This thread's last reply is from April 12, 2009, 12:11 PM UTC. Software, malware, and removal-tool
advice below may be out of date — treat specific steps and download links with caution.
I have tried to post a hijackthis log before but I think you guys were extremely busy, so I am trying again now. My computer is generally running slowly and some music/movie files have been erased somehow. If you could help me sort this out I would be most grateful.
Thanks,
Lloyd.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 오후 12:29:44, on 2009-03-12
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
To access the Uninstall Manager you would do the following:
1. Start HijackThis 2. Click on the Config button 3. Click on the Misc Tools button 4. Click on the Open Uninstall Manager button.
You will now be presented with a screen similar to the one below:
5. Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here on your next reply.
Thanks for your reply, I hope this is correct. Thanks again and I hope to hear from you soon.
Adobe Flash Player 10 ActiveX
Adobe Reader 8.1.3
Adobe® Photoshop® Album Starter Edition 3.0
Apple Mobile Device Support
Apple Software Update
Audacity 1.2.6
Azureus
BBC iPlayer Download Manager
Bonjour
Canon Camera Access Library
Canon Camera Support Core Library
Canon CanoScan Toolbox 4.1
Canon EOS 5D WIA Driver
CANON iMAGE GATEWAY Task for ZoomBrowser EX
Canon Internet Library for ZoomBrowser EX
Canon RAW Image Task for ZoomBrowser EX
Canon Utilities CameraWindow
Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX
Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
Canon Utilities Digital Photo Professional 3.4
Canon Utilities EOS Utility
Canon Utilities MyCamera
Canon Utilities Original Data Security Tools
Canon Utilities PhotoStitch
Canon Utilities Picture Style Editor
Canon Utilities RemoteCapture Task for ZoomBrowser EX
Canon Utilities WFT-E1/E2/E3 Utility
Canon Utilities ZoomBrowser EX
Canon ZoomBrowser EX Memory Card Utility
CanoScan LiDE20,30 Manual
DivX Codec
DivX Converter
DivX Player
DivX Web Player
FLV Player
Free iPod Video Converter 1.26
Google Desktop
Google Toolbar for Internet Explorer
HijackThis 2.0.2
Hotfix for Windows Media Format 11 SDK (KB929399)
Intel(R) Graphics Media Accelerator Driver for Mobile
Intel(R) PROSet/Wireless Software
iTunes
Java(TM) 6 Update 11
Java(TM) 6 Update 7
McAfee SecurityCenter
mDriver
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Word Viewer 2003
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
MobileMe Control Panel
Mozilla Firefox (2.0)
My Web Search (Smiley Central)
OmniPage SE
OpenOffice.org Installer 1.0
Picasa 2
PowerDVD
QuickTime
RealPlayer
Replay Converter 2.8
Replay Media Catcher
Safari
SENS LT56ADW Modem
Sky Player
Skype 3.1
Skype add-on for IE
Skype Plugin Manager
SoundMAX
Synaptics Pointing Device Driver
VideoLAN VLC media player 0.8.6i
Videora iPod Converter 2.19
Winamp
Windows Defender
Windows Internet Explorer 7용 보안 업데이트 (KB938127)
Windows Internet Explorer 7용 보안 업데이트 (KB942615)
Windows Internet Explorer 7용 보안 업데이트 (KB944533)
Windows Internet Explorer 7용 보안 업데이트 (KB950759)
Windows Internet Explorer 7용 보안 업데이트 (KB953838)
Windows Internet Explorer 7용 보안 업데이트 (KB956390)
Windows Internet Explorer 7용 보안 업데이트 (KB958215)
Windows Internet Explorer 7용 보안 업데이트 (KB960714)
Windows Internet Explorer 7용 보안 업데이트 (KB961260)
Windows Internet Explorer 7용 핫픽스 (KB947864)
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 10 보안 업데이트(KB917734)
Windows Media Player 10 보안 업데이트(KB936782)
Windows Media Player 11
Windows Media Player 11
Windows Media Player 11 보안 업데이트(KB936782)
Windows Media Player 11 보안 업데이트(KB954154)
Windows Media Player 11 중요 업데이트(KB959772)
Windows Media Player 11 핫픽스(KB939683)
Windows Media Player 보안 업데이트(KB952069)
Windows XP 보안 업데이트(KB941569)
Windows XP Service Pack 3
Windows XP용 보안 업데이트 (KB923789)
Windows XP용 보안 업데이트 (KB938464)
Windows XP용 보안 업데이트 (KB946648)
Windows XP용 보안 업데이트 (KB950760)
Windows XP용 보안 업데이트 (KB950762)
Windows XP용 보안 업데이트 (KB950974)
Windows XP용 보안 업데이트 (KB951066)
Windows XP용 보안 업데이트 (KB951376)
Windows XP용 보안 업데이트 (KB951376-v2)
Windows XP용 보안 업데이트 (KB951698)
Windows XP용 보안 업데이트 (KB951748)
Windows XP용 보안 업데이트 (KB952954)
Windows XP용 보안 업데이트 (KB953839)
Windows XP용 보안 업데이트 (KB954211)
Windows XP용 보안 업데이트 (KB954459)
Windows XP용 보안 업데이트 (KB954600)
Windows XP용 보안 업데이트 (KB955069)
Windows XP용 보안 업데이트 (KB956391)
Windows XP용 보안 업데이트 (KB956802)
Windows XP용 보안 업데이트 (KB956803)
Windows XP용 보안 업데이트 (KB956841)
Windows XP용 보안 업데이트 (KB957095)
Windows XP용 보안 업데이트 (KB957097)
Windows XP용 보안 업데이트 (KB958644)
Windows XP용 보안 업데이트 (KB958687)
Windows XP용 보안 업데이트 (KB958690)
Windows XP용 보안 업데이트 (KB960225)
Windows XP용 보안 업데이트 (KB960715)
Windows XP용 업데이트 (KB951072-v2)
Windows XP용 업데이트 (KB951978)
Windows XP용 업데이트 (KB955839)
Windows XP용 업데이트 (KB967715)
Windows XP용 핫픽스 (KB952287)
WinRAR archiver
WOW XT and TSXT Filter Driver
Yahoo! Toolbar
OK, I have done as requested I think. Here is the new post:
Thanks.
Adobe Flash Player 10 ActiveX
Adobe Reader 8.1.3
Adobe® Photoshop® Album Starter Edition 3.0
Apple Mobile Device Support
Apple Software Update
Audacity 1.2.6
BBC iPlayer Download Manager
Bonjour
Canon Camera Access Library
Canon Camera Support Core Library
Canon CanoScan Toolbox 4.1
Canon EOS 5D WIA Driver
CANON iMAGE GATEWAY Task for ZoomBrowser EX
Canon Internet Library for ZoomBrowser EX
Canon RAW Image Task for ZoomBrowser EX
Canon Utilities CameraWindow
Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX
Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
Canon Utilities Digital Photo Professional 3.4
Canon Utilities EOS Utility
Canon Utilities MyCamera
Canon Utilities Original Data Security Tools
Canon Utilities PhotoStitch
Canon Utilities Picture Style Editor
Canon Utilities RemoteCapture Task for ZoomBrowser EX
Canon Utilities WFT-E1/E2/E3 Utility
Canon Utilities ZoomBrowser EX
Canon ZoomBrowser EX Memory Card Utility
CanoScan LiDE20,30 Manual
DivX Codec
DivX Converter
DivX Player
DivX Web Player
FLV Player
Free iPod Video Converter 1.26
Google Desktop
Google Toolbar for Internet Explorer
HijackThis 2.0.2
Hotfix for Windows Media Format 11 SDK (KB929399)
Intel(R) Graphics Media Accelerator Driver for Mobile
Intel(R) PROSet/Wireless Software
iTunes
Java(TM) 6 Update 11
Java(TM) 6 Update 7
McAfee SecurityCenter
mDriver
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Word Viewer 2003
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
MobileMe Control Panel
Mozilla Firefox (2.0)
OmniPage SE
OpenOffice.org Installer 1.0
Picasa 2
PowerDVD
QuickTime
RealPlayer
Replay Converter 2.8
Replay Media Catcher
Safari
SENS LT56ADW Modem
Sky Player
Skype 3.1
Skype add-on for IE
Skype Plugin Manager
SoundMAX
Synaptics Pointing Device Driver
VideoLAN VLC media player 0.8.6i
Videora iPod Converter 2.19
Winamp
Windows Defender
Windows Internet Explorer 7용 보안 업데이트 (KB938127)
Windows Internet Explorer 7용 보안 업데이트 (KB942615)
Windows Internet Explorer 7용 보안 업데이트 (KB944533)
Windows Internet Explorer 7용 보안 업데이트 (KB950759)
Windows Internet Explorer 7용 보안 업데이트 (KB953838)
Windows Internet Explorer 7용 보안 업데이트 (KB956390)
Windows Internet Explorer 7용 보안 업데이트 (KB958215)
Windows Internet Explorer 7용 보안 업데이트 (KB960714)
Windows Internet Explorer 7용 보안 업데이트 (KB961260)
Windows Internet Explorer 7용 핫픽스 (KB947864)
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 10 보안 업데이트(KB917734)
Windows Media Player 10 보안 업데이트(KB936782)
Windows Media Player 11
Windows Media Player 11
Windows Media Player 11 보안 업데이트(KB936782)
Windows Media Player 11 보안 업데이트(KB954154)
Windows Media Player 11 중요 업데이트(KB959772)
Windows Media Player 11 핫픽스(KB939683)
Windows Media Player 보안 업데이트(KB952069)
Windows XP 보안 업데이트(KB941569)
Windows XP Service Pack 3
Windows XP용 보안 업데이트 (KB923789)
Windows XP용 보안 업데이트 (KB938464)
Windows XP용 보안 업데이트 (KB946648)
Windows XP용 보안 업데이트 (KB950760)
Windows XP용 보안 업데이트 (KB950762)
Windows XP용 보안 업데이트 (KB950974)
Windows XP용 보안 업데이트 (KB951066)
Windows XP용 보안 업데이트 (KB951376)
Windows XP용 보안 업데이트 (KB951376-v2)
Windows XP용 보안 업데이트 (KB951698)
Windows XP용 보안 업데이트 (KB951748)
Windows XP용 보안 업데이트 (KB952954)
Windows XP용 보안 업데이트 (KB953839)
Windows XP용 보안 업데이트 (KB954211)
Windows XP용 보안 업데이트 (KB954459)
Windows XP용 보안 업데이트 (KB954600)
Windows XP용 보안 업데이트 (KB955069)
Windows XP용 보안 업데이트 (KB956391)
Windows XP용 보안 업데이트 (KB956802)
Windows XP용 보안 업데이트 (KB956803)
Windows XP용 보안 업데이트 (KB956841)
Windows XP용 보안 업데이트 (KB957095)
Windows XP용 보안 업데이트 (KB957097)
Windows XP용 보안 업데이트 (KB958644)
Windows XP용 보안 업데이트 (KB958687)
Windows XP용 보안 업데이트 (KB958690)
Windows XP용 보안 업데이트 (KB960225)
Windows XP용 보안 업데이트 (KB960715)
Windows XP용 업데이트 (KB951072-v2)
Windows XP용 업데이트 (KB951978)
Windows XP용 업데이트 (KB955839)
Windows XP용 업데이트 (KB967715)
Windows XP용 핫픽스 (KB952287)
WinRAR archiver
WOW XT and TSXT Filter Driver
Yahoo! Toolbar
Double-click on mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them fromhereand just double-click on mbam-rules.exe to install.
On the Scanner tab:
Make sure the "Perform Full Scan" option is selected.
Then click on the Scan button.
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)
info.txt logfile of random's system information tool 1.06 2009-03-22 01:17:13
======Uninstall list======
-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DD4F051C-1A2B-4A91-B187-B093C597418C}\setup.exe" -l0x12 anything
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8.1.3-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81300000003}
Adobe® Photoshop® Album Starter Edition 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
Apple Mobile Device Support-->MsiExec.exe /I{162B71B8-8464-4680-A086-601D555B331D}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
BBC iPlayer Download Manager-->MsiExec.exe /I {D466F3D9-510C-4729-B7D4-2E70490E4CDF}
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
Canon Camera Access Library-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\CAL\Uninst.ini"
Canon Camera Support Core Library-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\CSCLIB\Uninst.ini"
Canon CanoScan Toolbox 4.1-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BCE46757-7674-4416-BEDB-68205A60409E}\setup.exe" -l0x9
Canon EOS 5D WIA Driver-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{BB3AB664-D92B-4CB5-8B3E-D841841F4E68} /l1033
CANON iMAGE GATEWAY Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\CRWUnInstall.ini"
Canon Internet Library for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\CIGUnInstall.ini"
Canon RAW Image Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\RAW Image Task\Uninst.ini"
Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC\Uninst.ini"
Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC6\Uninst.ini"
Canon Utilities CameraWindow-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowLauncher\Uninst.ini"
Canon Utilities Digital Photo Professional 3.4-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\Digital Photo Professional\Uninst.ini"
Canon Utilities EOS Utility-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\EOS Utility\Uninst.ini"
Canon Utilities MyCamera-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\MyCamera\Uninst.ini"
Canon Utilities Original Data Security Tools-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\Original Data Security Tools\Uninst.ini"
Canon Utilities PhotoStitch-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\PhotoStitch\Uninst.ini"
Canon Utilities Picture Style Editor-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\Picture Style Editor\Uninst.ini"
Canon Utilities RemoteCapture Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\RemoteCaptureTask DC\Uninst.ini"
Canon Utilities WFT-E1/E2/E3 Utility-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\WFT Utility\Uninst.ini"
Canon Utilities ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\Uninst.ini"
Canon ZoomBrowser EX Memory Card Utility-->"C:\Program Files\Common Files\Canon\UIW\1.4.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX MCU\Uninst.ini"
CanoScan LiDE20,30 Manual-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B360A8E5-C171-4AAE-9777-65B3CDB0072C}\setup.exe" -l0x9
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
FLV Player-->"C:\WINDOWS\FLV Player\uninstall.exe" "/U:C:\Program Files\FLV Player\Uninstall\uninstall.xml"
Free iPod Video Converter 1.26-->"C:\Program Files\Free iPod Video Converter\unins000.exe"
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Intel(R) Graphics Media Accelerator Driver for Mobile-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_2792 PCI\VEN_8086&DEV_2592
Intel(R) PROSet/Wireless Software-->C:\WINDOWS\Installer\iProInst.exe
iTunes-->MsiExec.exe /I{C26B06A9-27BB-45B0-9873-9C623EC2BA38}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
McAfee SecurityCenter-->C:\Program Files\McAfee\MSC\mcuninst.exe
mDriver-->MsiExec.exe /I{28DA872A-0848-48CF-B749-19A198157A2A}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Word Viewer 2003-->MsiExec.exe /I{90850409-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
MobileMe Control Panel-->MsiExec.exe /I{C7EEC93A-2A61-4B1E-B696-A264680A889D}
Mozilla Firefox (2.0)-->C:\Program Files\Mozilla Firefox\uninstall\uninst.exe
OmniPage SE-->MsiExec.exe /I{6249C22D-E6A8-407B-BA8B-40298848ED94}
OpenOffice.org Installer 1.0-->MsiExec.exe /X{0D0BA845-A400-4B54-BF77-470235736954}
Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Replay Converter 2.8-->C:\WINDOWS\iun6002.exe "C:\Program Files\Replay Converter\iruninRCV.ini"
Replay Media Catcher-->"C:\WINDOWS\Replay Media Catcher\uninstall.exe" "/U:C:\Program Files\Replay Media Catcher\Uninstall\uninstall.xml"
Safari-->MsiExec.exe /I{D90AFDE3-3E67-407A-ACA8-F0BAAD012F08}
SENS LT56ADW Modem-->agrsmdel
Sky Player-->MsiExec.exe /X{4B41AE13-BA0E-4328-8E83-AD2A0BEB33EB}
Skype 3.1-->"C:\Program Files\Skype\Phone\unins000.exe"
Skype add-on for IE-->rundll32 "C:\Program Files\Skype\Phone\IEPlugin\SkypeIEPlugin.dll",FriendlyUnregisterServer 0
Skype Plugin Manager-->MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}
SoundMAX-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe" -l0x12 -removeonly
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
VideoLAN VLC media player 0.8.6i-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Videora iPod Converter 2.19-->C:\Program Files\Red Kawa\Video Converter\uninstaller.exe
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
Windows Internet Explorer 7용 보안 업데이트 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Windows Internet Explorer 7용 보안 업데이트 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Windows Internet Explorer 7용 보안 업데이트 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Windows Internet Explorer 7용 보안 업데이트 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Windows Internet Explorer 7용 보안 업데이트 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Windows Internet Explorer 7용 보안 업데이트 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Windows Internet Explorer 7용 보안 업데이트 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Windows Internet Explorer 7용 보안 업데이트 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Windows Internet Explorer 7용 보안 업데이트 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Windows Internet Explorer 7용 핫픽스 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 10 보안 업데이트(KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Windows Media Player 10 보안 업데이트(KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Windows Media Player 11 보안 업데이트(KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Windows Media Player 11 보안 업데이트(KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Windows Media Player 11 중요 업데이트(KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Windows Media Player 11 핫픽스(KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Media Player 보안 업데이트(KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Windows XP 보안 업데이트(KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Windows XP용 보안 업데이트 (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Windows XP용 보안 업데이트 (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Windows XP용 업데이트 (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Windows XP용 업데이트 (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Windows XP용 업데이트 (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Windows XP용 업데이트 (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Windows XP용 핫픽스 (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
WOW XT and TSXT Filter Driver-->MsiExec.exe /X{AAB9478F-DE6B-498B-9420-21E1F1AC700D}
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe
======Security center information======
AV: McAfee VirusScan
FW: McAfee Personal Firewall
======System event log======
Computer Name: [redacted]
Event Code: 4201
Message: \DEVICE\TCPIP_{3B7DDD5D-149B-415E-B21B-CEFD9E2008F3} 네트워크 어댑터가 네트워크에 연결되어 있는 것을 시스템이 검색했으며,
네트워크 어댑터를 통하여 정상 작업을 시작했습니다.
Record Number: 683148
Source Name: Tcpip
Time Written: 20090303182848.000000+060
Event Type: 정보
User:
Computer Name: [redacted]
Event Code: 4201
Message: \DEVICE\TCPIP_{3B7DDD5D-149B-415E-B21B-CEFD9E2008F3} 네트워크 어댑터가 네트워크에 연결되어 있는 것을 시스템이 검색했으며,
네트워크 어댑터를 통하여 정상 작업을 시작했습니다.
Record Number: 683147
Source Name: Tcpip
Time Written: 20090303182833.000000+060
Event Type: 정보
User:
Computer Name: [redacted]
Event Code: 10005
Message: 다음 서버를 실행하기 위해 "" 인수를 가진 gusvc 서비스를 시작하려고
할 때 DCOM에 "%1058" 오류가 발생했습니다:
{89DAE4CD-9F17-4980-902A-99BA84A8F5C8}
Record Number: 683146
Source Name: DCOM
Time Written: 20090303182829.000000+060
Event Type: 오류
User: LLOYD-FB98BD48B\Owner
Computer Name: [redacted]
Event Code: 4201
Message: \DEVICE\TCPIP_{3B7DDD5D-149B-415E-B21B-CEFD9E2008F3} 네트워크 어댑터가 네트워크에 연결되어 있는 것을 시스템이 검색했으며,
네트워크 어댑터를 통하여 정상 작업을 시작했습니다.
Record Number: 683145
Source Name: Tcpip
Time Written: 20090303182813.000000+060
Event Type: 정보
User:
Computer Name: [redacted]
Event Code: 7036
Message: McAfee SystemGuards 서비스가 실행 상태로 들어갔습니다.
Record Number: 683144
Source Name: Service Control Manager
Time Written: 20090303182619.000000+060
Event Type: 정보
User:
=====Application event log=====
Computer Name: [redacted]
Event Code: 7
Message: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>(으)로부터의 제 3 루트 목록 순서 숫자의 성공적인 자동 업데이트 검색
Record Number: 5
Source Name: crypt32
Time Written: 20090216185305.000000+060
Event Type: 정보
User:
Computer Name: [redacted]
Event Code: 0
Message:
Record Number: 4
Source Name: KService
Time Written: 20090216185305.000000+060
Event Type: 정보
User:
Computer Name: [redacted]
Event Code: 7
Message: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>(으)로부터의 제 3 루트 목록 순서 숫자의 성공적인 자동 업데이트 검색
Record Number: 3
Source Name: crypt32
Time Written: 20090216185257.000000+060
Event Type: 정보
User:
Computer Name: [redacted]
Event Code: 0
Message:
Record Number: 2
Source Name: McAfee SiteAdvisor Service
Time Written: 20090216185244.000000+060
Event Type: 정보
User:
Computer Name: [redacted]
Event Code: 1
Message:
Record Number: 1
Source Name: Bonjour Service
Time Written: 20090216185241.000000+060
Event Type: 정보
User:
Logfile of random's system information tool 1.06 (written by random/random)
Run by [redacted] at 2009-03-22 01:16:46
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 5 GB (8%) free of 62 GB
Total RAM: 1014 MB (47% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 오전 1:17:09, on 2009-03-22
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-03-08 312928]
Download ERUNT from Derfisch or MVPS and save it to your desktop.
Please follow Step 4 onwards of the Installing & Using ERUNT to back up your registry. Skip Step 19 for now.
Please download the OTMoveIt3 by OldTimer.
Save it to your desktop.
Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
:files
C:\Documents and Settings\Owner.LLOYD-FB98BD48B\Application Data\Azureus
C:\Program Files\Azureus
C:\Program Files\LimeWire
Return to OTMoveIt3, right click in the "Paste List of Files/Folders to Move" window (under the yellow bar) and choose Paste.
Click the red Moveit! button.
Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
Close OTMoveIt3
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.
I have tried to do as you said and have installed ERUNT and OTMoveIt! I am having problems with the MoveIt programme. I copied and pasted the items you said into the box for items to be moved amd then pressed the red MoveIt icon. The programme starts to do something but then freezes, I can't seem to get rid of the egg-timer icon when on the MoveIt screen. I have waited a while but nothing seems to happen. I have now closed it down. What should I do next?
Sorry for the delay I've had some difficulty logging in. Anyway here is the MoveIT3 log:
========== FILES ==========
File/Folder C:\Documents and Settings\Owner.LLOYD-FB98BD48B\Application Data\Azureus not found.
File/Folder C:\Program Files\Azureus not found.
File/Folder C:\Program Files\LimeWire not found.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DriverCure not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\"Authentication Packages"|hex(7):6d,73,76,31,5f,30,00,00 /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Program Files\Azureus\Azureus.exe not found.
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Program Files\LimeWire\LimeWire.exe not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\OWNER~1.LLO\LOCALS~1\Temp\~DF87FB.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\OWNER~1.LLO\LOCALS~1\Temp\~DFB9A.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\mcafee_gUMDjDrjGDfxEci scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\mcmsc_T62wbLL5uT1DDpR scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\mcmsc_xUP6SwwcKaWY2Jl scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_7ac.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_7d4.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_6QxC8fs5TDbG3O1 scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_C9Dd9M0ehmbdHVj scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_o3tA2l1VenmKStw scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_tTCeLsCfPwCHJAI scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_Y0F9ANUZpOvENat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_yrSVnrJuwg5Fxhe scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\sqlite_ZJI3o67kL8dJFwv scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
OTMoveIt3 by OldTimer - Version 1.0.9.0 log created on 03232009_190848
Also the Rsit log:
Logfile of random's system information tool 1.06 (written by random/random)
Run by [redacted] at 2009-03-26 08:47:26
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 9 GB (14%) free of 62 GB
Total RAM: 1014 MB (31% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 오전 8:47:31, on 2009-03-26
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-03-08 312928]
I am in the process of running the scan as requested but I was just wondering, I have an external hard-drive that has had some problems too, do I need to connect this whilst running these scans or not? It may be a dumb question but I'm not sure....
✨ Ask AI about this thread
No ads, no affiliate links — generated on request from this thread's own
archived content, not written by forum staff. Never run a scan/removal tool
as a self-service step if the original thread describes it being done under
a helper's direct supervision, and don't include your name, email, or other
personal details in a follow-up question. See our privacy page
for details on how this works.
