Solved uninstall a program completely

Lucianp · Jun 21, 2019

Hi,
I have a question about uninstalling a program completely. I mean so there is no reference to a previous install.

I am using GIMP and the problem I have is that when I reinstalled it there are references to previous work suggesting the uninstall is not complete.

What I did was
uninstall using CCleaner.
cleaned the registry with Ccleaner.
removed files from appdata and program files
re-cleaned the registry.

I then re-downloaded GIMP and installed but the setting are the same as before. I am talking about layout setting mainly. Also 'open recent' displays a list of previous work.

I am trying to get to a state as if GIMP had never been installed.

How can I ensure everything is completely removed when uninstalling?

Bruce · Jun 22, 2019

It's a bit of a grey area with 'completely' removing traces of software.
After all, if this was easy achievable, we would all simply be re-installing trail versions of our favourite photo editor or word processor so as not to pay for things.
Which is why online activations and storing of keys/codes was introduced, not the mention the all-knowing Registry.

My guess is the registry is keeping those details for you, providing you really have found all the folders that could retain such info.
CCleaner won't help you there, it cleans 'errors' in the registry, it does not hunt down and remove uninstalled software.

I do a lot of PC maintenance and have Revo Pro which certainly suffices for my needs but I've not tested it on licensed software or on software that I want to reinstall, I use it to remove all traces of crap I want gone. Once it finds nothing on subsequent scans I'm happy, I've never tested.
They do a Free version which should do what you want. It's valid for 30 days, or a certain number of uses or similar.

Malnutrition · Jun 22, 2019

I can help you remove it completely .

Download Geek Uninstaller uninstall Gimp then reboot..... Then......

Download FRST Save it to your desktop. FRST 32 bit or FRST 64bit
If you are unsure if your operating system is 32 or 64 Bit please go HERE.

Right Click FRST Run As Admin.

In the search box, you have to type

SearchAll: GIMP

Make sure to include the "SearchAll:" part as well, then click Search Files.

Copy and paste the contents of the Search.txt log which will open in Notepad after the scan.

Thanks.

Lucianp · Jun 22, 2019

Farbar Recovery Scan Tool (x64) Version: 19-06-2019
Ran by ian_p (22-06-2019 05:53:42)
Running from C:\Users\ian_p\Desktop
Boot Mode: Normal

================== Search Files: "SearchAll: GIMP" =============

File:
========
C:\Windows\Prefetch\GIMP-2.10.10-SETUP (1).TMP-A1E75F19.pf
[2019-05-30 08:23][2019-05-30 08:23] 000007709 _____ () 0BDEA4E45EDCBAAACCAC46742E998579 [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP (1).TMP-C2B27354.pf
[2019-05-30 08:23][2019-05-30 08:23] 000009073 _____ () A338C504D9D622050C19F054B59CDD6A [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP (1).TMP-D433315B.pf
[2019-05-30 08:43][2019-05-30 08:43] 000007816 _____ () 37FF7DCD3A5CF02B79AFC0755E251A01 [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP (1).TMP-EDB7EF98.pf
[2019-05-30 08:43][2019-05-30 08:43] 000009219 _____ () 98073734DEB797A9243F5C4C9D96375E [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP (2).TMP-02312476.pf
[2019-06-21 15:09][2019-06-21 15:09] 000007924 _____ () 63ECB592C5C27B63C802475C99F7CC75 [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP (2).TMP-7421DA4E.pf
[2019-06-13 14:58][2019-06-13 14:58] 000007821 _____ () B2EB5536223AF5A02953E4A9B90B996E [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP (2).TMP-78485521.pf
[2019-06-21 15:08][2019-06-21 15:08] 000009200 _____ () 01EF8BA1065EC60B52C8F8FAA5E11C09 [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP (2).TMP-B6B8331C.pf
[2019-06-13 14:58][2019-06-13 14:58] 000009158 _____ () 63F328F2B374616994A89509E22B10F2 [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP.EXE-A91893B3.pf
[2019-06-22 04:45][2019-06-22 04:45] 000006676 _____ () CB653333705786D4DDFCCE85DEF8E480 [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP.TMP-53B8D9CF.pf
[2019-06-22 04:45][2019-06-22 04:45] 000007883 _____ () 3919725B8D12A82A3DAB88FF29E8695F [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP.TMP-5E0AEF47.pf
[2019-05-25 13:45][2019-05-25 13:45] 000007697 _____ () 1F50138BF2F189A8ABA8714C29810FE1 [File not signed]

C:\Windows\Prefetch\GIMP-2.10.10-SETUP.TMP-7FBC1DB6.pf
[2019-06-22 04:45][2019-06-22 04:45] 000009188 _____ () 6F1D809FEAB2D52126529A2CDBEED6B1 [File not signed]

C:\Windows\Prefetch\GIMP-2.10.EXE-DD954CEC.pf
[2019-05-30 06:16][2019-06-22 04:50] 000065050 _____ () 2921BD0E6A0752B758B232A9F2273980 [File not signed]

C:\Windows\Prefetch\GIMP-2.8.EXE-5EA6DA7F.pf
[2019-05-25 10:01][2019-05-25 10:30] 000033811 _____ () 9B957920E2BFA72569FA764305B6E3F3 [File not signed]

C:\Windows\Prefetch\GIMP.EXE-F62C242A.pf
[2019-05-30 11:07][2019-06-12 18:26] 000044383 _____ () D97994A489BECCE9B21894BA26BFD160 [File not signed]

C:\Windows\Installer\$PatchCache$\Managed\00002109E60090400000000000F01FEC\12.0.4518\WPGIMP32.FLT_1033
[2006-10-26 19:21][2006-10-26 19:21] 000178496 ____R (Access Softek, Inc.) 9A9269EB5BC5B36B0D8E106CF088277C [File is digitally signed]

C:\Users\ian_p\Desktop\gimp-probs.txt
[2019-06-14 18:55][2019-06-14 18:55] 000000735 _____ () 00ABF1CE69D1A13533AFD14AB8393D8F [File not signed]

C:\Users\ian_p\Desktop\regedit-gimp.txt
[2019-06-22 04:38][2019-06-22 04:38] 000001989 _____ () 1C6C952EA69D03D01F42F0DD876C719B [File not signed]

C:\Users\ian_p\AppData\Roaming\Microsoft\Windows\Recent\gimp-probs.txt.lnk
[2019-06-14 18:55][2019-06-14 18:55] 000000830 _____ () 31E8FEFC009101B2A2C86CA48596AA11 [File not signed]

C:\Users\ian_p\AppData\Roaming\Microsoft\Windows\Recent\regedit-gimp.txt.lnk
[2019-06-22 04:38][2019-06-22 04:38] 000000842 _____ () F381001309C6C8DF9FE303F3B30CD7B7 [File not signed]

C:\Users\ian_p\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\GIMP 2.10.10.lnk
[2019-06-22 04:50][2019-06-22 04:48] 000000952 _____ () 1EF214F069DCBC6535AD697623F2B84D [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\gimprc
[2019-06-21 15:27][2019-06-21 15:27] 000001295 _____ () C0EB24571FADC8BFA3CA16141D3C726A [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-airbrush-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000227 _____ () F8B56C84449CDCC2BB07A0F4D40C0837 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-align-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000066 _____ () 9084DF9242839E11F03BF02C826FE586 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-brightness-contrast-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000094 _____ () 0D988F4936800C8DFCABE6CCE95A5771 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-bucket-fill-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000144 _____ () A50E2B02C792D81496C6E6C64EF0E888 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-by-color-select-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000086 _____ () 15EC990FEFE33C623F697129549F414A [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-cage-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000064 _____ () 0FA7D248C7CA53FC16F1220AF9C94814 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-clone-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000210 _____ () 4AA5F979144DC0EC1EC15B1AC0F02489 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-color-picker-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000080 _____ () EF87450A907E12C801DFA376B6F21EFF [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-convolve-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000199 _____ () 839BE2D57CC28EC4272A43F5A13ABF1C [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-crop-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000128 _____ () 778AD6D2221D03316437D6224730A510 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-curves-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000068 _____ () F384D4609884C819AF114A80D0CEFE2E [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-dodge-burn-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000203 _____ () 293DCDE4FAE4BD008442B9D6A879D735 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-ellipse-select-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000084 _____ () CBF1994E30F76065689DA1A66133EAE7 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-eraser-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000195 _____ () 704AD295651FAA8ED944144FF22A5AE7 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-flip-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000064 _____ () 51E75FE6378128E7A79BC9E969706448 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-foreground-select-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000090 _____ () F02669DB2F24FEEF92FA62A95BBCA4ED [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-free-select-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000078 _____ () A122650326D3B73E86A107CCF6CEEC58 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-fuzzy-select-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000080 _____ () 0714221193164A97276B390FDA130AE5 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-gegl-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000064 _____ () 70EF4F4E76C7AB9F5DEC67AD1A785F9D [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-gradient-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000149 _____ () E1585DA0C157ED23304D8A16AF1C0C6F [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-handle-transform-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000088 _____ () 2BE2763965D01881B7E3EE1773D7FFAE [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-heal-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000191 _____ () 1AD902416EB9CDD34DF0F26EC42BE27A [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-ink-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000111 _____ () 1EC63EB86D672B5A0E5349D113865AA1 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-iscissors-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000074 _____ () BFEBF47319BD45AAF77B139C20B56DE5 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-levels-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000068 _____ () 92E3CB549F42755FC504BEADE5648342 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-measure-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000070 _____ () A8AB5F6A7055DDE404C75E500B57E51E [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-move-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000064 _____ () E466837EFD2AD4FFF8A03EDFE1125706 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-mypaint-brush-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000193 _____ () 299764C91C304764D2F28E83ACCEE2BB [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-operation-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000074 _____ () F5D7242D0FCB31A332DD9367829F4108 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-paintbrush-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000231 _____ () 57E3C2F7F7D9075F51E08294407D25DC [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-pencil-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000223 _____ () 01B5A481B7129D830C974D8EC0E55BD3 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-perspective-clone-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000234 _____ () 3208E306317694C0781214EA10E53ACB [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-perspective-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000078 _____ () 93E64A54F0654FC29D31F373C495B697 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-rect-select-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000078 _____ () 43623BAD4AF42220C460DB6DE3EA77D9 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-rotate-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000068 _____ () C74F9818B1BC7E09ADD2D762CD3E28BE [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-scale-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000066 _____ () 4E8AC6E5775548460D3F0264D60ABA8B [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-shear-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000066 _____ () EB3C41461D2CEB7B19E1B2ADAD02E44D [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-smudge-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000223 _____ () 7218175CB695A2A4A64A93591E53F153 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-text-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000110 _____ () FEAC2D1598604DCFDDD50597B3D842BB [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-threshold-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000074 _____ () 85E7965B3DC08D87A000843EB2DE5706 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-unified-transform-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000090 _____ () E2BCF208798C36EC387058F12588438D [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-vector-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000191 _____ () B8D9DDA94BBE877A45042EDDC02062D0 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-warp-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000064 _____ () 9C9EE340C1472954700CE2D8A9554A36 [File not signed]

C:\Users\ian_p\AppData\Roaming\GIMP\2.10\tool-options\gimp-zoom-tool
[2019-06-22 05:41][2019-06-22 05:41] 000000064 _____ () 171CAC705D809EF8E7C54067DED3F1A3 [File not signed]

C:\Users\ian_p\AppData\Local\Programs\Python\Python37-32\Lib\test\test_pkgimport.py
[2018-10-20 14:00][2018-10-20 14:00] 000002809 _____ () 19CE94725CC8C8972E20CEB57EA14264 [File not signed]

C:\Users\ian_p\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_GIMP 2_bin_gimp-2_10_exe
[2019-06-21 15:13][2019-06-21 15:13] 000004246 _____ () AE6F1FCAE0106662CB948B5D80F6FE56 [File not signed]

C:\Users\ian_p\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_GIMP-2_10_10_GIMP-2_10_10_exe
[2019-06-21 15:13][2019-06-21 15:13] 000004246 _____ () 6CDD85B9833E14153E4B0BF306392D47 [File not signed]

C:\Users\ian_p\AppData\Local\Microsoft\Windows\FileHistory\Data\12405\C\Users\ian_p\Desktop\regedit-gimp.txt
[2019-06-22 04:52][2019-06-22 04:38] 000001989 ____R () 1C6C952EA69D03D01F42F0DD876C719B [File not signed]

C:\Users\ian_p\AppData\Local\Microsoft\OneNote\12.0\Backup\PROJECTS\GIMP.one (On 6-19-2019).one
[2019-06-19 06:07][2019-06-19 06:07] 000009104 _____ () 5B29293A10B91E0477D5C03D4D84D4E3 [File not signed]

C:\Users\Administrator\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\100\{6D809377-6AF0-444B-8957-A3773F02200E}_GIMP 2_bin_gimp-2_8_exe
[2018-07-14 14:06][2018-07-14 14:06] 000004246 _____ () 33FEE15A47C4AC067B751B54AD6793AB [File not signed]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP-2.10.10\GIMP-2.10.10.lnk
[2019-05-30 10:25][2019-05-30 12:33] 000000927 _____ () 9A53EB4EDCB43312C5E42C4E37E1879B [File not signed]

C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\WPGIMP32.FLT
[2011-06-23 09:51][2011-06-23 09:51] 000177536 _____ (Access Softek, Inc.) 8963C3D5DA1CC8C4FFD2367605F313D3 [File is digitally signed]

folder:
========
2019-06-21 15:14 - 2019-06-21 15:14 _____ C:\Users\ian_p\AppData\Roaming\GIMP
2019-06-21 15:14 - 2019-06-21 15:14 _____ C:\Users\ian_p\AppData\Roaming\GIMP\2.10\gimpressionist
2019-06-21 15:14 - 2019-06-21 15:14 _____ C:\Users\ian_p\AppData\Local\GIMP
2019-06-21 04:31 - 2019-06-21 04:31 _____ C:\Users\ian_p\AppData\Local\Temp\gimp
2019-05-25 13:51 - 2019-05-25 13:51 _____ C:\Users\ian_p\AppData\Local\Microsoft\Windows\INetCache\gimp
2019-05-30 10:25 - 2019-06-13 11:43 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP-2.10.10

Registry:
========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\gimp-2.10.10-setup.tmp]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\CrawlScopeManager\Windows\SystemIndex\WorkingSetRules\37]
"URL"="file:///C:\[bd7af0d4-d93b-47d3-92b7-cc949bdc7720]\Users\ian_p\.gimp-2.8\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\16]
"Path"="file:///C:\[bd7af0d4-d93b-47d3-92b7-cc949bdc7720]\Users\ian_p\.gimp-2.8\"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows Search\CrawlScopeManager\Windows\SystemIndex\WorkingSetRules\37]
"URL"="file:///C:\[bd7af0d4-d93b-47d3-92b7-cc949bdc7720]\Users\ian_p\.gimp-2.8\"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\LocalHost\Paths\16]
"Path"="file:///C:\[bd7af0d4-d93b-47d3-92b7-cc949bdc7720]\Users\ian_p\.gimp-2.8\"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\UserSettings\S-1-5-21-1929858250-1207778090-847634005-1001]
"\Device\HarddiskVolume1\Users\ian_p\AppData\Local\Temp\is-47V6I.tmp\gimp-2.10.10-setup.tmp"="0x5DA1D5A7DF28D50100000000000000000000000002000000"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\UserSettings\S-1-5-21-1929858250-1207778090-847634005-1001]
"\Device\HarddiskVolume1\Users\ian_p\AppData\Local\Temp\is-QVR66.tmp\gimp-2.10.10-setup.tmp"="0x3B5DABA7DF28D50100000000000000000000000002000000"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\UserSettings\S-1-5-21-1929858250-1207778090-847634005-1001]
"\Device\HarddiskVolume1\Program Files\GIMP 2\bin\gimp-2.10.exe"="0x85E87209E728D50100000000000000000000000002000000"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bam\UserSettings\S-1-5-21-1929858250-1207778090-847634005-1001]
"\Device\HarddiskVolume1\Program Files\GIMP 2\uninst\unins000.exe"="0xB94A9347E728D50100000000000000000000000002000000"
[HKEY_USERS\S-1-5-21-1929858250-1207778090-847634005-1001\Software\Microsoft\Windows\CurrentVersion\UFH\SHC]
"0"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.10.10.lnk
C:\Program Files\GIMP 2\bin\gimp-2.10.exe
"
[HKEY_USERS\S-1-5-21-1929858250-1207778090-847634005-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"D:\Documents\I.T\My Downloads\gimp-2.10.10-setup.exe"="0x5341435001000000000000000700000028000000E84DE30CAE99E30C01000000000000000000000A00210000BFA2139DEDD1D30100000000000000000200000028000000000000000000000000000000000000000000000000000000A96A0500000000000200000002000000"
[HKEY_USERS\S-1-5-21-1929858250-1207778090-847634005-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\GIMP 2\bin\gimp-2.10.exe"="0x5341435001000000000000000700000028000000B05290007E4A910001000000000000000000000A00210000BFA2139DEDD1D3010000000000000000020000002800000000000000000000000000000000000000000000000000000067FB2E00000000000100000001000000"
[HKEY_USERS\S-1-5-21-1929858250-1207778090-847634005-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\GIMP 2\uninst\unins000.exe"="0x534143500100000000000000070000002800000058471200B661120001000000000000000000000A00210000BFA2139DEDD1D30100000000000000000200000028000000000000000000004000000000000000000000000000000000E0480000000000000100000001000000"

