lesser-equity

Magazine
Go Back   Computer Juice > Computer Software > Virus, Spyware & Security

Register


 Default 

Friends computer slow




Reply
 
Thread Tools
  #21  
Old 19th Apr 2008, 15:01
Moderator Group
 
Default Friends computer slow

I remember, didn't know it was the same computer.

Run this instead and post both logs.

Download Deckard's System Scanner (DSS) from here or here to your Desktop.
Note: You must be logged onto an account with administrator privileges.
  • Close all applications and windows.
  • Double-click on dss.exe to run it, and follow the prompts.
  • When the scan is complete, two text files will open
    • main.txt <- this one will be maximized
    • extra.txt <- this one will be minimized
  • Add the contents of main.txt in your post.
  • Also add extra.txt to your post.
What DSS will do:
  • Create a new System Restore point in Windows XP and Vista.
  • Clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
  • Check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.
__________________

  #22  
Old 19th Apr 2008, 15:02
Member Group
 
Default Friends computer slow

no clue what the peer.exe thing is BUT the bittorrent dna isnt avaiable in add or remove programs
  #23  
Old 19th Apr 2008, 15:03
Moderator Group
 
Default Friends computer slow

Quote:
Originally Posted by madcows7 View Post
no clue what the peer.exe thing is BUT the bittorrent dna isnt avaiable in add or remove programs
I've requested an uninstall list quite a few times now......
__________________

  #24  
Old 19th Apr 2008, 15:06
Member Group
 
Default Friends computer slow

what unistall list i dont know how to get one im sorry my english sucks
  #25  
Old 19th Apr 2008, 15:15
Moderator Group
 
Default Friends computer slow

You need to read all of my posts. From HERE

Next:
Create An Uninstall List
  • Start HijackThis
  • Click on the Open the Misc Tools section
  • Click on the Open Uninstall Manager button.
  • Click on the Save list button and specify where you would like to save this file and click Save.
    • When you press Save button a notepad will open with the contents of that file.
  • Copy and paste that list in your reply.
__________________

  #26  
Old 19th Apr 2008, 15:20
Member Group
 
Default Friends computer slow

.sol Editor 1.1.0.1
010 Editor 2.1.3
A Speeder (remove only)
AC3Filter (remove only)
Adobe AIR
Adobe AIR
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Default Language CS3
Adobe Device Central CS3
Adobe ExtendScript Toolkit 2
Adobe Flash Player 9 ActiveX
Adobe Flash Player ActiveX
Adobe Flash Player Plugin
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Linguistics CS3
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Photoshop CS3
Adobe Setup
Adobe Shockwave Player
Adobe Stock Photos CS3
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS3
AGEIA PhysX v7.07.24
Ahead Nero - Burning Rom
Anarchy Online Classic Edition
Apple Software Update
Audacity 1.2.6
AutoHotkey 1.0.47.06
avast! Antivirus
AVI DVD Burner 2008 ver 3.90
AviSynth 2.5
BannedStory
BannedStory 3.0
Battle Realms
BattlePets
Bookworm Adventures Deluxe
Bookworm Adventures Deluxe 1.0
Bots
Bridge Building Game
Bridge Construction Set
Bridge Construction Set Demo 1.37
Broadcom 440x 10/100 Integrated Controller
C21
CABAL Online
Cain & Abel v4.9.10
CCleaner (remove only)
Cheat Engine 5.3
Counter-Strike: Source
Creative MediaSource 5
Darkeden
dBpowerAMP Music Converter
DominateGame 20050929 (dominate)
Don't Get Angry 2
Download Manager 2.3.6
Dragonball Source
Drug Wars
Dungeon Siege Demo
DVD Flick
DVD Shrink 3.2
DX-Ball 1.09
Earth's Special Forces
Easy Macro Recorder 3.65
FATE
Feeding Frenzy® 2: Shipwreck Showdown
FlyFF Resource Manager
Fraps
Frets On Fire
Game Console - WildGames
GamePark
GameSpy Arcade
GameTap
Garry's Mod
Geneforge 2
GhostOnline
Ghoul Hunter 1.0
Gladiator 1.01
GoldWave v5.20
GoToAssist 8.0.0.480
GPGNet
Half-Life 2
Half-Life 2: Lost Coast
HashTab 1.14 for x32
Helbreath USA
HijackThis 2.0.2
HybridCO
IGZ Lobby System
Insaniquarium Deluxe 1.1
Java 2 Runtime Environment, SE v1.4.2_03
Java 2 Runtime Environment, SE v1.4.2_15
Java(TM) 6 Update 2
Java(TM) 6 Update 3
KalOnlineEng
Kaspersky Online Scanner
LastChaos
Legend Of Mir 3
LimeWire 4.14.10
Lineage II
LiveUpdate 3.2 (Symantec Corporation)
LiveUpdate Notice (Symantec Corporation)
Lu-Tze CFZ Compiler
Malwarebytes' Anti-Malware
MapleStory
Mega Manager
Microsoft .NET Framework 3.5
Microsoft .NET Framework 3.5
Microsoft Age of Empires II Trial Version
Microsoft Office Excel Viewer 2003
Microsoft SQL Server Compact 3.5 Design Tools ENU
Microsoft SQL Server Compact 3.5 ENU
Microsoft Virtual PC 2007
Microsoft Visual Basic 2008 Express Edition - ENU
Microsoft Visual Basic 2008 Express Edition - ENU
Microsoft Visual C++ 2005 Redistributable
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32
Mount&Blade
Mozilla Firefox (2.0.0.11)
MP3/WAV/OGG/WMA/AC3 to CD Burner 1.2.20
Mu Gods
MySQL Maestro 7.6
MySQL Server 5.0
NVIDIA Drivers
OpenAL
PC Inspector File Recovery
Pcsx2 0.9.2 Watermoose
PDF Settings
Perfect Macro Recorder 1.50
Plant Tycoon
Pokemon PC 2.0
POKéMON Simulator 4.5
Pontifex Demo 10.19.01
Pontifex II
Portal
PremiumSoft Navicat 8.0 for MySQL
Proxifier version 2.6
PURGE Offline SPECIAL EDITION 1.0 (R3)
Qonquer Online Client 4351
QuickTime
Ragnarok Online
Ragnarok Sakray
Rakion International
RaySource 2.0.10.7348
RealPlayer
RF Online Episode 2
Rhapsody Player Engine
Rise and Fall
Robot Arena 2
Rumble Fighter
RYL Client ver 553
Savage
Shadowbane - Throne of Oblivion
Sierra On-Line Games (Remove only)
SmartFTP Client
SmartFTP Client 2.5 Setup Files (remove only)
Sound Blaster X-Fi
Source Dedicated Server
Source SDK Base
SpeedConnect Internet Accelerator v.7.0
SpeedFan (remove only)
SQLyog Community 6.16
Star Wars Battlefront
Starcraft Shareware(ED)
Steam
SUPERAntiSpyware Free Edition
Supreme Commander
SWAT 4
System Requirements Lab
TeamSpeak 2 RC2
The Universal 0.51.9
Tibia
Tibia MULTI-ip changer
Trials Construction Yard (remove only)
Trickster Online
UltimatePatch Setup
VC Runtimes MSI
VMware Workstation
WampServer 2.0
Windows Live installer
Windows Live Mail
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live OneCare safety scanner
Windows Live Sign-in Assistant
WinRAR archiver
Wolfenstein - Enemy Territory
WolfTeam International
WYDGLOBAL (remove only)
Xvid 1.1.3 final uninstall
Yahoo! Install Manager
Yahoo! Internet Mail
ZeroOnline
  #27  
Old 19th Apr 2008, 15:24
Member Group
 
Default Friends computer slow

here is dss logs
Deckard's System Scanner v20071014.68
Run by Mark JR on 2008-04-19 18:12:18
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- Last 5 Restore Point(s) --
8: 2008-04-19 22:09:29 UTC - RP457 - test for dss
7: 2008-04-19 15:16:56 UTC - RP456 - Scheduled Checkpoint
6: 2008-04-18 22:54:15 UTC - RP455 - Installed SUPERAntiSpyware Free Edition
5: 2008-04-17 22:14:01 UTC - RP454 - Device Driver Package Install: Creative Sound, video and game controllers
4: 2008-04-17 21:23:37 UTC - RP452 - Configured Creative MediaSource 5


-- First Restore Point --
1: 2008-04-17 20:05:36 UTC - RP449 - test


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Mark JR.exe) ---------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:20:16 PM, on 4/19/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\CtHelper.exe
C:\Windows\System32\CTXFIHLP.EXE
C:\Users\Mark JR\Program Files\DNA\btdna.exe
C:\Windows\System32\CTXFISPI.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Mark JR\Desktop\dss.exe
C:\Windows\system32\conime.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Mark JR.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: 72.233.61.2 L2authd.lineage2.com
O1 - Hosts: 72.233.61.2 L2testauthd.lineage2.com
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Grid Service] "C:\Program Files\GridService\peer.exe" -n Grid
O4 - HKLM\..\Run: [vmware-tray] "C:\Program Files\VMware\VMware Workstation\vmware-tray.exe"
O4 - HKLM\..\Run: [VMware hqtray] "C:\Program Files\VMware\VMware Workstation\hqtray.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Mark JR\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [igndlm.exe] C:\Program Files\Download Manager\DLM.exe /windowsstart /startifwork
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - (no file)
O10 - Unknown file in Winsock LSP: c:\windows\system32\prxernsp.dll
O13 - Gopher Prefix:
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames...l.cab55579.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramewor...o.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) - http://zone.msn.com/binframework/v10...y.cab55579.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762# # (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\Windows\system32\CTsvcCDA.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\480\g2aservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Unknown owner - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: VMware Agent Service (ufad-ws60) - Unknown owner - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe (file missing)
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - Unknown owner - C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe (file missing)
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.51a\bin\mysqld-nt.exe

--
End of file - 9649 bytes

-- HijackThis Fixed Entries (C:\PROGRA~1\TRENDM~1\HIJACK~1\backups\) -----------

backup-20080419-180715-444 O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
backup-20080419-180715-474 O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
backup-20080419-180715-813 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
backup-20080419-180715-830 O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (file missing)

-- File Associations -----------------------------------------------------------

.cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.reg - regfile - shell\open\command - regedit.exe "%1" %*
.scr - scrfile - shell\open\command - "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R0 giveio - c:\windows\system32\giveio.sys
R0 speedfan - c:\windows\system32\speedfan.sys <Not Verified; Windows (R) 2000 DDK provider; Windows (R) 2000 DDK driver>
R2 npkcrypt - \??\c:\users\mark jr\desktop\odinms\gms\npkcrypt.sys
R3 kbdcap - c:\windows\system32\drivers\kbdcap.sys
R3 npkcusb - \??\c:\odinms\odinms\npkcusb.sys
R3 SASENUM - \??\c:\program files\superantispyware\sasenum.sys

S3 CEDRIVER53 - \??\c:\program files\cheat engine\dbk32.sys
S3 NPPTNT2 - \??\c:\windows\system32\npptnt2.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Bonjour Service (##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762 ##) - "c:\program files\bonjour\mdnsresponder.exe" <Not Verified; Apple Computer, Inc.; Bonjour>

S2 CLTNetCnService (Symantec Lic NetConnect service) - "c:\program files\common files\symantec shared\ccsvchst.exe" /h cccommon (file missing)
S2 LiveUpdate Notice Ex (LiveUpdate Notice Service Ex) - "c:\program files\common files\symantec shared\ccsvchst.exe" /h cccommon (file missing)
S2 MySQL - "c:\program files\mysql\mysql server 5.0\bin\mysqld-nt" --defaults-file="c:\program files\mysql\mysql server 5.0\my.ini" mysql (file missing)
S2 StarWindServiceAE (StarWind AE Service) - c:\program files\alcohol soft\alcohol 120\starwind\starwindserviceae.exe (file missing)
S2 vmount2 (VMware Virtual Mount Manager Extended) - "c:\program files\common files\vmware\vmware virtual image editing\vmount2.exe" (file missing)
S3 FLEXnet Licensing Service - "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" <Not Verified; Macrovision Europe Ltd.; FLEXnet Publisher (32 bit)>
S3 ufad-ws60 (VMware Agent Service) - "c:\program files\vmware\vmware workstation\vmware-ufad.exe" -d "c:\program files\vmware\vmware workstation\\" -s ufad-p2v.xml (file missing)
S3 wampapache - "c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe" -k runservice <Not Verified; Apache Software Foundation; Apache HTTP Server>
S3 wampmysqld - c:\wamp\bin\mysql\mysql5.0.51a\bin\mysqld-nt.exe wampmysqld


-- Device Manager: Disabled ----------------------------------------------------

Class GUID: {4D36E97B-E325-11CE-BFC1-08002BE10318}
Description: SCSI/RAID Host Controller
Device ID: ACPI\PNPA000\4&5D18F2DF&1
Manufacturer: (Standard mass storage controllers)
Name: SCSI/RAID Host Controller
PNP Device ID: ACPI\PNPA000\4&5D18F2DF&1
Service: a6hnlfh4

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: VMware Virtual Ethernet Adapter for VMnet1
Device ID: ROOT\VMWARE\0000
Manufacturer: VMware, Inc.
Name: VMware Virtual Ethernet Adapter for VMnet1
PNP Device ID: ROOT\VMWARE\0000
Service: VMnetAdapter

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: VMware Virtual Ethernet Adapter for VMnet8
Device ID: ROOT\VMWARE\0001
Manufacturer: VMware, Inc.
Name: VMware Virtual Ethernet Adapter for VMnet8
PNP Device ID: ROOT\VMWARE\0001
Service: VMnetAdapter


-- Files created between 2008-03-19 and 2008-04-19 -----------------------------

2008-04-18 20:35:00 0 d-------- C:\Program Files\Windows Live Safety Center
2008-04-18 19:35:59 0 d-------- C:\Users\All Users\Malwarebytes
2008-04-18 19:35:57 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-04-18 18:56:28 0 d-------- C:\Users\All Users\SUPERAntiSpyware.com
2008-04-18 18:54:43 0 d-------- C:\Program Files\SUPERAntiSpyware
2008-04-17 17:25:49 25088 -----n--- C:\Windows\system32\CTSVCCTL.EXE <Not Verified; Creative Technology Ltd; Creative Service Control>
2008-04-17 17:25:49 44032 -----n--- C:\Windows\system32\CTSVCCDA.EXE <Not Verified; Creative Technology Ltd; Creative Service for CDROM Access>
2008-04-17 17:19:41 10240 --a------ C:\Windows\CTDCRES.DLL <Not Verified; Creative Technology Ltd; Creative Audio Product>
2008-04-17 15:40:37 0 d-------- C:\Program Files\Common Files\Ahead
2008-04-17 15:32:51 0 d-------- C:\Program Files\AviDvdBurner
2008-04-16 22:10:04 0 d-------- C:\Program Files\AviSynth 2.5
2008-04-16 22:08:49 0 d-------- C:\Program Files\AC3Filter
2008-04-16 22:08:41 0 d-------- C:\Program Files\Easy RealMedia Tools
2008-04-16 22:00:25 0 d-------- C:\Users\All Users\DVD Shrink
2008-04-16 22:00:21 0 d-------- C:\Program Files\DVD Shrink
2008-04-15 19:55:34 0 d-------- C:\Windows\PCHEALTH
2008-04-15 19:55:34 0 d-------- C:\Program Files\MSN Messenger
2008-04-15 16:07:48 0 d-------- C:\AeriaGames
2008-04-14 11:35:07 0 d-------- C:\Program Files\SuperScan
2008-04-13 18:37:01 0 d-------- C:\Nexon
2008-04-12 21:11:08 0 d-------- C:\Program Files\CBS Software
2008-04-12 20:59:05 0 d-------- C:\Users\All Users\PCPitstop
2008-04-12 20:58:36 0 d-------- C:\Program Files\PCPitstop
2008-04-12 19:33:11 0 d-------- C:\Program Files\Liquid Entertainment
2008-04-12 16:22:36 0 d-------- C:\Program Files\uTorrent
2008-04-12 15:42:55 0 d-------- C:\Program Files\IDoser v4
2008-04-01 17:11:37 118784 --a------ C:\Windows\system32\msstdfmt.dll <Not Verified; Microsoft Corporation; MSSTDFMT Object Library>
2008-03-29 20:26:58 0 d-------- C:\Program Files\SpeedFan
2008-03-29 17:22:55 0 d-------- C:\Windows\ShellNew
2008-03-29 17:22:53 0 d-------- C:\Program Files\AutoHotkey
2008-03-25 17:10:57 0 d-------- C:\Program Files\Common Files\xing shared
2008-03-24 17:47:21 0 d-------- C:\wamp
2008-03-24 16:42:17 0 d-------- C:\Program Files\FileZilla FTP Client
2008-03-23 15:42:22 0 d-------- C:\Program Files\MySQL
2008-03-20 21:01:15 0 d-------- C:\tibia 8.1
2008-03-20 13:55:49 0 d-------- C:\Program Files\Asprate
2008-03-20 13:54:02 0 d-------- C:\Tibia
2008-03-20 13:49:33 0 d-------- C:\tibia client 7.92
2008-03-20 13:30:58 0 d-------- C:\tibia v8.1
2008-03-20 12:31:55 0 d-------- C:\Program Files\Tibia
2008-03-19 15:41:54 0 d-------- C:\Users\All Users\Citrix
2008-03-19 15:41:00 0 d-------- C:\Program Files\Citrix
2008-03-19 15:17:16 0 d-------- C:\Program Files\Broadcom


-- Find3M Report ---------------------------------------------------------------

2008-04-19 18:16:46 0 d-------- C:\Users\Mark JR\AppData\Roaming\DNA
2008-04-19 13:54:40 0 d-------- C:\Program Files\OGPlanet
2008-04-19 10:16:23 0 d-------- C:\Program Files\Steam
2008-04-18 19:39:19 0 d-------- C:\Program Files\Common Files
2008-04-18 19:36:12 0 d-------- C:\Users\Mark JR\AppData\Roaming\Malwarebytes
2008-04-18 18:54:42 0 d-------- C:\Users\Mark JR\AppData\Roaming\SUPERAntiSpyware.com
2008-04-18 18:53:59 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-04-17 18:11:31 0 d-------- C:\Program Files\Ahead
2008-04-17 17:27:49 0 d--h----- C:\Program Files\Creative Installation Information
2008-04-17 17:20:21 409600 --a------ C:\Windows\system32\wrap_oal.dll <Not Verified; Creative Labs; Creative Labs OpenAL32>
2008-04-17 17:20:21 114688 --a------ C:\Windows\system32\OpenAL32.dll <Not Verified; Portions (C) Creative Labs Inc. and NVIDIA Corp.; Standard OpenAL(TM) Library>
2008-04-17 17:20:13 0 d-------- C:\Users\Mark JR\AppData\Roaming\Creative
2008-04-17 16:08:32 0 d-------- C:\Users\Mark JR\AppData\Roaming\uTorrent
2008-04-17 15:33:12 0 d-------- C:\Program Files\Xvid
2008-04-15 16:07:42 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-04-13 16:43:15 0 d-------- C:\Program Files\Windows Mail
2008-04-12 23:22:21 0 d-------- C:\Users\Mark JR\AppData\Roaming\BitTorrent
2008-04-02 15:22:51 0 d-------- C:\Program Files\Common Files\Steam
2008-03-25 20:37:16 0 d-------- C:\Users\Mark JR\AppData\Roaming\FileZilla
2008-03-25 17:10:47 0 d-------- C:\Program Files\Common Files\Real
2008-03-23 16:40:55 0 d-------- C:\Users\Mark JR\AppData\Roaming\SQLyog
2008-03-20 16:03:41 0 d-------- C:\Users\Mark JR\AppData\Roaming\Tibia
2008-03-17 16:21:48 0 d-------- C:\Program Files\Starcraft Shareware(ED)
2008-03-16 15:58:33 0 d-------- C:\Program Files\PremiumSoft
2008-03-15 21:42:14 0 d-------- C:\Program Files\SQLyog Community
2008-03-15 20:37:03 0 d-------- C:\Program Files\SQL Maestro Group
2008-03-15 20:37:03 0 d-------- C:\Program Files\Common Files\SQL Maestro Group
2008-03-14 23:27:03 0 d-------- C:\Users\Mark JR\AppData\Roaming\SmartFTP
2008-03-14 23:26:07 0 d-------- C:\Program Files\SmartFTP Client
2008-03-14 23:24:46 0 d-------- C:\Program Files\SmartFTP Client 2.5 Setup Files
2008-03-14 20:18:46 0 d-------- C:\Program Files\HybridCO
2008-03-14 16:47:16 0 d-------- C:\Program Files\MP3 WAV OGG WMA AC3 to CD Burner
2008-03-14 16:32:51 0 d-------- C:\Program Files\Blaze Media Pro
2008-03-13 19:20:40 0 d-------- C:\Program Files\Trials Construction Yard
2008-03-13 19:20:10 0 d-------- C:\Program Files\Java
2008-03-12 17:45:19 0 d-------- C:\Program Files\ZeroOnline
2008-03-09 19:38:02 0 d-------- C:\Program Files\SystemRequirementsLab
2008-03-07 17:50:02 0 d-------- C:\Program Files\Dell
2008-03-07 14:06:36 0 d-------- C:\Users\Mark JR\AppData\Roaming\IGN_DLM
2008-03-02 16:53:10 36106 --a------ C:\Windows\system32\SpoonUninstall-dBpowerAMP Music Converter.dat
2008-03-02 16:53:09 131072 --a------ C:\Windows\system32\SpoonUninstall.exe
2008-02-29 21:22:49 0 d-------- C:\Program Files\AutoMacroRecorder
2008-02-29 17:43:47 0 d-------- C:\Program Files\BannedStory
2008-02-29 17:33:27 0 d-------- C:\Users\Mark JR\AppData\Roaming\Adobe
2008-02-29 17:32:51 0 d-------- C:\Program Files\Common Files\Adobe AIR
2008-02-28 13:45:30 0 d-------- C:\Program Files\Pontifex II
2008-02-28 12:30:33 0 d-------- C:\Program Files\Bridge Construction Set
2008-02-28 07:35:54 174 --ahs---- C:\Program Files\desktop.ini
2008-02-28 07:33:42 0 d-------- C:\Program Files\Windows Calendar
2008-02-28 07:33:35 0 d-------- C:\Program Files\Windows Defender
2008-02-28 07:31:49 0 d-------- C:\Program Files\Common Files\Symantec Shared
2008-02-27 21:35:25 0 d-------- C:\Program Files\Symantec
2008-02-27 21:16:55 0 d-------- C:\Program Files\Cheat Engine
2008-02-26 15:06:22 0 d-------- C:\Program Files\BFG
2008-02-26 15:06:15 720896 --a------ C:\Windows\iun6002.exe <Not Verified; Indigo Rose Corporation; Setup Factory 6.0 Runtime Module>
2008-02-26 12:37:20 0 d-------- C:\Program Files\Pontifex Demo
2008-02-26 00:23:42 0 d-------- C:\Program Files\Bridge Building Game
2008-02-23 18:56:38 0 d-------- C:\Program Files\Codemasters
2008-02-23 15:14:01 0 d-------- C:\Program Files\PC Inspector File Recovery
2008-02-23 13:41:14 23888 --a------ C:\Users\Mark JR\AppData\Roaming\UserTile.png
2008-02-23 13:41:05 0 d-------- C:\Users\Mark JR\AppData\Roaming\PeerNetworking
2008-02-23 12:15:05 0 d-------- C:\Users\Mark JR\AppData\Roaming\fretsonfire
2008-02-20 20:46:04 0 d-------- C:\Program Files\DNA
2008-02-19 12:52:55 6597 --a------ C:\Windows\scedunin.dat
2008-02-19 12:52:43 967 --a------ C:\Windows\ScEdUnin.pif
2008-02-19 12:52:43 68608 --a------ C:\Windows\ScEdUnin.exe <Not Verified; Blizzard Entertainment; Starcraft Uninstaller>
2008-02-19 12:33:58 0 d-------- C:\Program Files\UltimatePatch
2008-02-13 18:42:10 20480 --a------ C:\Windows\system32\H@tKeysH@@k.DLL
2008-02-12 21:46:13 16 --a------ C:\Windows\popcinfot.dat
2008-02-09 11:28:40 323584 --a------ C:\Windows\system32\AudioGenie2.dll <Not Verified; Stefan Toengi; audiogenie Module>
2008-01-27 15:39:26 5255168 --a------ C:\Windows\system32\RF_Online.bin


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp. exe" [12/04/2007 09:00 AM]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [01/16/2007 11:02 PM]
"Grid Service"="C:\Program Files\GridService\peer.exe" []
"vmware-tray"="C:\Program Files\VMware\VMware Workstation\vmware-tray.exe" []
"VMware hqtray"="C:\Program Files\VMware\VMware Workstation\hqtray.exe" []
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [01/29/2008 06:38 PM]
"UpdReg"="C:\Windows\UpdReg.EXE" [05/11/2000 01:00 AM]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [12/11/2007 05:06 PM]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [12/11/2007 05:06 PM]
"NvMediaCenter"="C:\Windows\system32\NvMcTray. dll" [12/11/2007 05:06 PM]
"NeroCheck"="C:\Windows\system32\NeroCheck.exe " [07/09/2001 11:50 AM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [03/25/2008 05:09 PM]
"AsioReg"="REGSVR32.exe" [11/02/2006 05:45 AM C:\Windows\System32\regsvr32.exe]
"CTHelper"="CTHELPER.EXE" [11/02/2006 08:24 AM C:\Windows\System32\CtHelper.exe]
"CTxfiHlp"="CTXFIHLP.EXE" [11/02/2006 08:24 AM C:\Windows\System32\CTXFIHLP.EXE]
"CTXFIREG"="CTxfiReg.exe" [11/02/2006 08:20 AM C:\Windows\System32\CTXFIREG.EXE]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"BitTorrent DNA"="C:\Users\Mark JR\Program Files\DNA\btdna.exe" [04/12/2008 03:19 PM]
"igndlm.exe"="C:\Program Files\Download Manager\DLM.exe" [03/05/2007 05:57 PM]
"Steam"="c:\program files\steam\steam.exe" [03/28/2008 11:47 AM]
"SpeedConnectStartUp"="" []
"SetDefaultMIDI"="MIDIDef.exe" [11/02/2006 08:09 AM C:\Windows\MIDIDEF.EXE]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [02/29/2008 04:03 PM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"ConsentPromptBehaviorAdmin"=2 (0x2)

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\system]
"LogonHoursAction"=2 (0x2)
"DontDisplayLogonHoursWarnings"=1 (0x1)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [12/20/2006 12:55 PM 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 04/19/2007 12:41 PM 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\AppInfo]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\KeyIso]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\NTDS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\ProfSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\sacsvr]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\SWPRV]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\TabletInputService]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\TBS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\TrustedInstaller]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\VDS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\volmgr.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\volmgrx.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHELPER]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalService nsi lltdsvc SSDPSRV upnphost SCardSvr w32time EventSystem RemoteRegistry WinHttpAutoProxySvc lanmanworkstation TBS SLUINotify THREADORDER fdrespub netprofm fdphost wcncsvc QWAVE WebClient
LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc wlansvc EMDMgmt TabletInputService WPDBusEnum
LocalServiceNoNetwork PLA DPS BFE mpssvc


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
C:\Windows\system32\unregmp2.exe /ShowWMP

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI



-- Hosts -----------------------------------------------------------------------

72.233.61.2 L2authd.lineage2.com
72.233.61.2 L2testauthd.lineage2.com


-- End of Deckard's System Scanner: finished at 2008-04-19 18:24:42 ------------
  #28  
Old 19th Apr 2008, 15:24
Member Group
 
Default Friends computer slow

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft® Windows Vista™ Home Basic (build 6000)
Architecture: X86; Language: English

CPU 0: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+
Percentage of Memory in Use: 57%
Physical Memory (total/avail): 1981.88 MiB / 834.83 MiB
Pagefile Memory (total/avail): 4181.89 MiB / 3047.6 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1927.93 MiB

C: is Fixed (NTFS) - 138.97 GiB total, 23.64 GiB free.
D: is Fixed (NTFS) - 10 GiB total, 6.06 GiB free.
E: is CDROM (No Media)
F: is CDROM (No Media)

\\.\PHYSICALDRIVE0 - SAMSUNG HD160JJ/P SCSI Disk Device - 149.01 GiB - 3 partitions
\PARTITION0 - Unknown - 39.19 MiB
\PARTITION1 - Installable File System - 10 GiB - D:
\PARTITION2 (bootable) - Installable File System - 138.97 GiB - C:



-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

AV: avast! antivirus 4.7.1098 [VPS 080419-0] v4.7.1098 (ALWIL Software)
AS: Windows Defender v1.1.1505.0 (Microsoft Corporation)
AS: SUPERAntiSpyware v4, 0, 0, 1154 (SUPERAntiSpyware.com) Disabled

[HKLM\System\CurrentControlSet\Services\SharedAcces s\Parameters\FirewallPolicy\DomainProfile\Authoriz edApplications\List]

[HKLM\System\CurrentControlSet\Services\SharedAcces s\Parameters\FirewallPolicy\StandardProfile\Author izedApplications\List]
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTor rent"


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\Mark JR\AppData\Roaming
CLASSPATH=.;C:\Program Files\Java\jre1.6.0_02\lib\ext\QTJava.zip
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=MARKJR-PC
ComSpec=C:\Windows\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\Mark JR
LOCALAPPDATA=C:\Users\Mark JR\AppData\Local
LOGONSERVER=\\MARKJR-PC
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Windows\system32;C:\Windows;C:\Windows\sys tem32\wbem;C:\Program Files\QuickTime\QTSystem
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WS F;.WSH;.MSC
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 75 Stepping 2, AuthenticAMD
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=4b02
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
PROMPT=$P$G
PUBLIC=C:\Users\Public
QTJAVA=C:\Program Files\Java\jre1.6.0_02\lib\ext\QTJava.zip
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\MARKJR~1\AppData\Local\Temp
TMP=C:\Users\MARKJR~1\AppData\Local\Temp
USERDOMAIN=MarkJR-PC
USERNAME=Mark JR
USERPROFILE=C:\Users\Mark JR
windir=C:\Windows


-- User Profiles ---------------------------------------------------------------

Mark JR
josh
Guest (guest)


-- Add/Remove Programs ---------------------------------------------------------

-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
-->
--> "C:\Program Files\Creative Installation Information\CREATIVE_MEDIASOURCE_U\Setup.exe" /remove /l0x0009
--> "C:\Program Files\Creative Installation Information\CTCMSGO\Setup.exe" /remove /l0x0009
--> "C:\Program Files\Creative Installation Information\E-CENTER_NET_CONTENT_U\Setup.exe" /remove /l0x0009
--> "C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_MINIDISC_U\Setup.exe" /remove /l0x0009
--> "C:\Program Files\Creative Installation Information\MEDIASOURCE_PLAYER_SKINPACK_U\Setup.ex e" /remove /l0x0009
--> "C:\Program Files\Creative\Sound Blaster X-Fi\Program\SETUP.EXE" /S /U /W
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\Users\Mark JR\AppData\Local\{74446DCE-D640-4DC3-B6F1-6B29FF4EF945}\setup_blazemp.exe
--> MsiExec /X{EFC1B35C-FFF2-41D8-A70A-CE6037F8040B}
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888347B3-AEC5-4BB5-8BAB-781D72A57C73}\setup.exe" -l0x9 /remove
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FBFF2411-D066-4D24-BCE0-893086009E1B}\setup.exe" -l0x9 /remove
.sol Editor 1.1.0.1 --> C:\Program Files\Sol Edit\uninst.exe
µTorrent --> "C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
010 Editor 2.1.3 --> "C:\Program Files\010Editor\unins000.exe"
A Speeder (remove only) --> "C:\Program Files\aspeeder\uninstall.exe"
AC3Filter (remove only) --> C:\Program Files\AC3Filter\uninstall.exe
Adobe AIR --> C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR --> MsiExec.exe /I{00203668-8170-44A0-BE44-B632FA4D780F}
Adobe Anchor Service CS3 --> MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3 --> MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3 --> MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting --> MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0 --> MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps --> MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific --> MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings --> MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings --> MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings --> MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings --> MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3 --> MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3 --> MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2 --> MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Flash Player 9 ActiveX --> C:\Windows\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
Adobe Flash Player ActiveX --> C:\Windows\system32\Macromed\Flash\uninstall_activ eX.exe
Adobe Flash Player Plugin --> C:\Windows\system32\Macromed\Flash\uninstall_plugi n.exe
Adobe Fonts All --> MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3 --> MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3 --> MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files --> MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3 --> C:\Program Files\Common Files\Adobe\Installers\2ac78060bc5856b0c1cf873bb91 9b58\Setup.exe
Adobe Photoshop CS3 --> MsiExec.exe /I{0046FA01-C5B9-4985-BACB-398DC480FC05}
Adobe Setup --> MsiExec.exe /I{D1BB4446-AE9C-4256-9A7F-4D46604D2462}
Adobe Shockwave Player --> C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log
Adobe Stock Photos CS3 --> MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support --> MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3 --> MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client --> MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin --> MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3 --> MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
AGEIA PhysX v7.07.24 --> MsiExec.exe /X{EFC1B35C-FFF2-41D8-A70A-CE6037F8040B}
Ahead Nero - Burning Rom --> C:\Windows\UNNERO.exe /UNINSTALL
Anarchy Online Classic Edition --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF443E9E-AF54-42A5-85CE-20B4DEDCAFDA}\Setup.exe" -l0x9 UNINSTALL
Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
Audacity 1.2.6 --> "C:\Program Files\Audacity\unins000.exe"
AutoHotkey 1.0.47.06 --> C:\Program Files\AutoHotkey\uninst.exe
avast! Antivirus --> rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,Run Setup
AVI DVD Burner 2008 ver 3.90 --> "C:\Program Files\AviDvdBurner\unins000.exe"
AviSynth 2.5 --> "C:\Program Files\AviSynth 2.5\Uninstall.exe"
BannedStory --> MsiExec.exe /I{62C81505-65E8-BBFF-5A9B-23958770F694}
BannedStory 3.0 --> C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe -uninstall bs.BannedStory B138736892407FF2891DACB3EC40AB4373DCB810.1
Battle Realms --> MsiExec.exe /I{9AA761E6-CA51-4FF2-A552-D51638BF0595}
BattlePets --> C:\Program Files\AGD\BattlePets\esuninst.exe C:\Program Files\AGD\BattlePets
BitTorrent 6.0 --> C:\Program Files\BitTorrent\uninst.exe
Blaze Media Pro -->
Blaze Media Pro --> "C:\Users\Mark JR\AppData\Local\{74446DCE-D640-4DC3-B6F1-6B29FF4EF945}\setup_blazemp.exe" REMOVE=TRUE MODIFY=FALSE
Bookworm Adventures Deluxe --> C:\PROGRA~1\GAMEHO~1\BOOKWO~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\BOOKWO~1\INSTALL.LOG
Bookworm Adventures Deluxe 1.0 --> C:\Program Files\PopCap Games\Bookworm Adventures Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Bookworm Adventures Deluxe\Install.log"
Bots --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\ 50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67D1F82A-6366-4646-BB9E-1F0059E47124}\setup.exe" -l0x9 -removeonly
Bridge Building Game --> C:\Program Files\Bridge Building Game\uninstall.exe
Bridge Construction Set --> C:\Windows\iun6002.exe "C:\Program Files\Bridge Construction Set\irunin.ini"
Bridge Construction Set Demo 1.37 --> "C:\Program Files\Bridge Construction Set Demo\unins000.exe"
Broadcom 440x 10/100 Integrated Controller --> MsiExec.exe /X{612B9183-67A9-4B44-9877-2F059E35B86A}
C21 --> MsiExec.exe /I{5B4CC495-75A1-478A-9EDE-7AB0AF612BF3}
CABAL Online --> "C:\Program Files\OGPlanet\CABAL Online\unins000.exe"
Cain & Abel v4.9.10 --> C:\PROGRA~1\Cain\UNINSTAL.EXE C:\PROGRA~1\Cain\Install.log
CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
Chain Of Command --> C:\Chain\Uninstal.exe
Cheat Engine 5.3 --> "C:\Users\Mark JR\Desktop\REAL CE 5.3\unins000.exe"
CoC Lobby --> rundll32.exe dfshim.dll,ShArpMaintain CoCLobby.application, Culture=neutral, PublicKeyToken=03f06e5abe26ca8c, processorArchitecture=msil
Counter-Strike: Source --> "C:\Program Files\Steam\steam.exe" steam://uninstall/240
Creative MediaSource 5 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}\SETUP.EXE" -l0x9 /remove
Darkeden --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5109FC1B-2250-4EDE-903A-1662B69F2001}\Setup.exe" -l0x9
dBpowerAMP Music Converter --> "C:\Windows\system32\SpoonUninstall.exe" <uninstall>C:\Windows\system32\SpoonUninstall-dBpowerAMP Music Converter.dat
DNA --> "C:\Users\Mark JR\Program Files\DNA\btdna.exe" /UNINSTALL
DominateGame 20050929 (dominate) --> C:\PROGRA~1\DOMINA~1\Setup.exe /remove
Don't Get Angry 2 --> MsiExec.exe /I{B930F3E0-D89B-4F1D-8D8E-45A8D5B6FB43}
Download Manager 2.3.6 --> C:\Program Files\Download Manager\uninst.exe
Dragonball Source --> MsiExec.exe /I{0F32DBBE-CB6B-43F7-B4F3-CEBEB8736544}
Drug Wars --> C:\Program Files\Drug Wars\drugwars.exe -remove
Dungeon Siege Demo --> "C:\Program Files\Microsoft Games\Dungeon Siege Demo\UNINSTAL.EXE" /runtemp /addremove
DVD Flick --> "C:\Program Files\DVD Flick\unins000.exe"
DVD Shrink 3.2 --> "C:\Program Files\DVD Shrink\unins000.exe"
DX-Ball 1.09 --> C:\PROGRA~1\DX-Ball\UNWISE.EXE C:\PROGRA~1\DX-Ball\INSTALL.LOG
Earth's Special Forces --> C:\Program Files\Steam\steamapps\upsdarthjango\half-life\esf\Uninstall.exe
Easy Macro Recorder 3.65 --> "C:\Program Files\Easy Macro Recorder\unins000.exe"
FATE --> "C:\Program Files\WildGames\FATE\Uninstall.exe"
Feeding Frenzy 2 Deluxe --> "C:\Users\Mark JR\AppData\Local\Zylom Games\Feeding Frenzy 2 Deluxe\GameInstlr.exe" --uninstall UnInstall.log
Feeding Frenzy® 2: Shipwreck Showdown --> C:\PROGRA~1\SHOCKW~1.COM\FEEDIN~1\UNWISE.EXE C:\PROGRA~1\SHOCKW~1.COM\FEEDIN~1\INSTALL.LOG
FileZilla Client 3.0.8.1 --> C:\Program Files\FileZilla FTP Client\uninstall.exe
FlyFF Resource Manager --> "C:\Program Files\FlyFF Resource Manager\Uninstaller.exe"
Fraps --> "C:\Fraps\uninstall.exe"
Frets On Fire --> "C:\Program Files\Frets on Fire\Uninstall.exe"
Game Console - WildGames --> "C:\Program Files\WildGames\Game Console - WildGames\Uninstall.exe"
GamePark --> "C:\Program Files\GamePark\unins000.exe"
GameSpy Arcade --> C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG
GameTap --> C:\Program Files\InstallShield Installation Information\{67E158AF-8856-4337-B483-EA21930786AF}\setup.exe -runfromtemp -l0x0009 -removeonly
Garry's Mod --> "C:\Program Files\Steam\steam.exe" steam://uninstall/4000
Geneforge 2 --> "C:\Program Files\WildGames\Geneforge 2\Uninstall.exe"
GhostOnline --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\ 50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{97130A1A-4AC4-4E5F-9F13-B658D2F25AB4}\setup.exe" -l0x9
Ghoul Hunter 1.0 --> C:\PROGRA~1\LACEYW~1\GHOULH~1\Setup.exe /remove
Gladiator 1.01 --> C:\PROGRA~1\LACEYW~1\GLADIA~1\Setup.exe /remove
GoldWave v5.20 --> "C:\Users\Mark JR\Desktop\hlss\GoldWave\unstall.exe" "GoldWave v5.20" "C:\Users\Mark JR\Desktop\hlss\GoldWave\unstall.log"
GoToAssist 8.0.0.480 --> C:\Program Files\Citrix\GoToAssist\480\G2AUninstaller.exe /uninstall
GPGNet --> MsiExec.exe /I{C194D333-B84A-4BB7-B35E-060732D98DC4}
Half-Life 2 --> "C:\Program Files\Steam\steam.exe" steam://uninstall/220
Half-Life 2: Lost Coast --> "C:\Program Files\Steam\steam.exe" steam://uninstall/340
HashTab 1.14 for x32 --> C:\Users\Mark JR\Desktop\HashTab Shell Extension\uninst.exe
Helbreath USA --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C625C3F4-EC32-49DA-B656-A24188C2CF3C}\Setup.exe" -l0x9
HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
HybridCO --> C:\Program Files\HybridCO\Uninstall.exe
I-Doser v4 --> C:\Program Files\IDoser v4\Uninstal.exe
IGZ Lobby System --> "C:\Program Files\IGZones\unins000.exe"
Insaniquarium Deluxe 1.1 --> C:\Program Files\PopCap Games\Insaniquarium Deluxe\PopUninstall.exe "C:\Program Files\PopCap Games\Insaniquarium Deluxe\Install.log"
Java 2 Runtime Environment, SE v1.4.2_03 --> MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Java 2 Runtime Environment, SE v1.4.2_15 --> MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142150}
Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
KalOnlineEng --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2D7F824B-6744-4C30-B78B-0966E9BD461D}\Setup.exe" -l0x9
Kaspersky Online Scanner --> C:\Windows\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
LastChaos --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\ 50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0AF3FEAE-B651-4421-97EF-4808A588B4E5}\setup.exe" -l0x9 -removeonly
Legend Of Mir 3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F85839E5-3FD2-42EB-8556-B64B9F0B16B8}\Setup.exe" -l0x9
LimeWire 4.14.10 --> "C:\Program Files\LimeWire\uninstall.exe"
Lineage II --> C:\Program Files\InstallShield Installation Information\{076A6FD8-EE45-4A83-B3C9-C7C34E7CAFDD}\setup.exe -runfromtemp -l0x0009 -removeonly
LiveUpdate 3.2 (Symantec Corporation) --> "C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
LiveUpdate Notice (Symantec Corporation) --> MsiExec.exe /X{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}
Lu-Tze CFZ Compiler --> C:\WINDOWS\st6unst.exe -n "C:\Program Files\CFZcomp2\ST6UNST.LOG"
Malwarebytes' Anti-Malware --> "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
MapleStory --> MsiExec.exe /I{9B40FEE5-85E8-4851-89AD-66E2A1B4DC04}
Mega Manager -->
Mega Manager --> C:\Program Files\InstallShield Installation Information\{3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}\setup.exe -runfromtemp -l0x0009 -removeonly
Microsoft .NET Framework 3.5 --> C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5 --> MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Age of Empires II Trial Version --> "C:\Program Files\Microsoft Games\Age of Empires II Trial\UNINSTAL.EXE" /runtemp /uninstall
Microsoft Office Excel Viewer 2003 --> MsiExec.exe /I{90840409-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server Compact 3.5 Design Tools ENU --> MsiExec.exe /X{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}
Microsoft SQL Server Compact 3.5 ENU --> MsiExec.exe /I{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}
Microsoft Virtual PC 2007 --> MsiExec.exe /X{8A7CAA24-7B23-410B-A7C3-F994B0944160}
Microsoft Visual Basic 2008 Express Edition - ENU --> C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition - ENU\setup.exe
Microsoft Visual Basic 2008 Express Edition - ENU --> MsiExec.exe /X{9C2DC81B-8114-37D9-A922-95E460A1FAFB}
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework --> MsiExec.exe /X{B4C0A315-07FB-39F9-85CD-8CE20C019350}
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 --> MsiExec.exe /X{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}
Mount&Blade --> C:\Program Files\Mount&Blade\uninstall.exe
Mozilla Firefox (2.0.0.11) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3/WAV/OGG/WMA/AC3 to CD Burner 1.2.20 --> "C:\Program Files\MP3 WAV OGG WMA AC3 to CD Burner\unins000.exe"
Mu Gods --> C:\Program Files\Mu Gods\Uninstal.exe
MySQL Maestro 7.6 --> "C:\Program Files\SQL Maestro Group\MySQL Maestro\unins000.exe"
MySQL Server 5.0 --> MsiExec.exe /I{608FFCC7-7237-47BB-ABD5-8341754A3BBA}
NVIDIA Drivers --> C:\Windows\system32\NVUNINST.EXE UninstallGUI
OpenAL --> "C:\Program Files\OpenAL\OALInst.exe" /U /S
PC Inspector File Recovery --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\070 1\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x9
Pcsx2 0.9.2 Watermoose --> "C:\Program Files\Pcsx2\unins000.exe"
PDF Settings --> MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
Perfect Macro Recorder 1.50 --> "C:\Program Files\Perfect Macro Recorder\unins000.exe"
Plant Tycoon --> "C:\Program Files\Plant Tycoon\ReflexiveArcade\unins000.exe"
Pokemon PC 2.0 --> "C:\Program Files\Pokemon PC 2.0\unins000.exe"
POKéMON Simulator 4.5 --> C:\Games\POKéGAME\uninst-POKéGAME32.exe
Pontifex Demo 10.19.01 --> "C:\Program Files\Pontifex Demo\unins000.exe"
Pontifex II --> C:\Program Files\Pontifex II\uninstall.exe
Portal --> C:\Program Files\Portal\uninstall.exe
PremiumSoft Navicat 8.0 for MySQL --> "C:\Program Files\PremiumSoft\Navicat 8.0 MySQL\unins000.exe"
Proxifier version 2.6 --> "C:\Program Files\Proxifier\unins000.exe"
PURGE Offline SPECIAL EDITION 1.0 (R3) --> C:\PROGRA~1\LACEYW~1\PURGEO~1\Setup.exe /remove
Qonquer Online Client 4351 --> "C:\Program Files\Qonquer Online Client\unins000.exe"
QuickTime --> MsiExec.exe /I{5B09BD67-4C99-46A1-8161-B7208CE18121}
Ragnarok Online --> "C:\Windows\IFinst27.exe" -UC:\Program Files\Gravity\RO\IFU98CB.inf
Ragnarok Sakray --> "C:\Windows\IFinst27.exe" -UC:\Program Files\Gravity\RO\IFUE46C.inf
Rakion International --> "C:\Program Files\Softnyx\Rakion\unins000.exe"
RaySource 2.0.10.7348 --> C:\Program Files\RaySource\uninst.exe
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
RF Online Episode 2 --> "C:\Program Files\Codemasters\RF Online\unins000.exe"
Rhapsody Player Engine --> MsiExec.exe /I{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}
Rise and Fall --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\ 00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D078226E-83F2-45FD-9CDE-5DA66E5ADB51}\Setup.exe" -l0x9 -removeonly
Robot Arena 2 -->
Robot Arena 2 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\ID river.exe /M{297D51FC-9AE2-4778-AB62-D202E7EE7D53}
Rumble Fighter --> "C:\Program Files\OGPlanet\RumbleFighter\uninstall.exe"
RYL Client ver 553 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\070 1\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{80464EFB-6D15-4830-BB6F-66F0EFC7D320}\Setup.exe" -l0x9
Saga Beta v1.230 --> C:\Program Files\Saga Beta\Uninstal.exe
Savage --> MsiExec.exe /I{41851B16-0EB6-42E4-88ED-B6FA5D98507A}
Shadowbane - Throne of Oblivion --> "C:\Program Files\Ubisoft\Shadowbane - Throne of Oblivion\UninstallerData\Uninstall Shadowbane - Throne of Oblivion.exe"
Sierra On-Line Games (Remove only) --> C:\SIERRA\SETUP.EXE /U
SmartFTP Client --> MsiExec.exe /I{C169D3BB-9A27-43F5-9979-09A0D65FE95C}
SmartFTP Client 2.5 Setup Files (remove only) --> C:\Program Files\SmartFTP Client 2.5 Setup Files\uninst-sftp.exe
SouljaRO --> C:\Users\Mark JR\Desktop\soujaRO\Uninstal.exe
Sound Blaster X-Fi --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}\SETUP.EXE" -l0x9 /remove
Source Dedicated Server --> "C:\Program Files\Steam\steam.exe" steam://uninstall/205
Source SDK Base --> "C:\Program Files\Steam\steam.exe" steam://uninstall/215
SpeedConnect Internet Accelerator v.7.0 --> "C:\Program Files\CBS Software\SpeedConnect Internet Accelerator\unins000.exe"
SpeedFan (remove only) --> "C:\Program Files\SpeedFan\uninstall.exe"
SQLyog Community 6.16 --> C:\Program Files\SQLyog Community\uninst.exe
Star Wars Battlefront --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\070 1\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C79CB9C7-10A4-4814-8402-F574672C2192}\Setup.exe" -l0x9
Starcraft Shareware(ED) --> C:\Windows\scedunin.exe C:\Windows\scedunin.dat
Steam --> MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
SUPERAntiSpyware Free Edition --> MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Supreme Commander --> C:\Program Files\InstallShield Installation Information\{25A1E6A4-2DBD-4AC0-8650-8EA9A45B183D}\setup.exe -runfromtemp -l0x0009 -removeonly
Supreme Commander - Forged Alliance --> C:\Users\Mark JR\AppData\Roaming\InstallShield Installation Information\{31D95937-B237-405D-920C-A3EF4E482395}\setup.exe -runfromtemp -l0x0009 -removeonly
SWAT 4 --> C:\PROGRA~1\Sierra\SWAT4~1\UNWISE.EXE C:\PROGRA~1\Sierra\SWAT4~1\INSTALL.LOG
System Requirements Lab --> C:\Program Files\SystemRequirementsLab\Uninstall.exe
TeamSpeak 2 RC2 --> "C:\Program Files\Teamspeak2_RC2\unins000.exe"
The Universal 0.51.9 --> "C:\Program Files\TheUniversal\unins000.exe"
Tibia --> "C:\tibia 8.1\Tibia\unins000.exe"
Tibia MULTI-ip changer --> C:\Program Files\Asprate\Tibia Multi IP Changer\UNinstaller.exe
Trials Construction Yard (remove only) --> "C:\Program Files\Trials Construction Yard\uninst.exe"
Trickster Online --> C:\Trickster Online\uninst.exe
UltimatePatch Setup --> C:\PROGRA~1\ULTIMA~1\UNWISE.EXE C:\PROGRA~1\ULTIMA~1\INSTALL.LOG
VC Runtimes MSI --> MsiExec.exe /X{FF29527A-44CD-3422-945E-981A13584000}
VMware Workstation --> MsiExec.exe /I{A3FF5CB2-FB35-4658-8751-9EDE1D65B3AA}
WampServer 2.0 --> "c:\wamp\unins000.exe"
Windows Live installer --> MsiExec.exe /X{A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320}
Windows Live Mail --> MsiExec.exe /I{184E7118-0295-43C4-B72C-1D54AA75AAF7}
Windows Live Messenger --> MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
Windows Live OneCare safety scanner --> "C:\Program Files\Windows Live Safety Center\UnInstall.exe"
Windows Live OneCare safety scanner --> MsiExec.exe /X{FE0646A7-19D0-41B4-A2BB-2C35D644270D}
Windows Live Sign-in Assistant --> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
Wolfenstein - Enemy Territory --> C:\PROGRA~1\WOLFEN~1\Uninstall\Unwise.exe /u C:\PROGRA~1\WOLFEN~1\Uninstall\Install.log
WolfTeam International --> "C:\Program Files\Softnyx\WolfTeam\unins000.exe"
WYDGLOBAL (remove only) --> "C:\GAMES\WYDGLOBAL\uninstall.exe"
Xvid 1.1.3 final uninstall --> "C:\Program Files\Xvid\unins000.exe"
Yahoo! Install Manager --> C:\Windows\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
Yahoo! Internet Mail --> C:\Windows\system32\regsvr32 /u /s C:\PROGRA~1\Yahoo!\Common\YMMAPI.dll
ZeroOnline --> C:\Program Files\InstallShield Installation Information\{D5B8B867-4D37-A73C-5858-18FDAB10D251}\setup.exe -runfromtemp -l0x0009 -removeonly


-- Application Event Log -------------------------------------------------------

Event Record #/Type44355 / Error
Event Submitted/Written: 04/19/2008 10:26:50 AM
Event ID/Source: 1024 / MsiInstaller
Event Description:
Product: Windows Live OneCare safety scanner - Update '{F7603792-A99B-456F-8FD2-733171145A31}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Event Record #/Type44351 / Error
Event Submitted/Written: 04/19/2008 10:26:49 AM
Event ID/Source: 1021 / MsiInstaller
Event Description:
Product: Windows Live OneCare safety scanner - Update 'scnAVavdltaComponent-1.31.9028.0' could not be removed. Error code 1649. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Event Record #/Type44349 / Success
Event Submitted/Written: 04/19/2008 10:23:28 AM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.

Event Record #/Type44339 / Success
Event Submitted/Written: 04/19/2008 10:14:28 AM
Event ID/Source: 5617 / WinMgmt
Event Description:


Event Record #/Type44338 / Success
Event Submitted/Written: 04/19/2008 10:14:27 AM
Event ID/Source: 5615 / WinMgmt
Event Description:




-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.


-- System Event Log ------------------------------------------------------------

Event Record #/Type92889 / Error
Event Submitted/Written: 04/19/2008 06:18:02 PM
Event ID/Source: 8003 / bowser
Event Description:
The master browser has received a server announcement from the computer DELL-0263CA643C
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8EB038A3-41F7-49C1-8917-54.
The master browser is stopping or an election is being forced.

Event Record #/Type92886 / Error
Event Submitted/Written: 04/19/2008 06:06:05 PM
Event ID/Source: 8003 / bowser
Event Description:
The master browser has received a server announcement from the computer DELL-0263CA643C
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8EB038A3-41F7-49C1-8917-54.
The master browser is stopping or an election is being forced.

Event Record #/Type92885 / Error
Event Submitted/Written: 04/19/2008 05:46:16 PM
Event ID/Source: 8003 / bowser
Event Description:
The master browser has received a server announcement from the computer DELL-0263CA643C
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8EB038A3-41F7-49C1-8917-54.
The master browser is stopping or an election is being forced.

Event Record #/Type92884 / Error
Event Submitted/Written: 04/19/2008 05:34:15 PM
Event ID/Source: 8003 / bowser
Event Description:
The master browser has received a server announcement from the computer DELL-0263CA643C
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8EB038A3-41F7-49C1-8917-54.
The master browser is stopping or an election is being forced.

Event Record #/Type92883 / Error
Event Submitted/Written: 04/19/2008 05:22:15 PM
Event ID/Source: 8003 / bowser
Event Description:
The master browser has received a server announcement from the computer DELL-0263CA643C
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8EB038A3-41F7-49C1-8917-54.
The master browser is stopping or an election is being forced.



-- End of Deckard's System Scanner: finished at 2008-04-19 18:24:42 ------------
  #29  
Old 19th Apr 2008, 15:45
Moderator Group
 
Default Friends computer slow

Download RegASSASSIN.exe to the desktop.

Open RegAssassin and copy the Registry Key in the Code box below.

Code:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BitTorrent DNA
Now paste it in RegAssassins window and click Delete.

----------

Your Java is out of date.
Older versions of Java have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version(s) of Java components and update.

Step 1 - Get the new version
  • Go to the Sun Java Download Page
  • On the Sun Java page scroll to the 5th download. Java Runtime Environment (JRE) 6 Update 6
  • Click the button and choose the options.
    • Platform Windows
    • Language English
    • Next place a check mark in the box to agree to the License Agreement.
  • "I agree to the Java SE Runtime Environment 6 License Agreement"
  • Click Continue
  • Click on the link to download Windows Offline Installation and save to your desktop.
  • Then from your desktop double-click on jre-6u5-windowsi586-p.exe to install the newest version.
  • Follow the prompts to complete the installation.
Step 2 - Remove old version(s)
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel > Add/Remove programs and remove all older versions of Java.
    • Uninstall these versions:
    • Java 2 Runtime Environment, SE v1.4.2_03
    • Java 2 Runtime Environment, SE v1.4.2_15
    • Java(TM) 6 Update 2
    • Java(TM) 6 Update 3
  • Do not remove Java 6 Update 6
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each old Java version.
  • Restart your computer once all Java components are removed.
Step 3 - Remove old folder(s)
  • Double click My Computer on the desktop, Locate this folder: C:\Program Files\Java
  • Open the Java folder and delete any subfolders except the jre1.6.0_06 folder which was just created by the newest Java installation.
----------

Now uninstall:
  • LiveUpdate 3.2 (Symantec Corporation)
  • LiveUpdate Notice (Symantec Corporation)
----------

Download and install CleanUp!.exe

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Set the program up as follows:
  • Click Options...
  • Move the arrow to Standard CleanUp!
  • Uncheck the following: (if checked)
    • Delete Newsgroup cache
    • Delete Newsgroup Subscriptions
  • Click OK
Click the CleanUp! button to start the program. Reboot/logoff when prompted.

Note: CleanUp! deletes EVERYTHING out of your temp/temporary folders, it does not make backups. If you have any documents or programs that are saved in any Temporary Folders, please make a backup of these before running CleanUp!
If you have a 64 bit Operating System do NOT run Cleanup and let me know as we will use another utility


----------

Download DrWeb CureIt & save it to your desktop.

Scan with DrWeb-CureIt as follows:
  • Double-click on drweb-cureit.exe and then click Start.
  • An Express Scan of your PC notice will appear.
  • Under Start the Express Scan Now Click OK to start.
    • This is a short scan that will scan the files currently running in memory.
    • If or when something is found, click the Yes button when it asks you if you want to cure it.
  • Once the short scan has finished, Click Options > Change settings
  • Choose the Scan tab and UNcheck Heuristic analysis and click OK
  • Back at the main window, select the Complete scan button.
  • Then click the Green Arrow Start Scanning button on the right and the scan will start.
    • Click Yes to all if it asks if you want to cure/move any file(s).
  • When the scan is done.
  • In the Dr.Web CureIt menu on top left, click File and choose Save report list.
  • Save the DrWeb.csv report to your Desktop.
  • Exit Dr.Web Cureit.
  • Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
  • After reboot, Right-click the Dr.Web log on the desktop and choose Open With > Notepad
  • Copy and paste that log in the next reply
----------

Next post please add
Dr Web log
__________________

  #30  
Old 19th Apr 2008, 16:07
Member Group
 
Default Friends computer slow

so what does sthe live update thing do sry my english isnt good so i couldnt fully understand the link u gave me.... btw my friends computer is at my house atm s o i can do everything instantly
Reply

Register

Bookmarks

Similar Threads
Thread Thread Starter Forum Replies Last Post
Recovered Files Did Not Come from Friends Computer???Maybe PC World???? Diver9 General Hardware Chat 6 14th Nov 2009 05:18
Slow New Computer.. Got Rid of Windows System Suite a Week Ago and Still Slow. bryan123 Virus, Spyware & Security 1 25th Aug 2009 10:40
Slow New Computer bryan123 Windows Operating Systems 2 23rd Aug 2009 04:20
Computer running slow antbann Virus, Spyware & Security 10 23rd Mar 2008 12:21
Slow computer real77 Virus, Spyware & Security 6 1st Aug 2007 04:57
Thread Tools




Arabic Bulgarian Chinese (Simplified) Chinese (Traditional) Croatian Czech Danish Dutch English Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Latvian Lithuanian Norwegian Polish Portuguese Romanian Russian Serbian Slovak Spanish Swedish Thai Turkish Ukrainian

Copyright ©2006 - 2009 Computer Juice.

Powered by vBulletin® Copyright ©2000 - 2009 Jelsoft Enterprises Ltd. SEO by vBSEO ©2009, Crawlability, Inc.