57 replies to this topic

[Alain Toogood]

My Internet Explorer hangs when trying to access some web sites.

Namely, MSN, Windows help and updates & tomcoyote but it fine on virtually everything else. It has a little Wanadoo icon on the top right corner (I managed to delete Wanadoo from the title bar) but I think that may be coincidence?

I've used Spybot and MS Antispyware but to no effect.

Any ideas?

Logfile of HijackThis v1.99.1
Scan saved at 19:56:34, on 06/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\r_server.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
A:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.netscape.../winsearch.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.netscape.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.netscape.../winsearch.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://keyword.netscape.com/keyword/%s
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://keyword.netscape.com/keyword/%s
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=http://www-cache.freeserve.com:8080;ftp=http://www-cache.freeserve.com:8080
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [zzzHPSETUP] D:\Setup.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe
O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.wanadoo.co.uk
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg...v45/yacscom.cab
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - https://internal.bru...emote/msrdp.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...StatsClient.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zon...ireShowdown.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{81EE2F2D-2DAF-4A07-9617-F013DA8BEA7D}: NameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{EFE346BD-EB6D-4FBB-BCEB-03A80B997E66}: NameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF378717-BC32-4870-985A-D42C2948544E}: NameServer = 192.168.0.1
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe" /service (file missing)
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe

[rand1038]

Do you use this program? I see C:\WINDOWS\system32\r_server.exe in running processes and O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe" /service (file missing) in services.
Did you install any software (toolbar, etc) from wanadoo?

[Alain Toogood]

Do you use this program?  I see C:\WINDOWS\system32\r_server.exe in running processes and O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe" /service (file missing) in services.
Did you install any software (toolbar, etc) from wanadoo?

Thanks for looking at this. No, I've never heard of the Radmin prorgam, it's not something I've deliberately had anything to do with. I assume these lines are in the registry, shall I delete them?

I did install a Wanadoo internet access CD and deleted the program (but the banner remained and I removed this via the registry - but the logo is still there in Internet Explorer). However, the site access restriction existed before I installed Wannadoo.


Alain

[rand1038]

Are you the original owner of the computer?

[Alain Toogood]

Yes.

[rand1038]

I'd like to get a list of your installed programs. Please download this script unzip it and run it (instructions are in the README.txt file included with the download). Post the entire contents of Programs.txt here.

[Alain Toogood]

Your help is much appreciated. Programs.txt = ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ProgramsList.vbs Version: 1.0 by rand1038 SubKeys of: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall which have been filtered by the script. They should appear in Add/Remove programs though this may not be the case. You can interpret "dword:00000001" to mean "True". ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ —————————————————————————————— Program Name: Ad-Aware SE Personal "DisplayName"="Ad-Aware SE Personal" "UninstallString"="C:\\PROGRA~1\\Lavasoft\\AD-AWA~1\\UNWISE.EXE C:\\PROGRA~1\\Lavasoft\\AD-AWA~1\\INSTALL.LOG" "URLInfoAbout"="http://www.lavasoft.de" —————————————————————————————— —————————————————————————————— Program Name: August 2002 "DisplayName"="August 2002" "UninstallString"="C:\\PP40\\uninstx.exe C:\\PP40\\update.log" —————————————————————————————— —————————————————————————————— Program Name: Automap 8.0 "URLInfoAbout"="http://www.microsoft....com/autoroute" —————————————————————————————— —————————————————————————————— Program Name: Bluetooth User Guide "UninstallString"="C:\\WINDOWS\\IsUninst.exe -f\"C:\\Program Files\\3Com\\Bluetooth\\User Guide\\Uninst.isu\"" "DisplayName"="Bluetooth User Guide" —————————————————————————————— —————————————————————————————— Program Name: Britannica DVD 99 "UninstallString"="C:\\WINDOWS\\IsUninst.exe -f\"C:\\Program Files\\Britannica\\Bdvd\\bdvd99.isu\"" "DisplayName"="Britannica DVD 99" —————————————————————————————— —————————————————————————————— Program Name: Corel Remove Program "DisplayName"="Corel Business Applications" "UninstallString"="D:\\Corel\\AppMan\\Setup\\remove.exe" —————————————————————————————— —————————————————————————————— Program Name: Corel WordPerfect Suite 8 "DisplayName"="Corel WordPerfect Suite 8" "UninstallString"="C:\\Corel\\Suite8\\AppMan\\Setup\\REMOVELAUNCHER.EXE" —————————————————————————————— —————————————————————————————— Program Name: CP51NBtn "DisplayName"="Easy Button" "UninstallString"="C:\\WINDOWS\\UnInst32.exe CP51NEB.UNI" —————————————————————————————— —————————————————————————————— Program Name: DivX 5.0.2 Bundle "DisplayName"="DivX 5.0.2 Bundle" "UninstallString"="C:\\WINDOWS\\unvise32.exe C:\\Program Files\\DivX\\uninstal.log" —————————————————————————————— —————————————————————————————— Program Name: FTDICOMM "UninstallString"="C:\\WINDOWS\\system32\\ftdiunin.exe C:\\WINDOWS\\system32\\ftdiun2k.ini" "DisplayName"="FTDI USB Serial Converter Drivers" —————————————————————————————— —————————————————————————————— Program Name: GARMIN 400 Series Trainer "UninstallString"="C:\\WINDOWS\\IsUninst.exe -f\"c:\\program files\\Garmin\\Uninst.isu\"" "DisplayName"="GARMIN 400 Series Trainer" —————————————————————————————— —————————————————————————————— Program Name: GoldWave v4.26 "DisplayName"="GoldWave v4.26" "UninstallString"="C:\\WINDOWS\\sxstall2.exe \"GoldWave v4.26\" \"C:\\Program Files\\GoldWave\\unstall.log\"" —————————————————————————————— —————————————————————————————— Program Name: HijackThis "DisplayName"="HijackThis 1.99.1" "UninstallString"="A:\\hijackthis\\HijackThis.exe /uninstall" "URLInfoAbout"="http://www.spywarein...o.com/~merijn/" —————————————————————————————— —————————————————————————————— Program Name: HP PrecisionScan LTX "UninstallString"="C:\\WINDOWS\\IsUninst.exe -f\"C:\\Program Files\\Hewlett-Packard\\HP PrecisionScan\\PrecisionScan LTX\\Uninst.isu\" -c\"C:\\Program Files\\Hewlett-Packard\\HP PrecisionScan\\PrecisionScan LTX\\HPUninstallIs.dll\"" "DisplayName"="HP PrecisionScan LTX" —————————————————————————————— —————————————————————————————— Program Name: InstallShield_{CD442089-F88D-4F46-8E3C-E4B2964B2415} "DisplayName"="Sage Accounts V10.00" "UninstallString"="C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\Driver\\7\\INTEL3~1\\IDriver.exe /M{CD442089-F88D-4F46-8E3C-E4B2964B2415} " "InstallLocation"="C:\\Program Files\\Sage\\Accounts\\" "URLInfoAbout"="http://www.uk.sage.com" "URLUpdateInfo"="http://www.uk.sage.com" —————————————————————————————— —————————————————————————————— Program Name: IPIX ActiveX Viewer "DisplayName"="IPIX ActiveX Viewer" "UninstallString"="C:\\WINDOWS\\Unwise.exe /a C:\\WINDOWS\\occache\\IPIXActX.log" —————————————————————————————— —————————————————————————————— Program Name: JRE 1.3.1 "UninstallString"="C:\\WINDOWS\\IsUninst.exe -f\"C:\\Program Files\\JavaSoft\\JRE\\1.3.1\\Uninst.isu\"" "DisplayName"="Java 2 Runtime Environment Standard Edition v1.3.1" —————————————————————————————— —————————————————————————————— Program Name: JRE 1.3.1_02 "UninstallString"="C:\\WINDOWS\\IsUninst.exe -f\"C:\\Program Files\\JavaSoft\\JRE\\1.3.1_02\\Uninst.isu\"" "DisplayName"="Java 2 Runtime Environment Standard Edition v1.3.1_02" —————————————————————————————— —————————————————————————————— Program Name: June 2003 "DisplayName"="June 2003" "UninstallString"="C:\\PP40\\uninstx.exe C:\\PP40\\update.log" —————————————————————————————— —————————————————————————————— Program Name: KB870669 "DisplayName"="Microsoft Data Access Components KB870669" "UninstallString"="C:\\WINDOWS\\muninst.exe C:\\WINDOWS\\INF\\KB870669.inf" "URLInfoAbout"="http://support.microsoft.com" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 —————————————————————————————— —————————————————————————————— Program Name: KB873333 "DisplayName"="Windows XP Hotfix - KB873333" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB873333$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB873339 "DisplayName"="Windows XP Hotfix - KB873339" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB873339$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB885250 "DisplayName"="Windows XP Hotfix - KB885250" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB885250$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB885835 "DisplayName"="Windows XP Hotfix - KB885835" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB885835$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB885836 "DisplayName"="Windows XP Hotfix - KB885836" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB885836$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB886185 "DisplayName"="Windows XP Hotfix - KB886185" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB886185$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB887472 "DisplayName"="Windows XP Hotfix - KB887472" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB887472$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB887742 "DisplayName"="Windows XP Hotfix - KB887742" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB887742$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB888113 "DisplayName"="Windows XP Hotfix - KB888113" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB888113$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB888302 "DisplayName"="Windows XP Hotfix - KB888302" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB888302$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB890175 "DisplayName"="Windows XP Hotfix - KB890175" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB890175$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB890859 "DisplayName"="Windows XP Hotfix - KB890859" "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB890859$\\spuninst\\spuninst.exe\"" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB890923 "DisplayName"="Windows XP Hotfix - KB890923" "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB890923$\\spuninst\\spuninst.exe\"" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB891781 "DisplayName"="Windows XP Hotfix - KB891781" "UninstallString"="C:\\WINDOWS\\$NtUninstallKB891781$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB893066 "DisplayName"="Windows XP Hotfix - KB893066" "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB893066$\\spuninst\\spuninst.exe\"" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB893086 "DisplayName"="Windows XP Hotfix - KB893086" "UninstallString"="\"C:\\WINDOWS\\$NtUninstallKB893086$\\spuninst\\spuninst.exe\"" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: KB893803 "DisplayName"="Windows Installer 3.1 (KB893803)" "UninstallString"="\"C:\\WINDOWS\\$MSI31Uninstall_KB893803$\\spuninst\\spuninst.exe\"" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 —————————————————————————————— —————————————————————————————— Program Name: LiveReg "DisplayName"="LiveReg (Symantec Corporation)" "UninstallString"="C:\\Program Files\\Common Files\\Symantec Shared\\LiveReg\\VcSetup.exe /REMOVE" "InstallLocation"="C:\\Program Files\\Common Files\\Symantec Shared\\LiveReg" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 —————————————————————————————— —————————————————————————————— Program Name: LiveUpdate "UninstallString"="C:\\Program Files\\Symantec\\LiveUpdate\\LSETUP.EXE /U" "DisplayName"="LiveUpdate 1.80 (Symantec Corporation)" "URLInfoAbout"="http://www.symantec.com" "InstallLocation"="C:\\Program Files\\Symantec\\LiveUpdate" —————————————————————————————— —————————————————————————————— Program Name: Logitech Resource Center "DisplayName"="Logitech Resource Center" "UninstallString"="C:\\PROGRA~1\\Logitech\\RESOUR~1\\rem\\UNWISE.EXE /s C:\\PROGRA~1\\Logitech\\RESOUR~1\\rem\\INSTALL.LOG" —————————————————————————————— —————————————————————————————— Program Name: Microsoft .NET Framework 1.1 (1033) "UninstallString"="msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" "DisplayName"="Microsoft .NET Framework 1.1" —————————————————————————————— —————————————————————————————— Program Name: Microsoft .NET Framework Full v1.0.3705 (1033) "DisplayName"="Microsoft .NET Framework (English) v1.0.3705" "UninstallString"="C:\\WINDOWS\\Microsoft.NET\\Framework\\Install.exe /u /p Microsoft .NET Framework Full v1.0.3705 (1033)" —————————————————————————————— —————————————————————————————— Program Name: Nero - Burning Rom!UninstallKey "UninstallString"="C:\\WINDOWS\\UNNERO.exe /UNINSTALL" "DisplayName"="Nero - Burning Rom (Web installer)" —————————————————————————————— —————————————————————————————— Program Name: Net2Phone_10_0 "DisplayName"="Net2Phone" "UninstallString"="C:\\Program Files\\Net2Phone\\setupN2P.exe /uninstall" "InstallLocation"="C:\\Program Files\\Net2Phone\\" "URLInfoAbout"="http://www.net2phone.com" "URLUpdateInfo"="http://www.net2phone.com" —————————————————————————————— —————————————————————————————— Program Name: Network Play System (Patching) "UninstallString"="C:\\WINDOWS\\IsUninst.exe -f\"C:\\Program Files\\Electronic Arts\\Network Play System\\NPSPatch.isu\"" "DisplayName"="Network Play System (Patching)" —————————————————————————————— —————————————————————————————— Program Name: PCHealth "UninstallString"="rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\\WINDOWS\\INF\\PCHealth.inf" —————————————————————————————— —————————————————————————————— Program Name: ProPlan 5 "DisplayName"="ProPlan 5" "UninstallString"="C:\\Program Files\\PP50\\uninstx.exe C:\\Program Files\\PP50\\ProPlan 5.log" —————————————————————————————— —————————————————————————————— Program Name: QuickTime "DisplayName"="QuickTime" "UninstallString"="C:\\WINDOWS\\unvise32qt.exe C:\\WINDOWS\\System32\\QuickTime\\Uninstall.log" —————————————————————————————— —————————————————————————————— Program Name: Radio Aids Navigation Tutor 2000_is1 "DisplayName"="Radio Aids Navigation Tutor 2000 Version 2.0" "UninstallString"="\"C:\\Program Files\\RANT2000\\unins000.exe\"" —————————————————————————————— —————————————————————————————— Program Name: RealJukebox 1.0 "UninstallString"="C:\\Program Files\\Common Files\\Real\\Update_OB\\rnuninst.exe RealNetworks|RealPlayer|6.0" —————————————————————————————— —————————————————————————————— Program Name: RealPlayer 6.0 "UninstallString"="C:\\Program Files\\Common Files\\Real\\Update_OB\\rnuninst.exe RealNetworks|RealPlayer|6.0" "DisplayName"="RealOne Player" —————————————————————————————— —————————————————————————————— Program Name: Remote Administrator v2.1 "DisplayName"="Remote Administrator v2.1" "UninstallString"="C:\\Program Files\\Radmin\\uninstal.exe" —————————————————————————————— —————————————————————————————— Program Name: S3Display "DisplayName"="S3Display" "UninstallString"="s3uninst.exe -reg 5 'HKLM\\Software\\S3\\S3Uninst\\S3Display'" —————————————————————————————— —————————————————————————————— Program Name: S3Gamma2 "DisplayName"="S3Gamma2" "UninstallString"="s3uninst.exe -reg 5 'HKLM\\Software\\S3\\S3Uninst\\S3Gamma2'" —————————————————————————————— —————————————————————————————— Program Name: S3Info2 "DisplayName"="S3Info2" "UninstallString"="s3uninst.exe -reg 5 'HKLM\\Software\\S3\\S3Uninst\\S3Info2'" —————————————————————————————— —————————————————————————————— Program Name: Sage MIS 3.01 "UninstallString"="C:\\WINDOWS\\IsUninst.exe -f\"C:\\Program Files\\Informer50\\Uninst.isu\"" "DisplayName"="Sage MIS 3.01" —————————————————————————————— —————————————————————————————— Program Name: Shockwave "DisplayName"="Shockwave" "UninstallString"="C:\\WINDOWS\\system32\\Macromed\\SHOCKW~1\\UNWISE.EXE C:\\WINDOWS\\system32\\Macromed\\SHOCKW~1\\INSTALL.LOG" —————————————————————————————— —————————————————————————————— Program Name: Spybot - Search & Destroy_is1 "DisplayName"="Spybot - Search & Destroy 1.3" "UninstallString"="\"C:\\Program Files\\Spybot\\Spybot - Search & Destroy\\unins000.exe\"" —————————————————————————————— —————————————————————————————— Program Name: SpywareBlaster_is1 "DisplayName"="SpywareBlaster v3.2" "UninstallString"="\"C:\\Program Files\\SpywareBlaster 3.2\\SpywareBlaster\\unins000.exe\"" "URLInfoAbout"="http://www.javacoolsoftware.com/" —————————————————————————————— —————————————————————————————— Program Name: ST5UNST #1 "DisplayName"="ProFlight 2000 v2.05" "UninstallString"="C:\\WINDOWS\\ST5UNST.EXE -n \"c:\\Program Files\\ProFlight 2.05\\ST5UNST.LOG\" " —————————————————————————————— —————————————————————————————— Program Name: Twister "UninstallString"="C:\\PROGRA~1\\S3\\Twister\\s3setvga.exe -s -fC:\\PROGRA~1\\S3\\Twister\\Twister.uns" "DisplayName"="Twister and Utilities" —————————————————————————————— —————————————————————————————— Program Name: VX2 Cleaner plug-in for Ad-Aware SE "DisplayName"="VX2 Cleaner plug-in for Ad-Aware SE" "UninstallString"="C:\\PROGRA~1\\Lavasoft\\AD-AWA~1\\Plugins\\VX2CLE~1\\UNWISE.EXE C:\\PROGRA~1\\Lavasoft\\AD-AWA~1\\Plugins\\VX2CLE~1\\INSTALL.LOG" "URLInfoAbout"="http://www.lavasoftsupport.com" —————————————————————————————— —————————————————————————————— Program Name: Winamp "DisplayName"="Winamp (remove only)" "UninstallString"="\"C:\\Program Files\\Winamp\\UninstWA.exe\"" —————————————————————————————— —————————————————————————————— Program Name: Windows XP Service Pack "DisplayName"="Windows XP Service Pack 2" "UninstallString"="C:\\WINDOWS\\$NtServicePackUninstall$\\spuninst\\spuninst.exe" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://support.microsoft.com" —————————————————————————————— —————————————————————————————— Program Name: WinZip "DisplayName"="WinZip" "UninstallString"="\"C:\\Program Files\\WinZip\\WINZIP32.EXE\" /uninstall" "InstallLocation"="C:\\PROGRA~1\\WINZIP\\" "URLInfoAbout"="http://www.winzip.com" "URLUpdateInfo"="http://www.winzip.com" —————————————————————————————— —————————————————————————————— Program Name: Works2001Setup "UninstallString"="C:\\Program Files\\Microsoft Works Suite 2001\\Setup\\Launcher.exe D:\\" "DisplayName"="Microsoft Works 2001 Setup Launcher" —————————————————————————————— —————————————————————————————— Program Name: {00010409-78E1-11D2-B60F-006097C998E7} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,30,30,30,\ 31,30,34,30,39,2d,37,38,45,31,2d,31,31,44,32,2d,42,36,30,46,2d,30,30,36,30,\ 39,37,43,39,39,38,45,37,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="Microsoft Office 2000 SR-1 Professional" —————————————————————————————— —————————————————————————————— Program Name: {00030409-78E1-11D2-B60F-006097C998E7} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,30,30,30,\ 33,30,34,30,39,2d,37,38,45,31,2d,31,31,44,32,2d,42,36,30,46,2d,30,30,36,30,\ 39,37,43,39,39,38,45,37,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="Microsoft Office 2000 SR-1 Small Business" —————————————————————————————— —————————————————————————————— Program Name: {00170409-78E1-11D2-B60F-006097C998E7} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,30,30,31,\ 37,30,34,30,39,2d,37,38,45,31,2d,31,31,44,32,2d,42,36,30,46,2d,30,30,36,30,\ 39,37,43,39,39,38,45,37,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="Microsoft Word 2000 SR-1" —————————————————————————————— —————————————————————————————— Program Name: {01BDFB08-EE88-4E5E-94A6-AE9EDCFA40C5} "InstallLocation"="" "NoRemove"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="http://www.microsoft.com" "URLUpdateInfo"="http://www.microsoft.com/mouse/" "DisplayName"="Microsoft IntelliPoint 4.0" —————————————————————————————— —————————————————————————————— Program Name: {05E9F134-07C9-4249-9B80-EE5D975F201B} "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\Ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{05E9F134-07C9-4249-9B80-EE5D975F201B}\\setup.exe\" -l0x9 -l0009 --remove=y" "DisplayName"="Sony Ericsson Image Editor" —————————————————————————————— —————————————————————————————— Program Name: {0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E} "InstallLocation"="" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,58,7b,30,45,46,\ 43,36,32,35,39,2d,33,41,44,38,2d,34,43,44,32,2d,42,43,35,37,2d,44,34,39,33,\ 37,41,46,35,43,43,30,45,7d,00 "URLInfoAbout"="http://www.symantec.com" "URLUpdateInfo"="http://www.symantec.com" "DisplayName"="Symantec AntiVirus Client" —————————————————————————————— —————————————————————————————— Program Name: {15D9EB74-998E-4A04-B468-51C2E7B32182} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,31,35,44,\ 39,45,42,37,34,2d,39,39,38,45,2d,34,41,30,34,2d,42,34,36,38,2d,35,31,43,32,\ 45,37,42,33,32,31,38,32,7d,00 "URLInfoAbout"="http://www.microsoft...uk/default.asp" "URLUpdateInfo"="http://www.microsoft...uk/default.asp" "DisplayName"="Microsoft Picture It! Publishing 2001" —————————————————————————————— —————————————————————————————— Program Name: {350C97B0-3D7C-4EE8-BAA9-00BCB3D54227} "InstallLocation"="" "NoModify"=dword:00000001 "NoRemove"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="WebFldrs XP" —————————————————————————————— —————————————————————————————— Program Name: {43DCF766-6838-4F9A-8C91-D92DA586DFA7} "InstallLocation"="" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,58,7b,34,33,44,\ 43,46,37,36,36,2d,36,38,33,38,2d,34,46,39,41,2d,38,43,39,31,2d,44,39,32,44,\ 41,35,38,36,44,46,41,37,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="Microsoft Windows Journal Viewer" —————————————————————————————— —————————————————————————————— Program Name: {4CB9ECB1-DF32-43B5-B615-3119DAA32E95} "InstallLocation"="" "NoModify"=dword:00000001 "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,58,7b,34,43,42,\ 39,45,43,42,31,2d,44,46,33,32,2d,34,33,42,35,2d,42,36,31,35,2d,33,31,31,39,\ 44,41,41,33,32,45,39,35,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="Process Viewer" —————————————————————————————— —————————————————————————————— Program Name: {4D719053-5593-11D3-8F25-0060085C1758} "InstallLocation"="" "NoRepair"=dword:00000001 "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,34,44,37,\ 31,39,30,35,33,2d,35,35,39,33,2d,31,31,44,33,2d,38,46,32,35,2d,30,30,36,30,\ 30,38,35,43,31,37,35,38,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="Microsoft AutoRoute 2001" —————————————————————————————— —————————————————————————————— Program Name: {536F7C74-844B-4683-B0C5-EA39E19A6FE3} "InstallLocation"="C:\\Program Files\\Microsoft AntiSpyware\\" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,35,33,36,\ 46,37,43,37,34,2d,38,34,34,42,2d,34,36,38,33,2d,42,30,43,35,2d,45,41,33,39,\ 45,31,39,41,36,46,45,33,7d,00 "URLInfoAbout"="http://www.microsoft.com" "URLUpdateInfo"="" "DisplayName"="Microsoft AntiSpyware" —————————————————————————————— —————————————————————————————— Program Name: {54F90B55-BEB3-4F0D-8802-228822FA5921} "InstallLocation"="C:\\Program Files\\WordPerfect Office 11\\" "NoRepair"=dword:00000001 "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,35,34,46,\ 39,30,42,35,35,2d,42,45,42,33,2d,34,46,30,44,2d,38,38,30,32,2d,32,32,38,38,\ 32,32,46,41,35,39,32,31,7d,00 "URLInfoAbout"="http://www.corel.com" "URLUpdateInfo"="http://www.corel.com" "DisplayName"="WordPerfect Office 11" —————————————————————————————— —————————————————————————————— Program Name: {5AE68DC3-F16E-457D-947A-092D614C7ABD}_is1 "DisplayName"="Spy Sweeper" "UninstallString"="\"C:\\Program Files\\Webroot\\Spy Sweeper\\unins000.exe\"" "URLInfoAbout"="http://www.webroot.com/" —————————————————————————————— —————————————————————————————— Program Name: {5F629FE8-5B4C-4863-937A-AFC2961F7DD3} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,35,46,36,\ 32,39,46,45,38,2d,35,42,34,43,2d,34,38,36,33,2d,39,33,37,41,2d,41,46,43,32,\ 39,36,31,46,37,44,44,33,7d,00 "URLInfoAbout"="http://www.microsoft.com" "URLUpdateInfo"="http://www.microsoft.com" "DisplayName"="Microsoft Works Suite Add-in for Microsoft Word" —————————————————————————————— —————————————————————————————— Program Name: {5F647107-C2BA-11D3-9A6D-0000B455B172} "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{5F647107-C2BA-11D3-9A6D-0000B455B172}\\setup.exe\" " "DisplayName"="Pinball Collection Vol II" —————————————————————————————— —————————————————————————————— Program Name: {609F7AC8-C510-11D4-A788-009027ABA5D0} "InstallLocation"="" "NoRepair"=dword:00000001 "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,36,30,39,\ 46,37,41,43,38,2d,43,35,31,30,2d,31,31,44,34,2d,41,37,38,38,2d,30,30,39,30,\ 32,37,41,42,41,35,44,30,7d,00 "URLInfoAbout"="http://www.roxio.com" "URLUpdateInfo"="http://www.roxio.com...bcheckup.jhtml" "DisplayName"="Easy CD Creator 5 Basic" —————————————————————————————— —————————————————————————————— Program Name: {8B1E5CF8-9170-42A2-A88A-A169FBDD128E} "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\Ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{8B1E5CF8-9170-42A2-A88A-A169FBDD128E}\\setup.exe\" -l0x9 " "DisplayName"="NETGEAR WG511 54 Mbps Wireless PC Card " —————————————————————————————— —————————————————————————————— Program Name: {8F8C91F0-F15C-11D4-A4D6-0004ACD720DA} "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\Ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{8F8C91F0-F15C-11D4-A4D6-0004ACD720DA}\\Setup.exe\" " "DisplayName"="FliteStar" —————————————————————————————— —————————————————————————————— Program Name: {90E00409-6000-11D3-8CFE-0150048383C9} "InstallLocation"="C:\\Program Files\\Microsoft Office\\" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,39,30,45,\ 30,30,34,30,39,2d,36,30,30,30,2d,31,31,44,33,2d,38,43,46,45,2d,30,31,35,30,\ 30,34,38,33,38,33,43,39,7d,00 "URLInfoAbout"="http://www.microsoft.com/support" "URLUpdateInfo"="" "DisplayName"="Microsoft Office Outlook 2003" —————————————————————————————— —————————————————————————————— Program Name: {9462C4AD-D6C4-4365-B4AD-BFE0B1E216C3} "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\Ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{9462C4AD-D6C4-4365-B4AD-BFE0B1E216C3}\\setup.exe\" -l0x9 -l0009 --remove=y" "DisplayName"="Sony Ericsson MMS Home Studio" —————————————————————————————— —————————————————————————————— Program Name: {ABEB838C-A1A7-4C5D-B7E1-8B4314600205} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,41,42,45,\ 42,38,33,38,43,2d,41,31,41,37,2d,34,43,35,44,2d,42,37,45,31,2d,38,42,34,33,\ 31,34,36,30,30,32,30,35,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="MSN Messenger 6.2" —————————————————————————————— —————————————————————————————— Program Name: {AC76BA86-0000-0000-0000-6028747ADE01} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,41,43,37,\ 36,42,41,38,36,2d,30,30,30,30,2d,30,30,30,30,2d,30,30,30,30,2d,36,30,32,38,\ 37,34,37,41,44,45,30,31,7d,00 "URLInfoAbout"="http://www.adobe.com" "URLUpdateInfo"="http://www.adobe.com...mily/main.html" "DisplayName"="Adobe Acrobat - Reader 6.0.2 Update" —————————————————————————————— —————————————————————————————— Program Name: {AC76BA86-1033-0000-7760-000000000001} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,41,43,37,\ 36,42,41,38,36,2d,31,30,33,33,2d,30,30,30,30,2d,37,37,36,30,2d,30,30,30,30,\ 30,30,30,30,30,30,30,31,7d,00 "URLInfoAbout"="http://www.adobe.com" "URLUpdateInfo"="http://www.adobe.com...mily/main.html" "DisplayName"="Adobe Acrobat 6.0.1 Professional" —————————————————————————————— —————————————————————————————— Program Name: {B05E8183-866A-11D3-97DF-0000F8D8F2E9} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,42,30,35,\ 45,38,31,38,33,2d,38,36,36,41,2d,31,31,44,33,2d,39,37,44,46,2d,30,30,30,30,\ 46,38,44,38,46,32,45,39,7d,00 "URLInfoAbout"="http://www.symantec.com" "URLUpdateInfo"="http://www.symantec.com" "DisplayName"="Symantec pcAnywhere" —————————————————————————————— —————————————————————————————— Program Name: {B43357AA-3A6D-4D94-B56E-43C44D09E548} "InstallLocation"="" "NoModify"=dword:00000001 "NoRemove"=dword:00000001 "NoRepair"=dword:00000001 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="Microsoft .NET Framework (English)" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,58,7b,42,34,33,\ 33,35,37,41,41,2d,33,41,36,44,2d,34,44,39,34,2d,42,35,36,45,2d,34,33,43,34,\ 34,44,30,39,45,35,34,38,7d,00 —————————————————————————————— —————————————————————————————— Program Name: {B8BC806D-0703-11D4-BB23-006008676AF8} "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\Ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{B8BC806D-0703-11D4-BB23-006008676AF8}\\Setup.exe\" -l0x9 -l0009 --remove=y" "DisplayName"="Sony Ericsson Communications Suite" —————————————————————————————— —————————————————————————————— Program Name: {BD3DCAB0-3FE5-44FB-90DA-EFB0A2CD1387} "InstallLocation"="" "NoModify"=dword:00000001 "NoRemove"=dword:00000001 "URLInfoAbout"="http://www.microsoft.com" "URLUpdateInfo"="http://www.microsoft.com" "DisplayName"="Works Synchronization" —————————————————————————————— —————————————————————————————— Program Name: {C1939820-A945-11D4-86F6-0001031E5712} "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{C1939820-A945-11D4-86F6-0001031E5712}\\setup.exe\" REMOVEALL" "DisplayName"="InterVideo WinDVD" "InstallLocation"=hex(2):43,3a,5c,50,72,6f,67,72,61,6d,20,46,69,6c,65,73,5c,49,\ 6e,74,65,72,56,69,64,65,6f,5c,57,69,6e,44,56,44,00 —————————————————————————————— —————————————————————————————— Program Name: {C63E7C60-25EB-11D3-8EDA-00A0C911E8E5} "InstallLocation"="" "NoModify"=dword:00000001 "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,58,7b,43,36,33,\ 45,37,43,36,30,2d,32,35,45,42,2d,31,31,44,33,2d,38,45,44,41,2d,30,30,41,30,\ 43,39,31,31,45,38,45,35,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="Microsoft Outlook Personal Folders Backup" —————————————————————————————— —————————————————————————————— Program Name: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} "InstallLocation"="" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,58,7b,43,42,32,\ 46,37,45,44,44,2d,39,44,31,46,2d,34,33,43,31,2d,39,30,46,43,2d,34,46,35,32,\ 45,41,45,31,37,32,41,31,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="Microsoft .NET Framework 1.1" —————————————————————————————— —————————————————————————————— Program Name: {CD442089-F88D-4F46-8E3C-E4B2964B2415} "InstallLocation"="C:\\Program Files\\Sage\\Accounts\\" "NoModify"=dword:00000001 "NoRemove"=dword:00000001 "URLInfoAbout"="http://www.uk.sage.com" "URLUpdateInfo"="http://www.uk.sage.com" "DisplayName"="SageAcc" —————————————————————————————— —————————————————————————————— Program Name: {CF58EE9D-AA3B-4E5A-8E22-4F6514CB5E1C} "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\Ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{CF58EE9D-AA3B-4E5A-8E22-4F6514CB5E1C}\\setup.exe\" " "DisplayName"="ROUTE 66 Route 2004" —————————————————————————————— —————————————————————————————— Program Name: {D41FAAA9-8048-4906-86B2-9AADEA1FA0B7} "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\Ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}\\Setup.exe\" /l0009 -Control_Panel" "DisplayName"="SpeedTouch USB Software" —————————————————————————————— —————————————————————————————— Program Name: {D5CF3710-211B-11D4-B9B9-00105AE05C5D} "DisplayName"="XTNDConnect PC" "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\Ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{D5CF3710-211B-11D4-B9B9-00105AE05C5D}\\setup.exe\" UNINSTALL" —————————————————————————————— —————————————————————————————— Program Name: {F43EBB0C-18C5-4908-B7FF-B1AEA26E188B} "DisplayName"="Bluetooth Connection Manager" "UninstallString"="RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\ctor.dll,LaunchSetup \"C:\\Program Files\\InstallShield Installation Information\\{F43EBB0C-18C5-4908-B7FF-B1AEA26E188B}\\setup.exe\" " —————————————————————————————— —————————————————————————————— Program Name: {F8D0829C-9C6F-11D3-8080-00C04FA329AA} "InstallLocation"="" "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,49,7b,46,38,44,\ 30,38,32,39,43,2d,39,43,36,46,2d,31,31,44,33,2d,38,30,38,30,2d,30,30,43,30,\ 34,46,41,33,32,39,41,41,7d,00 "URLInfoAbout"="http://www.microsoft.com" "URLUpdateInfo"="http://www.microsoft.com/works" "DisplayName"="Microsoft Works 6.0" —————————————————————————————— —————————————————————————————— Program Name: {FAF7F1D7-C0E7-47EA-8AAA-84E4F9EA3C94} "InstallLocation"="" "NoModify"=dword:00000001 "NoRemove"=dword:00000001 "URLInfoAbout"="http://www.microsoft.com" "URLUpdateInfo"="http://www.microsoft.com" "DisplayName"="Works Suite OS Pack" —————————————————————————————— —————————————————————————————— Program Name: {FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F} "InstallLocation"="C:\\Program Files\\HighMAT CD Writing Wizard\\" "NoModify"=dword:00000001 "UninstallString"=hex(2):4d,73,69,45,78,65,63,2e,65,78,65,20,2f,58,7b,46,43,45,\ 36,35,43,34,45,2d,42,30,45,38,2d,34,46,42,44,2d,41,44,31,36,2d,45,44,43,42,\ 45,36,43,44,35,39,31,46,7d,00 "URLInfoAbout"="" "URLUpdateInfo"="" "DisplayName"="HighMAT Extension to Microsoft Windows XP CD Writing Wizard" ——————————————————————————————

[rand1038]

Go to Start > Control Panel > Add/Remove Programs and find
Remote Administrator v2.1 and uninstall it.
While you are there, look through the list and see if there are any other programs you don't want/use and uninstall them also.

Download and install System Security Suite. Set it up like this:



Shut down all other programs as you will be rebooting.
Click the "Clear Selected Items" button and accept the reboot option..

After the reboot, try the slow sites and see if there is any improvement.

[Alain Toogood]

Hi, I went to remove Remote Administrator and then realised that this is the program that I use to transfer files from my desktop (main machine) to the faulty laptop (backup machine). So I didn't remove it; BUT if you feel this may be the problem I will try removing it. Apologies for incorrect info. I ran the System Security Suite, selected the options, cleared selected items and rebooted but to no avail. I tried system update but it is not just slow it hangs completely as follows: After a long wait it gives the standard 'The page cannot be displayed' message PS: Away now until Monday PM.

Edited by Alain Toogood, 17 July 2005 - 03:42 AM.

[Alain Toogood]

Hi Having tried all that you suggest and everything I can think of I reckon the only sure-fire cure is a system restore with the original manufacturers disks. Any suggestions before I do this? Alain

[rand1038]

Hold on until this evening please (its A.M. where I am at). There are more things we should check before you do a reinstall. I have to leave for an appointment right now but I will get back to you this p.m.

Edited by rand1038, 25 July 2005 - 08:02 AM.

[Alain Toogood]

OK Wilco. Thanks again.

[rand1038]

I don't like that "file missing" for Remote Administrator. If you have the installer handy then uninstall/reinstall the program.

After you do that reboot and see how things work. If things are still slow then perform the following steps in order, rebooting after each and testing the system before moving on to the next. If these don't help then well move on to more intense "therapy" but we are not at the reinstall windows stage by any means.

Step 1You will need your Windows XP install disc for this operation. If you do not have an install disc but have the factory restore discs then you will need to find the I386 folder on the disc (i386 if the I is lower case).
Once you have inserted the disc in the drive and closed any windows it opened then:Go to start > Run and type sfc /scannow into the box. There is one space between the c and the /.
Click Ok
A progress bar will appear as the scan is being done.
If a dialog comes up asking you to insert the Windows CD click browse and browse to the folder on the CD that contains the I386 folder. Do not include the I386 folder in the path. For example if the full path to the I386 folder is F:\windows\setup\I386 you would only use F:\windows\setup.
Click ok and allow the scan to finish.
Remove the Windows CD from the drive
Reboot and see how your system works
Post back here with results or questions.
[/list] Step 2Download Trojan Hunter (trial version).
Next go here and download the latest update zip file.
Install Trojan Hunter and make a note of the full path to the folder where it is installed, by default this is
X:\program files\TrojanHunter 3.8 (X is the drive Trojan Hunter is installed on, usually C).
After installation unzip the update file you downloaded to the installation folder you took note of.
Say "Yes to All" when you are asked about replacing files.
You have to completely shut down Trojan Hunter for the new files to be used.
Double click the desktop icon to restart Trojan Hunter, click to continue evaluation.
Click the "Full Scan" button on the upper left.

[Alain Toogood]

Eureka!!! You’re a genius with a sixth sense. There were numerous Trojans within some Remote Administrator files and TrojanHunter got them on the first and second try, the third and fourth runs found nothing. With these gone I can log on to tomcoyote website and my daughter can get in to Windows Messenger. This is a revelation for this machine! The only website that I can’t now access (there may be others I guess - but this is the only one for certain) is www.microsoft.com which makes me think that the machine has some bug lurking within. A friend of mine (one of the founders of Borland Software) tells me that all machines should have this bug but he’s a little sour about Microsoft. I can live with this I guess. Thanks for your help.

[rand1038]

That is good news Alan. You should proceed with an in depth cleanup procedure.

First follow these instructions. Make sure you reboot when instructed, that is very important.
Next, follow the instructions on this page to generate a hijackthis log and then post it.

When you post the hijackthis log in the Malware Removal forum make sure you post a link to this thread as the information may be helpful to the person who helps you finish the cleanup.

Post here when you ae all cleaned up so we know all the issues are taken care of.