Here are the two text files from the DSS scan
Deckard's System Scanner v20071014.68
Run by Brendon on 2008-03-12 19:54:05
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- Last 5 Restore Point(s) --
20: 2008-03-12 22:25:50 UTC - RP465 - Installed AVG 7.5
19: 2008-03-12 19:06:09 UTC - RP464 - Scheduled Checkpoint
18: 2008-03-11 18:23:21 UTC - RP463 - Scheduled Checkpoint
17: 2008-03-11 01:48:15 UTC - RP462 - Installed Ad-Aware 2007
16: 2008-03-10 18:34:02 UTC - RP461 - Scheduled Checkpoint
-- First Restore Point --
1: 2008-02-28 20:58:12 UTC - RP440 - Scheduled Checkpoint
Backed up registry hives.
Performed disk cleanup.
-- HijackThis (run as Brendon.exe) ---------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:58:47 PM, on 3/12/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal
Running processes:
C:\Program Files\Mindjet\MindManager 6\MmReminderService.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Windows\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Brendon\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Brendon.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.ca/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft....k/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft....k/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft....k/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {0EB1BCE6-3CB1-411A-9137-884E9EE807E2} - (no file)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5736D804-F3D3-447C-9872-19D5323B43D3} - (no file)
O2 - BHO: (no name) - {63CC6264-A786-4326-AFBB-DD770BFDC489} - (no file)
O2 - BHO: (no name) - {73628F49-D2B9-4C1A-9665-80E09E900245} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {7FF00139-3A85-45BB-8E0B-1190C6CA0714} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll
O2 - BHO: (no name) - {FADBF27D-04F4-4523-9AA2-E5CBAAC2BA06} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [MMReminderService] C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\Brendon\AppData\Local\Temp\geebb.dll,#1
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\Brendon\AppData\Local\Temp\ddcyv.dll,c
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [b438d6d7] rundll32.exe "C:\Users\Brendon\AppData\Local\Temp\ubqqjiqm.dll",b
O4 - HKCU\..\Run: [MS Juan] rundll32 "C:\Users\Brendon\AppData\Local\Temp\fjorderg.dll",run
O4 - HKCU\..\Run: [BMb70be54b] Rundll32.exe "C:\Users\Brendon\AppData\Local\Temp\pmyrojho.dll",s
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} -
http://www.explorert...et/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} -
http://www.explorert...et/redirect.php (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O12 - Plugin for .csm: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .csml: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .cub: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .cube: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .dx: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .emb: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .embl: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .gau: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .jdx: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .mol: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .mop: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .pdb: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .rxn: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .scr: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .skc: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .spt: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .tgf: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O12 - Plugin for .xyz: C:\Program Files\Internet Explorer\Plugins\npchime.dll
O13 - Gopher Prefix:
O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) -
http://www.systemreq...m/sysreqlab.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.m...ash/swflash.cabO20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O21 - SSODL: bxlrvps - {FA0874FF-FF1C-4C12-9ACD-9B90C02A2DD6} - C:\Windows\bxlrvps.dll (file missing)
O21 - SSODL: alofkmn - {844623CE-950F-45F0-9120-3ABD3A68E75D} - C:\Windows\alofkmn.dll
O21 - SSODL: CDWin - {5865f2df-805e-43d2-9955-565712608618} - C:\Windows\Installer\{5865f2df-805e-43d2-9955-565712608618}\CDWin.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
--
End of file - 10459 bytes
-- File Associations -----------------------------------------------------------
.scr - scrFile - shell\open\command - "C:\Program Files\Internet Explorer\Iexplore.exe" %1-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R2 NwlnkIpx (NWLink IPX/SPX/NetBIOS Compatible Transport Protocol) - c:\windows\system32\drivers\nwlnkipx.sys <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
-- Device Manager: Disabled ----------------------------------------------------
Class GUID: {4D36E97B-E325-11CE-BFC1-08002BE10318}
Description: SCSI/RAID Host Controller
Device ID: ACPI\PNPA000\4&5D18F2DF&0
Manufacturer: (Standard mass storage controllers)
Name: SCSI/RAID Host Controller
PNP Device ID: ACPI\PNPA000\4&5D18F2DF&0
Service: abjlzfrx
-- Scheduled Tasks -------------------------------------------------------------
2008-03-12 14:41:32 422 --ah----- C:\Windows\Tasks\User_Feed_Synchronization-{FEDC8916-0705-40ED-B2D5-8990D956FB98}.job
-- Files created between 2008-02-12 and 2008-03-12 -----------------------------
2008-03-12 18:27:46 0 dr-h----- C:\$VAULT$.AVG
2008-03-12 18:26:11 0 d-------- C:\Users\All Users\Grisoft
2008-03-12 18:26:11 0 d-------- C:\Users\All Users\avg7
2008-03-12 18:26:11 0 d-------- C:\Users\All Users\Application Data\Grisoft
2008-03-12 18:26:11 0 d-------- C:\Users\All Users\Application Data\avg7
2008-03-12 00:56:07 0 d-------- C:\Program Files\Trend Micro
2008-03-12 00:52:38 0 d-------- C:\Program Files\Medieval Masters
2008-03-10 21:48:50 0 d-------- C:\Program Files\Lavasoft
2008-03-10 21:48:49 0 d-------- C:\Users\All Users\Lavasoft
2008-03-10 21:48:49 0 d-------- C:\Users\All Users\Application Data\Lavasoft
2008-03-10 21:47:57 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-03-10 21:44:38 0 d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-03-10 21:44:38 0 d-------- C:\Users\All Users\Application Data\Spybot - Search & Destroy
2008-03-09 19:25:42 37376 --a------ C:\Windows\17PHolmes2000352.exe
2008-03-08 22:14:29 0 d-------- C:\Program Files\iTunes
2008-02-27 10:37:28 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller
2008-02-27 10:37:08 0 d-------- C:\Program Files\Windows Live
2008-02-27 10:36:24 0 d-------- C:\Users\All Users\WLInstaller
2008-02-27 10:36:24 0 d-------- C:\Users\All Users\Application Data\WLInstaller
2008-02-25 21:00:28 221184 --a------ C:\Windows\dgtxrdfrmw.dll
2008-02-25 21:00:28 180224 --a------ C:\Windows\alofkmn.dll <Not Verified; ; alofkmn>
2008-02-12 17:02:50 0 d-------- C:\Program Files\Dwarf Fortress
-- Find3M Report ---------------------------------------------------------------
2008-03-12 18:28:47 0 d-------- C:\Users\Brendon\AppData\Roaming\AVG7
2008-03-12 17:25:28 0 d-------- C:\Program Files\Steam
2008-03-11 20:42:14 0 d-------- C:\Program Files\Diablo II
2008-03-10 21:47:57 0 d-------- C:\Program Files\Common Files
2008-03-09 14:53:09 0 d-------- C:\Program Files\Warcraft III
2008-03-08 22:14:31 0 d-------- C:\Program Files\iPod
2008-03-08 22:13:14 0 d-------- C:\Program Files\QuickTime
2008-03-07 20:56:11 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-03-07 20:30:01 0 d-------- C:\Program Files\Bethesda Softworks
2008-03-07 18:31:01 76421 --a------ C:\Windows\War3Unin.dat
2008-02-25 16:43:55 0 d-------- C:\Program Files\Valve Hammer Editor
2008-02-23 12:21:06 0 d-------- C:\Program Files\Common Files\Steam
2008-02-21 11:06:57 0 d-------- C:\Users\Brendon\AppData\Roaming\Adobe
2008-02-17 00:30:40 0 d-------- C:\Users\Brendon\AppData\Roaming\DivX
2008-02-07 11:07:37 0 d---s---- C:\Program Files\Xfire
2008-02-07 00:36:08 0 d-------- C:\Users\Brendon\AppData\Roaming\Xfire
2008-01-22 17:25:29 0 d-------- C:\Program Files\Lumenaut
2008-01-15 23:15:19 0 d-------- C:\Program Files\GCFScape
2007-12-26 21:39:52 98304 --a------ C:\Windows\system32CmdLineExt.dll <Not Verified; Sony DADC Austria AG.; >
2007-12-25 11:43:53 669184 --a------ C:\Windows\system32\pbsvc.exe
2007-12-17 19:33:19 56032 --a------ C:\Users\Brendon\AppData\Roaming\GDIPFONTCACHEV1.DAT
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0EB1BCE6-3CB1-411A-9137-884E9EE807E2}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5736D804-F3D3-447C-9872-19D5323B43D3}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{63CC6264-A786-4326-AFBB-DD770BFDC489}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{73628F49-D2B9-4C1A-9665-80E09E900245}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7FF00139-3A85-45BB-8E0B-1190C6CA0714}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FADBF27D-04F4-4523-9AA2-E5CBAAC2BA06}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [04/12/2007 08:24 AM]
"MMReminderService"="C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe" [12/14/2006 01:16 AM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [09/25/2007 01:11 AM]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [11/06/2007 09:30 PM]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [11/06/2007 09:30 PM]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [11/06/2007 09:30 PM]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [02/01/2008 12:13 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [02/19/2008 02:10 PM]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [03/12/2008 06:26 PM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [01/10/2008 08:54 AM]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [10/18/2007 12:34 PM]
"Steam"="c:\program files\steam\steam.exe" [11/29/2007 11:20 PM]
"BitTorrent"="C:\Program Files\BitTorrent\bittorrent.exe" []
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" []
"MSServer"="C:\Users\Brendon\AppData\Local\Temp\geebb.dll,#1" []
"cmds"="C:\Users\Brendon\AppData\Local\Temp\ddcyv.dll,c" []
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [01/28/2008 11:43 AM]
"b438d6d7"="C:\Users\Brendon\AppData\Local\Temp\ubqqjiqm.dll,b" []
"MS Juan"="C:\Users\Brendon\AppData\Local\Temp\fjorderg.dll,run" []
"BMb70be54b"="C:\Users\Brendon\AppData\Local\Temp\pmyrojho.dll,s" []
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [3/10/2007 1:43:53 PM]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [4/1/2007 9:55:30 AM]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"=2 (0x2)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"bxlrvps"= {FA0874FF-FF1C-4C12-9ACD-9B90C02A2DD6} - C:\Windows\bxlrvps.dll [ ]
"alofkmn"= {844623CE-950F-45F0-9120-3ABD3A68E75D} - C:\Windows\alofkmn.dll [02/25/2008 06:56 PM 180224]
"CDWin"= {5865f2df-805e-43d2-9955-565712608618} - C:\Windows\Installer\{5865f2df-805e-43d2-9955-565712608618}\CDWin.dll [02/25/2008 09:01 PM 17958]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgwlntf]
avgwlntf.dll 03/12/2008 06:26 PM 9216 C:\Windows\System32\avgwlntf.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b9272f09-4d27-11dc-b602-0016e68235c8}]
AutoRun\command- E:\SETUP.EXE
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b9272f1c-4d27-11dc-b602-0016e68235c8}]
AutoRun\command- F:\SETUP.EXE
*Newly Created Service* - AVGCLEAN
*Newly Created Service* - AVGMFX86
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
C:\Windows\system32\unregmp2.exe /ShowWMP
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
-- End of Deckard's System Scanner: finished at 2008-03-12 20:00:40 ------------
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft® Windows Vista™ Home Premium (build 6000)
Architecture: X86; Language: English
CPU 0: Intel® Core2 CPU 6600 @ 2.40GHz
Percentage of Memory in Use: 30%
Physical Memory (total/avail): 3582.75 MiB / 2483.76 MiB
Pagefile Memory (total/avail): 7335.94 MiB / 6332.91 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1923.52 MiB
C: is Fixed (NTFS) - 232.88 GiB total, 61.12 GiB free.
D: is CDROM (No Media)
J: is Removable (FAT32)
\\.\PHYSICALDRIVE0 - ST3250824A ATA Device - 232.88 GiB - 1 partition
\PARTITION0 (bootable) - Installable File System - 232.88 GiB - C:
\\.\PHYSICALDRIVE1 - Apple iPod USB Device - 3.81 GiB - 1 partition
\PARTITION0 - Unknown - 3.73 GiB - J:
-- Security Center -------------------------------------------------------------
AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.
AV: AVG 7.5.503 v7.5.503 (Grisoft)
OutdatedAS: Spybot - Search and Destroy v1.0.0.5 (Safer Networking Ltd.)
AS: Windows Defender v1.1.1505.0 (Microsoft Corporation)
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\Brendon\AppData\Roaming
CLASSPATH=.;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=BRENDONCOMPUTER
ComSpec=C:\Windows\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\Brendon
LOCALAPPDATA=C:\Users\Brendon\AppData\Local
LOGONSERVER=\\BRENDONCOMPUTER
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 15 Stepping 6, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0f06
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
PROMPT=$P$G
PUBLIC=C:\Users\Public
QTJAVA=C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
sourcesdk=c:\program files\steam\steamapps\oddnerd\sourcesdk
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\Brendon\AppData\Local\Temp
TMP=C:\Users\Brendon\AppData\Local\Temp
USERDOMAIN=BrendonComputer
USERNAME=Brendon
USERPROFILE=C:\Users\Brendon
windir=C:\Windows
-- User Profiles ---------------------------------------------------------------
Brendon
Guest
(guest)-- Add/Remove Programs ---------------------------------------------------------
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
Ad-Aware 2007 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Acrobat 4.0 --> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Common Files\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Common Files\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe Flash Player 9 ActiveX --> C:\Windows\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
Adobe Flash Player ActiveX --> C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin --> C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Photoshop 7.0 --> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
Age of Empires III --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}
Age of Empires III - The WarChiefs --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{1C08A24C-B168-407E-A826-68FAF5F20710}
Age of Mythology --> "C:\Program Files\Microsoft Games\Age of Mythology\UNINSTAL.EXE" /runtemp /addremove
Age of Mythology - The Titans Expansion --> "C:\Program Files\Microsoft Games\Age of Mythology\UNINSTXP.EXE" /runtemp /addremove
Apple Mobile Device Support --> MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
Audacity 1.2.6 --> "C:\Program Files\Audacity\unins000.exe"
Audacity 1.3.3 (Unicode) --> "C:\Program Files\Audacity 1.3 Beta (Unicode)\unins000.exe"
AVG 7.5 --> C:\Program Files\Grisoft\AVG7\setup.exe /UNINSTALL
Barbarian Invasion --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FD69C8CB-6964-432C-98AB-A5A09ED50EEA}\setup.exe" -l0x9
Battlefield 2 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x9 -removeonly
BitComet 0.90 --> C:\Program Files\BitComet\uninst.exe
Call of Duty® 2 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374} /l1033
Call of Duty® 4 - Modern Warfare --> C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0409
Command & Conquer 3 --> MsiExec.exe /I{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}
Command & Conquer The First Decade --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{66D6F3BD-CA23-41A4-9FA3-96B26B32528C}\setup.exe" -l0x9 -removeonly
Compatibility Pack for the 2007 Office system --> MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
Crysis® --> MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
Dawn of War - Dark Crusade --> C:\Program Files\InstallShield Installation Information\{FF39FC01-819B-42E4-AE49-1968AF12DDD4}\setup.exe -runfromtemp -l0x0009 -removeonly
Dawn Of War - Winter Assault --> MsiExec.exe /X{DD8408E9-9421-484F-979D-DB6361E3E828}
DawnOfWar --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{362D5167-9716-44BE-89FD-BF9EB6EF814B}
Diablo --> C:\Windows\DiabUnin.exe C:\Windows\DiabUnin.dat
Diablo --> C:\Windows\DiabUnin.exe C:\Windows\DiabUnin.dat
Diablo II --> C:\Windows\DIIUnin.exe C:\Windows\DIIUnin.dat
DivX Codec --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Converter --> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Far Cry --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}
FEAR --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2B653229-9854-4989-B780-D978F5F13EAB}\setup.exe" -l0x9 /zU -removeonly
FEAR Extraction Point --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{909BBDB7-BABE-434C-9124-863A9F8D1CF8}\setup.exe" -l0x9 -removeonly
GCFScape 1.6.6 --> "C:\Program Files\GCFScape\unins000.exe"
Google Earth --> MsiExec.exe /I{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}
Half-Life 2 --> "C:\Program Files\Steam\steam.exe" steam://uninstall/220
Half-Life 2: Episode One --> "C:\Program Files\Steam\steam.exe" steam://uninstall/380
Half-Life 2: Episode Two --> "C:\Program Files\Steam\steam.exe" steam://uninstall/420
Half-Life 2: Lost Coast --> "C:\Program Files\Steam\steam.exe" steam://uninstall/340
HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Internet Service --> "C:\Program Files\NetProject\scu.exe"
iPod for Windows 2005-09-23 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC} /l1033
iTunes --> MsiExec.exe /I{80FD852F-5AAC-4129-B931-06AAFFA43138}
Java 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java SE Runtime Environment 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
Java SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
K-Lite Codec Pack 3.6.5 Basic --> "C:\Program Files\K-Lite Codec Pack\unins000.exe"
LimeWire 4.14.12 --> "C:\Program Files\LimeWire\uninstall.exe"
Lords of the Realm II --> C:\Windows\IsUninst.exe -fC:\SIERRA\Lords2\Uninst.isu
Lost Planet: Extreme Conditions Demo --> "C:\Program Files\Steam\steam.exe" steam://uninstall/6530
Lumenaut --> MsiExec.exe /X{9CCF7884-A81B-4FBA-8070-01B1A1D4AB9F}
Macromedia Breeze Presenter 5 --> MsiExec.exe /X{1C37DA50-F353-4810-9224-ECC1A84D05FB}
MDL Chime/Chime Pro for Internet Explorer --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{46761278-BF32-4008-833B-93487FF0A06E}\setup.exe" -l0x9 -uninst -removeonly
Medieval - Total War - Viking Invasion --> C:\PROGRA~1\TOTALW~1\MEDIEV~1\Uninstall\Unwise.exe /u C:\PROGRA~1\TOTALW~1\MEDIEV~1\Uninstall\Install.log
Medieval II Total War --> C:\Program Files\InstallShield Installation Information\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}\setup.exe -runfromtemp -l0x0009 -removeonly
Medieval II Total War : Kingdoms : Americas --> C:\Program Files\InstallShield Installation Information\{75983B66-804C-40D1-BA13-64DAF652A6F1}\setup.exe -runfromtemp -l0x0009 -removeonly
Medieval II Total War : Kingdoms : Britannia --> C:\Program Files\InstallShield Installation Information\{CEDDEE73-3D36-41C2-AA40-29355D9FBD63}\setup.exe -runfromtemp -l0x0009 -removeonly
Medieval II Total War : Kingdoms : Crusades --> C:\Program Files\InstallShield Installation Information\{02A10468-2F1C-447C-AD8E-4DEDDEA25AE2}\setup.exe -runfromtemp -l0x0009 -removeonly
Medieval II Total War : Kingdoms : Teutonic --> C:\Program Files\InstallShield Installation Information\{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}\setup.exe -runfromtemp -l0x0009 -removeonly
Microsoft .NET Framework 1.1 --> msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1 --> MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1 Hotfix (KB929729) --> "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp"
Microsoft Office XP Professional with FrontPage --> MsiExec.exe /I{90280409-6000-11D3-8CFE-0050048383C9}
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual J# .NET Redistributable Package 1.1 --> MsiExec.exe /X{1A655D51-1423-48A3-B748-8F5A0BE294C8}
Mindjet MindManager Pro 6 --> MsiExec.exe /I{0D2E2AC2-D91C-40E7-9D10-78C14DDB01A7}
MINERVA: Metastasis --> C:\PROGRA~1\Steam\STEAMA~1\SOURCE~1\METAST~1\UNWISE.EXE C:\PROGRA~1\Steam\STEAMA~1\SOURCE~1\METAST~1\metastasis.log
Mozilla Firefox (2.0.0.12) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978) --> MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181) --> MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833) --> MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML4 Parser --> MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
NVIDIA Drivers --> C:\Windows\system32\NVUNINST.EXE UninstallGUI
Oblivion --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x9 -removeonly
Oblivion - Construction Set --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23D683DD-93C6-48E6-B84E-78B57778F126}\setup.exe" -l0x9 -removeonly
Oblivion - Horse Armor Pack --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3ABEBD00-299D-4DCA-967F-B912163AB5EA}\setup.exe" -l0x9 -removeonly
Oblivion - Knights of the Nine --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{14C87AA7-08E6-419F-A165-998EBE5023D7}\setup.exe" -l0x9 -removeonly
Oblivion - Mehrunes Razor --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EF295F5C-7B57-47AA-8889-6B3E8E214E89}\setup.exe" -l0x9 -removeonly
Oblivion - Orrery --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EC425CFC-EE78-4A91-AA25-3BFA65B75364}\setup.exe" -l0x9 -removeonly
Oblivion - Spell Tomes --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{16D919E6-F019-4E15-BFBE-4A85EF19DA57}\setup.exe" -l0x9 -removeonly
Oblivion - Thieves Den --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FFFFFD17-B460-41EB-93F1-C48ABAD63828}\setup.exe" -l0x9 -removeonly
Oblivion - Vile Lair --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{520F4B09-3A51-47A2-82B0-9FF1DC2D20FA}\setup.exe" -l0x9 -removeonly
Oblivion - Wizard's Tower --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2F2E3D62-8B8C-448F-8900-451325E50948}\setup.exe" -l0x9 -removeonly
PDF-XChange 3 --> "C:\Program Files\Tracker Software\PDF-XChange 3\unins000.exe"
Peggle Extreme --> "C:\Program Files\Steam\steam.exe" steam://uninstall/3483
Portal --> "C:\Program Files\Steam\steam.exe" steam://uninstall/400
PunkBuster Services --> C:\Windows\system32\pbsvc.exe -u
QuickTime --> MsiExec.exe /I{BFD96B89-B769-4CD6-B11E-E79FFD46F067}
Real Alternative 1.52 Lite --> "C:\Program Files\Real Alternative\unins000.exe"
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Revenant --> C:\Windows\IsUninst.exe -f"C:\Program Files\Eidos Interactive\Revenant\Uninst.isu"
Rome - Total War --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{51D386C4-0227-46A9-AC45-61F0A50E7AFF}\setup.exe" -l0x9 -removeonly
Rome Total War - patch 1.3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A5D65411-8E73-4C85-AD80-9FE8B7391CF9}\Setup.exe" -l0x9
Secure Browsing --> "C:\Program Files\NetProject\sbun.exe"
Sierra Utilities --> C:\Program Files\Sierra On-Line\sutil32.exe uninstall
SimCity 2000® Special Edition --> C:\Windows\uninst.exe -f"C:\Program Files\Maxis\SimCity 2000\DeIsL1.isu"
Spybot - Search & Destroy --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Stainless Steel --> C:\Program Files\SEGA\Medieval II Total War\Uninstal.exe
Stainless Steel 3.2 Patch Final --> C:\Program Files\SEGA\Medieval II Total War\Uninstal.exe
Starcraft --> C:\Windows\scunin.exe C:\Windows\scunin.dat
Steam --> C:\PROGRA~1\Steam\UNWISE.EXE C:\PROGRA~1\Steam\INSTALL.LOG
System Requirements Lab --> C:\Program Files\SystemRequirementsLab\Uninstall.exe
Team Fortress 2 --> "C:\Program Files\Steam\steam.exe" steam://uninstall/440
Thief:The Dark Project --> C:\Windows\IsUninst.exe -fC:\Thief\thiefalphaIIu.log
Unreal Tournament --> C:\Program Files\UnrealTournament\System\Setup.exe uninstall "UnrealTournament"
Valve Hammer Editor --> C:\PROGRA~1\VALVEH~1\UNWISE.EXE C:\PROGRA~1\VALVEH~1\INSTALL.LOG
Warcraft II BNE --> C:\Windows\W2BNEUnin.exe C:\Windows\W2BNEUnin.dat
Warcraft III --> C:\Windows\War3Unin.exe C:\Windows\War3Unin.dat
Warcraft III: All Products --> C:\Windows\War3Unin.exe C:\Windows\War3Unin.dat
Warhammer Mark of Chaos --> C:\Program Files\InstallShield Installation Information\{5F374D5D-DB43-4263-9C29-BAB2C93FEFE6}\Setup.exe -runfromtemp -l0x0009 -removeonly
Web Application --> "C:\Program Files\NetProject\waun.exe"
Windows Live installer --> MsiExec.exe /X{A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320}
Windows Live Mail --> MsiExec.exe /I{184E7118-0295-43C4-B72C-1D54AA75AAF7}
Windows Live Messenger --> MsiExec.exe /X{508CE775-4BA4-4748-82DF-FE28DA9F03B0}
Windows Live Sign-in Assistant --> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
Windows Media Player Firefox Plugin --> MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
Worms World Party --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A200E68-D5F4-4E70-910F-2871753A0E2B}\setup.exe"
Xfire (remove only) --> "C:\Program Files\Xfire\uninst.exe"
-- Application Event Log -------------------------------------------------------
Event Record #/Type33903 / Error
Event Submitted/Written: 03/12/2008 06:27:53 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application rundll32.exe, version 6.0.6000.16386, time stamp 0x4549b0e1, faulting module ubqqjiqm.dll, version 0.0.0.0, time stamp 0x8e3ca2d3, exception code 0xc0000005, fault offset 0x0000f710,
process id 0x2d4, application start time 0xrundll32.exe0.
Event Record #/Type33902 / Error
Event Submitted/Written: 03/12/2008 06:27:53 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application MSASCui.exe, version 1.1.1505.0, time stamp 0x45ad82d9, faulting module ubqqjiqm.dll, version 0.0.0.0, time stamp 0x8e3ca2d3, exception code 0xc0000005, fault offset 0x0000f710,
process id 0x990, application start time 0xMSASCui.exe0.
Event Record #/Type33901 / Error
Event Submitted/Written: 03/12/2008 06:27:53 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application taskeng.exe, version 6.0.6000.16386, time stamp 0x4549af28, faulting module ubqqjiqm.dll, version 0.0.0.0, time stamp 0x8e3ca2d3, exception code 0xc0000005, fault offset 0x0000f710,
process id 0x63c, application start time 0xtaskeng.exe0.
Event Record #/Type33900 / Error
Event Submitted/Written: 03/12/2008 06:27:53 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application rundll32.exe, version 6.0.6000.16386, time stamp 0x4549b0e1, faulting module ubqqjiqm.dll, version 0.0.0.0, time stamp 0x8e3ca2d3, exception code 0xc0000005, fault offset 0x0000f710,
process id 0x3cc, application start time 0xrundll32.exe0.
Event Record #/Type33899 / Error
Event Submitted/Written: 03/12/2008 06:27:53 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application rundll32.exe, version 6.0.6000.16386, time stamp 0x4549b0e1, faulting module ubqqjiqm.dll, version 0.0.0.0, time stamp 0x8e3ca2d3, exception code 0xc0000005, fault offset 0x0000f710,
process id 0xa40, application start time 0xrundll32.exe0.
-- Security Event Log ----------------------------------------------------------
No Errors/Warnings found.
-- System Event Log ------------------------------------------------------------
Event Record #/Type95410 / Warning
Event Submitted/Written: 03/12/2008 07:58:59 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%BrendonComputer27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %BrendonComputer27 can't undo changes that you allow.
For more information please see the following:
%BrendonComputer275
Scan ID: {A451C148-89C2-44FD-8E1C-2C1E4057176F}
User: BrendonComputer\Brendon
Name: %BrendonComputer271
ID: %BrendonComputer272
Severity ID: %BrendonComputer273
Category ID: %BrendonComputer274
Path Found: %BrendonComputer276
Alert Type: %BrendonComputer278
Detection Type: 1.1.1505.02
Event Record #/Type95409 / Warning
Event Submitted/Written: 03/12/2008 07:58:59 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%BrendonComputer27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %BrendonComputer27 can't undo changes that you allow.
For more information please see the following:
%BrendonComputer275
Scan ID: {645FCD5A-0A72-4013-A09C-402F2F78FE4B}
User: BrendonComputer\Brendon
Name: %BrendonComputer271
ID: %BrendonComputer272
Severity ID: %BrendonComputer273
Category ID: %BrendonComputer274
Path Found: %BrendonComputer276
Alert Type: %BrendonComputer278
Detection Type: 1.1.1505.02
Event Record #/Type95408 / Warning
Event Submitted/Written: 03/12/2008 07:58:59 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%BrendonComputer27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %BrendonComputer27 can't undo changes that you allow.
For more information please see the following:
%BrendonComputer275
Scan ID: {3466BDA5-33D8-47F1-94E3-9BD4E5865763}
User: BrendonComputer\Brendon
Name: %BrendonComputer271
ID: %BrendonComputer272
Severity ID: %BrendonComputer273
Category ID: %BrendonComputer274
Path Found: %BrendonComputer276
Alert Type: %BrendonComputer278
Detection Type: 1.1.1505.02
Event Record #/Type95407 / Warning
Event Submitted/Written: 03/12/2008 07:58:56 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%BrendonComputer27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %BrendonComputer27 can't undo changes that you allow.
For more information please see the following:
%BrendonComputer275
Scan ID: {E177C5C9-5E7C-44DB-AE71-58DCC6EC4A96}
User: BrendonComputer\Brendon
Name: %BrendonComputer271
ID: %BrendonComputer272
Severity ID: %BrendonComputer273
Category ID: %BrendonComputer274
Path Found: %BrendonComputer276
Alert Type: %BrendonComputer278
Detection Type: 1.1.1505.02
Event Record #/Type95406 / Warning
Event Submitted/Written: 03/12/2008 07:58:56 PM
Event ID/Source: 3004 / WinDefend
Event Description:
%BrendonComputer27 Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. %BrendonComputer27 can't undo changes that you allow.
For more information please see the following:
%BrendonComputer275
Scan ID: {B0DFBD44-8FB4-4842-8DE6-682F83881D05}
User: BrendonComputer\Brendon
Name: %BrendonComputer271
ID: %BrendonComputer272
Severity ID: %BrendonComputer273
Category ID: %BrendonComputer274
Path Found: %BrendonComputer276
Alert Type: %BrendonComputer278
Detection Type: 1.1.1505.02
-- End of Deckard's System Scanner: finished at 2008-03-12 20:00:40 ------------