Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

[Referred]Ad-Aware logfile help


  • Please log in to reply

#121
jasonfultz

jasonfultz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
Here are the results from my registry scan changes. I looked it over and sure hope this means more to you than it does to me. *grins* Also, there are a few entries for cookies and the Mozilla directory. This was probably caused by me surfing the internet while it was doing its thing. I figured it was only looking at registry entries and not files. I was wrong.

*********************************************

Installation Report: (two-phase mode)
Generated by InCtrl5, version 1.0.0.0
Install program:
8/8/2005 1:48 PM

------------------------------------------------------------
Registry
********

Keys ignored: 0
---------------
* (none)

Values added: 5
---------------
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\InCtrl5 "Order"
Type: REG_BINARY
Data: 08, 00, 00, 00, 02, 00, 00, 00, 9C, 00, 00, 00, 01, 00, 00, 00, 02, 00, 00, 00, 50, 00, 00, 00, 00, 00, 00, 00, 42, 00, 00, 00, 41, 75, 67, 4D, 01, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 2C, 00, 32, 00, BF, 01, 00, 00, 08, 33, 4D, 95, 20, 08, 49, 6E, 43, 74, 72, 6C, 35, 20, 48, 65, 6C, 70, 2E, 6C, 6E, 6B, 00, 49, 4E, 43, 54, 52, 4C, 7E, 31, 2E, 4C, 4E, 4B, 00, 00, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 01, 00, 00, 00, 31, 00, 00, 00, 41, 75, 67, 4D, 01, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 1B, 00, 32, 00, C5, 01, 00, 00, 08, 33, 4E, 95, 20, 08, 49, 6E, 43, 74, 72, 6C, 35, 2E, 6C, 6E, 6B, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{b7eafdc0-a680-11d0-96d8-00aa0051e51d}\{9B365890-165F-11D0-A195-0020AFD156E4}\Control "DeviceReference"
Type: REG_DWORD
Data: 10, B9, 21, 80
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kmixer\Enum "0"
Type: REG_SZ
Data: SW\{b7eafdc0-a680-11d0-96d8-00aa0051e51d}\{9B365890-165F-11D0-A195-0020AFD156E4}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\SW\{b7eafdc0-a680-11d0-96d8-00aa0051e51d}\{9B365890-165F-11D0-A195-0020AFD156E4}\Control "DeviceReference"
Type: REG_DWORD
Data: 10, B9, 21, 80
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kmixer\Enum "0"
Type: REG_SZ
Data: SW\{b7eafdc0-a680-11d0-96d8-00aa0051e51d}\{9B365890-165F-11D0-A195-0020AFD156E4}

Values changed: 15
------------------
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs "Order"
Old type: REG_BINARY
New type: REG_BINARY
Old data: (data too large: 3842 bytes)
New data: (data too large: 3902 bytes)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU "MRUListEx"
Old type: REG_BINARY
New type: REG_BINARY
Old data: (data too large: 804 bytes)
New data: (data too large: 804 bytes)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count "HRZR_EHACNGU"
Old type: REG_BINARY
New type: REG_BINARY
Old data: 67, 02, 00, 00, 21, 04, 00, 00, E0, 7D, E9, F7, 48, 9C, C5, 01
New data: 67, 02, 00, 00, 23, 04, 00, 00, E0, 1C, 8A, 8A, 49, 9C, C5, 01
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count "HRZR_EHACNGU:P:\Cebtenz Svyrf\Vagrearg Rkcybere\VRKCYBER.RKR"
Old type: REG_BINARY
New type: REG_BINARY
Old data: 64, 02, 00, 00, AE, 01, 00, 00, 10, 23, 09, 53, E7, 99, C5, 01
New data: 67, 02, 00, 00, AE, 01, 00, 00, 80, DA, 26, 81, 49, 9C, C5, 01
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count "HRZR_EHACNGU:V:\Cebtenz Svyrf\VaPgey5\VaPgey5.rkr"
Old type: REG_BINARY
New type: REG_BINARY
Old data: 67, 02, 00, 00, 06, 00, 00, 00, E0, 7D, E9, F7, 48, 9C, C5, 01
New data: 67, 02, 00, 00, 07, 00, 00, 00, E0, 1C, 8A, 8A, 49, 9C, C5, 01
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count "HRZR_EHACVQY"
Old type: REG_BINARY
New type: REG_BINARY
Old data: 67, 02, 00, 00, B7, 00, 00, 00, 00, B5, D8, F7, 48, 9C, C5, 01
New data: 67, 02, 00, 00, B9, 00, 00, 00, 00, 54, 79, 8A, 49, 9C, C5, 01
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count "HRZR_EHACVQY:%pfvqy2%\VaPgey5"
Old type: REG_BINARY
New type: REG_BINARY
Old data: 67, 02, 00, 00, 06, 00, 00, 00, 00, B5, D8, F7, 48, 9C, C5, 01
New data: 67, 02, 00, 00, 07, 00, 00, 00, 00, 54, 79, 8A, 49, 9C, C5, 01
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count "HRZR_EHACVQY:%pfvqy2%\VaPgey5\VaPgey5.yax"
Old type: REG_BINARY
New type: REG_BINARY
Old data: 67, 02, 00, 00, 06, 00, 00, 00, 00, B5, D8, F7, 48, 9C, C5, 01
New data: 67, 02, 00, 00, 07, 00, 00, 00, 00, 54, 79, 8A, 49, 9C, C5, 01
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count "HRZR_HVDPHG"
Old type: REG_BINARY
New type: REG_BINARY
Old data: 67, 02, 00, 00, 13, 08, 00, 00, F0, C3, E0, 15, 47, 9C, C5, 01
New data: 67, 02, 00, 00, 14, 08, 00, 00, 10, A2, ED, 80, 49, 9C, C5, 01
HKEY_CURRENT_USER\Software\Yahoo\Companion "b"
Old type: REG_DWORD
New type: REG_DWORD
Old data: A4, 1D, 00, 00
New data: A6, 1D, 00, 00
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG "Seed"
Old type: REG_BINARY
New type: REG_BINARY
Old data: 19, E3, 41, A1, 8D, 73, 0D, 52, A5, 76, F7, 59, 10, 28, 40, DC, 34, 29, D5, D7, 7E, E3, CC, 12, 8A, A1, C1, 44, 3D, FA, E1, 19, BD, 56, 3C, E8, 37, 77, 00, E5, 20, 95, 82, 7D, E4, 56, 18, 0C, BF, 0D, 6D, 68, CA, 7C, 12, 8D, 48, 95, 24, 01, 46, D9, 6F, 99, 3E, 45, 43, 90, 24, 96, 71, 46, D1, 37, BF, 61, BB, 69, A2, C7
New data: CF, 3B, 92, C1, EA, 26, C0, AC, CE, 6D, 38, FE, A1, 9E, 86, 2C, 39, 35, 81, C8, F0, 70, 3D, 2C, 0E, F7, AC, 34, DD, 2B, 4C, 15, E7, F8, 05, CF, D4, D0, AE, 23, D2, 39, B0, A3, 44, 97, 89, 50, 4B, 05, 72, 6C, 6A, EF, 6B, 16, AC, AB, 64, AD, 22, 9D, E8, A6, 92, 6A, B5, 40, F9, 69, C2, 0F, B8, E2, 80, E6, 44, 94, ED, 0B
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kmixer\Enum "Count"
Old type: REG_DWORD
New type: REG_DWORD
Old data: 00, 00, 00, 00
New data: 01, 00, 00, 00
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kmixer\Enum "NextInstance"
Old type: REG_DWORD
New type: REG_DWORD
Old data: 00, 00, 00, 00
New data: 01, 00, 00, 00
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kmixer\Enum "Count"
Old type: REG_DWORD
New type: REG_DWORD
Old data: 00, 00, 00, 00
New data: 01, 00, 00, 00
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kmixer\Enum "NextInstance"
Old type: REG_DWORD
New type: REG_DWORD
Old data: 00, 00, 00, 00
New data: 01, 00, 00, 00
------------------------------------------------------------
Disk contents
*************

Drives tracked: 4
-----------------
* c:\
* d:\
* e:\
* g:\

Files added: 1
--------------
c:\WINNT\system32\Perflib_Perfdata_48c.dat
Date: 8/8/2005 1:47 PM
Size: 16,384 bytes

Files deleted: 1
----------------
c:\WINNT\system32\Perflib_Perfdata_69c.dat
Date: 8/8/2005 1:44 PM
Size: 16,384 bytes

Files changed: 12
-----------------
c:\Documents and Settings\Jason Fultz\NTUSER.DAT
Old date: 8/8/2005 1:42 PM
New date: 8/8/2005 1:46 PM
Old size: 2,174,976 bytes
New size: 2,174,976 bytes
c:\Documents and Settings\Jason Fultz\ntuser.dat.LOG
Old date: 8/8/2005 1:42 PM
New date: 8/8/2005 1:46 PM
Old size: 1,024 bytes
New size: 1,024 bytes
c:\Documents and Settings\Jason Fultz\Application Data\Mozilla\Profiles\default\ojufvc3c.slt\cookies.txt
Old date: 8/8/2005 1:39 PM
New date: 8/8/2005 1:46 PM
Old size: 24,791 bytes
New size: 24,891 bytes
c:\Documents and Settings\Jason Fultz\Application Data\Mozilla\Profiles\default\ojufvc3c.slt\history.dat
Old date: 8/8/2005 1:40 PM
New date: 8/8/2005 1:46 PM
Old size: 151,522 bytes
New size: 153,039 bytes
c:\Documents and Settings\Jason Fultz\Application Data\Mozilla\Profiles\default\ojufvc3c.slt\Cache\_CACHE_001_
Old date: 8/8/2005 1:40 PM
New date: 8/8/2005 1:45 PM
Old size: 1,456,128 bytes
New size: 1,456,640 bytes
c:\Documents and Settings\Jason Fultz\Cookies\index.dat
Old date: 8/7/2005 4:34 PM
New date: 8/8/2005 1:46 PM
Old size: 65,536 bytes
New size: 65,536 bytes
c:\Documents and Settings\Jason Fultz\Local Settings\History\History.IE5\index.dat
Old date: 8/7/2005 4:34 PM
New date: 8/8/2005 1:46 PM
Old size: 1,310,720 bytes
New size: 1,310,720 bytes
c:\Documents and Settings\Jason Fultz\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Old date: 8/7/2005 4:34 PM
New date: 8/8/2005 1:46 PM
Old size: 163,840 bytes
New size: 163,840 bytes
c:\WINNT\system32\config\software
Old date: 8/8/2005 1:42 PM
New date: 8/8/2005 1:46 PM
Old size: 17,006,592 bytes
New size: 17,006,592 bytes
c:\WINNT\system32\config\software.LOG
Old date: 8/8/2005 1:42 PM
New date: 8/8/2005 1:46 PM
Old size: 1,024 bytes
New size: 1,024 bytes
c:\WINNT\system32\config\system
Old date: 8/8/2005 1:42 PM
New date: 8/8/2005 1:46 PM
Old size: 3,547,136 bytes
New size: 3,547,136 bytes
c:\WINNT\system32\config\SYSTEM.ALT
Old date: 8/8/2005 1:42 PM
New date: 8/8/2005 1:46 PM
Old size: 3,547,136 bytes
New size: 3,547,136 bytes
------------------------------------------------------------
INI file
********

Ini files tracked: 4
--------------------
* C:\boot.ini
* c:\winnt\control.ini
* c:\winnt\system.ini
* c:\winnt\win.ini
------------------------------------------------------------
Text file
*********

Text files tracked: 2
---------------------
* c:\winnt\system32\autoexec.nt
* c:\winnt\system32\config.nt
------------------------------------------------------------
InCtrl5, Copyright © 2000 by Ziff Davis Media, Inc.
Written by Neil J. Rubenking
First published in PC Magazine, December 5, 2000.
  • 0

Advertisements


#122
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
If it's there. I don't see it.

I'll have another try tomorrow after my first mugs of coffee. :tazz:
  • 0

#123
jasonfultz

jasonfultz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
Okie doke...thanks for helping out.

What part of the world are you in, Pieter? I'm just curious. :tazz:
  • 0

#124
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
I'm in the Netherlands.

I have looked at the InCtrl log with a clear head and everything in there is OK.

I'd like to try something different. If it works we can take it from there.

Create a new user account (with admin privileges) as described here:
http://www.utexas.ed...seraccount.html

Log in under that account and see if you can install and use IE 6 from there.

Let me know.

Regards,
  • 0

#125
jasonfultz

jasonfultz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
Ok. I created a new admin account. I logged off of my regular account and logged in with the new admin account. I tried to install IE6 and a window popped up that claims that I have an existing install pending and that I need to reboot in order to continue (it did nothing else and this looks exactly like it looked a while back with the other account).

I ran Windows Installation Cleanup and noticed that IE still wasn't in the list of programs. I haven't tried running IE yet, as I wasn't sure if that would change something that we would prefer not to be changed at this point.

Let me know what you want me to do next.

Jason...
  • 0

#126
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
In the old Admins account make a manual Restore point.

Then reboot into new account you made (we will use that to experiment with now), and run Windows Installation Cleanup and click Select All > Remove

Then reboot into that new account again and try installing IE.

Regards,
  • 0

#127
jasonfultz

jasonfultz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
I've never made a manual restore point before. How do I do that in 2000 Pro?
  • 0

#128
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Excuse the terminology. Technically there is no such thing as a Restore Point in win2k, but you can backup the registry:
http://service1.syma...src=sec_doc_nam

Regards,
  • 0

#129
jasonfultz

jasonfultz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
When I was logged in as the other account I tried to open IE just for kicks, knowing that I was going to have to reboot anyway. And the darned thing came up correctly. Which should tell us that the problem lies only with this account. I am not going to log into the other account nor remove the registry entries with Windows Cleanup unless you tell me to do so again, as I think this changes things.

Let me know what you'd like me to do next.

Finally, we're on the right track! :tazz:
  • 0

#130
jasonfultz

jasonfultz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
To clarify:

IE works fine with the new admin account.

I am doing nothing else (including your previous suggestions) until you tell me to do them again now that we know the problem is account related only.
  • 0

Advertisements


#131
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
We'll just transfer the Data from the old to the new account. How's that?

Go up to Tools > Folder Options. Click the "View" tab and click "Show Hidden Files and Folders". UNcheck "Hide File Extensions for known file types" and UNcheck "Hide protected operating system files". Click Apply, click OK.

Navigate to this folder:

C:\Documents and Settings\Old Username

* Old Username is not the actual name of that folder. The name of this folder is whatever name you have for the account with problems.

Once inside that folder, PRESS and HOLD the ctrl key. Then use your mouse and LEFT-click ALL files and folders to highlight them EXCEPT the following:

Ntuser.dat
Ntuser.dat.log
Ntuser.ini

Do NOT highlight those 3 files!

Once ALL files and folders are highlighted (except the above three!) go up to "Edit > Copy"

Now, navigate to this folder:

C:\Documents and Settings\New Username

New Username is whatever the name of your SECOND account

Once inside that folder, go up to "Edit > Paste"

However, if you use Outlook we will have to copy your e-mails a different way so let me know if that is the case.

Regards,
  • 0

#132
jasonfultz

jasonfultz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
*grins*

Well, I did everything you described in a slightly different way. I had to create a third account to act as my 'mediator'. When I tried copying files from one account to the other (no matter which one I was using) I would get an error message that popped up telling me that it couldn't copy a certain file and then it'd stop the whole task. So I logged in with a different admin account and copied all the files over (excluding the 3 files you mentioned to not copy).

So now I'm using the new account and everything's dandy. I'm going to keep the old account around for a while until I see if everything's working properly and then I'll probably delete it to save space.

We never actually figured out what was wrong, exactly. But we did come up with a great solution to it. Can you believe how long it took?

Thanks for your help these past few months. I know it must have been draining on you, because it certainly was on me.

If I could email Death By Chocolate Chip Cookies to you, I would. Because my wife makes the best (so far, no one has died from them).

Again, thank you for your time and patience. You're a really great guy. The Netherlands should be proud to have you.

Jason...
  • 0

#133
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
It bugs me that I didn't find the actual problem, but I'm glad you can use your computer again.

I should have realized you needed a third account, because the files will be in use otherwise. :tazz:

Can you find the Ntuser.ini (the one you didn't copy) and rightclick it?

Post the content of the file please.

Regards,
  • 0

#134
jasonfultz

jasonfultz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
These are the contents of the ntuser.ini file from the directory of my old account:

**********************************************


[General]
ExclusionList=Local Settings;Temporary Internet Files;History;Temp;
  • 0

#135
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
OK. Nothing strange there. Never mind. It was just a hunch. :tazz:

Regards,
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP