strang problem

ok so a couple of says ago i was going to uninstall some programs and when i looked in my add/remove it looked all funky, some of the programs i have are gone for the uninstall even though they still work and there are a bunch of new ones listed. I ran everything in the "run and red me now" and attached are the logs, hopefully someone can help me fine out what is up with the ol' pc. thanks.

 

the last two files

 

Were you able to run AVG AntiSpyware or CounterSpy? If not, please run one of the two and attach the log also.

 

yeah i ran counter spy but forgot to attach the log, here it is sorry.

 

First, please disable any antivirus and/or antispy programs you have installed so they will not block this fix.

Please look in Add/Remove Programs for the following and uninstall them if found:

Spyware Terminator

Now scan with HijackThis and check the boxes for the following entries:
( Make sure ALL browser windows are closed when you click FIX )

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - Startup: MRU-Blaster Silent Clean.lnk = C:\Program Files\MRU-Blaster\mrublaster.exe

Again, make sure ALL browser windows are closed when you click FIX.

• Now Click on Start, then Run ... type services.msc into the box that opens up, and press 'OK'.
• On the page that opens, scroll down to McAfee Application Installer Cleanup
• Then right click the entry, select Properties and press Stop Service.
• When it shows that it is stopped, next please set the Start-up Type to 'Disabled'.
• Click OK until you get back to Windows.

• Next, run HJT, but instead of scanning, click on the None of the above, just start the program button at the bottom of the choices.
• At the lower right, click on the Config button
• Then click the Misc tools button
• Select Delete an NT Service
• Copy/paste 0268461186701815mcinstcleanup into the box that opens, and press OK
• If you receive any error messages just ignore them and continue.
• Now exit HJT but do not reboot when it tells you it needs to. We will do that further down after running HJT again to fix some other items.

Copy the contents of the below Quote Box to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file fixme.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.) Then double-click on the fixme.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to Add in to the registry, say yes.

Now download The Avenger by Swandog46, and save it to your Desktop.

• Extract avenger.exe from the Zip file and save it to your desktop
• Run avenger.exe by double-clicking on it.
• Check the 'Input script manually' box.
• Click on the magnifying glass icon.
• Copy everything in the Quote box below, and paste it in the box that opens:

• Now click the 'Done' button.
• Click on the traffic light icon and OK the prompt.
• You will be prompted to restart, OK the prompt and your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt

Please download ATF Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.

• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.

If you use Firefox browser

• Click Firefox at the top and choose: Select All
• Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All
• Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main ATF Cleaner menu to close the program.

After you complete the above reboot once more and then attach the following logs.

• HijackThis Log
• ShowNew Log
• GetRunKey Log
• Avenger Log

Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now.

 

ok i did everything and i uninstalled mcafee , now am running avast, an old favorite. i still have some weird programs listed in add remove much as " bufferchm, d1300, d1300 help, devicemanagmentqfolder, status, toolbox, trayapp, unload, webfldrs xp and webreg. also none of these have a add-remove button in the add/remove programs. anyway here are the logs.

 

last log

 

Almost done, procede with the below...

• Run avenger.exe by double-clicking on it.
• Check the 'Input script manually' box.
• Click on the magnifying glass icon.
• Copy everything in the Quote box below, and paste it in the box that opens:

• Now click the 'Done' button.
• Click on the traffic light icon and OK the prompt.
• You will be prompted to restart, OK the prompt and your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt

After you have rebooted from the above, run ATF cleaner and attach the log from Avenger.

How are things running? Any Problems?

 

ok done, seems to be working ok but those programs are still listed in the add/remove with out an uninstall button.

 

Which ones? Follow the below and attach the log.

Getting Uninstall Programs List From The Registry

 

ok i used the getunkey and they are not listed there but here is a screenshot of the uninstall screen. they are the ones in the red boxes and they don't have a remove button. and also as you can see the microsoft office have a excel icon, i have been reading something about this and some people have what i am having and no one can figure out what is happening.

 

If you will attach the log anyway so I can look thru it.

 

here it is

 

Please download RegSrch.zip

Unzip the archive to your desktop and double click on the VBS file.
(If your AntiVirus alerts, allow the script to run.

Now enter all of the below one by one and post back with the results in this thread (call it regsrch.txt).

 

here it is

 

We can remove the registry entries however doing so may effect other installed programs that are related. Also, let me clarify, these are not Malware related, they are related to valid programs you have installed or previously installed.

Since this is no longer a Malware issue I would recommend your posting in the Software Forum.

 

ok thanks a lot for the help

 

Your Welcome!