3D1-3421-4E2A-9C63-5D8FC2457B9C}] [Version: 1.00.0000 - Hewlett-Packard] Hidden
8500A909_Help [HKLM-x32\...\{69754D89-C21E-4851-83C0-399DE63C6579}] [Version: 1.00.0000 - Hewlett-Packard] Hidden
8500A909n [HKLM-x32\...\{3CC19F30-6722-432D-8D76-81BD01212586}] [Version: 140.0.000.000 - Hewlett-Packard] Hidden
ActivID ActivClient x64 [HKLM\...\{BCE4067B-9B40-4316-9235-6A1EEAD55622}] [Version: 7.1.0 - HID Global Corporation]
Adobe Digital Editions 4.0 [HKLM-x32\...\Adobe Digital Editions 4.0] [Version: 4.0.3 - Adobe Systems Incorporated]
Adobe Flash Player 26 NPAPI [HKLM-x32\...\Adobe Flash Player NPAPI] [Version: 26.0.0.131 - Adobe Systems Incorporated]
Adobe Reader XI [11.0.20] MUI [HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}] [Version: 11.0.20 - Adobe Systems Incorporated]
Amazon Assistant [HKLM-x32\...\{3BBC4F87-1F46-431F-A5DB-AFB28F692775}] [Version: 10.17.0612 - Amazon] {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files [x86]\Google\Drive\googledrivesync64.dll [2017-03-21] [Google]
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files [x86]\Google\Drive\googledrivesync64.dll [2017-03-21] [Google]
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files [x86]\Google\Drive\googledrivesync64.dll [2017-03-21] [Google]
ShellIconOverlayIdentifiers: [ SkyDrivePro1 [ErrorConflict]] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-03-14] [Microsoft Corporation]
ShellIconOverlayIdentifiers: [ SkyDrivePro2 [SyncInProgress]] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-03-14] [Microsoft Corporation]
ShellIconOverlayIdentifiers: [ SkyDrivePro3 [InSync]] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-03-14] [Microsoft Corporation]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-25] [AVAST Software]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-25] [AVAST Software]
ContextMenuHandlers01: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files [x86]\IObit\Advanced SystemCare 8\ASCExtMenu_64.dll -> No File
ContextMenuHandlers01: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-25] [AVAST Software]
ContextMenuHandlers01: [CtxMenu Class] -> {AC964C74-B3A6-4514-A10C-E264F90FC403} => -> No File
ContextMenuHandlers01: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files [x86]\Google\Drive\contextmenu64.dll [2017-03-21] [Google]
ContextMenuHandlers01: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files [x86]\IObit\IObit Uninstaller\UninstallMenuRight64.dll -> No File
ContextMenuHandlers02: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files [x86]\IObit\Advanced SystemCare 8\ASCExtMenu_64.dll -> No File
ContextMenuHandlers03: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-25] [AVAST Software]
ContextMenuHandlers04: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files [x86]\IObit\Advanced SystemCare 8\ASCExtMenu_64.dll -> No File
ContextMenuHandlers04: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files [x86]\Google\Drive\contextmenu64.dll [2017-03-21] [Google]
ContextMenuHandlers04: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files [x86]\IObit\IObit Uninstaller\UninstallMenuRight64.dll -> No File
ContextMenuHandlers05: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers05: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers05: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-12-02] [Intel Corporation]
ContextMenuHandlers06: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-25] [AVAST Software]
ContextMenuHandlers06: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files [x86]\IObit\IObit Uninstaller\UninstallMenuRight64.dll -> No File
\==================== Scheduled Tasks [Whitelisted] =============
[If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.]
Task: {032EE9E1-AA97-4B81-AB8A-29024D0D8DFB} - System32\Tasks\HPCeeScheduleForHeather => C:\Program Files [x86]\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-01-22] [Hewlett-Packard]
Task: {0B028671-4A5B-45AC-8673-E698D6218385} - System32\Tasks\DistromaticSearchProtect-logon => C:\Program Files [x86]\Amazon Browser Settings\AmznSearchProtect.exe [2016-07-26] [Distromatic] C:\WINDOWS\ehome\mcupdate.exe
Task: {1383D633-8CB1-4CAF-9214-2571ABF7BB3F} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1986DBAB-CFF9-466B-9993-F9ED71855B01} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-05-12] [AVAST Software]
Task: {1A12B96B-0CEB-4FC0-B33A-95EFBEDF7C78} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1A94F5AA-32F2-4BBB-9907-40418F5A7A2F} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] [Microsoft Corporation]
Task: {1E64C0F0-5AD4-45FE-B89E-67EFD3CFE46E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File C:\windows\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {21E9F172-2CAE-43ED-80A5-A3720369F404} - System32\Tasks\{6EC419E6-A19A-46C9-B591-F14696C273E2} => pcalua.exe -a C:\Users\Heather\AppData\Local\Temp\Temp1_InstallRoot_v3.16a.zip\InstallRoot_v3.16A.exe C:\Program Files [x86]\ColorPage-SF600\DigiScan.exe
Task: {2C853E53-F264-4AAC-8087-827BB9182527} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] [Microsoft Corporation]
Task: {2E0890DA-26F5-4B6E-8988-C5C7B416B089} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2EC391FB-406D-464F-B71A-D9423413A25D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File C:\Program Files [x86]\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] [HP Inc.]
Task: {3307D2EA-84E9-4A13-B5DB-8E15D993EEBA} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {33A1E619-576F-4B67-AA51-88549FF80EEE} - System32\Tasks\{3B98D546-C6F6-49D4-96E6-07A5E3A1E394} => pcalua.exe -a "C:\Users\Heather\AppData\Local\Temp\Temp1_SF600W7.zip\SF600 Wins 7\Setup.exe" C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {38B2B074-51DF-4B26-9632-6EE03AB6F02E} - System32\Tasks\{66A8A807-6128-46E2-842A-EAF1BFB404FA} => C:\Program Files [x86]\ColorPage-SF600\DigiScan.exe
Task: {3DF4EE25-0127-4BE6-ABEC-2FC6370BA327} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-04-11] [Microsoft Corporation]
Task: {3F99C1DC-B67A-48F3-AD2C-0BE83C9D1792} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File C:\Program Files [x86]\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-05-25] [HP Inc.]
Task: {47BE5E83-03DB-4190-86F3-F355ADEF7862} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {48E00E99-68F2-4EA3-ADD4-CDD3B8EEC567} - System32\Tasks\DistromaticSearchProtect-hourly => C:\Program Files [x86]\Amazon Browser Settings\AmznSearchProtect.exe [2016-07-26] [Distromatic] C:\Program Files [x86]\ColorPage-SF600\DigiScan.exe
Task: {4C91ABFC-3D96-449C-9363-96B74A14BE52} - System32\Tasks\DistromaticUpdater-logon => C:\Program Files [x86]\Amazon Browser Settings\updater.exe [2016-07-26] [Distromatic] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {5187FF54-8BBC-43B8-8A12-D936661C3A9F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files [x86]\Google\Update\GoogleUpdate.exe [2015-09-01] [Google Inc.]
Task: {53C3DB97-F36F-40BE-835D-1B695D6EEE88} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {53EDE98B-FEBF-460B-A712-AFC377E817B9} - System32\Tasks\{3FA0A656-15A3-40F9-8125-C97658AD59CD} => pcalua.exe -a C:\Users\Heather\Documents\e-Sign_6.6\instmsi.exe -d C:\Users\Heather\Documents\e-Sign_6.6
Task: {5954CC87-EF29-414A-8BA4-06C176C56D78} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-08-26] [Realtek Semiconductor]
Task: {5DBD351B-CBDB-4418-806E-31331CC07764} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {605AF760-FF7E-4B17-979F-5ABA5C0599D4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] [Microsoft Corporation]
Task: {62E91751-9B0E-4459-8CE4-70A5BB0D0830} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files [x86]\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] [HP Inc.]
Task: {6496F1FC-301D-4FB1-8355-0724AB4483A8} - System32\Tasks\SafeZone scheduled Autoupdate 1458712920 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-05-17] [Avast Software]
Task: {66DEC70A-2692-49F6-9CD4-46392BFA376A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files [x86]\Google\Update\GoogleUpdate.exe [2015-09-01] [Google Inc.]
Task: {6A1BB65A-0115-4EE2-BE9D-B4E70A67888A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files [x86]\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] [HP Inc.]
Task: {6C576566-91B1-490A-8C14-EDBCD6789D74} - System32\Tasks\EPSON XP-310 Series Update {9C89B4A7-19CA-43CB-A508-0ADF5E400CD3} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {731A7C5A-3CC3-4088-BE34-729ED452E820} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7889220C-63D9-41E9-8FDA-A7286C5D7753} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {7EAC28B9-A11A-4E8A-9B90-FB2FCE50763E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files [x86]\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] [HP Inc.]
Task: {810FF05D-119C-4985-94E6-FC4DF72B8DDE} - System32\Tasks\{7F0B2039-5BA3-4B9F-A5BF-E8C3997666DD} => pcalua.exe -a C:\Users\Heather\AppData\Local\Temp\Temp1_SF600_V3.zip\CP-SF600_V.3.0\setup.exe No File c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] [Microsoft Corporation]
Task: {8736294E-10F7-44B1-B10E-29A14870FAEA} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {88430C0A-A43C-418B-B67A-42D64AC44B93} - System32\Tasks\EPSON XP-310 Series Invitation {12C324E4-2D15-4A9E-8AA3-FD615C950D23} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {887C2870-2587-4EE8-9BEC-8A01A0E571CA} - System32\Tasks\{DA9DDD5E-234E-4782-8BF1-781DA6F6757C} => C:\Program Files [x86]\ColorPage-SF600\DigiScan.exe
Task: {893012BF-D37A-4FC9-A19D-D4E8536F7A61} - System32\Tasks\{8F8DC693-3AAD-470B-BAB2-E2E0AB42F8FF} => pcalua.exe -a C:\windows\system32\pcwrun.exe -c "C:\Program Files [x86]\ColorPage-SF600\DigiScan.exe"
Task: {89D98063-650A-44F1-AD4C-03E0EFDE60C8} - System32\Tasks\EPSON XP-310 Series Invitation {17541BBD-1B03-47D1-8690-B40CEC590190} => C:\windows\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {8D12DB7D-AD19-480C-837D-E00741D6658A} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8F1E03C9-D9FF-4D86-8D9F-82280B66D4AD} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A37445D6-D5F5-4867-8217-03BFAB49489A} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File No File C:\WINDOWS\ehome\ehrec.exe
Task: {AAB04F9D-3A80-472E-B150-BC39AD5C75A3} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AD0A3D32-1866-4623-AA65-96C411A21896} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files [x86]\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] [Adobe Systems Incorporated]
Task: {AEF2ADF2-8F79-4431-BB88-141607EEB150} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] [Microsoft Corporation]
Task: {B2CA2EE5-857E-4724-A13B-B0AA5433E13D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File C:\Program Files [x86]\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {B7CCE55E-0452-4A6D-A16B-466AEDC62662} - System32\Tasks\EPSON XP-310 Series Update {12C324E4-2D15-4A9E-8AA3-FD615C950D23} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {B8034363-6960-40EB-8B22-F6433EEC0552} - System32\Tasks\{5D0E5665-A81A-4126-9962-BF663DCEC37E} => C:\Program Files [x86]\ColorPage-SF600\DigiScan.exe
Task: {BB53CA23-E591-4F73-BD2A-041FD5CBC783} - System32\Tasks\EPSON XP-310 Series Invitation {E285F971-3921-479A-8619-A41349396DFD} => C:\windows\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {BB57090F-201D-4A6F-B12F-4E115DAF1768} - System32\Tasks\{32DC09B6-6D58-417F-A947-929E8534B41C} => C:\Program Files [x86]\ColorPage-SF600\DigiScan.exe
Task: {C31D26E5-FF7F-4DC7-9D68-4037840D0B94} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C4AC806B-559D-43A4-ACB6-B532A41936DA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C52E051E-CD06-4264-8F76-8DEAF7C67C7F} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C5944746-2DFC-4578-B579-939B6B6F4263} - System32\Tasks\EPSON XP-310 Series Update {A608DEE5-743B-4039-87F8-12F2E2D4D097} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {C5B3C5AE-E9C5-4BE2-874B-8137787CDAA4} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {C6E34B7E-D3D8-4DEA-9649-7C2911E346FE} - System32\Tasks\EPSON XP-310 Series Update {8A3FE365-CB04-46AF-93A5-00FA801EDC7B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {C81143E5-5DC8-40C5-96E6-D2A617C68A91} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {C99B4B31-180E-4050-AE71-2086F37F1E4A} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] [Microsoft Corporation]
Task: {CC582809-914A-4E39-A41A-4ED99BE31BA9} - System32\Tasks\DistromaticUpdater-periodic => C:\Program Files [x86]\Amazon Browser Settings\updater.exe [2016-07-26] [Distromatic] C:\WINDOWS\ehome\mcupdate.exe
Task: {D2541D42-0938-4FB6-A837-76D723C93C68} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {D76FC3CD-1E32-4255-B956-7E3DFEC4217B} - \Microsoft\Windows\Setup\gwx\rundetector -> No File C:\Program Files [x86]\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] [HP Inc.]
