List of recently installed programs by date - bogus app installed today

[BBlock]

This is a windows question if anyone can help. I have once again a windows 10 virus that gives the red screen and a repeating verbal message to stop, do not turn off your computer etc. You are at risk.

One of the keys to finding and removing it last time was displaying any software installed on my PC today. It was listed by date and there it was under a bogus name at the top. Nothing else had been installed in a long time.

After googling and viewing lots of sites nobody can tell me how to produce this list. It did not require any special software or run command at the time. Maybe it is no longer available in WIN 10. My WIN 10 is current.

Can anyone help? I have an HP Pavilion g6 but as I recall the virus was linked to EDGE. It came up whenever I started EDGE. This time it seems to have gone away but I would really like to know how to produce that list again for the future. The START menu does not list new apps anymore, just most used. 

[WAWood]

@BBlock

I always use Control Panel --> Programs and Features to see that info, but apparently, you CAN get that info using a command window:  https://theitbros.com/how-to-get-list-of-installed-programs-in-windows-10/

Learn something new about win10 every day!

[CherylG]

@BBlock

It is not always a new application installed that causes this. It can be malicious code embedded on a website that causes the popup message.

To view  Apps easily in Windows 10- click the Notification icon at far right of the taskbar- near the clock. Click it and select "All settings". In the window that opens click "Apps". Next you will see the list. You can sort by name, date installed or size.

[BBlock]

Thanks WAWOOD. I did find a list under settings / apps but missed the date in the lower right of each app. The only entry for today was PAINT 3D which seems legit. The message seems to have stopped so maybe it was just a website thing.

[BBlock]

Thanks CherylG.  I did find a list under settings / apps but missed the date in the lower right of each app. I also missed that you could sort it so thanks for that. The only entry for today was PAINT 3D which seems legit. The message seems to have stopped so maybe it was just a website thing.

[CherylG]

You're very welcome. Happy it helped. Yes, Paint 3D is legit.

[Dragon-Fur]

@BBlock

Apologies for jumping in unannounced.

Edits - @WAWood - I just now realised that you had already mentioned the wmic method.  Apologies for jumping on your parade.  Rats.  I am going to leave this post just because it took a while to type the information.  Sigh.

If the system is aware of the installation, you might find it in the product list.

Caveat:  This is a list of currently installed software for which there was a recognised installation method.  Some software, including Viruses, may not show up due to the way these items are loaded onto the computer.

Method - wmic

Notes

• wmic has been around forever. 
• The following is a simple and basic how-to that explains how to grab product information.
• Use your favorite search engine to learn more about this utility.

• Open a command prompt with Admin privileges
• Use wmic to extract information from the Operating System / File system
• Limit the command output to those properties of interest
• For example, grab the (software) name, version, and installation date
• If you like, use the pipe (>) to shunt the information into a file

Open a command prompt window with Admin privileges:

Windows key + X + A 

type command (all on one line)

Replace the relevant items in the example with the name of the computer and your login / account name:

wmic /node:name-of-computer product get name, version, vendor, InstallDate > C:\Users\AccountName\Documents\Product_List.txt

Example

wmic /node:ThisBird product get name, version, vendor, InstallDate > C:\Users\Dragon\Documents\Product_List.txt

Want it ALL?  Leave out the properties...

wmic /node:ThisBird product > C:\Users\Dragon\Documents\Product_List_Full.txt

Possible “gets” for the product parameter include:

Node,AssignmentType,Caption,Description,HelpLink,HelpTelephone,IdentifyingNumber,InstallDate,InstallDate2,InstallLocation,InstallSource,InstallState,Language,LocalPackage,Name,PackageCache,PackageCode,PackageName,ProductID,RegCompany,RegOwner,SKUNumber,Transforms,URLInfoAbout,URLUpdateInfo,Vendor,Version,WordCount

++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Some third party softwares can be used to "find stuff" on your computer.

For example - free and works on Windows:

Belarc Advisor

Click Thumbs Up on a post to say Thank You!

Answered? Click post "Accept as Solution" to help others find it.

[BBlock]

Hey Dragon. Lots of help here - this forum is becoming very responsive. Next time I ger this virus I should be able to kill it!

Thanks

[IT_WinSec]

@BBlock

In addition to what is already written above by the fellow experts and since this appears to be a reoccuring issue, you should invest some more time and perform more in-depth analysis of the security of your computer.

Scan with some free but very effective tools such as:

• AdwCleaner >> https://www.malwarebytes.com/adwcleaner/
• HitmanPro >> https://www.hitmanpro.com/en-us/hmp.aspx
• ESET Online Scanner >> https://www.eset.com/us/home/online-scanner/
• Kaspersky TDSS Killer >> https://support.kaspersky.com/viruses/disinfection/5350

Make sure you have a firewall up and running, Windows is updated and that your antivirus/security app is active, updated, properly licensed.

Install a program to protect you against USB-driven malware > Autorun Eater > http://www.softpedia.com/get/Security/Secure-cleaning/Autorun-Eater.shtml

Deploy security and privacy tool for your browsers >> Ublock Origin, Disconnect for Firefox/Chrome browsers

Adblock and privacy lists for Internet Explorer and EDGE >> iegallery.com (install from withing IE but valid for IE and EDGE)

Ensure your accounts' password are strong -> at least 13 symbols including a mix of capital and lowe letters, numbers and speci@l characters, not words easy to guess.

Hope this helps.