====== End of Search ======

Malnutrition · Jun 22, 2019

Step 1: Ccleaner.

Run Ccleaner, but this time make sure it is cleaning your prefetch.
Under Custom Clean.
Advanced.
Make sure the box that reads Old Prefetch Data is Ticked.

Step 2: FRST Fix.

Download attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system. Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Step 3: Privazer.

After FRST reboots your machine.
Run Privazer.

Step 4: Reboot your computer.

After you have rebooted, then please re-run the Search all scan with FRST.
I want to make sure all files are gone prior to you trying to reinstall Gimp.

Lucianp · Jun 22, 2019

Malnutrition said:
Step 1: Ccleaner.

Run Ccleaner, but this time make sure it is cleaning your prefetch.
Under Custom Clean.
Advanced.
Make sure the box that reads Old Prefetch Data is Ticked.

Step 2: FRST Fix.

Download attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system. Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Step 3: Privazer.

After FRST reboots your machine.
Run Privazer.

Step 4: Reboot your computer.

After you have rebooted, then please re-run the Search all scan with FRST.
I want to make sure all files are gone prior to you trying to reinstall Gimp.

fixlog.txt attached

Malnutrition · Jun 22, 2019

Ok, search again with FRST for Gimp.

Malnutrition · Jun 22, 2019

Download Scanrapide
Unzip it to your desktop.
Run as Admin
Attach the log created.

Lucianp · Jun 23, 2019

This is the second FRST scan.
Now downloading scanrapide

Lucianp · Jun 23, 2019

Scanrapide_10.05.10.exe.zip Failed. Virus detected.
A look at Windows Defender Quarantined Threats shows Trojan:Script/Foretype.A!ml

Malnutrition · Jun 23, 2019

Disable Defender, Scanrapide is not a virus

Malnutrition · Jun 23, 2019

There are some files that still need to be removed before you install again.

Auto logger scan!

Disable your Antivirus & Anti spyware applications!!
Download Autologger to your desktop.
Unzip it there. -- If you are unsure how to unzip a program, then use ---- http://www.7-zip.org/ ----
Right click Autologger and run as admin. (Xp user double click)
AVZ4 will open and scan your machine, allow this to complete.
Upload Collectionlog.zip to your next reply.

Malnutrition · Jun 23, 2019

Download attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system. Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Malnutrition · Jun 23, 2019

Just to ease your mind, Scanrapide is not a virus the hit you got by your antivirus was a false positive.

VirusTotal

www.virustotal.com

Lucianp · Jun 23, 2019

This from Autologger

Lucianp · Jun 23, 2019

This from FRST64

Malnutrition · Jun 23, 2019

C:\[bd7af0d4-d93b-47d3-92b7-cc949bdc7720]

Can you tell me what is in that folder please.

Lucianp · Jun 23, 2019

Malnutrition said:
C:\[bd7af0d4-d93b-47d3-92b7-cc949bdc7720]

Can you tell me what is in that folder please.

I have no idea what it is. I don't even see it.

Lucianp · Jun 23, 2019

Lucianp said:
I have no idea what it is. I don't even see it.

How can I search for it?

Malnutrition · Jun 23, 2019

Lucianp said:
How can I search for it?

Use the Everything Search Engine.

Download attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system. Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

After the FRST fix reboots your machine search again for GIMP and post the output.

Solved uninstall a program completely

Forum Regular

Malnurished Mod

Malnurished Mod

Attachments

Attachments

Malnurished Mod

Malnurished Mod

Attachments

Malnurished Mod

Malnurished Mod

Malnurished Mod

Attachments

Malnurished Mod

Attachments

Attachments

Malnurished Mod

Malnurished Mod

Attachments