PDA

View Full Version : does this resident log look okey? (A I in the right forum?)



Kelley712
2009-01-18, 02:40
I have a pop-up message, which is most likely from installing SP3 on my O/S XP Pro. I'm just not sure if I should allow or disallow. If I DON'T allow it, no harm no foul, If I allow it I might be fouled up by something.

On the ther hand, it'll just be one of those things that I can clean out of the registry later, if I disallow it. I just don't want an :oops:

This is the gist of the pop-up:

Category: System Startup user entry
Change: Value deleted
Entry: TSClientMSIUninstaller
Entry: TSCUninstaller
old data: cmd.exe /C: "cscript %systemroot \installer \TSClientMsiTrans\ tcuinst.vbs

-------------------------------------------------------------------------
Below is the whole resident log. Hope it isn't too much info.
-------------------------------------------------------------------------

1/6/2009 7:08:53 PM Allowed (based on user decision)
value "wextract_cleanup0" (new data: "rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\HANNAH~1\LOCALS~1\Temp\IXP000.TMP\"") added in System Startup global entry!
1/6/2009 7:09:08 PM Allowed (based on user decision) value "WPDShServiceObj" (new data: "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}") added in Shell services!
1/6/2009 7:09:27 PM Allowed (based on user decision) value "WMFSDK11_DRMUpgrade" (new data: "C:\WINDOWS\system32\drmupgds.exe") added in System Startup global entry!
1/6/2009 7:09:38 PM Allowed (based on user decision) value "KB926239" (new data: "rundll32.exe apphelp.dll,ShimFlushCache") added in System Startup global entry!
1/6/2009 7:09:50 PM Allowed (based on user decision) value "MP10_EnsureFileVer" (new data: "C:\WINDOWS\inf\unregmp2.exe /EnsureFileVersions") added in System Startup global entry!
1/6/2009 7:09:54 PM Allowed (based on lassh blacklist) value "WMC_RebootCheck" (new data: "C:\WINDOWS\inf\unregmp2.exe /FixUps") added in System Startup global entry!
1/6/2009 7:10:02 PM Allowed (based on user decision) value "MP11_EnsureDeviceRescan" (new data: "C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\wpd_ci.dll,DoCmd remove rescan") added in System Startup global entry!
1/6/2009 7:10:17 PM Allowed (based on user decision) value "wextract_cleanup0" (new data: "") deleted in System Startup global entry!
1/6/2009 7:10:25 PM Allowed (based on user decision) value "Rhapsody0" (new data: ""C:\Program Files\Rhapsody\Update_OB\realsched.exe"") added in System Startup user entry!
1/6/2009 7:25:57 PM Allowed (based on user decision) value "Rhapsody0" (new data: "") deleted in System Startup user entry!
1/6/2009 7:26:06 PM Allowed (based on user decision) value "WMFSDK11_DRMUpgrade" (new data: "") deleted in System Startup global entry!
1/6/2009 7:26:12 PM Allowed (based on user decision) value "KB926239" (new data: "") deleted in System Startup global entry!
1/6/2009 7:26:12 PM Allowed (based on lassh blacklist) value "WMC_RebootCheck" (new data: "") deleted in System Startup global entry!
1/6/2009 7:26:13 PM Allowed (based on user decision) value "MP11_EnsureDeviceRescan" (new data: "") deleted in System Startup global entry!
1/6/2009 7:42:22 PM Allowed (based on user decision) value "Search Page" (new data: "http://go.microsoft.com/fwlink/?LinkId=54896") changed in Browser page!
1/6/2009 7:42:24 PM Allowed (based on user decision) value "Start Page" (new data: "http://go.microsoft.com/fwlink/?LinkId=69157") changed in Browser page!
1/6/2009 7:42:25 PM Allowed (based on user decision) value "Default_Page_URL" (new data: "http://go.microsoft.com/fwlink/?LinkId=69157") changed in Browser page!
1/6/2009 7:42:25 PM Allowed (based on user decision) value "Default_Search_URL" (new data: "http://go.microsoft.com/fwlink/?LinkId=54896") changed in Browser page!
1/6/2009 7:44:52 PM Allowed (based on user decision) value "NoIE4StubProcessing" (new data: "C:\WINDOWS\system32\reg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f") added in System Startup global entry!
1/6/2009 9:22:45 PM Allowed (based on user decision) value "NoIE4StubProcessing" (new data: "") deleted in System Startup global entry!
1/6/2009 9:25:23 PM Allowed (based on lassh blacklist) value "ctfmon.exe" (new data: "C:\WINDOWS\system32\ctfmon.exe") added in System Startup user entry!
1/6/2009 9:32:23 PM Allowed (based on user decision) value "ITBar7Layout" (new data: "hex:13,00,00,00,00,00,00,00,00,00,00,00,30,00,00,00,10,00,00,00,15,00,00,00,01,00,00,00,00,07,00,00,5E,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,") added in User-specific browser toolbar!
1/7/2009 1:25:48 AM Allowed (based on user decision) value "UPnPMonitor" (new data: "{e57ce738-33e8-4c51-8354-bb4de9d215d1}") added in Shell services!
1/7/2009 3:33:43 PM Allowed (based on user decision) value "Rhapsody0" (new data: ""C:\Program Files\Rhapsody\Update_OB\realsched.exe"") added in System Startup user entry!
1/7/2009 3:52:37 PM Allowed (based on user decision) value "Rhapsody0" (new data: "") deleted in System Startup user entry!
1/14/2009 8:41:29 PM Allowed (based on lassh blacklist) value "WatchDog" (new data: "") deleted in System Startup global entry!
1/14/2009 8:45:18 PM Allowed (based on user decision) value "SunJavaUpdateSched" (new data: "") deleted in System Startup global entry!
1/14/2009 9:00:13 PM Allowed (based on lassh blacklist) value "ctfmon.exe" (new data: "") deleted in System Startup user entry!
1/14/2009 9:54:21 PM Allowed (based on user decision) value "MP10_EnsureFileVer" (new data: "") deleted in System Startup global entry!
1/14/2009 9:58:36 PM Allowed (based on lassh blacklist) value "MSConfig" (new data: "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto") added in System Startup global entry!
1/15/2009 1:10:01 PM Allowed (based on lassh blacklist) value "WatchDog" (new data: "C:\Program Files\InterVideo\DVD Check\DVDCheck.exe") added in System Startup global entry!
1/15/2009 1:14:13 PM Allowed (based on lassh blacklist) value "ctfmon.exe" (new data: "C:\WINDOWS\system32\ctfmon.exe") added in System Startup user entry!
1/16/2009 5:39:25 PM Denied (based on user decision) value "BootExecute" (new data: "autocheck autochk *
sprecovr \SystemRoot\sprecovr.txt
") changed in Session manager!
1/16/2009 5:55:54 PM Allowed (based on user decision) value "TSClientMSIUninstaller" (new data: "cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs"") added in System Startup user entry!
1/16/2009 5:56:00 PM Allowed (based on user decision) value "TSClientAXDisabler" (new data: "cmd.exe /C "%systemroot%\Installer\TSClientMsiTrans\tscdsbl.bat"") added in System Startup user entry!
1/16/2009 5:56:04 PM Allowed (based on user decision) value "dimsntfy" (new data: "") added in Winlogon Notifiers!
1/16/2009 5:56:24 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_2" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmnetmgr.dll"") added in System Startup global entry!
1/16/2009 5:56:26 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_3" (new data: "C:\WINDOWS\System32\regsvr32 /s /u "C:\WINDOWS\System32\wmv8dmod.dll"") added in System Startup global entry!
1/16/2009 5:56:26 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_4" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmvdmod.dll"") added in System Startup global entry!
1/16/2009 5:56:27 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_5" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmvdmoe2.dll"") added in System Startup global entry!
1/16/2009 5:56:27 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_6" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmadmoe.dll"") added in System Startup global entry!
1/16/2009 5:56:30 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_7" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmspdmod.dll"") added in System Startup global entry!
1/16/2009 5:56:31 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_8" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmspdmoe.dll"") added in System Startup global entry!
1/16/2009 5:56:31 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_9" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmsdmoe.dll"") added in System Startup global entry!
1/16/2009 5:56:31 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_10" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmsdmoe2.dll"") added in System Startup global entry!
1/16/2009 5:56:33 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_20" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmadmod.dll"") added in System Startup global entry!
1/16/2009 5:56:34 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_21" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\mpg4dmod.dll"") added in System Startup global entry!
1/16/2009 5:56:34 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_22" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\mp43dmod.dll"") added in System Startup global entry!
1/16/2009 5:56:35 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_23" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\mp4sdmod.dll"") added in System Startup global entry!
1/16/2009 5:56:36 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_24" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\wmsdmod.dll"") added in System Startup global entry!
1/16/2009 5:56:37 PM Allowed (based on user decision) value "OE_WMPWMFSDK_Install_30" (new data: "C:\WINDOWS\System32\regsvr32 /s "C:\WINDOWS\System32\laprxy.dll"") added in System Startup global entry!

Tom.K
2009-01-18, 08:55
You can allow that change because it's deleted.

You should disable any anti-spyware or anti-virus programs before installing SP3. If everything is OK, don't uninstall and re-install it.