Category: Potentially Unwanted Software

Description: This program has potentially unwanted behavior.

Recommended action: Remove this software immediately.

Items: 
clsid:HKLM\SOFTWARE\CLASSES\CLSID\{02966FA9-C01A-47E7-A169-C83AEA1FB0BA}
clsid:HKLM\SOFTWARE\CLASSES\CLSID\{05FF6A00-76A3-4AA1-A9A4-A782152ABE60}
clsid:HKLM\SOFTWARE\CLASSES\CLSID\{10A7F29D-4B00-40EC-B07D-8616DF8135E6}
clsid:HKLM\SOFTWARE\CLASSES\CLSID\{4EECDED2-40FB-4500-85B4-86FB0EBECA68}
clsid:HKLM\SOFTWARE\CLASSES\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
clsid:HKLM\SOFTWARE\CLASSES\CLSID\{5780633B-414C-446F-8EB2-FF1C9A731C99}
clsid:HKLM\SOFTWARE\CLASSES\CLSID\{70C7334A-66D9-46DE-A4E2-6B923C7DB94E}
clsid:HKLM\SOFTWARE\CLASSES\CLSID\{9AD5C084-B6E6-456A-8BA2-A559663780E5}
driver:VDWFP
file:C:\Program Files\Lenovo\VisualDiscovery\freebl3.dll
file:C:\Program Files\Lenovo\VisualDiscovery\libnspr4.dll
file:C:\Program Files\Lenovo\VisualDiscovery\libplc4.dll
file:C:\Program Files\Lenovo\VisualDiscovery\libplds4.dll
file:C:\Program Files\Lenovo\VisualDiscovery\nss3.dll
file:C:\Program Files\Lenovo\VisualDiscovery\nssckbi.dll
file:C:\Program Files\Lenovo\VisualDiscovery\nssdbm3.dll
file:C:\Program Files\Lenovo\VisualDiscovery\nssutil3.dll
file:C:\Program Files\Lenovo\VisualDiscovery\Run.exe
file:C:\Program Files\Lenovo\VisualDiscovery\smime3.dll
file:C:\Program Files\Lenovo\VisualDiscovery\softokn3.dll
file:C:\Program Files\Lenovo\VisualDiscovery\sqlite3.dll
file:C:\Program Files\Lenovo\VisualDiscovery\ssl3.dll
file:C:\Program Files\Lenovo\VisualDiscovery\SuperfishCert.dll
file:C:\Program Files\Lenovo\VisualDiscovery\uninstall.exe
file:C:\Program Files\Lenovo\VisualDiscovery\VDWFP.sys
file:C:\Program Files\Lenovo\VisualDiscovery\VDWFP64.sys
file:C:\Program Files\Lenovo\VisualDiscovery\VDWFPInstaller.exe
file:C:\Program Files\Lenovo\VisualDiscovery\VisualDiscovery.exe
file:C:\Program Files\Lenovo\VisualDiscovery\VisualDiscovery.tlb
file:C:\Windows\system32\Drivers\VDWFP.sys
folder:C:\Program Files\Lenovo\VisualDiscovery\
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{2E5FA7B4-61A2-4662-BBCE-62BBB20FC649}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{5D7F05E3-075A-43AF-8BC7-21E2F7F38845}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{617E26CE-E6E1-4C75-A68A-A001F2B98491}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{79FBDBEA-A722-4ABD-BEC0-B7D463F6BA0E}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{8128586C-DF69-4266-873F-CF4C6F705A7C}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{C1F5E799-B218-4C32-B189-3C389BA140BB}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{C1F9CFCE-A7DC-4072-8B31-1DEA57004C86}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{EA4AD895-2A7F-430E-B973-DEE6C4E743A9}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{EBF4B60F-A863-426F-BE6F-5DFE83BC574F}
interface:HKLM\SOFTWARE\CLASSES\INTERFACE\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
process:pid:2016,ProcessStart:130689211549670080
regkey:HKLM\SOFTWARE\CLASSES\CLSID\{02966FA9-C01A-47E7-A169-C83AEA1FB0BA}
regkey:HKLM\SOFTWARE\CLASSES\CLSID\{05FF6A00-76A3-4AA1-A9A4-A782152ABE60}
regkey:HKLM\SOFTWARE\CLASSES\CLSID\{10A7F29D-4B00-40EC-B07D-8616DF8135E6}
regkey:HKLM\SOFTWARE\CLASSES\CLSID\{4EECDED2-40FB-4500-85B4-86FB0EBECA68}
regkey:HKLM\SOFTWARE\CLASSES\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
regkey:HKLM\SOFTWARE\CLASSES\CLSID\{5780633B-414C-446F-8EB2-FF1C9A731C99}
regkey:HKLM\SOFTWARE\CLASSES\CLSID\{70C7334A-66D9-46DE-A4E2-6B923C7DB94E}
regkey:HKLM\SOFTWARE\CLASSES\CLSID\{9AD5C084-B6E6-456A-8BA2-A559663780E5}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{2E5FA7B4-61A2-4662-BBCE-62BBB20FC649}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{5D7F05E3-075A-43AF-8BC7-21E2F7F38845}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{617E26CE-E6E1-4C75-A68A-A001F2B98491}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{79FBDBEA-A722-4ABD-BEC0-B7D463F6BA0E}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{8128586C-DF69-4266-873F-CF4C6F705A7C}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{C1F5E799-B218-4C32-B189-3C389BA140BB}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{C1F9CFCE-A7DC-4072-8B31-1DEA57004C86}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{EA4AD895-2A7F-430E-B973-DEE6C4E743A9}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{EBF4B60F-A863-426F-BE6F-5DFE83BC574F}
regkey:HKLM\SOFTWARE\CLASSES\INTERFACE\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
regkey:HKLM\SOFTWARE\CLASSES\TYPELIB\{CB6BF8B6-E12B-42FA-A478-91BCCDE475DC}\1.0
regkey:HKLM\software\microsoft\SystemCertificates\ROOT\Certificates\C864484869D41D2B0D32319C5A62F9315AAF2CBD\\Blob
regkey:HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Superfish Inc. VisualDiscovery
regkey:HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SAFEBOOT\NETWORK\VDWFP
regkey:HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SAFEBOOT\NETWORK\VisualDiscovery
safeboot:HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SAFEBOOT\NETWORK\VDWFP
safeboot:HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SAFEBOOT\NETWORK\VisualDiscovery
service:VDWFP
service:VisualDiscovery
typelib:HKLM\SOFTWARE\CLASSES\TYPELIB\{CB6BF8B6-E12B-42FA-A478-91BCCDE475DC}
typelibversion:HKLM\SOFTWARE\CLASSES\TYPELIB\{CB6BF8B6-E12B-42FA-A478-91BCCDE475DC}\1.0
uninstall:HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Superfish Inc. VisualDiscovery