File's

Jacee · Jan 10, 2011

Install Javara and run it:
JavaRa is a simple tool that does a simple job: it removes old and redundant versions of the Java Runtime Environment (JRE). Simply select “Check for Updates” or “Remove Older Version” to begin. JavaRa is free under the GNU GPL version two.
Software « RaProducts

Next, download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.

Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
***Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

Now please

Download random's system information tool (RSIT) by random/random from here[/url].
It is important that is saved to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

This is just a bit more information for me to see how you're doing.

americancritic · Jan 10, 2011

Hello Jacee I have followed your instructions for today and when I click your link to download the (RSIT) this is what I get.

americancritic · Jan 10, 2011

Hello I just want to make sure I get the site you want me to go to so I can follow the instructions on your post. Thank you again for your help.

americancritic

americancritic · Jan 10, 2011

Hello Jacee here are the 2 reports you wanted, I don't know what I am looking at but some of them say missing files but I am sure you know how to read them so I will wait for your next post and again thank you.

americancritic

americancritic · Jan 11, 2011

Hello Jacee I was wondering if I should just reformat the hard drive and reinstall everything. I only have the restore disk's, I have figured out for all the hours I have spent dinking around with this I could have done a complete restore, but of course then comes all of the up-dating and trying to get everything back to what it was will take a few days at least. So getting things right would take a week and thats a long time but what is your opinon.

Jacee · Jan 11, 2011

americancritic, you have two topics going and I'm trying to follow both of them!!!

If you feel that you want to do a 'clean' install, then by all means be my guest :D

If you have saved your Documents, pics, 'Good' downloaded programs and their installers... (not the dodgy ones) to a DVD, then you should decide for yourself.

Jacee · Jan 11, 2011

I've asked that your two same topics be merged into one here: http://www.vistax64.com/system-security/286528-adbupdater-exe-2.html

americancritic · Jan 11, 2011

Hello Jacee I am wondering if I got this mixed up or not but your post to me reads the following.

Now Please
*Download *random's system information tool (RSIT)* by *random/random* from* _here_* [/url (http://[url]http"//images.malwareremoval.com/random/RSIT.exe].
**it is important that is saved to your desktop*
*Double click on *RSIT.exe to run *RSIT*
*Click *continue* at the disclaimer screen.
*Once it has finished, two logs will open. Please post the contents of both*log.txt* (<<will be maximized) and *info.txt (<<will be minimized)

I seem to be at a loss about posting them togehter as one, being pretty new to the computer world I really would not have known how to post them together at the same time or how. I would be more then happy to redo the intire test and send it the way you want if you tell me how. Thank you

americancritic

americancritic · Jan 11, 2011

Hello and I would like to continue with your instructions if it is the better way, I am not sure what I should do as it is pretty confusing to me. I am deleteing things saving others and don't know anything about them or what I am doing or why I am doing them. I just know I am trying to follow what your telling me. I am like a baby learning how to crawl before I can walk. I know I still have the same problems as before and don't know how to fix it thats why I came to the Pro's at your site and I am very thankful that I found your site and thats why I print everything you post to me so I can read it as I am doing what you are saying and as so thats why I sent them the way I did because I did not know that you wanted me to send them another way. So I am learning as we go and I know that Richc says you are the best so I am following it to what I am reading and I hope that I have not said anything that would hurt your feelings and again I thank you for your help because I need it.

americancritic

americancritic · Jan 11, 2011

When the program was finished one poped up on my screen for notepad, and after I saved it and closed the screen I saw another one on my menu bar at the bottom of my screen so I opened that one and saved it also in my documents and then I went in and uploaded them one at a time on the same post so please tell me how to merge them so they are sent the way you need them I will redo everything so it will be right.

Jacee · Jan 12, 2011

Just copy and paste the two logs.

americancritic · Jan 12, 2011

OK I hope I get this right so please let me knoww if this is the way you want it. Thank You.

americancritic

Code:

 sLogfile of random's system information tool 1.08 (written by random/random)
Run by Tom at 2011-01-10 15:59:29
Microsoft® Windows Vista™ Home Premium  Service Pack 2
System drive C: has 469 GB (78%) free of 599 GB
Total RAM: 8062 MB (75% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:59:35 PM, on 1/10/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
C:\Program Files (x86)\Hewlett-Packard\SmartPrint\BootStrap.exe
C:\Users\Tom\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\Tom.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [URL="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Pavilion&pf=cndt"]AOL.com - Welcome to AOL[/URL]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [URL="http://go.microsoft.com/fwlink/?LinkId=54896"]Bing[/URL]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [URL="http://ww2.cox.com/myconnection/arizona/home.cox"]Arizona News, Entertainment Listings, Weather, & Services | My Connection from Cox[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [URL="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Pavilion&pf=cndt"]AOL.com - Welcome to AOL[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [URL="http://go.microsoft.com/fwlink/?LinkId=54896"]Bing[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [URL="http://go.microsoft.com/fwlink/?LinkId=54896"]Bing[/URL]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [URL="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Pavilion&pf=cndt"]AOL.com - Welcome to AOL[/URL]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: QpBHO Class - {1658D3A1-9E13-4196-A82A-D70D70880F36} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QuickPrintBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - [URL]http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab[/URL]
O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7612 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1658D3A1-9E13-4196-A82A-D70D70880F36}]
HP QuickPrint - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QuickPrintBHO.dll [2010-10-14 772096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll [2010-07-01 68280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2010-11-24 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-09 297648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-10-20 843832]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-11-24 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll [2010-07-01 191160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-12-09 297648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"AVP"=C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [2010-10-17 352976]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-10-17 39408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"BindDirectlyToPropertySetStorage"=0
"NoDriveTypeAutoRun"=60
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\SysWOW64\Notepad.exe %1
.js - open - C:\Windows\SysWOW64\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2011-01-10 15:59:29 ----D---- C:\rsit
2011-01-10 15:59:29 ----D---- C:\Program Files (x86)\trend micro
2011-01-10 09:48:41 ----A---- C:\Windows\SysWOW64\javaws.exe
2011-01-10 09:48:41 ----A---- C:\Windows\SysWOW64\javaw.exe
2011-01-10 09:48:41 ----A---- C:\Windows\SysWOW64\java.exe
2011-01-08 16:15:24 ----D---- C:\Program Files (x86)\ESET
2011-01-08 12:27:52 ----D---- C:\Program Files (x86)\VS Revo Group
2011-01-07 18:58:12 ----A---- C:\ComboFix.txt
2011-01-07 18:46:25 ----D---- C:\Windows\temp
2011-01-07 18:36:01 ----D---- C:\Qoobox
2011-01-06 20:35:41 ----D---- C:\Users\Tom\AppData\Roaming\Malwarebytes
2011-01-06 20:35:31 ----D---- C:\ProgramData\Malwarebytes
2011-01-06 20:35:27 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-01-06 17:55:32 ----D---- C:\Users\Tom\AppData\Roaming\ImgBurn
2011-01-06 17:51:10 ----D---- C:\Program Files (x86)\ImgBurn
2011-01-03 22:02:38 ----D---- C:\Users\Tom\AppData\Roaming\Auslogics
2011-01-03 22:02:32 ----D---- C:\Program Files (x86)\Auslogics
2011-01-02 18:15:07 ----D---- C:\ProgramData\Yahoo!
2011-01-02 18:15:04 ----D---- C:\Program Files (x86)\Free Offers from Freeze.com
2011-01-02 18:14:58 ----D---- C:\Users\Tom\AppData\Roaming\Yahoo!
2010-12-31 11:53:07 ----D---- C:\ProgramData\McAfee
2010-12-28 18:40:15 ----D---- C:\Program Files (x86)\Common Files\Windows Live
2010-12-28 18:13:00 ----D---- C:\Program Files (x86)\Belarc
2010-12-26 18:35:41 ----D---- C:\ProgramData\Stardock
2010-12-17 20:48:14 ----A---- C:\Windows\ntbtlog.txt
2010-12-15 17:42:16 ----A---- C:\Windows\SysWOW64\msshsq.dll
2010-12-15 17:42:14 ----A---- C:\Windows\SysWOW64\fontsub.dll
2010-12-15 17:42:14 ----A---- C:\Windows\SysWOW64\atmlib.dll
2010-12-15 17:42:14 ----A---- C:\Windows\SysWOW64\atmfd.dll
