Author Topic: [Resolved]need help w/ the generic host win32 services error in win sp3  (Read 4670 times)

0 Members and 1 Guest are viewing this topic.

Offline jonax00

  • Bronze Member
  • Posts: 16
after all the reading i've done & tried (regedit & removal tools), i still get the "generic host win32..." error... & if i stalled on restarting my machine, it becomes unresponsive!  ???
your help in solving this is highly appreciated, guys!
thanx in advance.

here is the log from HJT:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:24:43 PM, on 04/10/09
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
E:\Program Files\Intel\IDU\awServ.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Bonjour\mDNSResponder.exe
E:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
E:\Program Files\ESET\ESET Smart Security\ekrn.exe
E:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
E:\Program Files\Common Files\LightScribe\LSSrvc.exe
E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
E:\WINDOWS\system32\PnkBstrA.exe
E:\WINDOWS\system32\PnkBstrB.exe
E:\Program Files\CyberLink\Shared files\RichVideo.exe
E:\WINDOWS\system32\tcpsvcs.exe
E:\Program Files\Globe Telecom\Click Fix\bin\sprtsvc.exe
E:\WINDOWS\system32\ctfmon.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\TUProgSt.exe
E:\Program Files\Canon\CAL\CALMAIN.exe
E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
E:\Program Files\ESET\ESET Smart Security\egui.exe
E:\Program Files\Webshots\webshots.scr
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Program Files\Internet Download Manager\IDMan.exe
E:\Program Files\Internet Download Manager\IEMonitor.exe
F:\hijackthis2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - E:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - E:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - E:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ESET GUI] E:\Program Files\ESET\ESET Smart Security\egui.exe
O4 - HKCU\..\Run: [ping1] E:\Documents and Settings\JJRV\Desktop\ping1.bat
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
O8 - Extra context menu item: &Yahoo! Search - file:///E:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Download all links with IDM - E:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - E:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - E:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///E:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///E:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///E:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - E:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - E:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5727FF4C-EF4E-4d96-A96C-03AD91910448} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_ind.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1172213051390
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1235435631046
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - E:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - Unknown owner - E:\PROGRA~1\AVG\AVG8\avgemc.exe (file missing)
O23 - Service: AVG8 WatchDog (avg8wd) - Unknown owner - E:\PROGRA~1\AVG\AVG8\avgwdsvc.exe (file missing)
O23 - Service: AVG8 Firewall (avgfws8) - Unknown owner - E:\PROGRA~1\AVG\AVG8\avgfws8.exe (file missing)
O23 - Service: Admin Works Agent X8 (AWService) - OSA Technologies Inc., An Avocent Company - E:\Program Files\Intel\IDU\awServ.exe
O23 - Service: Bonjour Service - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - E:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - E:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - E:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - E:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FCI - Unknown owner - E:\WINDOWS\system32\svchost.exe:ext.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - E:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - E:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - E:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - E:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - E:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SupportSoft Sprocket Service (globe) (sprtsvc_globe) - SupportSoft, Inc. - E:\Program Files\Globe Telecom\Click Fix\bin\sprtsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - E:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - E:\WINDOWS\System32\TUProgSt.exe

--
End of file - 10118 bytes
« Last Edit: April 24, 2009, 06:28:09 am by PCBruiser »



Offline PCBruiser

  • Malware Removal Mentors
  • Administrator
  • Diamond Member
  • Posts: 7948
Hi,

My name is PCBruiser (or PCB for short), and I will be helping you to remove any malware on your system.

Please copy and print out these instructions using Notepad so they will be readily available to you. Make sure to work through all the Steps in the exact order in which they are listed below. If there's anything that you don't understand, please ask your question(s) before doing anything further.

1.  Please delete your copy of HJT and install a fresh one as instructed here:  http://spywarehammer.com/simplemachinesforum/index.php?topic=88.0  Your copy won't work properly where it is located.

2.  Please open the file ping1.bat on your desktop in Notepad.  Go to the Format menu and uncheck WordWrap and then copy and paste the text to a post in this topic.

3.  I assume you have changed your security software from AVG to ESET.  If that is the case, AVG has not been properly uninstalled.  Please go here:

http://www.avg.com/download-tools

and download AVG Remover and run it to clean up remnants of AVG.  That might have something to do with the instability.

4.  Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
    • Then click Finish.
    • MBAM will automatically start and you will be asked to update the program before performing a scan.

    If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
     If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
    • On the Scanner tab:
      • Make sure the "Perform Quick Scan" option is selected.
      • Then click on the Scan button.
      • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
      • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
      • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
      • Click OK to close the message box and continue with the removal process.
      • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
      • Make sure that everything is checked, and click Remove Selected.
      • When removal is completed, a log report will open in Notepad.
      • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
      • Copy and paste the contents of that report in your next reply and exit MBAM.  Please also post a fresh HJT log.
      Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process.  Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.
      Don't Read?  Can't learn!

      Offline jonax00

      • Bronze Member
      • Posts: 16
      1st, i apologize for taking so long to make this reply, been busy...
      ok, i hope i got ur instructions right;  this is gonna be a long reply, my thanx in advance for helping me,


      ping1.bat i just a file i made to make my internet connection alive... it has only 1 line in it that says;
      ping 192.168.1.3 -t, & ping2 says, ...1.1 -t

      here's the log generated from MBAM;
      Malwarebytes' Anti-Malware 1.36
      Database version: 1982
      Windows 5.1.2600 Service Pack 3

      04/14/09 11:46:58 PM
      mbam-log-2009-04-14 (23-46-58).txt

      Scan type: Quick Scan
      Objects scanned: 81427
      Time elapsed: 3 minute(s), 17 second(s)

      Memory Processes Infected: 0
      Memory Modules Infected: 0
      Registry Keys Infected: 4
      Registry Values Infected: 0
      Registry Data Items Infected: 1
      Folders Infected: 0
      Files Infected: 1

      Memory Processes Infected:
      (No malicious items detected)

      Memory Modules Infected:
      (No malicious items detected)

      Registry Keys Infected:
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9d71d88c-c598-4935-c5d1-43aa4db90836} (Trojan.Agent) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fci (Rootkit.Agent) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\seneka (Rootkit.Trace) -> Quarantined and deleted successfully.

      Registry Values Infected:
      (No malicious items detected)

      Registry Data Items Infected:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

      Folders Infected:
      (No malicious items detected)

      Files Infected:
      E:\WINDOWS\system32\winsetup64.exe (Trojan.Agent) -> Quarantined and deleted successfully.

      *end of file*

      & for a more thorough report, i hope u don't mind, here's a HJT log before doing all of this AND a log after doing this;

      here's the one before (this is after i uninstalled my copy & followed ur instructions to install a new one);

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 11:37:49 PM, on 04/14/09
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Boot mode: Normal

      Running processes:
      E:\WINDOWS\System32\smss.exe
      E:\WINDOWS\system32\winlogon.exe
      E:\WINDOWS\system32\services.exe
      E:\WINDOWS\system32\lsass.exe
      E:\WINDOWS\system32\Ati2evxx.exe
      E:\WINDOWS\system32\svchost.exe
      E:\WINDOWS\System32\svchost.exe
      E:\WINDOWS\system32\Ati2evxx.exe
      E:\WINDOWS\system32\spoolsv.exe
      E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      E:\Program Files\Intel\IDU\awServ.exe
      E:\Program Files\Bonjour\mDNSResponder.exe
      E:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
      E:\Program Files\ESET\ESET Smart Security\ekrn.exe
      E:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
      E:\Program Files\Common Files\LightScribe\LSSrvc.exe
      E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      E:\WINDOWS\Explorer.EXE
      E:\WINDOWS\system32\PnkBstrA.exe
      E:\WINDOWS\system32\PnkBstrB.exe
      E:\Program Files\CyberLink\Shared files\RichVideo.exe
      E:\WINDOWS\system32\tcpsvcs.exe
      E:\Program Files\Globe Telecom\Click Fix\bin\sprtsvc.exe
      E:\WINDOWS\system32\svchost.exe
      E:\WINDOWS\System32\TUProgSt.exe
      E:\Program Files\Canon\CAL\CALMAIN.exe
      E:\WINDOWS\system32\ctfmon.exe
      E:\Program Files\iTunes\iTunesHelper.exe
      E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
      E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      E:\Program Files\ESET\ESET Smart Security\egui.exe
      E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      E:\Program Files\Webshots\webshots.scr
      E:\WINDOWS\system32\wuauclt.exe
      E:\Program Files\iPod\bin\iPodService.exe
      E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
      E:\Program Files\Your Uninstaller 2008\uruninstaller.exe
      E:\Program Files\Your Uninstaller 2008\uruninstaller.exe
      E:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
      O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files\Internet Download Manager\IDMIECC.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
      O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - E:\Program Files\Yahoo!\Common\yiesrvc.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - E:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
      O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - E:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [StartCCC] "E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
      O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [ESET GUI] E:\Program Files\ESET\ESET Smart Security\egui.exe
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O8 - Extra context menu item: &Yahoo! Search - file:///E:\Program Files\Yahoo!\Common/ycsrch.htm
      O8 - Extra context menu item: Download all links with IDM - E:\Program Files\Internet Download Manager\IEGetAll.htm
      O8 - Extra context menu item: Download FLV video content with IDM - E:\Program Files\Internet Download Manager\IEGetVL.htm
      O8 - Extra context menu item: Download with IDM - E:\Program Files\Internet Download Manager\IEExt.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O8 - Extra context menu item: Yahoo! &Dictionary - file:///E:\Program Files\Yahoo!\Common/ycdict.htm
      O8 - Extra context menu item: Yahoo! &Maps - file:///E:\Program Files\Yahoo!\Common/ycmap.htm
      O8 - Extra context menu item: Yahoo! &SMS - file:///E:\Program Files\Yahoo!\Common/ycsms.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - E:\Program Files\Yahoo!\Common\yiesrvc.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - E:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {5727FF4C-EF4E-4d96-A96C-03AD91910448} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_ind.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1172213051390
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1235435631046
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
      O23 - Service: Apple Mobile Device - Apple Inc. - E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - E:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: Admin Works Agent X8 (AWService) - OSA Technologies Inc., An Avocent Company - E:\Program Files\Intel\IDU\awServ.exe
      O23 - Service: Bonjour Service - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Capture Device Service - InterVideo Inc. - E:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
      O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - E:\Program Files\Canon\CAL\CALMAIN.exe
      O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - E:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
      O23 - Service: ESET Service (ekrn) - ESET - E:\Program Files\ESET\ESET Smart Security\ekrn.exe
      O23 - Service: FCI - Unknown owner - E:\WINDOWS\system32\svchost.exe:ext.exe (file missing)
      O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - E:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - E:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
      O23 - Service: iPod Service - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - E:\Program Files\Common Files\LightScribe\LSSrvc.exe
      O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - E:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
      O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe
      O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - E:\Program Files\CyberLink\Shared files\RichVideo.exe
      O23 - Service: SupportSoft Sprocket Service (globe) (sprtsvc_globe) - SupportSoft, Inc. - E:\Program Files\Globe Telecom\Click Fix\bin\sprtsvc.exe
      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - E:\WINDOWS\System32\TuneUpDefragService.exe
      O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - E:\WINDOWS\System32\TUProgSt.exe

      --
      End of file - 10625 bytes

      & here's the log after completing your instructions & running HJT again;

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 12:16:22 AM, on 04/15/09
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Boot mode: Normal

      Running processes:
      E:\WINDOWS\System32\smss.exe
      E:\WINDOWS\system32\winlogon.exe
      E:\WINDOWS\system32\services.exe
      E:\WINDOWS\system32\lsass.exe
      E:\WINDOWS\system32\Ati2evxx.exe
      E:\WINDOWS\system32\svchost.exe
      E:\WINDOWS\System32\svchost.exe
      E:\WINDOWS\system32\Ati2evxx.exe
      E:\WINDOWS\system32\spoolsv.exe
      E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      E:\Program Files\Intel\IDU\awServ.exe
      E:\WINDOWS\Explorer.EXE
      E:\Program Files\Bonjour\mDNSResponder.exe
      E:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
      E:\Program Files\ESET\ESET Smart Security\ekrn.exe
      E:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
      E:\Program Files\Common Files\LightScribe\LSSrvc.exe
      E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      E:\WINDOWS\system32\PnkBstrA.exe
      E:\WINDOWS\system32\PnkBstrB.exe
      E:\Program Files\CyberLink\Shared files\RichVideo.exe
      E:\WINDOWS\system32\tcpsvcs.exe
      E:\Program Files\Globe Telecom\Click Fix\bin\sprtsvc.exe
      E:\WINDOWS\system32\svchost.exe
      E:\WINDOWS\System32\TUProgSt.exe
      E:\Program Files\Canon\CAL\CALMAIN.exe
      E:\WINDOWS\system32\ctfmon.exe
      E:\Program Files\iTunes\iTunesHelper.exe
      E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      E:\Program Files\ESET\ESET Smart Security\egui.exe
      E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
      E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      E:\Program Files\Webshots\webshots.scr
      E:\Program Files\iPod\bin\iPodService.exe
      E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
      E:\WINDOWS\system32\NOTEPAD.EXE
      E:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
      O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files\Internet Download Manager\IDMIECC.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
      O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - E:\Program Files\Yahoo!\Common\yiesrvc.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - E:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
      O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - E:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [StartCCC] "E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
      O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [ESET GUI] E:\Program Files\ESET\ESET Smart Security\egui.exe
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
      O4 - Startup: Webshots.lnk = E:\Program Files\Webshots\Launcher.exe
      O8 - Extra context menu item: &Yahoo! Search - file:///E:\Program Files\Yahoo!\Common/ycsrch.htm
      O8 - Extra context menu item: Download all links with IDM - E:\Program Files\Internet Download Manager\IEGetAll.htm
      O8 - Extra context menu item: Download FLV video content with IDM - E:\Program Files\Internet Download Manager\IEGetVL.htm
      O8 - Extra context menu item: Download with IDM - E:\Program Files\Internet Download Manager\IEExt.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O8 - Extra context menu item: Yahoo! &Dictionary - file:///E:\Program Files\Yahoo!\Common/ycdict.htm
      O8 - Extra context menu item: Yahoo! &Maps - file:///E:\Program Files\Yahoo!\Common/ycmap.htm
      O8 - Extra context menu item: Yahoo! &SMS - file:///E:\Program Files\Yahoo!\Common/ycsms.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - E:\Program Files\Yahoo!\Common\yiesrvc.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - E:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {5727FF4C-EF4E-4d96-A96C-03AD91910448} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_ind.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1172213051390
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1235435631046
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
      O23 - Service: Apple Mobile Device - Apple Inc. - E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - E:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: Admin Works Agent X8 (AWService) - OSA Technologies Inc., An Avocent Company - E:\Program Files\Intel\IDU\awServ.exe
      O23 - Service: Bonjour Service - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Capture Device Service - InterVideo Inc. - E:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
      O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - E:\Program Files\Canon\CAL\CALMAIN.exe
      O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - E:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
      O23 - Service: ESET Service (ekrn) - ESET - E:\Program Files\ESET\ESET Smart Security\ekrn.exe
      O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - E:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - E:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
      O23 - Service: iPod Service - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - E:\Program Files\Common Files\LightScribe\LSSrvc.exe
      O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - E:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
      O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe
      O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - E:\Program Files\CyberLink\Shared files\RichVideo.exe
      O23 - Service: SupportSoft Sprocket Service (globe) (sprtsvc_globe) - SupportSoft, Inc. - E:\Program Files\Globe Telecom\Click Fix\bin\sprtsvc.exe
      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - E:\WINDOWS\System32\TuneUpDefragService.exe
      O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - E:\WINDOWS\System32\TUProgSt.exe

      --
      End of file - 10416 bytes



      please, take your time, sir/ma'am.  and once again thank you so much for helping me.
      ^_^

      Offline PCBruiser

      • Malware Removal Mentors
      • Administrator
      • Diamond Member
      • Posts: 7948
      Hi,

      Well, in your first HJT log there was a clear rootkit service starting up that MBAM looks like it killed for us.  I suspect that was what was giving you all the generic host services errors.  Now, I need you to run something else for me. 

      1. Please permanently disable Spybot S&D's TeaTimer.  It can cause conflicts with other security software.  We do recommend using the remaining functions of Spybot S&D.  Here's how to permanently disable TeaTimer:

      a) Run Spybot-S&D
      b) Go to the Mode menu, and make sure "Advanced Mode" is selected
      c) On the left hand side, choose Tools -> Resident
      d) Uncheck "Resident TeaTimer" and OK any prompts
      e) Restart your computer.

      2.  Download Combofix from any of the links below, and save it to your desktop.  For information regarding this download, please visit this webpage: http://www.bleepingcomputer.com/combofix/how-to-use-combofix

      Link 1
      Link 2
      Link 3


      **Note:  It is important that it is saved directly to your desktop**

      --------------------------------------------------------------------

      a. Close any open browsers.

      b. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

      --------------------------------------------------------------------

      Double click on combofix.exe & follow the prompts.
      When finished, it will produce a report for you. 

      Note:  Do not click combofix's window with your mouse while it's running. That may cause it to stall.

      3.  Please post the following:

      a. combofix.txt
      b. a fresh HJT log
      c. please tell me how your system is working now.
      Don't Read?  Can't learn!

      Offline jonax00

      • Bronze Member
      • Posts: 16
      hello again,

           i successfully disables the teatimer...  saved the combofix.exe in my desktop & disable eset, but when i double clicked combofix.exe, it said AVG antivirus was still active & not disabled.  i thought i uninstalled that software a long time ago & also completely removed it using avgremover.... but here is combofix saying i still have avg running!  =(
           so i opened again the avgremover.exe...  after i opened it & restarted my machine, i opened combofix again... but then
      two error messages appeared,
         the 1st error msg title says; "error - win32 only" w/ the message in different languages saying "incompatible OS. Combofix only works
      for workstations w/ win 2000 & xp.
         the 2nd error msg title is the same as the 1st one; "warning!!!" saying AVG anti-virus pro edition is still active & warns me that it is to my own risk
      to run combofix while avg is still running...
         here is the avgremover.log:
      2009-04-16 13:31:08,375 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
      2009-04-16 13:31:08,421 WARN AvgDir param empty.
      2009-04-16 13:31:08,421 WARN AvgDataDir param empty.
      2009-04-16 13:32:30,437 INFO AvgRemover runs in attempt number 1
      2009-04-16 13:32:30,437 INFO *****     Services     *****
      2009-04-16 13:32:30,437 INFO Processing service avg8emc
      2009-04-16 13:32:30,453 INFO Service avg8emc is not installed
      2009-04-16 13:32:30,453 DEBUG Service avg8emc RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service avg8emc are not present
      2009-04-16 13:32:30,453 INFO Processing service avgfws8
      2009-04-16 13:32:30,453 INFO Service avgfws8 is not installed
      2009-04-16 13:32:30,453 DEBUG Service avgfws8 RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service avgfws8 are not present
      2009-04-16 13:32:30,453 INFO Processing service avg8wd
      2009-04-16 13:32:30,453 INFO Service avg8wd is not installed
      2009-04-16 13:32:30,453 DEBUG Service avg8wd RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service avg8wd are not present
      2009-04-16 13:32:30,453 INFO Processing service AvgMfx86
      2009-04-16 13:32:30,453 INFO Service AvgMfx86 is not installed
      2009-04-16 13:32:30,453 DEBUG Service AvgMfx86 RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service AvgMfx86 are not present
      2009-04-16 13:32:30,453 INFO Processing service AvgMfx64
      2009-04-16 13:32:30,453 INFO Service AvgMfx64 is not installed
      2009-04-16 13:32:30,453 DEBUG Service AvgMfx64 RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service AvgMfx64 are not present
      2009-04-16 13:32:30,453 INFO Processing service AvgLdx86
      2009-04-16 13:32:30,453 INFO Service AvgLdx86 is not installed
      2009-04-16 13:32:30,453 DEBUG Service AvgLdx86 RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service AvgLdx86 are not present
      2009-04-16 13:32:30,453 INFO Processing service AvgLdx64
      2009-04-16 13:32:30,453 INFO Service AvgLdx64 is not installed
      2009-04-16 13:32:30,453 DEBUG Service AvgLdx64 RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service AvgLdx64 are not present
      2009-04-16 13:32:30,453 INFO Processing service AvgTdiX
      2009-04-16 13:32:30,453 INFO Service AvgTdiX is not installed
      2009-04-16 13:32:30,453 DEBUG Service AvgTdiX RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service AvgTdiX are not present
      2009-04-16 13:32:30,453 INFO Processing service AvgTdiA
      2009-04-16 13:32:30,453 INFO Service AvgTdiA is not installed
      2009-04-16 13:32:30,453 DEBUG Service AvgTdiA RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service AvgTdiA are not present
      2009-04-16 13:32:30,453 INFO Processing service AvgWFPx
      2009-04-16 13:32:30,453 INFO Service AvgWFPx is not installed
      2009-04-16 13:32:30,453 DEBUG Service AvgWFPx RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service AvgWFPx are not present
      2009-04-16 13:32:30,453 INFO Processing service AvgWFPa
      2009-04-16 13:32:30,453 INFO Service AvgWFPa is not installed
      2009-04-16 13:32:30,453 DEBUG Service AvgWFPa RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service AvgWFPa are not present
      2009-04-16 13:32:30,453 INFO Processing service AvgRkx86
      2009-04-16 13:32:30,453 INFO Service AvgRkx86 is not installed
      2009-04-16 13:32:30,453 DEBUG Service AvgRkx86 RegCleanup
      2009-04-16 13:32:30,453 DEBUG Registry keys for service AvgRkx86 are not present
      2009-04-16 13:32:30,453 INFO *****     Registry keys and values     *****
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove
      2009-04-16 13:32:30,453 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove
      2009-04-16 13:32:30,453 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present
      2009-04-16 13:32:30,453 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt
      2009-04-16 13:32:30,453 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found
      2009-04-16 13:32:30,453 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms
      2009-04-16 13:32:30,453 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found
      2009-04-16 13:32:30,453 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
      2009-04-16 13:32:30,453 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
      2009-04-16 13:32:30,453 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
      2009-04-16 13:32:30,453 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove
      2009-04-16 13:32:30,453 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove
      2009-04-16 13:32:30,453 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs doesn't need to be modified
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:32:30,453 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:32:30,453 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:32:30,453 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:32:30,453 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove
      2009-04-16 13:32:30,453 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Classes\.avgdi
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\.avgdi not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\AVG\Clients
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG\Clients ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG\Clients not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\AVG\AVG8
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG\AVG8 not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\AVG
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\AVG:DumpType Remove
      2009-04-16 13:32:30,453 DEBUG Value SOFTWARE\AVG:DumpType not present - Key not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\AVG
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG Remove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\AVG\AVG8
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG\AVG8 not found
      2009-04-16 13:32:30,453 INFO Processing registry SOFTWARE\AVG
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG Remove
      2009-04-16 13:32:30,453 DEBUG Key SOFTWARE\AVG not found
      2009-04-16 13:32:30,453 INFO Processing registry aAvgAPI.AvgBro
      2009-04-16 13:32:30,453 DEBUG Key aAvgAPI.AvgBro ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key aAvgAPI.AvgBro not found
      2009-04-16 13:32:30,453 INFO Processing registry AVG.Office
      2009-04-16 13:32:30,453 DEBUG Key AVG.Office ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key AVG.Office not found
      2009-04-16 13:32:30,453 INFO Processing registry AVG.Office.8
      2009-04-16 13:32:30,453 DEBUG Key AVG.Office.8 ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key AVG.Office.8 not found
      2009-04-16 13:32:30,453 INFO Processing registry avgtoolbar.AVGTOOLBAR
      2009-04-16 13:32:30,453 DEBUG Key avgtoolbar.AVGTOOLBAR ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key avgtoolbar.AVGTOOLBAR not found
      2009-04-16 13:32:30,453 INFO Processing registry avgtoolbar.AVGTOOLBARMenu Button
      2009-04-16 13:32:30,453 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button not found
      2009-04-16 13:32:30,453 INFO Processing registry avgtoolbar.AVGTOOLBARToggle Button
      2009-04-16 13:32:30,453 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button not found
      2009-04-16 13:32:30,453 INFO Processing registry LinkScannerIE.NavFilter
      2009-04-16 13:32:30,453 DEBUG Key LinkScannerIE.NavFilter ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key LinkScannerIE.NavFilter not found
      2009-04-16 13:32:30,453 INFO Processing registry LinkScannerIE.NavFilter.1
      2009-04-16 13:32:30,453 DEBUG Key LinkScannerIE.NavFilter.1 ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key LinkScannerIE.NavFilter.1 not found
      2009-04-16 13:32:30,453 INFO Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA}
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found
      2009-04-16 13:32:30,453 INFO Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found
      2009-04-16 13:32:30,453 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
      2009-04-16 13:32:30,453 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
      2009-04-16 13:32:30,453 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
      2009-04-16 13:32:30,453 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found
      2009-04-16 13:32:30,453 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F}
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found
      2009-04-16 13:32:30,453 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990}
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found
      2009-04-16 13:32:30,453 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
      2009-04-16 13:32:30,453 INFO Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D}
      2009-04-16 13:32:30,453 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found
      2009-04-16 13:32:30,453 INFO Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C}
      2009-04-16 13:32:30,453 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found
      2009-04-16 13:32:30,453 INFO Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30}
      2009-04-16 13:32:30,453 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found
      2009-04-16 13:32:30,453 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
      2009-04-16 13:32:30,453 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
      2009-04-16 13:32:30,453 INFO Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}
      2009-04-16 13:32:30,453 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove
      2009-04-16 13:32:30,453 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found
      2009-04-16 13:32:30,453 INFO *****     Files and folders     *****
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 0
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 1
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 2
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 3
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 4
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 5
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 6
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 7
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 8
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 9
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 10
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 11
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 12
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 13
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 14
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 15
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 16
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 17
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 18
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 19
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 20
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 21
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 22
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 23
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 24
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 25
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 26
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 27
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 28
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 29
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 30
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 31
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 32
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 33
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 34
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 35
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 36
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 37
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 38
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 39
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 40
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 41
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 42
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 43
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 44
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 45
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 46
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 47
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 48
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 49
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 50
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 51
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 52
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 53
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 54
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 55
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 56
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 57
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 58
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 59
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 60
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 61
      2009-04-16 13:32:30,453 DEBUG Missing ParentDir path for fileItem number 62
      2009-04-16 13:32:30,453 DEBUG Processing item E:\Documents and Settings\JJRV\Application Data\AVGTOOLBAR
      2009-04-16 13:32:30,453 INFO Directory E:\Documents and Settings\JJRV\Application Data\AVGTOOLBAR not found
      2009-04-16 13:32:30,453 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:32:30,453 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:32:30,453 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:32:30,453 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:32:30,453 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:32:30,453 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:32:30,453 DEBUG Processing item E:\WINDOWS\System32\Drivers\avg
      2009-04-16 13:32:30,453 INFO Directory E:\WINDOWS\System32\Drivers\avg not found
      2009-04-16 13:32:30,453 DEBUG Processing item E:\WINDOWS\System32
      2009-04-16 13:32:30,453 DEBUG Processing item E:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0
      2009-04-16 13:32:30,453 INFO Directory E:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0 not found
      2009-04-16 13:32:30,453 DEBUG Processing item E:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0
      2009-04-16 13:32:30,453 INFO Directory E:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0 not found
      2009-04-16 13:32:30,453 DEBUG Processing item E:\Documents and Settings\All Users\Desktop\avg 8.0.lnk
      2009-04-16 13:32:30,453 INFO File E:\Documents and Settings\All Users\Desktop\avg 8.0.lnk not found
      2009-04-16 13:32:30,453 DEBUG Processing item E:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk
      2009-04-16 13:32:30,453 INFO File E:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk not found
      2009-04-16 13:32:30,453 DEBUG Processing item E:\Program Files\AVG
      2009-04-16 13:32:30,453 INFO Directory E:\Program Files\AVG not found
      2009-04-16 13:32:30,453 INFO *****     Avg Fw NDIS driver     *****
      2009-04-16 13:32:34,468 INFO FW NDIS driver not present
      2009-04-16 13:34:13,250 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
      2009-04-16 13:34:13,250 WARN AvgDir param empty.
      2009-04-16 13:34:13,250 WARN AvgDataDir param empty.
      2009-04-16 13:34:14,203 INFO AvgRemover runs in attempt number 1
      2009-04-16 13:34:14,203 INFO *****     Services     *****
      2009-04-16 13:34:14,203 INFO Processing service avg8emc
      2009-04-16 13:34:14,203 INFO Service avg8emc is not installed
      2009-04-16 13:34:14,203 DEBUG Service avg8emc RegCleanup
      2009-04-16 13:34:14,203 DEBUG Registry keys for service avg8emc are not present
      2009-04-16 13:34:14,203 INFO Processing service avgfws8
      2009-04-16 13:34:14,218 INFO Service avgfws8 is not installed
      2009-04-16 13:34:14,218 DEBUG Service avgfws8 RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service avgfws8 are not present
      2009-04-16 13:34:14,218 INFO Processing service avg8wd
      2009-04-16 13:34:14,218 INFO Service avg8wd is not installed
      2009-04-16 13:34:14,218 DEBUG Service avg8wd RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service avg8wd are not present
      2009-04-16 13:34:14,218 INFO Processing service AvgMfx86
      2009-04-16 13:34:14,218 INFO Service AvgMfx86 is not installed
      2009-04-16 13:34:14,218 DEBUG Service AvgMfx86 RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service AvgMfx86 are not present
      2009-04-16 13:34:14,218 INFO Processing service AvgMfx64
      2009-04-16 13:34:14,218 INFO Service AvgMfx64 is not installed
      2009-04-16 13:34:14,218 DEBUG Service AvgMfx64 RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service AvgMfx64 are not present
      2009-04-16 13:34:14,218 INFO Processing service AvgLdx86
      2009-04-16 13:34:14,218 INFO Service AvgLdx86 is not installed
      2009-04-16 13:34:14,218 DEBUG Service AvgLdx86 RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service AvgLdx86 are not present
      2009-04-16 13:34:14,218 INFO Processing service AvgLdx64
      2009-04-16 13:34:14,218 INFO Service AvgLdx64 is not installed
      2009-04-16 13:34:14,218 DEBUG Service AvgLdx64 RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service AvgLdx64 are not present
      2009-04-16 13:34:14,218 INFO Processing service AvgTdiX
      2009-04-16 13:34:14,218 INFO Service AvgTdiX is not installed
      2009-04-16 13:34:14,218 DEBUG Service AvgTdiX RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service AvgTdiX are not present
      2009-04-16 13:34:14,218 INFO Processing service AvgTdiA
      2009-04-16 13:34:14,218 INFO Service AvgTdiA is not installed
      2009-04-16 13:34:14,218 DEBUG Service AvgTdiA RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service AvgTdiA are not present
      2009-04-16 13:34:14,218 INFO Processing service AvgWFPx
      2009-04-16 13:34:14,218 INFO Service AvgWFPx is not installed
      2009-04-16 13:34:14,218 DEBUG Service AvgWFPx RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service AvgWFPx are not present
      2009-04-16 13:34:14,218 INFO Processing service AvgWFPa
      2009-04-16 13:34:14,218 INFO Service AvgWFPa is not installed
      2009-04-16 13:34:14,218 DEBUG Service AvgWFPa RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service AvgWFPa are not present
      2009-04-16 13:34:14,218 INFO Processing service AvgRkx86
      2009-04-16 13:34:14,218 INFO Service AvgRkx86 is not installed
      2009-04-16 13:34:14,218 DEBUG Service AvgRkx86 RegCleanup
      2009-04-16 13:34:14,218 DEBUG Registry keys for service AvgRkx86 are not present
      2009-04-16 13:34:14,218 INFO *****     Registry keys and values     *****
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove
      2009-04-16 13:34:14,218 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove
      2009-04-16 13:34:14,218 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present
      2009-04-16 13:34:14,218 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt
      2009-04-16 13:34:14,218 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found
      2009-04-16 13:34:14,218 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms
      2009-04-16 13:34:14,218 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found
      2009-04-16 13:34:14,218 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
      2009-04-16 13:34:14,218 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
      2009-04-16 13:34:14,218 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
      2009-04-16 13:34:14,218 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove
      2009-04-16 13:34:14,218 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove
      2009-04-16 13:34:14,218 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs doesn't need to be modified
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:34:14,218 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:34:14,218 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:34:14,218 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:34:14,218 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove
      2009-04-16 13:34:14,218 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall

      to be continued on my next post as this original post says it exceeds the maximum allowed length....

      Offline jonax00

      • Bronze Member
      • Posts: 16
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Classes\.avgdi
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\.avgdi not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\AVG\Clients
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG\Clients ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG\Clients not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\AVG\AVG8
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG\AVG8 not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\AVG
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\AVG:DumpType Remove
      2009-04-16 13:34:14,218 DEBUG Value SOFTWARE\AVG:DumpType not present - Key not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\AVG
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG Remove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\AVG\AVG8
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG\AVG8 not found
      2009-04-16 13:34:14,218 INFO Processing registry SOFTWARE\AVG
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG Remove
      2009-04-16 13:34:14,218 DEBUG Key SOFTWARE\AVG not found
      2009-04-16 13:34:14,218 INFO Processing registry aAvgAPI.AvgBro
      2009-04-16 13:34:14,218 DEBUG Key aAvgAPI.AvgBro ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key aAvgAPI.AvgBro not found
      2009-04-16 13:34:14,218 INFO Processing registry AVG.Office
      2009-04-16 13:34:14,218 DEBUG Key AVG.Office ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key AVG.Office not found
      2009-04-16 13:34:14,218 INFO Processing registry AVG.Office.8
      2009-04-16 13:34:14,218 DEBUG Key AVG.Office.8 ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key AVG.Office.8 not found
      2009-04-16 13:34:14,218 INFO Processing registry avgtoolbar.AVGTOOLBAR
      2009-04-16 13:34:14,218 DEBUG Key avgtoolbar.AVGTOOLBAR ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key avgtoolbar.AVGTOOLBAR not found
      2009-04-16 13:34:14,218 INFO Processing registry avgtoolbar.AVGTOOLBARMenu Button
      2009-04-16 13:34:14,218 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button not found
      2009-04-16 13:34:14,218 INFO Processing registry avgtoolbar.AVGTOOLBARToggle Button
      2009-04-16 13:34:14,218 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button not found
      2009-04-16 13:34:14,218 INFO Processing registry LinkScannerIE.NavFilter
      2009-04-16 13:34:14,218 DEBUG Key LinkScannerIE.NavFilter ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key LinkScannerIE.NavFilter not found
      2009-04-16 13:34:14,218 INFO Processing registry LinkScannerIE.NavFilter.1
      2009-04-16 13:34:14,218 DEBUG Key LinkScannerIE.NavFilter.1 ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key LinkScannerIE.NavFilter.1 not found
      2009-04-16 13:34:14,218 INFO Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA}
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found
      2009-04-16 13:34:14,218 INFO Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found
      2009-04-16 13:34:14,218 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
      2009-04-16 13:34:14,218 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
      2009-04-16 13:34:14,218 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
      2009-04-16 13:34:14,218 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found
      2009-04-16 13:34:14,218 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F}
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found
      2009-04-16 13:34:14,218 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990}
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found
      2009-04-16 13:34:14,218 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
      2009-04-16 13:34:14,218 INFO Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D}
      2009-04-16 13:34:14,218 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found
      2009-04-16 13:34:14,218 INFO Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C}
      2009-04-16 13:34:14,218 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found
      2009-04-16 13:34:14,218 INFO Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30}
      2009-04-16 13:34:14,218 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found
      2009-04-16 13:34:14,218 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
      2009-04-16 13:34:14,218 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
      2009-04-16 13:34:14,218 INFO Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}
      2009-04-16 13:34:14,218 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove
      2009-04-16 13:34:14,218 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found
      2009-04-16 13:34:14,218 INFO *****     Files and folders     *****
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 0
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 1
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 2
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 3
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 4
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 5
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 6
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 7
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 8
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 9
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 10
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 11
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 12
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 13
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 14
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 15
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 16
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 17
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 18
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 19
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 20
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 21
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 22
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 23
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 24
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 25
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 26
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 27
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 28
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 29
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 30
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 31
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 32
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 33
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 34
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 35
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 36
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 37
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 38
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 39
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 40
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 41
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 42
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 43
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 44
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 45
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 46
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 47
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 48
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 49
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 50
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 51
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 52
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 53
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 54
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 55
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 56
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 57
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 58
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 59
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 60
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 61
      2009-04-16 13:34:14,218 DEBUG Missing ParentDir path for fileItem number 62
      2009-04-16 13:34:14,218 DEBUG Processing item E:\Documents and Settings\JJRV\Application Data\AVGTOOLBAR
      2009-04-16 13:34:14,218 INFO Directory E:\Documents and Settings\JJRV\Application Data\AVGTOOLBAR not found
      2009-04-16 13:34:14,218 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:14,218 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:14,218 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:14,218 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:14,218 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:14,218 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:14,218 DEBUG Processing item E:\WINDOWS\System32\Drivers\avg
      2009-04-16 13:34:14,218 INFO Directory E:\WINDOWS\System32\Drivers\avg not found
      2009-04-16 13:34:14,218 DEBUG Processing item E:\WINDOWS\System32
      2009-04-16 13:34:14,218 DEBUG Processing item E:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0
      2009-04-16 13:34:14,218 INFO Directory E:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0 not found
      2009-04-16 13:34:14,218 DEBUG Processing item E:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0
      2009-04-16 13:34:14,218 INFO Directory E:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0 not found
      2009-04-16 13:34:14,218 DEBUG Processing item E:\Documents and Settings\All Users\Desktop\avg 8.0.lnk
      2009-04-16 13:34:14,218 INFO File E:\Documents and Settings\All Users\Desktop\avg 8.0.lnk not found
      2009-04-16 13:34:14,218 DEBUG Processing item E:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk
      2009-04-16 13:34:14,218 INFO File E:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk not found
      2009-04-16 13:34:14,218 DEBUG Processing item E:\Program Files\AVG
      2009-04-16 13:34:14,218 INFO Directory E:\Program Files\AVG not found
      2009-04-16 13:34:14,218 INFO *****     Avg Fw NDIS driver     *****
      2009-04-16 13:34:15,000 INFO FW NDIS driver not present
      2009-04-16 13:34:25,359 DEBUG Avg8Uninstall\Directories key failed to open (error: e0010013)
      2009-04-16 13:34:25,359 WARN AvgDir param empty.
      2009-04-16 13:34:25,359 WARN AvgDataDir param empty.
      2009-04-16 13:34:26,406 INFO AvgRemover runs in attempt number 1
      2009-04-16 13:34:26,421 INFO *****     Services     *****
      2009-04-16 13:34:26,421 INFO Processing service avg8emc
      2009-04-16 13:34:26,421 INFO Service avg8emc is not installed
      2009-04-16 13:34:26,421 DEBUG Service avg8emc RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service avg8emc are not present
      2009-04-16 13:34:26,421 INFO Processing service avgfws8
      2009-04-16 13:34:26,421 INFO Service avgfws8 is not installed
      2009-04-16 13:34:26,421 DEBUG Service avgfws8 RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service avgfws8 are not present
      2009-04-16 13:34:26,421 INFO Processing service avg8wd
      2009-04-16 13:34:26,421 INFO Service avg8wd is not installed
      2009-04-16 13:34:26,421 DEBUG Service avg8wd RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service avg8wd are not present
      2009-04-16 13:34:26,421 INFO Processing service AvgMfx86
      2009-04-16 13:34:26,421 INFO Service AvgMfx86 is not installed
      2009-04-16 13:34:26,421 DEBUG Service AvgMfx86 RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service AvgMfx86 are not present
      2009-04-16 13:34:26,421 INFO Processing service AvgMfx64
      2009-04-16 13:34:26,421 INFO Service AvgMfx64 is not installed
      2009-04-16 13:34:26,421 DEBUG Service AvgMfx64 RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service AvgMfx64 are not present
      2009-04-16 13:34:26,421 INFO Processing service AvgLdx86
      2009-04-16 13:34:26,421 INFO Service AvgLdx86 is not installed
      2009-04-16 13:34:26,421 DEBUG Service AvgLdx86 RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service AvgLdx86 are not present
      2009-04-16 13:34:26,421 INFO Processing service AvgLdx64
      2009-04-16 13:34:26,421 INFO Service AvgLdx64 is not installed
      2009-04-16 13:34:26,421 DEBUG Service AvgLdx64 RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service AvgLdx64 are not present
      2009-04-16 13:34:26,421 INFO Processing service AvgTdiX
      2009-04-16 13:34:26,421 INFO Service AvgTdiX is not installed
      2009-04-16 13:34:26,421 DEBUG Service AvgTdiX RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service AvgTdiX are not present
      2009-04-16 13:34:26,421 INFO Processing service AvgTdiA
      2009-04-16 13:34:26,421 INFO Service AvgTdiA is not installed
      2009-04-16 13:34:26,421 DEBUG Service AvgTdiA RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service AvgTdiA are not present
      2009-04-16 13:34:26,421 INFO Processing service AvgWFPx
      2009-04-16 13:34:26,421 INFO Service AvgWFPx is not installed
      2009-04-16 13:34:26,421 DEBUG Service AvgWFPx RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service AvgWFPx are not present
      2009-04-16 13:34:26,421 INFO Processing service AvgWFPa
      2009-04-16 13:34:26,421 INFO Service AvgWFPa is not installed
      2009-04-16 13:34:26,421 DEBUG Service AvgWFPa RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service AvgWFPa are not present
      2009-04-16 13:34:26,421 INFO Processing service AvgRkx86
      2009-04-16 13:34:26,421 INFO Service AvgRkx86 is not installed
      2009-04-16 13:34:26,421 DEBUG Service AvgRkx86 RegCleanup
      2009-04-16 13:34:26,421 DEBUG Registry keys for service AvgRkx86 are not present
      2009-04-16 13:34:26,421 INFO *****     Registry keys and values     *****
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} Remove
      2009-04-16 13:34:26,421 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{3f963a5b-e555-4543-90e2-c3908898db71} is not present
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Mozilla\Firefox\Extensions
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} Remove
      2009-04-16 13:34:26,421 INFO Value SOFTWARE\Mozilla\Firefox\Extensions:{1d5287d1-8a92-0001-1f31-1cec198018d8} is not present
      2009-04-16 13:34:26,421 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt
      2009-04-16 13:34:26,421 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avg8Alrt not found
      2009-04-16 13:34:26,421 INFO Processing registry SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms
      2009-04-16 13:34:26,421 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SYSTEM\CurrentControlSet\Services\Eventlog\Application\AvgEms not found
      2009-04-16 13:34:26,421 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
      2009-04-16 13:34:26,421 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
      2009-04-16 13:34:26,421 INFO Processing registry SYSTEM\CurrentControlSet\Services\Avg
      2009-04-16 13:34:26,421 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SYSTEM\CurrentControlSet\Services\Avg not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054}
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AF1721-312E-4B07-8B17-CEB780DCD054} not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension Remove
      2009-04-16 13:34:26,421 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:Outlook Setup Extension is not present
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Exchange\Client\Extensions
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension Remove
      2009-04-16 13:34:26,421 INFO Value SOFTWARE\Microsoft\Exchange\Client\Extensions:AVG Exchange Extension is not present
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs Modify
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows:AppInit_DLLs doesn't need to be modified
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:34:26,421 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:34:26,421 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:34:26,421 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} Remove
      2009-04-16 13:34:26,421 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved:{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} is not present
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Run
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY Remove
      2009-04-16 13:34:26,421 INFO Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run:AVG8_TRAY is not present
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3 not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Classes\AvgDiagFile
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\AvgDiagFile ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\AvgDiagFile not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Classes\.avgdi
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\.avgdi ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\.avgdi not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\piffile\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AVG8 Shell Extension not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\AVG\Clients
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG\Clients ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG\Clients not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\AVG\AVG8
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG\AVG8 not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\AVG
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\AVG:DumpType Remove
      2009-04-16 13:34:26,421 DEBUG Value SOFTWARE\AVG:DumpType not present - Key not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\AVG
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG Remove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\AVG\AVG8
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG\AVG8 ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG\AVG8 not found
      2009-04-16 13:34:26,421 INFO Processing registry SOFTWARE\AVG
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG Remove
      2009-04-16 13:34:26,421 DEBUG Key SOFTWARE\AVG not found
      2009-04-16 13:34:26,421 INFO Processing registry aAvgAPI.AvgBro
      2009-04-16 13:34:26,421 DEBUG Key aAvgAPI.AvgBro ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key aAvgAPI.AvgBro not found
      2009-04-16 13:34:26,421 INFO Processing registry AVG.Office
      2009-04-16 13:34:26,421 DEBUG Key AVG.Office ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key AVG.Office not found
      2009-04-16 13:34:26,421 INFO Processing registry AVG.Office.8
      2009-04-16 13:34:26,421 DEBUG Key AVG.Office.8 ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key AVG.Office.8 not found
      2009-04-16 13:34:26,421 INFO Processing registry avgtoolbar.AVGTOOLBAR
      2009-04-16 13:34:26,421 DEBUG Key avgtoolbar.AVGTOOLBAR ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key avgtoolbar.AVGTOOLBAR not found
      2009-04-16 13:34:26,421 INFO Processing registry avgtoolbar.AVGTOOLBARMenu Button
      2009-04-16 13:34:26,421 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key avgtoolbar.AVGTOOLBARMenu Button not found
      2009-04-16 13:34:26,421 INFO Processing registry avgtoolbar.AVGTOOLBARToggle Button
      2009-04-16 13:34:26,421 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key avgtoolbar.AVGTOOLBARToggle Button not found
      2009-04-16 13:34:26,421 INFO Processing registry LinkScannerIE.NavFilter
      2009-04-16 13:34:26,421 DEBUG Key LinkScannerIE.NavFilter ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key LinkScannerIE.NavFilter not found
      2009-04-16 13:34:26,421 INFO Processing registry LinkScannerIE.NavFilter.1
      2009-04-16 13:34:26,421 DEBUG Key LinkScannerIE.NavFilter.1 ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key LinkScannerIE.NavFilter.1 not found
      2009-04-16 13:34:26,421 INFO Processing registry CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA}
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{04373D9C-5ED8-44f2-BA00-7895D6A5A2DA} not found
      2009-04-16 13:34:26,421 INFO Processing registry CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} not found
      2009-04-16 13:34:26,421 INFO Processing registry CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} not found
      2009-04-16 13:34:26,421 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
      2009-04-16 13:34:26,421 INFO Processing registry CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} not found
      2009-04-16 13:34:26,421 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698E} not found
      2009-04-16 13:34:26,421 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E2698F}
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E2698F} not found
      2009-04-16 13:34:26,421 INFO Processing registry CLSID\{A057A204-BACC-4D26-9990-79A187E26990}
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{A057A204-BACC-4D26-9990-79A187E26990} not found
      2009-04-16 13:34:26,421 INFO Processing registry CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} not found
      2009-04-16 13:34:26,421 INFO Processing registry Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D}
      2009-04-16 13:34:26,421 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key Interface\{52261B0E-CA1A-4FA9-9805-4D01202DF09D} not found
      2009-04-16 13:34:26,421 INFO Processing registry Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C}
      2009-04-16 13:34:26,421 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key Interface\{8EA1F9F2-997A-4832-8E09-815E3D0C0A0C} not found
      2009-04-16 13:34:26,421 INFO Processing registry TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30}
      2009-04-16 13:34:26,421 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key TypeLib\{3E536428-8E1A-4A2C-8463-4A8F74763C30} not found
      2009-04-16 13:34:26,421 INFO Processing registry TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}
      2009-04-16 13:34:26,421 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7} not found
      2009-04-16 13:34:26,421 INFO Processing registry TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}
      2009-04-16 13:34:26,421 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} ForceRemove
      2009-04-16 13:34:26,421 DEBUG Key TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9} not found
      2009-04-16 13:34:26,421 INFO *****     Files and folders     *****
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 0
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 1
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 2
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 3
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 4
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 5
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 6
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 7
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 8
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 9
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 10
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 11
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 12
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 13
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 14
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 15
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 16
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 17
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 18
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 19
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 20
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 21
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 22
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 23
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 24
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 25
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 26
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 27
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 28
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 29
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 30
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 31
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 32
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 33
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 34
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 35
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 36
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 37
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 38
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 39
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 40
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 41
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 42
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 43
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 44
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 45
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 46
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 47
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 48
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 49
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 50
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 51
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 52
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 53
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 54
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 55
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 56
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 57
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 58
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 59
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 60
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 61
      2009-04-16 13:34:26,421 DEBUG Missing ParentDir path for fileItem number 62
      2009-04-16 13:34:26,421 DEBUG Processing item E:\Documents and Settings\JJRV\Application Data\AVGTOOLBAR
      2009-04-16 13:34:26,421 INFO Directory E:\Documents and Settings\JJRV\Application Data\AVGTOOLBAR not found
      2009-04-16 13:34:26,421 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:26,421 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:26,421 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:26,421 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:26,421 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:26,421 DEBUG Processing item E:\WINDOWS\System32\Drivers
      2009-04-16 13:34:26,421 DEBUG Processing item E:\WINDOWS\System32\Drivers\avg
      2009-04-16 13:34:26,421 INFO Directory E:\WINDOWS\System32\Drivers\avg not found
      2009-04-16 13:34:26,421 DEBUG Processing item E:\WINDOWS\System32
      2009-04-16 13:34:26,421 DEBUG Processing item E:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0
      2009-04-16 13:34:26,421 INFO Directory E:\Documents and Settings\All Users\Start Menu\Programs\avg 8.0 not found
      2009-04-16 13:34:26,421 DEBUG Processing item E:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0
      2009-04-16 13:34:26,421 INFO Directory E:\Documents and Settings\All Users\Start Menu\Programs\avg free 8.0 not found
      2009-04-16 13:34:26,421 DEBUG Processing item E:\Documents and Settings\All Users\Desktop\avg 8.0.lnk
      2009-04-16 13:34:26,421 INFO File E:\Documents and Settings\All Users\Desktop\avg 8.0.lnk not found
      2009-04-16 13:34:26,421 DEBUG Processing item E:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk
      2009-04-16 13:34:26,421 INFO File E:\Documents and Settings\All Users\Desktop\avg free 8.0.lnk not found
      2009-04-16 13:34:26,437 DEBUG Processing item E:\Program Files\AVG
      2009-04-16 13:34:26,437 INFO Directory E:\Program Files\AVG not found
      2009-04-16 13:34:26,437 INFO *****     Avg Fw NDIS driver     *****
      2009-04-16 13:34:27,203 INFO FW NDIS driver not present


      i wouldn't want to continue to run combofix as it strongly warned me...

      i'll wait for your next instructions, sir/ma'am.

      thanx again!
      ^_^

      Offline PCBruiser

      • Malware Removal Mentors
      • Administrator
      • Diamond Member
      • Posts: 7948
      Hi,

      Most strange.  Tell you what.  Please boot into Safe Mode and run ComboFix from there.  I want to see what parts of AVG are still there.  Even if it is still there, it does not run in Safe Mode, so running ComboFix from there should be safe to do.  If you still get any warnings, copy them down, and do not run ComboFix.  Post any warnings you get for me to see.

      BTW, it's "sir" for me, LOL!
      Don't Read?  Can't learn!

      Offline jonax00

      • Bronze Member
      • Posts: 16
      sir it is,

          the same error occured when i tried to execute combofix whine in safe mode... but this time, its not only AVG, but ESET anti-virus 4 as well! even though only the volume & clock icons are in my tray...  ???

         so what do i do now? is there any other way to remove this AVG from my machine??

         thanx again.

      Offline PCBruiser

      • Malware Removal Mentors
      • Administrator
      • Diamond Member
      • Posts: 7948
      This is getting stranger and stranger.  OK, I need you to do some manual work.  Go to the following locations:

      E:\Documents and Settings\JJRV\Application Data
      E:\Documents and Settings\AllUsers\Application Data
      E:\WINDOWS\System32\Drivers\avg
      E:\Program Files
      E:\Program Files\Common Files

      and list for me any folders that relate to AVG, if any.  Please make sure you give me the complete path(s).  If there is anything there, I'll use some other software to manually forcefully remove them from your system.
      Don't Read?  Can't learn!

      Offline jonax00

      • Bronze Member
      • Posts: 16
      sir,

         done.

          i didn't find anything *avg*.* in the E:\Documents and Settings\JJRV\Application Data...

         but i found something in the all users folder, here's the path;  E:\Documents and Settings\All Users\Application Data\avg8
                inside this folder are folders named:
                      admincli
                      Antispam
                      AvgAm
                      Cfg
                     dumps
                     emc
                     log
                     lsdb
                     scanlogs
                     update

        i don't think i have any "driver" folders at all in E:\WINDOWS\system32  so no avg there....

        no avg folders in the  program files & in the common files folders too...

        i've enabled the "show hidden files" in my folder options to be sure i'm not missing avg in case it'll be a hidden folder too....

        thanx again.

       

       

      Offline PCBruiser

      • Malware Removal Mentors
      • Administrator
      • Diamond Member
      • Posts: 7948
      Hi,

      See if you can simply delete that one folder, then reboot.  If so, try ComboFix one more time.  If you still get an error message try this:

      1. Go HERE and download File Lister.
      • Save it to your Desktop
      • Right Click ->> Extract all ->> And extract it to your Desktop
      • Additional help on extracting zip files can be found HERE
      • Open the File Lister Folder.
      • Note: Leave the FileLister.vbe file in the folder and run it from there.
      • Right Click FileLister.vbe ->>Select Open Then Open to confirm.
      • As the program runs, it will appear that nothing is happening.
      • When the program is finished it will produce a log for you C:\Files.txt
      Copy and paste the contents of that log in your reply.
      Don't Read?  Can't learn!

      Offline jonax00

      • Bronze Member
      • Posts: 16
      sir,

         i've successfully deleted (shift+del) the avg8 folder in the E:\Documents and Settings\All Users\Application Data, i restarted & tried to execute combofix.... its pops up the same error saying avg is still running.  i tried to run it in safe mode, same error occured.   :-[

         so here's the files.txt from filelister;

      +++++++++++++++++++++++++++++++++
      + File Lister  Version 1.0.8             +
      +                                                                    +
      +  By bamajim / SpywareHammer.com +
      +++++++++++++++++++++++++++++++++

      Report ran on --->>>  04/19/09 5:46:43 AM


      ====== Running Processes ======

      E:\WINDOWS\System32\smss.exe
      E:\WINDOWS\system32\winlogon.exe
      E:\WINDOWS\system32\services.exe
      E:\WINDOWS\system32\lsass.exe
      E:\WINDOWS\system32\Ati2evxx.exe
      E:\WINDOWS\system32\svchost.exe
      E:\WINDOWS\System32\svchost.exe
      E:\WINDOWS\system32\Ati2evxx.exe
      E:\WINDOWS\system32\spoolsv.exe
      E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      E:\Program Files\Intel\IDU\awServ.exe
      E:\Program Files\Bonjour\mDNSResponder.exe
      E:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
      E:\Program Files\ESET\ESET Smart Security\ekrn.exe
      E:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
      E:\Program Files\Common Files\LightScribe\LSSrvc.exe
      E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      E:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      E:\WINDOWS\Explorer.EXE
      E:\WINDOWS\system32\PnkBstrA.exe
      E:\WINDOWS\system32\PnkBstrB.exe
      E:\Program Files\CyberLink\Shared files\RichVideo.exe
      E:\WINDOWS\system32\tcpsvcs.exe
      E:\Program Files\Globe Telecom\Click Fix\bin\sprtsvc.exe
      E:\WINDOWS\system32\svchost.exe
      E:\WINDOWS\System32\TUProgSt.exe
      E:\Program Files\Canon\CAL\CALMAIN.exe
      E:\WINDOWS\system32\ctfmon.exe
      E:\Program Files\iTunes\iTunesHelper.exe
      E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
      E:\Program Files\ESET\ESET Smart Security\egui.exe
      E:\Program Files\Webshots\webshots.scr
      E:\Program Files\iPod\bin\iPodService.exe
      E:\Program Files\iTunes\iTunes.exe
      E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
      E:\Program Files\Mozilla Firefox\firefox.exe
      E:\Program Files\Internet Download Manager\IDMan.exe
      E:\Program Files\Internet Download Manager\IEMonitor.exe
      E:\WINDOWS\System32\WScript.exe

      ====== BHO's ======

      BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files\Internet Download Manager\IDMIECC.dll

      BHO: (NO NAME) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - E:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

      BHO: (NO NAME) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

      BHO: (NO NAME) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll

      BHO: (NO NAME) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - E:\Program Files\Yahoo!\Common\yiesrvc.dll

      BHO: (NO NAME) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

      BHO: (NO NAME) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - E:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

      BHO: (NO NAME) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll

      ====== HKLM\~\Run Keys ======

      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

      [QuickTime Task] = "E:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime
      [iTunesHelper] = "E:\Program Files\iTunes\iTunesHelper.exe"
      [StartCCC] = "E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

      ====== HKCU\~\Run Keys ======

      [ctfmon.exe] = E:\WINDOWS\system32\ctfmon.exe
      [swg] = E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      [ESET GUI] = E:\Program Files\ESET\ESET Smart Security\egui.exe

      ====== DNS Info (List may be empty) ======

      HKEY_LOCAL_MACHINE\CCS\~\{6F613419-B7C2-4B53-96F5-8EEDE73199B2}\  NameServer=
      HKEY_LOCAL_MACHINE\CCS\~\{9A2328EA-723F-4D75-96A1-714A4A8683B5}\  NameServer=
      HKEY_LOCAL_MACHINE\CCS\~\{C477AD67-01DD-432A-93BD-205BA0FA368E}\  NameServer=

      HKEY_LOCAL_MACHINE\CS001\~\{6F613419-B7C2-4B53-96F5-8EEDE73199B2}\  NameServer=
      HKEY_LOCAL_MACHINE\CS001\~\{9A2328EA-723F-4D75-96A1-714A4A8683B5}\  NameServer=
      HKEY_LOCAL_MACHINE\CS001\~\{C477AD67-01DD-432A-93BD-205BA0FA368E}\  NameServer=

      HKEY_LOCAL_MACHINE\CS002\~\{6F613419-B7C2-4B53-96F5-8EEDE73199B2}\  NameServer=
      HKEY_LOCAL_MACHINE\CS002\~\{9A2328EA-723F-4D75-96A1-714A4A8683B5}\  NameServer=
      HKEY_LOCAL_MACHINE\CS002\~\{C477AD67-01DD-432A-93BD-205BA0FA368E}\  NameServer=

      HKEY_LOCAL_MACHINE\CS003\~\{6F613419-B7C2-4B53-96F5-8EEDE73199B2}\  NameServer=
      HKEY_LOCAL_MACHINE\CS003\~\{9A2328EA-723F-4D75-96A1-714A4A8683B5}\  NameServer=
      HKEY_LOCAL_MACHINE\CS003\~\{C477AD67-01DD-432A-93BD-205BA0FA368E}\  NameServer=

      ====== Folders and Files from "%\" and "%\Windows" Created Last 60 Days ======

      04/19/09 5:36:10 AM    6122393    E:\ComboFix
      04/19/09 5:36:11 AM    1034    E:\ComboFix\N_
      04/16/09 9:19:45 PM    312    E:\Qoobox
      04/16/09 9:21:03 PM    0    E:\Qoobox\BackEnv
      04/16/09 9:21:03 PM    0    E:\Qoobox\LastRun
      04/16/09 9:19:45 PM    312    E:\Qoobox\Quarantine
      04/16/09 9:19:45 PM    0    E:\Qoobox\Quarantine\Registry_backups
      04/16/09 9:21:03 PM    0    E:\Qoobox\Test
      04/16/09 9:21:03 PM    0    E:\Qoobox\TestC
      04/04/09 9:58:12 PM    4507424    E:\TLR
      04/19/09 5:46:43 AM    2122    32    E:\Files.txt
      04/16/09 12:00:24 AM    2323037    E:\WINDOWS\$NtUninstallKB923561$
      04/16/09 12:00:24 AM    626183    E:\WINDOWS\$NtUninstallKB923561$\spuninst
      03/24/09 2:30:13 AM    5658897    E:\WINDOWS\$NtUninstallKB942288-v3$
      03/24/09 2:30:13 AM    647953    E:\WINDOWS\$NtUninstallKB942288-v3$\spuninst
      04/16/09 12:00:57 AM    2431364    E:\WINDOWS\$NtUninstallKB952004$
      04/16/09 12:00:57 AM    627588    E:\WINDOWS\$NtUninstallKB952004$\spuninst
      04/16/09 12:00:41 AM    17229722    E:\WINDOWS\$NtUninstallKB956572$
      04/16/09 12:00:41 AM    633754    E:\WINDOWS\$NtUninstallKB956572$\spuninst
      03/12/09 1:00:41 AM    2471307    E:\WINDOWS\$NtUninstallKB958690$
      03/12/09 1:00:41 AM    624907    E:\WINDOWS\$NtUninstallKB958690$\spuninst
      04/16/09 12:01:11 AM    1671491    E:\WINDOWS\$NtUninstallKB959426$
      04/16/09 12:01:11 AM    625475    E:\WINDOWS\$NtUninstallKB959426$\spuninst
      03/12/09 1:00:20 AM    11459444    E:\WINDOWS\$NtUninstallKB959772_WM11$
      03/12/09 1:00:20 AM    624500    E:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst
      03/12/09 1:00:48 AM    769083    E:\WINDOWS\$NtUninstallKB960225$
      03/12/09 1:00:48 AM    624699    E:\WINDOWS\$NtUninstallKB960225$\spuninst
      04/16/09 12:01:05 AM    979047    E:\WINDOWS\$NtUninstallKB960803$
      04/16/09 12:01:05 AM    624743    E:\WINDOWS\$NtUninstallKB960803$\spuninst
      02/26/09 2:00:41 AM    1712575    E:\WINDOWS\$NtUninstallKB961118$
      02/26/09 2:00:41 AM    623735    E:\WINDOWS\$NtUninstallKB961118$\spuninst
      04/16/09 12:00:33 AM    1912863    E:\WINDOWS\$NtUninstallKB961373$
      04/16/09 12:00:33 AM    624671    E:\WINDOWS\$NtUninstallKB961373$\spuninst
      02/26/09 2:00:30 AM    9086695    E:\WINDOWS\$NtUninstallKB967715$
      02/26/09 2:00:30 AM    625383    E:\WINDOWS\$NtUninstallKB967715$\spuninst
      04/04/09 11:51:52 PM    574464    E:\WINDOWS\Empire Total War
      04/16/09 9:21:03 PM    0    E:\WINDOWS\ERDNT
      04/16/09 9:21:03 PM    0    E:\WINDOWS\ERDNT\Hiv-backup
      03/29/09 7:03:07 AM    44993394    E:\WINDOWS\ie8
      03/29/09 7:03:07 AM    1174499    E:\WINDOWS\ie8\spuninst
      03/29/09 7:09:33 AM    626327    E:\WINDOWS\ie8updates
      03/29/09 7:09:33 AM    626327    E:\WINDOWS\ie8updates\KB968220-IE8
      03/29/09 7:09:33 AM    624279    E:\WINDOWS\ie8updates\KB968220-IE8\spuninst
      04/13/09 8:24:50 AM    0    E:\WINDOWS\msdownld.tmp
      02/19/09 8:35:43 PM    431616    E:\WINDOWS\USB Vibration
      02/19/09 8:35:43 PM    431616    E:\WINDOWS\USB Vibration\7906
      04/13/09 2:07:16 AM    0    32    E:\WINDOWS\0.log
      03/12/09 9:48:42 PM    86528    32    E:\WINDOWS\bnetunin.exe
      04/17/09 10:28:07 PM    129469    32    E:\WINDOWS\Empire Total War Uninstall Log.txt
      04/16/09 12:00:27 AM    37096    32    E:\WINDOWS\FaxSetup.log
      04/16/09 12:00:28 AM    5792    32    E:\WINDOWS\iis6.log
      04/16/09 12:00:29 AM    1374    32    E:\WINDOWS\imsins.BAK
      04/16/09 12:00:12 AM    9582    32    E:\WINDOWS\KB923561.log
      04/15/09 10:40:01 PM    22855    32    E:\WINDOWS\KB952004.log
      04/16/09 12:00:38 AM    15543    32    E:\WINDOWS\KB956572.log
      04/15/09 10:54:30 PM    23446    32    E:\WINDOWS\KB959426.log
      04/15/09 10:30:01 PM    22325    32    E:\WINDOWS\KB960803.log
      04/15/09 10:52:55 PM    17970    32    E:\WINDOWS\KB961373.log
      04/09/09 4:25:11 PM    50    32    E:\WINDOWS\MegaManager.INI
      04/16/09 12:00:29 AM    1818    32    E:\WINDOWS\msgsocm.log
      04/19/09 5:33:58 AM    133528    32    E:\WINDOWS\ntbtlog.txt
      04/16/09 12:00:29 AM    7344    32    E:\WINDOWS\ntdtcsetup.log
      04/16/09 12:00:30 AM    2052    32    E:\WINDOWS\ocmsn.log
      04/19/09 5:28:28 AM    784    32    E:\WINDOWS\SchedLgU.Txt
      04/14/09 8:40:31 AM    0    32    E:\WINDOWS\setupact.log
      04/14/09 8:40:31 AM    0    32    E:\WINDOWS\setuperr.log
      04/16/09 12:00:52 AM    1505    32    E:\WINDOWS\spupdsvc.log
      04/16/09 12:00:29 AM    14154    32    E:\WINDOWS\tsoc.log
      04/16/09 12:00:26 AM    3685    32    E:\WINDOWS\updspapi.log
      03/29/09 8:55:25 AM    650964    E:\WINDOWS\system32\AGEIA
      03/29/09 8:55:25 AM    319358    E:\WINDOWS\system32\AGEIA\AG1011
      03/29/09 8:55:26 AM    331606    E:\WINDOWS\system32\AGEIA\AG1021
      04/14/09 8:29:06 AM    118784    32    E:\WINDOWS\system32\ac3acm.acm
      03/04/09 3:56:00 AM    118784    32    E:\WINDOWS\system32\atibtmon.exe
      03/17/09 3:40:12 AM    49664    32    E:\WINDOWS\system32\atimpc32.dll
      03/29/09 8:56:27 AM    16896    32    E:\WINDOWS\system32\bdaplgin.ax
      03/07/09 9:24:26 PM    18313    32    E:\WINDOWS\system32\CCCInstall_200903072124264531.log
      03/27/09 9:02:18 PM    18325    32    E:\WINDOWS\system32\CCCInstall_200903272102189218.log
      04/14/09 8:41:48 AM    18620    32    E:\WINDOWS\system32\CCCInstall_200904140841484531.log
      04/16/09 9:46:22 PM    389120    32    E:\WINDOWS\system32\CF11072.exe
      04/19/09 5:26:49 AM    389120    32    E:\WINDOWS\system32\CF11630.exe
      04/19/09 5:32:28 AM    389120    32    E:\WINDOWS\system32\CF12730.exe
      04/19/09 5:36:10 AM    389120    32    E:\WINDOWS\system32\CF13452.exe
      04/17/09 10:10:31 PM    389120    32    E:\WINDOWS\system32\CF4386.exe
      04/16/09 9:21:03 PM    389120    32    E:\WINDOWS\system32\CF7326.exe
      03/14/09 10:42:13 PM    4096    32    E:\WINDOWS\system32\crash
      03/04/09 10:10:57 PM    2036576    32    E:\WINDOWS\system32\D3DCompiler_40.dll
      04/08/09 12:05:32 AM    1846632    32    E:\WINDOWS\system32\D3DCompiler_41.dll
      03/04/09 10:10:57 PM    452440    32    E:\WINDOWS\system32\d3dx10_40.dll
      04/08/09 12:05:32 AM    453456    32    E:\WINDOWS\system32\d3dx10_41.dll
      03/04/09 10:10:56 PM    4379984    32    E:\WINDOWS\system32\D3DX9_40.dll
      04/08/09 12:05:29 AM    4178264    32    E:\WINDOWS\system32\D3DX9_41.dll
      04/14/09 8:28:59 AM    684032    32    E:\WINDOWS\system32\divx.dll
      04/14/09 8:29:06 AM    86016    32    E:\WINDOWS\system32\dpl100.dll
      03/29/09 8:56:25 AM    63696    32    E:\WINDOWS\system32\dxdllreg.exe
      04/14/09 8:28:58 AM    84480    32    E:\WINDOWS\system32\ff_vfw.dll
      04/14/09 8:28:58 AM    547    32    E:\WINDOWS\system32\ff_vfw.dll.manifest
      04/03/09 9:24:14 PM    210352    32    E:\WINDOWS\system32\idmmbc.dll
      03/08/09 2:21:06 PM    4096    0    E:\WINDOWS\system32\ie4uinit.exe.mui
      03/08/09 2:20:54 PM    81920    0    E:\WINDOWS\system32\iedkcs32.dll.mui
      03/29/09 8:56:28 AM    14848    32    E:\WINDOWS\system32\ipsink.ax
      03/29/09 8:56:27 AM    12288    32    E:\WINDOWS\system32\ksolay.ax
      03/29/09 8:56:27 AM    285696    32    E:\WINDOWS\system32\kstvtune.ax
      03/29/09 8:56:27 AM    226304    32    E:\WINDOWS\system32\kswdmcap.ax
      03/29/09 8:56:28 AM    39424    32    E:\WINDOWS\system32\ksxbar.ax
      04/14/09 8:29:07 AM    839680    32    E:\WINDOWS\system32\lameACM.acm
      04/14/09 8:29:07 AM    414    32    E:\WINDOWS\system32\lame_acm.xml
      03/29/09 8:56:28 AM    52224    32    E:\WINDOWS\system32\msdvbnp.ax
      03/08/09 2:22:18 PM    2560    0    E:\WINDOWS\system32\mshta.exe.mui
      03/28/09 8:02:50 AM    32592    32    E:\WINDOWS\system32\msonpmon.dll
      03/08/09 2:22:30 PM    49152    0    E:\WINDOWS\system32\msrating.dll.mui
      03/31/09 1:28:40 AM    268648    32    E:\WINDOWS\system32\mucltui.dll
      03/31/09 1:28:40 AM    27496    32    E:\WINDOWS\system32\mucltui.dll.mui
      04/08/09 12:07:45 AM    115432    32    E:\WINDOWS\system32\OpenAL32.dll
      03/12/09 11:43:07 PM    2337865    32    E:\WINDOWS\system32\pbsvc.exe
      03/12/09 11:43:08 PM    66872    32    E:\WINDOWS\system32\PnkBstrA.exe
      03/12/09 11:43:11 PM    107832    32    E:\WINDOWS\system32\PnkBstrB.exe
      03/29/09 8:56:28 AM    354816    32    E:\WINDOWS\system32\psisdecd.dll
      03/29/09 8:56:28 AM    30208    32    E:\WINDOWS\system32\psisrndr.ax
      04/14/09 8:28:57 AM    60273    32    E:\WINDOWS\system32\pthreadGC2.dll
      04/14/09 8:29:06 AM    3596288    32    E:\WINDOWS\system32\qt-dx331.dll
      03/12/09 1:00:22 AM    16928    0    E:\WINDOWS\system32\spmsg.dll
      04/14/09 8:29:12 AM    168448    32    E:\WINDOWS\system32\unrar.dll
      04/08/09 12:07:45 AM    418480    32    E:\WINDOWS\system32\wrap_oal.dll
      03/15/09 8:52:45 AM    1184984    32    E:\WINDOWS\system32\wvc1dmod.dll
      03/04/09 10:10:53 PM    23376    32    E:\WINDOWS\system32\X3DAudio1_5.dll
      04/08/09 12:05:14 AM    22360    32    E:\WINDOWS\system32\X3DAudio1_6.dll
      03/04/09 10:10:54 PM    235856    32    E:\WINDOWS\system32\xactengine3_3.dll
      04/08/09 12:05:24 AM    235352    32    E:\WINDOWS\system32\xactengine3_4.dll
      03/04/09 10:10:55 PM    70992    32    E:\WINDOWS\system32\XAPOFX1_2.dll
      04/08/09 12:05:25 AM    69448    32    E:\WINDOWS\system32\XAPOFX1_3.dll
      03/04/09 10:10:55 PM    514384    32    E:\WINDOWS\system32\XAudio2_3.dll
      04/08/09 12:05:25 AM    517448    32    E:\WINDOWS\system32\XAudio2_4.dll
      04/15/09 10:29:19 PM    2560    0    E:\WINDOWS\system32\xpsp4res.dll
      04/14/09 8:29:06 AM    795648    32    E:\WINDOWS\system32\xvidcore.dll
      04/14/09 8:29:06 AM    130048    32    E:\WINDOWS\system32\xvidvfw.dll
      04/14/09 8:29:06 AM    217088    32    E:\WINDOWS\system32\yv12vfw.dll

      ====== Files under "\Administrator\Startup" Last 60 Days======


      ====== Files under "\All Users\Startup" Last 60 Days======


      to be continued on my next post because of message length limit

      Offline jonax00

      • Bronze Member
      • Posts: 16
      here's the 2nd part of the files.txt... (the file would still exceed the max message length if i just cut it in half);

      ====== Folders under "\Program Files" Last 60 Days======

      03/08/09 2:42:11 PM    8110060298    E:\Program Files\Activision
      03/08/09 2:42:11 PM    8110060298    E:\Program Files\Activision\Spider-Man - Web of Shadows
      03/08/09 2:59:43 PM    144451    E:\Program Files\Activision\Spider-Man - Web of Shadows\Docs
      03/08/09 2:59:43 PM    73373    E:\Program Files\Activision\Spider-Man - Web of Shadows\Docs\CS
      03/08/09 2:59:44 PM    11668    E:\Program Files\Activision\Spider-Man - Web of Shadows\Docs\License
      03/08/09 2:59:44 PM    2059    E:\Program Files\Activision\Spider-Man - Web of Shadows\Docs\MSR
      03/08/09 2:59:44 PM    57351    E:\Program Files\Activision\Spider-Man - Web of Shadows\Docs\Readme
      03/08/09 2:42:20 PM    8109915847    E:\Program Files\Activision\Spider-Man - Web of Shadows\image
      03/08/09 2:42:20 PM    8109915847    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc
      03/08/09 3:03:41 PM    16394308    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\Crack
      03/08/09 2:42:20 PM    855607074    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en
      03/08/09 2:42:20 PM    855607074    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound
      03/08/09 2:42:20 PM    0    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\0
      03/08/09 2:42:30 PM    130209952    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\1
      03/08/09 2:42:57 PM    76101360    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\2
      03/08/09 2:43:12 PM    75400354    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\3
      03/08/09 2:43:26 PM    80610106    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\4
      03/08/09 2:43:40 PM    73486038    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\5
      03/08/09 2:43:53 PM    76814366    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\6
      03/08/09 2:44:09 PM    74006878    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\7
      03/08/09 2:45:54 PM    74703644    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\8
      03/08/09 2:46:11 PM    78140154    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\en\sound\9
      03/08/09 2:54:01 PM    2924184016    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\Movies
      03/08/09 2:42:20 PM    1407864832    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\packs
      03/08/09 2:49:58 PM    2889721271    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound
      03/08/09 2:49:58 PM    313145204    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound\1
      03/08/09 2:50:30 PM    213999280    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound\2
      03/08/09 2:50:52 PM    452209856    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound\3
      03/08/09 2:51:25 PM    296034142    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound\4
      03/08/09 2:51:58 PM    261309750    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound\5
      03/08/09 2:52:23 PM    333821174    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound\6
      03/08/09 2:52:48 PM    200527314    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound\7
      03/08/09 2:53:06 PM    300848582    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound\8
      03/08/09 2:53:29 PM    413020972    E:\Program Files\Activision\Spider-Man - Web of Shadows\image\pc\sound\9
      03/29/09 8:55:24 AM    121133882    E:\Program Files\AGEIA Technologies
      04/08/09 12:09:58 AM    2316344    E:\Program Files\AGEIA Technologies\v2.3.1
      04/08/09 12:09:59 AM    2460817    E:\Program Files\AGEIA Technologies\v2.3.2
      04/08/09 12:09:59 AM    2460849    E:\Program Files\AGEIA Technologies\v2.3.3
      04/08/09 12:09:59 AM    3040937    E:\Program Files\AGEIA Technologies\v2.4.0
      04/08/09 12:10:00 AM    3016321    E:\Program Files\AGEIA Technologies\v2.4.1
      04/08/09 12:10:00 AM    3024513    E:\Program Files\AGEIA Technologies\v2.4.4
      04/08/09 12:10:00 AM    3601525    E:\Program Files\AGEIA Technologies\v2.5.0
      04/08/09 12:10:00 AM    3661961    E:\Program Files\AGEIA Technologies\v2.5.1
      04/08/09 12:10:01 AM    3661961    E:\Program Files\AGEIA Technologies\v2.5.2
      04/08/09 12:10:01 AM    3661993    E:\Program Files\AGEIA Technologies\v2.5.3
      04/08/09 12:10:02 AM    3861649    E:\Program Files\AGEIA Technologies\v2.6.0
      04/08/09 12:10:02 AM    3865761    E:\Program Files\AGEIA Technologies\v2.6.1
      04/08/09 12:10:03 AM    3951093    E:\Program Files\AGEIA Technologies\v2.6.2
      04/08/09 12:10:03 AM    3981241    E:\Program Files\AGEIA Technologies\v2.6.3
      04/08/09 12:09:56 AM    4497337    E:\Program Files\AGEIA Technologies\v2.6.4
      03/29/09 8:55:30 AM    6446428    E:\Program Files\AGEIA Technologies\v2.7.0
      03/29/09 8:55:30 AM    1247592    E:\Program Files\AGEIA Technologies\v2.7.0\AG1011
      03/29/09 8:55:30 AM    2152884    E:\Program Files\AGEIA Technologies\v2.7.0\AG1021
      03/29/09 8:55:31 AM    8096960    E:\Program Files\AGEIA Technologies\v2.7.1
      03/29/09 8:55:31 AM    1374690    E:\Program Files\AGEIA Technologies\v2.7.1\AG1011
      03/29/09 8:55:31 AM    2341038    E:\Program Files\AGEIA Technologies\v2.7.1\AG1021
      03/29/09 8:55:31 AM    6511540    E:\Program Files\AGEIA Technologies\v2.7.2
      03/29/09 8:55:31 AM    1247924    E:\Program Files\AGEIA Technologies\v2.7.2\AG1011
      03/29/09 8:55:31 AM    2153216    E:\Program Files\AGEIA Technologies\v2.7.2\AG1021
      03/29/09 8:55:32 AM    7889292    E:\Program Files\AGEIA Technologies\v2.7.3
      03/29/09 8:55:32 AM    1152920    E:\Program Files\AGEIA Technologies\v2.7.3\AG1011
      03/29/09 8:55:32 AM    2199492    E:\Program Files\AGEIA Technologies\v2.7.3\AG1021
      04/08/09 12:10:05 AM    8203472    E:\Program Files\AGEIA Technologies\v2.7.4
      04/08/09 12:10:05 AM    1374690    E:\Program Files\AGEIA Technologies\v2.7.4\AG1011
      04/08/09 12:10:05 AM    2341054    E:\Program Files\AGEIA Technologies\v2.7.4\AG1021
      04/08/09 12:09:57 AM    8119386    E:\Program Files\AGEIA Technologies\v2.7.5
      04/08/09 12:09:57 AM    955947    E:\Program Files\AGEIA Technologies\v2.7.5\AG1011
      04/08/09 12:09:57 AM    1995775    E:\Program Files\AGEIA Technologies\v2.7.5\AG1021
      04/08/09 12:09:57 AM    7504986    E:\Program Files\AGEIA Technologies\v2.7.6
      04/08/09 12:09:57 AM    955947    E:\Program Files\AGEIA Technologies\v2.7.6\AG1011
      04/08/09 12:09:57 AM    1995775    E:\Program Files\AGEIA Technologies\v2.7.6\AG1021
      04/08/09 12:10:06 AM    8553180    E:\Program Files\AGEIA Technologies\v2.8.0
      04/08/09 12:10:06 AM    1345402    E:\Program Files\AGEIA Technologies\v2.8.0\AG1011
      04/08/09 12:10:06 AM    2433330    E:\Program Files\AGEIA Technologies\v2.8.0\AG1021
      04/08/09 12:09:57 AM    7927814    E:\Program Files\AGEIA Technologies\v2.8.1
      04/08/09 12:09:58 AM    1015839    E:\Program Files\AGEIA Technologies\v2.8.1\AG1011
      04/08/09 12:09:58 AM    2104759    E:\Program Files\AGEIA Technologies\v2.8.1\AG1021
      03/11/09 12:27:29 AM    2371410    E:\Program Files\Defraggler
      03/11/09 12:27:30 AM    339456    E:\Program Files\Defraggler\Lang
      03/10/09 8:43:42 PM    15919904    E:\Program Files\Globe Telecom
      03/10/09 8:43:42 PM    15919904    E:\Program Files\Globe Telecom\Click Fix
      03/10/09 8:43:42 PM    3072823    E:\Program Files\Globe Telecom\Click Fix\agent
      03/10/09 8:43:43 PM    2091914    E:\Program Files\Globe Telecom\Click Fix\agent\bin
      03/10/09 8:43:42 PM    937078    E:\Program Files\Globe Telecom\Click Fix\agent\common
      03/10/09 8:43:42 PM    2890    E:\Program Files\Globe Telecom\Click Fix\agent\common\help
      03/10/09 8:43:43 PM    2890    E:\Program Files\Globe Telecom\Click Fix\agent\common\help\en
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\help\es
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\help\ja
      03/10/09 8:43:43 PM    60846    E:\Program Files\Globe Telecom\Click Fix\agent\common\inc
      03/10/09 8:43:43 PM    23874    E:\Program Files\Globe Telecom\Click Fix\agent\common\smartissue
      03/10/09 8:43:42 PM    828722    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins
      03/10/09 8:43:44 PM    6289    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\alerts
      03/10/09 8:43:44 PM    201    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\alerts\inc
      03/10/09 8:43:44 PM    591    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\alerts\lang
      03/10/09 8:43:44 PM    591    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\alerts\lang\en
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\configuremodem
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\configuremodem\lang
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\configuremodem\lang\en
      03/10/09 8:43:44 PM    22926    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\contactus
      03/10/09 8:43:44 PM    4155    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\contactus\default
      03/10/09 8:43:44 PM    6723    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\contactus\inc
      03/10/09 8:43:44 PM    6890    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\contactus\lang
      03/10/09 8:43:44 PM    6890    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\contactus\lang\en
      03/10/09 8:43:44 PM    2912    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\contactus\xml
      03/10/09 8:43:44 PM    5513    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\cryhome
      03/10/09 8:43:44 PM    4882    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\cryhome\inc
      03/10/09 8:43:44 PM    153    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\cryhome\lang
      03/10/09 8:43:44 PM    153    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\cryhome\lang\en
      03/10/09 8:43:44 PM    104996    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\email
      03/10/09 8:43:44 PM    26494    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\email\inc
      03/10/09 8:43:44 PM    25680    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\email\lang
      03/10/09 8:43:44 PM    25680    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\email\lang\en
      03/10/09 8:43:44 PM    11772    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\email\xml
      03/10/09 8:43:42 PM    104271    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\firstrun
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\firstrun\flash
      03/10/09 8:43:44 PM    13707    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\firstrun\inc
      03/10/09 8:43:45 PM    48462    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\firstrun\lang
      03/10/09 8:43:45 PM    48462    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\firstrun\lang\en
      03/10/09 8:43:45 PM    5416    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\firstrun\xml
      03/10/09 8:43:45 PM    7029    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\getonline
      03/10/09 8:43:45 PM    1270    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\getonline\inc
      03/10/09 8:43:45 PM    4096    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\getonline\lang
      03/10/09 8:43:45 PM    4096    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\getonline\lang\en
      03/10/09 8:43:45 PM    6733    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\iprenew
      03/10/09 8:43:45 PM    3379    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\iprenew\inc
      03/10/09 8:43:45 PM    1431    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\iprenew\lang
      03/10/09 8:43:45 PM    1431    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\iprenew\lang\en
      03/10/09 8:43:45 PM    48683    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\modemdetect
      03/10/09 8:43:45 PM    5502    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\modemdetect\inc
      03/10/09 8:43:45 PM    8326    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\modemdetect\lang
      03/10/09 8:43:45 PM    8326    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\modemdetect\lang\en
      03/10/09 8:43:45 PM    1677    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\modemdetect\xml
      03/10/09 8:43:45 PM    31381    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\pchealth
      03/10/09 8:43:45 PM    6935    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\pchealth\inc
      03/10/09 8:43:45 PM    4382    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\pchealth\lang
      03/10/09 8:43:45 PM    4382    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\pchealth\lang\en
      03/10/09 8:43:45 PM    17006    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\pchealth\xml
      03/10/09 8:43:45 PM    172067    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\personalfirewall
      03/10/09 8:43:45 PM    88    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\personalfirewall\inc
      03/10/09 8:43:45 PM    45706    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\personalfirewall\lang
      03/10/09 8:43:45 PM    45706    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\personalfirewall\lang\en
      03/10/09 8:43:45 PM    106905    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\personalfirewall\screenshots
      03/10/09 8:43:45 PM    4610    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\personalfirewall\xml
      03/10/09 8:43:46 PM    78267    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\preferences
      03/10/09 8:43:46 PM    12339    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\preferences\inc
      03/10/09 8:43:46 PM    18225    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\preferences\lang
      03/10/09 8:43:46 PM    18225    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\preferences\lang\en
      03/10/09 8:43:46 PM    39754    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\protectrestore
      03/10/09 8:43:46 PM    3570    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\protectrestore\inc
      03/10/09 8:43:46 PM    6873    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\protectrestore\lang
      03/10/09 8:43:46 PM    6873    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\protectrestore\lang\en
      03/10/09 8:43:46 PM    5510    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\restart
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\securewireless
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\securewireless\inc
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\securewireless\lang
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\securewireless\lang\en
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\securewireless\xml
      03/10/09 8:43:46 PM    11042    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\shell
      03/10/09 8:43:46 PM    11042    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\shell\lang
      03/10/09 8:43:46 PM    11042    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\shell\lang\en
      03/10/09 8:43:46 PM    16458    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\solutions
      03/10/09 8:43:46 PM    9064    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\solutions\inc
      03/10/09 8:43:46 PM    1279    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\solutions\lang
      03/10/09 8:43:46 PM    1279    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\solutions\lang\en
      03/10/09 8:43:46 PM    4121    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\survey
      03/10/09 8:43:46 PM    777    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\survey\lang
      03/10/09 8:43:46 PM    777    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\survey\lang\en
      03/10/09 8:43:46 PM    85818    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\sysinfo
      03/10/09 8:43:46 PM    61089    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\sysinfo\inc
      03/10/09 8:43:46 PM    17686    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\sysinfo\lang
      03/10/09 8:43:46 PM    17686    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\sysinfo\lang\en
      03/10/09 8:43:46 PM    15965    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\systemtools
      03/10/09 8:43:46 PM    4115    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\systemtools\lang
      03/10/09 8:43:46 PM    4115    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\systemtools\lang\en
      03/10/09 8:43:46 PM    45092    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\triggers
      03/10/09 8:43:46 PM    2611    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\triggers\inc
      03/10/09 8:43:46 PM    7636    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\triggers\lang
      03/10/09 8:43:46 PM    7636    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\triggers\lang\en
      03/10/09 8:43:46 PM    16807    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\userinformation
      03/10/09 8:43:46 PM    7035    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\userinformation\lang
      03/10/09 8:43:46 PM    7035    E:\Program Files\Globe Telecom\Click Fix\agent\common\snapins\userinformation\lang\en
      03/10/09 8:43:46 PM    20746    E:\Program Files\Globe Telecom\Click Fix\agent\common\widgets
      03/10/09 8:43:46 PM    5799990    E:\Program Files\Globe Telecom\Click Fix\bin
      03/10/09 8:43:47 PM    185379    E:\Program Files\Globe Telecom\Click Fix\bin\probeflt
      03/10/09 8:43:47 PM    824    E:\Program Files\Globe Telecom\Click Fix\credentials
      03/10/09 8:43:47 PM    3856    E:\Program Files\Globe Telecom\Click Fix\images
      03/10/09 8:43:42 PM    6180385    E:\Program Files\Globe Telecom\Click Fix\sscommon
      03/10/09 8:43:42 PM    6180385    E:\Program Files\Globe Telecom\Click Fix\sscommon\common
      03/10/09 8:43:47 PM    1458319    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\inc
      03/10/09 8:43:49 PM    664607    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem
      03/10/09 8:43:49 PM    89913    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\aztech
      03/10/09 8:43:49 PM    33867    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\aztech\605E
      03/10/09 8:43:49 PM    21549    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\aztech\605ER
      03/10/09 8:43:49 PM    34497    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\aztech\605EW
      03/10/09 8:43:49 PM    27163    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\ddm
      03/10/09 8:43:49 PM    13069    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\null_modem
      03/10/09 8:43:49 PM    96845    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\prolink
      03/10/09 8:43:49 PM    21110    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\prolink\h5200
      03/10/09 8:43:49 PM    21225    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\prolink\h5200p
      03/10/09 8:43:50 PM    33222    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\prolink\h6300g
      03/10/09 8:43:50 PM    21288    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\prolink\h9300g
      03/10/09 8:43:50 PM    22825    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\ras
      03/10/09 8:43:50 PM    48003    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\siemens
      03/10/09 8:43:50 PM    20551    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\siemens\se260
      03/10/09 8:43:50 PM    27452    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\siemens\se565
      03/10/09 8:43:50 PM    99725    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\tr64
      03/10/09 8:43:50 PM    36404    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\zyxel
      03/10/09 8:43:50 PM    36404    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\modem\zyxel\p660r
      03/10/09 8:43:42 PM    3325654    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins
      03/10/09 8:43:42 PM    3325654    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe
      03/10/09 8:43:50 PM    161150    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\css
      03/10/09 8:43:42 PM    3164504    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images
      03/10/09 8:43:53 PM    19624    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images\gc
      03/10/09 8:43:53 PM    59852    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images\ico
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images\modem
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images\modem\screenshots
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images\modem\screenshots\Aztech600eu
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images\modem\screenshots\Aztech605eu
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images\modem\screenshots\Aztech605EW
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images\modem\screenshots\LinksysWAG54G
      03/10/09 8:43:42 PM    0    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\skins\globe\images\modem\screenshots\Siemens6520
      03/10/09 8:43:53 PM    644485    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins
      03/10/09 8:43:53 PM    324670    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\getconnect
      03/10/09 8:43:54 PM    43987    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\getconnect\inc
      03/10/09 8:43:54 PM    56210    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\getconnect\lang
      03/10/09 8:43:54 PM    56210    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\getconnect\lang\en
      03/10/09 8:43:55 PM    102166    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\getconnect\xml
      03/10/09 8:43:55 PM    9027    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\langselect
      03/10/09 8:43:55 PM    2042    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\langselect\lang
      03/10/09 8:43:55 PM    2042    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\langselect\lang\en
      03/10/09 8:43:55 PM    41505    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\minreq
      03/10/09 8:43:55 PM    5789    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\minreq\inc
      03/10/09 8:43:55 PM    10348    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\minreq\lang
      03/10/09 8:43:55 PM    10348    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\minreq\lang\en
      03/10/09 8:43:55 PM    9618    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\minreq\xml
      03/10/09 8:43:55 PM    24826    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\shell
      03/10/09 8:43:55 PM    18584    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\shell\lang
      03/10/09 8:43:55 PM    18584    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\shell\lang\en
      03/10/09 8:43:55 PM    17336    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\speedtest
      03/10/09 8:43:55 PM    3325    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\speedtest\inc
      03/10/09 8:43:55 PM    4238    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\speedtest\lang
      03/10/09 8:43:55 PM    4238    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\speedtest\lang\en
      03/10/09 8:43:56 PM    227121    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\wireless
      03/10/09 8:43:56 PM    32303    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\wireless\inc
      03/10/09 8:43:56 PM    35767    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\wireless\lang
      03/10/09 8:43:56 PM    35767    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\wireless\lang\en
      03/10/09 8:43:56 PM    26358    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\snapins\wireless\xml
      03/10/09 8:43:56 PM    87320    E:\Program Files\Globe Telecom\Click Fix\sscommon\common\widgets
      04/08/09 1:11:22 AM    9350104    E:\Program Files\Internet Download Manager
      04/08/09 1:11:23 AM    638007    E:\Program Files\Internet Download Manager\Languages
      04/10/09 10:06:53 AM    719842    E:\Program Files\Internet Download Manager\Sounds
      04/08/09 1:11:23 AM    324438    E:\Program Files\Internet Download Manager\Toolbar
      04/11/09 6:52:08 PM    1485871    E:\Program Files\iPod
      04/11/09 6:52:08 PM    1482536    E:\Program Files\iPod\bin
      04/11/09 6:52:08 PM    826368    E:\Program Files\iPod\bin\iPodService.Resources
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\da.lproj
      04/11/09 6:52:08 PM    44032    E:\Program Files\iPod\bin\iPodService.Resources\de.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\en.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\es.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\fi.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\fr.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\it.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\ja.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\ko.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\nb.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\nl.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\pl.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\pt.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\pt_PT.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\ru.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\sv.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\zh_CN.lproj
      04/11/09 6:52:08 PM    43520    E:\Program Files\iPod\bin\iPodService.Resources\zh_TW.lproj
      04/11/09 6:52:02 PM    92785452    E:\Program Files\iTunes
      04/11/09 6:52:02 PM    161119    E:\Program Files\iTunes\CD Configuration
      04/11/09 6:52:11 PM    74492766    E:\Program Files\iTunes\iTunes.Resources
      04/11/09 6:52:11 PM    3367858    E:\Program Files\iTunes\iTunes.Resources\da.lproj
      04/11/09 6:52:11 PM    41219    E:\Program Files\iTunes\iTunes.Resources\da.lproj\EQWindow.nib
      04/11/09 6:52:11 PM    31881    E:\Program Files\iTunes\iTunes.Resources\da.lproj\GradientWindow.nib
      04/11/09 6:52:11 PM    365853    E:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib
      04/11/09 6:52:12 PM    8952    E:\Program Files\iTunes\iTunes.Resources\da.lproj\MusicStoreBar.nib
      04/11/09 6:52:12 PM    122561    E:\Program Files\iTunes\iTunes.Resources\da.lproj\Placards.nib
      04/11/09 6:52:13 PM    19282    E:\Program Files\iTunes\iTunes.Resources\da.lproj\Ringtone.nib
      04/11/09 6:52:13 PM    152753    E:\Program Files\iTunes\iTunes.Resources\da.lproj\SetupAssistant.nib
      04/11/09 6:52:13 PM    3942566    E:\Program Files\iTunes\iTunes.Resources\de.lproj
      04/11/09 6:52:13 PM    41224    E:\Program Files\iTunes\iTunes.Resources\de.lproj\EQWindow.nib
      04/11/09 6:52:13 PM    33453    E:\Program Files\iTunes\iTunes.Resources\de.lproj\GradientWindow.nib
      04/11/09 6:52:13 PM    381592    E:\Program Files\iTunes\iTunes.Resources\de.lproj\iPodSettings.nib
      04/11/09 6:52:14 PM    10034    E:\Program Files\iTunes\iTunes.Resources\de.lproj\MusicStoreBar.nib
      04/11/09 6:52:14 PM    128474    E:\Program Files\iTunes\iTunes.Resources\de.lproj\Placards.nib
      04/11/09 6:52:14 PM    20515    E:\Program Files\iTunes\iTunes.Resources\de.lproj\Ringtone.nib
      04/11/09 6:52:14 PM    154049    E:\Program Files\iTunes\iTunes.Resources\de.lproj\SetupAssistant.nib
      04/11/09 6:52:14 PM    3509350    E:\Program Files\iTunes\iTunes.Resources\en.lproj
      04/11/09 6:52:14 PM    46498    E:\Program Files\iTunes\iTunes.Resources\en.lproj\EQWindow.nib
      04/11/09 6:52:14 PM    35498    E:\Program Files\iTunes\iTunes.Resources\en.lproj\GradientWindow.nib
      04/11/09 6:52:14 PM    422699    E:\Program Files\iTunes\iTunes.Resources\en.lproj\iPodSettings.nib
      04/11/09 6:52:15 PM    10601    E:\Program Files\iTunes\iTunes.Resources\en.lproj\MusicStoreBar.nib
      04/11/09 6:52:15 PM    136586    E:\Program Files\iTunes\iTunes.Resources\en.lproj\Placards.nib
      04/11/09 6:52:15 PM    21449    E:\Program Files\iTunes\iTunes.Resources\en.lproj\Ringtone.nib
      04/11/09 6:52:15 PM    169437    E:\Program Files\iTunes\iTunes.Resources\en.lproj\SetupAssistant.nib
      04/11/09 6:52:15 PM    3682193    E:\Program Files\iTunes\iTunes.Resources\es.lproj
      04/11/09 6:52:15 PM    42893    E:\Program Files\iTunes\iTunes.Resources\es.lproj\EQWindow.nib
      04/11/09 6:52:15 PM    33811    E:\Program Files\iTunes\iTunes.Resources\es.lproj\GradientWindow.nib
      04/11/09 6:52:15 PM    381649    E:\Program Files\iTunes\iTunes.Resources\es.lproj\iPodSettings.nib
      04/11/09 6:52:15 PM    9583    E:\Program Files\iTunes\iTunes.Resources\es.lproj\MusicStoreBar.nib
      04/11/09 6:52:15 PM    124550    E:\Program Files\iTunes\iTunes.Resources\es.lproj\Placards.nib
      04/11/09 6:52:15 PM    19587    E:\Program Files\iTunes\iTunes.Resources\es.lproj\Ringtone.nib
      04/11/09 6:52:15 PM    153511    E:\Program Files\iTunes\iTunes.Resources\es.lproj\SetupAssistant.nib
      04/11/09 6:52:16 PM    3450726    E:\Program Files\iTunes\iTunes.Resources\fi.lproj
      04/11/09 6:52:16 PM    43902    E:\Program Files\iTunes\iTunes.Resources\fi.lproj\EQWindow.nib
      04/11/09 6:52:16 PM    33929    E:\Program Files\iTunes\iTunes.Resources\fi.lproj\GradientWindow.nib
      04/11/09 6:52:16 PM    373444    E:\Program Files\iTunes\iTunes.Resources\fi.lproj\iPodSettings.nib
      04/11/09 6:52:16 PM    9306    E:\Program Files\iTunes\iTunes.Resources\fi.lproj\MusicStoreBar.nib
      04/11/09 6:52:16 PM    127415    E:\Program Files\iTunes\iTunes.Resources\fi.lproj\Placards.nib
      04/11/09 6:52:16 PM    18306    E:\Program Files\iTunes\iTunes.Resources\fi.lproj\Ringtone.nib
      04/11/09 6:52:16 PM    155068    E:\Program Files\iTunes\iTunes.Resources\fi.lproj\SetupAssistant.nib
      04/11/09 6:52:16 PM    3861752    E:\Program Files\iTunes\iTunes.Resources\fr.lproj
      04/11/09 6:52:16 PM    40462    E:\Program Files\iTunes\iTunes.Resources\fr.lproj\EQWindow.nib
      04/11/09 6:52:16 PM    32869    E:\Program Files\iTunes\iTunes.Resources\fr.lproj\GradientWindow.nib
      04/11/09 6:52:17 PM    371532    E:\Program Files\iTunes\iTunes.Resources\fr.lproj\iPodSettings.nib
      04/11/09 6:52:17 PM    9318    E:\Program Files\iTunes\iTunes.Resources\fr.lproj\MusicStoreBar.nib
      04/11/09 6:52:17 PM    123332    E:\Program Files\iTunes\iTunes.Resources\fr.lproj\Placards.nib
      04/11/09 6:52:17 PM    21169    E:\Program Files\iTunes\iTunes.Resources\fr.lproj\Ringtone.nib
      04/11/09 6:52:17 PM    153125    E:\Program Files\iTunes\iTunes.Resources\fr.lproj\SetupAssistant.nib
      04/11/09 6:52:18 PM    3640857    E:\Program Files\iTunes\iTunes.Resources\it.lproj
      04/11/09 6:52:18 PM    40801    E:\Program Files\iTunes\iTunes.Resources\it.lproj\EQWindow.nib
      04/11/09 6:52:18 PM    32081    E:\Program Files\iTunes\iTunes.Resources\it.lproj\GradientWindow.nib
      04/11/09 6:52:18 PM    372147    E:\Program Files\iTunes\iTunes.Resources\it.lproj\iPodSettings.nib
      04/11/09 6:52:19 PM    10402    E:\Program Files\iTunes\iTunes.Resources\it.lproj\MusicStoreBar.nib
      04/11/09 6:52:19 PM    124826    E:\Program Files\iTunes\iTunes.Resources\it.lproj\Placards.nib
      04/11/09 6:52:19 PM    17956    E:\Program Files\iTunes\iTunes.Resources\it.lproj\Ringtone.nib
      04/11/09 6:52:19 PM    153071    E:\Program Files\iTunes\iTunes.Resources\it.lproj\SetupAssistant.nib
      04/11/09 6:52:19 PM    3375451    E:\Program Files\iTunes\iTunes.Resources\ja.lproj
      04/11/09 6:52:19 PM    41875    E:\Program Files\iTunes\iTunes.Resources\ja.lproj\EQWindow.nib
      04/11/09 6:52:19 PM    33609    E:\Program Files\iTunes\iTunes.Resources\ja.lproj\GradientWindow.nib
      04/11/09 6:52:19 PM    389381    E:\Program Files\iTunes\iTunes.Resources\ja.lproj\iPodSettings.nib
      04/11/09 6:52:20 PM    10123    E:\Program Files\iTunes\iTunes.Resources\ja.lproj\MusicStoreBar.nib
      04/11/09 6:52:20 PM    127135    E:\Program Files\iTunes\iTunes.Resources\ja.lproj\Placards.nib
      04/11/09 6:52:20 PM    17288    E:\Program Files\iTunes\iTunes.Resources\ja.lproj\Ringtone.nib
      04/11/09 6:52:21 PM    154416    E:\Program Files\iTunes\iTunes.Resources\ja.lproj\SetupAssistant.nib
      04/11/09 6:52:21 PM    4565232    E:\Program Files\iTunes\iTunes.Resources\ko.lproj
      04/11/09 6:52:21 PM    39816    E:\Program Files\iTunes\iTunes.Resources\ko.lproj\EQWindow.nib
      04/11/09 6:52:21 PM    31763    E:\Program Files\iTunes\iTunes.Resources\ko.lproj\GradientWindow.nib
      04/11/09 6:52:21 PM    372227    E:\Program Files\iTunes\iTunes.Resources\ko.lproj\iPodSettings.nib
      04/11/09 6:52:22 PM    10029    E:\Program Files\iTunes\iTunes.Resources\ko.lproj\MusicStoreBar.nib
      04/11/09 6:52:22 PM    122290    E:\Program Files\iTunes\iTunes.Resources\ko.lproj\Placards.nib
      04/11/09 6:52:22 PM    18908    E:\Program Files\iTunes\iTunes.Resources\ko.lproj\Ringtone.nib
      04/11/09 6:52:22 PM    156647    E:\Program Files\iTunes\iTunes.Resources\ko.lproj\SetupAssistant.nib
      04/11/09 6:52:22 PM    3481611    E:\Program Files\iTunes\iTunes.Resources\nb.lproj
      04/11/09 6:52:23 PM    40705    E:\Program Files\iTunes\iTunes.Resources\nb.lproj\EQWindow.nib
      04/11/09 6:52:23 PM    33503    E:\Program Files\iTunes\iTunes.Resources\nb.lproj\GradientWindow.nib
      04/11/09 6:52:23 PM    380200    E:\Program Files\iTunes\iTunes.Resources\nb.lproj\iPodSettings.nib
      04/11/09 6:52:23 PM    10122    E:\Program Files\iTunes\iTunes.Resources\nb.lproj\MusicStoreBar.nib
      04/11/09 6:52:23 PM    125821    E:\Program Files\iTunes\iTunes.Resources\nb.lproj\Placards.nib
      04/11/09 6:52:23 PM    18157    E:\Program Files\iTunes\iTunes.Resources\nb.lproj\Ringtone.nib
      04/11/09 6:52:23 PM    154436    E:\Program Files\iTunes\iTunes.Resources\nb.lproj\SetupAssistant.nib
      04/11/09 6:52:24 PM    3718502    E:\Program Files\iTunes\iTunes.Resources\nl.lproj
      04/11/09 6:52:24 PM    42501    E:\Program Files\iTunes\iTunes.Resources\nl.lproj\EQWindow.nib
      04/11/09 6:52:24 PM    32997    E:\Program Files\iTunes\iTunes.Resources\nl.lproj\GradientWindow.nib
      04/11/09 6:52:24 PM    375343    E:\Program Files\iTunes\iTunes.Resources\nl.lproj\iPodSettings.nib
      04/11/09 6:52:24 PM    9579    E:\Program Files\iTunes\iTunes.Resources\nl.lproj\MusicStoreBar.nib
      04/11/09 6:52:24 PM    127299    E:\Program Files\iTunes\iTunes.Resources\nl.lproj\Placards.nib
      04/11/09 6:52:24 PM    18405    E:\Program Files\iTunes\iTunes.Resources\nl.lproj\Ringtone.nib
      04/11/09 6:52:25 PM    155703    E:\Program Files\iTunes\iTunes.Resources\nl.lproj\SetupAssistant.nib
      04/11/09 6:52:25 PM    3567216    E:\Program Files\iTunes\iTunes.Resources\pl.lproj
      04/11/09 6:52:25 PM    40348    E:\Program Files\iTunes\iTunes.Resources\pl.lproj\EQWindow.nib
      04/11/09 6:52:25 PM    34359    E:\Program Files\iTunes\iTunes.Resources\pl.lproj\GradientWindow.nib
      04/11/09 6:52:25 PM    368962    E:\Program Files\iTunes\iTunes.Resources\pl.lproj\iPodSettings.nib
      04/11/09 6:52:25 PM    10402    E:\Program Files\iTunes\iTunes.Resources\pl.lproj\MusicStoreBar.nib
      04/11/09 6:52:25 PM    124180    E:\Program Files\iTunes\iTunes.Resources\pl.lproj\Placards.nib
      04/11/09 6:52:25 PM    18455    E:\Program Files\iTunes\iTunes.Resources\pl.lproj\Ringtone.nib
      04/11/09 6:52:25 PM    151157    E:\Program Files\iTunes\iTunes.Resources\pl.lproj\SetupAssistant.nib
      04/11/09 6:52:26 PM    3543307    E:\Program Files\iTunes\iTunes.Resources\pt.lproj
      04/11/09 6:52:26 PM    40709    E:\Program Files\iTunes\iTunes.Resources\pt.lproj\EQWindow.nib
      04/11/09 6:52:26 PM    33327    E:\Program Files\iTunes\iTunes.Resources\pt.lproj\GradientWindow.nib
      04/11/09 6:52:26 PM    384229    E:\Program Files\iTunes\iTunes.Resources\pt.lproj\iPodSettings.nib
      04/11/09 6:52:26 PM    10094    E:\Program Files\iTunes\iTunes.Resources\pt.lproj\MusicStoreBar.nib
      04/11/09 6:52:27 PM    125793    E:\Program Files\iTunes\iTunes.Resources\pt.lproj\Placards.nib
      04/11/09 6:52:27 PM    18121    E:\Program Files\iTunes\iTunes.Resources\pt.lproj\Ringtone.nib
      04/11/09 6:52:27 PM    154392    E:\Program Files\iTunes\iTunes.Resources\pt.lproj\SetupAssistant.nib
      04/11/09 6:52:27 PM    3703683    E:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj
      04/11/09 6:52:27 PM    43404    E:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\EQWindow.nib
      04/11/09 6:52:27 PM    31523    E:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\GradientWindow.nib
      04/11/09 6:52:27 PM    376375    E:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\iPodSettings.nib
      04/11/09 6:52:28 PM    10409    E:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\MusicStoreBar.nib
      04/11/09 6:52:28 PM    123799    E:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\Placards.nib
      04/11/09 6:52:28 PM    21631    E:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\Ringtone.nib
      04/11/09 6:52:28 PM    158981    E:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\SetupAssistant.nib
      04/11/09 6:52:28 PM    4441662    E:\Program Files\iTunes\iTunes.Resources\ru.lproj
      04/11/09 6:52:28 PM    41184    E:\Program Files\iTunes\iTunes.Resources\ru.lproj\EQWindow.nib
      04/11/09 6:52:28 PM    33177    E:\Program Files\iTunes\iTunes.Resources\ru.lproj\GradientWindow.nib
      04/11/09 6:52:28 PM    398661    E:\Program Files\iTunes\iTunes.Resources\ru.lproj\iPodSettings.nib
      04/11/09 6:52:29 PM    9341    E:\Program Files\iTunes\iTunes.Resources\ru.lproj\MusicStoreBar.nib
      04/11/09 6:52:29 PM    124486    E:\Program Files\iTunes\iTunes.Resources\ru.lproj\Placards.nib
      04/11/09 6:52:29 PM    17793    E:\Program Files\iTunes\iTunes.Resources\ru.lproj\Ringtone.nib
      04/11/09 6:52:29 PM    160219    E:\Program Files\iTunes\iTunes.Resources\ru.lproj\SetupAssistant.nib
      04/11/09 6:52:29 PM    3516197    E:\Program Files\iTunes\iTunes.Resources\sv.lproj
      04/11/09 6:52:29 PM    43609    E:\Program Files\iTunes\iTunes.Resources\sv.lproj\EQWindow.nib
      04/11/09 6:52:30 PM    32517    E:\Program Files\iTunes\iTunes.Resources\sv.lproj\GradientWindow.nib
      04/11/09 6:52:30 PM    396936    E:\Program Files\iTunes\iTunes.Resources\sv.lproj\iPodSettings.nib
      04/11/09 6:52:30 PM    9808    E:\Program Files\iTunes\iTunes.Resources\sv.lproj\MusicStoreBar.nib
      04/11/09 6:52:30 PM    122999    E:\Program Files\iTunes\iTunes.Resources\sv.lproj\Placards.nib
      04/11/09 6:52:30 PM    19600    E:\Program Files\iTunes\iTunes.Resources\sv.lproj\Ringtone.nib
      04/11/09 6:52:30 PM    149725    E:\Program Files\iTunes\iTunes.Resources\sv.lproj\SetupAssistant.nib
      04/11/09 6:52:31 PM    3288295    E:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj
      04/11/09 6:52:31 PM    42436    E:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\EQWindow.nib
      04/11/09 6:52:31 PM    32805    E:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\GradientWindow.nib
      04/11/09 6:52:31 PM    371236    E:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\iPodSettings.nib
      04/11/09 6:52:31 PM    9770    E:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\MusicStoreBar.nib
      04/11/09 6:52:32 PM    126740    E:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\Placards.nib
      04/11/09 6:52:32 PM    19555    E:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\Ringtone.nib
      04/11/09 6:52:32 PM    156121    E:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\SetupAssistant.nib
      04/11/09 6:52:32 PM    3006748    E:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj
      04/11/09 6:52:32 PM    41387    E:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\EQWindow.nib
      04/11/09 6:52:32 PM    30783    E:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\GradientWindow.nib
      04/11/09 6:52:32 PM    371361    E:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\iPodSettings.nib
      04/11/09 6:52:33 PM    10400    E:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\MusicStoreBar.nib
      04/11/09 6:52:33 PM    125204    E:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\Placards.nib
      04/11/09 6:52:33 PM    21326    E:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\Ringtone.nib
      04/11/09 6:52:33 PM    146052    E:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\SetupAssistant.nib
      04/11/09 6:52:33 PM    830976    E:\Program Files\iTunes\iTunesHelper.Resources
      04/11/09 6:52:33 PM    43520    E:\Program Files\iTunes\iTunesHelper.Resources\da.lproj
      04/11/09 6:52:33 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\de.lproj
      04/11/09 6:52:33 PM    43520    E:\Program Files\iTunes\iTunesHelper.Resources\en.lproj
      04/11/09 6:52:34 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\es.lproj
      04/11/09 6:52:34 PM    43520    E:\Program Files\iTunes\iTunesHelper.Resources\fi.lproj
      04/11/09 6:52:34 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj
      04/11/09 6:52:34 PM    43520    E:\Program Files\iTunes\iTunesHelper.Resources\it.lproj
      04/11/09 6:52:34 PM    43520    E:\Program Files\iTunes\iTunesHelper.Resources\ja.lproj
      04/11/09 6:52:34 PM    43520    E:\Program Files\iTunes\iTunesHelper.Resources\ko.lproj
      04/11/09 6:52:34 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\nb.lproj
      04/11/09 6:52:34 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\nl.lproj
      04/11/09 6:52:34 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\pl.lproj
      04/11/09 6:52:34 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\pt.lproj
      04/11/09 6:52:34 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\pt_PT.lproj
      04/11/09 6:52:34 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\ru.lproj
      04/11/09 6:52:34 PM    44032    E:\Program Files\iTunes\iTunesHelper.Resources\sv.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesHelper.Resources\zh_CN.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesHelper.Resources\zh_TW.lproj
      04/11/09 6:52:35 PM    909312    E:\Program Files\iTunes\iTunesMiniPlayer.Resources
      04/11/09 6:52:35 PM    43008    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\da.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\de.lproj
      04/11/09 6:52:35 PM    43008    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\en.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\es.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\fi.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\fr.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\it.lproj
      04/11/09 6:52:35 PM    43008    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\ja.lproj
      04/11/09 6:52:35 PM    43008    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\ko.lproj
      04/11/09 6:52:35 PM    43008    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\nb.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\nl.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\pl.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt_PT.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\ru.lproj
      04/11/09 6:52:35 PM    43520    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\sv.lproj
      04/11/09 6:52:35 PM    43008    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_CN.lproj
      04/11/09 6:52:35 PM    43008    E:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_TW.lproj
      04/11/09 6:52:35 PM    69851    E:\Program Files\iTunes\Mozilla Plugins

      Offline jonax00

      • Bronze Member
      • Posts: 16
      here's the 3rd part;

      04/14/09 8:28:56 AM    38453568    E:\Program Files\K-Lite Codec Pack
      04/14/09 8:28:57 AM    12003040    E:\Program Files\K-Lite Codec Pack\ffdshow
      04/14/09 8:28:58 AM    2304    E:\Program Files\K-Lite Codec Pack\ffdshow\custom matrices
      04/14/09 8:28:58 AM    666121    E:\Program Files\K-Lite Codec Pack\ffdshow\languages
      04/14/09 8:29:06 AM    8943532    E:\Program Files\K-Lite Codec Pack\Filters
      04/14/09 8:29:11 AM    1909475    E:\Program Files\K-Lite Codec Pack\Filters\Haali
      04/14/09 8:28:57 AM    166218    E:\Program Files\K-Lite Codec Pack\Icons
      04/14/09 8:28:57 AM    159595    E:\Program Files\K-Lite Codec Pack\Info
      04/14/09 8:28:58 AM    10414080    E:\Program Files\K-Lite Codec Pack\Media Player Classic
      04/14/09 8:28:56 AM    5623638    E:\Program Files\K-Lite Codec Pack\Tools
      04/14/09 8:29:06 AM    1920    E:\Program Files\K-Lite Codec Pack\Tools\XvidQuantMatrices
      04/14/09 11:39:56 PM    4161405    E:\Program Files\Malwarebytes' Anti-Malware
      04/14/09 11:39:56 PM    372758    E:\Program Files\Malwarebytes' Anti-Malware\Languages
      03/06/09 7:06:59 PM    4789828    E:\Program Files\Microsoft Games for Windows - LIVE
      03/06/09 7:07:00 PM    4789828    E:\Program Files\Microsoft Games for Windows - LIVE\Redist
      03/06/09 7:07:00 PM    4789828    E:\Program Files\Microsoft Games for Windows - LIVE\Redist\DirectX
      03/29/09 4:11:31 AM    14904    E:\Program Files\Microsoft Visual Studio
      03/29/09 4:11:31 AM    14904    E:\Program Files\Microsoft Visual Studio\COMMON
      03/29/09 4:11:31 AM    14904    E:\Program Files\Microsoft Visual Studio\COMMON\IDE
      03/29/09 4:11:31 AM    14904    E:\Program Files\Microsoft Visual Studio\COMMON\IDE\IDE98
      03/29/09 12:35:09 AM    3178824    E:\Program Files\Microsoft Works
      03/29/09 12:35:09 AM    252944    E:\Program Files\Microsoft Works\1033
      03/29/09 12:33:59 AM    8152064    E:\Program Files\Microsoft.NET
      03/29/09 12:33:59 AM    8152064    E:\Program Files\Microsoft.NET\Primary Interop Assemblies
      03/08/09 3:01:23 PM    6849    E:\Program Files\MSXML 6.0
      03/08/09 3:01:23 PM    6849    E:\Program Files\MSXML 6.0\EULA
      04/08/09 12:07:45 AM    799424    E:\Program Files\OpenAL
      04/08/09 12:40:15 AM    6482704552    E:\Program Files\Sierra Entertainment
      04/08/09 12:40:15 AM    6482704552    E:\Program Files\Sierra Entertainment\World in Conflict
      04/08/09 12:40:15 AM    392704    E:\Program Files\Sierra Entertainment\World in Conflict\miles_redist
      04/08/09 12:40:16 AM    98157394    E:\Program Files\Sierra Entertainment\World in Conflict\speedtrees
      04/08/09 12:40:16 AM    98157394    E:\Program Files\Sierra Entertainment\World in Conflict\speedtrees\wic_data
      04/10/09 1:46:45 PM    61466332    E:\Program Files\Spybot - Search & Destroy
      04/10/09 1:46:48 PM    55992    E:\Program Files\Spybot - Search & Destroy\Dummies
      04/10/09 1:46:51 PM    573029    E:\Program Files\Spybot - Search & Destroy\Help
      04/10/09 1:46:48 PM    15393588    E:\Program Files\Spybot - Search & Destroy\Includes
      04/10/09 1:46:50 PM    4261934    E:\Program Files\Spybot - Search & Destroy\Languages
      04/10/09 1:46:48 PM    2424432    E:\Program Files\Spybot - Search & Destroy\Plugins
      04/10/09 1:46:51 PM    49349    E:\Program Files\Spybot - Search & Destroy\Skins
      04/10/09 1:46:51 PM    6698698    E:\Program Files\Spybot - Search & Destroy\Updates
      04/13/09 2:09:41 AM    12814550739    E:\Program Files\SquareEnix
      04/13/09 2:09:42 AM    12814550739    E:\Program Files\SquareEnix\The Last Remnant
      04/13/09 2:09:42 AM    63752892    E:\Program Files\SquareEnix\The Last Remnant\Binaries

      **  if you don't mind sir, i've skipped all the txt here under E:\Program Files\SquareEnix\The Last Remnant because it verrrryyyy lonnngggg....  i don't think we need it anyway...
      BTW, one thing great that have happened since you started helping me was that i was able to play this game!  :D  before i couldn't, no matter how many times i installed it & asked for help in different game forums - no one knew why i couldn't play this game - until i've done what you told me to do, sir...  so i know what you're doing is making a whole lot of difference!  my thank yous in advance!     :D **

      but if you still need it, sir, i could post it next reply if you like...

      03/08/09 8:03:42 AM    796762    E:\Program Files\SystemRequirementsLab
      04/14/09 11:37:03 PM    406706    E:\Program Files\Trend Micro
      04/14/09 11:37:03 PM    406706    E:\Program Files\Trend Micro\HijackThis
      02/19/09 8:34:55 PM    1487047    E:\Program Files\USB Vibration
      02/19/09 8:34:55 PM    1487047    E:\Program Files\USB Vibration\7906
      02/19/09 8:34:55 PM    1487047    E:\Program Files\USB Vibration\7906\setup
      04/15/09 10:20:39 PM    2505884    E:\Program Files\VS Revo Group
      04/15/09 10:20:39 PM    2505884    E:\Program Files\VS Revo Group\Revo Uninstaller
      04/15/09 10:20:43 PM    1819136    E:\Program Files\VS Revo Group\Revo Uninstaller\lang

      ====== Files under "\System32\Drivers" Last 60 Days======

      04/08/09 11:04:56 PM    136224    32    E:\WINDOWS\system32\drivers\aspi32.sys
      03/29/09 8:56:28 AM    11392    32    E:\WINDOWS\system32\drivers\bdasup.sys
      03/29/09 8:56:28 AM    16384    32    E:\WINDOWS\system32\drivers\ccdecode.sys
      04/14/09 11:40:00 PM    15504    32    E:\WINDOWS\system32\drivers\mbam.sys
      04/14/09 11:39:57 PM    38496    32    E:\WINDOWS\system32\drivers\mbamswissarmy.sys
      03/29/09 8:56:28 AM    15104    32    E:\WINDOWS\system32\drivers\mpe.sys
      03/29/09 8:56:28 AM    52096    32    E:\WINDOWS\system32\drivers\msdv.sys
      03/29/09 8:56:27 AM    5504    32    E:\WINDOWS\system32\drivers\mstee.sys
      03/29/09 8:56:28 AM    83968    32    E:\WINDOWS\system32\drivers\nabtsfec.sys
      03/29/09 8:56:28 AM    10112    32    E:\WINDOWS\system32\drivers\ndisip.sys
      03/12/09 11:43:39 PM    22328    32    E:\WINDOWS\system32\drivers\PnkBstrK.sys
      03/29/09 8:56:28 AM    10880    32    E:\WINDOWS\system32\drivers\slip.sys
      03/29/09 8:56:28 AM    14976    32    E:\WINDOWS\system32\drivers\streamip.sys
      03/29/09 8:56:28 AM    18688    32    E:\WINDOWS\system32\drivers\wstcodec.sys

      ====== Files Deleted under "%Temp%" ======

      E:\DOCUME~1\JJRV\LOCALS~1\Temp\12aa13.mst
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\1IN_m58L.exe.part
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\57a0_appcompat.txt
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\Catalyst.bmp
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\etilqs_gBjRShSva6F2h8SsZbQV
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\Setup Log 2009-04-14 #001.txt
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\wmplog00.sqm
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\wmplog01.sqm
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\_is132.exe
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\_is13C.exe
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\~DF704E.tmp
      E:\DOCUME~1\JJRV\LOCALS~1\Temp\~DF7065.tmp

      12 Files deleted

      ====== Files and Folders under "All Users\Application Data" Last 60 Days======

      04/14/09 8:52:12 AM    188    E:\Documents and Settings\All Users\Application Data\ATI
      04/14/09 8:52:12 AM    188    E:\Documents and Settings\All Users\Application Data\ATI\ACE
      02/22/09 12:34:49 AM    3000    E:\Documents and Settings\All Users\Application Data\LightScribe
      02/22/09 12:34:49 AM    3000    E:\Documents and Settings\All Users\Application Data\LightScribe\log
      02/23/09 7:52:38 PM    0    E:\Documents and Settings\All Users\Application Data\LightScribe\standalone
      04/14/09 11:39:56 PM    1751838    E:\Documents and Settings\All Users\Application Data\Malwarebytes
      04/14/09 11:39:56 PM    1751838    E:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware
      03/28/09 7:59:42 AM    59986    E:\Documents and Settings\All Users\Application Data\Microsoft Help
      03/10/09 8:43:56 PM    603099    E:\Documents and Settings\All Users\Application Data\SupportSoft
      03/10/09 8:43:56 PM    603099    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe
      03/10/09 8:44:51 PM    517112    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\SYSTEM
      03/10/09 8:44:51 PM    45132    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\SYSTEM\data
      03/10/09 8:44:51 PM    0    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\SYSTEM\data\sprt_protection
      03/10/09 8:44:52 PM    0    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\SYSTEM\data\sprt_trigger
      03/10/09 8:44:51 PM    471980    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\SYSTEM\state
      03/10/09 8:44:54 PM    0    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\SYSTEM\state\lastrun
      03/10/09 8:44:51 PM    471411    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\SYSTEM\state\logs
      03/10/09 8:44:53 PM    569    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\SYSTEM\state\zcat
      03/10/09 8:43:56 PM    85987    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default
      03/10/09 8:43:56 PM    79685    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data
      03/10/09 8:43:56 PM    36379    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection
      03/10/09 8:43:56 PM    3770    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection\259f2f76-efdd-4711-8420-fe4f2f2414f7.3
      03/10/09 8:43:56 PM    3758    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection\3fc108ee-1d83-4574-ba65-dc9bd53c3c89.4
      03/10/09 8:43:56 PM    4281    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection\a5009ca2-1491-426c-bcbd-51183cde8fdd.3
      03/10/09 8:43:56 PM    4077    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection\afe03765-5133-40ed-8a46-06ae8acdc581.2
      03/10/09 8:43:57 PM    3762    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection\c8fca07a-b50b-4f45-abd2-b00439b30f42.3
      03/10/09 8:43:57 PM    3709    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection\d4c2111e-ed04-46c9-badf-41ac634f4340.3
      03/10/09 8:43:57 PM    5403    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection\d7a20164-46d1-4c42-93fd-c696a8391d8f.3
      03/10/09 8:43:57 PM    3727    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection\ecda9f4e-46fe-4d4b-ae47-bc48fb325fa6.3
      03/10/09 8:43:57 PM    3892    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_protection\fc65c2b8-8009-4440-b3de-60222abe831d.3
      03/10/09 8:43:57 PM    26964    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_trigger
      03/10/09 8:43:57 PM    3981    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_trigger\3e06a494-ebf9-4f50-9ab2-709dd8da8447.6
      03/10/09 8:43:57 PM    2645    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_trigger\43b56b74-ab89-45dd-bf98-ea06a8eaed9e.6
      03/10/09 8:43:57 PM    2782    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_trigger\7342c0c7-e25b-407f-a00c-a34fe7c298a9.6
      03/10/09 8:43:57 PM    3954    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_trigger\788a3962-5644-4252-a4e5-92ed813c7d31.6
      03/10/09 8:43:57 PM    3403    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_trigger\90026512-31bb-4e19-80b0-1c90f89d1bfc.6
      03/10/09 8:43:57 PM    3537    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_trigger\d8183cdd-ccaa-4d26-b764-0c44039e4926.6
      03/10/09 8:43:57 PM    2686    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_trigger\dd460e0e-dedc-4ae9-9ab1-b817bfa122ce.5
      03/10/09 8:43:57 PM    3976    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\data\sprt_trigger\e66706d4-c7ad-46b7-99fd-d340c4407d19.6
      03/10/09 8:43:57 PM    6302    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\state
      03/10/09 8:43:57 PM    6302    E:\Documents and Settings\All Users\Application Data\SupportSoft\globe\_default\state\zcat
      03/15/09 1:03:44 AM    4466    E:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
      03/15/09 1:05:06 AM    4466    E:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}\x86
      04/11/09 6:52:02 PM    540484    E:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
      04/11/09 6:52:35 PM    540484    E:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86
      04/11/09 6:52:35 PM    130768    E:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\x86

      ====== Values under HKLM\Software\microsoft\shared tools\msconfig\startupreg ======

      HKLM\Software\microsoft\shared tools\msconfig\startupreg\
      E:\Program Files\ESET\ESET Smart Security\egui.exe

      ====== Services ( Services that are Whitelisted are not shown) ======

      adfs (adfs)- E:\WINDOWS\system32\drivers\adfs.sys - Auto/Running
      Amfilter (A4Tech Mouse Filter Driver)- E:\WINDOWS\system32\DRIVERS\Amfilter.sys - System/Running
      Amusbprt (A4Tech HID-compliant Mouse Driver)- E:\WINDOWS\system32\DRIVERS\Amusbprt.sys - Manual/Stopped
      AtiHdmiService (ATI Function Driver for HDMI Service)- E:\WINDOWS\system32\drivers\AtiHdmi.sys - Manual/Running
      Avgfwdx (Avgfwdx)- E:\WINDOWS\system32\DRIVERS\avgfwdx.sys - Manual/Stopped
      Avgfwfd (AVG network filter service)- E:\WINDOWS\system32\DRIVERS\avgfwdx.sys - Manual/Stopped
      e1express (Intel(R) PRO/1000 PCI Express Network Connection Driver)- E:\WINDOWS\system32\DRIVERS\e1e5132.sys - Manual/Running
      eamon (eamon)- E:\WINDOWS\system32\DRIVERS\eamon.sys - Auto/Running
      ehdrv (ehdrv)- E:\WINDOWS\system32\DRIVERS\ehdrv.sys - System/Running
      epfw (epfw)- E:\WINDOWS\system32\DRIVERS\epfw.sys - Auto/Running
      Epfwndis (Eset Personal Firewall)- E:\WINDOWS\system32\DRIVERS\Epfwndis.sys - Manual/Running
      epfwtdi (epfwtdi)- E:\WINDOWS\system32\DRIVERS\epfwtdi.sys - System/Running
      ggsemc (Sony Ericsson USB Flash Driver)- E:\WINDOWS\system32\DRIVERS\ggsemc.sys - Manual/Stopped
      HECI (Intel(R) Management Engine Interface)- E:\WINDOWS\system32\DRIVERS\HECI.sys - Manual/Running
      NTIDrvr (Upper Class Filter Driver)- E:\WINDOWS\system32\DRIVERS\NTIDrvr.sys - Manual/Running
      osaio (osaio)- \??\E:\WINDOWS\system32\drivers\osaio.sys - Auto/Running
      pcouffin (VSO Software pcouffin)- E:\WINDOWS\system32\Drivers\pcouffin.sys - Manual/Running
      s125bus (Sony Ericsson Device 125 driver (WDM))- E:\WINDOWS\system32\DRIVERS\s125bus.sys - Manual/Stopped
      s125mdfl (Sony Ericsson Device 125 USB WMC Modem Filter)- E:\WINDOWS\system32\DRIVERS\s125mdfl.sys - Manual/Stopped
      s125mdm (Sony Ericsson Device 125 USB WMC Modem Driver)- E:\WINDOWS\system32\DRIVERS\s125mdm.sys - Manual/Stopped
      s125mgmt (Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM))- E:\WINDOWS\system32\DRIVERS\s125mgmt.sys - Manual/Stopped
      s125obex (Sony Ericsson Device 125 USB WMC OBEX Interface)- E:\WINDOWS\system32\DRIVERS\s125obex.sys - Manual/Stopped
      sfng32 (Sonic Focus Plugin for HDA)- E:\WINDOWS\system32\drivers\sfng32.sys - Manual/Running
      smbusp (Intel(R) SMBus 2.0 Driver)- E:\WINDOWS\system32\DRIVERS\intelsmb.sys - Manual/Running
      StarOpen (StarOpen)- E:\WINDOWS\system32\drivers\StarOpen.sys - System/Running
      STHDA (IDT High Definition Audio CODEC)- E:\WINDOWS\system32\drivers\sthda.sys - Manual/Running
      Tcpip6 (Microsoft IPv6 Protocol Driver)- E:\WINDOWS\system32\DRIVERS\tcpip6.sys - System/Running
      tunmp (Microsoft Tun Miniport Adapter Driver)- E:\WINDOWS\system32\DRIVERS\tunmp.sys - Manual/Running
      usbbus (LGE Mobile Composite USB Device)- E:\WINDOWS\system32\DRIVERS\lgusbbus.sys - Manual/Stopped
      UsbDiag (LGE Mobile USB Serial Port)- E:\WINDOWS\system32\DRIVERS\lgusbdiag.sys - Manual/Stopped
      USBModem (LGE Mobile USB Modem)- E:\WINDOWS\system32\DRIVERS\lgusbmodem.sys - Manual/Stopped
      w300bus (Sony Ericsson W300 Driver driver (WDM))- E:\WINDOWS\system32\DRIVERS\w300bus.sys - Manual/Stopped
      w300mdfl (Sony Ericsson W300 USB WMC Modem Filter)- E:\WINDOWS\system32\DRIVERS\w300mdfl.sys - Manual/Stopped
      w300mdm (Sony Ericsson W300 USB WMC Modem Driver)- E:\WINDOWS\system32\DRIVERS\w300mdm.sys - Manual/Stopped
      w300mgmt (Sony Ericsson W300 USB WMC Device Management Drivers (WDM))- E:\WINDOWS\system32\DRIVERS\w300mgmt.sys - Manual/Stopped
      w300obex (Sony Ericsson W300 USB WMC OBEX Interface)- E:\WINDOWS\system32\DRIVERS\w300obex.sys - Manual/Stopped
      w810bus (Sony Ericsson W810 Driver driver (WDM))- E:\WINDOWS\system32\DRIVERS\w810bus.sys - Manual/Stopped
      w810mdfl (Sony Ericsson W810 USB WMC Modem Filter)- E:\WINDOWS\system32\DRIVERS\w810mdfl.sys - Manual/Stopped
      w810mdm (Sony Ericsson W810 USB WMC Modem Driver)- E:\WINDOWS\system32\DRIVERS\w810mdm.sys - Manual/Stopped
      w810mgmt (Sony Ericsson W810 USB WMC Device Management Drivers (WDM))- E:\WINDOWS\system32\DRIVERS\w810mgmt.sys - Manual/Stopped
      w810obex (Sony Ericsson W810 USB WMC OBEX Interface)- E:\WINDOWS\system32\DRIVERS\w810obex.sys - Manual/Stopped

      ====== Uninstall List From Registry ======

      3GP Video Converter 3
      Adobe AIR
      Adobe Flash Player 10 ActiveX
      Adobe Flash Player 10 Plugin
      Adobe Shockwave Player
      Adobe Color Common Settings
      Adobe Photoshop CS4
      ATI - Software Uninstall Utility
      ATI Display Driver
      AVI Splitter
      Battle.net
      Canon Camera Access Library
      Canon Utilities CameraWindow DC
      Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX
      Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
      Canon Utilities CameraWindow
      Canon G.726 WMP-Decoder
      PIXMA Extended Survey Program
      CCleaner (remove only)
      Canon Camera Support Core Library
      Defraggler (remove only)
      Canon Utilities Easy-LayoutPrint
      Canon Utilities Easy-PhotoPrint
      Canon Utilities Easy-PrintToolBox
      Canon Utilities EOS Utility
      NOD32 v3.0.642 FiX1.2 by TemDono (31 days remaining forever up
      Globe Broadband Click Fix
      Intel(R) Management Engine Interface
      HijackThis 2.0.2
      Microsoft Internationalized Domain Names Mitigation APIs
      Windows Internet Explorer 8
      Chessmaster Grandmaster Edition
      Spider-Man(TM) - Web of Shadows
      Intel(R) Desktop Utilities
      Internet Download Manager
      High Definition Audio Driver Package - KB888111
      Security Update for Windows Media Player (KB911564)
      Security Update for Windows Media Player 10 (KB917734)
      Security Update for Windows Media Player 9 (KB917734)
      Security Update for Windows XP (KB923561)
      Security Update for Windows Internet Explorer 7 (KB928090)
      Hotfix for Windows Media Format 11 SDK (KB929399)
      Security Update for Windows Internet Explorer 7 (KB931768)
      Security Update for Windows Internet Explorer 7 (KB933566)
      Security Update for Windows Media Player 11 (KB936782)
      Security Update for Windows Internet Explorer 7 (KB937143)
      Security Update for Windows Internet Explorer 7 (KB938127)
      Security Update for Windows XP (KB938464)
      Security Update for Windows Internet Explorer 7 (KB939653)
      Hotfix for Windows Media Player 11 (KB939683)
      Security Update for Windows XP (KB941569)
      Hotfix for Windows XP (KB942288-v3)
      Security Update for Windows Internet Explorer 7 (KB942615)
      Security Update for Windows Internet Explorer 7 (KB944533)
      Security Update for Windows XP (KB946648)
      Hotfix for Windows Internet Explorer 7 (KB947864)
      Security Update for Windows Internet Explorer 7 (KB950759)
      Security Update for Windows XP (KB950760)
      Security Update for Windows XP (KB950762)
      Security Update for Windows XP (KB950974)
      Security Update for Windows XP (KB951066)
      Update for Windows XP (KB951072-v2)
      Security Update for Windows XP (KB951376)
      Security Update for Windows XP (KB951376-v2)
      Security Update for Windows XP (KB951698)
      Security Update for Windows XP (KB951748)
      Update for Windows XP (KB951978)
      Security Update for Windows XP (KB952004)
      Security Update for Windows Media Player (KB952069)
      Hotfix for Windows XP (KB952287)
      Security Update for Windows XP (KB952954)
      Security Update for Windows Internet Explorer 7 (KB953838)
      Security Update for Windows XP (KB953839)
      Security Update for Windows Media Player 11 (KB954154)
      Security Update for Windows XP (KB954211)
      Security Update for Windows XP (KB954459)
      Hotfix for Windows XP (KB954550-v5)
      Security Update for Windows XP (KB954600)
      Security Update for Windows XP (KB955069)
      Update for Windows XP (KB955839)
      Security Update for Windows Internet Explorer 7 (KB956390)
      Security Update for Windows XP (KB956391)
      Security Update for Windows XP (KB956572)
      Security Update for Windows XP (KB956802)
      Security Update for Windows XP (KB956803)
      Security Update for Windows XP (KB956841)
      Security Update for Windows XP (KB957095)
      Security Update for Windows XP (KB957097)
      Security Update for Windows Internet Explorer 7 (KB958215)
      Security Update for Windows XP (KB958644)
      Security Update for Windows XP (KB958687)
      Security Update for Windows XP (KB958690)
      Security Update for Windows XP (KB959426)
      Critical Update for Windows Media Player 11 (KB959772)
      Security Update for Windows XP (KB960225)
      Security Update for Windows Internet Explorer 7 (KB960714)
      Security Update for Windows XP (KB960715)
      Security Update for Windows XP (KB960803)
      Hotfix for Windows XP (KB961118)
      Security Update for Windows Internet Explorer 7 (KB961260)
      Security Update for Windows XP (KB961373)
      Update for Windows XP (KB967715)
      Update for Windows Internet Explorer 8 (KB968220)
      K-Lite Codec Pack 4.7.5 (Full)
      LimeWire PRO 4.18.3
      Microsoft .NET Framework 1.1 Hotfix (KB928366)
      Malwarebytes' Anti-Malware
      Microsoft .NET Framework 1.1
      Microsoft .NET Framework 3.5 SP1
      mIRC
      Canon MovieEdit Task for ZoomBrowser EX
      Mozilla Firefox (3.0.5)
      Microsoft Compression Client Pack 1.0 for Windows XP
      Canon Utilities MyCamera
      Canon Utilities MyCamera DC
      Microsoft National Language Support Downlevel APIs
      OpenAL
      Canon Utilities PhotoStitch
      Microsoft Office Professional 2007
      PunkBuster Services
      QuickTime Alternative 2.6.0
      Canon RAW Image Task for ZoomBrowser EX
      Canon Utilities RemoteCapture DC
      Canon Utilities RemoteCapture Task for ZoomBrowser EX
      Revo Uninstaller 1.80
      Shockwave
      Intel(R) SMBus
      SNLBar
      System Requirements Lab
      Total Video Converter 3.14 080930
      Total Video Converter 3.20 090114
      Microsoft Web Publishing Wizard 1.52
      Webshots Desktop
      Winamp
      Windows Media Format 11 runtime
      Windows Media Player 11
      Windows XP Service Pack 3
      WinRAR archiver
      Windows Media Format 11 runtime
      Windows Media Player 11
      Microsoft User-Mode Driver Framework Feature Pack 1.0
      XML Paper Specification Shared Components Pack 1.0
      Yahoo! Toolbar
      Yahoo! Browser Services
      Yahoo! Mail
      Yahoo! Messenger
      Canon Utilities ZoomBrowser EX
      Canon ZoomBrowser EX Memory Card Utility
      Adobe Color NA Recommended Settings CS4
      Adobe Update Manager CS4
      Adobe Extension Manager CS4
      ATI Catalyst Control Center
      Bonjour
      kuler
      Adobe Color JA Extra Settings CS4
      Adobe Setup
      Adobe CSI CS4

      Canon iP1800 series
      Windows Installer Clean Up
      Adobe Anchor Service CS4
      Adobe Drive CS4
      AdobeColorCommonSetRGB
      Catalyst Control Center Core Implementation
      Adobe AIR
      QuickTime
      Intel(R) Network Connections 13.0.42.0
      Google Toolbar for Internet Explorer
      Chessmaster Grandmaster Edition
      J2SE Runtime Environment 5.0 Update 3
      Java(TM) SE Runtime Environment 6 Update 1
      Java(TM) 6 Update 2
      WebFldrs XP
      Intel Audio Studio
      PDF Settings CS4
      MSXML 4.0 SP2 (KB927978)
      VCRedistSetup
      Adobe XMP Panels CS4
      Adobe Color - Photoshop Specific CS4
      Adobe WinSoft Linguistics Plugin
      Adobe Service Manager Extension
      USB Vibration Joystick
      LightScribe System Software
      Intel Audio Studio
      InterVideo DeviceService
      Adobe Color EU Extra Settings CS4
      TuneUp Utilities 2009
      neroxml
      Install Intel Desktop Utilities
      iTunes
      Nero 8
      Adobe Color Video Profiles CS CS4
      Adobe Photoshop CS4 Support
      Adobe Setup
      Catalyst Control Center HydraVision Full
      Adobe Device Central CS4
      AdobeColorCommonSetCMYK
      Apple Software Update
      Adobe Color Common Settings
      MSXML 4.0 SP2 Parser and SDK
      Microsoft Visual C++ 2005 Redistributable
      ConvertXtoDVD 3.4.8.123
      Catalyst Control Center Graphics Full New
      Catalyst Control Center Graphics Previews Common
      Spider-Man(TM) - Web of Shadows
      Adobe Type Support CS4
      Adobe Bridge CS4
      Catalyst Control Center Graphics Full Existing
      Suite Shared Configuration CS4
      MSXML 4.0 SP2 (KB954430)
      NVIDIA PhysX
      Microsoft Software Update for Web Folders  (English) 12
      Microsoft Office Access MUI (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Excel MUI (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office PowerPoint MUI (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Publisher MUI (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Outlook MUI (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Word MUI (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Proof (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Proof (French) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Proof (Spanish) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Proofing (English) 2007
      Microsoft Office Shared MUI (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Shared Setup Metadata MUI (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office Access Setup Metadata MUI (English) 2007
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Microsoft Office PowerPoint 2003 Template Pack 1
      Microsoft Office PowerPoint 2003 Template Pack 2
      Microsoft Office PowerPoint 2003 Template Pack 3
      Microsoft Office Professional 2007
      Update for Outlook 2007 Junk Email Filter (kb962871)
      Security Update for Microsoft Office Word 2007 (KB956358)
      Update for Microsoft Office Outlook 2007 (KB952142)
      Security Update for Microsoft Office PowerPoint 2007 (KB951338)
      Security Update for Microsoft Office system 2007 (KB954326)
      Security Update for 2007 Microsoft Office System (KB951944)
      Security Update for Microsoft Office system 2007 (KB956828)
      Security Update for Microsoft Office Excel 2007 (KB959997)
      Update for Office 2007 (KB946691)
      Security Update for 2007 Microsoft Office System (KB951550)
      2007 Microsoft Office Suite Service Pack 1 (SP1)
      Security Update for 2007 Microsoft Office System (KB960003)
      Security Update for Microsoft Office Publisher 2007 (KB950114)
      Adobe Linguistics CS4
      Adobe CMaps CS4
      ccc-core-preinstall
      Microsoft .NET Framework 3.0 Service Pack 2
      MSXML 6.0 Parser
      Adobe Reader 9
      Apple Mobile Device Support
      Connect
      Spybot - Search & Destroy
      Microsoft XML Parser
      Adobe Photoshop CS4
      Adobe Output Module
      InterVideo AVControlSDK
      SecurDisc Viewer
      Skins
      MSXML 4.0 SP2 (KB936181)
      Medieval II Total War
      Microsoft .NET Framework 2.0 Service Pack 2
      CCC Help English
      LG USB Modem driver
      Adobe Default Language CS4
      ccc-core-static
      Microsoft .NET Framework 1.1
      Photoshop Camera Raw
      Microsoft .NET Framework 3.5 SP1
      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
      ccc-utility
      Catalyst Control Center - Branding
      Microsoft XML Parser
      IDT Audio
      Adobe Photoshop CS4
      Adobe Search for Help
      World in Conflict: Soviet Assault
      ESET Smart Security
      Intel(R) Desktop Utilities
      Tom Clancy's Ghost Recon Advanced WarfighterŽ 2
      Adobe ExtendScript Toolkit CS4
      Adobe PDF Library Files CS4
      Adobe Fonts All
      Catalyst Control Center Graphics Light
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

      ======== Other Info ========

      TOTAL PHYSICAL RAM: 3487 MB


      ====== Files with Hidden Attributes======

      E:\pagefile.sys

      ==End of Report==


      Offline PCBruiser

      • Malware Removal Mentors
      • Administrator
      • Diamond Member
      • Posts: 7948
      Hi,

      I think I may have found the AVG components still on your system.  We are going to have to deal with them manually using a script I've programmed for you.  THIS SCRIPT IS ONLY FOR THE USE OF THIS POSTER, ANYONE ELSE WHO TRIES THIS SCRIPT MAY DAMAGE THEIR SYSTEM.

      Please follow these instructions carefully:

      Open Notepad by clicking on Start, then Run, and entering the word:

      Notepad

      in the run box.  Next tap <Enter>. Open the Notepad Format Menu and uncheck Word Wrap. Then copy and paste the following code into Notepad:

      Code: [Select]
      title fix.bat
      cls
      @echo off
      echo Press any key to start fix.bat ...
      pause
      echo Start Date: & date /t
      echo Start Time: & time /t
      echo fix.bat running ...
      sc stop Avgfwdx
      sc delete Avgfwdx
      sc stop Avgfwfd
      sc delete Avgfwfd
      asttrib -s -h -r -a E:\WINDOWS\system32\DRIVERS\avgfwdx.sys
      del E:\WINDOWS\system32\DRIVERS\avgfwdx.sys /f /q
      echo Report any errors encountered while running fix.bat.
      echo .....
      echo fix.bat is finished!
      echo Complete Date: & date /t
      echo Complete Time: & time /t
      echo Press any key to close this window ...
      pause
      exit

      Next, Click on the File Menu, then Save As ... and click on the drop down menu to change the file type to All Files.

      Next navigate to your desktop, and enter the file name fix.bat, and click Save.

      You should now find a new file on your desktop named fix.batBoot into Safe Mode. Double click on fix.bat the file will run immediately.

      Important note to other members.  The file fix.bat has been custom designed for this member's problems only.  Do not use it unless instructed to do so by a qualified 1st Responder or Security Expert here.  Using fix.bat without specific instructions to do so can place your system at extreme risk, and you are solely responsible for any consequences and problems that may create.

      Now, ComboFix should run, I hope.  Try it in normal Windows.  If you still get the warning, rerun FileLister and I'll try to see what I missed, but I think this will fix the remaining issues with AVG.  If you are able to run ComboFix, post the log file for me.  In any case, please post a fresh HJT log.
      Don't Read?  Can't learn!