Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

PSguard and the missing wininet.dll file! [RESOLVED]


  • This topic is locked This topic is locked

#46
dweebosh

dweebosh

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
OK, I tried renaming HJT but it still wouldn't run. Itty Bitty Process Manager also refused to run (even after I renamed the program).
Good news! The Sysclean package did run - here's the log...

/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
| http://www.trendmicro.com |
\--------------------------------------------------------------/


2005-08-30, 10:17:11, Auto-clean mode specified.
2005-08-30, 10:17:11, Running scanner "C:\WINDOWS\DESKTOP\SYSCLEAN\TSC.BIN"...
2005-08-30, 10:17:56, Scanner "C:\WINDOWS\DESKTOP\SYSCLEAN\TSC.BIN" has finished running.
2005-08-30, 10:17:56, TSC Log:

Damage Cleanup Engine (DCE) 3.9(Build 1020)
Windows Me

Start time : Tue Aug 30 2005 10:17:13

Load Damage Cleanup Template (DCT) "C:\WINDOWS\DESKTOP\SYSCLEAN\tsc.ptn" (version 640) [success]

Complete time : Tue Aug 30 2005 10:17:56
Execute pattern count(4262), Virus found count(0), Virus clean count(0), Clean failed count(0)

2005-08-30, 10:18:07, An error occurred while scanning file "C:\WINDOWS\WIN386.SWP": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Database\hcdata.mdb": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Database\hcdata.bak": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Database\Cntstore.bin": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Database\SAFStore.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Database\Merged.HHK": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Database\HelpSessionHistory.stream": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\HomePage__16colors.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Banner__16colors.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\HomePage__highcontrast.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Banner__highcontrast.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Channels.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\HelpCtr.mmf": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\HomePage.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\NavBar.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Startup.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Search.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Status.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\StatusClosed.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Taxonomy.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Tutorials.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Banner.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Handle.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\ContentViewer.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Index.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\IndexViewer.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\SelectPage.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Forums.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\MessageBoard.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Error.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Dummy.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Dummy2.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Dummy3.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Dummy4.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\Dummy5.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\redirect.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\scripts\Common.js": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\scripts\FrameCtrl.js": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\scripts\Taxonomy.js": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\scripts\Separator.js": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\navbar.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\navbar__16colors.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\navbar__highcontrast.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\PCHealth.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\PCHealth__16colors.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\PCHealth__highcontrast.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\PCHealth.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\Viewer.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\Viewer__16colors.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\Viewer__highcontrast.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\css\Navigate.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\sysinfo\msinfo.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\HTMLHelp_sm.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\WebHelp_sm.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\SBSI_sm.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\btn-back.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\btn-back_inactive.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\btn-back_over.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\btn-forward.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\btn-forward_inactive.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\btn-forward_over.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\btn-print.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\btn-print_inactive.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\btn-print_over.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\content_grow.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\content_grow_over.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\content_shrink.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\content_shrink_over.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\content_logo.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\startup.jpg": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\msn.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\ask.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\Home_lowerLeft.jpg": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\Home_lowerRight.jpg": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\Home_topLeft.jpg": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\images\Home_topRight.jpg": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\NetDiag\minus.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\NetDiag\plus.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\NetDiag\topright.jpg": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\NetDiag\logs.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Context.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Index.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Menu.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\MenuSeparator.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\RecentHelpTopics.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Search.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\SearchResults.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Taxonomy.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\TaxonomyNodesOnly.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Tutorials.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\HideShow.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Background.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Background__16colors.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Background__highcontrast.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\System\comps\Channels.htc": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Config\dataspec.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Config\pchver.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Config\pss.cab": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Config\Setup.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinehistory.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\onofflinedet.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineSupport.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Support.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\CheckConnection.js": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\logo.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\PSS.css": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\chgvw.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\note_bottom.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\note_top.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\note_sides.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\max.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\down.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\icon.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\jeffrey.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\wu_zoomin.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\wu_zoomout.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\updnote.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\upd_intr.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\HSCUPD01\winmeup.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\intro.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\acerSupport.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\hlist.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\tlist.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\contact\worldmap.html": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\contact\worldcolor.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\contact\euro.html": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\contact\aac.html": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\contact\asia.html": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\contact\acla.html": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\contact\aust.html": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\CSS\PCHealth.CSS": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\images\acerlogo.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\images\bannerpic.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\images\logo2.jpg": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\images\folder.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\images\g_square.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\images\nofolder.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\images\ofolder.gif": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\assisted\snapshotspec.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\assisted\sysinfo.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\assisted\transform.xsl": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\bad sectors.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\disk not formatted error.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\intermittent cd read errors.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\memory not detected.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\missing colors.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook 56k modem.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook battery discharge.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook battery operation.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook black border.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook case cleaning.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook cd eject.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook cdrom care.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook cdrom speed.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook default video.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook dvd regions.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook hard drive space.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook infrared port.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook lan connection.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook pc card.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\howto\notebook power on.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\micrec1.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\micrec2.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\micrec3.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\notebook_cd1.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\notebook_cd2.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\notebook_cd3.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\notebook_cd4.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\thanks.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\unablecdnotebook.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Acer America Corporation,L=San Jose,S=CA,C=US\troubleshooting\unablemicrec.htm": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8621.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8623.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8593.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8595.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8599.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8601.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8603.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8607.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8609.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8611.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8613.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8615.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8617.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\history_db.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8619.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8597.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_46.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_48.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8605.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7482.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_76.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_78.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8062.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7546.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8314.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_172.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7742.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8250.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7610.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8506.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8254.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7514.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7642.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7930.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_302.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_304.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_306.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5290.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7962.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_334.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_336.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7834.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8442.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_366.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8282.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8574.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_396.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_398.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7866.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8602.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_430.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8346.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_1490.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8090.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7806.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8126.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_590.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8158.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7994.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_1618.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_654.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8410.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8474.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8538.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8218.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8190.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8286.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_814.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8378.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8382.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_878.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8478.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7310.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7998.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7354.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7418.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_2030.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7450.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7678.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8222.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8414.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_1294.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_1358.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_1422.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_1424.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7770.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7898.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5450.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_1486.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_1488.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8542.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8446.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8510.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7870.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8606.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_1646.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7706.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7934.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7710.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7774.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8026.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8094.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7966.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_2990.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8030.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_2254.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_2256.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_2416.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_2480.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_2926.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5136.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_4784.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5162.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7902.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5226.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5322.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8350.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5418.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_7838.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5680.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5712.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_5776.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_6926.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_6928.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_6960.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8318.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8270.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8272.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8302.xml": Access is denied.
2005-08-30, 10:21:44, Could not set file for reading on "C:\WINDOWS\PCHEALTH\HELPCTR\DataColl\CollectedData_8336.xml": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\DSINFO.DAT": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\VxDMon.dat": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\VxDMon.cfg": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\SRDISKID.DAT": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\DISKCFG.DAT": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\TEMP\A0006630.CPY": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\TEMP\A0006631.CPY": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\TEMP\A0006632.CPY": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\TEMP\A0006634.CPY": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\TEMP\A0006637.CPY": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\TEMP\A0006639.CPY": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\TEMP\A0006629.CPY": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\RG42F9D941.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\BKUPLOG.1": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS10.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS9.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS6.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS7.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS16.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS33.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS23.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS21.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS11.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS12.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS13.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS14.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS15.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS17.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS18.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS19.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS20.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS22.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\RG42FA4E40.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS55.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS37.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS25.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS24.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS1.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS2.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS3.CAB": Access is denied.
2005-08-30, 10:22:43, Could not set file for reading on "C:\_RESTORE\ARCHIVE\FS4.CAB": Access is denied.
2005-08-30, 10:22:43, Could
  • 0

Advertisements


#47
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

OK, I will ask you to run a lot of programs now (many which you have run already, but run them again accordingly):

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer and uncheck the same box to enable System Restore.

Go to Start->Run and type in sfc /scannow and hit OK. Let it scan. If it finds any files missing/corrupted, it may ask for the Windows CD.

Update Ad-aware, Spybot and Ewido now if there are any updates for them.

Download Hoster http://www.greyknigh.../spy/Hoster.exe and run it. Choose the 'Restore Original Hosts' button and press OK. If you installed any HOSTS file or program that put entries into the hosts file to protect you from malicious sites, you will have to install them back.

Boot into Safe Mode and run the CleanUp program. Next run the scans for Ad-aware, Spybot and Ewido, separately...Save the Ewido log when it's done.

Restart and run BOTH these scans:

Run an online virus scan at TrendMicro http://uk.trendmicro...call_launch.php. Just follow the instructions on the site to run the free online scan. If any viruses/trojans are detected, try to delete or clean them in that site. If any are not cleanable, copy and paste the infected files here. You may also use Panda ActiveScan at http://www.pandasoft...ucts/activescan. Save the log from the Panda scan.

Please empty any Quarantine folder in your antivirus program and purge all recovery items in the Spybot program (if you use it) before running this tool.

Download the Mwav virus checker at http://www.mwti.net/antivirus/mwav.asp (Use Link 3)

1. Save it to a folder.
2. Reboot into Safe Mode.
3. Double click the Mwav.exe file. This is a stand alone tool and NOT just a virus checker......so it won't install anything.
4. Select all local drives, scan all files, and press SCAN. When it is completed, anything found will be displayed in the lower pane.
5. In the Virus Log Information Pane......
Left click and highlight all the information in the Lower pane --- Use &CTRL C &on your keyboard to copy everything found in the lower pane and save it to a notepad file
*Note* If prompted that a virus was found and you need to purchase the product to remove the malware, just close out the prompt and let it continue scanning. We are not going to use this to remove anything...but to ID the bad files.

Once you copy that to a Notepad file...highlight the text and copy it here.


Post the logs for Ewido, Panda, mwav and a new HijackThis log. Also give me this log:

Right click on http://www.silentrun...ent Runners.vbs and choose Save As...Save it to your Desktop. Make sure you have disabled any programs that may block/disable scripts (ex: Ad-Watch, TeaTimer, Norton, etc.). Double click on 'Silent Runners' to run it. This will take a few minutes. It will create a file called 'Startup Programs' followed by your computer name and current date. Open up that file and post all the contents here in your next post.
  • 0

#48
dweebosh

dweebosh

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
HijackThis! is running again :tazz: I tried to follow the instructions in your last post but system file check wouldn't run (sfc /scannow) and I couldn't get the online virus scans to work. I couldn't download the DirectX controls for the Panda scan or the Java applet for the Trend Micro scan.

I went back to windows update and re-downloaded/installed all the critical updates/patches etc. Then downloaded JVM afresh from Sun. (Thought that there might be problems with newly installed programs after my recent system restore).

After several reboots and rounds of CleanUp/Ad-Aware/Spybot (both safe mode and normal) HJT started to respond again. I can't get to an internet connection to run the online scans right now, but I can post the results of these later if necessary (assuming that they will run now?). Here's my (safe mode) HJT log...

Logfile of HijackThis v1.99.1
Scan saved at 14:05:23, on 05/09/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\HIJACKTOOLS\HIJACKTHIS!.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BTopenworld
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (file missing)
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [ALiSndMgr] ALiSndMg.exe
O4 - HKLM\..\Run: [AcerPowerkey] "C:\Program Files\Acer\Powerkey\Powerkey.exe"
O4 - HKLM\..\Run: [PCCIOMON.EXE] "C:\Program Files\Trend PC-cillin 2000\PCCIOMON.EXE"
O4 - HKLM\..\Run: [pop3trap.exe] "C:\Program Files\Trend PC-cillin 2000\pop3trap.exe"
O4 - HKLM\..\Run: [WebTrap.exe] "C:\Program Files\Trend PC-cillin 2000\WebTrap.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VolKey] C:\WINDOWS\SYSTEM\Keymap.exe
O4 - HKLM\..\Run: [Launch App] c:\DMSINFO\launapp.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [WinInit] Win86.exe
O4 - HKLM\..\Run: [WinLogin] win32x.exe
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [PCCIOMON.EXE] "C:\Program Files\Trend PC-cillin 2000\PCCIOMON.EXE"
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - Startup: Real-time monitor.lnk = C:\Program Files\Trend PC-cillin 2000\PCCIOMON.exe
O4 - Startup: WallMaster.lnk = C:\WINDOWS\Wallpaper\WallMaster\wallmast.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft...free/asinst.cab



Silent Runners (safe mode) Log...
"Silent Runners.vbs", revision 40.1, http://www.silentrunners.org/
Operating System: Windows Me (Millennium Edition)
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"Creative Detector" = "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R" ["Creative Technology Ltd"]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"ScanRegistry" = "C:\WINDOWS\scanregw.exe /autorun" [MS]
"TaskMonitor" = "C:\WINDOWS\taskmon.exe" [MS]
"PCHealth" = "C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s" [MS]
"SystemTray" = "SysTray.Exe" [MS]
"LoadPowerProfile" = "Rundll32.exe powrprof.dll,LoadCurrentPwrScheme" [MS]
"ALiSndMgr" = "ALiSndMg.exe" ["ALi Laboratories Inc."]
"AcerPowerkey" = ""C:\Program Files\Acer\Powerkey\Powerkey.exe"" ["Acer"]
"PCCIOMON.EXE" = ""C:\Program Files\Trend PC-cillin 2000\PCCIOMON.EXE"" ["Trend Micro Inc."]
"pop3trap.exe" = ""C:\Program Files\Trend PC-cillin 2000\pop3trap.exe"" ["Trend Micro Inc."]
"WebTrap.exe" = ""C:\Program Files\Trend PC-cillin 2000\WebTrap.exe"" ["Trend Micro Inc."]
"SynTPLpr" = "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" ["Synaptics, Inc."]
"SynTPEnh" = "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" ["Synaptics, Inc."]
"VolKey" = "C:\WINDOWS\SYSTEM\Keymap.exe" [null data]
"Launch App" = "c:\DMSINFO\launapp.exe" ["DMS"]
"LoadQM" = "loadqm.exe" [MS]
"Iomega Startup Options" = "C:\Program Files\Iomega\Common\ImgStart.exe" ["Iomega Corporation"]
"Iomega Drive Icons" = "C:\Program Files\Iomega\DriveIcons\ImgIcon.exe" ["Iomega"]
"WinInit" = "Win86.exe" [file not found]
"WinLogin" = "win32x.exe " [file not found]
"LTSMMSG" = "LTSMMSG.exe" ["Lucent Technologies"]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\ {++}
"LoadPowerProfile" = "Rundll32.exe powrprof.dll,LoadCurrentPwrScheme" [MS]
"SchedulingAgent" = "mstask.exe" [MS]
"SSDPSRV" = "C:\WINDOWS\SYSTEM\ssdpsrv.exe" [MS]
"*StateMgr" = "C:\WINDOWS\System\Restore\StateMgr.exe" [MS]
"PCCIOMON.EXE" = ""C:\Program Files\Trend PC-cillin 2000\PCCIOMON.EXE"" ["Trend Micro Inc."]
"StillImageMonitor" = "C:\WINDOWS\SYSTEM\STIMON.EXE" [MS]

HKLM\Software\Microsoft\Active Setup\Installed Components\
PerUser_CVT_Inis\(Default) = "Windows Setup - FAT32 Converter"
\StubPath = "rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_CVT_Inis 64 C:\WINDOWS\INF\applets1.inf" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX" [file not found]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{e57ce731-33e8-4c51-8354-bb4de9d215d1}" = "Universal Plug and Play Devices"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\SYSTEM\UPNPUI.DLL" [MS]
"{48f45200-91e6-11ce-8a4f-0080c81a28d4}" = "TMD Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Trend PC-cillin 2000\TMDSHELL.DLL" ["Trend Micro Inc."]
"{c7745760-8ead-11ce-b750-02608ca5202c}" = "IomegaWare Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Iomega\Shell\ImgMenu.dll" ["Iomega Corp."]
"{c7745761-8ead-11ce-b750-02608ca5202c}" = "IomegaWare Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Iomega\Shell\ImgProp.dll" ["Iomega Corp."]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
ScanMenu\(Default) = "{48f45200-91e6-11ce-8a4f-0080c81a28d4}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Trend PC-cillin 2000\TMDSHELL.DLL" ["Trend Micro Inc."]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
ScanMenu\(Default) = "{48f45200-91e6-11ce-8a4f-0080c81a28d4}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Trend PC-cillin 2000\TMDSHELL.DLL" ["Trend Micro Inc."]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop is disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\WINDOWS\WALLPAPER\WALLMASTER\WallMaster Wallpaper.bmp"


WIN.INI & SYSTEM.INI launch points:
-----------------------------------

SYSTEM.INI
[boot]
"SCRNSAVE.EXE=C:\WINDOWS\MATRIX~1.SCR" (MatrixCodeEmulator.scr) [null data]


Startup items in "Startup" & "All Users...Startup" folders:
-----------------------------------------------------------

C:\WINDOWS\Start Menu\Programs\StartUp
"Real-time monitor" -> shortcut to: "C:\Program Files\Trend PC-cillin 2000\PCCIOMON.exe" ["Trend Micro Inc."]
"WallMaster" -> shortcut to: "C:\WINDOWS\Wallpaper\WallMaster\wallmast.exe" ["Tropical Wares"]


Enabled Scheduled Tasks:
------------------------

"Tune-up Application Start" -> launches: "walign" [MS]
"PCHealth Scheduler for Data Collection" -> launches: "C:\WINDOWS\PCHEALTH\SUPPORT\PCHSCHD.EXE -c" [MS]
"XoftSpy" -> launches: "C:\PROGRAM FILES\HIJACKTOOLS\XOFTSPY\XoftSpy.exe -t" [file not found]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "C:\WINDOWS\SYSTEM\rnr20.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
00000000000#\PackedCatalogItem (contains) DLL [Company Name], (at) # range:
C:\WINDOWS\SYSTEM\mswsosp.dll [MS], 1
C:\WINDOWS\SYSTEM\msafd.dll [MS], 2 - 4
C:\WINDOWS\SYSTEM\rsvpsp.dll [MS], 5 - 6


Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll" ["Sun Microsystems, Inc."]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
took 18 seconds.
+ The search for all Registry CLSIDs containing dormant Explorer Bars
took 20 seconds.
---------- (total run time: 61 seconds)

I'll post the Mwav log later if needed (am running this now).
Thanks for all your help!
  • 0

#49
dweebosh

dweebosh

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
Mwav log: (only found 1 virus - LookNSearch Spyware)

