I have some malware on this computer that cannot be deleted, quarantined, or cleaned with mcafee. I did the 5 steps. here is the report and i will attach extra.txt (oops, cant attach. i'll post extra.txt at bottom with header in caps). thank you from the bottom of my heart.
Deckard's System Scanner v20070809.63
Run by Thomas Barrie on 2007-08-09 at 22
27
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Successfully created a Deckard's System Scanner Restore Point.
-- Last 5 Restore Point(s) --
97: 2007-08-10 03
31 UTC - RP558 - Deckard's System Scanner Restore Point
96: 2007-08-10 01:10:01 UTC - RP557 - Software Distribution Service 3.0
95: 2007-08-10 00:36:02 UTC - RP556 - Installed Windows Internet Explorer 7.
94: 2007-08-10 00:35:41 UTC - RP555 - Installed Windows IDNMitigationAPIs.
93: 2007-08-10 00:35:20 UTC - RP554 - Installed Windows NLSDownlevelMapping.
-- First Restore Point --
1: 2007-05-03 16:58:58 UTC - RP462 - System Checkpoint
Backed up registry hives.
Performed disk cleanup.
-- HijackThis Clone ------------------------------------------------------------
Emulating logfile of HijackThis v1.99.1
Scan saved at 2007-08-09 22:08:28
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16473)
Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\Personal Firewall\MpfTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\i34yuc387.exe
C:\WINDOWS\g4356cbvy63.exe
C:\WINDOWS\system32\lpdsrngm.exe
C:\WINDOWS\system32\sdadlrow-t2.exe
C:\Program Files\Windows Media Player\horyk22011.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\csrss.exe
C:\Program Files\SecCenter\scprot4.exe
C:\Program Files\Ozqaguwk\mezavkvd.exe
C:\Program Files\McAfee.com\VSO\McVSEscn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\ISM\ISMModule2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\McAfee.com\VSO\mcvsftsn.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\McAfee.com\Personal Firewall\MpfAgent.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\nwinqmdt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\sihcsdvq.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Thomas Barrie\Local Settings\Temporary Internet Files\Content.IE5\Z36GFMMU\dss[1].exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.si.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://www.google.com/search?q=%s
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = iexplore
R1 - HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search,Default_Search_URL =
http://www.google.com/ie
R1 - HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.google.com/ie
O2 - BHO: 0 - {0625DAA8-3728-4FC8-A1BA-BCAFE1A50D95} - C:\Program Files\Internet Explorer\lavunabiq356.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0FF078B0-0072-4FCA-AEDC-36C078A563D5} - C:\Program Files\Common Files\hoketoz455101.dll (file missing)
O2 - BHO: (no name) - {2E9D4C81-9F27-4c14-B804-7B0F6BC88A4F} - C:\Program Files\Outerinfo\Outerinfo.dll
O2 - BHO: (no name) - {356EA4B8-0225-4C11-AF5E-B7CEE719E4D2} - \
O2 - BHO: (no name) - {3964D8D6-86D0-493A-B460-A805B5401114} - C:\WINDOWS\system32\tuvvusr.dll
O2 - BHO: (no name) - {3E66438B-D364-DFEF-1A15-F88DB123D49D} - C:\WINDOWS\system32\llbxjem.dll (file missing)
O2 - BHO: (no name) - {420C4981-32CC-AF09-C412-03797A5A3F37} - C:\Program Files\Brytaxrx\axwhrzbz.dll
O2 - BHO: (no name) - {53B5F2B1-94DD-43E5-8187-EB4E31F00701} - C:\WINDOWS\system32\l3acdb.dll (file missing)
O2 - BHO: (no name) - {6888721E-230F-43E7-837C-6DB442557C34} - C:\Program Files\Common Files\hoketoz5555.dll
O2 - BHO: (no name) - {6A43F7E2-7725-4730-97E6-912AAF914EC1} - C:\WINDOWS\system32\pmkhe.dll
O2 - BHO: BndDrive BHO Class - {9815DA81-2E0C-478c-90E4-06E474E704D0} - C:\Program Files\ISM\BndDrive.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\GoogleToolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: IE Redirector - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - C:\WINDOWS\system32\dnsersnd.dll (file missing)
O2 - BHO: (no name) - {CF46BFB3-2ACC-441b-B82B-36B9562C7FF1} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\Program Files\McAfee.com\VSO\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar4.dll
O4 - HKEY_LOCAL_MACHINE\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKEY_LOCAL_MACHINE\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKEY_LOCAL_MACHINE\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKEY_LOCAL_MACHINE\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKEY_LOCAL_MACHINE\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKEY_LOCAL_MACHINE\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKEY_LOCAL_MACHINE\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKEY_LOCAL_MACHINE\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKEY_LOCAL_MACHINE\..\Run: [i34yuc387] C:\WINDOWS\i34yuc387
O4 - HKEY_LOCAL_MACHINE\..\Run: [g4356cbvy63] C:\WINDOWS\g4356cbvy63
O4 - HKEY_LOCAL_MACHINE\..\Run: [{85-52-22-2E-ZN}] C:\windows\system32\lpdsrngm.exe D4M001
O4 - HKEY_LOCAL_MACHINE\..\Run: [bantool] C:\WINDOWS\system32\sdadlrow-t2.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [horyk] C:\Program Files\Windows Media Player\horyk22011.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [dgtghudc] rundll32.exe "C:\Program Files\dgtghudc\tgfgjgva.dll",Init
O4 - HKEY_LOCAL_MACHINE\..\Run: [csrss] C:\WINDOWS\csrss.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [SC2] C:\Program Files\SecCenter\scprot4.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [mezavkvd] C:\Program Files\Ozqaguwk\mezavkvd.exe
O4 - HKEY_LOCAL_MACHINE\..\Run: [Ultimate Fixer] "C:\Program Files\Ultimate Fixer\UltimateFixer.exe" hide
O4 - HKEY_LOCAL_MACHINE\..\Run: [ExploreUpdSched] C:\WINDOWS\system32\nwinqmdt.exe D4M001
O4 - HKEY_LOCAL_MACHINE\..\Run: [SystemOptimizer] rundll32.exe "C:\WINDOWS\system32\ftocwdxy.dll",forkonce
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Cxqbik] "C:\Documents and Settings\Thomas Barrie\My Documents\??sks\w?crtupd.exe"
O4 - HKCU\..\Run: [WinTouch] C:\Documents and Settings\Thomas Barrie\Application Data\WinTouch\WinTouch.exe
O4 - HKCU\..\Run: [SfKg6w] C:\Documents and Settings\Thomas Barrie\Application Data\Microsoft\Windows\nxqmbmr.exe
O4 - HKCU\..\Run: [fmuu] C:\PROGRA~1\COMMON~1\fmuu\fmuum.exe
O4 - HKCU\..\Run: [ISMModule2] "C:\Program Files\ISM\ISMModule2.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: TA_Start.lnk = C:\WINDOWS\system32\lpdsrngm.exe
O4 - Startup: Think-Adz.lnk = C:\WINDOWS\system32\nwinqmdt.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra 'Tools' menuitem: (no name) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - (file missing)
O9 - Extra 'Tools' menuitem: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (file missing)
O9 - Extra 'Tools' menuitem: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsof...?1174669905562
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) -
https://h17000.www1.hp.com/ewfrf-JAV...oadManager.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload.macromedia.com/pub...sh/swflash.cab
O18 - Protocol: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\windows\system32\ldcore.dll
O20 - Winlogon Notify: pmkhe - C:\WINDOWS\system32\pmkhe.dll
O20 - Winlogon Notify: tuvvusr - C:\WINDOWS\system32\tuvvusr.dll
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\VGhvbWFzIEJhcnJpZQ\command.exe
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\sihcsdvq.exe /service
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - "C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - C:\Program Files\McAfee.com\Agent\Mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - C:\Program Files\McAfee.com\Agent\McTskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\Program Files\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\Program Files\McAfee.com\Personal Firewall\MpfService.exe
O23 - Service: Net Agent - Unknown owner - C:\WINDOWS\dls0523pmw.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe service
-- File Associations -----------------------------------------------------------
All associations okay.
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R0 sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - c:\windows\system32\drivers\sfdrv01.sys <Not Verified; Protection Technology; StarForce Protection System>
R0 sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - c:\windows\system32\drivers\sfhlp02.sys <Not Verified; Protection Technology; StarForce Protection System>
R0 sfsync02 (StarForce Protection Synchronization Driver (version 2.x)) - c:\windows\system32\drivers\sfsync02.sys <Not Verified; Protection Technology; StarForce Protection System>
R1 core - c:\windows\system32\drivers\core.sys
R1 MPFIREWL - c:\windows\system32\drivers\mpfirewall.sys <Not Verified; McAfee; McAfee Personal Firewall>
R3 DSproct - c:\program files\dellsupport\gtaction\triggers\dsproct.sys <Not Verified; Gteko Ltd.; processt>
S3 wanatw (WAN Miniport (ATW)) - c:\windows\system32\drivers\wanatw4.sys (file missing)
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 DomainService - c:\windows\system32\sihcsdvq.exe /service <Not Verified; ; DDC>
S2 cmdService (Command Service) - c:\windows\vghvbwfziejhcnjpzq\command.exe (file missing)
S2 Net Agent - c:\windows\dls0523pmw.exe (file missing)
S2 Network Monitor - c:\program files\network monitor\netmon.exe service (file missing)
-- Device Manager: Disabled ----------------------------------------------------
No disabled devices found.
-- Scheduled Tasks -------------------------------------------------------------
2007-08-09 20:20:51 366 --a------ C:\WINDOWS\Tasks\McAfee.com Scan for Viruses - My Computer (THOMAS-Thomas Barrie).job
2007-07-30 16:12:00 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
-- Files created between 2007-07-09 and 2007-08-09 -----------------------------
2007-08-09 20:43:08 449 --a------ C:\WINDOWS\system32\pfdnnt_actions.sys
2007-08-09 20:43:08 8704 --a------ C:\WINDOWS\system32\pfdnnt.exe <Not Verified; Panda Software International; Panda Anti-malware>
2007-08-09 20:32:18 69184 --a------ C:\WINDOWS\system32\vknmfgfw.dll
2007-08-09 20:29:18 125504 --a------ C:\WINDOWS\system32\ftocwdxy.dll
2007-08-09 20:28:46 75328 --a------ C:\WINDOWS\system32\sihcsdvq.exe <Not Verified; ; DDC>
2007-08-09 20:27:16 1732672 ---hs---- C:\WINDOWS\system32\ehkmp.bak2
2007-08-09 19:22:40 0 d-------- C:\Program Files\SpywareBlaster
2007-08-09 19:11:36 192584 --a------ C:\WINDOWS\system32\nwinqmdt.exe
2007-08-09 19:05:14 0 d-------- C:\WINDOWS\system32\ActiveScan
2007-08-09 17:15:24 0 d-------- C:\Documents and Settings\Thomas Barrie\Application Data\Ultimate Fixer
2007-08-09 16:49:31 135168 --a------ C:\WINDOWS\tk58.exe
2007-08-09 16:34:58 0 d-------- C:\WINDOWS\network diagnostic
2007-08-09 16
17 0 d-------- C:\Documents and Settings\Guest\Application Data\Macromedia
2007-08-09 16:00:43 0 d-------- C:\Documents and Settings\Guest\Application Data\Google
2007-08-09 16:00:41 0 d-------- C:\Documents and Settings\Guest\Application Data\GTek
2007-08-09 16:00:38 0 d-------- C:\Documents and Settings\Guest\Application Data\Real
2007-08-09 16:00:38 0 d-------- C:\Documents and Settings\Guest\Application Data\McAfee.com Personal Firewall
2007-08-09 16:00:23 0 dr------- C:\Documents and Settings\Guest\Favorites
2007-08-09 16:00:23 0 d-------- C:\Documents and Settings\Guest\Desktop
2007-08-09 16:00:23 0 d---s---- C:\Documents and Settings\Guest\Cookies
2007-08-09 16:00:23 0 dr-h----- C:\Documents and Settings\Guest\Application Data
2007-08-09 16:00:23 0 d-------- C:\Documents and Settings\Guest\Application Data\Sun
2007-08-09 16:00:23 0 d---s---- C:\Documents and Settings\Guest\Application Data\Microsoft
2007-08-09 16:00:23 0 d-------- C:\Documents and Settings\Guest\Application Data\Identities
2007-08-09 16:00:22 0 d--h----- C:\Documents and Settings\Guest\Templates
2007-08-09 16:00:22 0 dr------- C:\Documents and Settings\Guest\Start Menu
2007-08-09 16:00:22 0 dr-h----- C:\Documents and Settings\Guest\SendTo
2007-08-09 16:00:22 0 dr-h----- C:\Documents and Settings\Guest\Recent
2007-08-09 16:00:22 0 d--h----- C:\Documents and Settings\Guest\PrintHood
2007-08-09 16:00:22 786432 --ah----- C:\Documents and Settings\Guest\NTUSER.DAT
2007-08-09 16:00:22 0 d--h----- C:\Documents and Settings\Guest\NetHood
2007-08-09 16:00:22 0 dr------- C:\Documents and Settings\Guest\My Documents
2007-08-09 16:00:22 0 d--h----- C:\Documents and Settings\Guest\Local Settings
2007-08-09 15:48:43 0 d-------- C:\Program Files\Ultimate Fixer
2007-08-09 12:01:48 18761 --a------ C:\WINDOWS\system32\k.dat
2007-08-09 12:01:40 0 d-------- C:\WINDOWS\system32\hblbdnun
2007-08-09 12:01:40 0 d-------- C:\Program Files\SecCenter
2007-08-09 12:01:40 0 d-------- C:\Program Files\Ozqaguwk
2007-08-09 12:01:39 0 d-------- C:\Program Files\Brytaxrx
2007-08-09 12:01:36 0 d-------- C:\Program Files\dgtghudc
2007-08-09 08:27:07 6421 ---hs---- C:\WINDOWS\system32\ehkmp.bak1
2007-08-09 08:26:55 231520 --a------ C:\WINDOWS\system32\pmkhe.dll
2007-08-09 07:12:08 6421 ---hs---- C:\WINDOWS\system32\bdeeg.bak1
2007-08-09 07:12:01 231520 --a------ C:\WINDOWS\system32\geedb.dll
2007-08-09 07:07:04 57362 --a------ C:\WINDOWS\system32\lpdsrngm.exe <Not Verified; ; Browser Driver>
2007-08-09 07:05:41 69632 --a------ C:\WINDOWS\system32\3.exe <Not Verified; Microsoft; 3>
2007-08-09 07:05:20 169147 --a------ C:\WINDOWS\TTC-5555.exe
2007-08-09 07:05:19 26171 --a------ C:\WINDOWS\system32\wvuspqr.dll
2007-08-09 07:05:05 933 --a------ C:\WINDOWS\system32\winpfz32.sys
2007-08-09 07:05:01 30720 --a------ C:\WINDOWS\csrss.exe <Not Verified; TSoft; csrss>
2007-08-09 07:05:00 0 d-------- C:\WINDOWS\system32\f06WtR
2007-08-09 07:04:58 65536 --a------ C:\WINDOWS\system32\sdadlrow-t2.exe <Not Verified; .j..yljjkjlkjylj.j.yj.jy.jy.jy.jy.jy.jy; Project1>
2007-08-09 07:04:56 57354 --a------ C:\WINDOWS\system32\dwdsrngt.exe <Not Verified; ; Browser Driver>
2007-08-09 07:04:52 0 d-------- C:\Documents and Settings\NetworkService\Desktop
2007-08-09 07:04:52 0 d-------- C:\Documents and Settings\LocalService\Desktop
2007-08-09 07:02:41 0 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-08-09 06:46:39 224283 --a------ C:\WINDOWS\Setup167.exe
2007-08-02 08:43:59 282624 --a------ C:\Program Files\Common Files\hoketoz5555.dll
2007-07-31 12:04:27 0 d-------- C:\Documents and Settings\LocalService\Application Data\Macromedia
2007-07-29 18:45:19 0 d-------- C:\WINDOWS\fmuu
2007-07-29 18:45:19 0 d-------- C:\Program Files\Common Files\fmuu
2007-07-25 06:41:18 446976 --a------ C:\WINDOWS\b135.exe
2007-07-23 22:58:07 0 dr------- C:\Documents and Settings\LocalService\Favorites
2007-07-23 22:58:07 0 d-------- C:\Documents and Settings\LocalService\Application Data\Google
2007-07-23 17:04:01 0 d-------- C:\Documents and Settings\Thomas Barrie\Application Data\WinTouch
2007-07-23 16:53:59 72832 --a------ C:\WINDOWS\system32\drivers\core.sys
2007-07-23 16:49:03 687592 --a------ C:\WINDOWS\system32\atmtd.dll
2007-07-23 16:48:59 0 d--hs---- C:\WINDOWS\VGhvbWFzIEJhcnJpZQ
2007-07-23 16:48:59 0 d-------- C:\Program Files\Network Monitor
2007-07-23 16:48:59 0 d-------- C:\Documents and Settings\LocalService\Application Data\NetMon
2007-07-21 16:55:22 0 d-------- C:\Program Files\Outerinfo
2007-07-21 16:40:46 0 d-------- C:\Program Files\InetGet2
2007-07-21 15:42:58 0 d-------- C:\Program Files\ISM
2007-07-21 15:42:58 40183 ---hs---- C:\Program Files\Common Files\Yazzle1552OinUninstaller.exe
2007-07-21 15:31:56 180224 --a------ C:\WINDOWS\UninstallWSST.exe <Not Verified; ; UninstallEXE Application>
2007-07-21 15:31:56 28672 --a------ C:\WINDOWS\system32\ssconfig.exe <Not Verified; Auralis, Inc.; Auralis SSConfig>
2007-07-19 13:05:42 53248 --a------ C:\WINDOWS\uninst1017.exe <Not Verified; ; uninst1017>
2007-07-19 13:02:42 192512 --a------ C:\WINDOWS\i34yuc387.exe <Not Verified; ; q432gf65>
2007-07-17 10:27:12 56320 --a------ C:\WINDOWS\b122.exe
2007-07-11 05:29:38 28160 --a------ C:\WINDOWS\b103.exe
-- Find3M Report ---------------------------------------------------------------
2007-08-09 21:31:05 0 d-------- C:\Program Files\QuickTime
2007-08-09 21:20:52 0 d-------- C:\Program Files\Messenger
2007-08-09 21:20:18 0 d-------- C:\Program Files\iTunes
2007-08-09 21:18:33 0 d-------- C:\Program Files\Google
2007-08-09 21:07:49 0 d-------- C:\Program Files\DellSupport
2007-08-09 21
10 0 d-------- C:\Program Files\Common Files
2007-08-09 18:53:33 0 d-------- C:\Program Files\WildTangent
2007-08-09 18:51:38 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-08-09 18:51:38 0 d-------- C:\Program Files\CyberLink
2007-08-09 18:31:04 0 d-------- C:\Program Files\PacificPoker
2007-08-09 16:53:42 0 d-------- C:\Program Files\Sonic
2007-08-09 16:53:33 0 d-------- C:\Program Files\Common Files\Sonic Shared
2007-08-09 09:52:49 15026 --a------ C:\Documents and Settings\Thomas Barrie\Application Data\wklnhst.dat
2007-08-09 07:07:23 16 --a------ C:\Documents and Settings\Thomas Barrie\Application Data\.rdr.ini
2007-07-31 19:10:10 0 d-------- C:\Program Files\World of Warcraft
2007-07-27 10:31:45 21840 --a-----t C:\WINDOWS\system32\SIntfNT.dll
2007-07-27 10:31:45 17212 --a-----t C:\WINDOWS\system32\SIntf32.dll
2007-07-27 10:31:45 12067 --a-----t C:\WINDOWS\system32\SIntf16.dll
2007-07-08 12:02:35 16 --a------ C:\WINDOWS\popcinfo.dat
2007-07-06 14:40:24 192512 --a------ C:\WINDOWS\g4356cbvy63.exe <Not Verified; ; q432gf65>
2007-06-29 10:32:10 146944 ---hs---- C:\Program Files\Common Files\Yazzle1552OinAdmin.exe
2007-06-29 06:18:04 3350 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2007-06-29 06:18:03 56 -r-hs---- C:\WINDOWS\system32\BDED30B750.sys
2007-06-25 08:53:26 53248 --a------ C:\WINDOWS\uninst1014.exe <Not Verified; ; uninst1016>
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0625DAA8-3728-4FC8-A1BA-BCAFE1A50D95}]
08/09/2007 08:22 PM 70144 --------- C:\Program Files\Internet Explorer\lavunabiq356.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0FF078B0-0072-4FCA-AEDC-36C078A563D5}]
C:\Program Files\Common Files\hoketoz455101.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2E9D4C81-9F27-4c14-B804-7B0F6BC88A4F}]
07/18/2007 03:36 PM 172032 --a------ C:\Program Files\Outerinfo\Outerinfo.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{356EA4B8-0225-4C11-AF5E-B7CEE719E4D2}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3964D8D6-86D0-493A-B460-A805B5401114}]
08/09/2003 07:05 AM 31254 --------- C:\WINDOWS\system32\tuvvusr.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3E66438B-D364-DFEF-1A15-F88DB123D49D}]
C:\WINDOWS\system32\llbxjem.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{420C4981-32CC-AF09-C412-03797A5A3F37}]
08/09/2007 12:01 PM 94208 --a------ C:\Program Files\Brytaxrx\axwhrzbz.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53B5F2B1-94DD-43E5-8187-EB4E31F00701}]
C:\WINDOWS\system32\l3acdb.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6888721E-230F-43E7-837C-6DB442557C34}]
08/02/2007 08:43 AM 282624 --a------ C:\Program Files\Common Files\hoketoz5555.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6A43F7E2-7725-4730-97E6-912AAF914EC1}]
08/09/2007 08:26 AM 231520 --a------ C:\WINDOWS\system32\pmkhe.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9815DA81-2E0C-478c-90E4-06E474E704D0}]
07/11/2007 03:02 PM 192512 --------- C:\Program Files\ISM\BndDrive.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CF46BFB3-2ACC-441b-B82B-36B9562C7FF1}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [11/19/2003 06:48 PM]
"SigmatelSysTrayApp"="stsystra.exe" [03/23/2005 01:20 AM C:\WINDOWS\stsystra.exe]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [06/17/2005 08:56 AM]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [08/05/2005 10:05 PM]
"IntelMeM"="C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe" [09/03/2003 09:12 PM]
"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [02/23/2005 05:19 PM]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" []
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [06/10/2005 11:44 AM]
"DMXLauncher"="C:\Program Files\Dell\Media Experience\DMXLauncher.exe" [01/27/2005 02:02 AM]
"VSOCheckTask"="C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" [07/08/2005 07:18 PM]
"MCAgentExe"="c:\PROGRA~1\mcafee.com\agent\mcagent.exe" [09/22/2005 07:29 PM]
"MCUpdateExe"="C:\PROGRA~1\mcafee.com\agent\McUpdate.exe" [01/11/2006 01:05 PM]
"VirusScan Online"="C:\Program Files\McAfee.com\VSO\mcvsshld.exe" [08/10/2005 01:49 PM]
"MPFExe"="C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe" [11/11/2005 06:00 PM]
"OASClnt"="C:\Program Files\McAfee.com\VSO\oasclnt.exe" [08/11/2005 11:02 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [08/14/2006 03:55 PM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [09/24/2006 03:24 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [09/25/2006 02:54 PM]
"i34yuc387"="C:\WINDOWS\i34yuc387" []
"g4356cbvy63"="C:\WINDOWS\g4356cbvy63" []
"{85-52-22-2E-ZN}"="C:\windows\system32\lpdsrngm.exe" [08/09/2007 07:07 AM]
"bantool"="C:\WINDOWS\system32\sdadlrow-t2.exe" [08/09/2007 07:04 AM]
"horyk"="C:\Program Files\Windows Media Player\horyk22011.exe" [08/07/2007 03:30 PM]
"dgtghudc"="C:\Program Files\dgtghudc\tgfgjgva.dll" [08/09/2007 12:01 PM]
"csrss"="C:\WINDOWS\csrss.exe" [08/09/2007 12:01 PM]
"SC2"="C:\Program Files\SecCenter\scprot4.exe" [08/09/2007 12:01 PM]
"mezavkvd"="C:\Program Files\Ozqaguwk\mezavkvd.exe" [08/09/2007 12:01 PM]
"Ultimate Fixer"="C:\Program Files\Ultimate Fixer\UltimateFixer.exe" []
"ExploreUpdSched"="C:\WINDOWS\system32\nwinqmdt.exe" [08/09/2007 07:11 PM]
"SystemOptimizer"="C:\WINDOWS\system32\ftocwdxy.dll" [08/09/2007 08:29 PM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 11:24 AM]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [07/15/2007 03:12 PM]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [03/15/2007 11:09 AM]
"Cxqbik"="C:\Documents and Settings\Thomas Barrie\My Documents\??sks\w?crtupd.exe" []
"WinTouch"="C:\Documents and Settings\Thomas Barrie\Application Data\WinTouch\WinTouch.exe" []
"SfKg6w"="C:\Documents and Settings\Thomas Barrie\Application Data\Microsoft\Windows\nxqmbmr.exe" []
"fmuu"="C:\PROGRA~1\COMMON~1\fmuu\fmuum.exe" []
"ISMModule2"="C:\Program Files\ISM\ISMModule2.exe" [08/09/2007 12:14 PM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 06:00 AM]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
"WebBuying"=C:\Program Files\Web Buying\v1.8.1\webbuying.exe
"Outerinfo"="C:\Program Files\Outerinfo\Outerinfo.exe"
C:\Documents and Settings\Thomas Barrie\Start Menu\Programs\Startup\
TA_Start.lnk - C:\WINDOWS\system32\lpdsrngm.exe [8/9/2007 7:07:04 AM]
Think-Adz.lnk - C:\WINDOWS\system32\nwinqmdt.exe [8/9/2007 7:11:36 PM]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source= C:\Program Files\Internet Explorer\profsycyrtypr.html
FriendlyName=
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1]
Source= C:\Program Files\ComPlus Applications\profsycyrtypr.html
FriendlyName=
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{3964D8D6-86D0-493A-B460-A805B5401114}"= C:\WINDOWS\system32\tuvvusr.dll [08/09/2003 07:05 AM 31254]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\pmkhe]
C:\WINDOWS\system32\pmkhe.dll 08/09/2007 08:26 AM 231520 C:\WINDOWS\system32\pmkhe.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tuvvusr]
tuvvusr.dll 08/09/2003 07:05 AM 31254 C:\WINDOWS\system32\tuvvusr.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"= c:\windows\system32\ldcore.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"McShield"=2 (0x2)
"McDetect.exe"=2 (0x2)
"McTskshd.exe"=2 (0x2)
"mcupdmgr.exe"=3 (0x3)
"MpfService"=2 (0x2)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
AutoRun\command- K:\LaunchU3.exe -a
*Newly Created Service* - DOMAINSERVICE
-- End of Deckard's System Scanner: finished at 2007-08-09 at 22:09:10 ---------
EXTRA.TXT
Deckard's System Scanner v20070809.63
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft Windows XP Professional (build 2600) SP 2.0
Architecture: X86; Language: English
CPU 0: Intel(R) Pentium(R) D CPU 3.00GHz
CPU 1: Intel(R) Pentium(R) D CPU 3.00GHz
Percentage of Memory in Use: 70%
Physical Memory (total/avail): 1022.09 MiB / 301.7 MiB
Pagefile Memory (total/avail): 2458.45 MiB / 1905.55 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1952.3 MiB
C: is Fixed (NTFS) - 229.15 GiB total, 135.86 GiB free.
D: is CDROM (No Media)
E: is CDROM (No Media)
F: is Removable (No Media)
G: is Removable (No Media)
H: is Removable (No Media)
I: is Removable (No Media)
-- Security Center -------------------------------------------------------------
AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.
FirstRunDisabled is set.
AntiVirusDisableNotify is set.
FirewallDisableNotify is set.
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
"C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"="C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe:*:Enabled:Battlefield 2"
"C:\\Program Files\\Firefly Studios\\Stronghold 2\\Stronghold2.exe"="C:\\Program Files\\Firefly Studios\\Stronghold 2\\Stronghold2.exe:*:Enabled:Stronghold 2"
"C:\\Program Files\\Electronic Arts\\The Battle for Middle-earth (tm) II\\game.dat"="C:\\Program Files\\Electronic Arts\\The Battle for Middle-earth (tm) II\\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"="C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe:*:Enabled:AOL Loader"
"C:\\Program Files\\Common Files\\AOL\\1155945513\\ee\\aolsoftware.exe"="C:\\Program Files\\Common Files\\AOL\\1155945513\\ee\\aolsoftware.exe:*:Enabled:AOL Services"
"C:\\Program Files\\Common Files\\AOL\\1155945513\\ee\\aim6.exe"="C:\\Program Files\\Common Files\\AOL\\1155945513\\ee\\aim6.exe:*:Enabled:AIM"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\LucasArts\\Star Wars Empire at War\\GameData\\sweaw.exe"="C:\\Program Files\\LucasArts\\Star Wars Empire at War\\GameData\\sweaw.exe:*:Enabled:Star Wars: Empire at War"
"C:\\Program Files\\Morpheus\\Morpheus.exe"="C:\\Program Files\\Morpheus\\Morpheus.exe:*:Enabled:Morpheus"
"C:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword.exe"="C:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword.exe:*:Enabled:Sid Meier's Civilization 4 Beyond the Sword"
"C:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword_PitBoss.exe"="C:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword_PitBoss.exe:*:Enabled:Sid Meier's Civilization 4 Beyond the Sword Pitboss"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\WINDOWS\\system32\\sihcsdvq.exe"="C:\\WINDOWS\\system32\\sih"
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Thomas Barrie\Application Data
CLASSPATH=.;C:\Program Files\Java\j2re1.4.2_03\lib\ext\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=THOMAS
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Thomas Barrie
LOGONSERVER=\\THOMAS
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 4, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0404
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\j2re1.4.2_03\lib\ext\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\THOMAS~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\THOMAS~1\LOCALS~1\Temp
USERDOMAIN=THOMAS
USERNAME=Thomas Barrie
USERPROFILE=C:\Documents and Settings\Thomas Barrie
windir=C:\WINDOWS
__COMPAT_LAYER=EnableNXShowUI
-- User Profiles ---------------------------------------------------------------
Thomas Barrie
(admin)
Administrator
(admin)
Guest
(new local, guest)
-- Add/Remove Programs ---------------------------------------------------------
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
--> MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat - Reader 6.0.2 Update --> MsiExec.exe /I{AC76BA86-0000-0000-0000-6028747ADE01}
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Reader 6.0.1 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A00000000001}
AOL Uninstaller (Choose which Products to Remove) --> C:\Program Files\Common Files\AOL\uninstaller.exe
AOLIcon --> MsiExec.exe /I{62BD0AE0-4EB1-4BBB-8F43-B6400C8FEB2C}
Apple Software Update --> MsiExec.exe /I{5B433733-BB31-4B40-BCBA-DDED37626641}
ATI Control Panel --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Battlefield 2(TM) --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x9 -removeonly
Command --> wscript "C:\WINDOWS\VGhvbWFzIEJhcnJpZQ\p31SvqIWKHL1wBLDtk.vbs"
Cossacks II --> C:\Program Files\GSC Game World\Cossacks II\uninstall.exe
Dell Digital Jukebox Driver --> C:\Program Files\Dell\Digital Jukebox Drivers\DrvUnins.exe /s
Dell Driver Reset Tool --> MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}
Dell Media Experience --> MsiExec.exe /I{AC0EE5B0-A8FB-4D0A-AF03-2EDC518F841B}
DellSupport --> MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}
Digital Content Portal --> MsiExec.exe /I{6D5FCA42-1486-4E32-AFE8-1B7E2AA59D33}
Digital Photo Navigator 1.5 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7EF4BD8-CA13-11D5-AE3D-005004B8E30C}\Setup.exe" -l0x9
Doomsday --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{69464949-AD9C-4C98-933F-C32FFC86F3C8}\setup.exe" -l0x9
Enhanced Ads by Think-Adz removal --> C:\WINDOWS\system32\nwinqmdt.exe -UPop
Europa Universalis 2 --> C:\PROGRA~1\STRATE~1\EUROPA~1\UNWISE.EXE C:\PROGRA~1\STRATE~1\EUROPA~1\INSTALL.LOG
EW : Cossacks --> C:\WINDOWS\uncsetup.exe
GamersGate Downloader --> "C:\WINDOWS\unins000.exe"
GamersGate Downloader --> rundll32.exe dfshim.dll,ShArpMaintain GamersGate Downloader.application, Culture=neutral, PublicKeyToken=9c01b113621c7c67, processorArchitecture=msil
GamersGate Downloader --> rundll32.exe dfshim.dll,ShArpMaintain GGDownloader.application, Culture=neutral, PublicKeyToken=ee58c60ff97e94f1, processorArchitecture=msil
GamersGate Downloader - 1 --> rundll32.exe dfshim.dll,ShArpMaintain GGDownloader.application, Culture=neutral, PublicKeyToken=a9752e1358eb10ea, processorArchitecture=msil
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar4.dll"
Hearts of Iron 2 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98786147-80E3-41A5-A80C-1F3C028558CF}\setup.exe" -l0x9
Hearts of Iron 2 Doomsday Armageddon Patch 1.1 --> "C:\Program Files\Paradox Interactive\Doomsday\unins000.exe"
High Definition Audio Driver Package - KB835221 --> C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HP Image Zone 4.2 --> C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP PSC & OfficeJet 4.2 --> "C:\Program Files\HP\Digital Imaging\{A1062847-0846-427A-92A1-BB8251A91E91}\setup\hpzscr01.exe" -datfile hposcr04.dat
Intel Matrix Storage Manager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}\setup.exe" -l0409 -INTELUNINST
Intel(R) 537EP V9x DF PCI Modem --> rundll32 IntelCci.dll,iSMUninstallation "Intel(R) 537EP V9x DF PCI Modem"
Intel(R) PRO Network Connections Drivers --> Prounstl.exe
Intel(R) PROSet for Wired Connections --> MsiExec.exe /I{4CEA6811-DFAD-4892-828D-49941FE3B779}
Internet Explorer Default Page --> MsiExec.exe /I{35BDEFF1-A610-4956-A00D-15453C116395}
Internet Speed Monitor --> C:\Program Files\ISM\Uninstall.exe
iPod for Windows 2005-10-12 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D9F4A9F8-92C5-4289-9D04-F0F8F02D580A} /l1033
iPod for Windows 2006-01-10 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{3D047C15-C859-45F7-81CE-F2681778069B} /l1033
iTunes --> MsiExec.exe /I{5878FF02-3B8F-4309-B4E5-0D3DB6F2E8E6}
Java 2 Runtime Environment, SE v1.4.2_03 --> MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Learn2 Player (Uninstall Only) --> C:\Program Files\Learn2.com\StRunner\stuninst.exe
McAfee Personal Firewall Plus --> c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=mpf /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\mpfrem.ui::uninstall.htm
McAfee SecurityCenter --> c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=msc /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\screm.ui::uninstall.htm
McAfee VirusScan --> c:\PROGRA~1\mcafee.com\shared\mcappins.exe /v=3 /uninstall=1 /appid=vso /interact=1 /script_proactive=0 /start=c:\PROGRA~1\mcafee.com\agent\uninst\vsoremui.dll::uninstall.htm
MCU --> MsiExec.exe /I{D2988E9B-C73F-422C-AD4B-A66EBE257120}
Medieval - Total War (TM) - Viking Invasion (TM) --> C:\PROGRA~1\TOTALW~1\MEDIEV~1\Uninstall\Unwise.exe /u C:\PROGRA~1\TOTALW~1\MEDIEV~1\Uninstall\Install.log
Medieval II Total War --> C:\Program Files\InstallShield Installation Information\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}\Setup.exe -runfromtemp -l0x0009 -removeonly
Microsoft Encarta Encyclopedia Standard 2005 --> MsiExec.exe /I{05410044-64A6-4248-A026-9745C1E9E159}
Microsoft Money 2005 --> C:\Program Files\Microsoft Money 2005\MNYCoreFiles\Setup\uninst.exe /s:120
Microsoft Office Access 2003 --> MsiExec.exe /I{90150409-6000-11D3-8CFE-0150048383C9}
Microsoft Picture It! Premium 10 --> "C:\Program Files\Common Files\Microsoft Shared\Picture It!\RmvSuite.exe" ADDREMOVE=1 SKU=PREM
Microsoft Plus! Digital Media Edition Installer --> MsiExec.exe /X{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}
Microsoft Plus! Photo Story 2 LE --> MsiExec.exe /X{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}
Microsoft Rise Of Nations --> "C:\Program Files\Microsoft Games\Rise of Nations\UNINSTAL.EXE" /runtemp /addremove
Microsoft Streets and Trips 2005 --> MsiExec.exe /I{67E4EE98-59F4-4210-89A6-A20AF5BEC689}
Microsoft Web Publishing Wizard 1.52 --> RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie4x86.inf,WebPostUninstall
Microsoft Word 2002 --> MsiExec.exe /I{911B0409-6000-11D3-8CFE-0050048383C9}
Microsoft Works --> MsiExec.exe /I{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}
Microsoft Works 2005 Setup Launcher --> C:\Program Files\Microsoft Works Suite 2005\Setup\Launcher.exe /ARP D:\
Microsoft Works Suite Add-in for Microsoft Word --> MsiExec.exe /I{CB54ABA8-D67F-47AD-A76C-2631BADA9FE5}
Modem Event Monitor --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}\setup.exe" -l0x9
Modem Helper --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanel
Modem On Hold --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText
MovieShop --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F695596-85E6-4224-BC70-538F9036797A}\Setup.exe" -l0x9 /removeme/removeme
MSXML4 Parser --> MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
Network Monitor --> wscript "C:\WINDOWS\uninstall_nmon.vbs"
Ogg Vorbis Redistributable V 1.0b (vorbis1_0_public_release) --> "C:\Program Files\OggVorbis\unins000.exe"
OIN --> "C:\Program Files\Common Files\Yazzle1122OinUninstaller.exe"
Pacific Poker --> C:\PROGRA~1\PACIFI~1\UNWISE.EXE C:\PROGRA~1\PACIFI~1\INSTALL.LOG
Panda ActiveScan --> C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan
Photo Click --> MsiExec.exe /I{6E179C77-7335-458D-9537-4F4EAC0181ED}
PowerDVD 5.5 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
PQ DVD to iPod Video Converter (remove only) --> "C:\Program Files\PQDVD\PQ DVD to iPod Video Converter\bt-uninst.exe"
Qualxserve Service Agreement --> MsiExec.exe /X{0F756CD9-4A1E-409B-B101-601DDC4C03AA}
QuickTime --> MsiExec.exe /I{55BF0E5F-EA8E-4C13-A8B4-9E4857F5A2DE}
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Security Update for Step By Step Interactive Training (KB898458) --> "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Security Update for Step By Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Shockwave --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Sid Meier's Civilization 4 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}\setup.exe" -l0x9 -removeonly
Sid Meier's Civilization 4 - Beyond the Sword --> C:\Program Files\InstallShield Installation Information\{32E4F0D2-C135-475E-A841-1D59A0D22989}\setup.exe -runfromtemp -l0x0009 -removeonly
Sid Meier's Civilization 4 - Warlords --> C:\Program Files\InstallShield Installation Information\{3E4B349F-10B5-4586-9D99-489A90A8B228}\setup.exe -runfromtemp -l0x0009 -removeonly
SpywareBlaster v3.5.1 --> "C:\Program Files\SpywareBlaster\unins000.exe"
Star Wars Empire at War --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}\Setup.exe" -l0x9 -removeonly
Stronghold 2 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{16D2C649-CBA8-44EE-B730-12584667D487}\setup.exe" -l0x9 -removeonly
Stronghold Crusader --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8C3727F2-8E37-49E4-820C-03B1677F53B6}\setup.exe"
TargetSaver --> C:\WINDOWS\system32\tsuninst.exe /u
The Battle for Middle-earth (tm) II --> C:\Program Files\Electronic Arts\The Battle for Middle-earth (tm) II\EAUninstall.exe
The Print Shop --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB26EA24-AE01-4C86-BEBC-424D5B81E66E}\setup.exe" -l0x9 anything
Think-Adz Search Assistant removal --> C:\WINDOWS\system32\nwinqmdt.exe -USearch
Tropico --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{818FB39B-1A57-4F1B-A54D-391C33D6C596}\setup.exe" -l0x9
Tropico 2: Pirate Cove --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1A2000AF-79DE-47FB-8411-BA22F981917F}\setup.exe" -l0x9
Victoria --> C:\PROGRA~1\STRATE~1\Victoria\UNWISE.EXE C:\PROGRA~1\STRATE~1\Victoria\INSTALL.LOG
Victoria Revolutions 1.0 --> "C:\PROGRA~1\STRATE~1\Victoria\unins000.exe"
Viewpoint Media Player --> C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
WebCyberCoach 3.2 Dell --> "C:\Program Files\WebCyberCoach\b_Dell\WCC_Wipe.exe" "WebCyberCoach ext\wtrb" /inf "engine.inf,RealUninstallSection,,4" /infcfg "enginecf.inf,RealUninstallSection,,4"
World of Warcraft --> C:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft (5)\Uninstall.exe
WWI: The Great War --> C:\Program Files\Buka\WWI\Setup.exe -uninst
Xfire (remove only) --> "C:\Program Files\Xfire\uninst.exe"
-- Application Event Log -------------------------------------------------------
Event ID #16795: Error
Event Submitted/Written: 08/09/2007 09:15:37 PM
Event Source: Application Error
Event Description:
Faulting application iexplore.exe, version 7.0.6000.16473, faulting module hoketoz5555.dll, version 0.0.0.0, fault address 0x00006845.
Processing media-specific event for [iexplore.exe!ws!]
Event ID #16780: Warning
Event Submitted/Written: 08/09/2007 08:19:41 PM
Event Source: Userenv
Event Description:
Windows saved user THOMAS\Thomas Barrie registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event ID #16779: Warning
Event Submitted/Written: 08/09/2007 08:19:38 PM
Event Source: Userenv
Event Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.
Event ID #16777: Error
Event Submitted/Written: 08/09/2007 08:17:19 PM
Event Source: MsiInstaller
Event Description:
Product: Microsoft Word 2002 - Update '{DA256408-A2E7-41A5-8AD6-62ACB86A0FD7}' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support:
http://go.microsoft.com/fwlink/?LinkId=23127
Event ID #16776: Error
Event Submitted/Written: 08/09/2007 08:17:18 PM
Event Source: MsiInstaller
Event Description:
Product: Microsoft Word 2002 -- Error 1706. Setup cannot find the required files. Check your connection to the network, or CD-ROM drive. For other potential solutions to this problem, see C:\Program Files\Microsoft Office\Office10\1033\SETUP.HLP.
-- Security Event Log ----------------------------------------------------------
No Errors/Warnings found.
-- System Event Log ------------------------------------------------------------
Event ID #12218: Error
Event Submitted/Written: 08/09/2007 08:20:57 PM
Event Source: Service Control Manager
Event Description:
The Network Monitor service failed to start due to the following error:
%%2
Event ID #12217: Error
Event Submitted/Written: 08/09/2007 08:20:57 PM
Event Source: Service Control Manager
Event Description:
The Net Agent service failed to start due to the following error:
%%2
Event ID #12208: Error
Event Submitted/Written: 08/09/2007 08:17:25 PM
Event Source: Windows Update Agent
Event Description:
Installation Failure: Windows failed to install the following update with error 0x8024002d: Office XP Service Pack 3.
Event ID #12179: Error
Event Submitted/Written: 08/09/2007 07:53:09 PM
Event Source: Service Control Manager
Event Description:
The Network Monitor service failed to start due to the following error:
%%2
Event ID #12178: Error
Event Submitted/Written: 08/09/2007 07:53:09 PM
Event Source: Service Control Manager
Event Description:
The Net Agent service failed to start due to the following error:
%%2
-- End of Deckard's System Scanner: finished at 2007-08-09 at 22:09:10 ---------