Task: {D8EFBA13-95B1-47A8-8A54-2134A92B7F4C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-21] [Adobe Systems Incorporated]
Task: {D9EE52A3-110D-4472-9A1B-D5D226A9E0A4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DBA8D983-FE7D-40F5-801C-736F3AE8D225} - System32\Tasks\EPSON XP-310 Series Invitation {A608DEE5-743B-4039-87F8-12F2E2D4D097} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {DBF712CF-4B42-4E71-8EB1-7214C1EF809A} - System32\Tasks\EPSON XP-310 Series Invitation {8A3FE365-CB04-46AF-93A5-00FA801EDC7B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {DC9A9083-69EB-45E5-91A2-91B4F024CBBC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File C:\windows\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE [2013-02-28] [SEIKO EPSON CORPORATION]
Task: {E78951F9-136E-404B-A7A2-DB1A3CC0E553} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E7CDA6AE-D2E4-49C9-BD12-8B03604CFDFB} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-04-11] [Microsoft Corporation]
Task: {EE3B0E45-8EA5-46BF-BE0E-EB8AF5DE6C93} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File No File C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-25] [AVAST Software]
Task: {FB89F4F1-DDD6-43D5-8DC5-FE9CBCCE8C03} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] [Microsoft]
Task: {FD223737-B50A-495B-920E-04390CA89DD8} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> No File No File C:\WINDOWS\ehome\MCUpdate.exe
Task: {FEF4BB1D-AEA2-4141-A7BD-25CB4870BCAD} - System32\Tasks\{2FC5FEA5-E0FA-4A35-A666-A90C6CA50DED} => pcalua.exe -a "C:\Users\Heather\Desktop\SF600 Wins 7\Setup.exe" -d "C:\Users\Heather\Desktop\SF600 Wins 7"
[If an entry is included in the fixlist, the task [.job] file will be moved. The file which is running by the task will not be moved.]
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Invitation {12C324E4-2D15-4A9E-8AA3-FD615C950D23}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Invitation {17541BBD-1B03-47D1-8690-B40CEC590190}.job => C:\windows\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Invitation {5BE54761-B4B1-47A8-B1D6-4AAA0D0E8101}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Invitation {8A3FE365-CB04-46AF-93A5-00FA801EDC7B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Invitation {9C89B4A7-19CA-43CB-A508-0ADF5E400CD3}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Invitation {A608DEE5-743B-4039-87F8-12F2E2D4D097}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Invitation {E285F971-3921-479A-8619-A41349396DFD}.job => C:\windows\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Update {12C324E4-2D15-4A9E-8AA3-FD615C950D23}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE:/EXE:{12C324E4-2D15-4A9E-8AA3-FD615C950D23} /F:UpdateWORKGROUP\HEATHER-PC$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Update {17541BBD-1B03-47D1-8690-B40CEC590190}.job => C:\windows\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE:/EXE:{17541BBD-1B03-47D1-8690-B40CEC590190} /F:UpdateSYSTEMĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Update {5BE54761-B4B1-47A8-B1D6-4AAA0D0E8101}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE:/EXE:{5BE54761-B4B1-47A8-B1D6-4AAA0D0E8101} /F:UpdateWORKGROUP\HEATHER-PC$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Update {8A3FE365-CB04-46AF-93A5-00FA801EDC7B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE:/EXE:{8A3FE365-CB04-46AF-93A5-00FA801EDC7B} /F:UpdateWORKGROUP\HEATHER-PC$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Update {9C89B4A7-19CA-43CB-A508-0ADF5E400CD3}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE:/EXE:{9C89B4A7-19CA-43CB-A508-0ADF5E400CD3} /F:UpdateWORKGROUP\HEATHER-PC$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Update {A608DEE5-743B-4039-87F8-12F2E2D4D097}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE:/EXE:{A608DEE5-743B-4039-87F8-12F2E2D4D097} /F:UpdateWORKGROUP\HEATHER-PC$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-310 Series Update {E285F971-3921-479A-8619-A41349396DFD}.job => C:\windows\system32\spool\DRIVERS\x64\3\E_ITSLBE.EXE:/EXE:{E285F971-3921-479A-8619-A41349396DFD} /F:UpdateSYSTEMĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\HPCeeScheduleForHeather.job => C:\Program Files [x86]\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe