Trojan.Vundo.BZ, Trojan.Vundo.CB, others

Have been having issues with some sort of trojan on my computer for a couple weeks at this point. Started with mainly pop-ups (Antivirus 2009 and others) in Firefox, then crashed IE 7 entirely (I've since uninstalled it), and is generally slowing my computer immensely. I've tried a number of different virus scanners (Symantec, Kaspersky, AVG Free) and malware programs (Ad-Aware, Spybot, MBAM, Vundofix, Combofix) and I tried TweakNow Regcleaner when I was getting desperate. The malware seems to disappear for a certain period and then resurface. I've restarted the computer to finish the "clean" a number of times, only to have the issues (pop-ups and slowdowns) reappear. I'm no longer getting pop-ups, but am still having serious slowdown and hourly pop-ups from AVG claiming to have found various malware (trojan.vundo.bz, trojan horse generic 12.wvl, etc.), although a number of them seem to not actually exist. I'm running XP Service Pack 3 on a P4 3 GHz with 500 mb of RAM.

RSIT Information:

LOG:
Logfile of random's system information tool 1.04 (written by random/random)
Run at 2008-12-13 11:17:18
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 13 GB (18%) free of 73 GB
Total RAM: 502 MB (16% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:17:54 AM, on 12/13/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\OpenCASE\OpenCASE Media Agent\MediaAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
C:\Program Files\NETGEAR\WG311v3\WinDomainlogon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\SanDisk\SanDisk TransferMate\SD Monitor.exe
C:\Program Files\NETGEAR\WG311v3\wlancfg5.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\iTunes\iTunes.exe
C:\Documents and Settings\Andrew Campbell\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\Andrew Campbell.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

https://www.google.com/accounts/ServiceLogi...Dl&bsv=1k96

igf4806cy&ltmpl=default&ltmplcache=2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {749b91f2-dcb4-4527-a19f-45a458ef40d9} - C:\WINDOWS\system32\wujeluhe.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [CPMff6f8b07] Rundll32.exe "c:\windows\system32\sunezihe.dll",a
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1
O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p
O4 - HKUS\S-1-5-19\..\Run: [gadiwurimu] Rundll32.exe "C:\WINDOWS\system32\fokitape.dll",s (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [gadiwurimu] Rundll32.exe "C:\WINDOWS\system32\fokitape.dll",s (User 'NETWORK SERVICE')
O4 - Startup: PowerReg SchedulerV2.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Monitor.lnk = C:\Program Files\SanDisk\SanDisk TransferMate\SD Monitor.exe
O4 - Global Startup: NETGEAR WG311v3 Smart Wizard.lnk = ?
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat

7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Facebo...toUploader5.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m...84/mcinsctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

http://www.update.microsoft.com/microsoftu...b?1214962757625
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m...,21/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O17 - HKLM\System\CCS\Services\Tcpip\..\{C81FD7C7-F54C-47B3-A488-8420D74B94A2}: NameServer = 192.168.0.1,12.12.12.12
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll C:\WINDOWS\system32\pegeseyi.dll c:\windows\system32\sunezihe.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\sunezihe.dll (file missing)
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\sunezihe.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet

Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel

32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: OpenCASE Media Agent - ExtendMedia Inc. - C:\Program Files\OpenCASE\OpenCASE Media Agent\MediaAgent.exe

--
End of file - 11512 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-01-12 63128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-12-04 455960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{749b91f2-dcb4-4527-a19f-45a458ef40d9}]
C:\WINDOWS\system32\wujeluhe.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll [2006-05-03 434279]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2005-09-24 231160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BA52B914-B692-46c4-B683-905236F6F655}
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2005-09-24 231160]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2004-08-26 405504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2004-05-06 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-05-06 118784]
"DVDLauncher"=C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe [2004-08-23 57344]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-10-01 289576]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-12-04 1261336]
"CPMff6f8b07"=c:\windows\system32\sunezihe.dll []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2008-11-13 342336]
"updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe [2005-10-24 307200]
"AdobeUpdater"=C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe [2008-11-19 2356088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe [2008-03-24 218496]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
Monitor.lnk - C:\Program Files\SanDisk\SanDisk TransferMate\SD Monitor.exe
NETGEAR WG311v3 Smart Wizard.lnk - C:\WINDOWS\Installer\{70014586-7BBA-4A92-A610-CDC896C48F8F}\NewShortcut1_1.exe

C:\Documents and Settings\Andrew Campbell\Start Menu\Programs\Startup
PowerReg SchedulerV2.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="avgrsstx.dll C:\WINDOWS\system32\pegeseyi.dll c:\windows\system32\sunezihe.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2004-05-06 344064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\sunezihe.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\sunezihe.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\WINDOWS\system32\pegeseyi.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, msansspc.dll,

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispScrSavPage"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\America's Army\System\ArmyOps.exe"="C:\Program Files\America's Army\System\ArmyOps.exe:*:Disabled:ArmyOps"
"C:\Program Files\AIM\aim.exe"="C:\Program Files\AIM\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Disabled:LimeWire"
"C:\Program Files\LimeWire\LimeWire 4.2.2\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire 4.2.2\LimeWire.exe:*:Disabled:LimeWire"
"C:\StubInstaller.exe"="C:\StubInstaller.exe:*:Disabled:LimeWire swarmed installer"
"C:\Program Files\support.com\bin\tgcmd.exe"="C:\Program Files\support.com\bin\tgcmd.exe:*:Disabled:Support.com Scheduler and Command Dispatcher"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Oregon Trail 5\OT5.exe"="C:\Program Files\Oregon Trail 5\OT5.exe:*:Enabled:OT5"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\WINDOWS\SYSTEM32\java.exe"="C:\WINDOWS\SYSTEM32\java.exe:*:Enabled:Java™ 2 Platform Standard Edition binary"
"E:\Media Programs\iTunes\iTunes.exe"="E:\Media Programs\iTunes\iTunes.exe:*:Enabled:iTunes"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\SYSTEM32\msiexec.exe"="C:\WINDOWS\SYSTEM32\msiexec.exe:*:Enabled:Windows® installer"
"C:\Program Files\Participatory Culture Foundation\Miro\xulrunner\python\Miro_Downloader.exe"="C:\Program Files\Participatory Culture

Foundation\Miro\xulrunner\python\Miro_Downloader.exe:*:Enabled:Miro_Downloader"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\SYSTEM32\DRIVERS\svchost.exe"="C:\WINDOWS\SYSTEM32\DRIVERS\svchost.exe:*:Disabled:svchost"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Explorer"
"C:\WINDOWS\SYSTEM32\winlogon.exe"="C:\WINDOWS\SYSTEM32\winlogon.exe:*:Enabled:winlogon"
"C:\WINDOWS\SYSTEM32\defrag.exe"="C:\WINDOWS\SYSTEM32\defrag.exe:*:Enabled:defrag"
"C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\helpsvc.exe"="C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\helpsvc.exe:*:Enabled:HelpSvc"
"C:\Program Files\iPod\bin\iPodService.exe"="C:\Program Files\iPod\bin\iPodService.exe:*:Enabled:iPodService"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\WINDOWS\SYSTEM32\ssstars.scr"="C:\WINDOWS\SYSTEM32\ssstars.scr:*:Enabled:ssstars"
"C:\Program Files\AVG\AVG8\avgrsx.exe"="C:\Program Files\AVG\AVG8\avgrsx.exe:*:Enabled:avgrsx"
"C:\WINDOWS\SYSTEM32\userinit.exe"="C:\WINDOWS\SYSTEM32\userinit.exe:*:Enabled:userinit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AIM\aim.exe"="C:\Program Files\AIM\aim.exe:*:Enabled:AOL Instant Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3de0bf26-bdf1-11db-a8c7-001111532843}]
shell\AutoRun\command - H:\LaunchU3.exe -a


======File associations======

.reg - open - regedit.exe "%1" %*
.scr - open - "%1" %*

======List of files/folders created in the last 1 months======

2008-12-13 11:17:23 ----D---- C:\Program Files\trend micro
2008-12-13 11:17:18 ----D---- C:\rsit
2008-12-10 17:17:55 ----D---- C:\Documents and Settings\All Users\Application Data\SecTaskMan
2008-12-10 17:17:45 ----D---- C:\Program Files\Security Task Manager
2008-12-09 23:14:03 ----SH---- C:\WINDOWS\system32\iyoyubav.ini
2008-12-05 01:00:20 ----HD---- C:\$AVG8.VAULT$
2008-12-04 21:13:14 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2008-12-04 21:12:34 ----D---- C:\Program Files\AVG
2008-12-04 21:12:34 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2008-12-04 19:29:54 ----D---- C:\VundoFix Backups
2008-12-04 19:29:54 ----A---- C:\VundoFix.txt
2008-12-04 19:28:56 ----A---- C:\Bug.txt
2008-12-04 19:28:53 ----A---- C:\WINDOWS\system32\cmd.execf
2008-12-04 19:28:46 ----D---- C:\32788R22FWJFW
2008-12-04 16:44:24 ----SH---- C:\WINDOWS\system32\fuzihabi.dll
2008-12-04 16:44:21 ----SH---- C:\WINDOWS\system32\tehuzete.dll
2008-12-04 16:44:21 ----SH---- C:\WINDOWS\system32\hezagivu.dll
2008-12-02 17:56:15 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2008-12-02 17:38:03 ----D---- C:\Program Files\Enigma Software Group
2008-11-21 16:47:56 ----A---- C:\WINDOWS\system32\nsj118.tmp
2008-11-21 16:47:52 ----A---- C:\WINDOWS\system32\nsh117.tmp
2008-11-21 16:46:10 ----A---- C:\WINDOWS\system32\ssldivx.dll
2008-11-21 16:46:10 ----A---- C:\WINDOWS\system32\libdivx.dll
2008-11-21 16:45:16 ----A---- C:\WINDOWS\system32\dtu100.dll.manifest
2008-11-21 16:45:16 ----A---- C:\WINDOWS\system32\dtu100.dll
2008-11-21 16:45:16 ----A---- C:\WINDOWS\system32\dpl100.dll.manifest
2008-11-21 16:45:16 ----A---- C:\WINDOWS\system32\dpl100.dll
2008-11-21 16:45:12 ----A---- C:\WINDOWS\system32\dpv11.dll
2008-11-21 16:45:12 ----A---- C:\WINDOWS\system32\dpus11.dll
2008-11-21 16:45:12 ----A---- C:\WINDOWS\system32\dpuGUI11.dll
2008-11-21 16:45:12 ----A---- C:\WINDOWS\system32\dpuGUI10.dll
2008-11-21 16:45:12 ----A---- C:\WINDOWS\system32\dpu11.dll
2008-11-21 16:45:12 ----A---- C:\WINDOWS\system32\dpu10.dll
2008-11-21 16:45:08 ----A---- C:\WINDOWS\system32\divx_xx11.dll
2008-11-21 16:45:08 ----A---- C:\WINDOWS\system32\divx_xx0c.dll
2008-11-21 16:45:08 ----A---- C:\WINDOWS\system32\divx_xx0a.dll
2008-11-21 16:45:08 ----A---- C:\WINDOWS\system32\divx_xx07.dll
2008-11-21 16:45:06 ----A---- C:\WINDOWS\system32\DivX.dll
2008-11-21 16:45:00 ----A---- C:\WINDOWS\system32\nsj119.tmp
2008-11-21 16:44:38 ----A---- C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-11-21 16:44:16 ----A---- C:\WINDOWS\system32\DivXWMPExtType.dll
2008-11-20 19:32:45 ----D---- C:\Program Files\iTunes
2008-11-20 19:32:45 ----D---- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-11-20 19:23:33 ----SHD---- C:\Config.Msi

======List of files/folders modified in the last 1 months======

2008-12-13 11:17:53 ----D---- C:\WINDOWS\Temp
2008-12-13 11:17:24 ----D---- C:\WINDOWS\Prefetch
2008-12-13 11:17:23 ----AD---- C:\Program Files
2008-12-13 11:12:50 ----D---- C:\Documents and Settings\Andrew Campbell\Application Data\DNA
2008-12-13 10:47:59 ----D---- C:\Program Files\Mozilla Firefox
2008-12-13 03:17:16 ----D---- C:\WINDOWS\SYSTEM32
2008-12-11 19:37:12 ----D---- C:\WINDOWS\system32\CatRoot2
2008-12-10 18:32:52 ----D---- C:\Program Files\DNA
2008-12-10 17:49:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-12-09 17:33:23 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-12-09 17:32:39 ----D---- C:\WINDOWS
2008-12-09 17:00:41 ----D---- C:\Program Files\TweakNow RegCleaner
2008-12-09 16:59:32 ----D---- C:\Program Files\AviSynth 2.5
2008-12-07 12:31:58 ----D---- C:\Program Files\Google
2008-12-04 21:15:49 ----D---- C:\Program Files\DivX
2008-12-04 21:13:12 ----D---- C:\WINDOWS\system32\DRIVERS
2008-12-04 21:12:22 ----SHD---- C:\WINDOWS\Installer
2008-12-04 21:09:51 ----SD---- C:\Documents and Settings\Andrew Campbell\Application Data\Microsoft
2008-12-04 19:40:51 ----D---- C:\Program Files\WinAce
2008-12-04 19:37:24 ----HD---- C:\Program Files\InstallShield Installation Information
2008-12-04 19:26:07 ----HD---- C:\WINDOWS\INF
2008-12-04 19:18:28 ----A---- C:\WINDOWS\dgnsetup.ini
2008-12-04 19:16:53 ----D---- C:\WINDOWS\system32\MAGIX
2008-12-04 19:15:24 ----D---- C:\Program Files\InterActual
2008-12-04 19:14:35 ----D---- C:\Program Files\MUSICMATCH
2008-12-04 19:10:46 ----D---- C:\Program Files\CyberLink
2008-12-04 19:02:13 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint
2008-12-04 19:00:58 ----D---- C:\Program Files\Startup Inspector for Windows
2008-12-04 18:58:58 ----D---- C:\Program Files\Amazon
2008-12-04 18:58:58 ----D---- C:\Documents and Settings\Andrew Campbell\Application Data\Amazon
2008-12-02 17:54:54 ----D---- C:\Program Files\Common Files\Symantec Shared
2008-12-02 17:54:53 ----D---- C:\Program Files\Symantec
2008-12-02 17:54:47 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2008-12-02 17:40:46 ----D---- C:\Documents and Settings\Andrew Campbell\Application Data\Lavasoft
2008-12-02 17:40:45 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-12-02 07:21:00 ----D---- C:\Documents and Settings\Andrew Campbell\Application Data\BitTorrent
2008-11-28 12:08:31 ----D---- C:\Documents and Settings\Andrew Campbell\Application Data\dvdcss
2008-11-20 19:33:35 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-11-20 19:33:00 ----D---- C:\Program Files\iPod
2008-11-20 19:23:41 ----D---- C:\Program Files\Bonjour
2008-11-19 21:00:54 ----D---- C:\WINDOWS\Help
2008-11-19 21:00:49 ----RSHD---- C:\WINDOWS\system32\DLLCACHE
2008-11-17 17:18:04 ----D---- C:\Documents and Settings\Andrew Campbell\Application Data\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ASPI32;ASPI32; C:\WINDOWS\system32\drivers\ASPI32.sys [2002-07-17 16877]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-12-04 97928]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-12-04 26824]
R1 Cdr4_xp;Cdr4_xp; C:\WINDOWS\system32\drivers\Cdr4_xp.sys [2007-02-22 2432]
R1 Cdralw2k;Cdralw2k; C:\WINDOWS\system32\drivers\Cdralw2k.sys [2007-02-22 2560]
R1 cdudf_xp;cdudf_xp; C:\WINDOWS\system32\drivers\cdudf_xp.sys [2003-01-13 249344]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 omci;OMCI WDM Device Driver; C:\WINDOWS\system32\DRIVERS\omci.sys [2002-11-08 17217]
R1 pwd_2k;pwd_2k; C:\WINDOWS\system32\drivers\pwd_2k.sys [2003-01-13 118422]
R1 UdfReadr_xp;UdfReadr_xp; C:\WINDOWS\system32\drivers\UdfReadr_xp.sys [2003-01-13 206464]
R2 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-12-04 76040]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-09 11043]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 E100B;Intel® PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-02-10 154112]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2003-11-17 1042432]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2003-11-17 212224]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2004-05-06 711005]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-04-09 612352]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2003-11-17 680704]
S3 dvd_2K;dvd_2K; C:\WINDOWS\system32\drivers\dvd_2K.sys [2003-01-13 21654]
S3 HPUATA;HP CD Writer Plus Controller Driver; C:\WINDOWS\system32\DRIVERS\HPUATA.sys [2001-09-24 75776]
S3 mmc_2K;mmc_2K; C:\WINDOWS\system32\drivers\mmc_2K.sys [2003-01-13 22758]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 Pcouffin;Low level access layer for CD devices; C:\WINDOWS\System32\Drivers\Pcouffin.sys []
S3 tbhsd;Tunebite High-Speed Dubbing; C:\WINDOWS\system32\drivers\tbhsd.sys [2008-02-20 27936]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 W8335XP;NETGEAR WG311v3 802.11g Wireless PCI Adapter for Windows XP (8335); C:\WINDOWS\system32\DRIVERS\WG311v3XP.sys [2005-10-06 280576]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 mchInjDrv;mchInjDrv; \??\C:\WINDOWS\system32\Drivers\mchInjDrv.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-10-01 116040]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-12-04 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-12-04 231704]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 CCALib8;Canon Camera Access Library 8; C:\Program Files\Canon\CAL\CALMAIN.exe [2005-09-30 96341]
R2 OpenCASE Media Agent;OpenCASE Media Agent; C:\Program Files\OpenCASE\OpenCASE Media Agent\MediaAgent.exe [2008-01-16 814728]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-10-01 536872]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2003-11-11 69632]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24

70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

[2008-06-26 654848]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 NetSvc;Intel NCS NetService; C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe [2003-12-17 143360]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]

-----------------EOF-----------------

INFO:
info.txt logfile of random's system information tool

1.04 2008-12-13 11:18:00

======Uninstall list======

-->C:\Program Files\DivX\ConverterUninstall.exe

/CONVERTER
-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
-->MsiExec.exe

/I{0CDCA5CD-C404-41FD-9216-9B4B3D24A7AA}
-->MsiExec.exe

/I{403EF592-953B-4794-BCEF-ECAB835C2095}
-->rundll32.exe setupapi.dll,InstallHinfSection

DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat 7.0.7 Professional-->msiexec /I

{AC76BA86-1033-0000-7760-000000000002}
Adobe Anchor Service CS3-->MsiExec.exe

/I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe

/I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe

/I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe

/I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe

/I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe

/I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe

/I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->C:\Program

Files\Common

Files\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab

2e\Setup.exe
Adobe Color Common Settings-->MsiExec.exe

/I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}
Adobe Color EU Extra Settings-->MsiExec.exe

/I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings-->MsiExec.exe

/I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings-->MsiExec.exe

/I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3-->MsiExec.exe

/I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe

/I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->C:\Program

Files\Common

Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58

ff\Setup.exe
Adobe ExtendScript Toolkit 2-->MsiExec.exe

/I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
Adobe Flash Player

ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninsta

ll_activeX.exe
Adobe Flash Player

Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstal

l_plugin.exe
Adobe Fonts All-->MsiExec.exe

/I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe

/I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe

/I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe

/I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop 7.0-->C:\WINDOWS\ISUNINST.EXE

-f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu"

-c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
Adobe Photoshop CS3-->C:\Program Files\Common

Files\Adobe\Installers\2ac78060bc5856b0c1cf873bb919b

58\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe

/I{0046FA01-C5B9-4985-BACB-398DC480FC05}
Adobe Setup-->MsiExec.exe

/I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}
Adobe Setup-->MsiExec.exe

/I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}
Adobe Setup-->MsiExec.exe

/I{D1BB4446-AE9C-4256-9A7F-4D46604D2462}
Adobe Stock Photos CS3-->MsiExec.exe

/I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe SVG Viewer 6.0-->C:\Program Files\Common

Files\Adobe\SVG Viewer 6.0\Uninstall\Winstall.exe -u

-fC:\Program Files\Common Files\Adobe\SVG Viewer

6.0\Uninstall\Install.log
Adobe Type Support-->MsiExec.exe

/I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe

/I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe

/I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe

/I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe

/I{802771A9-A856-4A41-ACF7-1450E523C923}
Apple Mobile Device Support-->MsiExec.exe

/I{976C2B2A-CE59-4AB3-83FB-BF895E28F2E6}
Apple Software Update-->MsiExec.exe

/I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe

/UNINSTALL
Banctec Service Agreement-->MsiExec.exe

/X{4B9F45E8-E3CE-40B4-9463-80A9B3481DEF}
BlazeDVD 4.0 Professional-->"C:\Program

Files\BlazeVideo\BlazeDVD4

Professional\unins000.exe"
Bonjour-->MsiExec.exe

/I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
CamStudio Lossless Codec-->rundll.exe

setupx.dll,InstallHinfSection DefaultUninstall 132

C:\WINDOWS\system32\DRIVERS\camcodec.inf
CamStudio-->C:\Program Files\CamStudio\uninstall.exe
Canon Camera Access Library-->"C:\Program

Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe"

"C:\Program Files\Canon\CAL\Uninst.ini"
Canon Camera Support Core Library-->"C:\Program

Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe"

"C:\Program Files\Canon\CSCLIB\Uninst.ini"
Canon Camera Window DC_DV 5 for ZoomBrowser

EX-->"C:\Program Files\Common

Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program

Files\Canon\CameraWindow\CameraWindowDVC\Uninst.ini"
Canon Camera Window DC_DV 6 for ZoomBrowser

EX-->"C:\Program Files\Common

Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program

Files\Canon\CameraWindow\CameraWindowDVC6\Uninst.ini

"
Canon Camera Window MC 6 for ZoomBrowser

EX-->"C:\Program Files\Common

Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program

Files\Canon\CameraWindow\CameraWindowMC\Uninst.ini"
Canon G.726 WMP-Decoder-->"C:\Program Files\Common

Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program

Files\Canon\G726Decoder\G726DecUnInstall.ini"
Canon iP4200-->C:\WINDOWS\system32\CNMCP78.exe

"-PRINTERNAMECanon iP4200" "-HELPERDLLC:\Documents

and Settings\All Users\Application

Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200

Installer\Inst2\cnmis.dll" "-RCDLLcnmi0409.dll"
Canon MovieEdit Task for ZoomBrowser

EX-->"C:\Program Files\Common

Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program

Files\Canon\ZoomBrowser EX\Program\MVWUninst.ini"
Canon RAW Image Task for ZoomBrowser

EX-->"C:\Program Files\Common

Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program

Files\Canon\RAW Image Task\Uninst.ini"
Canon RemoteCapture Task for ZoomBrowser

EX-->"C:\Program Files\Common

Files\Canon\UIW\1.0.0.0\Uninst.exe" "C:\Program

Files\Canon\CameraWindow\RemoteCaptureTask

DC\Uninst.ini"
Canon Setup Utility 2.0-->"C:\Program

Files\Canon\Canon Setup Utility 2.0\Maint.exe"

/Uninstall C:\Program Files\Canon\Canon Setup

Utility 2.0\uninst.ini
Canon Utilities Easy-PhotoPrint-->C:\Program

Files\Canon\Easy-PhotoPrint\uninst.exe uninst.ini
Canon Utilities EOS Utility-->"C:\Program

Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe"

"C:\Program Files\Canon\EOS Utility\Uninst.ini"
Canon Utilities PhotoStitch-->"C:\Program

Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe"

"C:\Program Files\Canon\PhotoStitch\Uninst.ini"
Canon Utilities ZoomBrowser EX-->"C:\Program

Files\Common Files\Canon\UIW\1.0.0.0\Uninst.exe"

"C:\Program Files\Canon\ZoomBrowser

EX\Program\Uninst.ini"
CARE1280by1024 Screen

Saver-->C:\WINDOWS\CARE1280by1024.scr /u
Conexant D850 56K V.9x DFVc Modem-->C:\Program

Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBS

YS_200F14F1\HXFSETUP.EXE -U -Idel200fk.inf
Corel Applications-->C:\WINDOWS\Corel\Uninst32.exe
CutePDF Writer 2.7-->C:\Program Files\Acro

Software\CutePDF Writer\uninscpw.exe /uninstall
dBpowerAMP Mp4

Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe"

<uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpowe

rAMP Mp4 Codec.dat
Dell Digital Jukebox Driver-->C:\Program

Files\Dell\Digital Jukebox Drivers\DrvUnins.exe /s
Dell Driver Reset Tool-->MsiExec.exe

/I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}
Dell Media Experience-->RunDll32

C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor

.dll,LaunchSetup "C:\Program Files\InstallShield

Installation

Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\s

etup.exe" -uninstall
Dell Support 5.0.0 (630)-->rundll32

C:\PROGRA~1\DELLSU~1\AUInst.dll,ExUninstall
Digital Line Detect-->RunDll32

C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor

.dll,LaunchSetup "C:\Program Files\InstallShield

Installation

Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\s

etup.exe" -l0x9 ControlPanelAnyText
DivX Codec-->C:\Program

Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Content Uploader-->C:\Program

Files\DivX\DivXContentUploaderUninstall.exe

/CUPLOADER
DivX Converter-->C:\Program

Files\DivX\ConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program

Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program

Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Easy CD & DVD Creator 6-->MsiExec.exe

/I{644F9DBE-CEDB-45AF-ACB8-E26692B74F62}
Easy Grade Pro-->C:\WINDOWS\IsUninst.exe

-f"C:\Program Files\Orbis Software\Easy Grade

Pro\Uninst.isu"
Easy-WebPrint-->C:\WINDOWS\IsUninst.exe

-f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
EphPod-->C:\PROGRA~1\EphPod\UNWISE.EXE

C:\PROGRA~1\EphPod\INSTALL.LOG
Final Draft 7-->MsiExec.exe

/I{78D62D17-D970-42DA-B8CF-5E5576293B33}
Google Earth-->RunDll32

C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01

\Intel32\Ctor.dll,LaunchSetup "C:\Program

Files\InstallShield Installation

Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\s

etup.exe" -l0x9 -removeonly
HijackThis 2.0.2-->"C:\Program Files\trend

micro\HijackThis.exe" /uninstall
Hotfix for Windows Internet Explorer 7

(KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spu

ninst\spuninst.exe"
Hotfix for Windows Media Format 11 SDK

(KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuni

nst\spuninst.exe"
Hotfix for Windows Media Player 11

(KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuni

nst\spuninst.exe"
Hotfix for Windows XP

(KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuni

nst\spuninst.exe"
Intel® Graphics Media Accelerator

Driver-->RUNDLL32.EXE

C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID

PCI\VEN_8086&DEV_2782 PCI\VEN_8086&DEV_2582
Intel® PRO Network Adapters and

Drivers-->Prounstl.exe
Intel® PROSet for Wired Connections-->MsiExec.exe

/I{17334AAF-C9E7-483B-9F45-E3FCAF07FFA7}
Internet Explorer Default Page-->MsiExec.exe

/I{35BDEFF1-A610-4956-A00D-15453C116395}
iPod for Windows 2006-01-10-->C:\Program

Files\Common Files\InstallShield\Driver\8\Intel

32\IDriver.exe

/M{3D047C15-C859-45F7-81CE-F2681778069B} /l1033
iTunes-->MsiExec.exe

/I{DDDE0BE3-0CBE-4BF6-B75A-E3F69C947843}
J2SE Runtime Environment 5.0 Update 7-->MsiExec.exe

/I{3248F0A8-6813-11D6-A77B-00B0D0150070}
Java 2 Runtime Environment, SE

v1.4.2_06-->MsiExec.exe

/I{7148F0A8-6813-11D6-A77B-00B0D0142060}
LimeWire 4.18.1-->"C:\Program

Files\LimeWire\uninstall.exe"
LimeWire-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\IN

TEL3~1\IDriver.exe

/M{0A3125EF-C145-4267-85D5-73EDDD0C6F09}
LiveUpdate 2.0 (Symantec Corporation)-->C:\Program

Files\Symantec\LiveUpdate\LSETUP.EXE /U
Macromedia Shockwave

Player-->C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\UNWIS

E.EXE

C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\Install.log
Malwarebytes' Anti-Malware-->"C:\Program

Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix

(KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.

1.4322\Updates\hotfix.exe"

"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Update

s\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X

{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe

/X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack

1-->MsiExec.exe

/I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows

XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\

spuninst.exe"
Microsoft Internationalized Domain Names Mitigation

APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigat

ionAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel

APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlev

elMapping$\spuninst\spuninst.exe"
Microsoft Office XP Professional with

FrontPage-->MsiExec.exe

/I{90280409-6000-11D3-8CFE-0050048383C9}
Microsoft Silverlight-->MsiExec.exe

/I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft User-Mode Driver Framework Feature Pack

1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\sp

uninst.exe"
Microsoft Visual C++ 2005

Redistributable-->MsiExec.exe

/X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla

Firefox\uninstall\helper.exe
MP3PowerEncoder-->RunDll32

C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor

.dll,LaunchSetup "C:\Program Files\InstallShield

Installation

Information\{969B3B70-8765-11D5-9809-0050BACBF861}\S

etup.exe" -uninstall
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe

/I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe

/I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
NBC Direct Beta-->MsiExec.exe

/I{C91EF330-F152-44ED-A33A-0F4FF3FAF813}
Netflix Movie Viewer-->MsiExec.exe

/X{BCE72AED-3332-4863-9567-C5DCB9052CA2}
NETGEAR WG311v3 PCI

Adapter-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INT

EL3~1\IDriver.exe

/M{70014586-7BBA-4A92-A610-CDC896C48F8F}
OpenCASE Media Agent-->MsiExec.exe

/I{1771FDC8-D846-4B77-996A-C80DAD42C03F}
PDF Settings-->MsiExec.exe

/I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PowerDVD 5.3-->RunDll32

C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor

.dll,LaunchSetup "C:\Program Files\InstallShield

Installation

Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\S

etup.exe" -uninstall
QuickTime-->MsiExec.exe

/I{8DC42D05-680B-41B0-8878-6C14D24602DB}
SanDisk TransferMate-->RunDll32

C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor

.dll,LaunchSetup "C:\Program Files\InstallShield

Installation

Information\{601C6E14-DF1E-4113-A8C8-F9DB90CB0D88}\S

etup.exe" -l0x9
Security Update for CAPICOM (KB931906)-->MsiExec.exe

/I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe

/X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Step By Step Interactive

Training

(KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuni

nst\spuninst.exe"
Security Update for Step By Step Interactive

Training

(KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuni

nst\spuninst.exe"
Security Update for Windows Internet Explorer 7

(KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spu

ninst\spuninst.exe"
Security Update for Windows Internet Explorer 7

(KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spu

ninst\spuninst.exe"
Security Update for Windows Internet Explorer 7

(KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spu

ninst\spuninst.exe"
Security Update for Windows Internet Explorer 7

(KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spu

ninst\spuninst.exe"
Security Update for Windows Internet Explorer 7

(KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spu

ninst\spuninst.exe"
Security Update for Windows Internet Explorer 7

(KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spu

ninst\spuninst.exe"
Security Update for Windows Internet Explorer 7

(KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spu

ninst\spuninst.exe"
Security Update for Windows Internet Explorer 7

(KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spu

ninst\spuninst.exe"
Security Update for Windows Internet Explorer 7

(KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spu

ninst\spuninst.exe"
Security Update for Windows Media Player 10

(KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$

\spuninst\spuninst.exe"
Security Update for Windows Media Player 11

(KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$

\spuninst\spuninst.exe"
Security Update for Windows Media Player 11

(KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\

spuninst\spuninst.exe"
Security Update for Windows XP

(KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$

\spuninst\spuninst.exe"
Security Update for Windows XP

(KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuni

nst\spuninst.exe"
Security Update for Windows XP

(KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuni

nst\spuninst.exe"
The Rosetta Stone-->C:\WINDOWS\unvise32.exe

C:\Program Files\The Rosetta Stone\TRS

Support\uninstal.log
TweakNow RegCleaner-->"C:\Program Files\TweakNow

RegCleaner\unins000.exe"
Update for Windows XP

(KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$

\spuninst\spuninst.exe"
Update for Windows XP

(KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuni

nst\spuninst.exe"
VideoLAN VLC media player 0.8.6b-->C:\Program

Files\VideoLAN\VLC\uninstall.exe
Windows Media Format 11 runtime-->"C:\Program

Files\Windows Media Player\wmsetsdk.exe"

/UninstallAll
Windows Media Format 11

runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spunins

t\spuninst.exe"
Windows Media Player 10-->MsiExec.exe

/I{33BB4982-DC52-4886-A03B-F4C5C80BEE89}
Windows Media Player 11-->"C:\Program Files\Windows

Media Player\Setup_wm.exe" /Uninstall
Windows Media Player

11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spunins

t.exe"
Windows XP Service Pack

3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\sp

uninst.exe"
WinZip-->"C:\Program Files\WinZip\WINZIP32.EXE"

/uninstall
XviD 1.1 final uninstall-->"C:\Program

Files\XviD\unins000.exe"
XviD MPEG-4 Video

Codec-->C:\WINDOWS\system32\rundll32.exe

setupapi,InstallHinfSection Remove_XviD 132

C:\WINDOWS\INF\xvid.inf

======Security center information======

AV: AVG Anti-Virus Free

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoo

t%\System32\Wbem;C:\Program Files\Common Files\Roxio

Shared\DLLShared;C:\Program

Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3

Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0304
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WS

F;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"PS5ROOT"=C:\Program Files\Roxio\Easy CD Creator

6\PhotoSuite\
"CLASSPATH"=.;C:\Program

Files\Java\jre1.5.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program

Files\Java\jre1.5.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

Hi

My name is Extremeboy (or EB for short), and I will be helping you with your log.

I apologize for the delay in response. We get overwhelmed with logs at times, but we are trying our best to keep up. If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following so I can have a look at the current condition of your machine.

If you do not make a reply in 5 days, we will need to close your topic.

You may want to keep the link to this topic in your favourites. Alternatively, you can click the button at the top bar of this topic and Track this Topic. The topics you are tracking can be found here.

Please take note of some guidelines for this fix:

• Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
• If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
• Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
• Please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.
• Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just post back here so that we know you're still here.

Download and Run OTViewit

• Please download OTViewIt by OldTimer.
• Save it to your desktop.
• Double click on the icon on your desktop.
• Click the "Scan All Users" checkbox.
• Push the button.
• Two reports will open, copy and paste them in a reply here:
• OTViewIt.txt <-- Will be opened
• Extra.txt <-- Will be minimized

Run Kaspersky Online Scanner
Please do a scan with Kaspersky Online Scanner.

This scan is for Internet Explorer only.

If you are using Windows Vista, open your browser by right-clicking on its icon and select Run as administrator to perform this scan.

• Open the Kaspersky Scanner page.
• Click on Accept and install any components it needs.
• The program will install and then begin downloading the latest definition files.
• After the files have been downloaded on the left side of the page in the Scan section select My Computer
• This will start the program and scan your system.
• The scan will take a while, so be patient and let it run.
• Once the scan is complete, click on View scan report
• Now, click on the Save Report as button.
• Save the file to your desktop.
• Copy and paste that information in your next post.

You can refer to this animation by sundavis.

In your next reply please include the following:

• OTViewIt.txt
• Extra.txt
• Kaspersky's Log

Important Note: For other users who are reading this topic,the instructions provided in this topic are for the original topic starter ONLY. Even if you have similar problems or even log entries to those given here, please do not follow the directions, especially those involving specific tools and scripts. Doing so can result in serious damage to your computer. Instead, please start your own topic and feel free to link to any relevant topics as needed.Please Do NOT follow the instructions provided for this topic.

With Regards,
Extremeboy

Hi.

Are you still there?

If you are please follow the instructions in my previous post.

If you still need help, follow the instructions I have given in my response. If you have since had your problem solved, we would appreciate you letting us know so we can close the topic.

Please reply back telling us so. If you don't reply within 5 days the topic will need to be closed.

Thanks for understanding.

With Regards,
Extremeboy

Hello.

Due to Lack of feedback, this topic is now closed.

If you need this topic reopened, please Send Me a Message. In your message please include the address of this thread in your request.
This applies only to the original topic starter.

Everyone else please start a new topic in the Hijackthis-Malware Removal forum.

With Regards,
Extremeboy