microsoft office 2010 wierd autorun problem

So I stupidly reinstalled microsoft office 2010 (instead of openoffice) on this computer that I just reinstalled windows on.

I got killbox working first.

Once I got office installed everytime I try and run killbox office2010 starts msiexec.exe and tries to "configure" itself.

I uninstalled MSoffice and installed openoffice (freeware that is better) and it still tries to run it's config.

I downloaded a remove office2010 program and it worked perfectly. I deleted all the prefetch/common files/user references to MSoffice, and ripped through the registry removing everything I could find for MSoffice.

Still (only) when I run killbox and no other exe file does this. MSoffice starts up msiexec.exe and tries to configure itself.

I also deleted with file assassin or with replace at reboot then delete with killbox all the dlls and things that msoffice left on my computer that would not normally allow itself to be deleted. and with hijackthis I still have BHO hooks related to msoffice that I can't get rid of.

As you can see in hijackthis I don't let anything run at startup or anything extra to run.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:26:39 PM, on 10/8/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\All Users\Desktop\KillBox.exe
C:\Documents and Settings\All Users\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O4 - HKLM\..\Run: [VirtualCloneDrive] "d:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - S-1-5-18 Startup: Shortcut to taskmgr.lnk = C:\WINDOWS\system32\taskmgr.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: things_to_do.txt (User 'SYSTEM')
O4 - .DEFAULT Startup: Shortcut to taskmgr.lnk = C:\WINDOWS\system32\taskmgr.exe (User 'Default user')
O4 - .DEFAULT Startup: things_to_do.txt (User 'Default user')
O4 - Startup: Shortcut to taskmgr.lnk = C:\WINDOWS\system32\taskmgr.exe
O4 - Startup: things_to_do.txt
O4 - Global Startup: Shortcut to Smc.lnk = C:\Program Files\Sygate\SPF\Smc.exe
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

--
End of file - 2296 bytes

Please help me to rid the evil Microsoft from my killbox.

 

>> So I stupidly reinstalled Microsoft office 2010 (instead of open office) on this computer that I just reinstalled windows on. needhelpsometimes <<

Since this is evidently a "recent" reinstallation of Microsoft Office which was "on this computer that I just reinstalled windows on..."

Have you tried performing a Windows Restore by choosing a Windows Restore Point which precedes the installation of Microsoft Office 2010?

Good Luck -- COMP​

 

I always turn restore off (unfortunately)

I found out (in the registry) that killbox is linked to the folder:

C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\UICaptions

and I changed it to C:\Documents and Settings\All Users\Desktop
where it is located, but it still tries to config office when I run it.

I can't delete this folder btw it says the usual winXP can't delete used by another person or program message.

can't delete reg key either (I deleted one but the other won't let itself be deleted)

When I try and delete at reboot or replace with dummy at reboot the files in UICAPTIONS (folders 1036 and 3082) microsoft removes them from the list of delete at startup (something about removed from list by an external process)

So maybe I just need help force deleting the UICAPTIONS folder and the office reg key in hkey_current_user