Main:
Deckard's System Scanner v20071014.68
Run by Carl on 2008-01-09 20:34:45
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- Last 5 Restore Point(s) --
9: 2008-01-09 21:35:06 UTC - RP69 - Scheduled Checkpoint
8: 2008-01-09 09:01:59 UTC - RP68 - Windows Update
7: 2008-01-09 09:01:42 UTC - RP67 - Scheduled Checkpoint
6: 2008-01-08 06:00:09 UTC - RP66 - Scheduled Checkpoint
5: 2008-01-06 21:47:36 UTC - RP65 - Scheduled Checkpoint
-- First Restore Point --
1: 2008-01-01 00:31:08 UTC - RP60 - Scheduled Checkpoint
Backed up registry hives.
Performed disk cleanup.
Total Physical Memory: 1015 MiB (1024 MiB recommended).-- HijackThis (run as Carl.exe) ------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:37:03 PM, on 1/9/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\system32\taskeng.exe
C:\Users\Carl\Desktop\Downloads\dss.exe
C:\Users\Carl\Desktop\DOWNLO~1\Carl.exe
C:\Windows\system32\SearchFilterHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://ie.redirect.h...a...&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://ie.redirect.h...a...&pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft....k/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://ie.redirect.h...a...&pf=desktopR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F3 - REG:win.ini: load=C:\Users\Carl\AppData\Local\Temp\fccbb.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: ICOOExternal Class - {0519A9C9-064A-4cbc-BC47-D0EACD581477} - C:\Program Files\ICOO Loader\addons\icooue.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: ICOODManager Class - {465A59EC-20E5-4fca-A38A-E5EC3C480218} - C:\Program Files\ICOO Loader\addons\icoou.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [DPService] "C:\Program Files\HP\DVDPlay\DPService.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "c:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [WorkFlow] E:\Install\WorkFlow.exe
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [DW4] "C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe"
O4 - HKCU\..\Run: [MSServer] "rundll32.exe" C:\Users\Carl\AppData\Local\Temp\opnnnkk.dll,#1
O4 - HKCU\..\Run: [cmds] "rundll32.exe" C:\Users\Carl\AppData\Local\Temp\fccbb.dll,c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: icoo - {86FE362E-74FA-4F71-8B69-B94D28880628} - C:\Program Files\ICOO Loader\addons\icoou.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 8634 bytes
-- File Associations -----------------------------------------------------------
All associations okay.
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R3 USBCamera (Icatch(IV) Still Camera Device) - c:\windows\system32\drivers\bulk533.sys <Not Verified; USB BULK; Platform SDK Sample Code>
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 Viewpoint Manager Service - "c:\program files\viewpoint\common\viewpointservice.exe" <Not Verified; Viewpoint Corporation; Viewpoint Manager>
-- Device Manager: Disabled ----------------------------------------------------
Class GUID:
Description: Sunplus SPCA533
Device ID: USB\VID_04FC&PID_5330&MI_00\6&1E0AC3B6&0&0000
Manufacturer:
Name: Sunplus SPCA533
PNP Device ID: USB\VID_04FC&PID_5330&MI_00\6&1E0AC3B6&0&0000
Service:
-- Scheduled Tasks -------------------------------------------------------------
2008-01-07 02:00:09 1496 --a------ C:\Windows\Tasks\wrSpySweeperTrialSweep.job
2008-01-04 20:00:21 486 --a------ C:\Windows\Tasks\Norton Internet Security - Run Full System Scan - Carl.job
-- Files created between 2007-12-09 and 2008-01-09 -----------------------------
2008-01-05 12:44:24 0 d-------- C:\Users\All Users\Webroot
2008-01-05 12:44:24 0 d-------- C:\Program Files\Webroot
2008-01-05 12:43:33 164 --a------ C:\install.dat
2008-01-02 19:33:02 0 d-------- C:\Program Files\Guild Wars
2007-12-31 02:16:32 0 d-------- C:\Program Files\Dorgem
2007-12-29 14:01:43 0 d-------- C:\Program Files\Mozilla Firefox 3 Beta 2
2007-12-28 17:38:56 0 d-------- C:\Program Files\No-IP
2007-12-28 17:35:25 0 d-------- C:\Program Files\VentSrv
2007-12-27 15:17:03 0 d-------- C:\Program Files\ICOO Loader
2007-12-27 12:16:44 0 d-------- C:\Users\All Users\egdata
2007-12-27 12:01:02 0 d--h----- C:\Windows\msdownld.tmp
2007-12-27 12:00:59 0 d-------- C:\Windows\system32\directx
2007-12-27 11:54:35 0 d-------- C:\Program Files\Common Files\PocketSoft
2007-12-27 11:54:06 0 d-------- C:\Program Files\RedlightCenter