Object "LookNSearch Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\SMARTVSD.VXD". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\pcdr_cs.vxd". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\SYSTEM\MSOracle32Readme.txt". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CMPAGENT.EXE" refers to invalid object "". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\table30.exe" refers to invalid object "". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\pbrush.exe" refers to invalid object "". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\yourapp.Exe" refers to invalid object "". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\Tmp" refers to invalid object "C:\Program Files\Synaptics\SynTP". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\MsoHtmEd.exe" refers to invalid object "". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\PhotoSuite.exe" refers to invalid object "". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\Adobe SVG Viewer" refers to invalid object "". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CURSE.EXE" refers to invalid object "". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe" refers to invalid object "C:\PROGRAM FILES\HIJACKTOOLS\hijackthis.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\Createcd50.exe" refers to invalid object "C:\Program Files\Common Files\Adaptec Shared\CreateCD\createcd50.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CMSPlyr.skn" refers to invalid object "". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".cps". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".wal". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" refers to invalid object ".LOG". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D3B1DE00-6B94-1069-8754-08002B2BD64F}" refers to invalid object "C:\WINDOWS\SYSTEM\disktool.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{34C9990F-CBD7-11D2-AE0E-00C04FAEA83F}" refers to invalid object "C:\PROGRA~1\ONLINE~1\MSN50\OCX\MSNSETUP.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FF0A47B8-5CAC-11CE-ACAF-00AA004CA344}" refers to invalid object "C:\WINDOWS\SYSTEM\WEBSTER.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1C4326C0-5D7B-11CE-ACB1-00AA004CA344}" refers to invalid object "C:\WINDOWS\SYSTEM\WEBSTER.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FF0A47B9-5CAC-11CE-ACAF-00AA004CA344}" refers to invalid object "C:\WINDOWS\SYSTEM\WEBSTER.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FF0A47B0-5CAC-11CE-ACAF-00AA004CA344}" refers to invalid object "C:\WINDOWS\SYSTEM\WEBSTER.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FF0A47B7-5CAC-11CE-ACAF-00AA004CA344}" refers to invalid object "C:\WINDOWS\SYSTEM\WEBSTER.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FF0A47B4-5CAC-11CE-ACAF-00AA004CA344}" refers to invalid object "C:\WINDOWS\SYSTEM\WEBSTER.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B51D6AE0-67D6-11CF-82BC-0040332F0499}" refers to invalid object "C:\PROGRA~1\RZS\RCPRO\R0FAXEDT.EXE". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{99CDA2C1-394D-11D0-8B9D-00A024586426}" refers to invalid object "C:\PROGRA~1\RZS\RCPRO\R0LLFAX.EXE". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{99180163-DA16-101A-935C-444553540000}" refers to invalid object "recncl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BB7DF450-F119-11CD-8465-00AA00425D90}" refers to invalid object "C:\Program Files\Microsoft Office\Office\". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{29EBC4A0-A5C2-11D0-9374-00A0C90D0410}" refers to invalid object "C:\PROGRA~1\COREL\PRINTH~1\PHOTOHSE.EXE". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{88053C24-35CC-11D1-91D6-0060081E8747}" refers to invalid object "C:\WINDOWS\SYSTEM\INFRARED.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{88053C23-35CC-11D1-91D6-0060081E8747}" refers to invalid object "C:\WINDOWS\SYSTEM\INFRARED.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8F7B768A-FEA0-11D0-B136-0060976B8BBB}" refers to invalid object "C:\WINDOWS\SYSTEM\SERIAL.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8F7B7689-FEA0-11D0-B136-0060976B8BBB}" refers to invalid object "C:\WINDOWS\SYSTEM\SERIAL.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F68B9265-2DF3-11D1-91D6-0060081E8747}" refers to invalid object "C:\WINDOWS\SYSTEM\USB.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F68B9264-2DF3-11D1-91D6-0060081E8747}" refers to invalid object "C:\WINDOWS\SYSTEM\USB.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1FE3FB70-0E9F-11D3-9575-00A0C9A0FC9A}" refers to invalid object "C:\WINDOWS\SYSTEM\IPUBGRND.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1FE3FB72-0E9F-11D3-9575-00A0C9A0FC9A}" refers to invalid object "C:\WINDOWS\SYSTEM\IPUBGRND.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1FE3FB74-0E9F-11D3-9575-00A0C9A0FC9A}" refers to invalid object "C:\WINDOWS\SYSTEM\IPUBGRND.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1FE3FB77-0E9F-11D3-9575-00A0C9A0FC9A}" refers to invalid object "C:\WINDOWS\SYSTEM\IPUBGRND.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1FE3FB7A-0E9F-11D3-9575-00A0C9A0FC9A}" refers to invalid object "C:\WINDOWS\SYSTEM\IPUBGRND.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1FE3FB7C-0E9F-11D3-9575-00A0C9A0FC9A}" refers to invalid object "C:\WINDOWS\SYSTEM\IPUBGRND.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D54B6020-FD55-11d2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\ACTIVEEDITORPROXY.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9D148470-F3E7-11D1-80E2-0080C8586779}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\ANALYZER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9D14846F-F3E7-11D1-80E2-0080C8586779}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\ANALYZER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8637B140-FE19-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\ARGUMENTS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{361A1620-FD61-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\ARGUMENTS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7915E9E0-FD61-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\ARGUMENTS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E15C5960-FD81-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\ARGUMENTS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A089B4C0-FD61-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\ARGUMENTS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BD72C680-FD5C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BASICGENERATORS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A59C0700-FD76-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BASICGENERATORS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{19CBFC20-FD77-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BASICGENERATORS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F6017740-FD83-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BASICGENERATORS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{88F93480-FE14-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BASICGENERATORS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{ED0813A0-FE1A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BASICGENERATORS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1BC78B80-FE1B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BASICGENERATORS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{423CDACC-3F59-11d3-AEE3-0080C877FE3E}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BELFAST.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4FA211A2-FD53-11d2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRIGHTANDCONTRAST.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4FA211A3-FD53-11d2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRIGHTANDCONTRAST.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4FA211A1-FD53-11d2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRIGHTANDCONTRAST.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{215B2EE0-FD84-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRIGHTANDCONTRAST.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4FA211A6-FD53-11d2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRIGHTANDCONTRAST.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B5A11700-FE14-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRIGHTANDCONTRAST.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5D4737E0-FD5D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRIGHTANDCONTRAST.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4FA211A5-FD53-11d2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\BROWSE~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4FA211A4-FD53-11d2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\BROWSE~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{36C8F320-FF14-11d2-B3F2-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRUSHMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{36C8F321-FF14-11d2-B3F2-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRUSHMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{36C8F322-FF14-11d2-B3F2-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRUSHMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{36C8F323-FF14-11d2-B3F2-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRUSHMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{36C8F324-FF14-11d2-B3F2-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRUSHMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{36C8F325-FF14-11d2-B3F2-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRUSHMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{ED7DD460-FD60-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRUSHMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B1B50100-FE1A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRUSHMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1C12C160-FD83-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BRUSHMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4FA211A0-FD53-11d2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\BUTTON.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{583332C0-FD5A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CARTOONIZE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{09FC2EE0-FD87-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CARTOONIZE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9A41B280-FE19-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CARTOONIZE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E3DC1120-FD5A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CATALOGCHOOSER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{13C9A8C0-FD5B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CATALOGEDITOR.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3E693820-FD5B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CATALOGITEM2.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AA40F240-FD5B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CATALOGITEMGENERATOR.