![]() |
![]() |
![]() |
|||||
![]() |
![]() |
![]() |
![]() |
![]() |
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| HijackThis Log Help Get Rid Of Malware With Help From Our Analysts. Follow the "First Steps" link at the top right of each page before posting for help. |
![]() |
|
|
Thread Tools |
|
|
#1 (permalink) | |
|
Registered User
Join Date: Jun 2007
Posts: 38
OS: xp sp2 home
|
missing remove progarm links add-remove programs
I hope i'm posting correctly, i originally posted on the xp forum.
problem, no remove links at the add-remove programs in control panel. most listings on the program list are not really programs, when i googled the listings it comes back with links about malware. most of the programs that are actually installed on the pc are not listed at add-remove programs. Quote:
Last edited by imchar : 06-03-2007 at 09:45 PM. Reason: left out some information |
|
|
|
|
|
|
#2 (permalink) |
|
Registered User
Join Date: Jun 2007
Posts: 38
OS: xp sp2 home
|
Re: missing remove progarm links add-remove programs
I couldn't figure out how to put in an attachment so here is the second file
Deckard's System Scanner v20070603.47 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Home Edition (build 2600) SP 2.0 Architecture: X86; Language: English CPU 0: Intel(R) Pentium(R) III Mobile CPU 1000MHz Percentage of Memory in Use: 53% Physical Memory (total/avail): 511.37 MiB / 238.2 MiB Pagefile Memory (total/avail): 1249.07 MiB / 1049.4 MiB Virtual Memory (total/avail): 2047.88 MiB / 1957.54 MiB C: is Fixed (NTFS) - 18.63 GiB total, 6.1 GiB free. D: is CDROM (No Media) F: is Removable (No Media) -- Security Center ------------------------------------------------------------- AUOptions is scheduled to auto-install. Windows Internal Firewall is enabled. FirstRunDisabled is set. AV: AVG 7.5.472 v7.5.472 (GRISOFT) [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\SAGENT4.EXE"="C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\SAGENT4.EXE:*:Enabled:SAgent4" "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger" "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger" "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server" "C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" "C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Run a DLL as an App" "C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"="C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe:*:Enabled:Kodak Software Updater" "C:\\Program Files\\Kodak\\Kodak EasyShare Software\\bin\\EasyShare.exe"="C:\\Program Files\\Kodak\\Kodak EasyShare Software\\bin\\EasyShare.exe:*:Enabled:EasyShare" "C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"="C:\\Program Files\\Grisoft\\AVG7\\avginet.exe:*:Enabled:avginet.exe" "C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe:*:Enabled:avgamsvr.exe" "C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe:*:Enabled:avgcc.exe" "C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe:*:Enabled:avgemc.exe" "C:\\Program Files\\Infogrames Interactive\\Scrabble Complete\\ScrabbleComplete.exe"="C:\\Program Files\\Infogrames Interactive\\Scrabble Complete\\ScrabbleComplete.exe:*:Enabled:Scrabble Complete" "C:\\WINDOWS\\system32\\dplaysvr.exe"="C:\\WINDOWS\\system32\\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper" -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\Judith\Application Data CLASSPATH=.;C:\Program Files\Java\jre1.6.0_01\lib\ext\QTJava.zip CLIENTNAME=Console CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=JUDY-DELL ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Judith LOGONSERVER=\\JUDY-DELL NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\QuickTime\QTSystem\ PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 6 Model 11 Stepping 1, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=0b01 ProgramFiles=C:\Program Files PROMPT=$P$G QTJAVA=C:\Program Files\Java\jre1.6.0_01\lib\ext\QTJava.zip SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\Judith\LOCALS~1\Temp TMP=C:\DOCUME~1\Judith\LOCALS~1\Temp USERDOMAIN=JUDY-DELL USERNAME=Judith USERPROFILE=C:\Documents and Settings\Judith windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- Judith (admin) Administrator (new local, admin) -- Add/Remove Programs --------------------------------------------------------- Ad-Aware SE Personal --> MsiExec.exe /X{78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747} KODAK EASYSHARE Gallery Easy Upload, v2.1 --> C:\Documents and Settings\Judith\Local Settings\Application Data\KodakGallery\EasyShareSetup\$SETUP_140007_4405fc\Setup.exe /APR-REMOVE Lavasoft VX2 Cleaner --> C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\INSTALL.LOG Panda ActiveScan --> C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan SpywareBlaster v3.5.1 --> "C:\Program Files\SpywareBlaster\unins000.exe" -- End of Deckard's System Scanner: finished at 2007-06-03 at 20:18:10 --------- |
|
|
|
|
|
#3 (permalink) |
|
Registered User
Join Date: Jun 2007
Posts: 38
OS: xp sp2 home
|
Re: missing remove progarm links add-remove programs
i ran a search for the items listed at add-remove programs that don't look like programs, they are actually file names for my kodak easy share program. that is the program that comes with the camera and sorts the pictures and you can do some tweaking to the pics. it also has an up-link most of the files listed in the add-remove programs window have to do with the up-link
thought the info might help thanks, char |
|
|
|
|
|
#5 (permalink) | |
|
Expert Analyst, Moderator, Security Team
Join Date: Sep 2006
Posts: 1,341
OS: xp
|
Re: missing remove progarm links add-remove programs
Hi
It looks differant that as your dds report ? Quote:
Copy the contents of the code box below into a new notepad document (not wordpad). Click file> save as...> call it check.bat > file types *all files*> and save it to desktop. Code:
regedit /e first.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" regedit /e second.txt "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" type first.txt >>log.txt echo.---->>log.txt type second.txt >>log.txt del /q first.txt second.txt start notepad log.txt |
|
|
|
|
|
|
#6 (permalink) |
|
Registered User
Join Date: Jun 2007
Posts: 38
OS: xp sp2 home
|
Re: missing remove progarm links add-remove programs
dds report?
"Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lavasoft VX2 Cleaner] "DisplayName"="Lavasoft VX2 Cleaner" "UninstallString"="C:\\PROGRA~1\\Lavasoft\\AD-AWA~1\\Plugins\\UNWISE.EXE C:\\PROGRA~1\\Lavasoft\\AD-AWA~1\\Plugins\\INSTALL.LOG" "DisplayIcon"="C:\\PROGRA~1\\Lavasoft\\AD-AWA~1\\Plugins\\vx2cleaner.dll,-0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda ActiveScan] "DisplayIcon"="C:\\WINDOWS\\system32\\pavas.ico" "UninstallString"="C:\\WINDOWS\\system32\\ASUninst.exe Panda ActiveScan" "Publisher"="Panda Software S.L." "DisplayName"="Panda ActiveScan" "Icono4"="pavas" "Idioma"="2" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpywareBlaster_is1] "Inno Setup: Setup Version"="5.1.5" "Inno Setup: App Path"="C:\\Program Files\\SpywareBlaster" "InstallLocation"="C:\\Program Files\\SpywareBlaster\\" "Inno Setup: Icon Group"="SpywareBlaster" "Inno Setup: User"="Judith" "Inno Setup: Selected Tasks"="iconondesktop" "Inno Setup: Deselected Tasks"="" "DisplayName"="SpywareBlaster v3.5.1" "DisplayIcon"="C:\\Program Files\\SpywareBlaster\\spywareblaster.exe" "UninstallString"="\"C:\\Program Files\\SpywareBlaster\\unins000.exe\"" "QuietUninstallString"="\"C:\\Program Files\\SpywareBlaster\\unins000.exe\" /SILENT" "DisplayVersion"="3.5.1" "Publisher"="Javacool Software LLC" "URLInfoAbout"="http://www.javacoolsoftware.com/" "NoModify"=dword:00000001 "NoRepair"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747}] "DisplayIcon"="C:\\Program Files\\Lavasoft\\Ad-Aware SE Personal\\Ad-Aware.exe,0" "AuthorizedCDFPrefix"="" "Comments"="" "Contact"="" "DisplayVersion"="1.0.6" "HelpLink"=hex(2):68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,77,00,77,00,77,00,\ 2e,00,6c,00,61,00,76,00,61,00,73,00,6f,00,66,00,74,00,73,00,75,00,70,00,70,\ 00,6f,00,72,00,74,00,2e,00,63,00,6f,00,6d,00,00,00 "HelpTelephone"="" "InstallDate"="20070603" "InstallLocation"="" "InstallSource"="C:\\Program Files\\Common Files\\Wise Installation Wizard\\" "ModifyPath"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,78,\ 00,65,00,20,00,2f,00,58,00,7b,00,37,00,38,00,43,00,43,00,33,00,42,00,41,00,\ 42,00,2d,00,44,00,45,00,32,00,41,00,2d,00,34,00,46,00,42,00,34,00,2d,00,38,\ 00,46,00,42,00,42,00,2d,00,45,00,34,00,44,00,41,00,44,00,44,00,43,00,32,00,\ 36,00,37,00,34,00,37,00,7d,00,00,00 "NoModify"=dword:00000001 "Publisher"="Lavasoft AB" "Readme"="" "Size"="" "EstimatedSize"=dword:00000de5 "UninstallString"=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\ 78,00,65,00,20,00,2f,00,58,00,7b,00,37,00,38,00,43,00,43,00,33,00,42,00,41,\ 00,42,00,2d,00,44,00,45,00,32,00,41,00,2d,00,34,00,46,00,42,00,34,00,2d,00,\ 38,00,46,00,42,00,42,00,2d,00,45,00,34,00,44,00,41,00,44,00,44,00,43,00,32,\ 00,36,00,37,00,34,00,37,00,7d,00,00,00 "URLInfoAbout"="http://www.lavasoft.com" "URLUpdateInfo"="http://www.lavasoft.com" "VersionMajor"=dword:00000001 "VersionMinor"=dword:00000000 "WindowsInstaller"=dword:00000001 "Version"=dword:01000006 "Language"=dword:00000409 "DisplayName"="Ad-Aware SE Personal" ---- Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9863F141-7A33-4c9a-A5F2-96996461B216}] "DisplayIcon"="C:\\Documents and Settings\\Judith\\Local Settings\\Application Data\\KodakGallery\\EasyShareSetup\\$SETUP_140007_4405fc\\Setup.exe,0" "DisplayName"="KODAK EASYSHARE Gallery Easy Upload, v2.1" "NoModify"=dword:00000001 "NoRemove"=dword:00000000 "NoRepair"=dword:00000001 "UninstallString"="C:\\Documents and Settings\\Judith\\Local Settings\\Application Data\\KodakGallery\\EasyShareSetup\\$SETUP_140007_4405fc\\Setup.exe /APR-REMOVE" "ModifyPath"="C:\\Documents and Settings\\Judith\\Local Settings\\Application Data\\KodakGallery\\EasyShareSetup\\$SETUP_140007_4405fc\\Setup.exe /APR-MODIFY" "URLUpdateInfo"="http://www.kodakgallery.com/" "Publisher"="KODAK EASYSHARE Gallery"" here's the file, i don't know how to send you the add remove programs list. oh, i noticed just a bit ago that of all the programs that are on the list the kodak program is the only program that was has the remove link still available. thanks for the response char Last edited by imchar : 06-05-2007 at 11:54 PM. Reason: forgot question |
|
|
|
|
|
#7 (permalink) |
|
Expert Analyst, Moderator, Security Team
Join Date: Sep 2006
Posts: 1,341
OS: xp
|
Re: missing remove progarm links add-remove programs
" it also has an up-link most of the files listed in the add-remove programs window have to do with the up-link"
Open add or remove programs > press the prtscr/sysrq key on your keybourd open windows paint program , go edit > paste then save that to your desktop post a reply (say something) near the bottom is an manage attachments button, use that and attach that screenshot please. |
|
|
|
|
|
#8 (permalink) |
|
Registered User
Join Date: Jun 2007
Posts: 38
OS: xp sp2 home
|
i tried to edit last post but it was too late. add remove programs was fine untill i 1- uninstalled real games player with their uninstall 2-installed ms media player, the newest version.
kodak easy share is the only program that still has a link to remove it, most of the items on the add-remove list are actually files for the kodak program. most of my programs are not listed on the list. here's the list thanks, char Last edited by imchar : 06-06-2007 at 12:37 AM. Reason: didn't look like it had an attachment |
|
|
|
|
|
#9 (permalink) | |
|
Registered User
Join Date: Jun 2007
Posts: 38
OS: xp sp2 home
|
Re: missing remove progarm links add-remove programs
Quote:
and the file isn't attached, when i tried to attach from this screen it popped up that there was an error. i'm going to delete the file ane make a new one and try again. char Last edited by imchar : 06-06-2007 at 01:01 AM. Reason: more information |
|
|
|
|
|
|
#11 (permalink) |
|
Expert Analyst, Moderator, Security Team
Join Date: Sep 2006
Posts: 1,341
OS: xp
|
Re: missing remove progarm links add-remove programs
Thats realy odd
Have you tried the obvios yet, put back whatever your registry cleaner program removed lately, reboot the pc and peak in addremove again ? If that didnt help uninstall that kodak program (temporaraly) go start run and paste in its uninstall command C:\Docume~1\Judith\LocalS~1\Applica~1\KodakGallery\EasyShareSetup\$SETUP_140007_4405fc\Setup.exe /APR-REMOVE And again reboot the pc and check addremove, any Luck ? Last edited by LonnyRJones : 06-06-2007 at 03:56 AM. |
|
|
|
|
|
#12 (permalink) |
|
Registered User
Join Date: Jun 2007
Posts: 38
OS: xp sp2 home
|
Re: missing remove progarm links add-remove programs
i haven't done anything, the error was so weird i didn't want to do the wrong thing.
k, i restored the registry to 6-3-07 backup, but when i pasted at the run i got a window said it couldn't find the file. that program does have a link at add-remove programs, want me to try that? |
|
|