Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Ad Destroyer, Virtual Bouncer + "Online Casino, Dating" Tool

Started by Savageone , Oct 30 2005 08:49 AM

This topic is locked

#1
Savageone

Posted 30 October 2005 - 08:49 AM

Member

Member
19 posts

Thanks for this forum. I have been virtually pop-up free since I got my P3 Win 98 computer like 6 years ago, so there's always a first time. I clicked on some picture yesterday, and up came all these pop-ups. Tried to get out of it, but it was too late. Now, Internet explorer takes forever to load (I guess while all the little buggers are doing their thing) and then when it does, I've got a new wierd toolbar, with online dating and casino stuff. Did Ad-Aware and Trojan Hunter scans. They keep finding things, so I'm guessing whatever is there never gets fully removed. Here is the Hijackthis log (now that I look at it, I do see some of the wierd stuff, but I'll leave it to the experts to analyze)....Thanks for the help!:

Logfile of HijackThis v1.99.1
Scan saved at 9:27:32 AM, on 30/10/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\KODAKCCS.EXE
C:\WINDOWS\SYSTEM\USBMONIT.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\LOGITECH\ITOUCH\ITOUCH.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\CD-WRITER PLUS\HP SIMPLE TRAX\HPCRON.EXE
C:\PROGRAM FILES\CD-WRITER PLUS\DIRECTCD\DIRECTCD.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\HYFWPYC.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SXSDKP.EXE
C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\LOGITECHDESKTOPMESSENGER.EXE
C:\PROGRAM FILES\CMSYSTEM\CMSYSTEM.EXE
C:\PROGRAM FILES\KODAK\KODAK EASYSHARE SOFTWARE\BIN\EASYSHARE.EXE
C:\PROGRAM FILES\KODAK\KODAK SOFTWARE UPDATER\7288971\PROGRAM\BACKWEB-7288971.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\ETB\POKAPOKA76.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\TROJANHUNTER 4.2\THGUARD.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\PROGRAM FILES\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.finetimes...com/index2.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_19_0.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_19_0.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [KodakCCS] c:\windows\System32\Drivers\KodakCCS.exe
O4 - HKLM\..\Run: [USBMonit.exe] "C:\WINDOWS\SYSTEM\USBMonit.exe"
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [HP Simple Trax] C:\Program Files\CD-Writer Plus\HP Simple Trax\hpcron.exe
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\Program Files\CD-Writer Plus\DirectCD\DIRECTCD.EXE
O4 - HKLM\..\Run: [APD123] C:\WINDOWS\SYSTEM\APD123.exe
O4 - HKLM\..\Run: [HYFWPYC] C:\WINDOWS\HYFWPYC.exe
O4 - HKLM\..\Run: [autoupdate] rundll32 C:\WINDOWS\SYSTEM\WUAUCLT.DLL,SHStart
O4 - HKLM\..\Run: [winsync] C:\WINDOWS\sxsdkp.exe reg_run
O4 - HKLM\..\Run: [VBouncer] C:\PROGRA~1\VBOUNCER\VirtualBouncer.exe
O4 - HKLM\..\Run: [System service76] C:\WINDOWS\ETB\POKAPOKA76.EXE
O4 - HKLM\..\Run: [THGuard] "C:\PROGRAM FILES\TROJANHUNTER 4.2\THGUARD.EXE"
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKCU\..\Run: [MsnMsgr] "c:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [CMSystem] "C:\Program Files\CMSystem\CMSystem.exe"
O4 - HKCU\..\Run: [CAS Client] "C:\Program Files\Cas\Client\casclient.exe"
O4 - Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\backWeb-7288971.exe
O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Startup: rurt.exe.tcf
O4 - Global Startup: Data LifeGuard.lnk = C:\Program Files\Data LifeGuard\8263142\Program\backWeb-8263142.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmwordtrans.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate Page into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmtrans.html
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.2) - https://java.sun.com...indows-i586.cab
O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.../US/install.cab
O18 - Protocol: offline-8876480 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw00 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw00s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw10 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw10s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw20 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw20s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw30 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw30s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw40 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw40s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw50 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw50s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw60 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw60s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw70 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw70s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw80 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw80s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw90 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw90s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwa0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwa0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwb0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwb0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwc0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwc0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwd0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwd0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwe0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwe0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwf0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwf0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwg0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwg0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwh0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwh0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwi0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwi0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwj0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwj0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwk0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwk0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwl0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwl0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwm0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwm0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwn0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwn0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwo0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwo0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwp0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwp0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwq0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwq0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwr0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwr0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bws0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bws0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwt0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwt0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwu0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwu0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwv0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwv0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bww0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bww0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwx0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwx0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwy0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwy0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwz0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwz0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw-0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw-0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw+0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw+0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL
O18 - Filter: text/html - {8293D547-38DD-4325-B35A-F1817EDFA5FC} - C:\PROGRAM FILES\CAS\CLIENT\CASMF.DLL

#2
Armodeluxe

Posted 02 November 2005 - 01:02 PM

Member 2k

Retired Staff
2,744 posts

Hi Savageone,

Let's start with checking if you have a look2me infection..

Please download L2m9xfix here:
http://swandog46.gee...om/l2m9xfix.exe

Save it to the desktop and run it. Extract the files, and then open the l2m9xfix folder you just created and run RunThis.bat.

A window will open, and your desktop will disappear, then reappear. Please be patient until the batch says it is completed.

Then please restart your computer, and post a new HijackThis log as well as the entire text of the log.txt file which should be in the same folder as RunThis.bat.

#3
Savageone

Posted 03 November 2005 - 02:19 AM

Member

Topic Starter
Member
19 posts

Thanks -

Here's the new HijackThis file:

Logfile of HijackThis v1.99.1
Scan saved at 3:13:52 AM, on 03/11/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\KODAKCCS.EXE
C:\WINDOWS\SYSTEM\USBMONIT.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\LOGITECH\ITOUCH\ITOUCH.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\CD-WRITER PLUS\HP SIMPLE TRAX\HPCRON.EXE
C:\PROGRAM FILES\CD-WRITER PLUS\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\HYFWPYC.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\LOGITECHDESKTOPMESSENGER.EXE
C:\PROGRAM FILES\KODAK\KODAK EASYSHARE SOFTWARE\BIN\EASYSHARE.EXE
C:\PROGRAM FILES\KODAK\KODAK SOFTWARE UPDATER\7288971\PROGRAM\BACKWEB-7288971.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.finetimes...com/index2.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_19_0.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_19_0.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [KodakCCS] c:\windows\System32\Drivers\KodakCCS.exe
O4 - HKLM\..\Run: [USBMonit.exe] "C:\WINDOWS\SYSTEM\USBMonit.exe"
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [HP Simple Trax] C:\Program Files\CD-Writer Plus\HP Simple Trax\hpcron.exe
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\Program Files\CD-Writer Plus\DirectCD\DIRECTCD.EXE
O4 - HKLM\..\Run: [APD123] C:\WINDOWS\SYSTEM\APD123.exe
O4 - HKLM\..\Run: [HYFWPYC] C:\WINDOWS\HYFWPYC.exe
O4 - HKLM\..\Run: [autoupdate] rundll32 C:\WINDOWS\SYSTEM\WUAUCLT.DLL,SHStart
O4 - HKLM\..\Run: [winsync] C:\WINDOWS\sxsdkp.exe reg_run
O4 - HKLM\..\Run: [VBouncer] C:\PROGRA~1\VBOUNCER\VirtualBouncer.exe
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKCU\..\Run: [MsnMsgr] "c:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [CMSystem] "C:\Program Files\CMSystem\CMSystem.exe"
O4 - Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\backWeb-7288971.exe
O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Startup: rurt.exe.tcf
O4 - Global Startup: Data LifeGuard.lnk = C:\Program Files\Data LifeGuard\8263142\Program\backWeb-8263142.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmwordtrans.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate Page into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmtrans.html
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.2) - https://java.sun.com...indows-i586.cab
O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.../US/install.cab
O18 - Protocol: offline-8876480 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw00 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw00s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw10 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw10s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw20 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw20s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw30 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw30s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw40 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw40s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw50 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw50s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw60 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw60s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw70 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw70s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw80 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw80s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw90 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw90s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwa0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwa0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwb0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwb0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwc0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwc0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwd0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwd0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwe0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwe0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwf0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwf0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwg0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwg0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwh0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwh0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwi0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwi0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwj0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwj0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwk0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwk0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwl0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwl0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwm0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwm0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwn0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwn0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwo0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwo0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwp0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwp0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwq0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwq0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwr0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwr0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bws0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bws0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwt0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwt0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwu0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwu0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwv0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwv0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bww0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bww0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwx0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwx0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwy0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwy0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwz0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwz0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw-0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw-0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw+0 - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw+0s - {4293BC79-2378-4BFC-8ACE-7FFA2BF276CD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL
O18 - Filter: text/html - {8293D547-38DD-4325-B35A-F1817EDFA5FC} - C:\PROGRAM FILES\CMSYSTEM\PLUGIN.DLL

and here's the L2m9fix one:

Log of L2M9XFix v1.01a

************

Running from directory:
C:\Program Files\l2m\l2m9xfix

************

Files found:

************

Registry entries found:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]

************

Killing Explorer
Done!

Killing Rundll32
Done!

Removing malicious CLSID(s)
Done!

Restarting Explorer
Done!

Deleting malicious files
Done!

Finished!

#4
Armodeluxe

Posted 03 November 2005 - 08:06 AM

Member 2k

Retired Staff
2,744 posts

Ok, now let's remove the qoologic infection and later we will pick up what's left..

Please download QooFix9x and save it to your desktop. Do NOT run it yet.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

Once in Safe Mode, please double-click QooFix9x.exe and unzip it to the desktop. Open the QooFix9x folder on your desktop and run RunThis.bat. If you get a warning about running MS-DOS programs in Safe Mode, please just click OK to continue. Follow the prompts.

When the tool is finished, please reboot back into normal mode, and

Go here to make an online scan:

http://www.pandasoft.../activescan.htm

- Once you are on the Panda site click the Scan your PC button
- A new window will open...click the Check Now button
- Enter your Country
- Enter your State/Province
- Enter your e-mail address and click send
- Select either Home User or Company
- Click the big Scan Now button
- If it wants to install an ActiveX component allow it
- It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
- When download is complete, click on Local Disks to start the scan
- When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

Then please post a new HijackThis log, along with the entire contents of the log.txt file in the QooFix9x folder and the Panda results.

#5
Savageone

Posted 03 November 2005 - 03:43 PM

Member

Topic Starter
Member
19 posts

Okay, just finished all the scans....

Hijack:

Logfile of HijackThis v1.99.1
Scan saved at 4:40:21 PM, on 03/11/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\KODAKCCS.EXE
C:\WINDOWS\SYSTEM\USBMONIT.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\LOGITECH\ITOUCH\ITOUCH.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\CD-WRITER PLUS\HP SIMPLE TRAX\HPCRON.EXE
C:\PROGRAM FILES\CD-WRITER PLUS\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\HYFWPYC.EXE
C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\LOGITECHDESKTOPMESSENGER.EXE
C:\PROGRAM FILES\KODAK\KODAK EASYSHARE SOFTWARE\BIN\EASYSHARE.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\KODAK\KODAK SOFTWARE UPDATER\7288971\PROGRAM\BACKWEB-7288971.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.finetimes...com/index2.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_19_0.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_19_0.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [KodakCCS] c:\windows\System32\Drivers\KodakCCS.exe
O4 - HKLM\..\Run: [USBMonit.exe] "C:\WINDOWS\SYSTEM\USBMonit.exe"
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [HP Simple Trax] C:\Program Files\CD-Writer Plus\HP Simple Trax\hpcron.exe
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\Program Files\CD-Writer Plus\DirectCD\DIRECTCD.EXE
O4 - HKLM\..\Run: [APD123] C:\WINDOWS\SYSTEM\APD123.exe
O4 - HKLM\..\Run: [HYFWPYC] C:\WINDOWS\HYFWPYC.exe
O4 - HKLM\..\Run: [VBouncer] C:\PROGRA~1\VBOUNCER\VirtualBouncer.exe
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKCU\..\Run: [MsnMsgr] "c:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [CMSystem] "C:\Program Files\CMSystem\CMSystem.exe"
O4 - Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\backWeb-7288971.exe
O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Startup: rurt.exe.tcf
O4 - Global Startup: Data LifeGuard.lnk = C:\Program Files\Data LifeGuard\8263142\Program\backWeb-8263142.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmwordtrans.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate Page into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmtrans.html
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.2) - https://java.sun.com...indows-i586.cab
O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.../US/install.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O18 - Protocol: offline-8876480 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw00 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw00s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw10 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw10s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw20 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw20s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw30 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw30s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw40 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw40s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw50 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw50s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw60 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw60s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw70 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw70s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw80 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw80s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw90 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw90s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwa0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwa0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwb0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwb0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwc0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwc0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwd0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwd0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwe0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwe0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwf0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwf0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwg0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwg0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwh0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwh0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwi0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwi0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwj0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwj0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwk0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwk0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwl0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwl0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwm0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwm0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwn0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwn0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwo0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwo0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwp0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwp0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwq0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwq0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwr0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwr0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bws0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bws0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwt0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwt0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwu0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwu0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwv0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwv0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bww0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bww0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwx0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwx0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwy0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwy0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwz0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwz0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw-0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw-0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw+0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw+0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL
O18 - Filter: text/html - {8293D547-38DD-4325-B35A-F1817EDFA5FC} - C:\PROGRAM FILES\CMSYSTEM\PLUGIN.DLL

Panda:

Incident Status Location

Adware:Adware/Pacimedia No disinfected C:\WINDOWS\SYSTEM\APD123.exe.tcf
Adware:Adware/QoolShown No disinfected C:\WINDOWS\SYSTEM\WUAUCL~1.TCF
Adware:Adware/ConsumerAlertSystemNo disinfected C:\WINDOWS\SYSTEM\dist001.exe.tcf
Adware:Adware/ISearch No disinfected C:\WINDOWS\SYSTEM\MTE2ODM6ODoxNg.exe.tcf
Adware:Adware/BrilliantDigitalNo disinfected C:\WINDOWS\BDE\b3dsetup.exe
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\376_4294733555_4278903439_4205743275_76.41.tmp
Adware:Adware/Pacimedia No disinfected C:\WINDOWS\TEMP\pcs_0025.exe.tcf
Adware:Adware/Pacimedia No disinfected C:\WINDOWS\TEMP\ptf_0025.exe
Adware:adware/consumeralertsystemNo disinfected C:\WINDOWS\TEMP\cassetup.exe
Adware:Adware/ISearch No disinfected C:\WINDOWS\TEMP\cmdinst.exe
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\1592_4278956353_4278936153_4278923433_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\2672_4278753245_4294210733_4278925313_78.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\3164_4278753245_4294210733_4294725837_78.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\1480_4278860783_4293974031_4278793555_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\3968_4279166867_4278876355_4278928255_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\1948_4294716315_4278876355_4279158463_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\2816_4294352943_4278876355_4278894023_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\3768_4294352943_4278794991_4294011907_78.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\3476_4294352943_4278876355_4278899647_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\1388_4294736641_4294287033_4278898301_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\1924_4294733555_4278903439_4278859679_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\2820_4293921295_4294423007_4278795779_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\2628_4294275547_4278903439_4278735691_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\2820_4294275547_4278903439_4278751719_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\3256_4205740683_4278903439_4205639171_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\1824_4294001739_4294423007_4294284491_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\2404_4294001739_4294423007_4278913531_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\2764_4294001739_4294423007_4278955915_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\1692_4294736791_4294423007_4203999175_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\3196_4293921295_4294423007_4278920839_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\3176_4293921295_4294423007_4278911999_76.41.tmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\TEMP\1336_4293921295_4294423007_4279154139_76.41.tmp
Virus:Exploit/ByteVerify Disinfected C:\WINDOWS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\Counters.jar-333fe01c-5d4204c4.zip[Gummy.class]
Virus:Exploit/ByteVerify Disinfected C:\WINDOWS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\Counters.jar-333fe01c-5d4204c4.zip[Xeyond.class]
Virus:Trj/Downloader.APT Disinfected C:\WINDOWS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\Counters.jar-333fe01c-5d4204c4.zip[web.exe]
Virus:Trj/Classloader.I Disinfected C:\WINDOWS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-65695b65-3f0222a4.zip[b.class]
Virus:Exploit/BytVerify Disinfected C:\WINDOWS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-65695b65-3f0222a4.zip[c.class]
Virus:Exploit/BytVerify Disinfected C:\WINDOWS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-65695b65-3f0222a4.zip[a.class]
Virus:Trj/Downloader.DIS Disinfected C:\WINDOWS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-65695b65-3f0222a4.zip[d.class]
Adware:Adware/QoolShown No disinfected C:\WINDOWS\Desktop\QooFix9x\backups\backups.zip[vgactl.cpl]
Virus:Trj/Qoologic.B Disinfected C:\WINDOWS\Desktop\QooFix9x\backups\backups.zip[erebd.dll]
Adware:Adware/QoolShown No disinfected C:\WINDOWS\Desktop\QooFix9x\backups\backups.zip[fffgdsk.dll]
Adware:Adware/QoolShown No disinfected C:\WINDOWS\Desktop\QooFix9x\backups\backups.zip[wgwvq.dat]
Adware:Adware/QoolShown No disinfected C:\WINDOWS\Start Menu\Programs\StartUp\rurt.exe.tcf
Virus:Trj/Downloader.BYN Disinfected C:\WINDOWS\Temporary Internet Files\Content.IE5\KVCNIZ03\trk_0025[1].exe.tcf
Adware:Adware/EliteBar No disinfected C:\WINDOWS\Temporary Internet Files\Content.IE5\CHQBCTIV\pokapoka78[1].exe
Adware:Adware/Exact.BargainBuddyNo disinfected C:\WINDOWS\Temporary Internet Files\Content.IE5\QXJ0P436\virus[1].bmp
Adware:Adware/Exact.BargainBuddyNo disinfected C:\WINDOWS\Temporary Internet Files\Content.IE5\KD0V834Z\casino[1].bmp
Adware:Adware/Exact.BargainBuddyNo disinfected C:\WINDOWS\Temporary Internet Files\Content.IE5\KD0V834Z\dating[1].bmp
Virus:VBS/Psyme.C No disinfected C:\WINDOWS\Temporary Internet Files\Content.IE5\KD0V834Z\TRACK25[1].CHM[track25.htm]
Adware:Adware/QoolShown No disinfected C:\WINDOWS\SXSDKP~1.TCF
Adware:Adware/EliteBar No disinfected C:\WINDOWS\etb\pokapoka76.exe
Adware:Adware/Exact.BargainBuddyNo disinfected C:\WINDOWS\etb\xml\images\casino.bmp
Adware:Adware/Exact.BargainBuddyNo disinfected C:\WINDOWS\etb\xml\images\dating.bmp
Adware:Adware/Exact.BargainBuddyNo disinfected C:\WINDOWS\etb\xml\images\virus.bmp
Adware:Adware/EliteBar No disinfected C:\WINDOWS\etb\pokapoka78.exe
Adware:Adware/QoolShown No disinfected C:\WINDOWS\dxdocar.exe.tcf
Dialer:Dialer.XS No disinfected C:\Program Files\Common Files\Totem Shared\Update\DialerOffline.dll.010
Virus:Trj/Downloader.BYN Disinfected C:\Program Files\Windows Media Player\wmplayer.exe.tcf
Adware:Adware/ConsumerAlertSystemNo disinfected C:\Program Files\CMSystem\plugin.dll
Adware:Adware/ConsumerAlertSystemNo disinfected C:\Program Files\CasStub\casstub.exe.tcf
Adware:Adware/ConsumerAlertSystemNo disinfected C:\Program Files\Cas\Client\casclient.exe
Adware:Adware/ConsumerAlertSystemNo disinfected C:\Program Files\Cas\Client\Uninstall.exe
QooFix:

Log of QooFix9x v1

************

Running from directory:
C:\WINDOWS\Desktop\QooFix9x

************

Files found:

c:\windows\system\vgactl.cpl
c:\windows\erebd.dll
c:\windows\fffgdsk.dll
c:\windows\streamhlp.dll
c:\windows\sxsdkp.exe
c:\windows\nenpbc.dat
c:\windows\wgwvq.dat
c:\windows\system\vgactl.cpl

************

Deleting files:

Deletion of c:\windows\system\vgactl.cpl succeeded!
Deletion of c:\windows\erebd.dll succeeded!
Deletion of c:\windows\fffgdsk.dll succeeded!
Deletion of c:\windows\streamhlp.dll succeeded!
Deletion of c:\windows\sxsdkp.exe succeeded!
Deletion of c:\windows\nenpbc.dat succeeded!
Deletion of c:\windows\wgwvq.dat succeeded!
Deletion of c:\windows\system\vgactl.cpl succeeded!

************

Removing registry entries:

Done!
Backing up files:

Done!

Finished!

Thanks....

#6
Armodeluxe

Posted 04 November 2005 - 09:00 AM

Member 2k

Retired Staff
2,744 posts

Please first save these directions to the desktop as a text file, because you will need to copy and paste part of them later, once we are in Safe Mode.

Please download LQfix.exe from one of the following locations:

http://www.downloads.subratam.org/LQfix.exe
http://miekiemoes.geekstogo.com/tools/LQfix.exe
Save it to your desktop.
Double-Click LQfix.exe and click Next > Next > Install.
Leave the default settings, if you change them, the fix will Fail!
You need an active Internet Connection, so make sure your you're not blocking any connection now.
Now make sure the "Launch LQfix" box is checked.
Click the Finish button, after clicking the Finish button the fix will start.
Follow the on-screen prompts.
Your system will reboot afterwards.
Please be patient after the reboot, there is a script running in the background that needs to complete.

Open HijackThis and click Scan. Put a check next to these:

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.finetimes...com/index2.html
O4 - HKLM\..\Run: [APD123] C:\WINDOWS\SYSTEM\APD123.exe
O4 - HKLM\..\Run: [HYFWPYC] C:\WINDOWS\HYFWPYC.exe
O4 - HKLM\..\Run: [VBouncer] C:\PROGRA~1\VBOUNCER\VirtualBouncer.exe
O4 - HKCU\..\Run: [CMSystem] "C:\Program Files\CMSystem\CMSystem.exe"
O4 - Startup: rurt.exe.tcf
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O18 - Filter: text/html - {8293D547-38DD-4325-B35A-F1817EDFA5FC} - C:\PROGRAM FILES\CMSYSTEM\PLUGIN.DLL

Close all other windows except HijackThis and click Fix Checked.

1) Please download the Killbox.
Unzip it to the desktop but do NOT run it yet.

2) Then please reboot into Safe Mode by restarting your computer and pressing F8 as your computer is booting up. Then select the Safe Mode option.

Go to Control Panel Add/Remove Programs and uninstall these if there is an entry. If you get any prompts to reboot to complete an uninstall, don't reboot yet.

VBOUNCER
Cas
CasStub
CMSystem
Totem Shared

Then delete these folders:

C:\Program Files\Common Files\Totem Shared
C:\Program Files\CMSystem
C:\Program Files\CasStub
C:\Program Files\Cas
C:\PROGRAM FILES\VBOUNCER

3) Then please run Killbox.

4) Select "Delete on Reboot".

5) Open the text file with these instructions in it, and copy the file names below to the clipboard by highlighting them and pressing Control-C:

C:\WINDOWS\HYFWPYC.exe
C:\WINDOWS\SYSTEM\APD123.exe
C:\WINDOWS\SYSTEM\APD123.exe.tcf
C:\WINDOWS\SYSTEM\WUAUCL~1
C:\WINDOWS\SYSTEM\WUAUCL~1.TCF
C:\WINDOWS\SYSTEM\dist001.exe
C:\WINDOWS\SYSTEM\dist001.exe.tcf
C:\WINDOWS\SYSTEM\MTE2ODM6ODoxNg.exe
C:\WINDOWS\SYSTEM\MTE2ODM6ODoxNg.exe.tcf
C:\WINDOWS\BDE\b3dsetup.exe
C:\WINDOWS\TEMP\376_4294733555_4278903439_4205743275_76.41.tmp
C:\WINDOWS\TEMP\pcs_0025.exe
C:\WINDOWS\TEMP\pcs_0025.exe.tcf
C:\WINDOWS\TEMP\ptf_0025.exe
C:\WINDOWS\TEMP\cassetup.exe
C:\WINDOWS\TEMP\cmdinst.exe
C:\WINDOWS\TEMP\1592_4278956353_4278936153_4278923433_76.41.tmp
C:\WINDOWS\TEMP\2672_4278753245_4294210733_4278925313_78.41.tmp
C:\WINDOWS\TEMP\3164_4278753245_4294210733_4294725837_78.41.tmp
C:\WINDOWS\TEMP\1480_4278860783_4293974031_4278793555_76.41.tmp
C:\WINDOWS\TEMP\3968_4279166867_4278876355_4278928255_76.41.tmp
C:\WINDOWS\TEMP\1948_4294716315_4278876355_4279158463_76.41.tmp
C:\WINDOWS\TEMP\2816_4294352943_4278876355_4278894023_76.41.tmp
C:\WINDOWS\TEMP\3768_4294352943_4278794991_4294011907_78.41.tmp
C:\WINDOWS\TEMP\3476_4294352943_4278876355_4278899647_76.41.tmp
C:\WINDOWS\TEMP\1388_4294736641_4294287033_4278898301_76.41.tmp
C:\WINDOWS\TEMP\1924_4294733555_4278903439_4278859679_76.41.tmp
C:\WINDOWS\TEMP\2820_4293921295_4294423007_4278795779_76.41.tmp
C:\WINDOWS\TEMP\2628_4294275547_4278903439_4278735691_76.41.tmp
C:\WINDOWS\TEMP\2820_4294275547_4278903439_4278751719_76.41.tmp
C:\WINDOWS\TEMP\3256_4205740683_4278903439_4205639171_76.41.tmp
C:\WINDOWS\TEMP\1824_4294001739_4294423007_4294284491_76.41.tmp
C:\WINDOWS\TEMP\2404_4294001739_4294423007_4278913531_76.41.tmp
C:\WINDOWS\TEMP\2764_4294001739_4294423007_4278955915_76.41.tmp
C:\WINDOWS\TEMP\1692_4294736791_4294423007_4203999175_76.41.tmp
C:\WINDOWS\TEMP\3196_4293921295_4294423007_4278920839_76.41.tmp
C:\WINDOWS\TEMP\3176_4293921295_4294423007_4278911999_76.41.tmp
C:\WINDOWS\TEMP\1336_4293921295_4294423007_4279154139_76.41.tmp
C:\WINDOWS\Start Menu\Programs\StartUp\rurt.exe
C:\WINDOWS\Start Menu\Programs\StartUp\rurt.exe.tcf
C:\WINDOWS\Temporary Internet Files\Content.IE5\CHQBCTIV\pokapoka78[1].exe
C:\WINDOWS\Temporary Internet Files\Content.IE5\QXJ0P436\virus[1].bmp
C:\WINDOWS\Temporary Internet Files\Content.IE5\KD0V834Z\casino[1].bmp
C:\WINDOWS\Temporary Internet Files\Content.IE5\KD0V834Z\dating[1].bmp
C:\WINDOWS\Temporary Internet Files\Content.IE5\KD0V834Z\TRACK25[1].CHM
C:\WINDOWS\SXSDKP~1
C:\WINDOWS\SXSDKP~1.TCF
C:\WINDOWS\dxdocar.exe
C:\WINDOWS\dxdocar.exe.tcf

6) Return to Killbox, go to the File menu, and choose "Paste from Clipboard".

7) Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "Yes" at the Do You Want to Reboot Now prompt.

Reboot and please post a new HijackThis log. Are you still getting any popups? How is the computer running now?

#7
Savageone

Posted 04 November 2005 - 01:34 PM

Member

Topic Starter
Member
19 posts

Okay, I think I have done everything correctly. Here is the new scan log:

Logfile of HijackThis v1.99.1
Scan saved at 2:27:52 PM, on 04/11/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\KODAKCCS.EXE
C:\WINDOWS\SYSTEM\USBMONIT.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\LOGITECH\ITOUCH\ITOUCH.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\CD-WRITER PLUS\HP SIMPLE TRAX\HPCRON.EXE
C:\PROGRAM FILES\CD-WRITER PLUS\DIRECTCD\DIRECTCD.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\LOGITECHDESKTOPMESSENGER.EXE
C:\PROGRAM FILES\KODAK\KODAK EASYSHARE SOFTWARE\BIN\EASYSHARE.EXE
C:\PROGRAM FILES\KODAK\KODAK SOFTWARE UPDATER\7288971\PROGRAM\BACKWEB-7288971.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HIJACK THIS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_19_0.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_19_0.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [KodakCCS] c:\windows\System32\Drivers\KodakCCS.exe
O4 - HKLM\..\Run: [USBMonit.exe] "C:\WINDOWS\SYSTEM\USBMonit.exe"
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [HP Simple Trax] C:\Program Files\CD-Writer Plus\HP Simple Trax\hpcron.exe
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\Program Files\CD-Writer Plus\DirectCD\DIRECTCD.EXE
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKCU\..\Run: [MsnMsgr] "c:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\backWeb-7288971.exe
O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Global Startup: Data LifeGuard.lnk = C:\Program Files\Data LifeGuard\8263142\Program\backWeb-8263142.exe
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmwordtrans.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate Page into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR3.DLL/cmtrans.html
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.2) - https://java.sun.com...indows-i586.cab
O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.../US/install.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O18 - Protocol: offline-8876480 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw00 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw00s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw10 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw10s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw20 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw20s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw30 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw30s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw40 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw40s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw50 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw50s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw60 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw60s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw70 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw70s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw80 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw80s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw90 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw90s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwa0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwa0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwb0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwb0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwc0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwc0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwd0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwd0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwe0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwe0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwf0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwf0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwg0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwg0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwh0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwh0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwi0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwi0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwj0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwj0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwk0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwk0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwl0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwl0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwm0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwm0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwn0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwn0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwo0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwo0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwp0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwp0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwq0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwq0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwr0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwr0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bws0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bws0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwt0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwt0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwu0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwu0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwv0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwv0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bww0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bww0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwx0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwx0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwy0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwy0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwz0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwz0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw-0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw-0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw+0 - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bw+0s - {6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL

How does that look? I think the computer is working well, but I honestly have not been surfing around too much while we nip these nasties in the bud.

I do have one other small question - after windows loads, I do get an "error" box saying that windows could nt find the following target:

c:\Program Files\BackWeb\BackWeb Client\6.0.1.209L\Program\backWeb.dll

I don't know anything about that one. How to get rid of that error message?

Once I'm in the clear, would like to get ZoneAlarm installed, plus any other recommendations?

Thanks!

#8
Armodeluxe

Posted 05 November 2005 - 06:48 AM

Member 2k

Retired Staff
2,744 posts

Your log looks good :tazz:

Backweb is a program used by various applications for updating purposes, but it is also considered as spyware. If you used Adaware or Spybot, the file may have been deleted by one of those. You can safely uninstall Backweb from Control Panel Add/Remove Programs and then delete the folder

c:\Program Files\BackWeb

See if doing that takes care of the error message. If not, we can search for the relevant registry entries.

Please take the following into consideration to maintain a clean computer.

Now you should go get a firewall. Don't rely on the Windows firewall as it monitors only incoming traffic. Pick one of these, they are all free.
Zonealarm
Sygate

Visit Windows Update regularly to get the latest security updates.You can also enable automatic updates.Your antivirus software and antispyware programs should also be updated regularly. Make a habit of running scans on a timely basis. Be careful about what you download, scan every file before clicking on it.

Additional programs to consider:

Spywareblaster Prevents the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted software.Blocks spyware/tracking cookies in Internet Explorer and Mozilla/Firefox.Restricts the actions of potentially unwanted sites in Internet Explorer.
Spywareguard An anti-virus program scans files before you open them and prevents execution if a virus is detected - SpywareGuard does the same thing, but for spyware!
IE/Spyad
Adds a list of malicious sites to your Restricted Sites Zone.
Firefox An alternate browser safer than IE

A good article to read:
So how did I get infected in the first place?

Regards,

Armodeluxe

#9
Savageone

Posted 05 November 2005 - 08:44 AM

Member

Topic Starter
Member
19 posts

This is all looking great - thanks.

The BackWeb "Runner Error" is still there. Nothing major (I just close it), but I guess it would be nice to get rid of, while I'm at it.

I did go to ZoneAlarm to begin to load their firewall. Did one of their scans, with the following results:

GameSpy Arcade - Adware

RegistryKey - HKEY_CURRENT_USER\Software\GameSpy\GameSpy 3D\

WildTangent - Adware

RegistryKey - HKEY_CLASSES_ROOT\WDMHHost.WTHoster

ProgID - WDMHHost.WTHoster.1

GUID - {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A}

File Name - C:\WINDOWS\WT\WEBDRIVER\WTHOSTCTL.DLL

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A}

RegistryKey - HKEY_CLASSES_ROOT\WT.WTMultiplayer

ProgID - WT.WTMultiplayer.1

GUID - {0C097121-C5D6-47EB-841D-30BFF71A71C4}

File Name - C:\WINDOWS\WT\WEBDRIVER\WTMULTI.DLL

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{0C097121-C5D6-47EB-841D-30BFF71A71C4}

RegistryKey - HKEY_CLASSES_ROOT\WT3D.WT

ProgID - WT3D.WT.1

GUID - {FA13A9FA-CA9B-11D2-9780-00104B242EA3}

File Name - C:\WINDOWS\WT\WEBDRIVER\WEBDRIVER.DLL

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{FA13A9FA-CA9B-11D2-9780-00104B242EA3}

RegistryKey - HKEY_CLASSES_ROOT\WTVis.WTVisReceiver

ProgID - WTVis.WTVisReceiver.1

GUID - {7F23E6E5-0E79-4AEE-B723-B1463805D5A9}

File Name - C:\WINDOWS\WT\WEBDRIVER\SOUND.DLL

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{7F23E6E5-0E79-4AEE-B723-B1463805D5A9}

RegistryKey - HKEY_CLASSES_ROOT\WTVis.WTVisSender

ProgID - WTVis.WTVisSender.1

GUID - {B9BA256A-075B-49EA-B9E2-7DBC2EF021D5}

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{B9BA256A-075B-49EA-B9E2-7DBC2EF021D5}

GUID - {8ECF83A0-1AC9-11D4-8501-00A0CC5D1F63}

File Name - C:\WINDOWS\WT\WEBDRIVER\WTWMPLUG.AX

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{8ECF83A0-1AC9-11D4-8501-00A0CC5D1F63}

GUID - {ECFBE6E0-1AC8-11D4-8501-00A0CC5D1F63}

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{ECFBE6E0-1AC8-11D4-8501-00A0CC5D1F63}

Doubleclick - 3rd Party Cookie

URL - Cookie:[email protected]/

Kazaa Lite goop 28 - Adware

RegistryKey - HKEY_CURRENT_USER\Software\Kazaa\

RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE\Kazaa\

Screensavers - Adware

File Name - C:\WINDOWS\MICKEY32.DLL

The fun never stops. Should I get rid of those too? Then I'll proceed with installing it.

Thanks!

#10
Armodeluxe

Posted 05 November 2005 - 03:19 PM

Member 2k

Retired Staff
2,744 posts

Wild Tangent and Gamespy, if you're playing the games, you can keep them, they're harmless..

I would definitely advise you to uninstall Kazaa Lite..see this page for an evaluation, scroll down..

http://www.spywarein...m/articles/p2p/

C:\WINDOWS\MICKEY32.DLL the file it's useless but also harmless by itself.. if you delete it you may get another error message, I'm not sure..

Please go here:
http://www.billsway.com/vbspage/

Scroll down the page
and download the "Registry Search Tool"

Unzip RegSrch.zip to the desktop

Double click on RegSrch.vbs

If you get a warning from your Anti Virus please ignore it and allow this to run.

When it starts, you will be prompted to enter a search phrase.

Please enter this:

Backweb

Click OK, it will disappear and won't look as if it's doing anything. When it's done searching, a prompt will come up saying how many instances it found. Click OK, and a notepad will open up. Please copy the contents of that notepad and paste it here.

#11
Savageone

Posted 05 November 2005 - 06:13 PM

Member

Topic Starter
Member
19 posts

I would gladly get rid of those games....never played them, don't know how they got there :tazz:

Kazaa - I had removed that (or so I thought) a few years ago. Guess it's still lurking in bits on my system. When I tried to "remove program" using Windows, I got an error message that it wasn't there (though it does come up on my program list). I don't think I have any kazaa files on my drives, that I can see.

Anyway, I did the reg search - for both backweb and kazaa. Here it is:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\BackWeb-8263142 Uninstaller]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDLLs]
"C:\\Program Files\\KODAK\\KODAK Software Updater\\7288971\\Program\\backWeb-7288971.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDLLs]
"C:\\Program Files\\KODAK\\KODAK Software Updater\\7288971\\6.1.4.37-7288971L\\Program\\backweb.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDLLs]
"C:\\Program Files\\KODAK\\KODAK Software Updater\\7288971\\6.1.4.37-7288971L\\Program\\backweb.tlb"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Components\D89C33E36B568374A8C0D7410151589B]
"0A2C799B3834FB147BE6B9B8E7FC2B76"="C?\\Program Files\\KODAK\\KODAK Software Updater\\7288971\\Program\\backWeb-7288971.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Components\307DB660F765B1945860BB6D52FB5CD4]
"0A2C799B3834FB147BE6B9B8E7FC2B76"="C?\\Program Files\\KODAK\\KODAK Software Updater\\7288971\\6.1.4.37-7288971L\\Program\\backweb.dll"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Components\D83E026ED9D1E4445A857E53A1DD41B6]
"0A2C799B3834FB147BE6B9B8E7FC2B76"="C?\\Program Files\\KODAK\\KODAK Software Updater\\7288971\\6.1.4.37-7288971L\\Program\\backweb.tlb"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{A6A59078-03AD-4962-AB67-04E0054414C0}]
@="BackWeb ClientExt Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{A6A59078-03AD-4962-AB67-04E0054414C0}\ProgID]
@="BackWeb ClientExt.1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{A6A59078-03AD-4962-AB67-04E0054414C0}\VersionIndependentProgID]
@="BackWeb.ClientExt"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{5DBF3CAA-E4F5-4BDA-A84B-9387EA3A36D1}]
@="BackWeb Client Files Access Via Directory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{5DBF3CAA-E4F5-4BDA-A84B-9387EA3A36D1}\ProgID]
@="BackWeb.FileAccessViaDir-8263142"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{1E5DF25C-F47F-4F6E-8DBE-C3983C4064D8}]
@="BackWeb Client Files Access"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{1E5DF25C-F47F-4F6E-8DBE-C3983C4064D8}\ProgID]
@="BackWeb.FileAccess-8263142"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{F064EB80-380A-4064-934D-48BCBE9FA4B4}\ProgID]
@="BackWeb.Client.ScriptHelper-"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{CAF7F81B-420E-4582-9391-D9359F00D8C4}\ProgID]
@="BackWeb.Client.ScriptHelper-7288971"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{D09B9CCB-255E-4FD4-9D4D-37D1EA3A8B44}]
@="BackWeb Client Files Access Via Directory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{D09B9CCB-255E-4FD4-9D4D-37D1EA3A8B44}\ProgID]
@="BackWeb.FileAccessViaDir-7288971"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{5715C18E-F2C7-42D0-931F-57CF1CFD3E25}]
@="BackWeb Client Files Access"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{5715C18E-F2C7-42D0-931F-57CF1CFD3E25}\ProgID]
@="BackWeb.FileAccess-7288971"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{54F819BA-274E-43B3-8898-2354E8DD522A}]
@="BackWeb File Replicator"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{54F819BA-274E-43B3-8898-2354E8DD522A}\ProgID]
@="BackWeb.FileReplication-7288971"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{3292CF45-3521-479F-9E79-943B1182CF5C}]
@="BackWeb File Replication Cleanup"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{3292CF45-3521-479F-9E79-943B1182CF5C}\ProgID]
@="BackWeb.FileReplicationCleanup-7288971"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{9FB42CAD-0177-4857-99D9-AD260AF90807}]
@="BackWeb File Replication Extension"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{9FB42CAD-0177-4857-99D9-AD260AF90807}\ProgID]
@="BackWeb.FileReplicationExtension-7288971"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{AC19017A-D4BB-4B79-873B-DA9A267E9D30}]
@="BackWeb File Replication Extension Creator for Visual Basic"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{AC19017A-D4BB-4B79-873B-DA9A267E9D30}\ProgID]
@="BackWeb.VBFileReplicationExtension-7288971"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{1AD96D1A-0C8D-4ADF-B23F-C1B954FB215D}]
@="BackWeb Client"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{1AD96D1A-0C8D-4ADF-B23F-C1B954FB215D}\ProgID]
@="BackWeb.Client-8263142"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{40F23EB7-B397-4285-8F3C-AACE4FA40309}]
@="BackWeb Lite Install Runner"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{40F23EB7-B397-4285-8F3C-AACE4FA40309}\ProgID]
@="BackWeb.LiteInstRunner-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{C2C99FA5-CA27-4ee2-804D-04E0054414C0}]
@="BackWeb ClientExt Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{C2C99FA5-CA27-4ee2-804D-04E0054414C0}\ProgID]
@="BackWeb ClientExt.1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{C2C99FA5-CA27-4ee2-804D-04E0054414C0}\VersionIndependentProgID]
@="BackWeb.ClientExt"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{901F26F5-38FB-4819-97C0-4AA9B58834B4}]
@="BackWeb OfflineUrlAccessor Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{901F26F5-38FB-4819-97C0-4AA9B58834B4}\ProgID]
@="BackWeb.OfflineUrlAccessor-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{E912C30C-9E83-4339-BBAC-ED02A23557C8}]
@="BackWeb Portal Plugin"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{E912C30C-9E83-4339-BBAC-ED02A23557C8}\ProgID]
@="BackWeb.PortalPlugin-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33}]
@="BackWeb Proactive Portal Pluggable Protocol"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{6DFFAAAD-146B-410E-B2CF-EAF95C3C1B33}\ProgID]
@="BackWeb.ProactivePortalPlugProtocol-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{25043B23-BB97-42A5-B981-E0370CEE9AB4}]
@="BackWebDocMap Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{25043B23-BB97-42A5-B981-E0370CEE9AB4}\ProgID]
@="BackWeb.DocMap-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{BDC9B245-12B2-44C6-A884-5C0B5075F53E}]
@="BackWeb Client Files Access Via Directory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{BDC9B245-12B2-44C6-A884-5C0B5075F53E}\ProgID]
@="BackWeb.FileAccessViaDir-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{AD47916A-A2EB-48F7-9ACA-221790DA98CC}]
@="BackWeb Client Files Access"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{AD47916A-A2EB-48F7-9ACA-221790DA98CC}\ProgID]
@="BackWeb.FileAccess-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{79D37817-A8A8-4B34-95DA-398DD9ACE2C6}\ProgID]
@="BackWeb.Client.ScriptHelper-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{9462A756-7B47-47BC-8C80-C34B9B80B32B}]
@="BackWeb GA Pluggable Protocol"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{9462A756-7B47-47BC-8C80-C34B9B80B32B}\ProgID]
@="BackWeb.GAPlugProtocol-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{08FF96C2-8DA6-4714-8A46-1A002BB0EAE3}]
@="BackWeb ClientExt Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{08FF96C2-8DA6-4714-8A46-1A002BB0EAE3}\ProgID]
@="BackWeb.ScriptExt-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{A423A847-74D1-42B5-ADE8-A5A4EB89F4EB}\ProgID]
@="BackWeb.ScriptExt.BWScript.Scheduler-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{32D813C9-C68D-4584-84C6-4B2574B5B779}\ProgID]
@="BackWeb.ScriptExt.BWScript.Filter.Channels-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{932EA74A-2540-4A1B-8C87-2C517CF352E9}\ProgID]
@="BackWeb.ScriptExt.BWScript-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{F29B4985-A634-40D4-80C8-E355BD682A9E}\ProgID]
@="BackWeb.ScriptExt.BWScript.Filter-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{0D2B3492-8D5A-4B70-848E-8A482B8DF0CF}\ProgID]
@="BackWeb.ScriptExt.BWScript.Filter.Setup-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{174D2F55-2E03-46FE-B0D6-CD4B0BD23FF2}\ProgID]
@="BackWeb.ScriptExt.BWScript.Filter.Stories-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{F1B4E131-D613-4427-9D66-FFD0FD75999D}\ProgID]
@="BackWeb.ScriptExt.BWScript.Filter.InfoPaks-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{44ADE5FE-9889-4413-80C0-E1D11AC68D3F}\ProgID]
@="BackWeb.ScriptExt.AMAttrs-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{A50092F5-A8BA-49F7-8AD9-1A81D2584903}\ProgID]
@="BackWeb.ScriptExt.BWScript.Scheduler.PeriodicTask-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{063BB46B-FEC3-4146-8684-0D06F6F67B12}\ProgID]
@="BackWeb.ScriptExt.BWScript.Scheduler.IdleTask-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{482602A3-D40E-42A7-AE8B-C0A1995A2E8E}\ProgID]
@="BackWeb.ScriptExt.BWScript.Scheduler.NotIdleTask-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{D97D700A-5F70-4507-A633-C90445B855D1}]
@="BackWeb Interactive User Client Commander"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{D97D700A-5F70-4507-A633-C90445B855D1}\ProgID]
@="BackWeb.InteractiveUserClientCommander-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{220660B6-ACA1-43A5-92C5-E6308BB81E8C}]
@="BackWeb Client Commander"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{220660B6-ACA1-43A5-92C5-E6308BB81E8C}\ProgID]
@="BackWeb.ClientCommander-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{460E54D5-1673-47F6-988B-4ADD147892E7}]
@="BackWebXmlHttp Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{460E54D5-1673-47F6-988B-4ADD147892E7}\ProgID]
@="BackWeb.XmlOffline-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{185E3232-9594-4090-A4AD-1ED496F73FE1}]
@="BackWeb Client"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{185E3232-9594-4090-A4AD-1ED496F73FE1}\ProgID]
@="BackWeb.Client-7288971"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{F2DD9BC5-3851-4766-9F67-A627B3C053DD}]
@="BackWeb Client"

[HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID\{F2DD9BC5-3851-4766-9F67-A627B3C053DD}\ProgID]
@="BackWeb.Client-8876480"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{3AF78A74-6F14-11D1-A884-0000B43699FC}]
@="IBackWebInfoPakFile"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{4EC60050-6E5B-11D2-893B-00104BCA9324}]
@="IBackWebFileReplicationManager"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{3AF78A6E-6F14-11D1-A884-0000B43699FC}]
@="IBackWebFileAccess"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{608FE360-6FB2-11D1-A885-0000B43699FC}]
@="IBackWebFileAccessViaDir"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{70C8EF70-2EE2-11D3-B9CD-00C04F9CD5A7}]
@="IBackWebFileAccessViaDir5_5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{9175A9C0-C6DB-11D1-AA87-0000B43695BE}]
@="IBackWebFileReplicationNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{B738B058-B74F-11D1-AA87-0000B43695BE}]
@="IBackWebFileReplication"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CF513E23-10EC-11D2-B044-00A0C94CD67E}]
@="IBackWebInfoPakFilesCollection5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{D055A4B1-1A34-11D2-B980-00C04F9CD5A7}]
@="IBackWebInfoPakSubdir"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{3AF78A71-6F14-11D1-A884-0000B43699FC}]
@="IBackWebInfoPakFilesCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{3AF78A77-6F14-11D1-A884-0000B43699FC}]
@="IBackWebOpenInfoPakFile"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{577B3560-C6F3-11D1-AA87-0000B43695BE}]
@="IBackWebFileReplicationResultNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{B738B05A-B74F-11D1-AA87-0000B43695BE}]
@="IBackWebFileReplicationCleanup"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CF513E24-10EC-11D2-B044-00A0C94CD67E}]
@="IBackWebInfoPakFile5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{D055A4B0-1A34-11D2-B980-00C04F9CD5A7}]
@="IBackWebInfoPakSubdirsCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{9DB46424-FF61-11D0-9951-444553540000}]
@="IBackWebStory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{53FCF35B-5323-11D0-A864-0000B43699FC}]
@="IBackWebChannel"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{EB1FFFC1-5688-11D0-A865-0000B43699FC}]
@="IBackWebInfoPakCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{EB1FFFC2-5688-11D0-A865-0000B43699FC}]
@="IBackWebInfoPak"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{A4BC67F0-6C90-11D0-A866-0000B43699FC}]
@="IBackWebChannelVariableCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{FEFCA7F0-6C8E-11D0-A866-0000B43699FC}]
@="IBackWebChannelVariable"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{1D91D9E0-004B-11D1-9951-444553540000}]
@="IBackWebStoryFieldCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{5B1E13A0-004B-11D1-9951-444553540000}]
@="IBackWebStoryField"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{FBAB6C00-5924-11D2-B991-00C04F9CD5A7}]
@="IBackWebStory5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{6A21FEE0-5A23-11D3-82F5-00600874D315}]
@="IBackWebStory6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{B60D9F50-F32E-11D5-BA43-0010A4FBBFC9}]
@="IBackWebStory6_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{12473FC7-61A7-11D0-A866-0000B43699FC}]
@="IBackWebSetup"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{12473FC3-61A7-11D0-A866-0000B43699FC}]
@="IBackWebGeneralSettings"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{12473FC5-61A7-11D0-A866-0000B43699FC}]
@="IBackWebCommSettings"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0D1F7C84-8123-11D0-B5CA-0000B43698D6}]
@="IBackWebDownloadTimeConstraintCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0D1F7C83-8123-11D0-B5CA-0000B43698D6}]
@="IBackWebDownloadTimeConstraint"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{12473FC6-61A7-11D0-A866-0000B43699FC}]
@="IBackWebDisplaySettings"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{12473FC4-61A7-11D0-A866-0000B43699FC}]
@="IBackWebDialerSettings"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{3667E7B0-4F28-11D1-8ADB-00609761C47A}]
@="IBackWebSetup4"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{72B62B40-17D1-11D1-96A7-F8E906C10000}]
@="IBackWebAlertSettings"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{C8CEEEE0-17D6-11D1-96A7-F8E906C10000}]
@="IBackWebFilterSettings"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{79D25F04-04FE-11D2-B044-00A0C94CD67E}]
@="IBackWebSetup5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{05846520-04FF-11D2-B044-00A0C94CD67E}]
@="IBackWebFileStoreSettings"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{581E26D0-DC70-11D2-A64B-00104B9B511A}]
@="IBackWebSetup5_5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{A7AC2543-1B0C-11D2-83B1-00C0F01859AC}]
@="IBackWebCertificateCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{A7AC2542-1B0C-11D2-83B1-00C0F01859AC}]
@="IBackWebCertificate"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{A17240E1-DD5C-11D3-AEA6-00105A680865}]
@="IBackWebSetup6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{2D8ACF70-B161-11D3-BE20-000086397BAD}]
@="IBackWebAttentionManagement"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{4AD8B831-E3B3-11D3-AEAE-00105A680865}]
@="IBackWebAttentionManagementContext"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{8028B940-4932-11D1-9951-444553540000}]
@="IBackWebPlayer"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{9647FB70-DC0F-11D0-A875-0000B43699FC}]
@="IBackWebChannel2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{9132E380-DC21-11D0-A875-0000B43699FC}]
@="IBackWebChannelDownloadServices"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{93BF8F00-DBE8-11D0-A875-0000B43699FC}]
@="IBackWebItemDownloadServices"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{2DE07D90-DC04-11D0-A875-0000B43699FC}]
@="IBackWebInfoPakDownloadServices"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{AEE96320-2131-11D1-9951-444553540000}]
@="IBackWebChannel4"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0C6E0440-0B50-11D1-9951-444553540000}]
@="IBackWebDirectoryEntry"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{15030BC0-0B52-11D1-9951-444553540000}]
@="IBackWebDirectory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{5DF6CE40-0B50-11D1-9951-444553540000}]
@="IBackWebDirectoryEntryCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{9DB46422-FF61-11D0-9951-444553540000}]
@="IBackWebStoryCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{025632A0-BCEC-11D1-8B35-00609761C47A}]
@="IBackWebChannel4_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{73C3FCC0-C4AF-11D1-AA87-0000B43695BE}]
@="IBackWebChannel5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{34349540-5B8E-11D1-AF44-00AA00480CBE}]
@="IBackWebUpstreamMessageCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{34349541-5B8E-11D1-AF44-00AA00480CBE}]
@="IBackWebUpstreamMessage"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CE6C0A50-BE92-11D2-B9B0-00C04F9CD5A7}]
@="IBackWebChannel5_0_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{60BFF8B0-A3CC-11D2-BF9C-00A0C93A4D75}]
@="IBackWebChannel5_5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CE2F2BC0-C116-11D3-B861-0010A404098C}]
@="IBackWebChannel5_5_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{A84355A1-D242-11D2-8C1D-00105AA63533}]
@="IBackWebChannel6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{28BC6260-DA2F-11D3-B87B-0010A404098C}]
@="IBackWebShutdownProtector"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{B941E960-5A21-11D3-82F5-00600874D315}]
@="IBackWebInfoPak6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{EDA02220-C4AF-11D2-B9B3-00C04F9CD5A7}]
@="IBackWebInfoPak5_5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CF513E20-10EC-11D2-B044-00A0C94CD67E}]
@="IBackWebInfoPak5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{610141C2-7701-11D1-B042-004095903824}]
@="IBackWebInfoPak4_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CF513E21-10EC-11D2-B044-00A0C94CD67E}]
@="IBackWebInfoPakExternalUpdateCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CF513E22-10EC-11D2-B044-00A0C94CD67E}]
@="IBackWebInfoPakExternalUpdate"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{EB2FA8C0-37C5-11D4-B8DE-0010A4FBBFC9}]
@="IBackWebInfoPakAccess"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{AF6BD5B0-D3F3-11D4-B966-0010A4FBBFC9}]
@="IBackWebChannel6_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CADD3D20-F328-11D5-BA43-0010A4FBBFC9}]
@="IBackWebChannel6_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{393920B3-6415-4045-BFF7-69D3CD024261}]
@="IBackWebChannel6_3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{29DE5E9B-1C04-40FE-9472-2082C6BB1DE3}]
@="IBackWebChannel7_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{53FCF35A-5323-11D0-A864-0000B43699FC}]
@="IBackWebChannelCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{BCD0C200-69C1-11D1-8AF8-00609761C47A}]
@="IBackWebChannelCollection4"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{74946131-D63B-11D2-8C1F-00105AA63533}]
@="IBackWebChannelCollection6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{FD395090-29CF-11D4-B8D0-0010A4FBBFC9}]
@="IBackWebChannelVariable6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CF7CE690-2C7A-11D2-AFF7-00104B6FDB95}]
@="IBackWebChannelVariableCollection5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{18DD4341-D87E-11D2-8C20-00105AA63533}]
@="IBackWebChannelVariableCollection6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{2F523082-5A0B-11D0-9B9C-444553540000}]
@="IBackWebChannelTableNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{F4B0C3F1-BC3E-11D3-906F-00104B9B511A}]
@="IBackWebComponent"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{F4B0C3F2-BC3E-11D3-906F-00104B9B511A}]
@="IBackWebComponentCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{44230BC0-3105-11D1-9951-444553540000}]
@="IBackWebStoryTableNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{DD7499A4-3BF4-4FFA-8253-FEDAF7492441}]
@="IBackWebStoryTableNotifications6_3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{41CEBDC0-32C1-11D1-9951-444553540000}]
@="IBackWebDirectoryNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{4A3666F3-5F2D-11D0-A866-0000B43699FC}]
@="IBackWebInfoPakNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{2F099AF0-6329-11D0-A866-0000B43699FC}]
@="IBackWebSetupNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{D0894D60-6C6C-11D0-A866-0000B43699FC}]
@="IBackWebApplicationNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{1E8B2080-AF64-11D4-B94C-0010A4FBBFC9}]
@="IBackWebTimerNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0CF56A20-AF64-11D4-B94C-0010A4FBBFC9}]
@="IBackWebTimer"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{E50876A0-AF5A-11D4-B94C-0010A4FBBFC9}]
@="IBackWebUserIdleTimerNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{D8CB83C0-AF57-11D4-B94C-0010A4FBBFC9}]
@="IBackWebUserIdleTimer"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{B952C110-AF5D-11D4-B94C-0010A4FBBFC9}]
@="IBackWebUserNotIdleDetectorNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{AD705AC0-AF5D-11D4-B94C-0010A4FBBFC9}]
@="IBackWebUserNotIdleDetector"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{8EA7FB0A-C26A-48A6-9EEE-3501855C4DF8}]
@="IBackWebUpstreamNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{D6BD8C50-5A3E-4CE8-8A6E-343D1C0B74DC}]
@="IBackWebUpstreamMessage6_3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0007BE40-C496-11D2-BFBF-00A0C93A4D75}]
@="IBackWebUpstreamMessage5_5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0F4FE440-983F-11D0-9B9C-444553540000}]
@="IBackWebExtension"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{9A9FCE90-B619-11D3-B857-0010A404098C}]
@="IBackWebExtension6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{3A43BD61-F0F5-11D2-8C29-00105AA63533}]
@="IBackWeb6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{3C027500-C2C7-11D3-B864-0010A404098C}]
@="IBackWeb5_5_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{740904E0-0BFB-11D1-9951-444553540000}]
@="IBackWeb4"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{23F43240-F78D-11D0-9A50-00AA004812C2}]
@="IBackWeb2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{53FCF355-5323-11D0-A864-0000B43699FC}]
@="IBackWeb"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{8131F530-649E-11D0-A866-0000B43699FC}]
@="IBackWebAllInfoPakCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{BAD37BC0-2231-11D1-9951-444553540000}]
@="IBackWebCommunications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{9DB46423-FF61-11D0-9951-444553540000}]
@="IBackWebAllStoryCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{D382C311-FDB7-11D3-9099-00104B9B511A}]
@="IBackWebCapabilities"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{D6F7929C-DDBC-4FCF-9F66-6CB56DE43390}]
@="IBackWebExtension6_3_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{2E4C4083-3280-4680-9932-0C05B375D71F}]
@="IBackWeb6_3_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{10B2F8C7-B017-4EDF-B7C8-2A1ABF07E263}]
@="IBackWeb6_3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0EC3CFD0-1EFB-11D6-BA63-0010A4FBBFC9}]
@="IBackWeb6_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{63CE5B70-AF54-11D4-B94C-0010A4FBBFC9}]
@="IBackWeb6_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{29E5AF70-B615-11D4-B953-0010A4FBBFC9}]
@="IBackWeb6_0_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{76F0D380-B617-11D4-B953-0010A4FBBFC9}]
@="IBackWebExtensionVariables"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0BBD4090-AF55-11D4-B94C-0010A4FBBFC9}]
@="IBackWebTimingServices"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{BF24C8F0-FB6F-11D5-BA47-0010A4FBBFC9}]
@="IBackWebTempSetting"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{AA3B2B15-5F3F-4AE2-9273-D3E07A4A2775}]
@="IBackWebExtensionRequestHandler"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{2F068020-F87D-11D0-9A50-00AA004812C2}]
@="IBackWebCustomUserInterface"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{9A9FCE91-B619-11D3-B857-0010A404098C}]
@="IBackWebCustomUserInterface6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{E01AD640-F87D-11D0-9A50-00AA004812C2}]
@="IBackWebGeneralSettings2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{8EB0E1A0-C4B0-11D1-AA87-0000B43695BE}]
@="IBackWebGeneralSettings5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{848D6E81-1699-11D3-A793-00105A68088F}]
@="IBackWebGeneralSettings5_5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{E2FF0110-C29D-11D3-B864-0010A404098C}]
@="IBackWebGeneralSettings5_5_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{2A58F590-D30B-11D2-8C1E-00105AA63533}]
@="IBackWebGeneralSettings6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{037B1EF0-C61A-11D5-BA26-000000000000}]
@="IBackWebGeneralSettings6_1_4"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{1816DBE3-70AA-4B40-8925-369F4DFE93FF}]
@="IBackWebGeneralSettings6_3_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{98A90D6A-7E63-45BE-88E4-AFB44FAB5C62}]
@="IBackWebGeneralSettings6_3_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{2F0A7430-D34B-11D5-BA2F-0010A4FBBFC9}]
@="IBackWebInfoPak6_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{B9E582A3-E440-452F-BD59-F7E723B7CCFF}]
@="IBackWebInfoPak6_3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{53C327E0-6576-11D1-BB4B-0000B4369751}]
@="IBackWebChannelDownloadServices2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{001B3F20-D866-11D1-8B4C-00609761C47A}]
@="IBackWebDisplaySettings4_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{12966062-E035-11D2-8C23-00105AA63533}]
@="IBackWebDisplaySettings6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{AE345B98-B6EE-4296-930F-80BFC562B844}]
@="IBackWebDisplaySettings6_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{13837DA8-EF54-4675-AFB8-8E28A01CC26D}]
@="IBackWebUpstreamMessageCollection6_3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{12966061-E035-11D2-8C23-00105AA63533}]
@="IBackWebCommSettings6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{12F4DD61-A432-477C-8664-C1B0E6368DF3}]
@="IBackWebCommSettings6_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{A88B5B90-FB6E-11D5-BA47-0010A4FBBFC9}]
@="IBackWebCommSettings6_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{FF41662F-0248-4FE2-90A6-10086BFD424E}]
@="IBackWebCommSettings6_3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{DA4CE69D-B9BE-4FF8-A2FA-7A27CDA1107E}]
@="IBackWebCommSettings7_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{5B267241-C2A4-11D3-BE42-000086397BAD}]
@="IBackWebCertificate5_5_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{6F791E27-0741-4A28-B234-6D813E31AEA7}]
@="IBackWebCertificate7_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0668A670-2D8C-11D3-B9CD-00C04F9CD5A7}]
@="IBackWebInfoPakExternalUpdate5_5"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{6EFC6591-E13D-11D2-8C23-00105AA63533}]
@="IBackWebDownloadTimeConstraintCollection6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{946AE641-E1E0-11D2-8C23-00105AA63533}]
@="IBackWebDialerSettings6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{D8B14791-E5DB-11D2-8C24-00105AA63533}]
@="IBackWebCommunications6"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{419DBB00-B161-11D3-BE20-000086397BAD}]
@="IBackWebAttentionManagementLogic"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{F82F55E8-7698-4593-B963-920539528CC2}]
@="IBackWebFileNotifications"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{B033A622-FE92-4F1F-B48F-FEE197DA69E2}]
@="IBackWeb7_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{ED361468-7877-4096-B151-E16A15AE5BA7}]
@="IBackWebLiteInstRunner4_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{101F1C43-FB1E-4DD7-B09E-CC3540D1FF85}]
@="IBackWebLiteInstRunner3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CD011193-9086-4EB4-B3FC-690D2497E884}]
@="IBackWebLiteInstRunner2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{0431D532-C86B-49EA-B6C8-BAF4D6994F0B}]
@="IBackWebLiteInstRunner"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{95396F0E-1503-4E27-A485-630C3253E36D}]
@="_IBackWebPortalPluginEvents"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{13EE791C-11F8-46F3-B4EA-5D28EE14B9F7}]
@="IBackWebPortalPlugin4_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{7CA9BE02-35E5-4E8A-9C08-D0195DDEB71B}]
@="IBackWebPortalPlugin4_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{5999A30F-34F6-48E0-AAD6-7DF87E5B64C4}]
@="IBackWebPortalPlugin3_0_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{071833B4-732A-40F0-BBD7-10223B7C71C4}]
@="IBackWebPortalPlugin3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{740A8032-8AE0-4182-B133-0023F1F4191A}]
@="IBackWebPortalPlugin2_0_3"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{6A47E60C-7DAF-4569-A542-AB62998FA6D0}]
@="IBackWebPortalPlugin"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{EDB6651E-CB6A-4DAE-89C1-58AF269A5E9F}]
@="IBackWebSubmission"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{24C9FCCB-33D3-4529-AC23-A976260EE7C6}]
@="IBackWebSubmission3_0_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{9D105DEE-BD27-4EE2-A26D-DA2FCA25173B}]
@="IBackWebSubmissionElements"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{DD8D0B96-8768-40FF-A87A-E912F4ACD4B6}]
@="IBackWebSubmission4_2"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{A27B5D03-A711-4C42-832E-053F952738CA}]
@="IBackWebSubmissionsMgr"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{F3CC372D-CFE0-4577-BF1F-BF1E51C61A1F}]
@="IBackWebSubmissionCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{AD2F11CC-1C10-435F-A598-7B4C3C794FC0}]
@="IBackWebSubmissionsMgr3_0_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{6BDA8C08-7723-4E4F-957A-FCCBD75134C7}]
@="_IBackWebDocMapEvents"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{12D85039-3091-4CCF-B141-F351C7A9D61B}]
@="IBackWebDocMap"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{C7C96036-81B1-4FF1-8B9C-85C2AD89C60E}]
@="IBackWebProactivePortalExtension"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{22C7D5DC-1040-4AA8-A3E9-197DA839F98B}]
@="IBackWebNotificationsMgr"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{82CBA395-8AF1-4191-8CDA-B0B3B361D880}]
@="IBackWebNotification"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{B2F80F50-3D57-459A-8350-5B37BF22DD9A}]
@="IBackWebNotificationsCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{797EDED5-A53F-4FB7-ABBB-A7D118637EA9}]
@="IBackWebProactivePortalExtension3_0_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{FEA3CD6C-9B81-4637-B3CF-7F264E69A2AC}]
@="IBackWebOfflineSearchMgr"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{1CA62C48-F46C-41F4-B82C-7112FAD61357}]
@="IBackWebOfflineSearchCollection"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{3A48DC72-48BF-42E3-A800-6A6E621D5F5B}]
@="IBackWebOfflineSearchResult"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{04B45979-DDCC-46D0-897C-F1FCB79C8B89}]
@="IBackWebProactivePortalExtension4_1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{CD2DE130-C60C-11D5-BA25-0010A4FBBFC9}]
@="IBackWebCommander6_1_4"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{8847C5C0-E2C5-11D3-B882-0010A404098C}]
@="IBackWebCommander"

