add or remove progrmae

yes antiarp is gone
and the other programs are:
choice guard
contacts
google toolbar for internet explorer
windows live beta(all programs)
windows live call
windows live messenger
windows live toolbar beta

DSS instructions removed.

Last edited by Belahzur on 15th October 2008, 5:20 pm; edited 1 time in total

Okay, that didn't show what I wanted it to show. :hmm:
Do you have Hijack This on your computer?

actually i have this programe but i have not any experience how to deal with this programe
i don`t know the benefit of this programe???

I'm just wondering, if the toolbars are still on your machine, HJT would see them leftover in the registry.

These programs you named, one you have in brackets as all programs. Your refering to the all programs on start menu?

choice guard
contacts
google toolbar for internet explorer
windows live beta(all programs)
windows live call
windows live messenger
windows live toolbar beta

You can delete these if they are still on the start menu/all programs menu.

no nothing is start menu
i have already removed these programs but by wrongly way
someone told me to remove them from
start
run
regedit
but where can i find them? i don`t know
so what about HijackThis ?

Okay, let's have a look around start, see what's going on.

Open a new notepad file.
Input this into notepad.

@echo off
dir "C:\Documents and Settings\All Users\Start Menu\Programs" > log.txt
dir "C:\Documents and Settings\XXXXXXX\Start Menu\Programs" > log2.txt
start notepad log.txt
start notepad log2.txt
del look.bat
cls
echo Paste log.txt + log2.txt + log3.txt back on Geekpolice.
echo.
echo.
pause

Change the XXXX to your user name again.
Save this as look.bat, save it to your desktop.
Double click to run look.bat.
It will make two log files, paste both back here.

one is empty and this is the other one
http://rapidshare.com/files/154313865/log.rar.html

Wrong again.
I don't know how/where it's picking up leftovers that show in the add/remove programs, but I'll ask Doc to swing by here, see what ideas he's got.

And while I'm here, are you the admin of this system or your parents? because your YIM conversations are being keylogged.

you mean immonitor yahoo messenger?
its ok dont worry
this programe is used to keylog in other computers not mine

Haha.
I've posted for Doc to take a look, cause I'm running out of places to look.

One last attempt at finding them in the registry.
Delete the old look.txt's and look.bat.

Open a new notepad file.
Input this into notepad.

@echo off
regedit /e look.txt "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall"
start notepad look.txt

Save this as look.bat.
Double click and run look.bat.
Post look.txt back here. (rapidshare will be easier than taking up a few posts, cause this will be a huge notepad file)

http://rapidshare.com/files/154377171/look.rar.html
this time i think our problem will be solved
i hope that

Nope, I didn't have high hopes for it.
I don't know what's causing it.
The uninstall key is where the add/remove programs list is located so to speak, it shows in add/remove programs but not the registry.

so what can i do
crash my computer?

The one place I overlooked, a different section of the registry.
One or two items are located in HKCU, not HKLM like the others.

Delete look.txt+look.bat again

Open a new notepad file.
Input this into notepad.

@echo off
regedit /e look.txt "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall"
start notepad look.txt

Save this as look.bat.
Double click and run look.bat.
Post look.txt back here.

mmmmmmmm
i am bored of trying

Me too.
Good learning excerise for me though.

Ok, try this:

Save everything in the code box below with notepad on your desktop and name it as addremove.reg





Double click on addremove.reg, restart your computer and see if it works.

ok i did wt u said
wt can i do after this???

Check if the Remove option is back.

no way
nothing new
something else i have a problem in messenger : when am trying 2 install it the programe tell me that i have already installed it and i have 2 remove it and as u know i cant

Try this code:



Save it as addrestore.reg and double click it.


If it doesn't work post your download the current version of HijackThis from The links provided here..

Double click and run the installer.
It will install to C:\Program Files\Trend Micro\Hijack This\hijackthis.exe
After installing, you should get the user agreement, press accept and Hijack This will run.
Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This finds, copy and paste it here:

http://geekpolice.net/malware-removal-support-hijackthis-logs-f11/

ok the first solution didn`t work
and this is my log file
http://rapidshare.com/files/154648828/hijackthis.rar.html