anchor.diff:  
   :: Lenovo SMB Customizations
   start /wait msiexec /qn /norestart /x {AFD7B869-3B70-40C7-8983-769256BA3BD2}
  +
  +:: Lenovo System Interface Foundation
  +start /wait msiexec /qn /norestart /x {C2E5CA37-C862-4A69-AC6D-24F450A20C16}
   
   :: Lenovo System Update
   start /wait msiexec /qn /norestart /x {25097770-2B1F-49F6-AB9D-1C708B96262A}
  
positive.code: :: KODAK Share Button App
  start /wait msiexec /qn /norestart /x {DE9B51D7-C575-4587-A848-DE95CD7F7684}
  
  :: Lenovo Idea Notes
  start /wait msiexec /qn /norestart /x {BF601122-9F0A-41A9-BA06-3158D9FB4B80}
  
  :: Lenovo Message Center Plus
  start /wait msiexec /qn /norestart /x {3849486C-FF09-4F5D-B491-3E179D58EE15}
  
negative.code: start /wait msiexec /qn /norestart /x {DB2C58E0-6284-4B48-97F2-22A980B6360B}
  start /wait msiexec /qn /norestart /x {63B7AC7E-0178-4F4F-A79B-08D97ADD02D7}
  
  :: timer (appears on a lot of infected systems)
  start /wait msiexec /qn /norestart /x {9CC4B8EE-A96B-4800-B674-0CF8B4560F45}
  
  :: Toshiba Audio Enhancement
  start /wait msiexec /qn /norestart /x {1515F5E3-29EA-4CD1-A981-032D88880F09}
  start /wait msiexec /qn /norestart /x {F2DE0088-CF05-4DAB-AC4D-9D2C4D657456}
  