oneoleguy

Using Google Search for the term "Windows 7 User Account Disabled" I found enough instructions to the find and change 'User Credentials'. I can now access the Sony from the Compaq. Thanks for your assistance.

AND?

Update: I ran the Homegroup Troubleshooter on the Sony and told it that some PCs couldn't access it's files and then went to the Compaq which couldn't access it's files. Strange, now all the computers on the network are visible and accessible from the Compaq EXCEPT the Sony. Go figure that a change on the Sony produced unexpected changes on the Compaq. Bill

Yes, both have passwords and sharing is still set. I had a rough afternoon yesterday, the network seems unstable. For some reason the PCs are accessible one minute and a few minutes later they aren't. This morning: The Sony can see and access all computers on the network. The Compaq can only see the Sony, but cannot access it. The Win2000 can see all other computers but cannot access either the Sony or the Compaq. I have another Win2000 active and didn't know it was on the network until yesterday. It can access all the other PCs on the network and it hasn't had the fixes I had found applied to it. The PCs had and changed their states several times yesterday and now I'm real confused. Any suggestions? Bill

I went through that document and: Made sure all PCs were in the same WORKGROUP That all PCs were in the same homegroup Changed each PCs Name Checked the Network and Sharing Center to ensure that all PCs were on the HOME network Rebooted both PCs many times Ran the HomeGroup Troubleshooter many times AND then finally on the Sony (the one I had the infected files on) SAW the other PCs. When I answered that YES it had fixed the problem, it told me that there was something invalid in the NAME or something like that. I was so excited to see the Networking working again, I didn't write down what it said. There was another issue that I didn't bring up initially. I didn't want to confuse the issue. I had gotten instructions on a fix to connect the Win7 PCs to my Win2000 PC. It had worked for about 3 hours and then I couldn't connect to it again I made sure the settings (i.e. WORKGROUP, etc.) were the same as the 2 Win7 PCs. I'm still trouble trying to get the Win2000 PC to connect with the others. It sees them but complained that the account was cancelled or something. I'll continue working with it. Anyway, that was a great document and helped me return to a working network. Thank you, Bill PS After the infection removals and the return of my networking, it's like having new PCs. Wow!

This is the last line of Maurices last email on the infections I had: "We are finished here. Best regards & Cheers !"

Hello, I've been working with Maurice http://forums.malwar...howtopic=102751 on a security issue. During that work, I ask about my Home Network issues and he suggested that I post my issues here. I have 2 Win7 64-bit PCs in my network and they have trouble communicating with each other. The Compaq sees the Sony in the network explorer. When attempting to connect to the Sony I am being prompted for a password...When it was working correctly several months ago, this prompting didn't happen. The Sony does not list the Compaq at all in the network explorer window. Could you assist me in correcting this set of problems? Bill

You've been very helpful Maurice. Thank you. Could you refer me to the networking people to see if they can help me with my network issue? Thanks again, Bill

Maurice, Explained that way, I see the reason for updating Firefox. This was my original message....All these issues have been corrected.

You won't believe this. I performed the 3 updates and then ran SecurityCheck again and got these results: Results of screen317's Security Check version 0.99.30 Windows 7 x64 (UAC is enabled) Internet Explorer 9 `````````````````````````````` Antivirus/Firewall Check: Windows Firewall Enabled! ESET Online Scanner v3 WMI entry may not exist for antivirus; attempting automatic update. ``````````````````````````````` Anti-malware/Other Utilities Check: Adobe Flash Player 10.3.183.15 Flash Player out of Date! Adobe Reader X (10.1.2) Mozilla Firefox (3.6.27) Firefox out of Date! ```````````````````````````````` Process Check: objlist.exe by Laurent Windows Defender MSMpEng.exe Malwarebytes' Anti-Malware mbamservice.exe Microsoft Security Essentials msseces.exe Microsoft Security Client Antimalware MsMpEng.exe Microsoft Security Client Antimalware NisSrv.exe Bill Halliday Desktop Malware identify and fix SecurityCheck.exe ``````````End of Log```````````` What that flash player message may be about is the FlashPlayer 11 for 64-bit. 3.6.27 is the latest version of 3.6 of firefox. I don't really want to go higher, for now.

Yes indeed, I did use the uninstall from the control panel. Before the run of RSIT yesterday. Those entries will be removed once I run a scan program that deletes unused entries in the registry, I hope! MBAM found no infections. The Windows Update went well with all updates Successful. Then the PC re-booted. The link you provided for McAfee was not a FREE download. I went to the Control Panel and uninstalled it. The uninstall wasn't a complete process as I'm unable to delete the fines in the McAfee subdirectory of Program Files(x86). Checkup Log ================================================================================================ Results of screen317's Security Check version 0.99.30 Windows 7 x64 (UAC is enabled) Internet Explorer 9 `````````````````````````````` Antivirus/Firewall Check: Windows Firewall Enabled! ESET Online Scanner v3 WMI entry may not exist for antivirus; attempting automatic update. ``````````````````````````````` Anti-malware/Other Utilities Check: Java™ 6 Update 30 Adobe Flash Player 10.3.183.11 Flash Player out of Date! Adobe Reader 9 Adobe Reader out of date! Mozilla Firefox (3.6.9) Firefox out of Date! ```````````````````````````````` Process Check: objlist.exe by Laurent Windows Defender MSMpEng.exe Malwarebytes' Anti-Malware mbamservice.exe Microsoft Security Essentials msseces.exe Microsoft Security Client Antimalware MsMpEng.exe Microsoft Security Client Antimalware NisSrv.exe Bill Halliday Desktop Malware identify and fix SecurityCheck.exe ``````````End of Log````````````

One last little tidbit. I checked the connection from this PC to my other PC and vise-versa. This PC could not see the other one at all The other PC was no longer prompting for a network password but connected to this PC instantly So, I still seem to have some problems!

I was so excited, but then I realized you'd like to see a screen print of it.

PS. I re-booted after deleting the Advanced System Care 4 and running the RSIT program. Both the Firewall and the Action Center are active!

info.txt ================================================================================ info.txt logfile of random's system information tool 1.09 2012-02-18 12:41:40 ======Uninstall list====== Update for Microsoft Office 2007 (KB2508958)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438} Update for Microsoft Office 2007 (KB2508958)-->msiexec /package {90120000-003B-0000-0000-0000000FF1CE} /uninstall {0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438} Update for Microsoft Office 2007 (KB2508958)-->msiexec /package {91120000-0051-0000-0000-0000000FF1CE} /uninstall {0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438} -->C:\ProgramData\{4E78170A-6049-4586-A083-3AECE1A687E4}\wsc_x1.exe -->C:\Windows\IsUninst.exe -fC:\Windows\system32\UninstIPP.isu 7-Zip 9.20-->C:\Program Files (x86)\7-Zip\Uninstall.exe ABBYY FineReader 6.0 Sprint-->MsiExec.exe /X{ACF60000-22B9-4CE9-98D6-2CCF359BAC07} Adobe AIR-->c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723} Adobe Flash Player 10 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10y_Plugin.exe -maintain plugin Adobe Flash Player 11 ActiveX 64-bit-->C:\Windows\system32\Macromed\Flash\FlashUtil64_11_0_1_ActiveX.exe -maintain activex Adobe Reader 9.5.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A95000000001} Apple Application Support-->MsiExec.exe /I{6A3F9D74-BB80-4451-8CA1-4B3A857F1359} Apple Software Update-->MsiExec.exe /I{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} ArcSoft WebCam Companion 2-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9973498D-EA29-4A68-BE0B-C88D6E03E928}\Setup.exe" -l0x9 Ask Toolbar-->MsiExec.exe /I{86D4B82A-ABED-442A-BE86-96357B70F4FE} Auslogics Disk Defrag-->"C:\Program Files (x86)\Auslogics\Auslogics Disk Defrag\unins000.exe" Avery Wizard 3.1-->MsiExec.exe /I{B4E96960-5F6B-48B9-A5BD-6A5A9BB4F027} Avery Wizard 4.0-->MsiExec.exe /X{F97272B4-82C4-46B2-BCF1-C4D6E8CAB3E6} AVS Update Manager 1.0-->"C:\Program Files (x86)\AVS4YOU\AVSUpdateManager\unins000.exe" AVS Video Converter 6-->"C:\Program Files (x86)\AVS4YOU\AVSVideoConverter6\unins000.exe" AVS4YOU Software Navigator 1.3-->"C:\Program Files (x86)\AVS4YOU\AVSSoftwareNavigator\unins000.exe" Belarc Advisor 8.2-->"C:\PROGRA~2\Belarc\Advisor\Uninstall.exe" "C:\PROGRA~2\Belarc\Advisor\INSTALL.LOG" Bing Bar-->C:\Program Files (x86)\Bing Bar Installer\InstallManager.exe /UNINSTALL Bulk Mailer-->"C:\ProgramData\{2408CEC0-B073-4626-BC31-20BADBC07887}\mailer_setup.exe" REMOVE=TRUE MODIFY=FALSE Bulk Mailer-->C:\ProgramData\{2408CEC0-B073-4626-BC31-20BADBC07887}\mailer_setup.exe CashSystemX-->C:\Program Files (x86)\CashSystemX\Uninstall.exe Conduit Engine-->C:\PROGRA~2\CONDUI~1\ConduitEngineUninstall.exe Dolby Control Center-->MsiExec.exe /I{D035FBF6-FDEF-487D-89CA-6F9DD07B783F} EditPlus 3-->C:\Program Files (x86)\EditPlus 3\remove.exe Email Extractor-->"C:\ProgramData\{A622CA4A-0A5A-43C3-AF4F-ABBE76154383}\email-extractor-setup.exe" REMOVE=TRUE MODIFY=FALSE Email Extractor-->C:\ProgramData\{A622CA4A-0A5A-43C3-AF4F-ABBE76154383}\email-extractor-setup.exe Email Verifier-->"C:\ProgramData\{36B7E4FF-9E7B-46F2-B3E9-D12C3B4B7F9B}\email_verifier_pro_setup.exe" REMOVE=TRUE MODIFY=FALSE Email Verifier-->C:\ProgramData\{36B7E4FF-9E7B-46F2-B3E9-D12C3B4B7F9B}\email_verifier_pro_setup.exe ERUNT 1.1j-->"C:\Program Files (x86)\ERUNT\unins000.exe" ESET Online Scanner v3-->C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe ExamDiff 1.8 (Build 1.8.0.3)-->"C:\Program Files (x86)\ExamDiff\unins000.exe" FaxRedist-->MsiExec.exe /I{2C8CC208-965C-48A1-90A8-DFB484358F1C} FileZilla Client 3.5.2-->C:\Program Files (x86)\FileZilla FTP Client\uninstall.exe forexfreedom-->C:\Program Files (x86)\forexfreedom\Uninstall.exe GIMP 2.6.11-->"C:\Program Files (x86)\GIMP-2.0\setup\unins000.exe" Gimp-->"C:\Windows\unins000.exe" Google Earth-->MsiExec.exe /X{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E} Google SketchUp 8-->MsiExec.exe /X{D22002ED-EE2A-4CB1-A63D-430E62A2E8D8} Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} I Want This-->C:\Program Files (x86)\I Want This\Uninstall.exe ieSpell-->"C:\Program Files (x86)\ieSpell\uninst.exe" Interbank FX Trader 4.00-->"C:\Program Files (x86)\Interbank FX Trader 4\Uninstall.exe" "C:\Program Files (x86)\Interbank FX Trader 4\install.log" Java 6 Update 30-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216030FF} LG USB Modem driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\Setup.exe" -l0x9 LG Live Email Autoresponder-->"C:\ProgramData\{8921F4DB-47CF-4BD4-9F2F-01D3AF03EDC0}\autoresponder_setup.exe" REMOVE=TRUE MODIFY=FALSE Live Email Autoresponder-->C:\ProgramData\{8921F4DB-47CF-4BD4-9F2F-01D3AF03EDC0}\autoresponder_setup.exe Live TV-->"C:\Program Files (x86)\LIVE TV\unins000.exe" McAfee Security Scan Plus-->"C:\Program Files (x86)\McAfee Security Scan\uninstall.exe" Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} Microsoft .NET Framework 4 Extended-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\Setup.exe /repair /x86 /x64 /parameterfolder Extended Microsoft .NET Framework 4 Extended-->MsiExec.exe /X{8E34682C-8118-31F1-BC4C-98CD9675E1C2} Microsoft Antimalware-->MsiExec.exe /X{05BFB060-4F22-4710-B0A2-2801A1B606C5} Microsoft Office Access MUI (English) 2007-->MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE} Microsoft Office Access Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE} Microsoft Office Enterprise 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE} Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE} Microsoft Office Groove MUI (English) 2007-->MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE} Microsoft Office Groove Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0114-0409-0000-0000000FF1CE} Microsoft Office InfoPath MUI (English) 2007-->MsiExec.exe /X{90120000-0044-0409-0000-0000000FF1CE} Microsoft Office Office 64-bit Components 2007-->MsiExec.exe /X{90120000-002A-0000-1000-0000000FF1CE} Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE} Microsoft Office Outlook MUI (English) 2007-->MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE} Microsoft Office Project MUI (English) 2007-->MsiExec.exe /X{90120000-00B4-0409-0000-0000000FF1CE} Microsoft Office Project Professional 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PRJPRO /dll OSETUP.DLL Microsoft Office Project Professional 2007-->MsiExec.exe /X{90120000-003B-0000-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE} Microsoft Office Publisher MUI (English) 2007-->MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE} Microsoft Office Shared 64-bit MUI (English) 2007-->MsiExec.exe /X{90120000-002A-0409-1000-0000000FF1CE} Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0116-0409-1000-0000000FF1CE} Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE} Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE} Microsoft Office Visio MUI (English) 2007-->MsiExec.exe /X{90120000-0054-0409-0000-0000000FF1CE} Microsoft Office Visio Professional 2007-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall VISPROR /dll OSETUP.DLL Microsoft Office Visio Professional 2007-->MsiExec.exe /X{91120000-0051-0000-0000-0000000FF1CE} Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE} Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs-->MsiExec.exe /X{90120000-00B2-0409-0000-0000000FF1CE} Microsoft Security Client-->MsiExec.exe /I{42738DB0-FC3E-4672-A99B-9372F5696E30} Microsoft Security Essentials-->C:\Program Files\Microsoft Security Client\Setup.exe /x Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2} Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148-->MsiExec.exe /X{4B6C7001-C7D6-3710-913E-5BC23FCE91E6} Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F} Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} Microsoft Visual J# 2.0 Redistributable Package-->C:\Windows\Microsoft.NET\Framework\v2.0.50727\Microsoft Visual J# 2.0 Redistributable Package\install.exe Mozilla Firefox (3.6.9)-->C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe MySQL Connector C 6.0.2-->MsiExec.exe /I{5B6A2A7C-658E-4661-A254-3C36F5B63943} MySQL Connector C++ 1.1.0-->MsiExec.exe /I{3C481CDB-34E8-4CEF-B487-4C9C60530CFC} MySQL Connector J-->MsiExec.exe /I{090C73E1-BB48-403D-9DFF-A60FD71FF73A} MySQL Connector Net 6.4.4-->MsiExec.exe /I{2DDC7E93-29AB-4260-A9DB-697F7FA88157} MySQL Connector/ODBC 5.1-->MsiExec.exe /I{C44218B2-EC4D-4EB9-A3E3-F8F4A46927EC} MySQL Installer-->MsiExec.exe /I{B9A129AB-CA6B-4CD1-B55C-792722E2B947} MySQL Server 5.5-->MsiExec.exe /I{F71EAE49-EF2E-4DBB-9A36-62E7A7EE3A85} MySQL Workbench 5.2 CE-->MsiExec.exe /I{944322AF-5D21-43F7-87DE-06BB30A1C369} Net Extractor-->C:\PROGRA~2\SOFTWA~1\UNWISE.EXE C:\PROGRA~2\SOFTWA~1\INSTALL.LOG NetAssistant-->MsiExec.exe /X{1266764D-FC4F-4FA7-B63B-884D53B1680F} NetPicks Ultimate Swing Trader-->C:\Program Files (x86)\NetPicks Ultimate Swing Trader\UninstallOHForTradeStation.exe Office Suite X 3.3-->MsiExec.exe /I{1F56A6C9-81CA-4B5F-B471-8CCB13CF85DA} Oracle Trader 1.2.24-->"C:\Program Files (x86)\Oracle Trader\unins000.exe" PCLinq2 High-Speed USB Bridge Cable-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{95381165-5D16-4CD4-9162-57799A3F3AB5}\Setup.exe" -l0x9 Picasa 3-->"C:\Program Files (x86)\Google\Picasa3\Uninstall.exe" Presto! Forms 3.50.02-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{B79920F8-AB6E-45B2-B257-900BBA969FF7}\setup.exe" -l0x9 -anything Presto! PageManager 7.12.10-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{72CD4C5F-AB0B-4814-8780-9A4F26A2086B}\setup.exe" -l0x9 -anything QuickTime-->MsiExec.exe /I{C9E14402-3631-4182-B377-6B0DFB1C0339} RealNetworks - Microsoft Visual C++ 2008 Runtime-->MsiExec.exe /X{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA} RealPlayer-->c:\program files (x86)\real\realplayer\Update\r1puninst.exe RealNetworks|RealPlayer|15.0 Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly RealUpgrade 1.1-->MsiExec.exe /I{28C2DED6-325B-4CC7-983A-1777C8F7FBAB} Registry Life version 1.28-->"C:\Program Files (x86)\Registry Life\unins000.exe" Screen Sharing Plug-in-->MsiExec.exe /I{E141D65D-7E60-42AA-B58E-DCB107DE7A8B} Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85} Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85} Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-002A-0000-1000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85} Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85} Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-003B-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85} Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-0051-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85} Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7} Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-003B-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7} Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-0051-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7} Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FD8D7C9A-E56A-3E7B-BA6D-FE68F13296E3} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {F66C3466-1FDB-347C-B3AE-FB6C50627B10} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {B5BD3CA1-11AB-35A6-B22A-6A219DC0668E} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E720AD01-93D5-3E8E-BB8D-E4EF5AF4E5DD} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {BCD37DCB-F479-3D4D-A90E-A0F7575549C4} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FF811680-AECE-3F35-A98C-1B84B6E09168} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {5D45782A-1099-317E-ABCC-FF63D5B21386} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {E59B2174-E924-311F-8549-AD714C14664D} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Extended (KB2487367)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {9D621E6E-E010-3C80-A055-135891134750} /parameterfolder Extended Security Update for Microsoft .NET Framework 4 Extended (KB2656351)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {E59B2174-E924-311F-8549-AD714C14664D} /parameterfolder Extended Security Update for Microsoft Office Project 2007 (KB949046)-->msiexec /package {90120000-003B-0000-0000-0000000FF1CE} /uninstall {B14B8A2C-6EB4-4FB6-B589-F6A5ABEC5B00} Skype Click to Call-->MsiExec.exe /I{B6CF2967-C81E-40C0-9815-C05774FEF120} Skype™ 5.5-->MsiExec.exe /X{AA59DDE4-B672-4621-A016-4C248204957A} Smart Defrag 2-->"C:\Program Files (x86)\IObit\Smart Defrag 2\unins001.exe" SnagIt 8-->MsiExec.exe /I{0AEA9ECE-2AD0-4DF0-932E-F0AC6B771749} Software Success Bundle - NX/GS/AP-->C:\PROGRA~2\SOFTWA~1\UNWISE.EXE C:\PROGRA~2\SOFTWA~1\INSTALL.LOG TeamViewer 6-->C:\Program Files (x86)\TeamViewer\Version6\uninstall.exe The Weather Channel Screensaver-->C:\PROGRA~2\THEWEA~1\SCREEN~1\UNWISE.EXE C:\PROGRA~2\THEWEA~1\SCREEN~1\INSTALL.LOG ThermaData Logger-->MsiExec.exe /I{C3E63F02-D0B3-4017-AB9B-F46FE8C6DFE0} TypeItIn Professional V2.8.1-->"C:\Program Files (x86)\TypeItIn\unins000.exe" Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-003B-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-0051-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Client Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Client Update for Microsoft .NET Framework 4 Extended (KB2468871)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Extended Update for Microsoft .NET Framework 4 Extended (KB2533523)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Extended Update for Microsoft Office 2007 Help for Common Features (KB963673)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {AB365889-0395-4FAD-B702-CA5985D53D42} Update for Microsoft Office 2007 Help for Common Features (KB963673)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {AB365889-0395-4FAD-B702-CA5985D53D42} Update for Microsoft Office 2007 Help for Common Features (KB963673)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {AB365889-0395-4FAD-B702-CA5985D53D42} Update for Microsoft Office 2007 suites (KB2597998) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {97FF6C46-CE3A-47F6-BA6B-3D743ACA4054} Update for Microsoft Office Infopath 2007 Help (KB963662)-->msiexec /package {90120000-0044-0409-0000-0000000FF1CE} /uninstall {716B81B8-B13C-41DF-8EAC-7A2F656CAB63} Update for Microsoft Office OneNote 2007 Help (KB963670)-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {2744EF05-38E1-4D5D-B333-E021EDAEA245} Update for Microsoft Office Publisher 2007 Help (KB963667)-->msiexec /package {90120000-0019-0409-0000-0000000FF1CE} /uninstall {2E40DE55-B289-4C8B-8901-5D369B16814F} Update for Microsoft Office Script Editor Help (KB963671)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {CD11C6A2-FFC6-4271-8EAB-79C3582F505C} Update for Microsoft Office Script Editor Help (KB963671)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {CD11C6A2-FFC6-4271-8EAB-79C3582F505C} Update for Microsoft Office Script Editor Help (KB963671)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {CD11C6A2-FFC6-4271-8EAB-79C3582F505C} Update for Microsoft Office Word 2007 (KB974631)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {1D53FB73-9826-4541-B2E0-A239C6EBA718} Update for Microsoft Office Word 2007 (KB974631)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {34726474-50D6-49FC-B8AC-35411459D27A} VAIO Care-->"C:\Program Files (x86)\InstallShield Installation Information\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}\setup.exe" -runfromtemp -l0x0009 -removeonly ViceVersa Pro 2.5 64-bit (Build 2500)-->"C:\Program Files\ViceVersa Pro 2\unins000.exe" VLC media player 0.9.8a-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe Voicent Gateway-->MsiExec.exe /I{11EFA17B-5422-45B2-88C6-B5400B91D4F8} Vuze Remote Toolbar-->C:\PROGRA~2\VUZE_R~1\UNINST~1.EXE Vuze-->C:\Program Files (x86)\Vuze\uninstall.exe WIDCOMM Bluetooth Software-->MsiExec.exe /X{9E9D49A4-1DF4-4138-B7DB-5D87A893088E} Windows Live ID Sign-in Assistant-->MsiExec.exe /X{9B48B0AC-C813-4174-9042-476A887592C7} Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe WinSysClean X2-->"C:\ProgramData\{4E78170A-6049-4586-A083-3AECE1A687E4}\wsc_x1.exe" REMOVE=TRUE MODIFY=FALSE ======System event log====== Computer Name: Owner-PC Event Code: 7023 Message: The Windows Modules Installer service terminated with the following error: The process cannot access the file because it is being used by another process. Record Number: 619 Source Name: Service Control Manager Time Written: 20100311205251.696052-000 Event Type: Error User: Computer Name: Owner-PC Event Code: 4321 Message: The name "OWNER-PC :0" could not be registered on the interface with IP address 192.168.1.105. The computer with the IP address 192.168.1.102 did not allow the name to be claimed by this computer. Record Number: 517 Source Name: NetBT Time Written: 20100311204403.676343-000 Event Type: Error User: Computer Name: Owner-PC Event Code: 4321 Message: The name "OWNER-PC :0" could not be registered on the interface with IP address 192.168.1.105. The computer with the IP address 192.168.1.102 did not allow the name to be claimed by this computer. Record Number: 490 Source Name: NetBT Time Written: 20100311204330.502658-000 Event Type: Error User: Computer Name: Owner-PC Event Code: 4321 Message: The name "OWNER-PC :20" could not be registered on the interface with IP address 192.168.1.105. The computer with the IP address 192.168.1.102 did not allow the name to be claimed by this computer. Record Number: 489 Source Name: NetBT Time Written: 20100311204330.502658-000 Event Type: Error User: Computer Name: Owner-PC Event Code: 2505 Message: The server could not bind to the transport \Device\NetBT_Tcpip_{36A90CA6-E63C-412C-8AD2-AE7BA8AFC026} because another computer on the network has the same name. The server could not start. Record Number: 485 Source Name: Server Time Written: 20100311204330.000000-000 Event Type: Error User: =====Application event log===== Computer Name: Vaio Event Code: 11 Message: Possible Memory Leak. Application (C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted) (PID: 780) has passed a non-NULL pointer to RPC for an [out] parameter marked [allocate(all_nodes)]. [allocate(all_nodes)] parameters are always reallocated; if the original pointer contained the address of valid memory, that memory will be leaked. The call originated on the interface with UUID ({3F31C91E-2545-4B7B-9311-9529E8BFFEF6}), Method number (20). User Action: Contact your application vendor for an updated version of the application. Record Number: 273 Source Name: Microsoft-Windows-RPC-Events Time Written: 20100311221010.495329-000 Event Type: Warning User: NT AUTHORITY\LOCAL SERVICE Computer Name: Owner-PC Event Code: 1530 Message: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-3016247236-2053164898-2875212204-1001: Process 424 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3016247236-2053164898-2875212204-1001 Record Number: 233 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20100311205243.615238-000 Event Type: Warning User: NT AUTHORITY\SYSTEM Computer Name: Owner-PC Event Code: 1533 Message: Windows cannot delete the profile directory C:\Users\Administrator. This error may be caused by files in this directory being used by another program. DETAIL - The directory is not empty. Record Number: 210 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20100311204401.999113-000 Event Type: Error User: NT AUTHORITY\SYSTEM Computer Name: Owner-PC Event Code: 11 Message: Possible Memory Leak. Application (C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted) (PID: 976) has passed a non-NULL pointer to RPC for an [out] parameter marked [allocate(all_nodes)]. [allocate(all_nodes)] parameters are always reallocated; if the original pointer contained the address of valid memory, that memory will be leaked. The call originated on the interface with UUID ({3F31C91E-2545-4B7B-9311-9529E8BFFEF6}), Method number (20). User Action: Contact your application vendor for an updated version of the application. Record Number: 207 Source Name: Microsoft-Windows-RPC-Events Time Written: 20100311204357.880706-000 Event Type: Warning User: NT AUTHORITY\LOCAL SERVICE Computer Name: Owner-PC Event Code: 1008 Message: The Windows Search Service is starting up and attempting to remove the old search index {Reason: Full Index Reset}. Record Number: 119 Source Name: Microsoft-Windows-Search Time Written: 20100311223948.000000-000 Event Type: Warning User: =====Security event log===== Computer Name: 37L4247E29-32 Event Code: 4735 Message: A security-enabled local group was changed. Subject: Security ID: S-1-5-18 Account Name: 37L4247E29-32$ Account Domain: WORKGROUP Logon ID: 0x3e7 Group: Security ID: S-1-5-32-551 Group Name: Backup Operators Group Domain: Builtin Changed Attributes: SAM Account Name: - SID History: - Additional Information: Privileges: - Record Number: 5 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100311223145.655686-000 Event Type: Audit Success User: Computer Name: 37L4247E29-32 Event Code: 4731 Message: A security-enabled local group was created. Subject: Security ID: S-1-5-18 Account Name: 37L4247E29-32$ Account Domain: WORKGROUP Logon ID: 0x3e7 New Group: Security ID: S-1-5-32-551 Group Name: Backup Operators Group Domain: Builtin Attributes: SAM Account Name: Backup Operators SID History: - Additional Information: Privileges: - Record Number: 4 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100311223145.655686-000 Event Type: Audit Success User: Computer Name: 37L4247E29-32 Event Code: 4902 Message: The Per-user audit policy table was created. Number of Elements: 0 Policy ID: 0x32017 Record Number: 3 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100311223145.328085-000 Event Type: Audit Success User: Computer Name: 37L4247E29-32 Event Code: 4624 Message: An account was successfully logged on. Subject: Security ID: S-1-0-0 Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 0 New Logon: Security ID: S-1-5-18 Account Name: SYSTEM Account Domain: NT AUTHORITY Logon ID: 0x3e7 Logon GUID: {00000000-0000-0000-0000-000000000000} Process Information: Process ID: 0x4 Process Name: Network Information: Workstation Name: - Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: - Authentication Package: - Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon session is created. It is generated on the computer that was accessed. The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe. The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network). The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on. The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases. The authentication information fields provide detailed information about this specific logon request. - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event. - Transited services indicate which intermediate services have participated in this logon request. - Package name indicates which sub-protocol was used among the NTLM protocols. - Key length indicates the length of the generated session key. This will be 0 if no session key was requested. Record Number: 2 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100311223143.097281-000 Event Type: Audit Success User: Computer Name: 37L4247E29-32 Event Code: 4608 Message: Windows is starting up. This event is logged when LSASS.EXE starts and the auditing subsystem is initialized. Record Number: 1 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100311223142.988081-000 Event Type: Audit Success User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%CommonProgramFiles%\Microsoft Shared\Windows Live;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0;C:\Program Files\WIDCOMM\Bluetooth Software;C:\Program Files\WIDCOMM\Bluetooth Software\syswow64;C:\Program Files (x86)\QuickTime\QTSystem "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ "NUMBER_OF_PROCESSORS"=2 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 15 Stepping 13, GenuineIntel "PROCESSOR_REVISION"=0f0d "CLASSPATH"=.;C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files (x86)\Java\jre6\lib\ext\QTJava.zip -----------------EOF-----------------