2007-12-27 11:24:31 0 d-------- C:\Program Files\EGirl_v1.5.1
2007-12-25 00:34:52 0 d-------- C:\Program Files\WinAVI Video Converter
2007-12-25 00:33:10 5 --a------ C:\Windows\system32\SySRMWMA.dat
2007-12-25 00:31:53 0 d-------- C:\Program Files\HiFisoftware
2007-12-24 20:03:57 0 d-------- C:\.mtvconvertertmp
2007-12-24 18:58:26 0 d-------- C:\Program Files\PhoTags Express
2007-12-24 18:54:17 131072 --a------ C:\Windows\system32\Sp5x_32.dll <Not Verified; Sunplus; Sunplus SP5X_32>
2007-12-24 18:54:17 118784 --a------ C:\Windows\ShowBmp.exe <Not Verified; ; ShowBmp Application>
2007-12-24 18:54:17 65536 --a------ C:\Windows\amcap533.exe <Not Verified; DSC CAMERA; Amcap5xx>
2007-12-24 18:54:16 515803 --a------ C:\Windows\system32\drivers\Ca533av.sys <Not Verified; Digital Camera; Digital Camera Driver>
2007-12-24 18:54:16 10986 --a------ C:\Windows\system32\drivers\Bulk533.sys <Not Verified; USB BULK; Platform SDK Sample Code>
2007-12-24 18:54:16 0 d-------- C:\Windows\Setup533
2007-12-24 16:54:34 0 d-------- C:\Users\All Users\Adobe Systems
2007-12-24 16:41:00 0 d-------- C:\Program Files\Common Files\Adobe Systems Shared
2007-12-23 18:13:21 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller
2007-12-23 18:11:09 0 d-------- C:\Users\All Users\WLInstaller
2007-12-21 17:38:35 0 d-------- C:\Program Files\Common Files\PX Storage Engine
2007-12-21 17:37:40 0 d-------- C:\Program Files\DivX
2007-12-20 17:30:08 0 d-------- C:\PsiNet
2007-12-18 01:52:20 0 d-------- C:\Users\All Users\Yahoo! Companion
2007-12-17 18:13:27 0 d-------- C:\Program Files\Simu
2007-12-17 14:42:00 0 d-------- C:\Perfect World
2007-12-17 12:40:10 28672 --a------ C:\JPGI.dll
2007-12-17 12:40:10 1196032 --a------ C:\install.exe <Not Verified; ; Install ????>
2007-12-17 12:40:10 372736 --a------ C:\ijl15.dll <Not Verified; Intel Corporation; Intel® JPEG Library>
2007-12-17 12:40:10 0 d-------- C:\background <BACKGR~1>
2007-12-17 00:29:08 0 d-------- C:\Users\Carl\Shared
2007-12-17 00:29:05 0 d-------- C:\Users\Carl\Incomplete
2007-12-17 00:28:33 0 d-------- C:\Program Files\LimeWire
2007-12-16 23:48:36 401920 --a------ C:\Windows\system32\drivers\BLKWGU9X.sys <Not Verified; Belkin Corporation; Wireless G USB Network Adapter>
2007-12-16 23:48:36 400896 --a------ C:\Windows\system32\drivers\BLKWGU64.sys <Not Verified; Belkin Corporation; Wireless G USB Network Adapter>
2007-12-16 23:47:54 0 d-------- C:\Belkin
2007-12-16 19:04:54 0 d-------- C:\Program Files\EA GAMES
2007-12-15 11:04:23 40960 --a------ C:\Windows\system32\B11gUSB.dll
2007-12-13 18:17:56 200704 --a------ C:\Windows\system32\UpdateDriver.exe <Not Verified; ; UpdateDriver Application>
2007-12-13 18:17:55 0 d-------- C:\Program Files\Belkin
2007-12-13 18:17:09 0 d-------- C:\Program Files\BELKIN USB Wireless Monitor
2007-12-12 22:45:07 0 d-------- C:\Program Files\The Weather Channel FW
2007-12-12 18:11:18 0 d-------- C:\Users\All Users\Viewpoint
2007-12-12 18:11:16 0 d-------- C:\Program Files\Viewpoint
2007-12-12 18:11:03 0 d-------- C:\Users\All Users\AOL
2007-12-12 18:11:03 0 d-------- C:\Users\All Users\AOL OCP
2007-12-12 18:10:40 0 d-------- C:\Program Files\Common Files\AOL
2007-12-12 18:10:36 0 d-------- C:\Program Files\AIM6
2007-12-12 17:53:50 0 d-------- C:\Program Files\Teamspeak2_RC2
2007-12-11 16:34:56 3596288 --a------ C:\Windows\system32\qt-dx331.dll
2007-12-11 16:33:14 196608 --a------ C:\Windows\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2007-12-11 16:33:14 81920 --a------ C:\Windows\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2007-12-11 16:33:04 802816 --a------ C:\Windows\system32\divx_xx11.dll <Not Verified; DivX, Inc.; DivX?>
2007-12-11 16:33:04 823296 --a------ C:\Windows\system32\divx_xx0c.dll <Not Verified; DivX, Inc.; DivX®>
2007-12-11 16:33:04 823296 --a------ C:\Windows\system32\divx_xx07.dll <Not Verified; DivX, Inc.; DivX®>
2007-12-11 16:33:04 682496 --a------ C:\Windows\system32\DivX.dll <Not Verified; DivX, Inc.; DivX®>
2007-12-11 16:32:28 12288 --a------ C:\Windows\system32\DivXWMPExtType.dll
2007-12-10 18:51:25 0 d-------- C:\Program Files\GameSpy Arcade
2007-12-10 11:08:59 0 d-------- C:\.jagex_cache_32
2007-12-10 11:02:27 0 d-------- C:\Program Files\Java
2007-12-10 11:00:22 0 d-------- C:\Program Files\Common Files\Java
2007-12-10 10:31:08 0 d-------- C:\Users\All Users\Messenger Plus!
2007-12-10 10:16:29 0 d-------- C:\Program Files\Outspark
2007-12-10 10:09:02 0 d-------- C:\Intel
2007-12-10 01:45:52 0 d-------- C:\Users\All Users\Grisoft
2007-12-10 01:45:01 0 d-------- C:\Program Files\FileZilla Client
2007-12-10 01:43:29 0 d-------- C:\Program Files\ToniArts
2007-12-10 01:42:34 0 d-------- C:\Program Files\7-Zip
2007-12-10 01:41:56 0 d-------- C:\Program Files\VideoLAN
2007-12-10 01:41:20 0 d-------- C:\Program Files\CamStudio
2007-12-10 01:41:07 0 d-------- C:\Program Files\Audacity 1.3 Beta (Unicode)
2007-12-09 23:02:24 0 d-------- C:\Windows\SoftwareDistribution
2007-12-09 23:00:22 0 d--hs---- C:\System Volume Information
2007-12-09 22:19:52 0 d-------- C:\Program Files\Windows Live
2007-12-09 22:19:51 0 d-------- C:\Program Files\Messenger Plus! Live
2007-12-09 22:10:39 0 d-------- C:\Program Files\MSN Messenger
2007-12-09 21:58:40 0 d-------- C:\Program Files\Ventrilo
2007-12-09 21:58:20 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-09 21:36:00 0 d-------- C:\Program Files\MSXML 4.0
2007-12-09 21:33:41 0 --a------ C:\Windows\nsreg.dat
2007-12-09 21:20:40 0 dr------- C:\Users\Carl\Searches
2007-12-09 21:20:19 0 dr------- C:\Users\Carl\Contacts
2007-12-09 21:17:45 44 --a------ C:\Windows\system\hpsysdrv.dat
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\Templates
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\Start Menu
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\SendTo
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\Recent
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\PrintHood
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\NetHood
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\My Documents
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\Local Settings
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\Cookies
2007-12-09 21:13:12 0 d--hs---- C:\Users\Carl\Application Data
2007-12-09 21:13:11 0 dr------- C:\Users\Carl\Videos
2007-12-09 21:13:11 0 dr------- C:\Users\Carl\Saved Games
2007-12-09 21:13:11 0 dr------- C:\Users\Carl\Pictures
2007-12-09 21:13:11 1572864 --ahs---- C:\Users\Carl\NTUSER.DAT
2007-12-09 21:13:11 0 dr------- C:\Users\Carl\Music
2007-12-09 21:13:11 0 dr------- C:\Users\Carl\Links
2007-12-09 21:13:11 0 dr------- C:\Users\Carl\Favorites
2007-12-09 21:13:11 0 dr------- C:\Users\Carl\Downloads
2007-12-09 21:13:11 0 dr------- C:\Users\Carl\Documents
2007-12-09 21:13:11 0 dr------- C:\Users\Carl\Desktop
2007-12-09 21:13:11 0 d--h----- C:\Users\Carl\AppData
2007-12-09 21:08:41 0 d--hs---- C:\Users\Default\Templates
2007-12-09 21:08:41 0 d--hs---- C:\Users\Default\Start Menu
2007-12-09 21:08:41 0 d--hs---- C:\Users\Default\SendTo
2007-12-09 21:08:41 0 d--hs---- C:\Users\Default\Recent
2007-12-09 21:08:41 0 d--hs---- C:\Users\Default\PrintHood
2007-12-09 21:08:41 0 d--hs---- C:\Users\Default\NetHood
2007-12-09 21:08:41 0 d--hs---- C:\Users\Default\Local Settings
2007-12-09 21:08:41 0 d--hs---- C:\Users\Default\Cookies
2007-12-09 21:08:41 0 d--hs---- C:\Users\Default\Application Data
2007-12-09 21:08:41 0 d--hs---- C:\Users\All Users\Templates
2007-12-09 21:08:41 0 d--hs---- C:\Users\All Users\Start Menu
2007-12-09 21:08:41 0 d--hs---- C:\Users\All Users\Favorites
2007-12-09 21:08:41 0 d--hs---- C:\Users\All Users\Documents
2007-12-09 21:08:41 0 d--hs---- C:\Users\All Users\Desktop
2007-12-09 21:08:41 0 d--hs---- C:\Users\All Users\Application Data
2007-12-09 21:08:41 0 d--hs---- C:\Documents and Settings
2007-12-09 21:08:40 0 d--hs---- C:\Users\Default\My Documents
-- Find3M Report ---------------------------------------------------------------
2008-01-09 13:52:15 0 d-------- C:\Program Files\Windows Mail
2008-01-09 03:03:21 0 d-------- C:\Program Files\Windows Sidebar
2008-01-07 19:00:35 0 d-------- C:\Users\Carl\AppData\Roaming\Audacity
2008-01-05 13:10:05 0 d-------- C:\Program Files\Norton Internet Security
2008-01-05 12:44:24 0 d-------- C:\Users\Carl\AppData\Roaming\Webroot
2008-01-05 12:28:06 0 d-------- C:\Program Files\Common Files\Symantec Shared
2007-12-28 21:12:43 0 d-------- C:\Users\Carl\AppData\Roaming\Adobe
2007-12-28 17:48:04 0 d-------- C:\Users\Carl\AppData\Roaming\Ventrilo
2007-12-27 12:26:06 0 d-------- C:\Users\Carl\AppData\Roaming\LimeWire
2007-12-27 11:54:35 0 d-------- C:\Program Files\Common Files
2007-12-27 11:54:05 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-12-25 00:33:05 0 d-------- C:\Users\Carl\AppData\Roaming\DivX
2007-12-24 16:42:32 0 d-------- C:\Program Files\Common Files\Adobe
2007-12-21 17:46:59 0 d-------- C:\Users\Carl\AppData\Roaming\Real
2007-12-17 18:48:29 0 d-------- C:\Users\Carl\AppData\Roaming\StormFront
2007-12-17 13:06:55 0 d-------- C:\Users\Carl\AppData\Roaming\vlc
2007-12-17 02:16:00 0 d-------- C:\Users\Carl\AppData\Roaming\My Battle for Middle-earth Files
2007-12-12 19:34:18 0 d-------- C:\Users\Carl\AppData\Roaming\acccore
2007-12-12 17:54:11 0 d-------- C:\Users\Carl\AppData\Roaming\teamspeak2
2007-12-10 18:48:47 0 d-------- C:\Program Files\Microsoft Games
2007-12-10 10:08:41 0 d-------- C:\Users\Carl\AppData\Roaming\Grisoft
2007-12-10 10:06:11 174 --ahs---- C:\Program Files\desktop.ini
2007-12-10 10:01:48 0 d-------- C:\Program Files\Windows Calendar
2007-12-10 10:01:46 0 d-------- C:\Program Files\Windows Defender
2007-12-09 22:18:26 0 d-------- C:\Program Files\Symantec
2007-12-09 21:33:26 0 d-------- C:\Users\Carl\AppData\Roaming\Mozilla
2007-12-09 21:23:08 0 d-------- C:\Users\Carl\AppData\Roaming\Hewlett-Packard
2007-12-09 21:20:25 0 d-------- C:\Users\Carl\AppData\Roaming\Identities
2007-12-09 21:17:08 0 d-------- C:\Users\Carl\AppData\Roaming\Macromedia
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0519A9C9-064A-4cbc-BC47-D0EACD581477}]
09/25/2004 05:05 PM 28672 --a------ C:\Program Files\ICOO Loader\addons\icooue.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{465A59EC-20E5-4fca-A38A-E5EC3C480218}]
09/22/2004 04:36 PM 68096 --a------ C:\Program Files\ICOO Loader\addons\icoou.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [12/09/2007 09:54 PM]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" []
"KBD"="C:\HP\KBD\KbdStub.EXE" []
"OsdMaestro"="C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [11/20/2006 05:34 AM]
"RtHDVCpl"="RtHDVCpl.exe" [01/18/2007 08:46 AM C:\WINDOWS\RtHDVCpl.exe]
"DPService"="C:\Program Files\HP\DVDPlay\DPService.exe" [12/06/2006 01:38 PM]
"HP Software Update"="c:\Program Files\HP\HP Software Update\HPWuSchd2.exe" []
"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [10/24/2006 03:08 PM]
"osCheck"="c:\Program Files\Norton Internet Security\osCheck.exe" [10/26/2006 05:18 PM]
"@"="" []
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [08/24/2007 07:54 PM]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [08/24/2007 07:54 PM]
"Persistence"="C:\Windows\system32\igfxpers.exe" [08/24/2007 07:54 PM]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [09/25/2007 01:11 AM]
"WorkFlow"="E:\Install\WorkFlow.exe" []
"SpySweeper"="C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" [10/01/2007 04:40 PM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Aim6"="" []
"DW4"="C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe" [03/16/2007 07:51 AM]
"MSServer"="rundll32.exe" [11/02/2006 03:45 AM C:\WINDOWS\System32\rundll32.exe]
"cmds"="rundll32.exe" [11/02/2006 03:45 AM C:\WINDOWS\System32\rundll32.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce]
"Launcher"=%WINDIR%\SMINST\launcher.exe
C:\Users\Carl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [3/16/2005 7:16:50 PM]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Belkin Wireless USB Utility.lnk - C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe [10/28/2005 11:23:10 AM]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"=2 (0x2)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalService nsi lltdsvc SSDPSRV upnphost SCardSvr w32time EventSystem RemoteRegistry WinHttpAutoProxySvc lanmanworkstation TBS SLUINotify THREADORDER fdrespub netprofm fdphost wcncsvc QWAVE WebClient
LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc wlansvc EMDMgmt TabletInputService WPDBusEnum
LocalServiceNoNetwork PLA DPS BFE mpssvc
*Newly Created Service* - COMHOST
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
C:\Windows\system32\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
-- End of Deckard's System Scanner: finished at 2008-01-09 20:39:15 ------------
Extra:
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft® Windows Vista™ Home Basic (build 6000)
Architecture: X86; Language: English
CPU 0: Intel® Pentium® 4 CPU 3.20GHz
Percentage of Memory in Use: 62%
Physical Memory (total/avail): 1014.75 MiB / 383.57 MiB
