--- Search result list ---
SexList: Settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-1292428093-1637723038-682003330-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\_{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
FunWebProducts: Settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-1292428093-1637723038-682003330-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D}
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler.1
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar.1
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager.1
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager.1
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
FunWebProducts: Program directory (Directory, nothing done)
C:\Program Files\FunWebProducts\
HotKeysHook: Library (File, nothing done)
C:\WINDOWS\system32\H@tKeysH@@k.DLL
CallingHome.biz: Temporary folder (Directory, nothing done)
C:\Documents and Settings\Owner\Local Settings\Temp\THI3937.tmp
DyFuCA.InternetOptimizer: Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1292428093-1637723038-682003330-1003\Software\Policies\Avenue Media
DyFuCA.InternetOptimizer: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Avenue Media
MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin
MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, nothing done)
HKEY_USERS\S-1-5-21-1292428093-1637723038-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA3-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin.1
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin.1
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller.1
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
MyWay.MyWebSearch: Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\FocusInteractive
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
MyWay.MyWebSearch: Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\MyWebSearch
MyWay.MyWebSearch: Program directory (Directory, nothing done)
C:\Program Files\MyWebSearch\
MyWay.MyWebSearch: Link (File, nothing done)
C:\Documents and Settings\Owner\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
MyWay.MyWebSearch: Link (File, nothing done)
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
MyWay.MyWebSearch: Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
Exact Advertising.BargainsBuddy: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{8EEE58D5-130E-4CBD-9C83-35A0564E1357}
Exact Advertising.BargainsBuddy: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{C6906A23-4717-4E1F-B6FD-F06EBED11357}
Exact Advertising.BargainsBuddy: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{8EEE58D5-130E-4CBD-9C83-35A0564E2468}
Exact Advertising.BargainsBuddy: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{C6906A23-4717-4E1F-B6FD-F06EBED12468}
Exact Advertising.BargainsBuddy: Autorun settings (CashBack) (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CashBack
Exact Advertising.BargainsBuddy: Program directory (Directory, nothing done)
C:\Program Files\NaviSearch\
Exact Advertising.BargainsBuddy: Executable (File, nothing done)
C:\WINDOWS\bbchk.exe
Exact Advertising.BargainsBuddy: Program directory (Directory, nothing done)
C:\Program Files\CashBack\
Exact Advertising.BargainsBuddy: Program directory (Directory, nothing done)
C:\Program Files\CashBack\bin\
Exact Advertising.BargainsBuddy: Program directory (Directory, nothing done)
C:\Program Files\NaviSearch\bin\
Exact Advertising.BargainsBuddy: Temporary file (File, nothing done)
C:\temp\bb_auto_wider.swf
Exact Advertising.BargainsBuddy: Temporary file (File, nothing done)
C:\temp\bb_click_wider.swf
Exact Advertising.BargainsBuddy: Temporary file (File, nothing done)
C:\temp\bb_welcome.html
Exact Advertising.BargainsBuddy: Temporary file (File, nothing done)
C:\temp\bb_welcome1.swf
Exact Advertising.BargainsBuddy: Temporary file (File, nothing done)
C:\temp\blank.gif
Exact Advertising.BargainsBuddy: Temporary file (File, nothing done)
C:\temp\icon.gif
Exact Advertising.BargainsBuddy: Temporary file (File, nothing done)
C:\temp\logo.gif
FunWeb: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HTMLMenu
FunWeb: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HTMLMenu.2
FunWeb: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
FunWeb: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HTMLMenu.1
FunWeb: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
FunWeb: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.PopSwatterBarButton
FunWeb: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.PopSwatterBarButton.1
FunWeb: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
FunWeb: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.PopSwatterSettingsControl
FunWeb: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.PopSwatterSettingsControl.1
FunWeb: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
FunWeb: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
FunWeb: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
FunWeb: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Fun Web Products
FunWeb: Settings (Registry value, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
MyWebSearch: Settings (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\sources\f3PopularScreensavers
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-06-02 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2004-10-04 advcheck.dll (1.0.1.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2005-05-31 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-02-24 Includes\Cookies.sbi (*)
2006-02-24 Includes\Dialer.sbi (*)
2006-02-24 Includes\Hijackers.sbi (*)
2006-02-24 Includes\Keyloggers.sbi (*)
2004-05-12 Includes\LSP.sbi (*)
2006-02-24 Includes\Malware.sbi (*)
2006-02-24 Includes\PUPS.sbi (*)
2006-02-24 Includes\Revision.sbi (*)
2006-02-24 Includes\Security.sbi (*)
2006-02-24 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-02-24 Includes\Trojans.sbi (*)
--- System information ---
Windows XP (Build: 2600) Service Pack 2
/ DataAccess: Microsoft Data Access Components KB870669
/ Windows Media Player: Windows Media Update 817787
/ Windows XP / SP2: Windows XP Service Pack 2
/ Windows XP / SP3: Windows XP Hotfix - KB834707
/ Windows XP / SP3: Windows XP Hotfix - KB867282
/ Windows XP / SP3: Windows XP Hotfix - KB873333
/ Windows XP / SP3: Windows XP Hotfix - KB873339
/ Windows XP / SP3: Security Update for Windows XP (KB883939)
/ Windows XP / SP3: Windows XP Hotfix - KB885250
/ Windows XP / SP3: Windows XP Hotfix - KB885835
/ Windows XP / SP3: Windows XP Hotfix - KB885836
/ Windows XP / SP3: Windows XP Hotfix - KB886185
/ Windows XP / SP3: Windows XP Hotfix - KB887472
/ Windows XP / SP3: Windows XP Hotfix - KB887742
/ Windows XP / SP3: Windows XP Hotfix - KB888113
/ Windows XP / SP3: Windows XP Hotfix - KB888302
/ Windows XP / SP3: Security Update for Windows XP (KB890046)
/ Windows XP / SP3: Windows XP Hotfix - KB890047
/ Windows XP / SP3: Windows XP Hotfix - KB890175
/ Windows XP / SP3: Windows XP Hotfix - KB890859
/ Windows XP / SP3: Windows XP Hotfix - KB890923
/ Windows XP / SP3: Windows XP Hotfix - KB891781
/ Windows XP / SP3: Security Update for Windows XP (KB893066)
/ Windows XP / SP3: Windows XP Hotfix - KB893086
/ Windows XP / SP3: Security Update for Windows XP (KB893756)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Update for Windows XP (KB894391)
/ Windows XP / SP3: Security Update for Windows XP (KB896358)
/ Windows XP / SP3: Security Update for Windows XP (KB896422)
/ Windows XP / SP3: Security Update for Windows XP (KB896423)
/ Windows XP / SP3: Security Update for Windows XP (KB896424)
/ Windows XP / SP3: Security Update for Windows XP (KB896428)
/ Windows XP / SP3: Security Update for Windows XP (KB896688)
/ Windows XP / SP3: Update for Windows XP (KB896727)
/ Windows XP / SP3: Update for Windows XP (KB898461)
/ Windows XP / SP3: Security Update for Windows XP (KB899587)
/ Windows XP / SP3: Security Update for Windows XP (KB899588)
/ Windows XP / SP3: Security Update for Windows XP (KB899591)
/ Windows XP / SP3: Security Update for Windows XP (KB900725)
/ Windows XP / SP3: Security Update for Windows XP (KB901017)
/ Windows XP / SP3: Security Update for Windows XP (KB901214)
/ Windows XP / SP3: Security Update for Windows XP (KB902400)
/ Windows XP / SP3: Security Update for Windows XP (KB903235)
/ Windows XP / SP3: Security Update for Windows XP (KB904706)
/ Windows XP / SP3: Security Update for Windows XP (KB905414)
/ Windows XP / SP3: Security Update for Windows XP (KB905749)
/ Windows XP / SP3: Security Update for Windows XP (KB905915)
/ Windows XP / SP3: Security Update for Windows XP (KB908519)
/ Windows XP / SP3: Update for Windows XP (KB910437)
/ Windows XP / SP3: Security Update for Windows XP (KB912919)
--- Startup entries list ---
Located: HK_LM:Run, \\JoeMomma\EPSON Stylus CX4600 Series
command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE /P37 "\\JoeMomma\EPSON Stylus CX4600 Series" /O6 "USB001" /M "Stylus CX4600"
file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE
size: 98304
MD5: 3758bb30e224d88bc1027b9302635429
Located: HK_LM:Run, Auto EPSON Stylus CX4600 Series on JoeMomma
command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE /P43 "Auto EPSON Stylus CX4600 Series on JoeMomma" /O16 "\\JOEMOMMA\EPSON" /M "Stylus CX4600"
file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE
size: 98304
MD5: 3758bb30e224d88bc1027b9302635429
Located: HK_LM:Run, BlockChecker
command: C:\Program Files\Block Checker\block-checker.exe
file:
Located: HK_LM:Run, CashBack
command: C:\Program Files\CashBack\bin\cashback.exe
file:
Located: HK_LM:Run, ClamWin
command: "C:\Program Files\ClamWin\bin\ClamTray.exe" --logon
file: C:\Program Files\ClamWin\bin\ClamTray.exe
size: 73728
MD5: 8ff1c72c92ca78041552baacfa80d9cd
Located: HK_LM:Run, eFax 4.1
command: "C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe" /R
file: C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe
size: 107008
MD5: f51142f227299ac35c1d1d5e22c4aa8d
Located: HK_LM:Run, HotKeysCmds
command: C:\WINDOWS\System32\hkcmd.exe
file: C:\WINDOWS\System32\hkcmd.exe
size: 118784
MD5: 66a5047df0c0cec911b95b5b1e24cebc
Located: HK_LM:Run, IgfxTray
command: C:\WINDOWS\System32\igfxtray.exe
file: C:\WINDOWS\System32\igfxtray.exe
size: 155648
MD5: d24b9b36c06ca0acf7ca2c69d9bb25b5
Located: HK_LM:Run, iTunesHelper
command: "C:\Program Files\iTunes\iTunesHelper.exe"
file: C:\Program Files\iTunes\iTunesHelper.exe
size: 278528
MD5: 8f5581d1be59577cacd5b43cfc5e4447
Located: HK_LM:Run, LXSUPMON
command: C:\WINDOWS\system32\LXSUPMON.EXE RUN
file: C:\WINDOWS\system32\LXSUPMON.EXE
size: 818688
MD5: 0a351e742807981f8905d7b09ab36c2e
Located: HK_LM:Run, MyWebSearch Email Plugin
command: C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
file:
Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 98304
MD5: 76a3a30b58405c2c6d833895253a51a9
Located: HK_LM:Run, SunJavaUpdateSched
command: C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
file: C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
size: 32881
MD5: d7b9be63c406103ee1405fe473ac0697
Located: HK_LM:Run, TkBellExe
command: "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
file: C:\Program Files\Common Files\Real\Update_OB\realsched.exe
size: 180269
MD5: 7237366a57a26b7ed71c9b081fbdd6eb
Located: HK_LM:Run, Windows SA
command: C:\Program Files\WindowsSA\omniscient.exe
file:
Located: HK_LM:Run, wyihey
command: C:\WINDOWS\System32\dqeadkvo.exe
file:
Located: HK_LM:RunOnceEx,
command:
file:
Located: HK_CU:Run, MSMSGS
command: "C:\Program Files\Messenger\msmsgs.exe" /background
file: C:\Program Files\Messenger\msmsgs.exe
size: 1694208
MD5: 74e6e96c6f0e2eca4edbb7f7a468f259
Located: HK_CU:Run, MyWebSearch Email Plugin
command: C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
file:
Located: HK_CU:Run, Steam
command: "C:\Program Files\Valve\Steam\Steam.exe" -silent
file: C:\Program Files\Valve\Steam\Steam.exe
size: 1249280
MD5: cde5895db998d361a2d95647d1da4bbf
Located: HK_CU:Run, WhatPulse
command: C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
file:
Located: HK_CU:Run, Yahoo! Pager
command: C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
file:
Located: Startup (common), eFax 4.1.lnk
command: C:\Program Files\eFax Messenger 4.1\J2GTray.exe
file: C:\Program Files\eFax Messenger 4.1\J2GTray.exe
size: 513024
MD5: b2b1773a75fbf183633b739699c70ef1
Located: Startup (common), Kodak EasyShare software.lnk
command: C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
file: C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
size: 151552
MD5: 57537c84528c07851f032479031bbec1
Located: Startup (common), Kodak software updater.lnk
command: C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
file: C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
size: 16423
MD5: db9012564169875f5b2aa7f5fc4905e4
Located: Startup (common), MyWebSearch Email Plugin.lnk
command: C:\Program Files\MyWebSearch\bar\14.bin\MWSOEMON.EXE
file:
Located: Startup (user), MyWebSearch Email Plugin.lnk
command: C:\Program Files\MyWebSearch\bar\14.bin\MWSOEMON.EXE
file:
Located: Startup (user), OpenOffice.org 2.0.lnk
command: C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
file: C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
size: 61440
MD5: 7ad01eef5a7689da15d8597bf5790884
Located: Startup (user), YPOPs.lnk
command: C:\Program Files\YPOPs\YPOPs.exe
file: C:\Program Files\YPOPs\YPOPs.exe
size: 1208320
MD5: 272464ebc6dde3df2f932e9b66b097d3
Located: System.ini, crypt32chain
command: crypt32.dll
file: crypt32.dll
Located: System.ini, cryptnet
command: cryptnet.dll
file: cryptnet.dll
Located: System.ini, cscdll
command: cscdll.dll
file: cscdll.dll
Located: System.ini, igfxcui
command: igfxsrvc.dll
file: igfxsrvc.dll
Located: System.ini, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, Schedule
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
Located: System.ini, SensLogn
command: WlNotify.dll
file: WlNotify.dll
Located: System.ini, termsrv
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, wlballoon
command: wlnotify.dll
file: wlnotify.dll
--- Browser helper object list ---
{00A6FAF1-072E-44cf-8957-5838F569A31D} (MyWebSearch Search Assistant BHO)
BHO name:
CLSID name: MyWebSearch Search Assistant BHO
description: MyWebSearch
classification: Confirmed as malware
known filename: MWSSRCAS.DLL
info link:
http://www.doxdesk.com/parasite/MySearch.html info source:
Path: C:\Program Files\MyWebSearch\SrchAstt\1.bin\
Long name: MWSSRCAS.DLL
{07B18EA1-A523-4961-B6BB-170DE4475CCA} (mwsBar BHO)
BHO name:
CLSID name: mwsBar BHO
description: MyWebSearch
classification: Confirmed as malware
known filename: Mwsbar.dll
info link:
http://www.doxdesk.com/parasite/MySearch.html info source:
Path: C:\Program Files\MyWebSearch\bar\1.bin\
Long name: MWSBAR.DLL
{9394EDE7-C8B5-483E-8773-474BF36AF6E4} (ST)
BHO name:
CLSID name: ST
Path: C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\
Long name: stmain.dll
Short name:
Date (created): 5/26/2005 3:09:56 PM
Date (last access): 2/27/2006 6:57:12 PM
Date (last write): 8/13/2004 5:42:00 PM
Filesize: 155648
Attributes: archive
MD5: 0DA1349495955CB41A5899047C5A1267
CRC32: C050EECD
Version: 1.2.3000.1001
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (MSNToolBandBHO)
BHO name:
CLSID name: MSNToolBandBHO
Path: C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-us\
Long name: msntb.dll
Short name:
Date (created): 2/9/2006 10:58:30 AM
Date (last access): 2/27/2006 6:57:12 PM
Date (last write): 1/17/2006 4:04:16 PM
Filesize: 282624
Attributes: archive
MD5: 6B3B0C6657B3DFEAD7ABC5BFEE45B347
CRC32: 1DF31317
Version: 1.2.5000.1021
{C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} (System Process)
BHO name:
CLSID name: System Process
Path: C:\WINDOWS\system32\
Long name: navshext1.dll
Short name: NAVSHE~1.DLL
Date (created): 12/25/2005 10:26:54 PM
Date (last access): 2/27/2006 6:57:12 PM
Date (last write): 12/25/2005 10:26:54 PM
Filesize: 50688
Attributes: archive
MD5: EED0BA0EAA036E0277049A32E9AD3ADD
CRC32: 24CD89CB
Version: 1.0.0.1
--- ActiveX list ---
{4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class)
DPF name:
CLSID name: QDiagAOLCCUpdateObj Class
Installer: C:\WINDOWS\Downloaded Program Files\qdiagcc.inf
Codebase:
http://aolcc.aol.com/computercheckup/qdiagcc.cab description:
classification: Open for discussion
known filename: qdiagcc.ocx
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\system32\
Long name: qdiagcc.ocx
Short name:
Date (created): 6/28/2004 2:54:42 PM
Date (last access): 1/20/2006 8:41:52 PM
Date (last write): 6/28/2004 2:54:42 PM
Filesize: 1355776
Attributes: archive
MD5: A2D58C24CF9D7176EBED6A4339C52843
CRC32: 57E3AFE3
Version: 1.0.1.374
--- Process list ---
PID: 0 ( 0) [System]
PID: 428 ( 4) \SystemRoot\System32\smss.exe
PID: 476 ( 428) \??\C:\WINDOWS\system32\csrss.exe
PID: 500 ( 428) \??\C:\WINDOWS\system32\winlogon.exe
PID: 544 ( 500) C:\WINDOWS\system32\services.exe
size: 108032
MD5: C6CE6EEC82F187615D1002BB3BB50ED4
PID: 556 ( 500) C:\WINDOWS\system32\lsass.exe
size: 13312
MD5: 84885F9B82F4D55C6146EBF6065D75D2
PID: 704 ( 544) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 760 ( 544) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 836 ( 544) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 892 ( 544) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 1008 ( 544) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 1136 ( 544) C:\WINDOWS\system32\LEXBCES.EXE
size: 300544
MD5: B0E0C879A09BFC7CD7F792D185E4DEA5
PID: 1180 ( 544) C:\WINDOWS\system32\spoolsv.exe
size: 57856
MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
PID: 1328 ( 544) C:\WINDOWS\Microsoft.NET\Framework\v2.0.40607\aspnet_admin.exe
size: 11776
MD5: C9057C91E46B3F9CE1003C90CDEAFCB1
PID: 1416 ( 544) C:\WINDOWS\system32\RioMSC.exe
size: 303104
MD5: 83D2C4CE6BF048D71959BB1EE40B6900
PID: 1496 ( 544) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 1564 ( 544) C:\TestBNCS\BNCS Server\TestBNCS.exe
size: 192512
MD5: E55690280FC9A16DD97E23478CAA6EB4
PID: 1596 ( 544) C:\TestBNCS\Database Server\DBServer.exe
size: 86016
MD5: C3A885EBF9285F8A9F0E48DC083A765C
PID: 1656 ( 544) C:\Program Files\RealVNC\VNC4\WinVNC4.exe
size: 455632
MD5: 3FC39DC90318C1B72D867FE04962A20F
PID: 864 ( 544) C:\WINDOWS\System32\alg.exe
size: 44544
MD5: F1958FBF86D5C004CF19A5951A9514B7
PID: 1560 ( 544) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
PID: 1996 ( 836) C:\WINDOWS\system32\wscntfy.exe
size: 13824
MD5: 49911DD39E023BB6C45E4E436CFBD297
PID: 2664 (1772) C:\WINDOWS\Explorer.EXE
size: 1032192
MD5: A0732187050030AE399B241436565E64
PID: 3012 (2664) C:\WINDOWS\System32\hkcmd.exe
size: 118784
MD5: 66A5047DF0C0CEC911B95B5B1E24CEBC
PID: 3048 (2664) C:\WINDOWS\system32\LXSUPMON.EXE
size: 818688
MD5: 0A351E742807981F8905D7B09AB36C2E
PID: 3088 (2664) C:\Program Files\iTunes\iTunesHelper.exe
size: 278528
MD5: 8F5581D1BE59577CACD5B43CFC5E4447
PID: 3096 (2664) C:\Program Files\QuickTime\qttask.exe
size: 98304
MD5: 76A3A30B58405C2C6D833895253A51A9
PID: 3108 (2664) C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE
size: 98304
MD5: 3758BB30E224D88BC1027B9302635429
PID: 3028 (2664) C:\Program Files\ClamWin\bin\ClamTray.exe
size: 73728
MD5: 8FF1C72C92CA78041552BAACFA80D9CD
PID: 3156 (2664) C:\WINDOWS\system32\lexpps.exe
size: 169984
MD5: CF0FC6B42FD4CB94BBD910FAE824FCF1
PID: 3188 ( 544) C:\Program Files\iPod\bin\iPodService.exe
size: 331776
MD5: F82D852F5969BD3A1EC61E42D0255954
PID: 3124 (2664) C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
size: 151552
MD5: 57537C84528C07851F032479031BBEC1
PID: 2336 ( 428) \??\C:\WINDOWS\system32\csrss.exe
PID: 2480 ( 428) \??\C:\WINDOWS\system32\winlogon.exe
PID: 3360 (3448) C:\WINDOWS\Explorer.EXE
size: 1032192
MD5: A0732187050030AE399B241436565E64
PID: 3232 (2480) C:\WINDOWS\system32\wscntfy.exe
size: 13824
MD5: 49911DD39E023BB6C45E4E436CFBD297
PID: 2800 (3360) C:\WINDOWS\System32\hkcmd.exe
size: 118784
MD5: 66A5047DF0C0CEC911B95B5B1E24CEBC
PID: 3632 (3360) C:\Program Files\Common Files\Real\Update_OB\realsched.exe
size: 180269
MD5: 7237366A57A26B7ED71C9B081FBDD6EB
PID: 2116 (3360) C:\WINDOWS\system32\LXSUPMON.EXE
size: 818688
MD5: 0A351E742807981F8905D7B09AB36C2E
PID: 3712 (3360) C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
size: 32881
MD5: D7B9BE63C406103EE1405FE473AC0697
PID: 3732 (3360) C:\Program Files\QuickTime\qttask.exe
size: 98304
MD5: 76A3A30B58405C2C6D833895253A51A9
PID: 3704 (3360) C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE
size: 98304
MD5: 3758BB30E224D88BC1027B9302635429
PID: 3484 (3360) C:\Program Files\ClamWin\bin\ClamTray.exe
size: 73728
MD5: 8FF1C72C92CA78041552BAACFA80D9CD
PID: 3828 (3360) C:\Program Files\eFax Messenger 4.1\J2GDllCmd.exe
size: 107008
MD5: F51142F227299AC35C1D1D5E22C4AA8D
PID: 660 (3360) C:\WINDOWS\system32\lexpps.exe
size: 169984
MD5: CF0FC6B42FD4CB94BBD910FAE824FCF1
PID: 1956 (3360) C:\Program Files\eFax Messenger 4.1\J2GTray.exe
size: 513024
MD5: B2B1773A75FBF183633B739699C70EF1
PID: 2620 (2480) C:\WINDOWS\system32\wuauclt.exe
size: 124184
MD5: EBF1AB7E4FC05CABF2F4680D2A45F827
PID: 2704 (3360) C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
size: 16423
MD5: DB9012564169875F5B2AA7F5FC4905E4
PID: 2040 (3360) C:\Documents and Settings\Owner\Start Menu\Programs\Startup\prjSystrayUptime.exe
size: 20480
MD5: 75BE655348A2AF6BF6B81315A5B90B69
PID: 2628 (3360) C:\Program Files\YPOPs\YPOPs.exe
size: 1208320
MD5: 272464EBC6DDE3DF2F932E9B66B097D3
PID: 1468 (2744) C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
size: 434176
MD5: F87D8A4E15CEA0963F4FB4B135A5DD74
PID: 1428 (1468) C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
size: 565248
MD5: 025FC2E42E61B02E7C18157AB6841C14
PID: 452 (3360) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4393096
MD5: 09CA174A605B480318731E691DC98539
PID: 2744 (3360) C:\Program Files\Mozilla Firefox\firefox.exe
size: 7166053
MD5: DC7051841F2F67410524B2EEC25A1755
PID: 1808 (3632) C:\Program Files\Real\RealPlayer\RealPlay.exe
size: 204845
MD5: D44E76BC2E2FCE6D48429A1414540F4B
PID: 4 ( 0) System
--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 2/27/2006 7:05:12 PM
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar
http://g.msn.com/0SEENUS/SAOS01HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://runonce.msn.com/HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar
http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/*http://www.yahoo.com/ext/search/search.html
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=homeHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhomeHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearchHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://ie.search.msn.com/en-us/srchasst/srchasst.htmHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
http://ie.search.msn.com/en-us/srchasst/srchcust.htm--- Winsock Layered Service Provider list ---
--- Uninstall list ---
(AddressBook)
Block Checker 1.0 (Block Checker)
uninstall cmd: "C:\Program Files\Block Checker\uninstall.exe"
(Branding)
ClamWin Free Antivirus 0.86.2 (ClamWin Free Antivirus_is1)
install location: C:\Program Files\ClamWin\
uninstall cmd: "C:\Program Files\ClamWin\unins000.exe"
publisher: alch
help link:
http://clamwin.sourceforge.net/Conexant SmartHSFi V.9x 56K DF PCI Modem (CNXT_MODEM_PCI_VEN_14F1&DEV_2702)
uninstall cmd: C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2702\HXFSETUP.EXE -U -IDel8d8xk.INF
Conexant D850 56K V.9x DFVc Modem (CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1)
uninstall cmd: C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1\HXFSETUP.EXE -U -Idel200fk.inf
(Connection Manager)
(DirectAnimation)
(DirectDrawEx)
(DXM_Runtime)
Electronic Arts Game Updater (Electronic Arts Game Updater)
uninstall cmd: C:\WINDOWS\IsUninst.exe -f"c:\Program Files\EACom\Update\Uninst.isu"
(Fontcore)
Gaim (remove only) (Gaim)
uninstall cmd: C:\Program Files\Gaim\gaim-uninst.exe
GameSpy Arcade (GameSpy Arcade)
uninstall cmd: C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG
GTK+ Runtime 2.6.9 rev a (remove only) (GTK 2.0)
uninstall cmd: C:\Program Files\Common Files\GTK\2.0\uninst.exe
ICQ Lite (ICQLite)
uninstall cmd: C:\Program Files\ICQLite\ICQLiteUninstall.EXE
(ICW)
(IE40)
(IE4Data)
(IE5BAKEX)
(IEData)
(InstallShield Uninstall Information)
iTunes 4.9.0.17 (InstallShield_{47808F78-F178-49DC-B708-15FE538B16FF})
version: 67698688
version (major): 4
version (minor): 9
estimated size: 14072
install date: 20050802
install location: C:\Program Files\iTunes\
install source: C:\WINDOWS\Downloaded Installations\{A89EB61A-717D-4E9B-BB70-7626DF2EB947}\
uninstall cmd: C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{47808F78-F178-49DC-B708-15FE538B16FF}
publisher: Apple Computer, Inc.
contact: AppleCare Support
help link:
http://www.info.apple.com/ help telephone: 1-800-275-2273
iPod Updater 2004-08-06 1.0 (InstallShield_{D43E1D3F-CC1F-4E41-80F5-9C1D28187DE9})
version: 16777216
version (major): 1
estimated size: 19133
install date: 20040928
install source: E:\Program Files\Apple\iPodUpdater\
uninstall cmd: C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D43E1D3F-CC1F-4E41-80F5-9C1D28187DE9}
publisher: Apple Computer, Inc.
comments:
contact: AppleCare
help link:
http://www.info.apple.com help telephone:
(Intel® Integrated Performance Primitives 1.1)
uninstall cmd: C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\system32\UninstIPP.isu
InterActual Player (InterActual Player)
uninstall cmd: C:\Program Files\InterActual\InterActual Player\inuninst.exe
Windows XP Hotfix - KB834707 20040929.110854 (KB834707)
uninstall cmd: C:\WINDOWS\$NtUninstallKB834707$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=834707
Windows XP Hotfix - KB867282 20050127.090417 (KB867282)
uninstall cmd: C:\WINDOWS\$NtUninstallKB867282$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=867282
Microsoft Data Access Components KB870669 (KB870669)
uninstall cmd: C:\WINDOWS\muninst.exe C:\WINDOWS\INF\KB870669.inf
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=KB870669
Windows XP Hotfix - KB873333 20050114.005213 (KB873333)
uninstall cmd: C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=873333
Windows XP Hotfix - KB873339 20041117.092459 (KB873339)
uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=873339
Security Update for Windows XP (KB883939) 1 (KB883939)
install date: 20050619
uninstall cmd: "C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=883939
(KB884016)
Windows XP Hotfix - KB885250 20050118.202711 (KB885250)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=885250
Windows XP Hotfix - KB885835 20041027.181713 (KB885835)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=885835
Windows XP Hotfix - KB885836 20041028.173203 (KB885836)
uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=885836
Windows XP Hotfix - KB886185 20041021.090540 (KB886185)
uninstall cmd: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=886185
Windows XP Hotfix - KB887472 20041014.162858 (KB887472)
uninstall cmd: C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=887472
Windows XP Hotfix - KB887742 20041103.095002 (KB887742)
uninstall cmd: C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=887742
Windows XP Hotfix - KB888113 20041116.131036 (KB888113)
uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=888113
Windows XP Hotfix - KB888302 20041207.111426 (KB888302)
uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=888302
Security Update for Windows XP (KB890046) 1 (KB890046)
install date: 20050618
uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=890046
Windows XP Hotfix - KB890047 20041221.124506 (KB890047)
uninstall cmd: C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=890047
Windows XP Hotfix - KB890175 20041201.233338 (KB890175)
uninstall cmd: C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=890175
Windows XP Hotfix - KB890859 1 (KB890859)
install date: 20050416
uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=890859
Windows XP Hotfix - KB890923 1 (KB890923)
install date: 20050416
uninstall cmd: "C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=890923
Windows XP Hotfix - KB891781 20050110.165439 (KB891781)
uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=891781
Windows XP Hotfix - KB893066 1 (KB893066)
install date: 20050416
uninstall cmd: "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=893066
Windows XP Hotfix - KB893086 1 (KB893086)
install date: 20050416
uninstall cmd: "C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=893086
Security Update for Windows XP (KB893756) 1 (KB893756)
install date: 20050818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=893756
Windows Installer 3.1 (KB893803) 3.1 (KB893803)
uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://go.microsoft.com/fwlink/?LinkId=42467Windows Installer 3.1 (KB893803) 3.1 (KB893803v2)
uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://go.microsoft.com/fwlink/?LinkId=42467Update for Windows XP (KB894391) 1 (KB894391)
install date: 20050818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=894391
Security Update for Windows XP (KB896358) 1 (KB896358)
install date: 20050619
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=896358
Security Update for Windows XP (KB896422) 1 (KB896422)
install date: 20050617
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=896422
Security Update for Windows XP (KB896423) 1 (KB896423)
install date: 20050818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=896423
Security Update for Windows XP (KB896424) 1 (KB896424)
install date: 20051212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=896424
Security Update for Windows XP (KB896428) 1 (KB896428)
install date: 20050617
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=896428
Security Update for Windows XP (KB896688) 1 (KB896688)
install date: 20051212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=896688
Update for Windows XP (KB896727) 1 (KB896727)
install date: 20050818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=896727
Update for Windows XP (KB898461) 1 (KB898461)
install date: 20050628
uninstall cmd: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=898461
Security Update for Windows XP (KB899587) 1 (KB899587)
install date: 20050818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=899587
Security Update for Windows XP (KB899588) 1 (KB899588)
install date: 20050818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=899588
Security Update for Windows XP (KB899591) 1 (KB899591)
install date: 20050818
uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=899591
Security Update for Windows XP (KB900725) 1 (KB900725)
install date: 20051212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=900725
Security Update for Windows XP (KB901017) 1 (KB901017)
install date: 20051212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=901017
Security Update for Windows XP (KB901214) 1 (KB901214)
install date: 20050714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=901214
Security Update for Windows XP (KB902400) 1 (KB902400)
install date: 20051212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=902400
Security Update for Windows XP (KB903235) 1 (KB903235)
install date: 20050714
uninstall cmd: "C:\WINDOWS\$NtUninstallKB903235$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=903235
Security Update for Windows XP (KB904706) 1 (KB904706)
install date: 20051212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=904706
Security Update for Windows XP (KB905414) 1 (KB905414)
install date: 20051212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=905414
Security Update for Windows XP (KB905749) 1 (KB905749)
install date: 20051212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=905749
Security Update for Windows XP (KB905915) 1 (KB905915)
install date: 20060110
uninstall cmd: "C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=905915
Security Update for Windows XP (KB908519) 1 (KB908519)
install date: 20060120
uninstall cmd: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=908519
Update for Windows XP (KB910437) 1 (KB910437)
install date: 20060110
uninstall cmd: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=910437
Security Update for Windows XP (KB912919) 1 (KB912919)
install date: 20060110
uninstall cmd: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link:
http://support.microsoft.com?kbid=912919
Lexmark Supplies Monitor (Lexmark Supplies Monitor)
uninstall cmd: C:\WINDOWS\system32\LXSMUNIN.EXE
Lexmark Z23-Z33 (Lexmark Z23-Z33)
uninstall cmd: C:\WINDOWS\system32\spool\drivers\w32x86\3\lxaiUN5C.EXE -dLexmark Z23-Z33
LimeWire 4.10.0 4.10.0 (LimeWire)
uninstall cmd: "C:\Program Files\LimeWire\uninstall.exe"
publisher: Lime Wire, LLC
help link:
http://www.limewire.com/supportMacromedia Shockwave Player (Macromedia Shockwave Player)
uninstall cmd: C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Microsoft .NET Framework 2.0 Beta (Microsoft .NET Framework 2.0 Beta)
install location: C:\Program Files\Microsoft Visual Studio 8\
uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v2.0.40607\Microsoft .NET Framework 2.0 Beta\install.exe
publisher: Microsoft
help link:
http://support.microsoft.com/default.aspx?scid=FH;EN-US;vsnet&SD=GN&FR=0&LN=EN-US (Microsoft NetShow Player 2.0)
Microsoft Visual J# .NET Redistributable Package 2.0 Beta (Microsoft Visual J# .NET Redistributable Package 2.0 Beta)
install location: C:\Program Files\Microsoft Visual Studio 8\
uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v2.0.40607\Microsoft Visual J# .NET Redistributable Package 2.0 Beta\install.exe
publisher: Microsoft
help link:
http://support.microsoft.com/default.aspx?scid=FH;EN-US;vsnet&SD=GN&FR=0&LN=EN-US (MobileOptionPack)
Monster Garage (Monster Garage)
uninstall cmd: C:\PROGRA~1\ACTIVI~2\MONSTE~1\UNWISE.EXE C:\PROGRA~1\ACTIVI~2\MONSTE~1\INSTALL.LOG
Mozilla Firefox (1.5) 1.5 (en-US) (Mozilla Firefox (1.5))
install location: C:\Program Files\Mozilla Firefox
uninstall cmd: C:\WINDOWS\UninstallFirefox.exe /ua "1.5 (en-US)"
publisher: Mozi
