Downloaded and installed ANTIVIR. The following was scanned by ViriusTotal as requested. Jotti was busy.
Antivirus Version Last Update Result
AhnLab-V3 2008.6.27.1 2008.06.29 -
AntiVir 7.8.0.59 2008.06.29 SPR/Fake.AdWareAler
Authentium 5.1.0.4 2008.06.29 -
Avast 4.8.1195.0 2008.06.28 -
AVG 7.5.0.516 2008.06.29 -
BitDefender 7.2 2008.06.29 -
CAT-QuickHeal 9.50 2008.06.28 -
ClamAV 0.93.1 2008.06.29 Adware.Errorsmart-1
DrWeb 4.44.0.09170 2008.06.29 -
eSafe 7.0.17.0 2008.06.29 -
eTrust-Vet 31.6.5911 2008.06.27 -
Ewido 4.0 2008.06.27 -
F-Prot 4.4.4.56 2008.06.29 -
F-Secure 7.60.13501.0 2008.06.26 -
Fortinet 3.14.0.0 2008.06.29 Misc/SpywareStop
GData 2.0.7306.1023 2008.06.29 -
Ikarus T3.1.1.26.0 2008.06.29 -
Kaspersky 7.0.0.125 2008.06.29 -
McAfee 5327 2008.06.27 -
Microsoft 1.3704 2008.06.29 -
NOD32v2 3225 2008.06.29 -
Norman 5.80.02 2008.06.27 -
Panda 9.0.0.4 2008.06.29 -
Prevx1 V2 2008.06.29 -
Rising 20.50.62.00 2008.06.29 -
Sophos 4.30.0 2008.06.29 C-NMedia
Sunbelt 3.0.1176.1 2008.06.26 -
Symantec 10 2008.06.29 -
TheHacker 6.2.96.364 2008.06.28 -
TrendMicro 8.700.0.1004 2008.06.27 -
VBA32 3.12.6.8 2008.06.29 -
VirusBuster 4.5.11.0 2008.06.23 -
Webwasher-Gateway 6.6.2 2008.06.29 Riskware.Fake.AdWareAler
Additional information
File size: 19150072 bytes
MD5...: 01b6869d7915d7a23f9f4f7bad059733
SHA1..: ba51f05e61e308139488df2e2db0f1598a9195d2
SHA256: fa8001aec3a10176dc16daa7ae437c3388d75ffd7cc48a9ee91d79a2ca965d51
SHA512: 5b975cd384e818cdb3955b9660ab476d5b70ac1e84cda45c85d782faea3ef72d
ab71f858ec16d265cfd3c4276cda2906b6d7530f6a535c05d5c9d40488b13c2b
PEiD..: -
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x4901d9
timedatestamp.....: 0x483336fa (Tue May 20 20:39:22 2008)
machinetype.......: 0x14c (I386)
( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xb70bf 0xb8000 6.59 0b17da41dd774501d667718e2511bcc5
.rdata 0xb9000 0x28d4a 0x29000 5.07 ee1a0c7aeabe7fad883f31447b6262be
.data 0xe2000 0x8768 0x5000 4.51 26ec2abe9ce9e18954b6901c4ea6f3f8
.rsrc 0xeb000 0x115a11c 0x115b000 3.37 a105ee396af759e74b09e34858fc88d6
( 15 imports )
> TCL.dll: Tcl_CreateInterp, Tcl_CloneInterp, Tcl_DeleteClone, Tcl_GetStringResult, Tcl_EvalEx, Tcl_ResetResult, Tcl_DeleteInterp, Tcl_CreateCommand, Tcl_ProcCmd, Tcl_SplitList, Tcl_FreeList, Tcl_SetResult
> KERNEL32.dll: lstrcmpA, GetLocaleInfoA, EnumResourceLanguagesA, ConvertDefaultLocale, GetCurrentThreadId, GetCurrentThread, GlobalDeleteAtom, GetModuleFileNameW, SetThreadPriority, SuspendThread, GlobalAddAtomA, GetCurrentProcessId, lstrcmpW, GlobalFindAtomA, GlobalGetAtomNameA, GetThreadLocale, SetFilePointer, LockFile, UnlockFile, SetEndOfFile, DuplicateHandle, GetVolumeInformationA, GetFullPathNameA, LocalAlloc, GetPrivateProfileIntA, GetPrivateProfileStringA, InterlockedIncrement, GlobalReAlloc, GlobalHandle, LocalReAlloc, GetCurrentDirectoryA, GlobalFlags, GetCPInfo, GetOEMCP, SetErrorMode, GetTickCount, UnhandledExceptionFilter, HeapCompact, IsDebuggerPresent, RtlUnwind, HeapReAlloc, VirtualProtect, VirtualAlloc, VirtualQuery, GetCommandLineA, GetStartupInfoA, ExitThread, SetStdHandle, GetFileType, GetSystemTimeAsFileTime, GetTimeFormatA, GetDateFormatA, SetEnvironmentVariableA, ExitProcess, RaiseException, HeapSize, GetACP, IsValidCodePage, VirtualFree, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, QueryPerformanceCounter, GetTimeZoneInformation, GetConsoleCP, GetConsoleMode, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetDriveTypeA, GetLocaleInfoW, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateNamedPipeA, ReadFile, CreateProcessA, SearchPathA, GetLogicalDriveStringsA, lstrcatA, DisconnectNamedPipe, FlushFileBuffers, WriteFile, HeapCreate, HeapDestroy, ConnectNamedPipe, SetCurrentDirectoryA, GetFileSize, InterlockedDecrement, TerminateThread, WinExec, CreateFileA, GetSystemTime, SystemTimeToFileTime, lstrcpynA, FileTimeToLocalFileTime, GetSystemDirectoryA, FindFirstFileA, FindNextFileA, FindClose, TlsGetValue, TlsSetValue, TlsFree, TlsAlloc, GetTempPathA, WritePrivateProfileStringA, HeapFree, GetProcessHeap, HeapAlloc, FreeLibrary, LoadLibraryA, GetCurrentProcess, GetVersionExA, GetSystemInfo, LocalFree, FormatMessageA, FileTimeToSystemTime, GetFileTime, ExpandEnvironmentStringsA, CreateThread, MoveFileA, SetLastError, DeleteFileA, TerminateProcess, GetFileAttributesA, SetConsoleScreenBufferSize, LeaveCriticalSection, GetStdHandle, EnterCriticalSection, GetConsoleScreenBufferInfo, AllocConsole, DeleteCriticalSection, FreeConsole, CreateDirectoryA, GetLocalTime, Sleep, InitializeCriticalSection, GetModuleFileNameA, lstrcpyA, GlobalUnlock, ResetEvent, GlobalLock, SetEvent, WaitForSingleObject, CloseHandle, GetWindowsDirectoryA, CreateEventA, GlobalAlloc, ResumeThread, GlobalFree, MulDiv, GetModuleHandleA, GetProcAddress, FreeResource, GetEnvironmentVariableA, lstrlenA, CompareStringW, CompareStringA, GetVersion, GetLastError, MultiByteToWideChar, InterlockedExchange, WideCharToMultiByte, FindResourceA, LoadResource, LockResource, SizeofResource, SetUnhandledExceptionFilter
> USER32.dll: GetNextDlgGroupItem, RegisterClipboardFormatA, PostThreadMessageA, InvalidateRgn, IsRectEmpty, CopyAcceleratorTableA, SetCapture, MessageBeep, CharNextA, SetWindowContextHelpId, MapDialogRect, DestroyMenu, InflateRect, RegisterWindowMessageA, WinHelpA, IsChild, GetClassLongA, GetClassNameA, RemovePropA, GetForegroundWindow, GetTopWindow, GetMessageTime, GetMessagePos, MapWindowPoints, TrackPopupMenu, UpdateWindow, GetMenu, GetClassInfoExA, GetClassInfoA, AdjustWindowRectEx, GetScrollInfo, CallWindowProcA, OffsetRect, IntersectRect, GetWindowPlacement, SetActiveWindow, CreateDialogIndirectParamA, DestroyWindow, GetNextDlgTabItem, EndDialog, GetWindowThreadProcessId, GetLastActivePopup, SetWindowsHookExA, CallNextHookEx, GetMessageA, GetActiveWindow, IsWindowVisible, ValidateRect, SetMenuItemBitmaps, GetMenuCheckMarkDimensions, EnableMenuItem, CheckMenuItem, GrayStringA, DrawTextExA, TabbedTextOutA, UnhookWindowsHookEx, GetKeyState, GetFocus, SetFocus, IsWindowEnabled, ShowWindow, MoveWindow, SetWindowTextA, IsDialogMessageA, SendDlgItemMessageA, GetDlgItem, GetWindow, PostQuitMessage, GetMenuState, GetMenuItemID, GetMenuItemCount, PeekMessageA, LoadBitmapA, RedrawWindow, CopyIcon, GetCaretPos, SetTimer, DispatchMessageA, TranslateMessage, GetSysColorBrush, SystemParametersInfoA, SetWindowPos, GetWindowDC, ScreenToClient, ModifyMenuA, EqualRect, IsWindow, DeleteMenu, PtInRect, LoadIconA, HideCaret, SendMessageA, CharUpperA, RegisterClassA, EnableWindow, GetWindowRect, CopyRect, PostMessageA, SetRect, GetCursorPos, LoadMenuA, SetForegroundWindow, GetWindowLongA, GetSubMenu, SetWindowLongA, SetWindowRgn, GetClientRect, InvalidateRect, GetDC, ReleaseDC, GetParent, LoadImageA, KillTimer, GetSysColor, SetCursor, SetClassLongA, LoadCursorA, FillRect, DestroyCursor, DrawEdge, DrawFocusRect, ClientToScreen, ReleaseCapture, GetCapture, WindowFromPoint, IsIconic, DrawIcon, FindWindowA, GetDesktopWindow, ExitWindowsEx, MessageBoxA, TrackMouseEvent, GetSystemMetrics, SetPropA, GetDlgCtrlID, DefWindowProcA, GetPropA, UnregisterClassA, RegisterClassExA, DrawTextA, GetWindowTextA, GetWindowTextLengthA, SendMessageCallbackA, CreateWindowExA, EndPaint, BeginPaint
> GDI32.dll: ExtSelectClipRgn, CreatePen, CreateRectRgnIndirect, GetMapMode, DPtoLP, GetBkColor, GetTextColor, GetRgnBox, CreateCompatibleDC, CombineRgn, CreateBitmap, GetTextExtentPoint32A, GetObjectA, ArcTo, GetCurrentPositionEx, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, Escape, TextOutA, RectVisible, PtVisible, GetWindowExtEx, GetViewportExtEx, MoveToEx, LineTo, GetClipBox, SetMapMode, RestoreDC, SaveDC, GetDIBits, CreateFontA, SetTextColor, SetBkColor, SetBkMode, CreateFontIndirectA, SelectClipRgn, ExtTextOutA, GetTextMetricsA, DeleteDC, SelectObject, GetDeviceCaps, Rectangle, ExtCreateRegion, CreateRectRgn, CreateSolidBrush, GetPixel, DeleteObject, GetStockObject, CreatePatternBrush, CreateCompatibleBitmap, BitBlt, GetCurrentObject, StretchBlt
> COMDLG32.dll: GetFileTitleA
> WINSPOOL.DRV: OpenPrinterA, DocumentPropertiesA, ClosePrinter
> COMCTL32.dll: -, _TrackMouseEvent
> SHLWAPI.dll: PathFileExistsA, UrlUnescapeA, PathIsUNCA, PathStripToRootA, PathFindFileNameA, PathFindExtensionA, SHDeleteKeyA, PathIsDirectoryA
> oledlg.dll: -
> ole32.dll: CLSIDFromProgID, CLSIDFromString, CoCreateInstance, CoGetClassObject, StgOpenStorageOnILockBytes, StgCreateDocfileOnILockBytes, CreateILockBytesOnHGlobal, OleUninitialize, CoFreeUnusedLibraries, OleInitialize, CoRevokeClassObject, OleIsCurrentClipboard, OleFlushClipboard, CoRegisterMessageFilter, CoTaskMemAlloc, CoTaskMemFree, CoInitializeEx, CoUninitialize, CreateStreamOnHGlobal
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -
> WININET.dll: InternetGetLastResponseInfoA, HttpOpenRequestA, InternetOpenUrlA, InternetConnectA, HttpSendRequestA, InternetReadFile, InternetWriteFile, InternetSetFilePointer, InternetSetStatusCallback, InternetOpenA, InternetCrackUrlA, InternetCanonicalizeUrlA, InternetQueryOptionA, InternetSetOptionExA, InternetQueryDataAvailable, HttpQueryInfoA, InternetCloseHandle
> VERSION.dll: VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeA
> zlib.dll: inflate, inflateInit2_, inflateEnd
> MSIMG32.dll: GradientFill
OK - downloaded & ran Deckard's dss.exe as advised. See main.txt & extra.txt results below >>
MAIN.TXT FILE
Deckard's System Scanner v20071014.68
Run by user on 2008-07-03 08:22:25
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Successfully created a Deckard's System Scanner Restore Point.
-- Last 5 Restore Point(s) --
55: 2008-07-03 15:22:37 UTC - RP605 - Deckard's System Scanner Restore Point
54: 2008-07-01 22:11:42 UTC - RP604 - System Checkpoint
53: 2008-06-30 19:32:44 UTC - RP603 - Removed MalwareRemovalBot
52: 2008-06-29 19:20:08 UTC - RP602 - Avira AntiVir Personal - 6/29/2008 12:19
51: 2008-06-27 14:47:55 UTC - RP601 - Move file to quarantine: Quick Launch Buttons
-- First Restore Point --
1: 2008-04-05 15:35:17 UTC - RP551 - System Checkpoint
Backed up registry hives.
Performed disk cleanup.
Percentage of Memory in Use: 76% (more than 75%).
Total Physical Memory: 511 MiB (512 MiB recommended).
-- HijackThis (run as user.exe) ------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:24:13 AM, on 7/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Ulead Systems\Ulead PhotoImpact 6\ABMTSR.EXE
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\QUICKENW\QWDLLS.EXE
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\user\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\user.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q405&bd=pavilion&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q405&bd=pavilion&pf=laptop
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON Stylus CX8400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICEA.EXE /FU "C:\WINDOWS\TEMP\E_S350.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [cdloader] "C:\Documents and Settings\user\Application Data\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKCU\..\Run: [MalwareRemovalBot] C:\Program Files\MalwareRemovalBot\MalwareRemovalBot.exe -boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Startup: VZAccess Manager.lnk = C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Album Fast Start.lnk = C:\Program Files\Ulead Systems\Ulead PhotoImpact 6\ABMTSR.EXE
O4 - Global Startup: Billminder.lnk = C:\Program Files\QUICKENW\BILLMIND.EXE
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\QUICKENW\QWDLLS.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q405&bd=pavilion&pf=laptop
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3A87A24C-6F1D-46F8-A1DF-997C7B5DBA4B}: NameServer = 66.174.92.14 69.78.96.14
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
--
End of file - 9666 bytes
-- File Associations -----------------------------------------------------------
.reg - regfile - shell\open\command - regedit.exe "%1" %*
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R3 Afc (PPdus ASPI Shell) - c:\windows\system32\drivers\afc.sys <Not Verified; Arcsoft, Inc.; Arcsoft(R) ASPI Shell>
R3 SMNDIS5 (SMNDIS5 NDIS Protocol Driver) - c:\program files\verizon wireless\vzaccess manager\smndis5.sys <Not Verified; Smith Micro Software, Inc.; QuickLink Wi-Fi>
S3 AdfuUd (USB 2.0 (FS) ADFU Device) - c:\windows\system32\drivers\adfuud.sys
S3 APLMp50 (APLMp50 NDIS Protocol Driver) - c:\windows\system32\drivers\aplmp50.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>
S3 catchme - c:\docume~1\user\locals~1\temp\catchme.sys (file missing)
S3 CoachUsb (Coach Digital Camera on USB) - c:\windows\system32\drivers\coachusb.sys <Not Verified; FotoNation Ltd.; USB Driver for Digital Camera>
S3 CoachVc (Coach Video Capture) - c:\windows\system32\drivers\coachvc.sys <Not Verified; Accapella Ltd.; Video Capture Minidriver for Digital Camera>
S3 lgatbus (LG USB Composite Device driver (WDM)) - c:\windows\system32\drivers\lgatbus.sys <Not Verified; MCCI; LG USB Composite Device>
S3 lgatmdm (LG CDMA USB Modem Drivers) - c:\windows\system32\drivers\lgatmdm.sys <Not Verified; MCCI; LG CDMA USB Modem>
S3 lgatserd (LG CDMA USB Modem Diagnostic Serial Port Drivers (WDM)) - c:\windows\system32\drivers\lgatserd.sys <Not Verified; MCCI; LG CDMA USB Modem Diagnostic Serial Port>
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 AntiVirScheduler (Avira AntiVir Personal – Free Antivirus Scheduler) - "c:\program files\avira\antivir personaledition classic\sched.exe" <Not Verified; Avira GmbH; AntiVir Workstation>
R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
R3 hpqwmi (HP WMI Interface) - c:\program files\hpq\shared\hpqwmi.exe <Not Verified; Hewlett-Packard Development Company, L.P.; hpqwmi Module>
-- Device Manager: Disabled ----------------------------------------------------
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\D2A1407A613F0200
Manufacturer: Microsoft
Name: 1394 Net Adapter #2
PNP Device ID: V1394\NIC1394\D2A1407A613F0200
Service: NIC1394
-- Scheduled Tasks -------------------------------------------------------------
2008-07-03 08:02:13 436 --a------ C:\WINDOWS\Tasks\RegCure Program Check.job
2008-06-30 12:32:15 542 --a------ C:\WINDOWS\Tasks\MalwareRemovalBot Scheduled Scan.job
2008-06-26 03:00:01 370 --a------ C:\WINDOWS\Tasks\RegCure.job
2008-06-24 07:31:00 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
-- Files created between 2008-06-03 and 2008-07-03 -----------------------------
2008-06-29 14:49:31 0 d-------- C:\Documents and Settings\LocalService\My Documents
2008-06-29 14:47:30 0 d-------- C:\Documents and Settings\LocalService\Application Data\Adobe
2008-06-29 12:21:12 0 d-------- C:\Program Files\Avira
2008-06-29 12:21:12 0 d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-06-27 07:37:21 0 d-------- C:\Documents and Settings\All Users\Application Data\SecTaskMan
2008-06-27 07:37:13 0 d-------- C:\Program Files\Security Task Manager
2008-06-26 20:50:31 0 d-------- C:\DataBase Java Script Problem
2008-06-26 18:35:56 0 d-------- C:\Documents and Settings\user\Application Data\Malwarebytes
2008-06-26 18:35:50 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-26 17:04:17 0 d-------- C:\WINDOWS\ERUNT
2008-06-26 15:47:44 0 d-------- C:\SpyBot Instructions
2008-06-26 15:24:56 0 d-------- C:\Program Files\Trend Micro
2008-06-26 13:44:43 0 d-------- C:\Georgio 1
2008-06-26 13:42:18 55080 --ah----- C:\WINDOWS\system32\mlfcache.dat
2008-06-25 23:21:45 0 d-------- C:\Program Files\Panda Security
2008-06-25 13:01:54 0 d-------- C:\Documents and Settings\Administrator\Application Data\Smith Micro
2008-06-25 12:18:06 0 dr------- C:\Documents and Settings\Administrator\Favorites
2008-06-25 12:18:06 0 d-------- C:\Documents and Settings\Administrator\Desktop
2008-06-25 12:18:06 0 d--hs---- C:\Documents and Settings\Administrator\Cookies
2008-06-25 12:18:06 0 dr-h----- C:\Documents and Settings\Administrator\Application Data
2008-06-25 12:18:06 0 d-------- C:\Documents and Settings\Administrator\Application Data\Symantec
2008-06-25 12:18:06 0 d---s---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2008-06-25 12:18:06 0 d-------- C:\Documents and Settings\Administrator\Application Data\Identities
2008-06-25 12:18:06 0 d-------- C:\Documents and Settings\Administrator\Application Data\Apple Computer
2008-06-25 12:18:05 0 d--h----- C:\Documents and Settings\Administrator\Templates
2008-06-25 12:18:05 0 dr------- C:\Documents and Settings\Administrator\Start Menu
2008-06-25 12:18:05 0 dr-h----- C:\Documents and Settings\Administrator\SendTo
2008-06-25 12:18:05 0 dr-h----- C:\Documents and Settings\Administrator\Recent
2008-06-25 12:18:05 0 d--h----- C:\Documents and Settings\Administrator\PrintHood
2008-06-25 12:18:05 0 d--h----- C:\Documents and Settings\Administrator\NetHood
2008-06-25 12:18:05 0 dr------- C:\Documents and Settings\Administrator\My Documents
2008-06-25 12:18:05 0 d--h----- C:\Documents and Settings\Administrator\Local Settings
2008-06-25 12:18:03 2359296 --ah----- C:\Documents and Settings\Administrator\NTUSER.DAT
2008-06-25 10:40:56 0 --a------ C:\WINDOWS\system32\vssahix.dat
2008-06-25 10:40:56 5021 --a------ C:\WINDOWS\system32\loadpqrf.dat
2008-06-25 10:40:56 7459 --a------ C:\WINDOWS\system32\inettplc.dat
2008-06-25 10:38:45 8704 --a------ C:\WINDOWS\system32\wpdmtprr.dat
2008-06-25 10:38:45 395 --a------ C:\WINDOWS\system32\kbdesipn.dat
2008-06-25 10:38:45 994 --a------ C:\WINDOWS\system32\ilsmfpg.dat
2008-06-25 10:38:45 0 --a------ C:\WINDOWS\system32\cabvxewr.dat
2008-06-24 11:30:49 0 d-------- C:\New Folder (4)
2008-06-24 05:38:46 0 --a------ C:\Documents and Settings\user\regsvr32
2008-06-23 17:53:55 0 d-------- C:\Program Files\Enigma Software Group
2008-06-23 17:43:34 0 d-------- C:\Documents and Settings\user\Application Data\MalwareRemovalBot
2008-06-23 16:52:37 63 --a------ C:\WINDOWS\system\SysSD.dll
2008-06-23 16:51:31 0 d-------- C:\Program Files\SpywareDetector
2008-06-23 16:24:57 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-06-23 11:31:40 0 d-------- C:\Scan Report
2008-06-23 11:31:18 0 d-------- C:\New Folder (3)
2008-06-23 11:19:16 0 d-------- C:\Attic Fan
2008-06-22 15:51:42 0 d-------- C:\AceFTP
2008-06-22 14:20:16 0 d-------- C:\Vive Cameras
2008-06-19 15:22:04 0 d-------- C:\Documents and Settings\user\.magicfix
2008-06-19 14:18:18 0 d-------- C:\Magic jack
2008-06-19 13:38:15 0 d-------- C:\Documents and Settings\user\Application Data\mjusbsp
2008-06-17 07:20:47 0 d-------- C:\Untitled_2
2008-06-13 08:33:46 0 d-------- C:\2007 IRS Tax Statement
-- Find3M Report ---------------------------------------------------------------
2008-07-03 08:14:09 0 d-------- C:\Program Files\PestPatrol
2008-06-22 12:05:04 10320 --a------ C:\Documents and Settings\user\Application Data\wklnhst.dat
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [09/27/2005 09:05 PM]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [06/19/2005 01:50 PM]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [10/14/2004 02:54 PM]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [10/11/2005 04:17 PM]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [08/01/2005 02:26 PM]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [05/20/2005 02:46 PM C:\WINDOWS\KHALMNPR.Exe]
"Ulead AutoDetector"="C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe" [02/27/2003 06:48 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [12/04/2006 07:42 AM]
"HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [02/16/2005 11:11 PM]
"SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [09/28/2006 01:16 PM]
"OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [10/11/2006 12:45 PM]
"PestPatrol Control Center"="C:\PROGRA~1\PESTPA~1\PPControl.exe" [11/15/2004 11:49 AM]
"PPMemCheck"="C:\PROGRA~1\PESTPA~1\PPMemCheck.exe" [04/19/2003 07:53 AM]
"CookiePatrol"="C:\PROGRA~1\PESTPA~1\CookiePatrol.exe" [01/10/2005 09:35 AM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [12/11/2007 11:56 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [12/11/2007 01:10 PM]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [01/11/2008 10:16 PM]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [02/12/2008 10:06 AM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 01:00 AM]
"EPSON Stylus CX8400 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICEA.exe" [02/15/2007 07:00 AM]
"cdloader"="C:\Documents and Settings\user\Application Data\mjusbsp\cdloader2.exe" [06/12/2008 12:37 PM]
"MalwareRemovalBot"="C:\Program Files\MalwareRemovalBot\MalwareRemovalBot.exe" []
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [01/28/2008 11:43 AM]
C:\Documents and Settings\user\Start Menu\Programs\Startup\
HotSync Manager.lnk - C:\Program Files\Palm\HOTSYNC.EXE [8/9/2002 5:36:20 PM]
VZAccess Manager.lnk - C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe [3/30/2008 11:16:20 PM]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [1/27/2007 9:29:27 AM]
Album Fast Start.lnk - C:\Program Files\Ulead Systems\Ulead PhotoImpact 6\ABMTSR.EXE [8/12/2006 7:41:09 PM]
Billminder.lnk - C:\Program Files\QUICKENW\BILLMIND.EXE [11/7/2006 4:28:36 PM]
Kodak EasyShare software.lnk - C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [7/22/2005 3:47:22 AM]
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [8/5/2006 9:03:38 PM]
Quicken Startup.lnk - C:\Program Files\QUICKENW\QWDLLS.EXE [11/7/2006 4:28:52 PM]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
-- End of Deckard's System Scanner: finished at 2008-07-03 08:24:54 ------------
EXTRA.TXT FILE:
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: English
CPU 0: AMD Turion(tm) 64 Mobile Technology ML-32
Percentage of Memory in Use: 77%
Physical Memory (total/avail): 510.17 MiB / 115.77 MiB
Pagefile Memory (total/avail): 1246.59 MiB / 795.79 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1925.28 MiB
C: is Fixed (NTFS) - 74.33 GiB total, 54.85 GiB free.
D: is CDROM (No Media)
\\.\PHYSICALDRIVE0 - TOSHIBA MK8032GAX - 74.53 GiB - 2 partitions
\PARTITION0 (bootable) - Installable File System - 74.33 GiB - C:
\PARTITION1 - Unknown - 203.95 MiB
-- Security Center -------------------------------------------------------------
AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.
FirstRunDisabled is set.
AV: Avira AntiVir PersonalEdition v8.0.1.18 (Avira GmbH)
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Program Files\\EarthLink TotalAccess\\TaskPanl.exe"="C:\\Program Files\\EarthLink TotalAccess\\TaskPanl.exe:*:Disabled:Earthlink"
"C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"="C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe:*:Disabled:Kodak Software Updater"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Adobe\\Photoshop 5.0\\Photoshp.exe"="C:\\Program Files\\Adobe\\Photoshop 5.0\\Photoshp.exe:*:Enabled:Adobe Photoshop 5.0"
"C:\\Program Files\\PestPatrol\\PestPatrol.exe"="C:\\Program Files\\PestPatrol\\PestPatrol.exe:*:Enabled:PestPatrol"
"C:\\Program Files\\Visicom Media\\AceFTP 3 Freeware\\aceftp3free.exe"="C:\\Program Files\\Visicom Media\\AceFTP 3 Freeware\\aceftp3free.exe:*:Enabled:AceFTP v3"
"C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"="C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe:*:Enabled:EasyShare"
"C:\\Program Files\\TurboTax\\Premier 2006\\32bit\\ttax.exe"="C:\\Program Files\\TurboTax\\Premier 2006\\32bit\\ttax.exe:LocalSubNet:Enabled:TurboTax"
"C:\\Program Files\\TurboTax\\Premier 2006\\32bit\\updatemgr.exe"="C:\\Program Files\\TurboTax\\Premier 2006\\32bit\\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\TurboTax\\Deluxe 2007\\32bit\\ttax.exe"="C:\\Program Files\\TurboTax\\Deluxe 2007\\32bit\\ttax.exe:LocalSubNet:Enabled:TurboTax"
"C:\\Program Files\\TurboTax\\Deluxe 2007\\32bit\\updatemgr.exe"="C:\\Program Files\\TurboTax\\Deluxe 2007\\32bit\\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager"
"C:\\Documents and Settings\\user\\Application Data\\mjusbsp\\magicJack.exe"="C:\\Documents and Settings\\user\\Application Data\\mjusbsp\\magicJack.exe:*:Enabled:magicJack"
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\user\Application Data
CLASSPATH=.;C:\Program Files\Java\jre1.6.0_02\lib\ext\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=2WIRE200
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\user
LOGONSERVER=\\2WIRE200
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Common Files\Ulead Systems\MPEG;C:\Program Files\Common Files\Ulead Systems\DVD;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 36 Stepping 2, AuthenticAMD
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=2402
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre1.6.0_02\lib\ext\QTJava.zip
SESSIONNAME=Console
SonicCentral=C:\Program Files\Common Files\Sonic Shared\Sonic Central\
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\user\LOCALS~1\Temp
TMP=C:\DOCUME~1\user\LOCALS~1\Temp
USERDOMAIN=2WIRE200
USERNAME=user
USERPROFILE=C:\Documents and Settings\user
windir=C:\WINDOWS
-- User Profiles ---------------------------------------------------------------
user [I](admin)
Administrator (new local, admin)
-- Add/Remove Programs ---------------------------------------------------------
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
--> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\system32\UninstIPP.isu
--> C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
--> C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
--> C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
--> C:\WINDOWS\UNINST.EXE -f"C:\Program Files\Adobe\Photoshop 5.0\DeIsL2.isu" -c"C:\Program Files\Adobe\Photoshop 5.0\Uninst.dll"
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{329899E1-CBBA-49BC-9FFE-199E94316727}\setup.exe" -l0x9 -removeonly
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
AceFTP 3 Freeware --> "C:\Program Files\Visicom Media\AceFTP 3 Freeware\uninst-ftp.exe"
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
Adobe Reader 8.1.2 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81200000003}
Album Express (Remove only) --> "C:\Program Files\Album Express\unins000.exe"
Anfy --> C:\PROGRA~1\AnfyTeam\UNWISE.EXE C:\PROGRA~1\AnfyTeam\INSTALL.LOG
AnswerWorks 4.0 Runtime - English --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7DD9A065-2C86-4A9F-A5FF-796EC1B99DCA}\setup.exe" -l0x9 -removeonly
Apple Mobile Device Support --> MsiExec.exe /I{B5C209B1-8DDB-4642-A573-375B951514CB}
Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
ArcSoft PhotoImpression 6 --> C:\Program Files\InstallShield Installation Information\{D03E7B00-CA85-4684-9321-1888873C34BD}\Setup.exe -runfromtemp -l0x0009 -removeonly
ArcSoft Print Creations --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0D6D96F4-0CAF-4522-B05F-70A88EDECDFD}\Setup.exe" -l0x9
Athlon 64 Processor Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x9
ATI - Software Uninstall Utility --> C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal – Free Antivirus --> C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
AWicons Lite --> C:\Program Files\AWicons Lite\uninstall.exe C:\Program Files\AWicons Lite\uninstall.log
Broadcom 802.11 Wireless LAN Adapter --> C:\WINDOWS\system32\BCMWLU00.exe verbose /rootkey=Software\Broadcom\802.11\UninstallInfo
C-Media USB WDM Audio Driver --> C:\WINDOWS\system32\cmdrvrm.exe
Canon MP Navigator 2.2 --> "C:\Program Files\Canon\MP Navigator 2.2\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator 2.2\uninst.ini
Canon MP530 --> "C:\WINDOWS\system32\CanonIJ Uninstaller Information\{3215EBED-1D06-42fb-A05C-A752A46FB24C}\DelDrv.exe" /U:{3215EBED-1D06-42fb-A05C-A752A46FB24C} /L0x0009
Canon MP530 User Registration --> C:\Program Files\Canon\IJEREG\MP530\UNINST.EXE
Canon Utilities Easy-PhotoPrint --> C:\Program Files\Canon\Easy-PhotoPrint\uninst.exe uninst.ini
CardRd81 --> MsiExec.exe /I{54C8FE84-89C4-40E8-976C-439EB0729BD6}
CCScore --> MsiExec.exe /I{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}
Conexant AC-Link Audio --> C:\Program Files\CONEXANT\CNXT_AUDIO\HXFSETUP.EXE -U -ICPL309BA.INF
CR2 --> MsiExec.exe /I{432C3720-37BF-4BD7-8E49-F38E090246D0}
Digital Camera Driver --> MsiExec.exe /I{A9E9574E-F5D3-49FB-BA3F-FD5942810E7E}
Easy-WebPrint --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
EPSON CX8400 User's Guide --> C:\Program Files\epson\guide\cx8400_e\uninstall.exe
EPSON Printer Software --> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan --> C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Stylus CX8400 Series Scanner Driver Update --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24ADC0E4-8D3E-40C4-9106-F2DE5E9112F1}\Setup.exe" -l0x9
ESSBrwr --> MsiExec.exe /I{643EAE81-920C-4931-9F0B-4B343B225CA6}
ESSCDBK --> MsiExec.exe /I{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}
ESScore --> MsiExec.exe /I{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}
ESSCT --> MsiExec.exe /I{8BB4B58A-A402-4DE8-8FCD-287E60B88DD8}
ESSgui --> MsiExec.exe /I{91517631-A9F3-4B7C-B482-43E0068FD55A}
ESShelp --> MsiExec.exe /I{87843A41-7808-4F2E-B13F-25C1E67CF2FD}
ESSini --> MsiExec.exe /I{8E92D746-CD9F-4B90-9668-42B74C14F765}
ESSPCD --> MsiExec.exe /I{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
ESSPDock --> MsiExec.exe /I{FCDB1C92-03C6-4C76-8625-371224256091}
ESSSONIC --> MsiExec.exe /I{4F677FC7-7AA8-412B-A957-F13CBE1C7331}
ESSTOOLS --> MsiExec.exe /I{8A502E38-29C9-49FA-BCFA-D727CA062589}
ESSTUTOR --> MsiExec.exe /I{CA60320D-6A16-49C8-A34F-84EEF4799567}
ESSvpaht --> MsiExec.exe /I{A5B3EB8A-4071-42F0-8E8E-7A8342AA8E69}
ESSvpot --> MsiExec.exe /I{48C82F7A-F100-4DAB-A310-8E18BF2159E1}
Face-OP 2.0 --> C:\WINDOWS\cadkasdeinst01e.exe "C:\Program Files\Face-OP 2.0\"
Free Morphing 2.1 --> "C:\Program Files\Free Morphing\unins000.exe"
Gallery Remote --> "C:\Program Files\Gallery Remote\UninstallerData\Uninstall gallery_remote.exe"
getPlus(R)_ocx --> rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\inf\GETPLUSo.INF, DefaultUninstall
Google Toolbar for Internet Explorer --> MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar3.dll"
GSpot Codec Information Appliance --> C:\Program Files\GSpot\Uninstall.exe
High Definition Audio Driver Package - KB835221 --> C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
HLPIndex --> MsiExec.exe /I{38441BE7-79B0-42B8-8297-833704F949FE}
HLPPDOCK --> MsiExec.exe /I{154508C0-07C5-4659-A7A0-E49968750D21}
HLPRFO --> MsiExec.exe /I{AADAC983-FDE9-42FA-8FD9-7BB324155593}
Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Help and Support --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\setup.exe" -l0x9 -removeonly
HP Update --> MsiExec.exe /X{8C6027FD-53DC-446D-BB75-CACD7028A134}
HP User Guides 0008 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{43A6AA2A-74B5-4E1C-91DB-ECB2F99D9ED7}\setup.exe" -l0x9 -removeonly
HP Wireless Assistant --> MsiExec.exe /I{D32067CD-7409-4792-BFA0-1469BCD8F0C8}
InterVideo WinDVD --> "C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iQue - Detail Map Install --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B6E3E1E1-65D6-443A-AD17-485534AE4995}\Setup.exe" -l0x9 AddRemove
iQue - MapInstall and ContactLocation --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A7C9EE7F-AB00-47D6-98D5-01AE126C7355}\setup.exe" -l0x9 AddRemove
iTunes --> MsiExec.exe /I{18388EF8-E0A3-442B-8BFE-E2F1B3D05C91}
J2SE Runtime Environment 5.0 Update 10 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
J2SE Runtime Environment 5.0 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
J2SE Runtime Environment 5.0 Update 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
J2SE Runtime Environment 5.0 Update 9 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
K-Lite Codec Pack 3.2.5 Full --> "C:\Program Files\K-Lite Codec Pack\unins000.exe"
Kodak EasyShare software --> C:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_140011_16625e2e\Setup.exe /APR-REMOVE
KSU --> MsiExec.exe /I{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}
LG USB Modem driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\Setup.exe" -l0x9
LGUsbDriver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EB866374-B705-4749-83D9-997AC77146B3}\setup.exe"
Logitech SetPoint --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x9 -removeonly
Magellan RoadMate Tools --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4304BE34-6DDA-46CC-ADAB-77990DC77ED5}\Setup.exe" -l0x9
Magic RM RAM to MP3 Converter 2.61 --> "C:\Program Files\Magic RM to MP3 Converter\unins000.exe"
MapSource - City Select North America v7 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{E8DA0DB7-51C7-4D47-A9FC-51F206ED0045} /l1033
Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Money 2005 --> C:\Program Files\Microsoft Money 2005\MNYCoreFiles\Setup\uninst.exe /s:120
Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Works --> MsiExec.exe /I{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}
MP3 Player Utilities --> MsiExec.exe /I{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}
Mp3 Workshop 1.1 --> "C:\Program Files\Mp3 Workshop\unins000.exe"
MSN --> C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
muvee autoProducer 4.0 - SE --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{534AA552-E1F1-4965-B2AA-FBDEB0730D60}\setup.exe" -l0x9
Notifier --> MsiExec.exe /I{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}
OTtBP --> MsiExec.exe /I{F71760CD-0F8B-4DCC-B7B7-6B223CC3843C}
OTtBPSDK --> MsiExec.exe /I{3CA39B0C-BA85-4D42-AC0F-1FF5F60C3353}
Palm Desktop for Garmin iQue 3600 --> MsiExec.exe /X{2BCB62F5-7EC5-4637-8F7A-2E7F5B437A70}
Panda ActiveScan --> C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan
Panda ActiveScan 2.0 --> C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
Picasa 2 --> "C:\Program Files\Picasa2\Uninstall.exe"
Presto! PageManager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D2D6B9EB-C6DC-4DAA-B4DE-BB7D9735E7DA}\PMSetup.exe" -l0x9 anything -removeonly
Quick Launch Buttons 5.20 D2 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CEB326EC-8F40-47B2-BA22-BB092565D66F}\setup.exe" -l0x9 -uninst
Quicken 2002 Basic --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\QUICKENW\Uninst.isu" -c"C:\Program Files\QUICKENW\uninst.dll"
QuickTime --> MsiExec.exe /I{E0D51394-1D45-460A-B62D-383BC4F8B335}
Real Alternative 1.31 --> "C:\Program Files\Real Alternative\unins000.exe"
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
REALTEK Gigabit and Fast Ethernet NIC Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94FB906A-CF42-4128-A509-D353026A607E}\setup.exe" -l0x9 REMOVE
RegCure 1.5.0.1 --> C:\Program Files\RegCure\uninst.exe
Replay Converter 2.50 --> C:\WINDOWS\iun6002.exe "C:\Program Files\Replay Converter\irunin.ini"
Replay Music 2.51 --> C:\WINDOWS\iun6002.exe "C:\Program Files\Replay Music 2\irunin.ini"
Replay Radio and Replay A/V 7 --> C:\WINDOWS\iun6002.exe "C:\Program Files\Replay7\irunin.ini"
Rhapsody Player Engine --> MsiExec.exe /I{84F1DE76-C48C-4281-87A0-CC9548D1E7F9}
RM-to-MP3-Converter 2.0 --> "C:\Program Files\RM-to-MP3-Converter\unins000.exe"
ScanSoft OmniPage SE 4.0 --> MsiExec.exe /I{C1E693A4-B1D5-4DCD-B68D-2087835B7184}
Security Task Manager 1.7f --> C:\Program Files\Security Task Manager\Uninstal.exe "C:\Documents and Settings\All Users\Start Menu\Programs\Security Task Manager"
Security Update for Step By Step Interactive Training (KB898458) --> "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Security Update for Step By Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
SFR --> MsiExec.exe /I{DB02F716-6275-42E9-B8D2-83BA2BF5100B}
SHASTA --> MsiExec.exe /I{605A4E39-613C-4A12-B56F-DEFBE6757237}
SKIN0001 --> MsiExec.exe /I{FDF9943A-3D5C-46B3-9679-586BD237DDEE}
SKINXSDK --> MsiExec.exe /I{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}
Soft Data Fax Modem with SmartCP --> C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_1002&DEV_4378\HXFSETUP.EXE -U -Icpl309bk.inf
Sonic Audio Module --> MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic Copy Module --> MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic Data Module --> MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Express Labeler --> MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus --> MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Spybot - Search & Destroy --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Symantec Technical Support Web Controls --> MsiExec.exe /X{C4868E88-F5B5-4E45-9592-C7062BD97441}
Synaptics Pointing Device Driver --> rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
TallStick TS-AudioToMIDI 3.30 (remove only) --> "C:\Program Files\TallStick\TS-AudioToMIDI 3.30\Uninstall.exe"
Texas Instruments PCIxx21/x515 drivers. --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{FF6F491D-BC82-4DCC-A72F-1824957C6466} /l1033
TomTom HOME --> C:\Program Files\InstallShield Installation Information\{CE325D55-FCAF-4273-BB79-069BB8747270}\setup.exe -runfromtemp -l0x0009 -removeonly
TurboTax 2005 --> C:\Program Files\TurboTax\Deluxe 2005\TaxUnst.EXE "C:\Program Files\TurboTax\Deluxe 2005\Uninstall.log" -NoGui
TurboTax Deluxe 2007 --> C:\Program Files\TurboTax\Deluxe 2007\TaxUnst.EXE "C:\Program Files\TurboTax\Deluxe 2007\Uninstall.log" -NoGui
TurboTax ItsDeductible 2005 --> MsiExec.exe /X{2E7595EC-4FB1-4E29-93D4-9083C8A9B107}
TurboTax ItsDeductible 2006 --> MsiExec.exe /X{AFF1EA96-9C23-4249-B7D4-CD4B54D4582F}
TurboTax Premier Investments 2006 --> C:\Program Files\TurboTax\Premier 2006\TaxUnst.EXE "C:\Program Files\TurboTax\Premier 2006\Uninstall.log" -NoGui
Ulead Drop Spot 1.0 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3BCC5640-5360-11D4-A44A-0000E86D2305}\setup.exe"
Ulead Photo Explorer 8.0 SE Basic --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\Setup.exe" -l0x9
Ulead PhotoImpact 6 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D0F02CE0-491C-11D4-A44A-0000E86D2305}\setup.exe"
USB Audio --> C:\WINDOWS\CmiUSBUninstall.exe C:\PROGRA~1\USBAUD~1#USB Audio
Virtual Earth 3D (Beta) --> MsiExec.exe /I{619B8475-0F48-41B7-A370-5147F7092989}
VPRINTOL --> MsiExec.exe /I{999D43F4-9709-4887-9B1A-83EBB15A8370}
VZAccess Manager for Sierra Wireless --> MsiExec.exe /X{4537D169-BE5F-43C2-96BE-1B9D09BF6BDC}
WexTech AnswerWorks --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EA2BEBD6-87B9-41E5-95AC-7E4C165A9475}\SETUP.EXE" -l0x9 -eliminate
WinAce Archiver --> "C:\Program Files\WinAce\SXUNINST.EXE" "C:\Program Files\WinAce\SXUNINST.INI"
Windows Imaging Component --> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
WIRELESS --> MsiExec.exe /I{F9593CFB-D836-49BC-BFF1-0E669A411D9F}
-- Application Event Log -------------------------------------------------------
Event Record #/Type9083 / Warning
Event Submitted/Written: 07/01/2008 03:22:46 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
W95/Blumblebee.1738C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP603\A0058154.dll
Event Record #/Type9082 / Warning
Event Submitted/Written: 06/30/2008 10:51:49 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
HTML/Infected.WebPage.GenC:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\7X3CIUU9\acc_random=9610228993[1].htm
Event Record #/Type9081 / Warning
Event Submitted/Written: 06/30/2008 10:51:48 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
HTML/Infected.WebPage.GenC:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\7X3CIUU9\acc_random=9610228993[1].htm
Event Record #/Type9080 / Warning
Event Submitted/Written: 06/30/2008 10:51:30 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
HTML/Infected.WebPage.GenC:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\QHU02F60\acc_random=7792532532[1].htm
Event Record #/Type9079 / Warning
Event Submitted/Written: 06/30/2008 10:51:30 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
HTML/Infected.WebPage.GenC:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\QHU02F60\acc_random=7792532532[1].htm
-- Security Event Log ----------------------------------------------------------
No Errors/Warnings found.
-- System Event Log ------------------------------------------------------------
Event Record #/Type45370 / Warning
Event Submitted/Written: 07/01/2008 02:19:39 PM
Event ID/Source: 18 / avgntflt
Event Description:
TIMEOUT<System> C:\...al Settings\Temp\temp0.exe
Event Record #/Type45368 / Error
Event Submitted/Written: 07/01/2008 02:19:17 PM
Event ID/Source: 32003 / ipnathlp
Event Description:
The Network Address Translator (NAT) was unable to request an operation
of the kernel-mode translation module.
This may indicate misconfiguration, insufficient resources, or
an internal error.
The data is the error code.
Event Record #/Type45363 / Warning
Event Submitted/Written: 07/01/2008 06:13:35 AM
Event ID/Source: 1007 / Dhcp
Event Description:
Your computer has automatically configured the IP address for the Network
Card with network address 00A0D5FFFF85. The IP address being used is 169.254.221.10.
Event Record #/Type45359 / Warning
Event Submitted/Written: 06/30/2008 11:45:15 PM
Event ID/Source: 240 / Win32k
Event Description:
A request to suspend power was denied by magicJack.exe.
Event Record #/Type45358 / Warning
Event Submitted/Written: 06/30/2008 08:31:15 PM
Event ID/Source: 240 / Win32k
Event Description:
A request to suspend power was denied by magicJack.exe.
-- End of Deckard's System Scanner: finished at 2008-07-03 08:24:54 ------------