GunnyShaw
Topic Starter
A while back, I seem to remember MBAM finding some type of malware, which it removed. Since that time, I am having problems with zip files being locked by explorer.exe. This will happen when I attempt to copy or move them to another location. The copy/move process will hang and all attempts to delete the zip file will fail, with the error message that another process has the file locked. This happens only with zip files, and no other file types.
I have tried several file unlocking utilities, but the best I can get is to have the zip files deleted upon reboot. I have manually stopped the explorer.exe process and restarted it, but the problem continues. I am suspicious that this problem began at or about the time of my last infection, though I honestly don't recall when that was, or what infection was removed.
This may not be malware related, but I want to rule out an infection first before I do anything else.
I have followed the steps in Getting Started:
ATF Cleaner - Done
System Restore - Done
Erunt - Done
Disable script blocking - Done
Scanned with MBAM - Done, no infections found
Gmer scan - Done
DDS - Done
Thanks in advance for your assistance.
Malwarebytes' Anti-Malware 1.44
Database version: 3865
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512
3/14/2010 10:07:16 AM
mbam-log-2010-03-14 (10-07-16).txt
Scan type: Quick Scan
Objects scanned: 175530
Time elapsed: 16 minute(s), 15 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
DDS (Ver_09-06-26.01) - NTFSx86
Run by [removed] at 10:17:37.60 on Sun 03/14/2010
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2422 [GMT -4:00]
AV: avast! antivirus 4.8.1368 [VPS 100313-2] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
============== Running Processes ===============
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\CTHELPER.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\BOINC\boincmgr.exe
C:\Program Files\BOINC\boinctray.exe
C:\WINDOWS\vsnpstd.exe
C:\PROGRA~1\VISION~1\ONETOU~2.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\UltraMon\UltraMon.exe
C:\Program Files\UltraMon\UltraMonTaskbar.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\BOINC\boinc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ignacio\Desktop\dds.scr
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.yahoo.com/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mDefault_Page_URL = hxxp://www.yahoo.com/
mStart Page = hxxp://www.yahoo.com/
uInternet Settings,ProxyOverride = *.local
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No File
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.2.4204.1700\swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\wcescomm.exe"
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [OM2_Monitor] "c:\program files\olympus\olympus master 2\MMonitor.exe" -NoStart
uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"
uRun: [igndlm.exe] c:\program files\download manager\DLM.exe /windowsstart /startifwork
mRun: [CTSysVol] c:\program files\creative\sbaudigy2\surround mixer\CTSysVol.exe /r
mRun: [CTDVDDET] c:\program files\creative\sbaudigy2\dvdaudio\CTDVDDet.EXE
mRun: [SBDrvDet] c:\program files\creative\sb drive det\SBDrvDet.exe /r
mRun: [CTHelper] CTHELPER.EXE
mRun: [CTXFIREG] CTxfiReg.exe
mRun: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [NVMixerTray] "c:\program files\nvidia corporation\nvmixer\NVMixerTray.exe"
mRun: [OM2_Monitor] "c:\program files\olympus\olympus master 2\FirstStart.exe" /OM
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [boincmgr] "c:\program files\boinc\boincmgr.exe" /a /s
mRun: [boinctray] "c:\program files\boinc\boinctray.exe"
mRun: [snpstd] c:\windows\vsnpstd.exe
mRun: [OneTouch Monitor] c:\progra~1\vision~1\ONETOU~2.EXE
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Monitor] "c:\program files\leapfrog\leapfrog connect\Monitor.exe"
mRun: [TrueImageMonitor.exe] c:\program files\acronis\trueimagehome\TrueImageMonitor.exe
mRun: [AcronisTimounterMonitor] c:\program files\acronis\trueimagehome\TimounterMonitor.exe
mRun: [Acronis Scheduler2 Service] "c:\program files\common files\acronis\schedule2\schedhlp.exe"
mRun: [nwiz] nwiz.exe /installquiet
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [VF0060 STISvc] RunDLL32.exe V0060Pin.dll,RunDLL32EP 513
mRun: [wildwestscan] c:\rtww\wildweststarter\wwstart.exe slow
StartupFolder: c:\docume~1\ignacio\startm~1\programs\startup\checkf~1.lnk - c:\program files\visioneer onetouch\WiseUpdt.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\ultramon.lnk - c:\program files\ultramon\UltraMon.exe
uPolicies-explorer: NoThemesTab = 0 (0x0)
uPolicies-system: NoDispAppearancePage = 0 (0x0)
uPolicies-system: NoColorChoice = 0 (0x0)
uPolicies-system: NoSizeChoice = 0 (0x0)
uPolicies-system: NoVisualStyleChoice = 0 (0x0)
uPolicies-system: NoDispSettingsPage = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\mi3aa1~1\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\mi3aa1~1\INetRepl.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
Trusted Zone: aol.com\free
Trusted Zone: the-wildwest.com
DPF: {0000000A-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/d/4/4/d446e8a9-3a86-4b59-bb19-f5bd11b40367/wmavax.CAB
DPF: {00000033-9593-4264-8B29-930B3E4EDCCD} - hxxps://www.rooms.hp.com/vRoom_Cab/WebHPVCInstall33.cab
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.srtest.com/srl_bin/sysreqlab_srl.cab
DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} - hxxp://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe
DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.7.cab
DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} - hxxp://www.linkedin.com/cab/LinkedInContactFinderControl.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1264168225187
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1264168213015
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {D6E0B119-DCF2-4CD6-8DFB-7CFF1B70F7FF} - hxxps://bis.na.blackberry.com/html/web/client_tools/TOImport.cab
DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} - hxxps://secure.logmein.com/activex/ractrl.cab?lmi=100
TCP: {28A47114-C3F0-4EEE-827F-45F4EB6308D3} = 192.168.1.1
TCP: {370E624D-60AB-4E91-A51C-A77E39F82EC2} = 192.168.1.254
TCP: {D0D8C33C-FB24-4186-9BAC-7C17606BD69F} = 192.168.2.1
TCP: {F67AE8CF-2E3D-45F3-A0CC-81E07CF4D150} = 192.168.1.1
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll
Notify: avgrsstarter - avgrsstx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Authentication Packages = msv1_0 relog_ap
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\ignacio\applic~1\mozilla\firefox\profiles\fjdi59q7.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.bing.com/
FF - prefs.js: keyword.URL -
FF - plugin: c:\documents and settings\all users\application data\nexonus\ngm\npNxGameUS.dll
FF - plugin: c:\documents and settings\ignacio\local settings\application data\yahoo!\browserplus\2.5.1\plugins\npybrowserplus_2.5.1.dll
FF - plugin: c:\program files\download manager\npfpdlm.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\google updater\2.4.1851.5542\npCIDetect14.dll
FF - plugin: c:\program files\google\update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\quicktime\plugins\npqtplugin8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
—- FIREFOX POLICIES —-
FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", "-1");
c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); // now unused
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.delay", 50);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
============= SERVICES / DRIVERS ===============
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-4-21 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-4-21 20560]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2009-4-21 138680]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\logmein hamachi\hamachi-2.exe [2009-10-29 1074568]
R2 iPodDrv;iPodDrv;c:\windows\system32\drivers\iPodDrv.sys [2009-12-12 6656]
R2 LeapFrog Connect Device Service;LeapFrog Connect Device Service;c:\program files\leapfrog\leapfrog connect\CommandService.exe [2009-11-10 1131808]
R2 UltraMonUtility;UltraMon Utility Driver;c:\windows\system32\UltraMonUtility.sys [2004-4-12 10288]
R2 YahooAUService;Yahoo! Updater;c:\program files\yahoo!\softwareupdate\YahooAUService.exe [2008-11-9 602392]
R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2009-4-21 254040]
R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2009-4-21 352920]
R3 UltraMonMirror;UltraMonMirror;c:\windows\system32\drivers\UltraMonMirror.sys [2004-4-12 8240]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-1-6 135664]
S3 CCCP106;CIF USB Camera (2110A);c:\windows\system32\drivers\cccp106.sys –> c:\windows\system32\drivers\cccp106.sys [?]
S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [2009-12-25 18560]
S3 nuvaudio;NUVision Audio Service;c:\windows\system32\drivers\nuvaudio.sys [2007-1-12 22848]
S3 NUVision;NUVision Video Service;c:\windows\system32\drivers\NUVision.sys [2007-1-12 135424]
S3 PIXMCV;JVC Communication PIX-MCV Driver;c:\windows\system32\drivers\pixmcvc.sys [2005-4-10 32000]
S3 PIXMCVA;JVC PIX-MCV Audio Capture;c:\windows\system32\drivers\pixmcva.sys [2005-4-10 28057]
S3 PIXMCVV;JVC PIX-MCV Video Capture;c:\windows\system32\drivers\pixmcvv.sys [2005-4-10 21081]
S3 vsdatant;vsdatant;c:\windows\system32\vsdatant.sys –> c:\windows\system32\vsdatant.sys [?]
=============== Created Last 30 ================
2010-03-06 13:42 –d—– c:\program files\LogMeIn Hamachi
2010-03-06 10:50 390,826 a——- c:\windows\WildWestUninstall.exe
2010-03-06 10:50 –d—– C:\rtww
2010-03-05 21:38 –d—– c:\docume~1\ignacio\applic~1\Xfire
2010-03-05 21:38 –d—– c:\program files\Xfire
2010-03-01 12:58 361,600 a——- c:\windows\system32\drivers\TCPIP.SYS.ORIGINAL
2010-02-19 10:52 1,133,578 a——- c:\windows\system32\drivers\V0060Evx.sys
2010-02-19 10:52 196,409 a——- c:\windows\system32\drivers\V0060Vid.sys
2010-02-19 10:52 77,824 a——- c:\windows\system32\V0060Ext.ax
2010-02-19 10:52 49,152 a——- c:\windows\system32\V0060Hwx.dll
2010-02-19 10:52 36,864 a——- c:\windows\system32\V0060Pin.dll
2010-02-19 10:52 32,768 a——- c:\windows\system32\V0060Ext.crl
2010-02-19 10:52 26,560 a——- c:\windows\system32\drivers\V0060USB.sys
2010-02-19 10:52 20,480 a——- c:\windows\V0060Cfg.exe
2010-02-19 10:52 5,588 a——- c:\windows\VF0060.uns
2010-02-19 10:51 –d—– C:\WebCam
2010-02-17 11:32 24,576 a——- c:\windows\system32\CtCamPin.crl
2010-02-17 11:32 32,768 ——– c:\windows\system32\V0060sti.dll
2010-02-12 13:31 60,816 a—h— c:\windows\system32\mlfcache.dat
==================== Find3M ====================
2010-03-06 11:50 138,784 a——- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-06 11:49 202,008 a——- c:\windows\system32\PnkBstrB.exe
2010-03-01 12:58 361,600 a——- c:\windows\system32\drivers\TCPIP.SYS
2010-02-10 23:19 41,872 a——- c:\windows\system32\xfcodec.dll
2010-02-07 12:41 86,016 a——- c:\windows\system32\frapsvid.dll
2010-01-16 20:23 3,888 a——- c:\windows\system32\drivers\NTHANDLE.SYS
2010-01-12 00:03 14,458,880 a——- c:\windows\system32\nvoglnt.dll
2010-01-12 00:03 11,632,640 a——- c:\windows\system32\nvcompiler.dll
2010-01-12 00:03 6,359,168 a——- c:\windows\system32\nv4_disp.dll
2010-01-12 00:03 4,104,192 a——- c:\windows\system32\nvcuda.dll
2010-01-12 00:03 4,077,672 a——- c:\windows\system32\nvcuvenc.dll
2010-01-12 00:03 2,283,526 a——- c:\windows\system32\nvdata.bin
2010-01-12 00:03 2,259,560 a——- c:\windows\system32\nvcuvid.dll
2010-01-12 00:03 1,081,344 a——- c:\windows\system32\nvapi.dll
2010-01-12 00:03 182,888 a——- c:\windows\system32\nvcodins.dll
2010-01-12 00:03 182,888 a——- c:\windows\system32\nvcod.dll
2010-01-12 00:03 61,440 a——- c:\windows\system32\OpenCL.dll
2010-01-11 23:17 13,666,408 a——- c:\windows\system32\nvcpl.dll
2010-01-11 23:17 278,120 a——- c:\windows\system32\nvmccs.dll
2010-01-11 23:17 154,216 a——- c:\windows\system32\nvsvc32.exe
2010-01-11 23:17 145,000 a——- c:\windows\system32\nvcolor.exe
2010-01-11 23:17 110,696 a——- c:\windows\system32\nvmctray.dll
2010-01-11 23:17 81,920 a——- c:\windows\system32\nvwddi.dll
2010-01-05 15:28 1,885,464 a——- c:\windows\system32\AutoPartNt.exe
2009-12-22 01:21 667,136 a——- c:\windows\system32\wininet.dll
2009-12-22 01:20 81,920 a——- c:\windows\system32\ieencode.dll
2009-12-17 18:14 411,368 a——- c:\windows\system32\deploytk.dll
2009-10-29 17:53 1,024 a——- c:\docume~1\alluse~1\applic~1\imgpdf2.dll
2008-12-29 18:40 22,328 a——- c:\docume~1\ignacio\applic~1\PnkBstrK.sys
2008-04-09 21:58 32 ——– c:\docume~1\alluse~1\applic~1\ezsid.dat
2007-03-18 22:12 3,932 ——– c:\docume~1\ignacio\applic~1\LMLayout.dat
2007-03-18 22:12 268 ——– c:\docume~1\ignacio\applic~1\LMCPaper.dat
2001-10-30 07:11 61,440 a——- c:\windows\inf\i386\onetUSD.dll
2001-10-02 08:58 36,864 a——- c:\windows\inf\i386\Wiamicro.dll
2001-09-28 08:00 139,264 a——- c:\windows\inf\i386\Rtscan.dll
2001-09-27 08:11 167,936 a——- c:\windows\inf\i386\viceo.dll
2001-01-18 16:13 12,400 a——- c:\windows\inf\i386\Usbscan.sys
2005-07-14 15:31 27,648 a–sh— c:\windows\system32\AVSredirect.dll
2006-05-03 06:06 163,328 a–shr– c:\windows\system32\flvDX.dll
2007-03-17 16:24 12,208 —sh— c:\windows\system32\KGyGaAvL.sys
2007-02-21 07:47 31,232 a–shr– c:\windows\system32\msfDX.dll
2007-12-17 09:43 27,648 a–sh— c:\windows\system32\Smab0.dll
============= FINISH: 10:18:12.78 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_09-06-26.01)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume3
Install Date: 2/24/2005 8:57:05 PM
System Uptime: 3/14/2010 9:36:31 AM (1 hours ago)
Motherboard: ASUSTeK Computer INC. | | P5N-D
Processor: Intel® Core™2 Quad CPU Q6700 @ 2.66GHz | Socket 775 | 2666/266mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 699 GiB total, 469.433 GiB free.
D: is FIXED (NTFS) - 112 GiB total, 106.62 GiB free.
E: is FIXED (NTFS) - 186 GiB total, 186.239 GiB free.
F: is CDROM ()
G: is FIXED (NTFS) - 466 GiB total, 34.173 GiB free.
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP734: 12/14/2009 8:41:27 AM - System Checkpoint
RP735: 12/15/2009 9:07:43 AM - System Checkpoint
RP736: 12/16/2009 9:52:59 AM - System Checkpoint
RP737: 12/16/2009 10:56:38 PM - Installed Windows Media Player Firefox Plugin
RP738: 12/18/2009 8:58:48 AM - System Checkpoint
RP739: 12/19/2009 1:01:37 PM - System Checkpoint
RP740: 12/20/2009 2:57:48 PM - System Checkpoint
RP741: 12/21/2009 3:13:02 PM - System Checkpoint
RP742: 12/22/2009 4:01:18 PM - System Checkpoint
RP743: 12/23/2009 4:49:09 PM - System Checkpoint
RP744: 12/24/2009 4:56:12 PM - System Checkpoint
RP745: 12/25/2009 5:44:38 PM - System Checkpoint
RP746: 12/26/2009 6:33:17 PM - System Checkpoint
RP747: 12/27/2009 6:52:46 PM - System Checkpoint
RP748: 12/28/2009 12:39:16 PM - Installed DirectX
RP749: 12/29/2009 1:26:18 PM - System Checkpoint
RP750: 12/30/2009 2:45:25 PM - System Checkpoint
RP751: 12/31/2009 3:38:29 PM - System Checkpoint
RP752: 1/1/2010 4:16:29 PM - System Checkpoint
RP753: 1/1/2010 4:16:48 PM - Installed DirectX
RP754: 1/2/2010 4:58:36 PM - System Checkpoint
RP755: 1/3/2010 5:46:48 PM - System Checkpoint
RP756: 1/4/2010 5:50:58 PM - System Checkpoint
RP757: 1/5/2010 1:58:28 PM - Installed Acronis True Image WD Edition
RP758: 1/6/2010 2:15:58 PM - System Checkpoint
RP759: 1/7/2010 2:33:51 PM - System Checkpoint
RP760: 1/8/2010 4:43:11 PM - System Checkpoint
RP761: 1/9/2010 6:24:20 PM - System Checkpoint
RP762: 1/10/2010 8:01:08 PM - System Checkpoint
RP763: 1/11/2010 8:16:41 PM - System Checkpoint
RP764: 1/12/2010 8:37:49 PM - System Checkpoint
RP765: 1/13/2010 8:55:21 PM - System Checkpoint
RP766: 1/14/2010 9:49:18 PM - System Checkpoint
RP767: 1/15/2010 9:55:32 PM - System Checkpoint
RP768: 1/16/2010 8:18:50 PM - Spybot-S&D Spyware removal
RP769: 1/17/2010 8:21:01 PM - System Checkpoint
RP770: 1/18/2010 8:21:19 PM - System Checkpoint
RP771: 1/20/2010 9:03:24 AM - System Checkpoint
RP772: 1/21/2010 9:22:54 AM - System Checkpoint
RP773: 1/22/2010 9:03:34 AM - Software Distribution Service 3.0
RP774: 1/23/2010 6:51:18 PM - System Checkpoint
RP775: 1/24/2010 7:14:48 PM - System Checkpoint
RP776: 1/25/2010 8:04:33 PM - System Checkpoint
RP777: 1/26/2010 8:19:18 PM - System Checkpoint
RP778: 1/27/2010 8:33:27 AM - Installed Java™ 6 Update 18
RP779: 1/28/2010 10:17:36 AM - System Checkpoint
RP780: 1/29/2010 10:25:48 AM - System Checkpoint
RP781: 1/30/2010 10:40:49 AM - System Checkpoint
RP782: 2/1/2010 8:47:06 AM - System Checkpoint
RP783: 2/2/2010 10:38:01 AM - System Checkpoint
RP784: 2/3/2010 11:18:53 AM - System Checkpoint
RP785: 2/4/2010 11:48:00 AM - System Checkpoint
RP786: 2/6/2010 1:23:16 PM - System Checkpoint
RP787: 2/7/2010 1:34:42 PM - System Checkpoint
RP788: 2/8/2010 11:30:26 AM - Printer Driver PrimoPDF Installed
RP789: 2/9/2010 11:43:12 AM - System Checkpoint
RP790: 2/10/2010 1:55:29 PM - System Checkpoint
RP791: 2/11/2010 2:55:21 PM - System Checkpoint
RP792: 2/12/2010 4:20:22 PM - System Checkpoint
RP793: 2/13/2010 4:27:15 PM - System Checkpoint
RP794: 2/14/2010 6:07:36 PM - System Checkpoint
RP795: 2/16/2010 2:00:18 PM - System Checkpoint
RP796: 2/16/2010 7:50:31 PM - Unsigned driver install
RP797: 2/17/2010 10:29:53 AM - Installed Engine Installer
RP798: 2/17/2010 10:30:08 AM - Configured Engine Installer
RP799: 2/17/2010 10:30:13 AM - Installed Creative WebCam Center
RP800: 2/17/2010 10:30:37 AM - Installed Get Yahoo! Messenger
RP801: 2/17/2010 10:31:01 AM - Installed Creative WebCam Live! Ultra
RP802: 2/17/2010 10:31:18 AM - Installed Creative WebCam NX
RP803: 2/18/2010 11:06:47 AM - System Checkpoint
RP804: 2/19/2010 9:57:38 AM - Configured Engine Installer
RP805: 2/19/2010 9:57:53 AM - Installed Creative WebCam Center
RP806: 2/19/2010 9:58:08 AM - Installed Engine Installer
RP807: 2/20/2010 10:44:56 AM - System Checkpoint
RP808: 2/21/2010 11:19:09 AM - System Checkpoint
RP809: 2/22/2010 2:03:02 PM - System Checkpoint
RP810: 2/23/2010 2:22:59 PM - System Checkpoint
RP811: 2/24/2010 2:40:11 PM - System Checkpoint
RP812: 2/25/2010 5:39:02 PM - System Checkpoint
RP813: 2/26/2010 6:20:48 PM - System Checkpoint
RP814: 2/27/2010 7:09:29 PM - System Checkpoint
RP815: 2/28/2010 10:44:06 PM - System Checkpoint
RP816: 3/2/2010 8:43:22 AM - System Checkpoint
RP817: 3/3/2010 9:53:33 AM - System Checkpoint
RP818: 3/4/2010 4:46:22 PM - System Checkpoint
RP819: 3/5/2010 1:24:21 PM - Installed DirectX
RP820: 3/5/2010 1:25:07 PM - Removed Microsoft Visual C++ 2005 Redistributable
RP821: 3/5/2010 1:25:58 PM - Removed Microsoft Visual C++ 2005 Redistributable
RP822: 3/5/2010 1:26:14 PM - Installed Microsoft Visual C++ 2005 Redistributable
RP823: 3/6/2010 2:22:35 PM - System Checkpoint
RP824: 3/7/2010 2:42:37 PM - System Checkpoint
RP825: 3/8/2010 3:30:36 PM - System Checkpoint
RP826: 3/9/2010 4:17:05 PM - System Checkpoint
RP827: 3/10/2010 5:11:24 PM - System Checkpoint
RP828: 3/11/2010 5:59:25 PM - System Checkpoint
RP829: 3/12/2010 9:59:20 PM - System Checkpoint
RP830: 3/13/2010 11:26:26 PM - System Checkpoint
RP831: 3/14/2010 10:14:32 AM - Automatic Restore Point
==== Installed Programs ======================
µTorrent
1&1 EasyLogin
7-Zip 3.13
AAC Decoder
Acronis True Image WD Edition
Active@ UNDELETE
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 7.0.8
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Athlon 64 Processor Driver
Audacity 1.2.4
AutoUpdate
avast! Antivirus
AVI ReComp 1.4.0
AXIS Media Control
AXIS Media Control Embedded
Battlefield 2™
Belarc Advisor 8.1
BlackBerry Desktop Software 4.2
BOINC
Bonjour
Call of Duty: World at War
CamfrogWEB Advanced ActiveX Plugin (remove only)
CamStudio Lossless Codec v1.4
Camtasia Studio 6
CDRoller version 6.01
Choice Guard
City Navigator North America v7
Compatibility Pack for the 2007 Office system
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
Creative Audio Console
Creative MediaSource
Creative System Information
Creative WebCam Center
Creative WebCam Instant Driver (1.01.02.0729)
Creative WebCam Live! Ultra Driver (1.01.03.0127)
Creative WebCam Live! Ultra User's Guide (English)
Critical Update for Windows Media Player 11 (KB959772)
DivX Codec
DivX Converter
DivX Player
DivX Plus DirectShow Filters
DivX Version Checker
DivX Web Player
DivxToDVD 0.5.2
DNA
Download Manager 2.3.10
Driver Sweeper 2.1.0
DVD43 v4.3.1
DVDStyler v1.7.4
Dystopia
ERUNT 1.1j
Express Scribe
Far Cry (Patch 1.4)
FileZilla (remove only)
FileZilla Client [removed]
FileZilla Server (remove only)
Fraps (remove only)
Freeware PDF Unlocker
FutureDial Suite
Garmin WebUpdater
GE 98063 EasyCam
Get Yahoo! Messenger
GIMP 2.4.5
GIMPshop 2.2.8
Google Earth
Google Update Helper
Google Updater
GTK+ Runtime 2.6.2 rev a (remove only)
GtkRadiant-1.4.0
H.264 Decoder
Half-Life 2
Half-Life 2: Deathmatch
Half-Life 2: Episode One
Half-Life 2: Episode Two
Half-Life 2: Lost Coast
Half-Life® 2
Handbrake 0.9.2
Hard Justice
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
HP Image Zone Express
ImageMixer
InfraRecorder
iPhone Configuration Utility
iPod for Windows 2005-03-23
iPodder 2.1
ISO Recorder
iTunes
Java Auto Updater
Java™ 6 Update 18
Java™ 6 Update 2
Java™ 6 Update 3
Java™ 6 Update 5
Java™ 6 Update 7
KhalSetup
LeapFrog Connect
LeapFrog Tag Junior Plugin
Left 4 Dead
Left 4 Dead 2
Left 4 Dead 2 Add-on Support
Left 4 Dead Dedicated Server
LiveUpdate 1.80 (Symantec Corporation)
Logitech Gaming Software
Logitech Harmony Remote Client
Logitech Resource Center
Logitech SetPoint
LogMeIn Hamachi
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft ActiveSync 4.0
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Premium
Microsoft Office Professional Edition 2003
Microsoft Office Project Standard 2003
Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
MicroStaff WINASPI
MKV Splitter
mkv2vob
MobileMe Control Panel
Mozilla Firefox (3.6)
MSVCRT
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
MSXML 6.0 Parser
MyDefrag v4.2.7
nHancer
nLite [removed]
NovaBACKUP
NVIDIA Display Control Panel
NVIDIA Drivers
NVIDIA nView Desktop Manager
NVIDIA PhysX
OGA Notifier 2.0.0048.0
OLYMPUS Master 2
OneTouch Version 3.0
Operation Flashpoint: Dragon Rising
Paint Shop Pro 7 ESD
Pando Media Booster
PaperPort 7.02
PerformanceTest v6.1
PerformanceTest v7.0
Plants Vs Zombies Demo
Portal
PrimoPDF – by Nitro PDF Software
PunkBuster Services
QuickTime
Rcon Unlimited 1.0
Realtek High Definition Audio Driver
Resize-O-Matic
Return to Castle Wolfenstein
RivaTuner v2.10
Safari
Sauerbraten
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 Series (KB969878)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972260)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Segoe UI
Serious Sam HD: The First Encounter
Sid Meier's Civilization IV
Silent Hunter III
Skype™ 4.2
Sony Picture Utility
Sony USB Driver
Sound Blaster Audigy 2
Sound Forge 5.0
Source Dedicated Server
Source SDK
Source SDK Base
Source SDK Base - Orange Box
Spybot - Search & Destroy
Spybot - Search & Destroy 1.5.2.20
Steam™
SUPER © Version 2008.bld.30 (Mar 22, 2008)
Synergy
System Requirements Lab
System Shock2
TCPMP
Team Fortress 2
TeamSpeak 2 RC2
Tiff Combine
Trillian
Trine
Tweakui Powertoy for Windows XP
Ultr@VNC Release 1.0.0 RC 18 - Win32
UltraMon
Unlocker 1.8.8
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update for Windows XP (KB978207)
Use the entry named LeapFrog Connect to uninstall (LeapFrog Tag Junior Plugin)
VC 9.0 Runtime
VC80CRTRedist - 8.0.50727.762
VDrift (remove only)
Ventrilo Client
VideoLAN VLC media player 0.8.6c
VideoWave 7 Professional
VobSub v2.23 (Remove Only)
VP6 VFW Codec
WebFldrs XP
WFret
WildWest1.6
Windows Driver Package - LeapFrog (FlyUsb) USB (11/05/2008 1.1.1.0)
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage v1.3.0254.0
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer Clean Up
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Player 10 Hotfix - KB894476
Windows Media Player 11
Windows Media Player Firefox Plugin
Windows Mobile Developer Power Toys
Windows XP Service Pack 3
WinRAR archiver
WinZip
Xfire (remove only)
Xvid 1.1.3 final uninstall
Yahoo! BrowserPlus
Yahoo! Internet Mail
Yahoo! Messenger
Yahoo! Software Update
==== End Of File ===========================