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7502E6C1-15E8-11d3-99F8-0080C875CDB6}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CATALOGLISTBOX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{08894C80-FD5C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CATALOGLOADER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2C52AD00-FD5C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CATALOGSTUFFER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{991B7DE0-FD5C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\COLORBALANCE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{38374DA0-FD5D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\COLORGUI.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9EF35A20-FD5D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\COLORGUI.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{205D3C20-FD5E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\COLORGUI.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7D4315A0-FD5D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\COLORHS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B7AD3260-FD5E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\COLORHS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0A7B3C00-FD5D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\COLORHS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E14B6940-FD5C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\COLORHS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9E5A3C80-FD5F-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\COMBOBOX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{03DF0180-FD60-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CONTEXTPROXY.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9D6A3B60-FD58-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CONVOLUTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2C3C4200-FD60-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CONVOLUTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D8D902A0-FD74-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CONVOLUTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9889C620-FE15-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CONVOLUTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{54CFB600-FE16-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CONVOLUTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9B2921C0-FE18-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CONVOLUTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4A58C685-0403-11D1-BB48-0080C83FFE30}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CTFCATALOG.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{12523C40-FD61-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\CTFCATALOG.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F33BC000-FD61-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\DDVIEWERPREVIEWWINDOW.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7DBFA660-FD62-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\DEFAULTCOMMANDTARGET.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A51980A0-FD62-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\DESKEWPLUGIN.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7DFD8A00-FD73-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\DIBVIEW.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9F50BA60-FD73-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\DRAWTOOLPLUGIN.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FE427400-FD73-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\DROPSHADOW.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1826EE70-38B5-99D1-B211-004005001DD1}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\EDITPLUGIN.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B429B980-FD75-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\EMAILPHOTO.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{388E8C00-FD76-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\EVENTPROXY.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5B0FDC20-FD76-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\EXPORT~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D46C47C0-FD76-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FLOATEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3AD467E0-FD77-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FOG.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4B5878E0-FD86-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FOG.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9805EF60-FD81-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FOG.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6565BBA0-FE15-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FOG.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F7FC24A0-FE19-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FOG.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{984BB680-FD77-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERBMP.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{DA536640-FD77-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADEREPS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{21A7E160-FD5A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERFPX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{04112120-FD78-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERFPX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{43D808A0-FD78-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERGIF.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AFAE3C20-FD78-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERIMG.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{06FED5C0-FD79-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERJPG.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6F6DC260-FD79-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERKQP.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3A6061A0-FD7D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERMSC.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C14EC200-FD79-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERPCD.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{10B1F060-FD7A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERPCX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{24A20100-FD7A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\FORMA~11.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{41AC1600-FD7A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERPSD.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A0391A60-FD7A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERRAS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C1CF6E40-FD7A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERSFW.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F9B21240-FD7A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\FORMA~15.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{46A09720-FD7B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERTEMP.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{98CDE200-FD7B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERTGA.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E0165E20-FD7C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERTIFF.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F9854B00-FD7C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\FORMA~19.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1930D0C0-FD7B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\FORMA~19.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1914D260-FD7D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\FORMATLOADERWMF.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5605E820-FD7E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\GLASS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C95516C0-FE19-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\GLASS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D80B8400-FD75-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\GLASS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B63917E0-FD7D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\GLASS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0D7F0A40-FE1A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\GLASS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{883538C0-FD86-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\GLASS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{55BBA300-FE1E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\GLASS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{26098E00-FD7F-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\HTTPPROTOCOLHANDLER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D35B0FC0-FD7F-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\IMAGE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{80D5C460-FD80-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEDEVICEPROTOCOLHANDLER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C4F69020-FD80-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{32212680-FD75-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{DECA3240-FD80-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F2804720-FD80-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8A9E5940-FD75-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9F7F8060-FE14-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{461957C0-FE15-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8079C5A0-FE18-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FDA08980-FD85-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2C4084C0-FD81-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEFRAMER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{76F0B272-CA3C-11D2-BB4B-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEPIECE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A7850F60-CB16-11D2-BB4B-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGEPIECEPLUGIN.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AF1BAA00-FD81-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGESAVER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{36B76F20-FD83-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IMAGETRIMPLUGIN.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5AE584E0-FD83-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\IMAGEV~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7D021FC0-FD83-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\INPUTDEVICEMANAGER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9A3E8F60-FD83-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\INTEGEREDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{41357AE0-FD84-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\IPLCACHE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8BB87E00-FD84-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\KODAK.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3C3DBB6F-0397-11D3-BB49-00C0A8479686}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\KODAK210.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{669862A0-FEEE-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\KODAK220.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5D7DCDE0-FD81-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\LAYOUT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FEB2B240-FD84-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\LAYOUTPLUGIN.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{16659740-FD85-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\LAYOUTSAVER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{32F28D00-FD85-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\LAYOUT~3.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6BC7CE60-FD85-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\LOGOCONTROL.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E3F61A40-FD85-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MAGICWAND.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EFCB78A0-FD86-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CA4F3800-FD86-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{12BE5F00-FD76-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7FC12B60-FE15-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CEECD5A0-FD7E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{DBBCF960-FE1C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C7349C40-FD5F-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D49066C0-FE14-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E37475A0-FE1E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3579A340-FE18-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6AEC2320-FD7F-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3E89F160-FE1D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F075EDA0-FD7F-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9BC33060-FD7F-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B2AC2B20-FD7E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7E431620-FD81-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9977B980-FE1E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B91CB3C0-FE15-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1B2AF740-FD74-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A4092300-FE1B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F2EA2D40-FE14-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{83225800-FD76-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{389959EE-EC3D-11D2-AEE3-0080C877FE3E}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGICORE.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F6464EA0-1EE2-99D9-AEE0-0080C852FC0A}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\MGIPROXYPS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5E9374E0-FD87-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PENSETTINGSCTRL.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2F9355E0-FD58-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6AE59000-FE1A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7A3CF700-FD5C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C05337E0-FD61-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{698694E0-FE1D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{656C4720-FE1C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AE2A1AA0-FE1C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F49DFE20-FE1C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BB374040-FE1E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{21DBFFC0-FE15-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F046AEC0-FE18-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D0904C40-FD59-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{ABEC49C0-FD86-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7CEFB7C0-FD58-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CD433CD3-EC45-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTOMOTION.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9A0FBA60-FD87-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\PHOTONET.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{334C38C0-FE14-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\PHOTON~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{524C5160-FE14-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\PHOTOWEB.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{19B084A0-FE16-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SANYO.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{40395340-FE16-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SANYOCTRL.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F873B080-FE17-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\SCRIPT~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{49DF3200-FE18-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SELECTIONDRAW.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{105C7D20-FE19-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SLIDER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5254EAA0-FE19-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SMARGTESTFILTER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6E30DFE0-FE19-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SMARTARGEDITOR.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B48331A0-FE19-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SMARTSCISSORS.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2E445280-FE1A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SPANARRAY.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{494DB580-FE1A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SPANARRAY.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9972AD40-FE1A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SPINCONTROL.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D08445A0-FE1A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\STATUSBAR.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{12FDDC44-E08C-11D2-B3BE-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\STITCHER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{12FDDC33-E08C-11D2-B3BE-00C0A84E58BD}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\STITCHPLUGIN.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{06B282E0-FE1B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\STRINGEDIT.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2CEF0640-FE1B-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SWIRL.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{81A5D7A0-FE1A-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SWIRL.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F21B2800-FE15-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\SWIRL.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1A16B1C0-FE1C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\TEXTEDITOR.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{31095400-FE1C-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\TEXTRENDERER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{284FF0C0-FE1D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\TWAIND~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{80BC5AA0-FE1D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\WARP.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{ADF22540-FE1D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\WARPPL~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C15BEEE0-FE1D-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRA~1\COMMON~1\MGISHA~1\PHOTO\WARPTOOL.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3E413320-FE1E-11D2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\WEBALBUM.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4FA211A7-FD53-11d2-ACB6-0080C877D9B9}" refers to invalid object "C:\PROGRAM FILES\COMMON FILES\MGI SHARED\PHOTO\XPREVIEW.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{76CE1CC0-7932-11D1-9509-00A0C9925315}" refers to invalid object "C:\PROGRA~1\PCFRIE~1\MAIN\BIN\ITIVIDEO.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{065DAF12-2C96-11D1-A2BE-00A024C0EB3C}" refers to invalid object "C:\PROGRAM FILES\PCFRIENDLY\MAIN\BIN\ROUTER.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A0739DE5-571F-11D2-A031-0060977F760C}" refers to invalid object "C:\PROGRA~1\PCFRIE~1\MAIN\BIN\VIDEO.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1D410CA1-84E3-11D1-9509-00A0C9925315}" refers to invalid object "C:\PROGRA~1\PCFRIE~1\PCFRIEND.EXE". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0713E8A2-850A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0713E8A8-850A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9ED94440-E5E8-101B-B9B5-444553540000}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9ED94444-E5E8-101B-B9B5-444553540000}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B66834C6-2E60-11CE-8748-524153480004}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{612A8624-0FB3-11CE-8747-524153480004}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{612A8628-0FB3-11CE-8747-524153480004}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{62823C20-41A3-11CE-9E8B-0020AF039CA3}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{58DA8D93-9D6A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{58DA8D96-9D6A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6B7E638F-850A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6B7E6393-850A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6B7E63A3-850A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{373FF7F4-EB8B-11CD-8820-08002B2F4F5A}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6027C2D4-FB28-11CD-8820-08002B2F4F5A}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0713E8D2-850A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0713E8D8-850A-101B-AFC0-4210102A8DA7}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5ACBB955-5C57-11CF-8993-00AA00688B10}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5ACBB956-5C57-11CF-8993-00AA00688B10}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5ACBB957-5C57-11CF-8993-00AA00688B10}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5ACBB958-5C57-11CF-8993-00AA00688B10}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCTL32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1E216240-1B7D-11CF-9D53-00AA003C9CB6}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCT232.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1F6F8D20-1B7D-11CF-9D53-00AA003C9CB6}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCT232.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{026371C0-1B7C-11CF-9D53-00AA003C9CB6}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCT232.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{030B4A80-1B7C-11CF-9D53-00AA003C9CB6}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCT232.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{030B4A82-1B7C-11CF-9D53-00AA003C9CB6}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCT232.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{030B4A81-1B7C-11CF-9D53-00AA003C9CB6}" refers to invalid object "C:\WINDOWS\SYSTEM\COMCT232.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{64D6C55B-12AA-48DC-8F2D-763978BC43B8}" refers to invalid object "C:\PROGRAM FILES\ADOBE\PHOTOSHOP 6.0\PHOTOSHP.EXE /StiDevice:%1 /StiEvent:%2". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7486D4F4-8FBD-11D2-BBBE-00609419F467}" refers to invalid object "C:\PROGRA~1\GO!ZILLA\GONETHLP.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8A
  • 0

#50
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
I see the few punches from those spyware removing programs did the trick :tazz:

There are two trojans in your system according to the Silent Runners log. Please don't give me your HijackThis log in Safe Mode...only run a scan in Normal Mode and give that to me. But before you do that:

Download CCleaner and install it. Run it and go to the Issues tab. Run a scan and fix what it finds.

Then I want you to run Panda and TrendMicro scans if you can. Also run Ewido in Safe Mode when you are done.

Restart. Post the log for Ewido and a new HijackThis log also.
  • 0

#51
dweebosh

dweebosh

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
I ran the Trend Micro scan yesterday and it came back clean, hooray! Couldn't get the Panda Scan to run though - think this might be an ActiveX problem?

Ran the CCleaner tool today, hopefully this has resolved my ActiveX issues and the Panda Scan will work later on. Here's my HJT log post-CCleaner and run in normal mode. I can finally see light at the end of the tunnel! :tazz:

Logfile of HijackThis v1.99.1
Scan saved at 10:39:01, on 06/09/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\LTSMMSG.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\ALISNDMG.EXE
C:\PROGRAM FILES\ACER\POWERKEY\POWERKEY.EXE
C:\PROGRAM FILES\TREND PC-CILLIN 2000\POP3TRAP.EXE
C:\PROGRAM FILES\TREND PC-CILLIN 2000\WEBTRAP.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPLPR.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\KEYMAP.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\IOMEGA\DRIVEICONS\IMGICON.EXE
C:\PROGRAM FILES\CREATIVE\MEDIASOURCE\DETECTOR\CTDETECT.EXE
C:\PROGRAM FILES\HIJACKTOOLS\HIJACKTHIS!.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BTopenworld
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [ALiSndMgr] ALiSndMg.exe
O4 - HKLM\..\Run: [AcerPowerkey] "C:\Program Files\Acer\Powerkey\Powerkey.exe"
O4 - HKLM\..\Run: [PCCIOMON.EXE] "C:\Program Files\Trend PC-cillin 2000\PCCIOMON.EXE"
O4 - HKLM\..\Run: [pop3trap.exe] "C:\Program Files\Trend PC-cillin 2000\pop3trap.exe"
O4 - HKLM\..\Run: [WebTrap.exe] "C:\Program Files\Trend PC-cillin 2000\WebTrap.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VolKey] C:\WINDOWS\SYSTEM\Keymap.exe
O4 - HKLM\..\Run: [Launch App] c:\DMSINFO\launapp.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [WinInit] Win86.exe
O4 - HKLM\..\Run: [WinLogin] win32x.exe
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [PCCIOMON.EXE] "C:\Program Files\Trend PC-cillin 2000\PCCIOMON.EXE"
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - Startup: Real-time monitor.lnk = C:\Program Files\Trend PC-cillin 2000\PCCIOMON.exe
O4 - Startup: WallMaster.lnk = C:\WINDOWS\Wallpaper\WallMaster\wallmast.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft...free/asinst.cab
  • 0

#52
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
I'm surprised the scans didn't find those two bad files. Did Ewido find anything?

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Restart your computer and boot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work. Make sure to close any open browsers. Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

O4 - HKLM\..\Run: [WinInit] Win86.exe
O4 - HKLM\..\Run: [WinLogin] win32x.exe


Delete the following Files/Folders (delete folders if no filename is specified) according to their directory (if none, just do a search for them) and delete them if they exist:

Win86.exe
win32x.exe


Restart and run a new HijackThis scan. Save the log file and post it here.
  • 0

#53
dweebosh

dweebosh

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
OK, I've followed the instructions in your last post.
Here's my new HJT log...

Logfile of HijackThis v1.99.1
Scan saved at 11:36:12, on 07/09/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\LTSMMSG.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\TREND PC-CILLIN 2000\PCCIOMON.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\ALISNDMG.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\ACER\POWERKEY\POWERKEY.EXE
C:\PROGRAM FILES\TREND PC-CILLIN 2000\POP3TRAP.EXE
C:\PROGRAM FILES\TREND PC-CILLIN 2000\WEBTRAP.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPLPR.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\KEYMAP.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\IOMEGA\DRIVEICONS\IMGICON.EXE
C:\PROGRAM FILES\CREATIVE\MEDIASOURCE\DETECTOR\CTDETECT.EXE
C:\PROGRAM FILES\HIJACKTOOLS\HIJACKTHIS!.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BTopenworld
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [ALiSndMgr] ALiSndMg.exe
O4 - HKLM\..\Run: [AcerPowerkey] "C:\Program Files\Acer\Powerkey\Powerkey.exe"
O4 - HKLM\..\Run: [PCCIOMON.EXE] "C:\Program Files\Trend PC-cillin 2000\PCCIOMON.EXE"
O4 - HKLM\..\Run: [pop3trap.exe] "C:\Program Files\Trend PC-cillin 2000\pop3trap.exe"
O4 - HKLM\..\Run: [WebTrap.exe] "C:\Program Files\Trend PC-cillin 2000\WebTrap.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VolKey] C:\WINDOWS\SYSTEM\Keymap.exe
O4 - HKLM\..\Run: [Launch App] c:\DMSINFO\launapp.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [PCCIOMON.EXE] "C:\Program Files\Trend PC-cillin 2000\PCCIOMON.EXE"
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - Startup: Real-time monitor.lnk = C:\Program Files\Trend PC-cillin 2000\PCCIOMON.exe
O4 - Startup: WallMaster.lnk = C:\WINDOWS\Wallpaper\WallMaster\wallmast.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft...free/asinst.cab

I haven't been able to run Panda Scan despite trying several times now (not sure why this is? I've been able to run it in the past :tazz: ) and I don't think Ewido supports Win Me so I haven't been able to run that scan either. Hopefully the HJT log is looking healthier now though?

Edited by dweebosh, 07 September 2005 - 04:50 AM.

  • 0

#54
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
I'm actually not sure why some users are having problems running Panda. OK, try fixing these:

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft...free/asinst.cab


Restart and see if Panda works now. If not, go to C:\Windows\Downloaded Program Files\ and see if you can find any entries for Panda there and delete them. Then try the scan again. You're using Internet Explorer to do this right?

Mistake on my part. Yes, Ewido is only for Windows NT and up :tazz:

If you still have problems running Panda ask in the Windows forum to see if it's an ActiveX issue. If you find the solution, feel free to PM me telling me how you resolved it. It will be very useful for other users who encounter this problem in the future.

Your log is clean.

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial and use the tools provided.

Are there any problems now? If not, you should be set to go.
  • 0

#55
dweebosh

dweebosh

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
No problems to report. Everything seems to be running OK, apart from the Panda Scan - this starts to download the ActiveX controls then closes out to an error screen (even after fixing the Panda entries in the HJT scan).

Not a concern though if my HJT log is clean and the other anti-spyware tools are coming back clean. Thanks for all your help with this - it's greatly appreciated! :)

If I work out what's causing the Panda Scan problem I'll let you know, and if you're ever in London I'll buy you a beer to go with that donation :tazz:

Cheers!

Edited by dweebosh, 09 September 2005 - 04:26 AM.

  • 0

Advertisements


#56
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :tazz:

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP