Help with Spyware - HJT log & "Installed Programs" posted

Please help.
I'm working on a friend’s machine. I have cleared out a lot of stuff but I just know there's got to be a few things left to get rid of. :

Thanks
Bob

This is the HJT and Installed Programs log files:
---------------------------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 8:47:04 PM, on 3/30/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\windows\system\hpsysdrv.exe
C:\Windows\system32\HpSrvUI.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Visioneer OneTouch\OneTouchMon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\LTMSG.exe
C:\WINDOWS\system32\wuauclt.exe
c:\Program Files\Microsoft Money\System\urlmap.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HJThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [hp Silent Service] C:\Windows\system32\HpSrvUI.exe
O4 - HKLM\..\Run: [hpScannerFirstBoot] c:\hp\drivers\scanners\scannerfb.exe
O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [DDCM] "C:\Program Files\WildTangent\DDC\DDCManager\DDCMan.exe" -Background
O4 - HKLM\..\Run: [DDCActiveMenu] "C:\Program Files\WildTangent\DDC\ActiveMenu\DDCActiveMenu.exe" -boot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [checktime] c:\program files\HPSelect\Frontend\ct.exe
O4 - HKLM\..\Run: [OneTouch Monitor] C:\Program Files\Visioneer OneTouch\OneTouchMon.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe "
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Microsoft Works Update Detection] c:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [PPWebCap] C:\PROGRA~1\ScanSoft\PAPERP~1\PPWebCap.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe "
O4 - HKCU\..\Run: [PopUpStopperCompanion] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSComp.exe "
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-beta.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {E04EAE82-14AD-41CB-BF5A-45556ABB8347} - http://esupport.aol.com/help/engine/aolcinst.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
--------------------------------------------------------

INSTALLED SOFTWARE (127) - COMPUTER10 - 3/30/2005 8:47:56 PM

1 Point Sex
Access 2000 Beginning
Ad-Aware SE Personal
Adobe Acrobat 5.0 Ver: 5.0
America Online
An Island Adventure (Remove only)
An Ocean Adventure (Remove only)
Atomic Pop
Blasterball Wild
Caillou(R) Birthday Party(TM)
Caillou(R) Magic Playhouse(TM)
CC_ccStart Ver: 2.1.0.610 Installed: 2/15/2004
ccCommon Ver: 2.1.0.610 Installed: 2/15/2004
Dark Orbit
Detto IntelliMover
Digital Camera Plus Manager
Disney's Active Play LKII, Simba's Pride Demo
Disney's Active Play, A Bug's Life
Dragon NaturallySpeaking Standard
Easy Internet Sign-up
GemMaster 2
GrammarPro
HijackThis 1.99.1 Ver: 1.99.1
House v1.1.0f
hp center
HP DeskJet 610C Series (Remove only)
HP Instant Support
HP Learning Adventure
HP RecordNow Ver: 3.10 Installed: 2/5/2002
IBM ViaVoice Gold Command Runtime, Version 4.3
Inactive HP Printer Drivers (Remove only)
Inactive HP ScanJet Drivers (Remove only)
InterActual Player
InterVideo WinDVD
JumpStart Languages
JumpStart Spanish v1.0
KazooStudio
KBD
Learn Inglés Your Way
Learn To Speak English 8.0
Lernout & Hauspie TruVoice American English TTS Engine
LiveReg (Symantec Corporation) Ver: 2.4.2.2295
LiveUpdate 2.6 (Symantec Corporation) Ver: 2.6.14.0
MGI PhotoSuite III SE (Remove Only)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Ver: 1.1.4322 Installed: 3/28/2005
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Encarta Encyclopedia 2000
Microsoft Expedia Streets & Trips 2000 Ver: 7.0.26.0200
Microsoft Home Publishing 2000 Ver: 4.0.0000 Installed: 9/27/2002
Microsoft Money 2000 Standard Edition
Microsoft Money 2002 Ver: 10.0.50 Installed: 2/5/2002
Microsoft Money 2002 System Pack Ver: 10.0.80 Installed: 2/5/2002
Microsoft Office 2000 Premium Ver: 9.00.2720 Installed: 8/9/2002
Microsoft Word 2000 Ver: 9.00.2720 Installed: 11/16/2003
Microsoft Works 2000 Ver: 1.0.0.0000 Installed: 8/6/2002
Microsoft Works 2000 Setup Launcher
Microsoft Works 6.0 Ver: 06.00.0000 Installed: 2/5/2002
Microsoft Works and Money 2002 Setup Launcher
MSRedist Ver: 1.0.0.0 Installed: 2/15/2004
MUSICMATCH Jukebox
My Photo Center
NetShow Tools 3.0
NetZero
Norton AntiVirus 2004 Ver: 10.00.10 Installed: 2/15/2004
Norton AntiVirus 2004 (Symantec Corporation) Ver: 10.00.10
Norton AntiVirus Parent MSI Ver: 10.0.10 Installed: 2/15/2004
Norton AntiVirus SYMLT MSI Ver: 10.0.10 Installed: 2/15/2004
Norton WMI Update Ver: 2005.1.2.20 Installed: 3/9/2005
NVIDIA Drivers
NVIDIA Windows 2000/XP Display Drivers
Ollo in the Sunny Valley Fair
OneTouch Version 3.0 Ver: Version 3.0
PaperPort 7.0
PC-Doctor for Windows
PCFriendly
PigPen
PS2
Python 1.5 combined Win32 extensions
Python 1.5.2 (final)
Quake III Arena
Quicken Financial Center
QuickTime
Reader Rabbit Preschool(R) Sparkle Star Rescue!(TM)
RealPlayer Basic
Replicant DVD
SabreWing 2
Secret Paths to Your Dreams(tm)
Shockwave Director 7.0.0
Sonic Foundry Super Duper Music Looper XPress Ver: 1.0.69 Installed: 2/5/2002
Space Rocks
Speedway
Spybot - Search & Destroy 1.3 Ver: 1.3
Studio
Symantec Network Drivers Update Ver: 5.4.4.17 Installed: 3/9/2005
Symantec Script Blocking Installer Ver: 1.0.0 Installed: 2/15/2004
SymNet Ver: 4.7.1 Installed: 2/15/2004
Tcl 8.0.5 for Windows
Ulead VideoStudio version 4.0 SE Basic
VCDEasy
Viewpoint Media Player (Remove Only)
War Games Virtual Warfare Demo
WeatherBug Ver: v2.7
WebFldrs XP Ver: 9.50.5318 Installed: 2/4/2002
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB867282 Ver: 20050127.090417
Windows XP Hotfix - KB873333 Ver: 20050114.005213
Windows XP Hotfix - KB873339 Ver: 20041117.092459
Windows XP Hotfix - KB885250 Ver: 20050118.202711
Windows XP Hotfix - KB885835 Ver: 20041027.181713
Windows XP Hotfix - KB885836 Ver: 20041028.173203
Windows XP Hotfix - KB886185 Ver: 20041021.090540
Windows XP Hotfix - KB887472 Ver: 20041014.162858
Windows XP Hotfix - KB887742 Ver: 20041103.095002
Windows XP Hotfix - KB887797 Ver: 20041018.133824
Windows XP Hotfix - KB888113 Ver: 20041116.131036
Windows XP Hotfix - KB888302 Ver: 20041207.111426
Windows XP Hotfix - KB890047 Ver: 20041221.124506
Windows XP Hotfix - KB890175 Ver: 20041201.233338
Windows XP Hotfix - KB891781 Ver: 20050110.165439
Windows XP Service Pack 2 Ver: 20040803.231319
WNW Five Language Dictionary v1.9
Word in Works Suite add-in Ver: 1.0.0.0000 Installed: 11/16/2003
WordPerfect Office 2002 Try Before You Buy
WordPerfect Office 2002 Try Before You Buy Ver: 10 Installed: 2/5/2002
Works Suite OS Pack Ver: 1.0.0.0000 Installed: 2/5/2002
------------------------------------------

 

Looks like you did good.

Fix these with HJT.

O2 - BHO: (no name) - SOFTWARE - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)

This may not be something the owner wants installed.

1 Point Sex

If it's not in the Add/Remove list, copy the quote box below to notepad and save it as Rem1Point.reg Double click to merge the information to the registry. Search the drive for any folders of the same name and delete.

Also recommend you open Spybot and click mode on the toolbar, then advanced mode. Click immunize in the left pane, then immunize again, this time from above with the green + beside it (always recheck this setting after downloading updates). Click the link below that for SpywareBlaster, download, install, enable all protection and update. Check for updates regularly and watch for any protection being disabled. Then, still in Spybot, click the tools button, then IE tweaks and at least lock the HOSTS file.
Then download IESpyad.exe, double click to extract (it extracts to C:\IESpyad by default), open the folder, double click the ie-ads.reg file and allow it to merge into the registry.

That will give you some added layers of protection against unwanted parasites.

 

Thanks Dave,

I will do as you ask.

A question.

What do you think about some of these installs that say you need to be online in order to uninstall?

I've noticed that with some of them, I go through the uninstall (Add Remove Programs) without being online. I just let it hang and it eventually continues the uninstall.

?

Bob

 

Hello,

I fixed the two entries in HJT.

I found one listing of "1 Poin Sex" in "Ad Remove Programs ". But it gave the message
"An error occurred while trying to remove ..." with an option to remove it from the list.

I did not remove it from the list.

I tried the registy merge as you said but I recieved an error saying some thing like:

"Cannot import ..... The specified file is not a regestry script. You can only import binary registry files from within the registry editor."

I also search for anything with "sex" in it, but it didn't come up with any "1 Point Sex" results.

Here is the new HJT and Installed Programs log file (After resarting):

Logfile of HijackThis v1.99.1
Scan saved at 11:34:14 PM, on 3/31/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\Windows\system32\HpSrvUI.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Visioneer OneTouch\OneTouchMon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\LTMSG.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HJThis\HijackThis.exe
c:\Program Files\Microsoft Money\System\urlmap.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [hp Silent Service] C:\Windows\system32\HpSrvUI.exe
O4 - HKLM\..\Run: [hpScannerFirstBoot] c:\hp\drivers\scanners\scannerfb.exe
O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [DDCM] "C:\Program Files\WildTangent\DDC\DDCManager\DDCMan.exe" -Background
O4 - HKLM\..\Run: [DDCActiveMenu] "C:\Program Files\WildTangent\DDC\ActiveMenu\DDCActiveMenu.exe" -boot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [checktime] c:\program files\HPSelect\Frontend\ct.exe
O4 - HKLM\..\Run: [OneTouch Monitor] C:\Program Files\Visioneer OneTouch\OneTouchMon.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe "
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Microsoft Works Update Detection] c:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [PPWebCap] C:\PROGRA~1\ScanSoft\PAPERP~1\PPWebCap.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe "
O4 - HKCU\..\Run: [PopUpStopperCompanion] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSComp.exe "
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-beta.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {E04EAE82-14AD-41CB-BF5A-45556ABB8347} - http://esupport.aol.com/help/engine/aolcinst.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--------------------------------------------------------
INSTALLED SOFTWARE (127) - COMPUTER10 - 3/31/2005 11:36:10 PM

1 Point Sex
Access 2000 Beginning
Ad-Aware SE Personal
Adobe Acrobat 5.0 Ver: 5.0
America Online
An Island Adventure (Remove only)
An Ocean Adventure (Remove only)
Atomic Pop
Blasterball Wild
Caillou(R) Birthday Party(TM)
Caillou(R) Magic Playhouse(TM)
CC_ccStart Ver: 2.1.0.610 Installed: 2/15/2004
ccCommon Ver: 2.1.0.610 Installed: 2/15/2004
Dark Orbit
Detto IntelliMover
Digital Camera Plus Manager
Disney's Active Play LKII, Simba's Pride Demo
Disney's Active Play, A Bug's Life
Dragon NaturallySpeaking Standard
Easy Internet Sign-up
GemMaster 2
GrammarPro
HijackThis 1.99.1 Ver: 1.99.1
House v1.1.0f
hp center
HP DeskJet 610C Series (Remove only)
HP Instant Support
HP Learning Adventure
HP RecordNow Ver: 3.10 Installed: 2/5/2002
IBM ViaVoice Gold Command Runtime, Version 4.3
Inactive HP Printer Drivers (Remove only)
Inactive HP ScanJet Drivers (Remove only)
InterActual Player
InterVideo WinDVD
JumpStart Languages
JumpStart Spanish v1.0
KazooStudio
KBD
Learn Inglés Your Way
Learn To Speak English 8.0
Lernout & Hauspie TruVoice American English TTS Engine
LiveReg (Symantec Corporation) Ver: 2.4.2.2295
LiveUpdate 2.6 (Symantec Corporation) Ver: 2.6.14.0
MGI PhotoSuite III SE (Remove Only)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Ver: 1.1.4322 Installed: 3/28/2005
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Encarta Encyclopedia 2000
Microsoft Expedia Streets & Trips 2000 Ver: 7.0.26.0200
Microsoft Home Publishing 2000 Ver: 4.0.0000 Installed: 9/27/2002
Microsoft Money 2000 Standard Edition
Microsoft Money 2002 Ver: 10.0.50 Installed: 2/5/2002
Microsoft Money 2002 System Pack Ver: 10.0.80 Installed: 2/5/2002
Microsoft Office 2000 Premium Ver: 9.00.2720 Installed: 8/9/2002
Microsoft Word 2000 Ver: 9.00.2720 Installed: 11/16/2003
Microsoft Works 2000 Ver: 1.0.0.0000 Installed: 8/6/2002
Microsoft Works 2000 Setup Launcher
Microsoft Works 6.0 Ver: 06.00.0000 Installed: 2/5/2002
Microsoft Works and Money 2002 Setup Launcher
MSRedist Ver: 1.0.0.0 Installed: 2/15/2004
MUSICMATCH Jukebox
My Photo Center
NetShow Tools 3.0
NetZero
Norton AntiVirus 2004 Ver: 10.00.10 Installed: 2/15/2004
Norton AntiVirus 2004 (Symantec Corporation) Ver: 10.00.10
Norton AntiVirus Parent MSI Ver: 10.0.10 Installed: 2/15/2004
Norton AntiVirus SYMLT MSI Ver: 10.0.10 Installed: 2/15/2004
Norton WMI Update Ver: 2005.1.2.20 Installed: 3/9/2005
NVIDIA Drivers
NVIDIA Windows 2000/XP Display Drivers
Ollo in the Sunny Valley Fair
OneTouch Version 3.0 Ver: Version 3.0
PaperPort 7.0
PC-Doctor for Windows
PCFriendly
PigPen
PS2
Python 1.5 combined Win32 extensions
Python 1.5.2 (final)
Quake III Arena
Quicken Financial Center
QuickTime
Reader Rabbit Preschool(R) Sparkle Star Rescue!(TM)
RealPlayer Basic
Replicant DVD
SabreWing 2
Secret Paths to Your Dreams(tm)
Shockwave Director 7.0.0
Sonic Foundry Super Duper Music Looper XPress Ver: 1.0.69 Installed: 2/5/2002
Space Rocks
Speedway
Spybot - Search & Destroy 1.3 Ver: 1.3
Studio
Symantec Network Drivers Update Ver: 5.4.4.17 Installed: 3/9/2005
Symantec Script Blocking Installer Ver: 1.0.0 Installed: 2/15/2004
SymNet Ver: 4.7.1 Installed: 2/15/2004
Tcl 8.0.5 for Windows
Ulead VideoStudio version 4.0 SE Basic
VCDEasy
Viewpoint Media Player (Remove Only)
War Games Virtual Warfare Demo
WeatherBug Ver: v2.7
WebFldrs XP Ver: 9.50.5318 Installed: 2/4/2002
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB867282 Ver: 20050127.090417
Windows XP Hotfix - KB873333 Ver: 20050114.005213
Windows XP Hotfix - KB873339 Ver: 20041117.092459
Windows XP Hotfix - KB885250 Ver: 20050118.202711
Windows XP Hotfix - KB885835 Ver: 20041027.181713
Windows XP Hotfix - KB885836 Ver: 20041028.173203
Windows XP Hotfix - KB886185 Ver: 20041021.090540
Windows XP Hotfix - KB887472 Ver: 20041014.162858
Windows XP Hotfix - KB887742 Ver: 20041103.095002
Windows XP Hotfix - KB887797 Ver: 20041018.133824
Windows XP Hotfix - KB888113 Ver: 20041116.131036
Windows XP Hotfix - KB888302 Ver: 20041207.111426
Windows XP Hotfix - KB890047 Ver: 20041221.124506
Windows XP Hotfix - KB890175 Ver: 20041201.233338
Windows XP Hotfix - KB891781 Ver: 20050110.165439
Windows XP Service Pack 2 Ver: 20040803.231319
WNW Five Language Dictionary v1.9
Word in Works Suite add-in Ver: 1.0.0.0000 Installed: 11/16/2003
WordPerfect Office 2002 Try Before You Buy
WordPerfect Office 2002 Try Before You Buy Ver: 10 Installed: 2/5/2002
Works Suite OS Pack Ver: 1.0.0.0000 Installed: 2/5/2002

----------------------------------------------------

Thanks
Bob

 

Sounds like the formatting might not have stayed the same. Try this one instead though.

Log looks clean.

 

That worked. There is no more "1 Point Sex" in the "Add Remove Programs "

Thanks Again Dave you definitely know what you're doing.


Great job!

Bob

 

Happy to help, Bob.