2010-12-15 17:42:07 ----A---- C:\Windows\SysWOW64\msxml6.dll
2010-12-15 17:42:02 ----A---- C:\Windows\SysWOW64\iertutil.dll
2010-12-15 17:42:01 ----A---- C:\Windows\SysWOW64\mstime.dll
2010-12-15 17:42:01 ----A---- C:\Windows\SysWOW64\mshtml.dll
2010-12-15 17:42:01 ----A---- C:\Windows\SysWOW64\ieframe.dll
2010-12-15 17:42:00 ----A---- C:\Windows\SysWOW64\wininet.dll
2010-12-15 17:42:00 ----A---- C:\Windows\SysWOW64\urlmon.dll
2010-12-15 17:42:00 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2010-12-15 17:42:00 ----A---- C:\Windows\SysWOW64\ie4uinit.exe
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\occache.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\msfeedssync.exe
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\licmgr10.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\ieui.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\iesysprep.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\iesetup.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\iernonce.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\iepeers.dll
2010-12-15 17:41:59 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2010-12-15 17:41:52 ----A---- C:\Windows\SysWOW64\tzres.dll
2010-12-15 17:41:45 ----A---- C:\Windows\SysWOW64\taskschd.dll
2010-12-15 17:41:45 ----A---- C:\Windows\SysWOW64\taskeng.exe
2010-12-15 17:41:45 ----A---- C:\Windows\SysWOW64\taskcomp.dll
======List of files/folders modified in the last 1 months======
2011-01-10 15:59:36 ----D---- C:\Windows\Prefetch
2011-01-10 15:59:29 ----RD---- C:\Program Files (x86)
2011-01-10 14:18:01 ----D---- C:\ProgramData\Kaspersky Lab
2011-01-10 12:15:13 ----D---- C:\Windows\rescache
2011-01-10 12:03:37 ----D---- C:\Users\Tom\AppData\Roaming\Hoyle Puzzle and Board Games
2011-01-10 12:02:11 ----D---- C:\Windows\System32
2011-01-10 12:02:11 ----D---- C:\Windows\inf
2011-01-10 12:01:32 ----SHD---- C:\Windows\Installer
2011-01-10 12:00:30 ----SHD---- C:\System Volume Information
2011-01-10 10:48:11 ----D---- C:\Windows\winsxs
2011-01-10 10:47:53 ----D---- C:\Windows\ShellNew
2011-01-10 10:47:51 ----D---- C:\Windows\Help
2011-01-10 10:08:40 ----D---- C:\Windows\SysWOW64
2011-01-10 09:51:13 ----D---- C:\Windows
2011-01-10 09:51:01 ----D---- C:\Users\Tom\AppData\Roaming\Adobe
2011-01-10 09:50:59 ----D---- C:\Program Files (x86)\Internet Explorer
2011-01-10 09:50:59 ----D---- C:\Program Files (x86)\Common Files\Adobe
2011-01-10 09:50:59 ----D---- C:\Program Files (x86)\Adobe
2011-01-10 09:49:52 ----D---- C:\Program Files (x86)\Java
2011-01-10 09:49:52 ----D---- C:\Program Files (x86)\Common Files\Java
2011-01-10 09:44:49 ----HD---- C:\ProgramData
2011-01-09 21:44:56 ----D---- C:\Windows\Tasks
2011-01-09 21:44:41 ----D---- C:\Program Files (x86)\ScanSoft
2011-01-09 21:44:40 ----RD---- C:\Program Files (x86)\Online Services
2011-01-09 21:44:38 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-01-09 21:44:37 ----D---- C:\Program Files (x86)\Hewlett-Packard
2011-01-09 21:44:37 ----D---- C:\Program Files (x86)\Common Files\ScanSoft Shared
2011-01-09 21:44:37 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2011-01-09 21:44:37 ----D---- C:\Program Files (x86)\Common Files
2011-01-09 21:44:36 ----D---- C:\Program Files (x86)\Canon
2011-01-09 21:44:35 ----SHD---- C:\$RECYCLE.BIN
2011-01-09 21:44:14 ----D---- C:\Windows\registration
2011-01-08 16:15:26 ----SD---- C:\Windows\Downloaded Program Files
2011-01-08 14:19:41 ----RD---- C:\Program Files
2011-01-07 18:41:36 ----D---- C:\Windows\SysWOW64\drivers
2011-01-07 18:41:36 ----D---- C:\Windows\AppPatch
2011-01-05 19:12:36 ----D---- C:\Users\Tom\AppData\Roaming\HpUpdate
2011-01-05 11:29:43 ----D---- C:\Users\Tom\AppData\Roaming\Canon
2011-01-03 17:01:13 ----D---- C:\Program Files (x86)\Microsoft
2011-01-03 14:16:17 ----D---- C:\Windows\SMINST
2011-01-02 19:22:25 ----D---- C:\Program Files (x86)\Yahoo!
2011-01-01 20:25:13 ----D---- C:\ProgramData\Adobe
2010-12-31 14:44:50 ----SD---- C:\Users\Tom\AppData\Roaming\Microsoft
2010-12-31 13:07:25 ----D---- C:\Windows\Microsoft.NET
2010-12-31 12:51:17 ----RSD---- C:\Windows\assembly
2010-12-31 12:50:52 ----SD---- C:\ProgramData\Microsoft
2010-12-28 20:12:20 ----A---- C:\FINIS_IT.TXT
2010-12-28 18:54:04 ----RSD---- C:\Windows\Fonts
2010-12-28 18:41:01 ----D---- C:\Windows\Logs
2010-12-28 18:39:40 ----D---- C:\Windows\SysWOW64\en-US
2010-12-19 19:33:45 ----A---- C:\Windows\ChssBase.ini
2010-12-17 19:43:10 ----D---- C:\Windows\Debug
2010-12-16 19:24:09 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-12-16 19:22:52 ----D---- C:\Windows\SysWOW64\migration
2010-12-16 19:22:52 ----D---- C:\Program Files (x86)\Windows Mail
2010-12-16 19:11:12 ----D---- C:\Program Files (x86)\Microsoft Works
2010-12-16 19:08:24 ----D---- C:\ProgramData\Microsoft Help
2010-12-16 00:34:43 ----AD---- C:\Program Files (x86)\Common Files\LightScribe
2010-12-12 21:14:30 ----D---- C:\Program Files (x86)\Google
2010-12-12 13:41:03 ----D---- C:\Program Files (x86)\HP
2010-12-12 13:34:17 ----D---- C:\ProgramData\HP
2010-12-12 13:18:31 ----D---- C:\Windows\twain_32
2010-12-12 13:02:37 ----A---- C:\Windows\win.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys []
R0 nvstor64;nvstor64; C:\Windows\system32\drivers\nvstor64.sys []
R1 kl2;kl2; C:\Windows\system32\DRIVERS\kl2.sys []
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys []
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys []
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys []
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio64.sys []
R3 CAXHWBS2;CAXHWBS2; C:\Windows\system32\DRIVERS\CAXHWBS2.sys []
R3 HSF_DP;HSF_DP; C:\Windows\system32\DRIVERS\CAX_DP.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys []
R3 netr7364;Linksys Compact Wireless-G USB Adapter Driver for Vista; C:\Windows\system32\DRIVERS\WUSB54GCx64.sys []
R3 NVENETFD;NVIDIA nForce 10/100 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmfdx64.sys []
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys []
R3 Point64;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point64k.sys []
R3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys []
R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys []
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\CAX_CNXT.sys []
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys []
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys []
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys []
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys []
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys []
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys []
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys []
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys []
S4 nvrd64;NVIDIA nForce RAID Driver; C:\Windows\system32\drivers\nvrd64.sys []
S4 nvsmu;nvsmu; C:\Windows\system32\drivers\nvsmu.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AVP;Kaspersky Anti-Virus Service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe [2010-10-17 352976]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 MatSvc;@%ProgramFiles%\Microsoft Fix it Center\MatsRes.dll,-9000; C:\Program Files\Microsoft Fix it Center\Matsvc.exe [2010-11-16 343856]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-20 21504]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-20 21504]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-20 21504]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-20 19968]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S4 GameConsoleService;GameConsoleService; C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe [2007-12-04 181784]
S4 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-17 136176]
S4 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-10-17 182768]
S4 HP Health Check Service;HP Health Check Service; c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-03-14 94208]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-11-22 73728]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
S4 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio64.exe []
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.08 2011-01-10 15:59:37
======Uninstall list======
-->"C:\Program Files (x86)\HP Games\Amazing Adventures The Lost Tomb\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Bejeweled 2 Deluxe\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Belle's Beauty Boutique\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Blackhawk Striker 2\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Blasterball 3\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Boggle\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Build-a-lot\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Chuzzle Deluxe\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Crystal Maze\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Diner Dash Hometown Hero\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Family Feud\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\FATE\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Jewel Quest Solitaire 2\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Luxor 3\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Mah Jong Quest\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\My HP Game Console\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Mystery P.I. - The Lottery Ticket\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Paradise Pet Salon\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Penguins!\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Pirateville\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Plant Tycoon\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Poker Superstars 2\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Polar Bowler\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Polar Golfer\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Supercow\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Tradewinds\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Virtual Villagers - A New Home\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Wedding Dash\Uninstall.exe"
-->"C:\Program Files (x86)\HP Games\Zuma Deluxe\Uninstall.exe"
Adobe AIR-->c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}
Adobe Flash Player 10 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe -maintain activex
Adobe Reader 9.4.1-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A94000000001}
CanoScan Toolbox Ver4.6-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{088A077A-8028-408C-AE7B-4512AE2A65A0}\Setup.exe" -l0x9 anything
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
CyberLink DVD Suite Deluxe-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\Setup.exe"  -uninstall
CyberLink PowerDirector-->"C:\Program Files (x86)\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall
Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u
Google Toolbar for Internet Explorer-->"C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarManager_4079369A224CB572.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Grandmaster Challenge-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{3FF0269F-3C3F-4C9D-832B-AAECC8B593CF}\Setup.exe" -l0x9 
Hewlett-Packard Active Check for Health Check-->MsiExec.exe /X{254C37AA-6B72-4300-84F6-98A82419187E}
Hewlett-Packard Asset Agent for Health Check-->MsiExec.exe /X{669D4A35-146B-4314-89F1-1AC3D7B88367}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->c:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->c:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {08155812-0202-4D5F-A7FF-12A2782DC548} /qb+ REBOOTPROMPT=""
Hoyle Puzzle & Board Games 2010 (remove only)-->"C:\Program Files (x86)\Encore\Hoyle Puzzle Games 2010\Uninstall.exe"
HP Active Support Library-->C:\Program Files (x86)\InstallShield Installation Information\{E0810CC2-4B5B-4439-B1D0-452306AF2D64}\setup.exe -runfromtemp -l0x0409
HP Advisor-->MsiExec.exe /X{73A43E42-3658-4DD9-8551-FACDA3632538}
HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{C27C82E4-9C53-4D76-9ED3-A01A3D5EE679}\setup.exe" -l0x9  -removeonly
HP Customer Feedback-->MsiExec.exe /I{9DBA770F-BF73-4D39-B1DF-6035D95268FC}
HP MediaSmart DVD-->"C:\Program Files (x86)\InstallShield Installation Information\{DCCAD079-F92C-44DA-B258-624FC6517A5A}\setup.exe" /z-uninstall
HP MediaSmart DVD-->"C:\Program Files (x86)\InstallShield Installation Information\{DCCAD079-F92C-44DA-B258-624FC6517A5A}\setup.exe" /z-uninstall
HP Picasso Media Center Add-In-->MsiExec.exe /I{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}
HP Update-->MsiExec.exe /X{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}
HPTCSSetup-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{FA3B34BE-4246-4062-90A3-34CBBEA12B72}\setup.exe" -l0x9  -removeonly
Java(TM) 6 Update 23-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216022FF}
Kaspersky Internet Security 2011-->MsiExec.exe /I{66F1F013-008F-4875-B283-5A814B820347}
Kaspersky Internet Security 2011-->MsiExec.exe /I{66F1F013-008F-4875-B283-5A814B820347}
LabelPrint-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe"  -uninstall
LightScribe Applications-->MsiExec.exe /X{61F25370-7465-4404-BE28-4629BF808699}
LightScribe Diagnostic Utility-->MsiExec.exe /X{EC07DA92-5054-4F0F-AA63-6B50441AF45B}
LightScribe Public Windows SDK-->MsiExec.exe /X{7D9168B0-9DCD-470D-95E0-FBC7064E969B}
LightScribe System Software-->MsiExec.exe /X{FD7F0DB8-0E96-4D64-AD4D-9B5A936AF2A8}
LightScribe Template Labeler-->MsiExec.exe /X{43523FEF-9D8E-4572-BB11-0E914D366E0A}
Linksys Compact Wireless-G USB Adapter Driver - WUSB54GC-->C:\Program Files (x86)\InstallShield Installation Information\{F855C3AE-992D-4B84-A09D-07103CDCDAC2}\setup.exe -runfromtemp -l0x0009 -removeonly
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {E64BA721-2310-4B55-BE5A-2925F9706192}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-002A-0409-1000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0116-0409-1000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (English)-->MsiExec.exe /X{95120000-00AF-0409-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works-->MsiExec.exe /I{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
muvee autoProducer 6.1-->C:\Program Files (x86)\InstallShield Installation Information\{FDDB69BB-2F9A-4830-A579-ABBB7C5AF9A8}\muveesetup.exe -removeonly -runfromtemp
My HP Games-->"C:\Program Files (x86)\HP Games\Uninstall.exe"
OmniPage SE 2.0-->MsiExec.exe /I{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}
Power2Go-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe"  -uninstall
Python 2.5-->MsiExec.exe /I{0A2C5854-557E-48C8-835A-3B9F074BDCAA}
Realtek High Definition Audio Driver-->C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe -r -m -nrg2709
Security Update for 2007 Microsoft Office System (KB2288621)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5C497F0B-2061-4CC9-A61C-6B45B867354D}
Security Update for 2007 Microsoft Office System (KB2288931)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CD769337-C8AC-46DB-A7DC-643E50089263}
Security Update for 2007 Microsoft Office System (KB2289158)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {210B16C0-CEBD-4DE9-B474-04A7E8735E16}
Security Update for 2007 Microsoft Office System (KB2344875)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6FC5C4C1-D7AE-44C3-94B7-6424FC3E752F}
Security Update for 2007 Microsoft Office System (KB2345043)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {536FB502-775F-4494-BACE-C02CC90B7A5B}
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB976321)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A}
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->c:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {8EAF4926-5B5D-398A-BA46-4603D8095BDE} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FD8D7C9A-E56A-3E7B-BA6D-FE68F13296E3} /parameterfolder Client
Security Update for Microsoft Office Excel 2007 (KB2345035)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B23002DD-34EC-4988-B810-A5E2A0BF04F1}
Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
Security Update for Microsoft Office PowerPoint 2007 (KB982158)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F5B70033-E79C-4569-90BF-BC9B4E4F3F46}
Security Update for Microsoft Office PowerPoint Viewer (KB2413381)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3DED0A62-44C8-4E00-A785-5212F297A9D9}
Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Microsoft Office Word 2007 (KB2344993)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
SmartPrint-->"C:\Program Files (x86)\InstallShield Installation Information\{C1B82CC2-9A13-426B-91B3-C970DDA484C7}\setup.exe" -runfromtemp -l0x0409  -removeonly
Update for 2007 Microsoft Office System (KB2284654)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {FB166E7C-8AA6-48C8-B726-1F25BEE7825A}
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->c:\Windows\SysWOW64\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Microsoft Office 2007 Help for Common Features (KB963673)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {AB365889-0395-4FAD-B702-CA5985D53D42}
Update for Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {199DF7B6-169C-448C-B511-1054101BE9C9}
Update for Microsoft Office OneNote 2007 (KB980729)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF}
Update for Microsoft Office OneNote 2007 Help (KB963670)-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {2744EF05-38E1-4D5D-B333-E021EDAEA245}
Update for Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {397B1D4F-ED7B-4ACA-A637-43B670843876}
Update for Microsoft Office Script Editor Help (KB963671)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {CD11C6A2-FFC6-4271-8EAB-79C3582F505C}
Update for Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {80E762AA-C921-4839-9D7D-DB62A72C0726}
======Security center information======
AS: Windows Defender
=====Application event log=====
Computer Name: Tom-PC
Event Code: 1530
Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  
 DETAIL - 
 1 user registry handles leaked from \Registry\User\S-1-5-21-3742879176-2005042588-2002517814-1000:
Process 904 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3742879176-2005042588-2002517814-1000
Record Number: 440
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20101017220301.000000-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM
Computer Name: Tom-PC
Event Code: 1000
Message: Faulting application Setup.exe_InstallShield (R), version 9.1.0.429, time stamp 0x3fb01c5d, faulting module iuser.dll, version 9.1.0.429, time stamp 0x3fb01b4a, exception code 0xc0000005, fault offset 0x00014129, process id 0xf80, application start time 0x01cb6e43e27d5ca9.
Record Number: 405
Source Name: Application Error
Time Written: 20101017214033.000000-000
Event Type: Error
User: 
Computer Name: Tom-PC
Event Code: 10
Message: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Record Number: 400
Source Name: Microsoft-Windows-WMI
Time Written: 20101017211926.000000-000
Event Type: Error
User: 
Computer Name: Tom-PC
Event Code: 1530
Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  
 DETAIL - 
 2 user registry handles leaked from \Registry\User\S-1-5-21-3742879176-2005042588-2002517814-1000:
Process 684 (\Device\HarddiskVolume1\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3742879176-2005042588-2002517814-1000
Process 3852 (\Device\HarddiskVolume1\Windows\System32\msiexec.exe) has opened key \REGISTRY\USER\S-1-5-21-3742879176-2005042588-2002517814-1000\Software\Microsoft\Windows\CurrentVersion\Explorer
Record Number: 370
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20101017211752.000000-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM
Computer Name: Tom-PC
Event Code: 1008
Message: The Windows Search Service is attempting to remove the old catalog. 
Record Number: 295
Source Name: Microsoft-Windows-Search
Time Written: 20101017210136.000000-000
Event Type: Warning
User: 
=====Security event log=====
Computer Name: WIN-58D7RQ28WOS
Event Code: 4648
Message: A logon was attempted using explicit credentials.
Subject:
 Security ID:  S-1-5-18
 Account Name:  WIN-58D7RQ28WOS$
 Account Domain:  WORKGROUP
 Logon ID:  0x3e7
 Logon GUID:  {00000000-0000-0000-0000-000000000000}
Account Whose Credentials Were Used:
 Account Name:  SYSTEM
 Account Domain:  NT AUTHORITY
 Logon GUID:  {00000000-0000-0000-0000-000000000000}
Target Server:
 Target Server Name: localhost
 Additional Information: localhost
Process Information:
 Process ID:  0x230
 Process Name:  C:\Windows\System32\services.exe
Network Information:
 Network Address: -
 Port:   -
This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials.  This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command.
Record Number: 223
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101017201552.901262-000
Event Type: Audit Success
User: 
Computer Name: WIN-58D7RQ28WOS
Event Code: 4672
Message: Special privileges assigned to new logon.
Subject:
 Security ID:  S-1-5-18
 Account Name:  SYSTEM
 Account Domain:  NT AUTHORITY
 Logon ID:  0x3e7
Privileges:  SeAssignPrimaryTokenPrivilege
   SeTcbPrivilege
   SeSecurityPrivilege
   SeTakeOwnershipPrivilege
   SeLoadDriverPrivilege
   SeBackupPrivilege
   SeRestorePrivilege
   SeDebugPrivilege
   SeAuditPrivilege
   SeSystemEnvironmentPrivilege
   SeImpersonatePrivilege
Record Number: 222
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101017201552.682862-000
Event Type: Audit Success
User: 
Computer Name: WIN-58D7RQ28WOS
Event Code: 4624
Message: An account was successfully logged on.
Subject:
 Security ID:  S-1-5-18
 Account Name:  WIN-58D7RQ28WOS$
 Account Domain:  WORKGROUP
 Logon ID:  0x3e7
Logon Type:   5
New Logon:
 Security ID:  S-1-5-18
 Account Name:  SYSTEM
 Account Domain:  NT AUTHORITY
 Logon ID:  0x3e7
 Logon GUID:  {00000000-0000-0000-0000-000000000000}
Process Information:
 Process ID:  0x230
 Process Name:  C:\Windows\System32\services.exe
Network Information:
 Workstation Name: 
 Source Network Address: -
 Source Port:  -
Detailed Authentication Information:
 Logon Process:  Advapi  
 Authentication Package: Negotiate
 Transited Services: -
 Package Name (NTLM only): -
 Key Length:  0
This event is generated when a logon session is created. It is generated on the computer that was accessed.
The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).
The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.
The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
 - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
 - Transited services indicate which intermediate services have participated in this logon request.
 - Package name indicates which sub-protocol was used among the NTLM protocols.
 - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 221
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101017201552.682862-000
Event Type: Audit Success
User: 
Computer Name: WIN-58D7RQ28WOS
Event Code: 4648
Message: A logon was attempted using explicit credentials.
Subject:
 Security ID:  S-1-5-18
 Account Name:  WIN-58D7RQ28WOS$
 Account Domain:  WORKGROUP
 Logon ID:  0x3e7
 Logon GUID:  {00000000-0000-0000-0000-000000000000}
Account Whose Credentials Were Used:
 Account Name:  SYSTEM
 Account Domain:  NT AUTHORITY
 Logon GUID:  {00000000-0000-0000-0000-000000000000}
Target Server:
 Target Server Name: localhost
 Additional Information: localhost
Process Information:
 Process ID:  0x230
 Process Name:  C:\Windows\System32\services.exe
Network Information:
 Network Address: -
 Port:   -
This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials.  This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command.
Record Number: 220
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20101017201552.682862-000
Event Type: Audit Success
User: 
Computer Name: WIN-58D7RQ28WOS
Event Code: 1102
Message: The audit log was cleared.
Subject:
 Security ID: S-1-5-21-3742879176-2005042588-2002517814-500
 Account Name: Administrator
 Domain Name: WIN-58D7RQ28WOS
 Logon ID: 0x2e605
Record Number: 219
Source Name: Microsoft-Windows-Eventlog
Time Written: 20101017201547.332062-000
Event Type: Audit Success
User: 
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%CommonProgramFiles%\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\hp\bin\Python;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=16
"PROCESSOR_IDENTIFIER"=AMD64 Family 16 Model 2 Stepping 3, AuthenticAMD
"PROCESSOR_REVISION"=0203
"NUMBER_OF_PROCESSORS"=3
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\34FB5F65-FFEB-4B61-BF0E-A6A76C450FAA\TraceFormat
"DFSTRACINGON"=FALSE
"OnlineServices"=Online Services
"Platform"=HPD
"PCBRAND"=Pavilion
"MSWorksProductCode"={15BC8CD0-A65B-47D0-A2DD-90A824590FA8}
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
-----------------EOF-----------------

Jacee · Jan 12, 2011

Go into Programs and Features and uninstall Free Offers,

Then navigate to:
C:\Program Files (x86)\Free Offers from Freeze.com and delete this folder.

Now,

Click START then RUN
Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.
When shown the disclaimer, Select "2"

The above procedure will:

Delete the following:
- ComboFix and its associated files and folders.
Reset the clock settings.
Hide file extensions, if required.
Hide System/Hidden files, if required.
Set a new, clean Restore Point.

americancritic · Jan 12, 2011

Hello Jacee something went wrong with uninstalling the combofix, I did as you said and the icon on the desktop went away and then I found it in the windows exployer and tried to delete and it says I do not have permission to delete because it was attached to my disk drive etc so How do I get rid of it. Thanks

americancritic

americancritic · Jan 12, 2011

If I may ask another question How do I fix the ones in the reports that said missing files or do I not need them.

Jacee · Jan 12, 2011

You don't need to fix those 'missing' files ... they are there, it's a glitch with HJT and reading 023 services with a 64bit OS

You should be good to go!

Jacee · Jan 12, 2011

Try this again ...
The following will implement some cleanup procedures as well as reset System Restore points:Click Start > Run and copy/paste the following bolded text into the Run box and click OK:ComboFix /Uninstall

If for some reason CF is having difficulty carrying out the uninstall command, there is a stand alone uninstaller available. Download it from here ==> http://download.bleepingcomputer.com/sUBs/CF_UNINST.EXE

americancritic · Jan 12, 2011

Hello to all and I would like to tell everyone what a great Job Jacee has done for me. I am sure that she spent hours looking over reports and then posting back to me, I know it takes someone special that can take a little bit of information from someone who lives a long way off and then come up with the right answers and fix your computer without being there in front of it.

Jacee thank you for a great Job on fixing my computer////You Rock/////

I would recommend Jacee to all who have problems with there own computer's.

Thank You again

americancritic

Jacee · Jan 12, 2011

Thank you americancritic, you rock too!

File's

Security

My Computer

Attachments

My Computer

My Computer

Attachments

My Computer

My Computer

Security

My Computer

Security

My Computer

My Computer

My Computer

My Computer

Security

My Computer

My Computer

Security

My Computer

My Computer

My Computer

Security

My Computer

Security

My Computer

My Computer

Security

My Computer