Pagefile Memory (total/avail): 2283.1 MiB / 1281.32 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1928.49 MiB
C: is Fixed (NTFS) - 141.96 GiB total, 82.56 GiB free.
D: is Fixed (NTFS) - 7.09 GiB total, 0.88 GiB free.
E: is CDROM (No Media)
\\.\PHYSICALDRIVE0 - ST3160812AS ATA Device - 149.05 GiB - 2 partitions
\PARTITION0 (bootable) - Installable File System - 141.96 GiB - C:
\PARTITION1 - Installable File System - 7.09 GiB - D:
-- Security Center -------------------------------------------------------------
AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.
FW: Norton Internet Security v2007 (Symantec Corporation)
AV: Spy Sweeper with AntiVirus v5.5.7.103 (Webroot Software Inc)
AV: Norton Internet Security v2007 (Symantec Corporation)
AS: AVG Anti-Spyware v7, 5, 1, 43 (GRISOFT s.r.o.)
Disabled OutdatedAS: Windows Defender v1.1.1505.0 (Microsoft Corporation)
AS: Spy Sweeper v5.5.7.103 (Webroot Software Inc)
AS: Norton Internet Security v2007 (Symantec Corporation)
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Program Files\\EarthLink TotalAccess\\TaskPanl.exe"="C:\\Program Files\\EarthLink TotalAccess\\TaskPanl.exe:*:Enabled:Earthlink"
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\Carl\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=SKIDRYN
ComSpec=C:\Windows\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\Carl
LOCALAPPDATA=C:\Users\Carl\AppData\Local
LOGONSERVER=\\SKIDRYN
NUMBER_OF_PROCESSORS=2
OnlineServices=Online Services
OS=Windows_NT
Path=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\hp\bin\Python;c:\Program Files\Common Files\Roxio Shared\DLLShared\;c:\Program Files\Common Files\Roxio Shared\DLLShared\;c:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\;C:\Program Files\Common Files\Adobe\AGL
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PCBRAND=Presario
PLATFORM=HPD
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 6 Stepping 5, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0605
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
PROMPT=$P$G
PUBLIC=C:\Users\Public
RoxioCentral=c:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\Carl\AppData\Local\Temp
TMP=C:\Users\Carl\AppData\Local\Temp
USERDOMAIN=Skidryn
USERNAME=Carl
USERPROFILE=C:\Users\Carl
windir=C:\Windows
-- User Profiles ---------------------------------------------------------------
Carl
-- Add/Remove Programs ---------------------------------------------------------
--> "C:\Program Files\HP Games\Bejeweled 2 Deluxe\Uninstall.exe"
--> "C:\Program Files\HP Games\Bistro Stars\Uninstall.exe"
--> "C:\Program Files\HP Games\Blackhawk Striker 2\Uninstall.exe"
--> "C:\Program Files\HP Games\Blasterball 2 Revolution\Uninstall.exe"
--> "C:\Program Files\HP Games\Blasterball 3\Uninstall.exe"
--> "C:\Program Files\HP Games\Boggle Supreme\Uninstall.exe"
--> "C:\Program Files\HP Games\Bookworm Deluxe\Uninstall.exe"
--> "C:\Program Files\HP Games\Chuzzle Deluxe\Uninstall.exe"
--> "C:\Program Files\HP Games\Crystal Maze\Uninstall.exe"
--> "C:\Program Files\HP Games\Diner Dash\Uninstall.exe"
--> "C:\Program Files\HP Games\Family Feud\Uninstall.exe"
--> "C:\Program Files\HP Games\FATE\Uninstall.exe"
--> "C:\Program Files\HP Games\Final Drive Nitro\Uninstall.exe"
--> "C:\Program Files\HP Games\Insaniquarium Deluxe\Uninstall.exe"
--> "C:\Program Files\HP Games\JEOPARDY\Uninstall.exe"
--> "C:\Program Files\HP Games\Jewel Quest\Uninstall.exe"
--> "C:\Program Files\HP Games\LEGO Builder Bots\Uninstall.exe"
--> "C:\Program Files\HP Games\Mahjong Journey of Enlightenment\Uninstall.exe"
--> "C:\Program Files\HP Games\My HP Game Console\Uninstall.exe"
--> "C:\Program Files\HP Games\Ocean Express\Uninstall.exe"
--> "C:\Program Files\HP Games\Penguins!\Uninstall.exe"
--> "C:\Program Files\HP Games\Polar Bowler\Uninstall.exe"
--> "C:\Program Files\HP Games\Polar Golfer Pineapple Cup\Uninstall.exe"
--> "C:\Program Files\HP Games\Polar Golfer\Uninstall.exe"
--> "C:\Program Files\HP Games\SCRABBLE\Uninstall.exe"
--> "C:\Program Files\HP Games\Slingo Deluxe\Uninstall.exe"
--> "C:\Program Files\HP Games\Super Granny\Uninstall.exe"
--> "C:\Program Files\HP Games\The Apprentice\Uninstall.exe"
--> "C:\Program Files\HP Games\Tornado Jockey\Uninstall.exe"
--> "C:\Program Files\HP Games\Tradewinds\Uninstall.exe"
--> "C:\Program Files\HP Games\Wheel of Fortune\Uninstall.exe"
--> "C:\Program Files\HP Games\Zuma Deluxe\Uninstall.exe"
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
--> MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
7-Zip 4.57 --> "C:\Program Files\7-Zip\Uninstall.exe"
Activation Assistant for the 2007 Microsoft Office suites --> "C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
Adobe Bridge 1.0 --> MsiExec.exe /I{B74D4E10-1033-0000-0000-000000000001}
Adobe Common File Installer --> MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5B39}
Adobe Flash Player 9 ActiveX --> C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Flash Player Plugin --> C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Help Center 1.0 --> MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
Adobe Photoshop CS2 --> msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
Adobe Reader 7.0.8 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70800000002}
Adobe Stock Photos 1.0 --> MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001}
AIM 6 --> C:\Program Files\AIM6\uninst.exe
AppCore --> MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
Audacity 1.3.4 (Unicode) --> "C:\Program Files\Audacity 1.3 Beta (Unicode)\unins000.exe"
AV --> MsiExec.exe /I{F4DB525F-A986-4249-B98B-42A8066251CA}
AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Belkin 54g USB Network Adapter --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\Belkin\Belkin Wireless Network Utility\Setup.exe" -l0x9
Belkin 54Mbps Wireless USB Network Adapter --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup C:\PROGRA~1\BELKIN~1\Setup.exe -l0x9 -L0x9
Belkin Wireless Driver --> C:\Program Files\InstallShield Installation Information\{D593C72C-435B-4171-8106-9CA8AA34D716}\SETUP.EXE -v"ISSCRIPTCMDLINE=\"-d -zREMOVE\"" -l0x0009 -removeonly
Belkin Wireless USB Utility --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{A6359CCF-215D-43D9-8366-479D231F2A72}
CamStudio --> C:\Program Files\CamStudio\uninstall.exe
ccCommon --> MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
Compaq Connections (remove only) --> C:\Windows\HPCPCUninstall-3572475\HPBWSetup.exe -appid 3572475 -uninstall
Digital Camera --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D00353E1-9A80-11D8-A6E6-0000E24CCC1B}\setup.exe"
DivX Codec --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Converter --> C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Dorgem 2.1.0 --> "C:\Program Files\Dorgem\unins000.exe"
DVD Play --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\Setup.exe" -uninstall
EasyCleaner --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe" -l0x9 -removeonly
EGirl 1.5.1 (remove only) --> C:\Program Files\EGirl_v1.5.1\Uninstall.exe
Enhanced Multimedia Keyboard Solution --> C:\HP\KBD\Install.exe /u
Fiesta --> C:\Program Files\Outspark\Fiesta\uninstall.exe
FileZilla Client 3.0.4.1 --> C:\Program Files\FileZilla Client\uninstall.exe
GameSpy Arcade --> C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG
Guild Wars --> "C:\Program Files\Guild Wars\Gw.exe" -uninstall
Hardware Diagnostic Tools --> C:\Program Files\PC-Doctor 5 for Windows\uninst.exe
HijackThis 2.0.2 --> "C:\Users\Carl\Desktop\Downloads\HijackThis.exe" /uninstall
HP Customer Experience Enhancements --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB5E289E-76BF-4251-9F3F-9B763F681AE0}\setup.exe" -l0x9 -removeonly
HP Customer Feedback --> MsiExec.exe /I{9DBA770F-BF73-4D39-B1DF-6035D95268FC}
HP Easy Setup - Core --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F94234DB-FD06-42C3-B88D-6FC4DC9F988C}\setup.exe" -l0x9
HP Easy Setup - Frontend --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40F7AED3-0C7D-4582-99F6-484A515C73F2}\setup.exe" -l0x9 -removeonly
HP On-Screen Caps/Num/Scroll Lock Indicator --> C:\Windows\system32\OsdRemove.exe
HP Picasso Media Center Add-In --> MsiExec.exe /I{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}
HP Total Care Advisor --> MsiExec.exe /X{CBFEEA43-2B94-44AF-8325-B413E62D2A5D}
HP Update --> MsiExec.exe /X{8C6027FD-53DC-446D-BB75-CACD7028A134}
ICOO Loader 2.5 --> "C:\Program Files\ICOO Loader\unins000.exe"
Intel® Graphics Media Accelerator Driver --> C:\Windows\system32\igxpun.exe -uninstall
Java™ 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
LimeWire 4.14.12 --> "C:\Program Files\LimeWire\uninstall.exe"
LiveUpdate 3.2 (Symantec Corporation) --> "C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
Messenger Plus! Live --> "C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft Halo --> "C:\Program Files\Microsoft Games\Halo\UNINSTAL.EXE" /runtemp /addremove
Microsoft Office Excel MUI (English) 2007 --> MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Home and Student 2007 --> "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007 --> MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (English) 2007 --> MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007 --> MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007 --> MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007 --> MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007 --> MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007 --> MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007 --> MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007 --> MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007 --> MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Works --> MsiExec.exe /I{6D52C408-B09A-4520-9B18-475B81D393F1}
Mozilla Firefox (2.0.0.11) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Firefox (3.0b2) --> C:\Program Files\Mozilla Firefox 3 Beta 2\uninstall\helper.exe
MSRedist --> MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
MSXML 4.0 SP2 (KB936181) --> MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833) --> MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 Parser and SDK --> MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
My HP Games --> "C:\Program Files\HP Games\Uninstall.exe"
No-IP.com DUC (remove only) --> "C:\Program Files\No-IP\DUC20.exe" -uninstall
Norton AntiVirus --> MsiExec.exe /X{830D8CBD-C668-49e2-A969-C2C2106332E0}
Norton Confidential Browser Component --> MsiExec.exe /I{4843B611-8FCB-4428-8C23-31D0A5EAE164}
Norton Confidential Web Protection Component --> MsiExec.exe /I{D353CC51-430D-4C6F-9B7E-52003DA1E05A}
Norton Internet Security --> MsiExec.exe /I{48185814-A224-447A-81DA-71BD20580E1B}
Norton Internet Security --> MsiExec.exe /I{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}
Norton Internet Security --> MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}
Norton Internet Security --> MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
Norton Internet Security (Symantec Corporation) --> "C:\Program Files\Common Files\Symantec Shared\SymSetup\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}_10_1_0_26\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}.exe" /X
Norton Protection Center --> MsiExec.exe /I{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8}
Outspark Launcher --> C:\Program Files\Outspark\Launcher\uninstall.exe
PhoTags Express --> C:\PROGRA~1\PHOTAG~1\Setup.exe /remove /q0
Python 2.4.3 --> MsiExec.exe /I{75E71ADD-042C-4F30-BFAC-A9EC42351313}
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x9 -removeonly
RedLightCenter --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35C73A54-1428-4893-B041-58AA594F4ACD}\setup.exe" -l0x9
Rhapsody --> C:\PROGRA~1\Rhapsody\Unwise32.exe /A C:\PROGRA~1\Rhapsody\install.log
Rhapsody Player Engine --> MsiExec.exe /I{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}
RM WMA Converter 1.10 --> "C:\Program Files\HiFisoftware\RM WMA Converter\unins000.exe"
Roxio Creator Audio --> MsiExec.exe /X{83FFCFC7-88C6-41c6-8752-958A45325C82}
Roxio Creator Basic v9 --> MsiExec.exe /X{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
Roxio Creator Copy --> MsiExec.exe /X{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
Roxio Creator Data --> MsiExec.exe /X{0D397393-9B50-4c52-84D5-77E344289F87}
Roxio Creator EasyArchive --> MsiExec.exe /X{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}
Roxio Creator Tools --> MsiExec.exe /X{0394CDC8-FABD-4ed8-B104-03393876DFDF}
Roxio Express Labeler 3 --> MsiExec.exe /X{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio MyDVD Basic v9 --> MsiExec.exe /X{E4A02A3F-4F8A-4D94-BB99-68BC1D1CF6DB}
Soft Data Fax Modem with SmartCP --> C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1\UIU32m.exe -U -ITrx200Cz.inf
SPBBC 32bit --> MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
Spy Sweeper --> "C:\Program Files\Webroot\Spy Sweeper\unins000.exe"
StormFront --> F:\GEMSTONE\UNWISE.EXE F:\GEMSTONE\INSTALL.LOG
TeamSpeak 2 RC2 --> "C:\Program Files\Teamspeak2_RC2\unins000.exe"
The Battle for Middle-earth ™ --> C:\Program Files\EA GAMES\The Battle for Middle-earth ™\EAUninstall.exe
The Weather Channel Desktop --> C:\Program Files\The Weather Channel FW\Desktop Weather\TheWeatherChannelCustomUninstall.exe
Ventrilo Client --> MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}
Ventrilo Server --> MsiExec.exe /I{1D46A3A0-B37D-423A-91C2-101A49E2FF80}
VideoLAN VLC media player 0.8.6d --> C:\Program Files\VideoLAN\VLC\uninstall.exe
Viewpoint Media Player --> C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u
Weather Services --> C:\Windows\system32\control.exe C:\PROGRA~1\THEWEA~1\Framework\wxfw.cpl,4
WinAVI Video Converter --> "C:\Program Files\WinAVI Video Converter\unins000.exe"
Windows Live installer --> MsiExec.exe /X{A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320}
Windows Live Messenger --> MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
Yahoo! Toolbar for Internet Explorer --> C:\PROGRA~1\Yahoo!\Common\unyt.exe
-- Application Event Log -------------------------------------------------------
Event Record #/Type3908 / Success
Event Submitted/Written: 01/09/2008 07:16:55 PM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.
Event Record #/Type3871 / Success
Event Submitted/Written: 01/09/2008 01:54:21 PM
Event ID/Source: 5617 / WinMgmt
Event Description:
Event Record #/Type3870 / Success
Event Submitted/Written: 01/09/2008 01:54:18 PM
Event ID/Source: 5615 / WinMgmt
Event Description:
Event Record #/Type3863 / Success
Event Submitted/Written: 01/09/2008 01:54:05 PM
Event ID/Source: 902 / Software Licensing Service
Event Description:
The Software Licensing service has started.
Event Record #/Type3843 / Warning
Event Submitted/Written: 01/09/2008 01:52:20 PM
Event ID/Source: 6004 / Wlclntfy
Event Description:
The winlogon notification subscriber <TrustedInstaller> failed a critical notification event.
-- Security Event Log ----------------------------------------------------------
No Errors/Warnings found.
-- System Event Log ------------------------------------------------------------
Event Record #/Type11478 / Warning
Event Submitted/Written: 01/09/2008 08:37:27 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%Skidryn27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %Skidryn27 can't undo changes that you allow.
For more information please see the following:
%Skidryn275
Scan ID: {933DB5A3-8B4A-4DAA-8A76-CA888DEA94D6}
User: Skidryn\Carl
Name: %Skidryn271
ID: %Skidryn272
Severity ID: %Skidryn273
Category ID: %Skidryn274
Path Found: %Skidryn276
Alert Type: %Skidryn278
Detection Type: 1.1.1505.02
Event Record #/Type11477 / Warning
Event Submitted/Written: 01/09/2008 08:37:27 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%Skidryn27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %Skidryn27 can't undo changes that you allow.
For more information please see the following:
%Skidryn275
Scan ID: {847F3DCE-D8D2-4910-B74A-9FEFD231A8BF}
User: Skidryn\Carl
Name: %Skidryn271
ID: %Skidryn272
Severity ID: %Skidryn273
Category ID: %Skidryn274
Path Found: %Skidryn276
Alert Type: %Skidryn278
Detection Type: 1.1.1505.02
Event Record #/Type11476 / Warning
Event Submitted/Written: 01/09/2008 08:37:26 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%Skidryn27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %Skidryn27 can't undo changes that you allow.
For more information please see the following:
%Skidryn275
Scan ID: {6BAC7881-EC8B-4576-A483-2ABE7DFEE591}
User: Skidryn\Carl
Name: %Skidryn271
ID: %Skidryn272
Severity ID: %Skidryn273
Category ID: %Skidryn274
Path Found: %Skidryn276
Alert Type: %Skidryn278
Detection Type: 1.1.1505.02
Event Record #/Type11475 / Warning
Event Submitted/Written: 01/09/2008 08:37:26 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%Skidryn27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %Skidryn27 can't undo changes that you allow.
For more information please see the following:
%Skidryn275
Scan ID: {0BF3EE9D-9003-4B50-89DC-323861346AE8}
User: Skidryn\Carl
Name: %Skidryn271
ID: %Skidryn272
Severity ID: %Skidryn273
Category ID: %Skidryn274
Path Found: %Skidryn276
Alert Type: %Skidryn278
Detection Type: 1.1.1505.02
Event Record #/Type11474 / Warning
Event Submitted/Written: 01/09/2008 08:37:25 PM
Ev
This topic is locked
Sign In
Create Account
