Troj_bozy.a...??

sent
I forgot to put that n the subject line tho so sorry got ahead of myself n didnt finish reading.......a defect I have...sigh....
pulling up a command window now...brb

 

O yeah...much better..I think....lol its smaller n e way.


"DisplayName "= "Adobe® Photoshop® Album Starter Edition 3.2 "
"UninstallString "=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\
"QuietUninstallString "= "Rundll32 IedkCS32.dll,BrandCleanInstallStubs "
"UninstallString "= "RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\PROFES~1\\RunTime\\09\\01\\Intel32\\Ctor.dll,LaunchSetup \ "C:\\Program Files\\InstallShield Installation Information\\{700932B3-A964-4878-82A2-96054622A1F7}\\setup.exe\" -l0x9 /remove "
"UninstallString "= "\ "C:\\Program Files\\Creative Installation Information\\E-CENTER_PLUGIN_CDBURNER_U\\Setup.exe\" /remove /l0x0009 "
"UninstallString "= "\ "C:\\Program Files\\Creative Installation Information\\E-CENTER_PLUGIN_MUSICPLAYER_MSS_U\\Setup.exe\" /remove /l0x0009 "
"UninstallString "= "\ "C:\\Program Files\\Creative Installation Information\\E-CENTER_NET_CONTENT_U\\Setup.exe\" /remove /l0x0009 "
"UninstallString "= "\ "C:\\Program Files\\Creative Installation Information\\E-CENTER_PLUGIN_NOMADJUKEBOXTYPE2_U\\Setup.exe\" /remove /l0x0009 "
"UninstallString "= "\ "C:\\Program Files\\Creative Installation Information\\E-CENTER_PLUGIN_ONLINESTORE_U\\Setup.exe\" /remove /l0x0009 "
"UninstallString "= "\ "C:\\Program Files\\Creative Installation Information\\MEDIASOURCE_PLAYER_SKINPACK_U\\Setup.exe\" /remove /l0x0009 "
"UninstallString "= "\ "C:\\Program Files\\Creative Installation Information\\E-CENTER_PLUGIN_MTP_U\\Setup.exe\" /remove /l0x0009 "
"UninstallString "= "\ "C:\\Program Files\\Creative Installation Information\\CREATIVE_MEDIASOURCE_U\\Setup.exe\" /remove /l0x0009 "
"DisplayName "= "HijackThis 2.0.2 "
"UninstallString "= "C:\\Program Files\\InstallShield Installation Information\\{3AE00DF4-ADF1-479E-834C-D1B2E71570BD}\\setup.exe -runfromtemp -l0x0409 "
"DisplayName "= "YouSendIt Application Plug-in SDK "
"UninstallString "= "C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\Driver\\7\\INTEL3~1\\IDriver.exe /M{52504CE6-E909-4113-B232-4AFEC6543A61} /l1033 "
"DisplayName "= "Broadcom 440x 10/100 Integrated Controller "
"UninstallString "= "C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\Driver\\9\\INTEL3~1\\IDriver.exe /M{97AE00A8-1336-410F-B467-1C6623127BD6} "
"DisplayName "= "DesignPro 5.0 Limited Edition "
"UninstallString "= "C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\Driver\\11\\INTEL3~1\\IDriver.exe /M{C21D5524-A970-42FA-AC8A-59B8C7CDCA31} /l1033 "
"DisplayName "= "QuickTime "
"UninstallString "= "C:\\Program Files\\InstallShield Installation Information\\{E0EE81CC-A5DB-4535-8990-16ED39D67F99}\\setup.exe -runfromtemp -l0x0409 "
"DisplayName "= "YouSendIt Application "
"DisplayName "= "Security Update for CAPICOM (KB931906) "
"ParentDisplayName "= "CAPICOM "
"UninstallString "= "MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} "
"DisplayName "= "LimeWire 4.16.6 "
"UninstallString "= "\ "D:\\LimeWire\\uninstall.exe\" "
"UninstallString "= "msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} "
"DisplayName "= "Microsoft .NET Framework 1.1 "
"UninstallString "= "rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\\WINDOWS\\INF\\PCHealth.inf "
"QuietUninstallString "= "rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\\WINDOWS\\INF\\PCHealth.inf "
"DisplayName "= "Windows Media Format 11 runtime "
"UninstallString "= "\ "C:\\Program Files\\Windows Media Player\\wmsetsdk.exe\" /UninstallAll "
"ParentDisplayName "=" "
"DisplayName "= "Windows Media Player 11 "
"UninstallString "= "\ "C:\\Program Files\\Windows Media Player\\Setup_wm.exe\" /Uninstall "
"ParentDisplayName "=" "
"UninstallString "= "C:\\PROGRA~1\\Yahoo!\\Common\\UNYT_W~1.EXE "
"DisplayName "= "Yahoo! ¤u¨Ã£¦C "
"UninstallString "= "C:\\PROGRA~1\\Yahoo!\\Common\\UNIN_Y~1.EXE /S "
"DisplayName "= "Yahoo! Browser Services "
"DisplayName "= "Yahoo! Internet Mail "
"UninstallString "= "C:\\WINDOWS\\system32\\regsvr32 /u /s C:\\PROGRA~1\\Yahoo!\\Common\\YMMAPI.dll "
"DisplayName "= "Yahoo! Messenger "
"UninstallString "= "C:\\PROGRA~1\\Yahoo!\\MESSEN~1\\UNWISE.EXE /U C:\\PROGRA~1\\Yahoo!\\MESSEN~1\\INSTALL.LOG "
"UninstallString "= "C:\\PROGRA~1\\Yahoo!\\Common\\UNYT_W~1.EXE "
"DisplayName "= "Yahoo! Install Manager "
"UninstallString "= "C:\\WINDOWS\\system32\\regsvr32 /u C:\\PROGRA~1\\Yahoo!\\Common\\YINSTH~1.DLL "
"DisplayName "= "Google Toolbar for Internet Explorer "
"UninstallString "= "regsvr32 /u /s \ "c:\\program files\\google\\googletoolbar1.dll\" "
"UninstallString "= "RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\engine\\6\\INTEL3~1\\Ctor.dll,LaunchSetup \ "C:\\Program Files\\InstallShield Installation Information\\{363435F2-7426-11D8-9966-00A0C9663221}\\setup.exe\" -l0x9 "
"UninstallString "= "RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\PROFES~1\\RunTime\\09\\01\\Intel32\\Ctor.dll,LaunchSetup \ "C:\\Program Files\\InstallShield Installation Information\\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\\setup.exe\" -l0x9 "
"UninstallString "=hex(2):4d,00,73,00,69,00,45,00,78,00,65,00,63,00,2e,00,65,00,\
"DisplayName "= "SystemSuite 8 Professional "
"UninstallString "= "RunDll32 C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\PROFES~1\\RunTime\\09\\01\\Intel32\\Ctor.dll,LaunchSetup \ "C:\\Program Files\\InstallShield Installation Information\\{700932B3-A964-4878-82A2-96054622A1F7}\\setup.exe\" -l0x9 "

 

did i do something wrong?

 

wunderful...

 

Hi NmymindDzine

Please give us some time, we're working on it.

Thanks
Geri

 

Hi

We are still working on a fix for the add/remove problem,

In the mean time you said you would get rid of P2P.
So lets do that.
Click on start > Run,
Paste these on the Run line one at a time and click OK.

D:\LimeWire\uninstall.exe

"C:\Program Files\BitTorrent\BitTorrent.exe" /UNINSTALL

Please do this..
Click Start>Run in the run box copy and paste or type ComboFix /u then hit Enter to uninstall ComboFix and remove the files/folders it created.

Delete these.

This Tool
dss.exe

This folder.
C:\Deckard

Now lets get a on-line scan.

Please do an online scan with Kaspersky WebScanner

Click on “Accept” If your pop –up blocker blocks the ActiveX download, allow it, click on “Accept” again

You will be promted to install an ActiveX component from Kaspersky, Click Yes or Install.

• The program will launch and then begin downloading the latest definition files:
• Once the files have been downloaded click on NEXT
  
• Now click on Scan Settings
• In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  • Extended (if available otherwise Standard)
  • Scan Options:
  • Scan Archives
    Scan Mail Bases
• Click OK
• Now under select a target to scan:
  • Select My Computer
• This will start the program and scan your system.
• The scan will take a while so be patient and let it run.
• Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
• Save the file to your desktop.
• Copy and paste that information in your next post.

Please post the Kaspersky results.

Thanks
Geri

 

will do
sorry real life...

 

no deckard folder ...was deckard2...deleted it tho
what about c:\combofix?

 

BTW......
ty
tyvm
I have a job now and am trying to move on my own
i will gladly donate when I can...I will make sure I do....
ty again

 

finally...

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, March 28, 2008 2:04:51 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 27/03/2008
Kaspersky Anti-Virus database records: 667680
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 168218
Number of viruses found: 8
Number of infected objects: 21
Number of suspicious objects: 0
Duration of the scan process: 04:06:06

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Shared\Wicked Remix (cocky).wma Infected: Trojan-Downloader.WMA.Wimad.l skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\backup-20070923-144249-298.dll.bac_a02732 Infected: not-a-virus:AdWare.Win32.Virtumonde.vr skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\backup-20070923-144249-451.dll.bac_a02732 Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\Crypted_PAINBot.exe.bac_a02732 Infected: Virus.Win32.Sality.o skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\MigPol.exe.bac_a02732 Infected: Virus.Win32.Sality.o skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\MigPolWin.exe.bac_a02732 Infected: Virus.Win32.Sality.o skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\T-1402996-_ORGASM _ rock n roll trivia SVCD Dirty.zip.bac_a02732/Setup.exe Infected: not-virus:Hoax.Win32.Agent.o skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\T-1402996-_ORGASM _ rock n roll trivia SVCD Dirty.zip.bac_a02732 ZIP: infected - 1 skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\T-1402996-_ORGASM _ rock n roll trivia SVCD Dirty.zip.bac_a02732 CryptFF.b: infected - 1 skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\T-1452660-_PANTHEON_ rock n roll trivia SVCD (Music).zip.bac_a02732/Setup.exe Infected: not-virus:Hoax.Win32.Agent.o skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\T-1452660-_PANTHEON_ rock n roll trivia SVCD (Music).zip.bac_a02732 ZIP: infected - 1 skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\T-1452660-_PANTHEON_ rock n roll trivia SVCD (Music).zip.bac_a02732 CryptFF.b: infected - 1 skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\T-1502836-_XTC_ rock n roll trivia [Full] [Radio.Version].zip.bac_a02732/Setup.exe Infected: not-virus:Hoax.Win32.Agent.o skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\T-1502836-_XTC_ rock n roll trivia [Full] [Radio.Version].zip.bac_a02732 ZIP: infected - 1 skipped
C:\Documents and Settings\sASSy\.housecall6.6\Quarantine\T-1502836-_XTC_ rock n roll trivia [Full] [Radio.Version].zip.bac_a02732 CryptFF.b: infected - 1 skipped
C:\Documents and Settings\sASSy\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\Application Data\Microsoft\Windows Media\11.0\WMSDKNSD.XML Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\History\History.IE5\MSHist012008032720080328\index.dat Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\Temp\~DFA69.tmp Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\Temp\~DFABC.tmp Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\Temp\~DFDB1E.tmp Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\sASSy\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\sASSy\My Documents\DL\fresh\freshview.exe/file23 Infected: Backdoor.Win32.Delf.hms skipped
C:\Documents and Settings\sASSy\My Documents\DL\fresh\freshview.exe Inno: infected - 1 skipped
C:\Documents and Settings\sASSy\My Documents\DL\pass\ophcrack-win32-installer-2.4.exe/file36 Infected: not-a-virusSWTool.Win32.PWDump.2 skipped
C:\Documents and Settings\sASSy\My Documents\DL\pass\ophcrack-win32-installer-2.4.exe/file64 Infected: not-a-virusSWTool.Win32.PWDump.d skipped
C:\Documents and Settings\sASSy\My Documents\DL\pass\ophcrack-win32-installer-2.4.exe/file65 Infected: not-a-virusSWTool.Win32.PWDump.d skipped
C:\Documents and Settings\sASSy\My Documents\DL\pass\ophcrack-win32-installer-2.4.exe Inno: infected - 3 skipped
C:\Documents and Settings\sASSy\ntuser.dat Object is locked skipped
C:\Documents and Settings\sASSy\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{D6677667-73FC-44F0-AD67-604FC48BA7D4}\RP1\change.log Object is locked skipped
C:\WINDOWS\CSC\00000001 Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{00EEEE39-161B-49C7-B814-E112ED459CB0}.crmlog Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{E35103B1-957C-40AA-9FEC-BCE36C17AAEB}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\checksum.dat Object is locked skipped
D:\MXFwIMMF.dat Object is locked skipped
D:\MXFwTMMF.dat Object is locked skipped
D:\rawpacket.log Object is locked skipped
D:\security.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\traffic.log Object is locked skipped
D:\xacl.cfg Object is locked skipped

Scan process completed.

 

now I cant burn a cd...
I recently installed a new lite on dvd drv & been havin trouble with windows recognizing it. It says its a rom...its not. Device manager has the right make n model. I figured out my software was outdated and got imgburn and everything was gr8, but I tried to burn a cd 2nite, & it said sumthing about the volume being locked....
media player is throwing up an install window that flashes really fast, off n on i try hard to hit cancel & it shuts it off, the cam does the same thing resulting in IE crashing also tho...
Dont know if its all related, but wanted to give u some more knowledge about what was going on...

 

Hi NmymindDzine

Please do this.

Delete everything in the housecall 6.6 Quarantine folder.

Then delete these folders.

C:\Documents and Settings\sASSy\My Documents\DL\fresh
C:\Documents and Settings\sASSy\My Documents\DL\pass

As for Add/Remove,
I can't find a specific fix.
Here is a link with a number of options, not sure if they apply to your specific problem though.
http://groups.google.com/groups?q=a...&hs=zK8&um=1&ie=UTF-8&sa=X&oi=groups&ct=title

You might post this problem in the Windows XP forum, someone there might have a idea.

Geri

 

house call...where is it....
i guess i will do a search
ty

 

Hi

C:\Documents and Settings\sASSy\.housecall6.6\Quarantine

As far as the CD problem, it sounds like a software or hardware problem.

You should post that in those forums, Someone there may have ideas for a solution.

Geri