[HKEY_LOCAL_MACHINE\Software\CLASSES\Interface\{5CE17366-4D94-4BC4-9D40-BF92E4F6097E}]
@="IBackWebXmlHttp"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{949C4B3F-7F0A-4D27-A924-04E0054414C0}\1.0]
@="BackWeb ClientExt Class 1.0 Type Library"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{53FCF357-5323-11D0-A864-0000B43699FC}\2.1]
@="BackWeb 6.0.1 Type Library (v2.1)"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{53FCF357-5323-11D0-A864-0000B43699FC}\2.1\0\win32]
@="C:\\Program Files\\BackWeb\\BackWeb Client\\6.0.1.209L\\Program\\backWeb.tlb"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{53FCF357-5323-11D0-A864-0000B43699FC}\2.1\HELPDIR]
@="C:\\Program Files\\BackWeb\\BackWeb Client\\6.0.1.209L\\Program\\"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{53FCF357-5323-11D0-A864-0000B43699FC}\2.3]
@="BackWeb Type Library (v2.3)"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{53FCF357-5323-11D0-A864-0000B43699FC}\2.3\0\win32]
@="C:\\Program Files\\Kodak\\Kodak Software Updater\\7288971\\6.1.4.37-7288971L\\Program\\backWeb.tlb"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{53FCF357-5323-11D0-A864-0000B43699FC}\2.a]
@="BackWeb Type Library (v2.10)"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{53FCF357-5323-11D0-A864-0000B43699FC}\2.a\0\win32]
@="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\7.2.0.157-8876480SL\\Program\\backWeb.tlb"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{3AF78A60-6F14-11D1-A884-0000B43699FC}\2.0]
@="BackWebFiles Type Library (v2.0)"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{97972D22-C259-11D1-AA87-0000B43695BE}\2.0]
@="BackWebFileReplicationExtension 6.1.2 Type Library (v2.0)"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{3732EC5C-C584-44B8-B4DA-04E0054414C0}\1.0]
@="BackWeb ClientExt Class 1.0 Type Library"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{3E416161-98EE-11D4-AF74-00105A680865}\1.0]
@="BackWeb Client Scripting Extension 6.1.2 Type Library (v1.0)"

[HKEY_LOCAL_MACHINE\Software\CLASSES\TypeLib\{8847C5C1-E2C5-11D3-B882-0010A404098C}\1.1]
@="BackWebCommander Type Library (v1.1)"

[HKEY_LOCAL_MACHINE\Software\CLASSES\AppID\{5DBF3CAA-E4F5-4BDA-A84B-9387EA3A36D1}]
@="BackWeb Client Files Access Via Directory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\AppID\{1E5DF25C-F47F-4F6E-8DBE-C3983C4064D8}]
@="BackWeb Client Files Access"

[HKEY_LOCAL_MACHINE\Software\CLASSES\AppID\{185E3232-9594-4090-A4AD-1ED496F73FE1}]
@="BackWeb Client"

[HKEY_LOCAL_MACHINE\Software\CLASSES\AppID\{D09B9CCB-255E-4FD4-9D4D-37D1EA3A8B44}]
@="BackWeb Client Files Access Via Directory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\AppID\{5715C18E-F2C7-42D0-931F-57CF1CFD3E25}]
@="BackWeb Client Files Access"

[HKEY_LOCAL_MACHINE\Software\CLASSES\AppID\{BDC9B245-12B2-44C6-A884-5C0B5075F53E}]
@="BackWeb Client Files Access Via Directory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\AppID\{AD47916A-A2EB-48F7-9ACA-221790DA98CC}]
@="BackWeb Client Files Access"

[HKEY_LOCAL_MACHINE\Software\CLASSES\AppID\{D97D700A-5F70-4507-A633-C90445B855D1}]
@="BackWeb Interactive User Client Commander"

[HKEY_LOCAL_MACHINE\Software\CLASSES\AppID\{220660B6-ACA1-43A5-92C5-E6308BB81E8C}]
@="BackWeb Client Commander"

[HKEY_LOCAL_MACHINE\Software\CLASSES\PROTOCOLS\Handler\offline-8876480]
@="BackWeb Proactive Portal Pluggable Protocol"

[HKEY_LOCAL_MACHINE\Software\CLASSES\PROTOCOLS\Handler\bwfile-8876480]
@="BackWeb GA Pluggable Protocol"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccessViaDir-8263142]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccessViaDir-8263142]
@="BackWeb Client Files Access Via Directory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccessViaDir-8263142\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccess-8263142]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccess-8263142]
@="BackWeb Client Files Access"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccess-8263142\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client-8263142]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client-8263142]
@="BackWeb Client"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client-8263142\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client.ScriptHelper-]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client.ScriptHelper-\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client-7288971]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client-7288971]
@="BackWeb Client"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client-7288971\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileReplicationCleanup-7288971]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileReplicationCleanup-7288971]
@="BackWeb File Replication Cleanup"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileReplicationCleanup-7288971\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccessViaDir-7288971]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccessViaDir-7288971]
@="BackWeb Client Files Access Via Directory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccessViaDir-7288971\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client.ScriptHelper-7288971]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client.ScriptHelper-7288971\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccess-7288971]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccess-7288971]
@="BackWeb Client Files Access"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccess-7288971\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileReplication-7288971]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileReplication-7288971]
@="BackWeb File Replicator"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileReplication-7288971\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileReplicationExtension-7288971]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileReplicationExtension-7288971]
@="BackWeb File Replication Extension"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileReplicationExtension-7288971\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.VBFileReplicationExtension-7288971]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.VBFileReplicationExtension-7288971]
@="BackWeb File Replication Extension Creator for Visual Basic"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.VBFileReplicationExtension-7288971\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client-8876480]
@="BackWeb Client"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.LiteInstRunner-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.LiteInstRunner-8876480]
@="BackWeb Lite Install Runner"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.LiteInstRunner-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientExt.1]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientExt.1]
@="BackWeb ClientExt Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientExt.1\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientExt]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientExt]
@="BackWeb ClientExt Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientExt\CurVer]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientExt\CurVer]
@="BackWeb.ClientExt.1"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.OfflineUrlAccessor-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.OfflineUrlAccessor-8876480]
@="Backweb OfflineUrlAccessor Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.OfflineUrlAccessor-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.PortalPlugin-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.PortalPlugin-8876480]
@="BackWeb Portal Plugin"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.PortalPlugin-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ProactivePortalPlugProtocol-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ProactivePortalPlugProtocol-8876480]
@="BackWeb Proactive Portal Pluggable Protocol"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ProactivePortalPlugProtocol-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.DocMap-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.DocMap-8876480]
@="BackWebDocMap Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.DocMap-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccessViaDir-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccessViaDir-8876480]
@="BackWeb Client Files Access Via Directory"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccessViaDir-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccess-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccess-8876480]
@="BackWeb Client Files Access"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.FileAccess-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client.ScriptHelper-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.Client.ScriptHelper-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.GAPlugProtocol-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.GAPlugProtocol-8876480]
@="BackWeb GA Pluggable Protocol"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.GAPlugProtocol-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt-8876480]
@="BackWeb ScriptExt Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Scheduler-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Scheduler-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter.Channels-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter.Channels-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter.Setup-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter.Setup-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter.Stories-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter.Stories-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter.InfoPaks-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Filter.InfoPaks-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.AMAttrs-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.AMAttrs-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Scheduler.PeriodicTask-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Scheduler.PeriodicTask-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Scheduler.IdleTask-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Scheduler.IdleTask-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Scheduler.NotIdleTask-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ScriptExt.BWScript.Scheduler.NotIdleTask-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.InteractiveUserClientCommander-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.InteractiveUserClientCommander-8876480]
@="BackWeb Interactive User Client Commander"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.InteractiveUserClientCommander-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientCommander-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientCommander-8876480]
@="BackWeb Client Commander"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.ClientCommander-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.XmlOffline-8876480]

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.XmlOffline-8876480]
@="BackWebDocMap Class"

[HKEY_LOCAL_MACHINE\Software\CLASSES\BackWeb.XmlOffline-8876480\CLSID]

[HKEY_LOCAL_MACHINE\Software\CLASSES\iadfile]
@="BackWeb Channel Registration File"

[HKEY_LOCAL_MACHINE\Software\CLASSES\bwpfile]
@="BackWeb InfoPak Preview File"

[HKEY_LOCAL_MACHINE\Software\BackWeb]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\General]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\CustomComponents]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\CustomComponents\App]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\CustomComponents\custom_comp_config]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\CustomComponents\custom_comp_Utilities]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\CustomComponents\custom_comp_DIAGSRETAILORIGIN]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\CustomComponents\custom_comp_DLGClientExt]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\CustomComponents\Cfg]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Components]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Components\uninstaller]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Components\core]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Components\Pre6Import]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Components\PrvCnt]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Components\SpriteEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Components\Sprite]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Components\BackWebDiet]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Classes]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Classes\BackWeb.FileAccess]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Classes\BackWeb.FileAccessViaDir]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Classes\BackWeb.Client]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Pre6Client]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\Install]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ComponentsToRegister]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ComponentsToRegister\DLGClientExt.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ComponentsToRegister\BWfiles-8263142.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ComponentsToRegister\backWeb-8263142.exe]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ComponentsToRegister\backWeb-8263142.exe]
"Path"="C:\\Program Files\\Data LifeGuard\\8263142\\Program\\backWeb-8263142.exe"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ClientExtensions]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ClientExtensions\{A6A59078-03AD-4962-AB67-04E0054414C0}]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ClientExtensions\{A6A59078-03AD-4962-AB67-04E0054414C0}]
@="BackWeb.ClientExt"

[HKE

#12
Savageone

Posted 06 November 2005 - 12:13 AM

Member

Topic Starter
Member
19 posts

cont'd..

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ComponentsRegistered]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ComponentsRegistered\DLGClientExt.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ComponentsRegistered\BWfiles-8263142.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8263142\ComponentsRegistered\backWeb-8263142.exe]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsRegistered]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsRegistered\BWTargetInf.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsRegistered\backWeb-7288971.exe]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsRegistered\BWCHelpr-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsRegistered\BWfiles-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsRegistered\frcom-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsRegistered\frext-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsRegistered\vbfrext-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Pre6Client]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Shortcuts]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Shortcuts\0]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Shortcuts\0\FileReplication]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Shortcuts\0\FileReplication]
"locating_path"="$BackwebVersion\\program\\repBead.exe"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\App]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\Cfg]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\custom_comp_BwTargetInf]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\custom_comp_EnDisSrv]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\custom_comp_kdlang]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\custom_comp_kdPostRep]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\custom_comp_KSUUtil]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\custom_comp_ReadMe]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\custom_comp_Trigger]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\preseeded_infopak_TriggerIpk]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\CustomComponents\preseeded_infopak_Trigger]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes\BackWeb.Client]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes\BackWeb.Client.ScriptHelper]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes\BackWeb.ClientDialogs]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes\BackWeb.FileAccess]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes\BackWeb.FileAccessViaDir]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes\BackWeb.FileReplication]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes\BackWeb.FileReplicationCleanup]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes\BackWeb.FileReplicationExtension]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Classes\BackWeb.VBFileReplicationExtension]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ClientExtensions]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ClientExtensions\BackWeb.FileReplicationExtension-7288971]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ClientExtensions\BackWeb.FileReplicationExtension-7288971]
@="BackWeb.FileReplicationExtension-7288971"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ClientExtensions\{8DBFE843-D7DF-4cfc-B62C-05A6899139E2}]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\BackWebDiet]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\backwebEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\clntutil]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\core]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\FileRepl]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\FileReplData]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\FileReplEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\Pre6Import]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\RapidSurveySupportEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\repbead]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\splash]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\Sprite]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\SpriteEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\UninstallEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Components\uninstaller]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsToRegister]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsToRegister\BWTargetInf.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsToRegister\backWeb-7288971.exe]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsToRegister\backWeb-7288971.exe]
"Path"="C:\\Program Files\\Kodak\\Kodak Software Updater\\7288971\\Program\\backWeb-7288971.exe"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsToRegister\BWCHelpr-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsToRegister\BWfiles-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsToRegister\frcom-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsToRegister\frext-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\ComponentsToRegister\vbfrext-7288971.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\General]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\7288971\Install]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\General]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Install]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Pre6Client]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.Client]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.Client.ScriptHelper]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.FileAccessViaDir]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.FileAccess]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.ScriptExt]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.FileReplication]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.FileReplicationCleanup]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.FileReplicationExtension]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.VBFileReplicationExtension]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.ClientDialogs]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.Channels]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.ChannelDirectoryCtrl]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.ClientCommander]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.InteractiveUserClientCommander]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.PortalPlugin]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.PlugProtocol]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.DocMap]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.DataSets]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.DataSetNotifier]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.GAPlugProtocol]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.XmlOffline]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.OfflineUrlAccessor]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Classes\BackWeb.SMMgr]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ClientExtensions]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ClientExtensions\{C2C99FA5-CA27-4ee2-804D-04E0054414C0}]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ClientExtensions\{C2C99FA5-CA27-4ee2-804D-04E0054414C0}]
@="BackWeb.ClientExt"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ClientExtensions\BackWeb.DocMap-8876480]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ClientExtensions\BackWeb.DocMap-8876480]
@="BackWeb.DocMap-8876480"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ClientExtensions\BackWeb.ScriptExt-8876480]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ClientExtensions\BackWeb.ScriptExt-8876480]
@="BackWeb.ScriptExt Class"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Service]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\CustomComponents]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\CustomComponents\App]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\CustomComponents\Cfg]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\CustomComponents\BWRegistration]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\CustomComponents\script_ext_RuleExec]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\CustomComponents\custom_comp_Configuration_UI]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\CustomComponents\custom_comp_User_Profile_Synch]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\CustomComponents\script_ext_Enable_OAS]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWOfflineUrlAccessor]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\ProactivePortal]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\ProactivePortal\UI]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalNavigation]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalNavigationEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalPlugin]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPlugProtocol]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWDocumentMap]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\SpriteEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\Sprite]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalCore]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalUIcommon]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalSubmissionsMgrUI]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalSubmissionsMgrUI\UI]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BackWebDiet]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\uninstaller]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\core]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalNotificationsMgrUI]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalNotificationsMgrUI\UI]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalSubmissionsMgrUIEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalNotificationsMgrUIEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalUIcommonEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWScriptExt]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\UninstallEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalCommStatus]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\backwebEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\clntutil]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\Pre6Import]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWPortalCommStatusEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWCommander]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\Components\BWXmlOffline]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\LiteInstActivator.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\LogiLdmC.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\LogiLdmW.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\SyncExt.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\BWOfflineUrlAccessor-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\BWPortalPlugin-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\BWPlugProtocol-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\BWDocMapExt-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\LogitechDesktopMessenger.exe]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\BWfiles-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\BWCHelpr-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\GAPlugProtocol-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\bwscriptext-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\BWCmndr-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsToRegister\BWXmlOffline-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\RunnersMapping]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\RunnersMapping\backWeb-8876480.exe]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\RunnersMapping\LogitechDesktopMessenger.exe]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\RunnersMapping\LogitechDesktopMessenger.exe]
"MappedTo"="backWeb-8876480.exe"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\LiteInstActivator.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\LogiLdmC.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\LogiLdmW.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\SyncExt.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\BWOfflineUrlAccessor-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\BWPortalPlugin-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\BWPlugProtocol-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\BWDocMapExt-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\LogitechDesktopMessenger.exe]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\BWfiles-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\BWCHelpr-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\GAPlugProtocol-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\bwscriptext-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\BWCmndr-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Applications\8876480\ComponentsRegistered\BWXmlOffline-8876480.dll]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Capabilities]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\General]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\General]
"InstallDir"="C:\\Program Files\\BackWeb\\BackWeb Client\\6.0.1.209L\\"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Components]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Components\uninstaller]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Components\core]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Components\Pre6Import]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Components\PrvCnt]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Components\SpriteEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Components\Sprite]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Components\BackWebDiet]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.0.1.209L\Components\BackWebDiet]
"Runners"="backWeb.exe"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\clntutil]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\SpriteEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\BackWebDiet]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\BackWebDiet]
"Runners"="backWeb.exe"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\backwebEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\core]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\FileRepl]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\FileReplData]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\FileReplEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\Pre6Import]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\RapidSurveySupportEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\repbead]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\splash]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\Sprite]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\UninstallEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Private Components\uninstaller]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\General]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\6.1.4.37-7288971L\Capabilities]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Capabilities]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\General]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\ProactivePortal]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalNavigation]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalNavigationEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalPlugin]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPlugProtocol]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWDocumentMap]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\SpriteEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\Sprite]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalCore]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalUIcommon]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalSubmissionsMgrUI]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BackWebDiet]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BackWebDiet]
"Runners"="backWeb.exe"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\uninstaller]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\core]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalNotificationsMgrUI]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalSubmissionsMgrUIEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalNotificationsMgrUIEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalUIcommonEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWScriptExt]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\UninstallEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalCommStatus]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\backwebEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\clntutil]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\Pre6Import]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWPortalCommStatusEn]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWCommander]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWXmlOffline]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Versions\7.2.0.157-8876480SL\Private Components\BWOfflineUrlAccessor]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{3AF78A60-6F14-11D1-A884-0000B43699FC}_2.0_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{3AF78A60-6F14-11D1-A884-0000B43699FC}_2.0_0_win32]
"V6.0.1.209L"="C:\\Program Files\\BackWeb\\BackWeb Client\\6.0.1.209L\\Program\\BWfiles.dll"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{53FCF357-5323-11D0-A864-0000B43699FC}_2.1_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{53FCF357-5323-11D0-A864-0000B43699FC}_2.1_0_win32]
"V6.0.1.209L"="C:\\Program Files\\BackWeb\\BackWeb Client\\6.0.1.209L\\Program\\backWeb.tlb"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{53FCF357-5323-11D0-A864-0000B43699FC}_2.3_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{53FCF357-5323-11D0-A864-0000B43699FC}_2.3_0_win32]
"V6.1.4.37-7288971L"="C:\\Program Files\\Kodak\\Kodak Software Updater\\7288971\\6.1.4.37-7288971L\\Program\\backWeb.tlb"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{97972D22-C259-11D1-AA87-0000B43695BE}_2.0_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{873E26D3-23DA-11D3-ADD7-0050043BC574}_2.0_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{B738B04B-B74F-11D1-AA87-0000B43695BE}_2.0_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{C1A95B70-E795-11D4-B96F-0010A4FBBFC9}_1.0_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{53FCF357-5323-11D0-A864-0000B43699FC}_2.10_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{53FCF357-5323-11D0-A864-0000B43699FC}_2.10_0_win32]
"V7.2.0.157-8876480SL"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\7.2.0.157-8876480SL\\Program\\backWeb.tlb"

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{9608C346-FF37-4A91-B2EE-21ACB07CB9BD}_1.4_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{74A80D8C-6C78-4DE4-9F00-4E3D1421750F}_1.0_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{81296F03-17BC-4EFB-A403-7779D03C5547}_1.5_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{19009955-AF03-4CB5-9699-527F40FB71A1}_1.4_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{3E416161-98EE-11D4-AF74-00105A680865}_1.0_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{8847C5C1-E2C5-11D3-B882-0010A404098C}_1.1_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\TypeLibs\{52FFBAF3-B801-4468-8190-4A9DFB5CF28B}_1.0_0_win32]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Global]

[HKEY_LOCAL_MACHINE\Software\BackWeb\BackWeb-Client\Global\LiteInstaller]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Doc Find Spec MRU]
"j"="BackWeb"

[HKEY_USERS\.DEFAULT\Software\Netscape\Netscape Navigator\User Trusted External Applications]
"C:\\PROGRA~1\\BACKWEB\\BACKWE~1\\601~1.209\\PROGRAM\\REGISTER.EXE"="Yes"

[HKEY_USERS\.DEFAULT\Software\Netscape\Netscape Navigator\User Trusted External Applications]
"C:\\PROGRA~1\\BACKWEB\\BACKWE~1\\601~1.209\\PROGRAM\\PRVCNT.EXE"="Yes"

[HKEY_USERS\.DEFAULT\Software\Logitech\DesktopMessenger\Backup]
"LGT_BackWebConfig_Version"="0168387864"

#13
Savageone

Posted 06 November 2005 - 12:14 AM

Member

Topic Starter
Member
19 posts

The Kazaa instances are here:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7D50E972-F2C4-4327-AA79-88FA868A4507}]
"DisplayName"="KaZaA Media Desktop"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\D:\InstallShield\Kazaa]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\D:\InstallShield\Kazaa\kazaa.exe]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\D:\InstallShield\Kazaa\kazaa.exe]
"Path"="D:\\Program Files\\KaZaA"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\D:\InstallShield\Kazaa\kazaa.exe]
@="D:\\Program Files\\KaZaA\\D:\\InstallShield\\Kazaa\\kazaa.exe"

[HKEY_LOCAL_MACHINE\Software\KAZAA]

[HKEY_LOCAL_MACHINE\Software\KAZAA\ConnectionInfo]

[HKEY_LOCAL_MACHINE\Software\KAZAA\ConnectionInfo]
"KazaaNet"=hex:01,49,49,96,18,79,06,3c,00,f7,92,d3,3e,61,03,8d,18,17,12,2a,00,\

[HKEY_LOCAL_MACHINE\Software\KAZAA\LocalContent]

[HKEY_LOCAL_MACHINE\Software\KAZAA\LocalContent]
"DatabaseDir"="D:\\Program Files\\KaZaA\\Db"

[HKEY_LOCAL_MACHINE\Software\KAZAA\LocalContent]
"DownloadDir"="D:\\Program Files\\KaZaA\\My Shared Folder"

[HKEY_LOCAL_MACHINE\Software\KAZAA\Bandwidth]

[HKEY_LOCAL_MACHINE\Software\KAZAA\Bandwidth\out]

[HKEY_LOCAL_MACHINE\Software\KAZAA\Bandwidth\in]

[HKEY_LOCAL_MACHINE\Software\KAZAA\Bandwidth\LastEstimate]

[HKEY_LOCAL_MACHINE\Software\KAZAA\CloudLoad]

[HKEY_LOCAL_MACHINE\Software\KAZAA\CloudLoad]
"ExeDir"="D:\\Program Files\\KaZaA"

[HKEY_LOCAL_MACHINE\Software\KAZAA\CloudLoad]
"ShareDir"="D:\\Program Files\\KaZaA\\My Shared Folder"

[HKEY_LOCAL_MACHINE\Software\KAZAA\CDN]

[HKEY_LOCAL_MACHINE\Software\Sharman Networks Ltd\KaZaA Media Desktop]

[HKEY_LOCAL_MACHINE\Software\Sharman Networks Ltd\KaZaA Media Desktop\1.7.2]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Recent File List]
"File1"="C:\\WINDOWS\\Desktop\\BackWeb + Kazaa.txt"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\&Programs\KaZaA]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\&Programs\KaZaA Media Desktop]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Doc Find Spec MRU]
"g"="kazaa"

[HKEY_USERS\.DEFAULT\Software\Kazaa]

[HKEY_USERS\.DEFAULT\Software\Kazaa\UserDetails]

[HKEY_USERS\.DEFAULT\Software\Kazaa\Transfer]

[HKEY_USERS\.DEFAULT\Software\Kazaa\Transfer]
"DlDir1"="D:\\Program Files\\KaZaA\\My Shared Folder"

[HKEY_USERS\.DEFAULT\Software\Kazaa\Settings]

[HKEY_USERS\.DEFAULT\Software\Kazaa\ResultsFilter]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\Settings]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\ColumnOrder]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\ColumnWidths]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\CombinedSortedColumns]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\ColumnSortStates1]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\ColumnSortStates2]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\Everything]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\EverythingWidth]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\Download Order]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\Download Width]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\Upload Order]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\Upload Width]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\Audio]

[HKEY_USERS\.DEFAULT\Software\Kazaa\KaZaA Media Desktop\AudioWidth]

[HKEY_USERS\.DEFAULT\Software\Kazaa\LocalContent]

[HKEY_USERS\.DEFAULT\Software\Kazaa\LocalContent]
"DownloadDir"="D:\\Program Files\\KaZaA\\My Shared Folder"

[HKEY_USERS\.DEFAULT\Software\Kazaa\LocalContent]
"SignedContentDir"="D:\\Program Files\\KaZaA\\My Shared Folder"

[HKEY_USERS\.DEFAULT\Software\Kazaa\Advanced]

[HKEY_USERS\.DEFAULT\Software\Kazaa\SOCKS]

[HKEY_USERS\.DEFAULT\Software\Kazaa\InstantMessaging]

#14
Armodeluxe

Posted 06 November 2005 - 10:06 AM

Member 2k

Retired Staff
2,744 posts

As far as beckweb is concerned, there are just too many entries and your Kodak is also using another backweb application, it's hard to determine which entries belong to which one..

Let's go with an unorthodox solution, I think this may work..something is looking for this file with this path:

c:\Program Files\BackWeb\BackWeb Client\6.0.1.209L\Program\backWeb.dll

So let's give it one, even though it won't function..

Please recreate those folders:

Under Program Files, make a new folder and name it BackWeb..in the BackWeb folder make a new BackWeb Client folder, in it make a new folder called 6.0.1.209L, in which make a new folder called Program..

Now go into any one of the Program folders in your Program Files folder, find a file there with a .dll extention and copy/paste it into that last folder in the path..then rename it to backWeb.dll..I'm hoping this may work.. :tazz:

If it doesn't, just delete the c:\Program Files\BackWeb folder you created and everything will be deleted.

Now let's remove those Kazaa entries..

Open HiJackThis
Click on the "Config..." button on the bottom right
Click on the tab "Misc Tools"
Click on the Box that says "Uninstall Manager"
Click on the entry you wish to delete-Kazaa
Click on Delete this entry
Click "Yes"

Copy the text in the box to Notepad. In Notepad go to File>Save As. Name it Fixkaaza.reg, in the drop down box at the bottom choose "All Files" and save it on your desktop. Then double click on Fixkaaza.reg and allow it to merge with the registry.

REGEDIT4

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7D50E972-F2C4-4327-AA79-88FA868A4507}]

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\D:\InstallShield\Kazaa]

[-HKEY_LOCAL_MACHINE\Software\KAZAA]

[-HKEY_LOCAL_MACHINE\Software\Sharman Networks Ltd\KaZaA Media Desktop]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Recent File List]
"File1"=-

[-HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\&Programs\KaZaA]

[-HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\&Programs\KaZaA Media Desktop]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Doc Find Spec MRU]
"g"=-

[-HKEY_USERS\.DEFAULT\Software\Kazaa]

Then delete the folder if it's there:

D:\\Program Files\\KaZaA

Let's see how that backweb try goes..

#15
Savageone

Posted 08 November 2005 - 11:19 AM

Member

Topic Starter
Member
19 posts

Okay, the BackWeb try did not work...the new "runner error" message states that it now can't find the "go" in the .DLL file...

I've also now attempted to load zonealarm back on my system. I get two error messages:

1) "A required .DLL file, VSNETUTILS.DLL was not found"
2) Installer: "Setpu is unable to log into the TrueVector service...please use service manager to shut down the TrueVector service and then restart the installer program"

Any idea what that's about? :tazz: