Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hello and thanks in advance,
I can not delete OIN or Burn4Free. I keep getting popups. I have tried the OINuninstaller and various spyware removers(Spybot S&D, Ad-Aware) in and out of safe mode. Nothinng has gotten rid of it. I can't even run a media program. I followed directions from tech guys at another forum and it hasn't helped.
tried hosts.zip with hostsXpert with combofix.exe

Hiya Ghoti811,
Can you provide us with a link to the advice given on the other forum.
Hopefully someone here can offer alternative methods to help you out.
Thankyou

Can you open spybot and click on "mode" then click on "advanced mode", click "yes".
In the options that now appear on the bottom left click on "tools" > "system startup" click on "export" and save the text file to your desktop. Also click on "uninstal info" and export this text file to your desktop also.
Can you copy and paste the contents of these text documents into your next post please.

As you requested:
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2006-08-29 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-09-08 Includes\Cookies.sbi
2006-09-08 Includes\Dialer.sbi
2006-09-08 Includes\Hijackers.sbi
2006-09-08 Includes\Keyloggers.sbi
2006-09-08 Includes\Malware.sbi
2006-09-08 Includes\PUPS.sbi
2006-09-08 Includes\Revision.sbi
2006-09-08 Includes\Security.sbi
2006-09-08 Includes\Spybots.sbi
2005-02-17 Includes\Tracks.uti
2006-09-08 Includes\Trojans.sbiLocated: HK_LM:Run, Adobe Photo Downloader
command: "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
file: C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
size: 63712
MD5: de3c34b4748d389368c2b7a691072200Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 40048
MD5: 03ab10bec5f849176d98219899365c41Located: HK_LM:Run, Apoint
command: C:\Program Files\Apoint\Apoint.exe
file: C:\Program Files\Apoint\Apoint.exe
size: 167936
MD5: 79832e8573fb50ca10696468a294b52fLocated: HK_LM:Run, BCMSMMSG
command: BCMSMMSG.exe
file: C:\WINDOWS\BCMSMMSG.exe
size: 233472
MD5: ddcaed8f16efeace7b076ed4a6e46b18Located: HK_LM:Run, IntelliPoint
command: "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
file: C:\Program Files\Microsoft IntelliPoint\ipoint.exe
size: 842584
MD5: 45a8eb407b538bf90a3416f04b8be715Located: HK_LM:Run, iTunesHelper
command: "C:\Program Files\iTunes\iTunesHelper.exe"
file: C:\Program Files\iTunes\iTunesHelper.exe
size: 256576
MD5: dd4e5bff3b6d0a2616eb859c9a1f79b0Located: HK_LM:Run, MMTray
command: "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
file: C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
size: 180224
MD5: e68c624e15a25b24ea984e1fcfa361cbLocated: HK_LM:Run, NeroFilterCheck
command: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
file: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
size: 233472
MD5: 3d1e8b544f812db7e10c812021280a2fLocated: HK_LM:Run, NvCplDaemon
command: RUNDLL32.exe C:\WINDOWS\System32\NvCpl.dll,NvStartup
file: C:\WINDOWS\system32\RUNDLL32.exe
size: 33280
MD5: da285490bbd8a1d0ce6623577d5ba1ffLocated: HK_LM:Run, nwiz
command: nwiz.exe /installquiet
file: C:\WINDOWS\system32\nwiz.exe
size: 933888
MD5: f77d13da80ed88d3689953f5a6f251e4Located: HK_LM:Run, PCMService
command: "C:\Program Files\Dell\Media Experience\PCMService.exe"
file: C:\Program Files\Dell\Media Experience\PCMService.exe
size: 348258
MD5: a36f007c4e0ad8871af07682e19453a4Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 294912
MD5: 19c9b72ca3a5edc527023a5cc96d6b17Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
file: C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
size: 132496
MD5: 83eeef4c2376519a4adcf98e9f6d0cc2Located: HK_LM:Run, TkBellExe
command: "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
file: C:\Program Files\Common Files\Real\Update_OB\realsched.exe
size: 185896
MD5: 1eda1c63e0d2ae1aebdf98083454079cLocated: HK_LM:Run, zSPGuard
command: c:\program files\pjw\spguard\spguard.exe /s
file:Located: HK_LM:RunOnceEx,
command:
file:Located: HK_CU:Run, BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
command: "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
file: C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
size: 155648
MD5: 1c3d69a98916fb3ebb4c785d60f5e54bLocated: HK_CU:Run, ctfmon.exe
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996a38c0b0cf151c2140ae29fc8Located: HK_CU:Run, Iconoid
command: "C:\Program Files\Iconoid\iconoid.exe"
file: C:\Program Files\Iconoid\iconoid.exe
size: 354304
MD5: 97a8698b7e545870d7dc05264330932cLocated: HK_CU:Run, swg
command: C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
file: C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
size: 163576
MD5: f92954cc52283d5d91056ad8afa99a86Located: HK_CU:Run, updateMgr
command: C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
file:Located: System.ini, crypt32chain
command: crypt32.dll
file: crypt32.dllLocated: System.ini, cryptnet
command: cryptnet.dll
file: cryptnet.dllLocated: System.ini, cscdll
command: cscdll.dll
file: cscdll.dllLocated: System.ini, ScCertProp
command: wlnotify.dll
file: wlnotify.dllLocated: System.ini, Schedule
command: wlnotify.dll
file: wlnotify.dllLocated: System.ini, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dllLocated: System.ini, SensLogn
command: WlNotify.dll
file: WlNotify.dllLocated: System.ini, termsrv
command: wlnotify.dll
file: wlnotify.dllLocated: System.ini, WgaLogon
command:
file:Located: System.ini, wlballoon
command: wlnotify.dll
file: wlnotify.dll

Thanks for the startup list. I will still need to see the uninstall list.
Can you switch off or uninstall spguard as it may prevent any changes we need to make.
I dont see an anti-virus program listed, if you haven't got one, download and install avast:
Once downloaded, install it and when requested "schedule a boot-time scan" then when prompted reboot your machine.
Can you note down what it detects and quarantine each as it finds them.
In your next post give me the uninstall log and what avast detects.
Thanks

since installin avast my computer has gone haywire. nothing is recognized. i cant open add/remove.
Here you go. thanks again. hope this is everything you asked for.
AVAST SCAN:
09/22/2007 18:18
Scan of all local drives
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\863FF99F-DA5A-4F4B-A426-379F80\1BA6DA36-6E17-4BAC-A337-480E2E is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\9222F71D-9616-4144-8B32-5EE526\2475A8AB-468A-4891-BE41-999C0B is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\9CF39CFC-258F-476B-A315-EBC4C1\15DE7D60-09E3-4AF9-8887-F1382A is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\9CF39CFC-258F-476B-A315-EBC4C1\9DAE9584-6C30-4A45-B107-B980B3 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\9CF39CFC-258F-476B-A315-EBC4C1\F9F0E3B6-3C58-4E3F-BD08-07F223 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\A5A17F89-AECC-449B-A9C8-947D20\2EFDD671-7F52-4677-A02F-FEA0E1 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\ABDBF439-00C1-4933-80EF-B07A19\3B475771-4D31-45AA-9E6E-6A32FB is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\B5579673-037C-40FC-9D4E-CDF320\4CED4DA9-6CF6-4EFB-9559-D2CD0C is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\BA9174AA-1333-435D-93D3-F70DEC\DD2D75B7-861F-4929-8BAD-BCB567 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\EB9ECF59-4C94-4123-B4D3-6CFE75\19C5EE5B-82C8-4D6D-8819-C346ED is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\EB9ECF59-4C94-4123-B4D3-6CFE75\8C5C7024-9860-4A00-ACA6-EF2166 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\F0400DB2-5F2F-4E79-B6FA-848BA4\EF934940-43D4-4A74-92E0-4ABD58 is infected by Win32:Trojan-gen. {Other}, Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\F89778C3-0D32-4631-93A2-873AB4\763A877C-C9C2-4421-A9E0-24DA66 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\F89778C3-0D32-4631-93A2-873AB4\BFDC76AE-DF45-4E7B-929B-6ECC38 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\F89778C3-0D32-4631-93A2-873AB4\D89D5F4C-67CB-4584-8BBC-EDB652 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sunbelt Software\CounterSpy\Quarantine\FA027007-F895-43FE-AD60-2332E7\1747E6F1-4355-4144-8BE6-946F72 is infected by Win32:Adware-gen. [Adw], Moved to chest
File C:\Program Files\outlook\outlook.exe is infected by Win32:VB-IE [Wrm], Moved to chest
File C:\Program Files\outlook\v.tmp is infected by Win32:VB-IE [Wrm], Moved to chest
File C:\RECYCLER\S-1-5-21-1355252024-1357978302-3836124996-1008\Dc3\Quarantine\C\Program Files\Internet Explorer\lavu.dll.vir is infected by Win32:Small-AHY [Trj], Moved to chest
File C:\RECYCLER\S-1-5-21-1355252024-1357978302-3836124996-1008\Dc3\Quarantine\C\Program Files\Movie Maker\hokeqori4444.dll.vir is infected by Win32:Adloader-KH [Trj], Moved to chest
File C:\RECYCLER\S-1-5-21-1355252024-1357978302-3836124996-1008\Dc3\Quarantine\C\Program Files\Movie Maker\hokeqori83122.dll.vir is infected by Win32:Adloader-KH [Trj], Moved to chest
File C:\RECYCLER\S-1-5-21-1355252024-1357978302-3836124996-1008\Dc3\Quarantine\C\WINDOWS\SYSTEM32\A1\mid2dll.exe.vir is infected by Win32:Trojano-2873 [Trj], Moved to chest
File C:\RECYCLER\S-1-5-21-1355252024-1357978302-3836124996-1008\Dc3\Quarantine\C\WINDOWS\SYSTEM32\winlog.exe.vir is infected by Win32:SdBot-gen44 [Trj], Moved to chest
File C:\RECYCLER\S-1-5-21-1355252024-1357978302-3836124996-1008\Dc3\Quarantine\C\WINDOWS\tk58.exe.vir is infected by Win32:Small-AHY [Trj], Moved to chest
File C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2\A0000289.dll is infected by Win32:Small-AHY [Trj], Moved to chest
File C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2\A0000290.dll is infected by Win32:Adloader-KH [Trj], Moved to chest
File C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2\A0000291.dll is infected by Win32:Adloader-KH [Trj], Moved to chest
File C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2\A0000292.exe is infected by Win32:Trojano-2873 [Trj], Moved to chest
File C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2\A0000303.exe is infected by Win32:SdBot-gen44 [Trj], Moved to chest
File C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2\A0000304.exe is infected by Win32:Small-AHY [Trj], Moved to chest
File C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP3\A0003298.exe is infected by Win32:VB-IE [Wrm], Moved to chest
File C:\WINDOWS\SYSTEM32\GRB3\rwddr2SD.exe\[UPX] is infected by Win32:Small-GWM [Trj], Moved to chestNumber of searched folders: 8750
Number of tested files: 108227
Number of infected files: 32
UNINSTALL: (I cant find spguard... no folder and not in add/remove)--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2006-08-29 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-09-08 Includes\Cookies.sbi
2006-09-08 Includes\Dialer.sbi
2006-09-08 Includes\Hijackers.sbi
2006-09-08 Includes\Keyloggers.sbi
2006-09-08 Includes\Malware.sbi
2006-09-08 Includes\PUPS.sbi
2006-09-08 Includes\Revision.sbi
2006-09-08 Includes\Security.sbi
2006-09-08 Includes\Spybots.sbi
2005-02-17 Includes\Tracks.uti
2006-09-08 Includes\Trojans.sbi(AddressBook)
Adobe® Photoshop® Album Starter Edition 3.2 3.2.0 (Adobe® Photoshop® Album Starter Edition 3.2)
install location: C:\Program Files\Adobe\Photoshop Album Starter Edition\
uninstall cmd: MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
publisher: http://www.adobe.com
readme: C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\readme.txtAVIcodec (remove only) (AVIcodec)
uninstall cmd: "C:\Program Files\AVIcodec\uninst.exe"BCM V.92 56K Modem (BCM V.92 56K Modem)
uninstall cmd: C:\WINDOWS\BCMSMU.exe quiet(Branding)
(Burn4Free)
Burn4Free Toolbar 3.3.0.0 (Burn4Free Toolbar)
version (major): 1
version (minor): 9
install location: C:\Program Files\Burn4Free Toolbar
uninstall cmd: "C:\WINDOWS\Burn4Free_Toolbar_Uninstaller_4045.exe" _?=C:\Program Files\Burn4Free Toolbar(Connection Manager)
Dell Digital Jukebox Driver (Dell Digital Jukebox Driver)
uninstall cmd: C:\Program Files\Dell\Digital Jukebox Drivers\DrvUnins.exe /s(DirectAnimation)
(DirectDrawEx)
DirectVobSub (remove only) (DirectVobSub)
uninstall cmd: "C:\Program Files\DirectVobSub\uninstall.exe"DVD Shrink 3.2 (DVD Shrink_is1)
install location: C:\Program Files\DVD Shrink\
uninstall cmd: "C:\Program Files\DVD Shrink\unins000.exe"
publisher: DVD Shrink
help link: http://www.dvdshrink.org(DXM_Runtime)
Folder Marker Pro v 2.0 2.0 (Folder Marker_is1)
install location: C:\Program Files\Folder Marker\
uninstall cmd: "C:\Program Files\Folder Marker\unins000.exe"
publisher: ArcticLine Software
help link: http://www.FolderMarker.com/contact...(Fontcore)
getPlus(R)_dll (getPlus(R)_dll)
uninstall cmd: rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\inf\GETPLUSd.INF, DefaultUninstallHijackThis 1.99.1 1.99.1 (HijackThis)
publisher: Soeperman Enterprises Ltd.HP Document Viewer 7.0 7.0 (HP Document Viewer)
uninstall cmd: C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
publisher: HP
help link: http://www.hp.com/supportHP Imaging Device Functions 7.0 7.0 (HP Imaging Device Functions)
uninstall cmd: C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
publisher: HP
help link: http://www.hp.com/supportHP Photosmart Premier Software 6.5 6.5 (HP Photo & Imaging)
uninstall cmd: C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
publisher: HP
help link: http://www.hp.com/supportHP Solution Center 7.0 7.0 (HP Solution Center & Imaging Support Tools)
uninstall cmd: C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
publisher: HP
help link: http://www.hp.com/supportHP Customer Participation Program 7.0 7.0 (HPExtendedCapabilities)
uninstall cmd: C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
publisher: HP
help link: http://www.hp.com/supportOCR Software by I.R.I.S 7.0 7.0 (HPOCR)
uninstall cmd: C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
publisher: HP
help link: http://www.hp.com/supportIconoid Version 3.8.5 (Iconoid_is1)
uninstall cmd: "C:\Program Files\Iconoid\unins000.exe"
publisher: SillySot Software
help link: http://www.sillysot.com(ICW)
Microsoft Internationalized Domain Names Mitigation APIs (IDNMitigationAPIs)
install date: 20070919
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
publisher: Microsoft Corporation(IE40)
(IE4Data)
(IE5BAKEX)
(IEData)
(InstallShield Uninstall Information)
Windows XP Hotfix - KB873339 20041117.092459 (KB873339)
uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB884016)
Windows XP Hotfix - KB884020 20040813.164454 (KB884020)
uninstall cmd: C:\WINDOWS\$NtUninstallKB884020$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB884267)
(KB885353)
Windows XP Hotfix - KB885835 20041027.181713 (KB885835)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...Windows XP Hotfix - KB885836 20041028.173203 (KB885836)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...Windows XP Hotfix - KB886185 20041021.090540 (KB886185)
uninstall cmd: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB886612)
(KB887078)
Windows XP Hotfix - KB887472 20041014.162858 (KB887472)
uninstall cmd: C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB887626)
Windows XP Hotfix - KB888302 20041207.111426 (KB888302)
uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB888656)
(KB889858)
Security Update for Windows XP (KB890046) 1 (KB890046)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...Windows XP Hotfix - KB890859 1 (KB890859)
install date: 20060920
uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB891122)
Windows XP Hotfix - KB891781 20050110.165439 (KB891781)
uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB892313)
(KB893240)
(KB893241)
Security Update for Windows XP (KB893756) 1 (KB893756)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB893803)
Windows Installer 3.1 (KB893803) 3.1 (KB893803v2)
uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://go.microsoft.com/fwlink/?Lin...(KB895181)
(KB895316)
(KB895572)
Security Update for Windows XP (KB896358) 1 (KB896358)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...Security Update for Windows XP (KB896423) 1 (KB896423)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...Security Update for Windows XP (KB896424) 1 (KB896424)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...Security Update for Windows XP (KB896428) 1 (KB896428)
install date: 20060920
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB897586)
Update for Windows XP (KB898461) 1 (KB898461)
install date: 20060917
uninstall cmd: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB898549)
Security Update for Windows XP (KB899587) 1 (KB899587)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...Security Update for Windows XP (KB899591) 1 (KB899591)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(KB900399)
Update for Windows XP (KB900485) 2 (KB900485)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB900725) 1 (KB900725)
install date: 20060920
uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB901017) 1 (KB901017)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB901214) 1 (KB901214)
install date: 20060920
uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...(KB902344)
Security Update for Windows XP (KB902400) 1 (KB902400)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB904706) 2 (KB904706)
install date: 20070624
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB904942) 2 (KB904942)
install date: 20070919
uninstall cmd: "C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB905414) 1 (KB905414)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB905749) 1 (KB905749)
install date: 20060920
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...(KB907658)
Security Update for Windows XP (KB908519) 1 (KB908519)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB908531) 2 (KB908531)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB910437) 1 (KB910437)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB911280) 2 (KB911280)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB911562) 1 (KB911562)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows Media Player (KB911564) (KB911564)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=...(KB911565)
(KB911854)
Security Update for Windows XP (KB911927) 1 (KB911927)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB912919) 1 (KB912919)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB913580) 1 (KB913580)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB914388) 1 (KB914388)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB914389) 1 (KB914389)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Hotfix for Windows XP (KB914440) 12 (KB914440)
install date: 20070919
uninstall cmd: "C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Hotfix for Windows XP (KB915865) 10 (KB915865)
install date: 20070919
uninstall cmd: "C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB916595) 1 (KB916595)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB917159) 1 (KB917159)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB917344) 1 (KB917344)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB917422) 1 (KB917422)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows Media Player 10 (KB917734) (KB917734_WMP10)
install date: 20060924
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=...Security Update for Windows XP (KB917953) 1 (KB917953)
install date: 20070608
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB918118) 1 (KB918118)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB919007) 1 (KB919007)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB920213) 1 (KB920213)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB920670) 1 (KB920670)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB920683) 1 (KB920683)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB920685) 1 (KB920685)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB920872) 1 (KB920872)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB921398) 1 (KB921398)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB921503) 1 (KB921503)
install date: 20070818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB921883) 1 (KB921883)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB922582) 1 (KB922582)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB922616) 1 (KB922616)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB922819) 1 (KB922819)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB923191) 1 (KB923191)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB923414) 1 (KB923414)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB923694) 1 (KB923694)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Step By Step Interactive Training (KB923723) 20050502.101010 (KB923723)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/kb/923723Security Update for Windows XP (KB923980) 1 (KB923980)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB924191) 1 (KB924191)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB924270) 1 (KB924270)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB924496) 1 (KB924496)
install date: 20070624
uninstall cmd: "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB924667) 1 (KB924667)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows Media Player 6.4 (KB925398) (KB925398_WMP64)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=...Security Update for Windows XP (KB925902) 1 (KB925902)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Hotfix for Windows XP (KB926239) 2 (KB926239)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB926255) 1 (KB926255)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB926436) 1 (KB926436)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB927779) 1 (KB927779)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB927802) 1 (KB927802)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB927891) 3 (KB927891)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB928090) 1 (KB928090)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallKB928090$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB928255) 1 (KB928255)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB928843) 1 (KB928843)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB929123) 1 (KB929123)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Hotfix for Windows Media Format 11 SDK (KB929399) (KB929399)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=...Security Update for Windows XP (KB929969) 1 (KB929969)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB930178) 1 (KB930178)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB930916) 1 (KB930916)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB931261) 1 (KB931261)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB931768) 1 (KB931768)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallKB931768$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB931784) 1 (KB931784)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB931836) 1 (KB931836)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB932168) 1 (KB932168)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB933360) 1 (KB933360)
install date: 20070830
uninstall cmd: "C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB933566) 1 (KB933566)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB933566$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB935839) 1 (KB935839)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB935840) 1 (KB935840)
install date: 20070626
uninstall cmd: "C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB936021) 1 (KB936021)
install date: 20070818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB936357) 1 (KB936357)
install date: 20070711
uninstall cmd: "C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows Media Player 11 (KB936782) (KB936782_WMP11)
install date: 20070817
uninstall cmd: "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=...Security Update for Windows XP (KB937143) 1 (KB937143)
install date: 20070919
uninstall cmd: "C:\WINDOWS\$NtUninstallKB937143$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB938127) 1 (KB938127)
install date: 20070817
uninstall cmd: "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Update for Windows XP (KB938828) 1 (KB938828)
install date: 20070818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Security Update for Windows XP (KB938829) 1 (KB938829)
install date: 20070817
uninstall cmd: "C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=9...Hotfix for Windows Media Player 11 (KB939683) (KB939683)
install date: 20070905
uninstall cmd: "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=...Latin Translator (Latin Translator_is1)
uninstall cmd: "C:\Program Files\Latin Translator\unins000.exe"
publisher: Paul Henderson
help link: www.pittville.demon.co.ukMicrosoft .NET Framework 1.1 Hotfix (KB928366) (M928366)
uninstall cmd: "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"Malwarebytes' RogueRemover 1.22 (Malwarebytes' RogueRemover FREE_is1)
install date: 20070919
install location: C:\Program Files\RogueRemover FREE\
uninstall cmd: "C:\Program Files\RogueRemover FREE\unins000.exe"
publisher: Malwarebytes
help link: http://www.malwarebytes.orgMediaMonkey 2.5 2.5 (MediaMonkey_is1)
install location: C:\Program Files\MediaMonkey\
uninstall cmd: "C:\Program Files\MediaMonkey\unins000.exe"
publisher: Ventis Media Inc.
help link: http://www.mediamonkey.comMicrosoft .NET Framework 1.1 (Microsoft .NET Framework 1.1 (1033))
uninstall cmd: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm(Microsoft Interactive Training)
uninstall cmd: C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu(Microsoft NetShow Player 2.0)
(MobileOptionPack)
Mozilla Firefox (2.0.0.6) 2.0.0.6 (en-US) (Mozilla Firefox (2.0.0.6))
install location: C:\Program Files\Mozilla Firefox
uninstall cmd: C:\Program Files\Mozilla Firefox\uninstall\helper.exe
publisher: Mozilla
comments: Mozilla FirefoxMozilla Firefox (2.0.0.7) 2.0.0.7 (en-US) (Mozilla Firefox (2.0.0.7))
install location: C:\PROGRA~1\Mozilla Firefox
uninstall cmd: C:\PROGRA~1\Mozilla Firefox\uninstall\helper.exe
publisher: Mozilla
comments: Mozilla Firefox(MPlayer2)
Microsoft Compression Client Pack 1.0 for Windows XP 1 (MSCompPackV1)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://go.microsoft.com/fwlink/?Lin...(MSI30-Beta1)
(MSI30-Beta2)
(MSI30-KB884016)
(MSI30-RC1)
(MSI30-RC2)
(MSI30a-KB884016)
(MSI31-Beta)
(MSI31-RC1)
(MsJavaVM)
SureThing CD Labeler 4 SE (MVApplication1)
uninstall cmd: C:\WINDOWS\mvuninst\App1\mvuninst.exe "SureThing CD Labeler 4 SE"MyWiki Toolbar (MyWiki Toolbar)
uninstall cmd: C:\PROGRA~1\MyWiki\UNWISE.exe C:\PROGRA~1\MyWiki\INSTALL.LOG
help link:(Nero - Burning Rom!UninstallKey)
uninstall cmd: C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL(NeroMediaHome!UninstallKey)
uninstall cmd: C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL(NeroRecode!UninstallKey)
uninstall cmd: C:\WINDOWS\UNRecode.exe /UNINSTALL(NeroShowTime!UninstallKey)
uninstall cmd: C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL(NeroVision!UninstallKey)
uninstall cmd: C:\WINDOWS\UNNeroVision.exe /UNINSTALL(NetMeeting)
Microsoft National Language Support Downlevel APIs (NLSDownlevelMapping)
install date: 20070919
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
publisher: Microsoft CorporationNVIDIA Drivers (NVIDIA Drivers)
uninstall cmd: C:\WINDOWS\System32\nvudisp.exe UninstallGUI(OutlookExpress)
(PCHealth)
uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.infPDF reDirect (remove only) v2.1.11 (PDF reDirect)
uninstall cmd: C:\Program Files\PDF reDirect\Uninstall.exe
publisher: EXP Systems(RealJukebox 1.0)
uninstall cmd: C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0RealPlayer (RealPlayer 6.0)
uninstall cmd: C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0(RecordNow.exe)
uninstall cmd: C:\WINDOWS\System32\\MSIEXEC.exe /x {9541FED0-327F-4df0-8B96-EF57EF622F19}(SchedulingAgent)
Shockwave (Shockwave)
uninstall cmd: C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\UNWISE.exe C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\Install.logAdobe Flash Player 9 ActiveX 9 (ShockwaveFlash)
uninstall cmd: C:\WINDOWS\System32\Macromed\Flash\UninstFl.exe -q
publisher: Adobe Systems
help link: http://www.adobe.com/go/flashplayer...Spybot - Search & Destroy 1.4 1.4 (Spybot - Search & Destroy_is1)
install location: C:\Program Files\Spybot - Search & Destroy\
uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
publisher: Safer Networking LimitedKaren's Snooper (ST6UNST #1)
uninstall cmd: C:\WINDOWS\st6unst.exe -n "C:\Program Files\Snoop\ST6UNST.LOG"Karen's URL Discombobulator (ST6UNST #2)
uninstall cmd: C:\WINDOWS\st6unst.exe -n "C:\Program Files\Discombobulator\ST6UNST.LOG"Karen's Window Watcher (ST6UNST #3)
uninstall cmd: C:\WINDOWS\st6unst.exe -n "C:\Program Files\WinWatch\ST6UNST.LOG"(TSAUNINST)
Windows Genuine Advantage Validation Tool (KB892130) 1.5.0530.0 (WGA)
install date: 20061019
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...Windows Media Format 11 runtime (Windows Media Format Runtime)
uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
help link: http://go.microsoft.com/fwlink/?Lin...Windows Media Player 11 (Windows Media Player)
uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /UninstallWindows XP Service Pack 2 20040803.231319 (Windows XP Service Pack)
uninstall cmd: C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=8...(WMCSetup)
Windows Media Format 11 runtime (WMFDist11)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http:Windows Media Player 11 (wmp11)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http:Microsoft User-Mode Driver Framework Feature Pack 1.0 (Wudf01000)
install date: 20070508
uninstall cmd: "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
comments: Build Number 5716XoftSpySE (XoftSpySE)
uninstall cmd: C:\Program Files\XoftSpySE\uninstall.exeYahoo! Toolbar (Yahoo! Companion)
uninstall cmd: C:\PROGRA~1\Yahoo!\common\unyt.exeYahoo! Toolbar (Yahoo! Toolbar)
OIN (Yazzle1396Oin)
uninstall cmd: "C:\Program Files\Common Files\Yazzle1396OinUninstaller.exe"Notifier 3.01.0001.0002 ({0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2})
version: 50397185
version (major): 3
version (minor): 1
estimated size: 1253
install date: 20040904
install source: C:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\Notifier\
uninstall cmd: MsiExec.exe /I{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}
publisher: Eastman Kodak Company
comments: _
contact: Customer Support Department
help link: _
help telephone: _aspi 3.00.0008.0000 ({015E4B8A-29B5-4AE3-BD08-38220FADFF4C})
version: 50331656
version (major): 3
estimated size: 237
install date: 20040904
install source: C:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\ASPI\
uninstall cmd: MsiExec.exe /I{015E4B8A-29B5-4AE3-BD08-38220FADFF4C}
publisher: Eastman Kodak Company
comments: _
contact: Customer Support Department
help link: _
help telephone: _SlideShow 70.0.170.000 ({0A65A3BD-54B5-4d0d-B084-7688507813F5})
version: 1174405290
version (major): 70
estimated size: 15028
install date: 20061020
publisher: Hewlett-PackardWD Diagnostics 1.07.0000 ({0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B})
version: 17235968
version (major): 1
version (minor): 7
estimated size: 808
install date: 20061124
install location: C:\Program Files\Western Digital Technologies\Diagnostics\
uninstall cmd: MsiExec.exe /X{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}
publisher: Western Digital TechnologiesMicrosoft IntelliPoint 6.1 6.10.156.0 ({0E4BC542-9CFD-4E97-B586-9F1E5516E7B9})
version: 101318812
version (major): 6
version (minor): 10
estimated size: 11676
install date: 20070625
install source: D:\ipoint\setup\
publisher: Microsoft
help link: http://support.microsoft.com/Dell Solution Center 1.00.0000 ({11F1920A-56A2-4642-B6E0-3B31A12C9288})
version: 16777216
version (major): 1
install date: 20040819
uninstall cmd: MsiExec.exe /X{11F1920A-56A2-4642-B6E0-3B31A12C9288}
publisher: Dell
help link: http://www.support.dell.com
help telephone: http://www.support.dell.comESSPCD 3.01.0001.0001 ({14D4ED84-6A9A-45A0-96F6-1753768C3CB5})
version: 50397185
version (major): 3
version (minor): 1
estimated size: 337
install date: 20040904
install source: C:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\Sysext\ESSpcd\
uninstall cmd: MsiExec.exe /I{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
publisher: Eastman Kodak Company
comments: _
contact: Customer Support Department
help link: _
help telephone: _cp_OnlineProjectsConfig 70.0.170.000 ({15C0AF59-4877-49B6-B8C6-A61CE54515F5})
version: 1174405290
version (major): 70
estimated size: 5
install date: 20061020
publisher: Hewlett-PackardAutoUpdate 1.1 ({18D10072035C4515918F7E37EAFAACFC})
install location: C:\Program Files\DivXDeepBurner v1.8.0.224 ({1ADE23D7-7A1E-4AEC-BA5D-EB8A01BED943})
install date: 09/04/2007
install location: C:\Program Files\Astonsoft\DeepBurner
install source: G:\PROGRAMS
uninstall cmd: "C:\Program Files\Astonsoft\DeepBurner\Uninstall.exe" "C:\Program Files\Astonsoft\DeepBurner\install.log"Microsoft Money 2004 12.0.50 ({1D643CD7-4DD6-11D7-A4E0-000874180BB3})
version: 201326642
version (major): 12
estimated size: 142507
install date: 20040819
install location: C:\Program Files\Microsoft Money\
uninstall cmd: MsiExec.exe /I{1D643CD7-4DD6-11D7-A4E0-000874180BB3}
publisher: Microsoft
comments: The Installation database contains the logic and data required to install Money 2004
help link: http://support.microsoft.com
help telephone: (800) 936-5700Google Toolbar for Internet Explorer ({2318C2B1-4965-11d4-9B18-009027A5CD4F})
uninstall cmd: regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"HPPhotoSmartExpress 70.0.170.000 ({2376813B-2E5A-4641-B7B3-A0D5ADB55229})
version: 1174405290
version (major): 70
estimated size: 11758
install date: 20061020
publisher: Hewlett-PackardDell Media Experience ({2637C347-9DAD-11D6-9EA2-00055D0CA761})
uninstall cmd: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" -uninstallGoogle Toolbar for Firefox 3.0.20070525 ({2CCBABCB-6427-4A55-B091-49864623C43F})
version: 20070525
version (major): 3
estimated size: 976
install date: 20070803
install source: C:\DOCUME~1\LISATH~1\LOCALS~1\Temp\nsy5.tmp\
uninstall cmd: MsiExec.exe /X{2CCBABCB-6427-4A55-B091-49864623C43F}
publisher: GoogleRhapsody Player Engine 1.0.604 ({2DFF31F9-7893-4922-AF66-C9A1EB4EBB31})
version: 16777820
version (major): 1
estimated size: 1205
install date: 20061106
uninstall cmd: MsiExec.exe /I{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}
publisher: RealNetworks
comments: The Rhapsody Player Engine is a Web browser plugin used for Rhapsody On The Web.
contact: RealNetworks
help link: http://www.rhapsody.comSonic_PrimoSDK 70.0.170.000 ({2F58D60D-2BFD-4467-9B4D-64E7355C329D})
version: 1174405290
version (major): 70
estimated size: 1931
install date: 20061020
publisher: Hewlett-PackardJ2SE Runtime Environment 5.0 Update 10 1.5.0.100 ({3248F0A8-6813-11D6-A77B-00B0D0150100})
version: 17104896
version (major): 1
version (minor): 5
estimated size: 122993
install date: 20070118
install source: C:\Documents and Settings\Lisa Thompson\Local Settings\Application Data\Sun\Java\jre1.5.0_10\
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Program Files\Java\jre1.5.0_10\README.txtJ2SE Runtime Environment 5.0 Update 11 1.5.0.110 ({3248F0A8-6813-11D6-A77B-00B0D0150110})
version: 17104896
version (major): 1
version (minor): 5
estimated size: 123326
install date: 20070327
install source: http://javadl.sun.com/webapps/downl...
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Program Files\Java\jre1.5.0_11\README.txtJava(TM) 6 Update 2 1.6.0.20 ({3248F0A8-6813-11D6-A77B-00B0D0160020})
version: 17170432
version (major): 1
version (minor): 6
estimated size: 113906
install date: 20070916
install source: http://javadl.sun.com/webapps/downl...
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Program Files\Java\jre1.6.0_02\README.txtSkinsHP1 70.0.170.000 ({33BF0960-DBA3-4187-B6CC-C969FCFA2D25})
version: 1174405290
version (major): 70
estimated size: 13
install date: 20061020
publisher: Hewlett-PackardWebFldrs XP 9.50.6513 ({350C97B0-3D7C-4EE8-BAA9-00BCB3D54227})
version: 154278257
version (major): 9
version (minor): 50
estimated size: 2508
install date: 20020903
install source: C:\WINDOWS\System32\
publisher: Microsoft Corporation
help link: http://www.microsoft.com/windowsInternet Explorer Default Page 1.00.03 ({35BDEFF1-A610-4956-A00D-15453C116395})
version: 16777219
version (major): 1
install date: 20040819
uninstall cmd: MsiExec.exe /I{35BDEFF1-A610-4956-A00D-15453C116395}
publisher: Dell Inc.
comments: Your Comments
contact: Customer Support Department
help link: http://support.dell.com
help telephone: 0PanoStandAlone 70.0.170.000 ({363790D2-DA98-41DD-9C9F-69FA36B169DE})
version: 1174405290
version (major): 70
estimated size: 1775
install date: 20061020
publisher: Hewlett-PackardMSXML 4.0 SP2 (KB927978) 4.20.9841.0 ({37477865-A3F1-4772-AD43-AAFC6BCFF99F})
version: 68429425
version (major): 4
version (minor): 20
estimated size: 2625
install date: 20070507
install source: g:\d1d59e06e57fd88f2f67\
uninstall cmd: MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
publisher: Microsoft Corporation
help link: http://support.microsoft.com/kb/927978CP_Package_Basic1 70.0.170.000 ({41E776A5-9B12-416D-9A12-B4F7B044EBED})
version: 1174405290
version (major): 70
estimated size: 2985
install date: 20061020
publisher: Hewlett-PackardCR2 3.01.0001.0003 ({432C3720-37BF-4BD7-8E49-F38E090246D0})
version: 50397185
version (major): 3
version (minor): 1
estimated size: 1
install date: 20040904
install source: C:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\KDEVICES\CR2\
uninstall cmd: MsiExec.exe /I{432C3720-37BF-4BD7-8E49-F38E090246D0}
publisher: Eastman Kodak Company
comments: _
contact: _
help link: _
help telephone: _Dell Support 2.1.1.0 ({43FCA273-9534-40DB-B7C5-D7758875616A})
version: 33619969
version (major): 2
version (minor): 1
install date: 20040819
uninstall cmd: MsiExec.exe /X{43FCA273-9534-40DB-B7C5-D7758875616A}
publisher: Dell
comments: Go to http://support.dell.com
contact: http://support.dell.com
help link: http://support.dell.com
help telephone: 1-800-BUY-DELL
r

Download the latest version of HiJackThis:
Save the file to your desktop, once downloaded run the program and click "Do a system scan and save a logfile".
When the text document opens highlight all of the text and copy and paste the details back here.

here is the HJT log.
Avast keeps warning me about win32:virut malwareLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:57, on 2007-09-26
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: NormalRunning processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.exe
C:\WINDOWS\System32\ScsiAccess.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Burn4Free Toolbar Helper - {60BF5EE3-0105-4858-AD98-17C19F86B042} - C:\Program Files\Burn4Free Toolbar\v3.3.0.0\Burn4Free_Toolbar.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Burn4Free Toolbar - {55FAF0F2-44D4-425F-B5F5-6B275B621EAB} - C:\Program Files\Burn4Free Toolbar\v3.3.0.0\Burn4Free_Toolbar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: MyWiki toolbar - {e22e8d11-0f3e-4d46-8fc1-7264b4d5ea01} - C:\Program Files\MyWiki\tbMyWi.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Iconoid] "C:\Program Files\Iconoid\iconoid.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/open... (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Application Layer Gateway Service (ALG) - Unknown owner - cmd.exe (file missing)
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - C:\Program Files\Common Files\LightScribe\LSSrvc.exe (file missing)
O23 - Service: Windows Installer (MSIServer) - Unknown owner - C:\WINDOWS\System32\msiexec.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing)
O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\WINDOWS\System32\HPZipm12.exe (file missing)
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\System32\ScsiAccess.exe
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)
O24 - Desktop Component 1: my current home page - (no file)--
End of file - 7957 bytes

Download ccleaner
Download SUPERAntispyware
Once downloaded open SUPERAntispyware and update it.
Next boot into "safe mode" by restarting your pc and tapping the f8 key as it boots up. Arrow up to the "safe mode" option.
Once you are in safe mode (you will see "Safe mode" in the four corners of the screen), open HiJackThis and "fix" these entries:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Burn4Free Toolbar Helper - {60BF5EE3-0105-4858-AD98-17C19F86B042} - C:\Program Files\Burn4Free Toolbar\v3.3.0.0\Burn4Free_Toolbar.dll (file missing)
O3 - Toolbar: Burn4Free Toolbar - {55FAF0F2-44D4-425F-B5F5-6B275B621EAB} - C:\Program Files\Burn4Free Toolbar\v3.3.0.0\Burn4Free_Toolbar.dll (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O23 - Service: Application Layer Gateway Service (ALG) - Unknown owner - cmd.exe (file missing)
O24 - Desktop Component 1: my current home page - (no file)Still in safe mode open ccleaner and run it.
Still in safe mode open SUPERAntispyware, click on the "scan your computer" button, make sure "perform complete scan" is selected and click "next". Quarantine all it finds.
Once the scan is finished restart your pc and let it boot up normally.
Open SUPERAntispyware, click on the "preferences" button, click on the "statistics / logs" tab, open the most recent log and copy and paste the details back here

SUPERAntiSpyware Scan Log
http://www.superantispyware.comGenerated 09/27/2007 at 00:08 AM
Application Version : 3.9.1008
Core Rules Database Version : 3314
Trace Rules Database Version: 1316Scan type : Complete Scan
Total Scan Time : 01:37:32Memory items scanned : 149
Memory threats detected : 0
Registry items scanned : 7016
Registry threats detected : 98
File items scanned : 47666
File threats detected : 2Trojan.Media-Codec/V3
HKLM\Software\Classes\CLSID\{184746EC-9E9D-4C7D-B9E7-9039EBD801A9}
HKCR\CLSID\{184746EC-9E9D-4C7D-B9E7-9039EBD801A9}
HKCR\CLSID\{184746EC-9E9D-4C7D-B9E7-9039EBD801A9}#xxx
HKCR\CLSID\{184746EC-9E9D-4C7D-B9E7-9039EBD801A9}\InprocServer32
HKCR\CLSID\{184746EC-9E9D-4C7D-B9E7-9039EBD801A9}\InprocServer32#ThreadingModel
C:\PROGRAM FILES\VIDEO ACTIVEX ACCESS\IESPLG.DLLAdware.Effective Brand/180Search
HKLM\Software\Classes\CLSID\{E22E8D11-0F3E-4D46-8FC1-7264B4D5EA01}
HKCR\CLSID\{E22E8D11-0F3E-4D46-8FC1-7264B4D5EA01}
HKCR\CLSID\{E22E8D11-0F3E-4D46-8FC1-7264B4D5EA01}
HKCR\CLSID\{E22E8D11-0F3E-4D46-8FC1-7264B4D5EA01}\InprocServer32
HKCR\CLSID\{E22E8D11-0F3E-4D46-8FC1-7264B4D5EA01}\InprocServer32#ThreadingModel
C:\PROGRAM FILES\MYWIKI\TBMYWI.DLL
HKLM\Software\Microsoft\Internet Explorer\Toolbar#{e22e8d11-0f3e-4d46-8fc1-7264b4d5ea01}
HKU\S-1-5-21-1355252024-1357978302-3836124996-1008\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser#{E22E8D11-0F3E-4D46-8FC1-7264B4D5EA01}Malware.VirusProtectPro
HKCR\TypeLib\{3FB89201-04DE-4430-B5C6-FD57EA654E56}
HKCR\TypeLib\{3FB89201-04DE-4430-B5C6-FD57EA654E56}\1.0
HKCR\TypeLib\{3FB89201-04DE-4430-B5C6-FD57EA654E56}\1.0\0
HKCR\TypeLib\{3FB89201-04DE-4430-B5C6-FD57EA654E56}\1.0\0\win32
HKCR\TypeLib\{3FB89201-04DE-4430-B5C6-FD57EA654E56}\1.0\FLAGS
HKCR\TypeLib\{3FB89201-04DE-4430-B5C6-FD57EA654E56}\1.0\HELPDIR
HKCR\Interface\{057299D6-7EDB-47B8-934C-ED17535A501C}
HKCR\Interface\{057299D6-7EDB-47B8-934C-ED17535A501C}\ProxyStubClsid
HKCR\Interface\{057299D6-7EDB-47B8-934C-ED17535A501C}\ProxyStubClsid32
HKCR\Interface\{057299D6-7EDB-47B8-934C-ED17535A501C}\TypeLib
HKCR\Interface\{057299D6-7EDB-47B8-934C-ED17535A501C}\TypeLib#Version
HKCR\Interface\{1C54613A-A5EC-461B-9643-6F18598036A8}
HKCR\Interface\{1C54613A-A5EC-461B-9643-6F18598036A8}\ProxyStubClsid
HKCR\Interface\{1C54613A-A5EC-461B-9643-6F18598036A8}\ProxyStubClsid32
HKCR\Interface\{1C54613A-A5EC-461B-9643-6F18598036A8}\TypeLib
HKCR\Interface\{1C54613A-A5EC-461B-9643-6F18598036A8}\TypeLib#Version
HKCR\Interface\{321FE2F3-D621-4FC2-97E6-F03B1E106163}
HKCR\Interface\{321FE2F3-D621-4FC2-97E6-F03B1E106163}\ProxyStubClsid
HKCR\Interface\{321FE2F3-D621-4FC2-97E6-F03B1E106163}\ProxyStubClsid32
HKCR\Interface\{321FE2F3-D621-4FC2-97E6-F03B1E106163}\TypeLib
HKCR\Interface\{321FE2F3-D621-4FC2-97E6-F03B1E106163}\TypeLib#Version
HKCR\Interface\{3510AA0D-C620-42A7-BCA4-5424E887BFBE}
HKCR\Interface\{3510AA0D-C620-42A7-BCA4-5424E887BFBE}\ProxyStubClsid
HKCR\Interface\{3510AA0D-C620-42A7-BCA4-5424E887BFBE}\ProxyStubClsid32
HKCR\Interface\{3510AA0D-C620-42A7-BCA4-5424E887BFBE}\TypeLib
HKCR\Interface\{3510AA0D-C620-42A7-BCA4-5424E887BFBE}\TypeLib#Version
HKCR\Interface\{3E4FBCA2-CF8F-4897-AC8B-AD3FB68DD794}
HKCR\Interface\{3E4FBCA2-CF8F-4897-AC8B-AD3FB68DD794}\ProxyStubClsid
HKCR\Interface\{3E4FBCA2-CF8F-4897-AC8B-AD3FB68DD794}\ProxyStubClsid32
HKCR\Interface\{3E4FBCA2-CF8F-4897-AC8B-AD3FB68DD794}\TypeLib
HKCR\Interface\{3E4FBCA2-CF8F-4897-AC8B-AD3FB68DD794}\TypeLib#Version
HKCR\Interface\{423E470A-EFEC-4B61-80DF-7CEBAEA33912}
HKCR\Interface\{423E470A-EFEC-4B61-80DF-7CEBAEA33912}\ProxyStubClsid
HKCR\Interface\{423E470A-EFEC-4B61-80DF-7CEBAEA33912}\ProxyStubClsid32
HKCR\Interface\{423E470A-EFEC-4B61-80DF-7CEBAEA33912}\TypeLib
HKCR\Interface\{423E470A-EFEC-4B61-80DF-7CEBAEA33912}\TypeLib#Version
HKCR\Interface\{465CD1AB-1A0E-4644-A818-4EEA483137F1}
HKCR\Interface\{465CD1AB-1A0E-4644-A818-4EEA483137F1}\ProxyStubClsid
HKCR\Interface\{465CD1AB-1A0E-4644-A818-4EEA483137F1}\ProxyStubClsid32
HKCR\Interface\{465CD1AB-1A0E-4644-A818-4EEA483137F1}\TypeLib
HKCR\Interface\{465CD1AB-1A0E-4644-A818-4EEA483137F1}\TypeLib#Version
HKCR\Interface\{48F5A09E-1F9A-45F6-9028-D3D4AF690727}
HKCR\Interface\{48F5A09E-1F9A-45F6-9028-D3D4AF690727}\ProxyStubClsid
HKCR\Interface\{48F5A09E-1F9A-45F6-9028-D3D4AF690727}\ProxyStubClsid32
HKCR\Interface\{48F5A09E-1F9A-45F6-9028-D3D4AF690727}\TypeLib
HKCR\Interface\{48F5A09E-1F9A-45F6-9028-D3D4AF690727}\TypeLib#Version
HKCR\Interface\{9946C825-9E64-4CBB-99C3-D853A4CCB6D5}
HKCR\Interface\{9946C825-9E64-4CBB-99C3-D853A4CCB6D5}\ProxyStubClsid
HKCR\Interface\{9946C825-9E64-4CBB-99C3-D853A4CCB6D5}\ProxyStubClsid32
HKCR\Interface\{9946C825-9E64-4CBB-99C3-D853A4CCB6D5}\TypeLib
HKCR\Interface\{9946C825-9E64-4CBB-99C3-D853A4CCB6D5}\TypeLib#Version
HKCR\Interface\{9B3F8419-B82F-439C-8D5C-0CF7B9AE00AA}
HKCR\Interface\{9B3F8419-B82F-439C-8D5C-0CF7B9AE00AA}\ProxyStubClsid
HKCR\Interface\{9B3F8419-B82F-439C-8D5C-0CF7B9AE00AA}\ProxyStubClsid32
HKCR\Interface\{9B3F8419-B82F-439C-8D5C-0CF7B9AE00AA}\TypeLib
HKCR\Interface\{9B3F8419-B82F-439C-8D5C-0CF7B9AE00AA}\TypeLib#Version
HKCR\Interface\{AEF1CB9F-75C1-43D0-944D-773BEB807C4E}
HKCR\Interface\{AEF1CB9F-75C1-43D0-944D-773BEB807C4E}\ProxyStubClsid
HKCR\Interface\{AEF1CB9F-75C1-43D0-944D-773BEB807C4E}\ProxyStubClsid32
HKCR\Interface\{AEF1CB9F-75C1-43D0-944D-773BEB807C4E}\TypeLib
HKCR\Interface\{AEF1CB9F-75C1-43D0-944D-773BEB807C4E}\TypeLib#Version
HKCR\Interface\{BDABFCDE-65AB-4FD8-9DD5-B250CABDC4B2}
HKCR\Interface\{BDABFCDE-65AB-4FD8-9DD5-B250CABDC4B2}\ProxyStubClsid
HKCR\Interface\{BDABFCDE-65AB-4FD8-9DD5-B250CABDC4B2}\ProxyStubClsid32
HKCR\Interface\{BDABFCDE-65AB-4FD8-9DD5-B250CABDC4B2}\TypeLib
HKCR\Interface\{BDABFCDE-65AB-4FD8-9DD5-B250CABDC4B2}\TypeLib#Version
HKCR\Interface\{D74EB6F1-1C83-4D06-9DAC-B6BE82C5FE70}
HKCR\Interface\{D74EB6F1-1C83-4D06-9DAC-B6BE82C5FE70}\ProxyStubClsid
HKCR\Interface\{D74EB6F1-1C83-4D06-9DAC-B6BE82C5FE70}\ProxyStubClsid32
HKCR\Interface\{D74EB6F1-1C83-4D06-9DAC-B6BE82C5FE70}\TypeLib
HKCR\Interface\{D74EB6F1-1C83-4D06-9DAC-B6BE82C5FE70}\TypeLib#Version
HKCR\Interface\{EEBD5970-8E94-4E4D-A2C8-124CB9B5EBAC}
HKCR\Interface\{EEBD5970-8E94-4E4D-A2C8-124CB9B5EBAC}\ProxyStubClsid
HKCR\Interface\{EEBD5970-8E94-4E4D-A2C8-124CB9B5EBAC}\ProxyStubClsid32
HKCR\Interface\{EEBD5970-8E94-4E4D-A2C8-124CB9B5EBAC}\TypeLib
HKCR\Interface\{EEBD5970-8E94-4E4D-A2C8-124CB9B5EBAC}\TypeLib#Version
HKCR\Interface\{F928FA33-FDF8-4332-A626-CA9F7D12E5AD}
HKCR\Interface\{F928FA33-FDF8-4332-A626-CA9F7D12E5AD}\ProxyStubClsid
HKCR\Interface\{F928FA33-FDF8-4332-A626-CA9F7D12E5AD}\ProxyStubClsid32
HKCR\Interface\{F928FA33-FDF8-4332-A626-CA9F7D12E5AD}\TypeLib
HKCR\Interface\{F928FA33-FDF8-4332-A626-CA9F7D12E5AD}\TypeLib#Version
HKCR\Interface\{FFA41A18-F50E-459E-80B7-6EA78AD9D365}
HKCR\Interface\{FFA41A18-F50E-459E-80B7-6EA78AD9D365}\ProxyStubClsid
HKCR\Interface\{FFA41A18-F50E-459E-80B7-6EA78AD9D365}\ProxyStubClsid32
HKCR\Interface\{FFA41A18-F50E-459E-80B7-6EA78AD9D365}\TypeLib
HKCR\Interface\{FFA41A18-F50E-459E-80B7-6EA78AD9D365}\TypeLib#Version

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |