|
|||||||
![]() |
|
|
LinkBack | Thread Tools | Search this Thread | Display Modes |
|
|
|
|
#1 (permalink) |
|
New Member
![]() Join Date: Jul 2006
Posts: 3
|
I have tried numerous fixes using ErrorNuker, Registry Mechanic, and Ad-Aware SE, but nothing seems to help completely uninstall what is left of Trend Micro. I need to complete the uninstall because it won't let me re-install the program until everything from the prior failed install is gone.
Read a little and here in the HiJackthis log: Logfile of HijackThis v1.99.1 Scan saved at 12:44:27 AM, on 12/21/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe C:\WINDOWS\System32\aniServ.exe C:\WINDOWS\system32\Ati2evxx.exe D:\The P Files\BufferZone\ClntSvc.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe F:\security suite\ewidoctrl.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe D:\The P Files\Mozy\mozybackup.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\SearchIndexer.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe D:\The P Files\Error Nuker 2005\bin\ErrorNuker.exe D:\The P Files\DAEMON Tools\daemon.exe C:\WINDOWS\system32\atiptaxx.exe D:\The P Files\Adobe Professional 7.0\Distillr\Acrotray.exe D:\The P Files\Acronis\TrueImageMonitor.exe C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe D:\The P Files\BufferZone\CLIENTGUI.EXE C:\Program Files\Messenger\msmsgs.exe D:\The P Files\GetMail\GetMail.exe C:\WINDOWS\system32\ctfmon.exe D:\The P Files\Creative\MediaSource\Detector\CTDetect.exe D:\The P Files\Microsoft Office 2007 beta\ActiveSynch 4.2\Wcescomm.exe D:\THEPFI~1\MICROS~2\ACTIVE~1.2\rapimgr.exe C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE D:\The P Files\eyeQ\ARLaunch.exe D:\The P Files\Mozy\mozystat.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Internet Explorer\iexplore.exe D:\The P Files\Ad-Aware SE Personal\Ad-Aware.exe C:\Program Files\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\The P Files\Adobe Professional 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Error Nuker] D:\The P Files\Error Nuker 2005\bin\ErrorNuker.exe autostart O4 - HKLM\..\Run: [DAEMON Tools] "D:\The P Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "D:\The P Files\Adobe Professional 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [Acronis*True*Image Monitor] "D:\The P Files\Acronis\TrueImageMonitor.exe" O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe" O4 - HKLM\..\Run: [BufferZone] "D:\The P Files\BufferZone\CLIENTGUI.EXE" /STARTUP O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [getmail] "D:\The P Files\GetMail\GetMail.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Creative Detector] D:\The P Files\Creative\MediaSource\Detector\CTDetect.exe /R O4 - HKCU\..\Run: [Synergy Client] "D:\The P Files\Synergy\synergyc.exe" --no-daemon --debug WARNING --name zef-pc1 ZEF-PC2:24800 O4 - HKCU\..\Run: [updateMgr] "D:\The P Files\Adobe Professional 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_5 O4 - HKCU\..\Run: [H/PC Connection Agent] "D:\The P Files\Microsoft Office 2007 beta\ActiveSynch 4.2\Wcescomm.exe" O4 - Startup: Mozy Status.lnk = D:\The P Files\Mozy\mozystat.exe O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ? O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe O4 - Global Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: MiniEYE-MiniREAD Launch.lnk = D:\The P Files\eyeQ\ARLaunch.exe O8 - Extra context menu item: Convert link target to Adobe PDF - res://D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert to existing PDF - res://D:\The P Files\Adobe Professional 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\THEPFI~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\THEPFI~1\MICROS~2\ACTIVE~1.2\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\THEPFI~1\MICROS~2\ACTIVE~1.2\INetRepl.dll O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\THEPFI~1\MICROS~2\ACTIVE~1.2\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://install.charter.com/diskless/bin/tgctlcm.cab O16 - DPF: {15589FA1-C456-11CE-BF01-000000000000} - http://www.errornuker.com/products/e...rInstaller.exe O16 - DPF: {225781F3-B27C-4182-83F1-CBF79247D36B} (PHSVPNPortal.VPNPortalCtl) - http://portal.partners.org/vpn/PHSVPNPortal.CAB O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1197397205057 O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/amp...1.11_en_dl.cab O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by123fd.bay123.hotmail.msn.co...x/HMAtchmt.ocx O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Airgo Networks NIC Service (ANISERVICE) - Airgo Networks, Inc. - C:\WINDOWS\System32\aniServ.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: BufferZone Service (BufferZoneSvc) - Unknown owner - D:\The P Files\BufferZone\ClntSvc.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: ewido security suite control - ewido networks - F:\security suite\ewidoctrl.exe O23 - Service: getmail service - Unknown owner - c:\windows\system32\srvany.exe O23 - Service: Mozy Backup Service (MozyBackup) - Unknown owner - D:\The P Files\Mozy\mozybackup.exe What do I need to get rid of? Thanks! R |
|
|
|
|
|
#2 (permalink) |
|
Moderator
![]() Join Date: Dec 2005
Location: Melbourne, Australia
Age: 22
Posts: 5,418
|
Try option 3 at http://esupport.trendmicro.com/suppo...33129#P86_2140.
That should allow you to completely uninstall the program. If you're unable to run that tool, try reinstalling the program and then running that removal tool.
__________________
CPU: Core 2 Duo E6600 / MOBO: Gigabyte 965P-DS3 / GPU: Gigabyte HD4870 RAM: 2GB G.Skill F2-6400CL4D-2GBPK / HDD: 2TB Total HDD / PSU: Antec NeoPower 480W Cheap PSUs - 2% of system costs, responsible for 28% of system deaths As Sealed Stick was removed, lost or damaged, it shall be out of warranty validity. - The "Warranty void if removed" sticker on numerous CoolerMaster PSUs. |
|
|
|
![]() |
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| more computer problems (hijack log inside) | Rise | Computer Security | 10 | 04-02-2006 06:15 PM |
| hijackthis log: new comp basic problems? | stewie | Computer Security | 8 | 03-17-2006 03:00 PM |
| Hijackthis log OuterInfo spyware problems. | M0ddingMan1a | Computer Security | 13 | 03-13-2006 09:49 PM |
| Tons of adware and virus's (Hijackthis log) | MrBucket | Computer Security | 1 | 02-05-2006 07:54 PM |
| Windows XP log on problems | iljac | Operating Systems | 6 | 04-22-2005 04:37 PM |