Problem with Add/Remove

[LilBob]

Somehow, my PC got infected. I found this out only after noticing my home page on IE7 was changed. Running XP Pro w/SP3. Scanned PC in both Safe & Normal modes with MBAM, Spybot S&D, SuperAntispyware & Avast. Deleted all malware found. Ran chkdsk & sfc. I also did a repair install & re-installed all Windows updates. Ran Rootkit Revealer (nothing found). My problem is neither Add/Remove programs nor Revo Unintaller show a complete list of all applications on my system. Add/Remove shows a lot of apps that weren’t there before with lots of blank areas. I tried installing the latest version of Windows Installer to see if that might correct the problem (no go). Can anybody tell me what’s causing this & how can I rectify it? Almost forgot, ran HJT & deleted some entries there.
Thanks for any help you can give me.
Bob

 

[goombawaho]

Google search "add remove programs white space"

Do you have an Autocad/Autodesk products installed?

 

[LilBob]

No Autocad/Autodesk products installed. Googling "add remove programs white space" jogged my memory. Problem with Add/Remove started before infection. Ran Revo Uninstaller & noted only about 30 apps listed (way too low). Found the following site in one of the forums:

http://www.christensen-software.com/freeware/RemoveWhitespaceFromAddRemovePrograms.exe

Ran that app & it cleared out all the white spaces but still not populating a full list of apps installed. Revo shows 36 (should be @ least twice that). As a side note, had difficulty getting into this site & replying. 1st reply didn't go thru, got timed out by IE. No problem visiting other sites (not sure if this is another symptom). Replying this time on wifes PC.

Trying to think of any new apps I installed to see if that might be the root of the problem. I've been in & out of hospital for back surgeries, infections & extensive rehab. Only recently been able to sit at PC & do things. Meds tend to make it difficult to recall all so it may be awhile before I narrow them down. Any other ideas?

Thanks for your help, Bob

 

[goombawaho]

Sorry to hear about the surgery. Have you ruled out malware being on the system STILL? Run MalwareByte's Anti-Malware and then run GMER and see what it says. Save a log from GMER before closing and post it here. Also, post a HijackThis log.

 

[LilBob]

Yes on malware (see1st post). Ran GMER. here's the log:

GMER 1.0.15.15281 -

http://www.gmer.net

Rootkit quick scan 2010-02-18 20:57:11
Windows 5.1.2600 Service Pack 3
Running: GMER 1.0.exe; Driver: C:\DOCUME~1\ADMINI~2\LOCALS~1\Temp\afniikow.sys


---- System - GMER 1.0.15 ----

Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateProcessEx [0xEDFA24FE]
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateSection [0xEDFA2322]
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwLoadDriver [0xEDFA245C]
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) NtCreateSection
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ObInsertObject
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ObMakeTemporaryObject

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs aswSP.SYS (avast! self protection module/ALWIL Software)

AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

Device \FileSystem\Fastfat \Fat aswSP.SYS (avast! self protection module/ALWIL Software)

AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

---- EOF - GMER 1.0.15 ----

Glitch with my PC gone. Mitght have been doing some updating on apps using Sys Resources. Revo now showing 39 apps. Add/Remove 1st showed no programs listed, now won't open. I even downloaded & ran Avira to scan for malware & nothing found. I really don't want to format my HD & reinstall everything if not needed but obviously, something is wrong.

Thanks again for all your help, Bob

 

[LilBob]

Also reran Avast, MBAM, Spybot S & D and SUPERAntisyware with nothing found.
Bob

 

[linney]

You could try unregistering then registering the appwiz.cpl from the Start Run box. You could also try the same on the Mshtml.dll

regsvr32 /u appwiz.cpl
regsvr32 appwiz.cpl



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

To check Permission right-click on the Key called "Uninstall" (or some of the sub-Keys). If your user has not got permission to read the Key then that might be a cause.


How do I restore security settings to the default settings?

http://support.microsoft.com/kb/313222#appliesto

 

[LilBob]

Hi linney,

You could try unregistering then registering the appwiz.cpl from the Start Run box.

regsvr32 /u appwiz.cpl
regsvr32 appwiz.cpl

I'm assuming there should be a / before appwiz.cpl

Also, when you say try the same on the Mshtml.dll the command would be:

regsvr32 /u Mshtml.dll
regsvr32 /Mshtml.dll

Restoring default security settings did not work

Thanks, Bob

 

[LilBob]

Update

Ran M$ Malicious Software Removal Tool & Trend Micro's HouseCall (full scan on both). Zip found. Running out of ideas.

Bob

 

[linney]

No / is required to register a file as there are no switches required.

regsvr32 /u appwiz.cpl
regsvr32 appwiz.cpl

regsvr32 /u Mshtml.dll
regsvr32 Mshtml.dll


Explanation of Regsvr32 usage and error messages

http://support.microsoft.com/kb/249873#appliesto

Here is a link to a Windows 7 Forum where the Windows 7 equivalent (blank or partially populated Programs and Features) is being discussed. There are several things that may apply to XP and might give you some other things to consider.

win 7 add/remove program list not populating correctly

http://social.answers.microsoft.com...s/thread/87a2c3a9-97fd-478d-9f20-020a25b94bd7

The end result for these types of problem, when the common solutions fail, is a clean install.


Add/Remove Programs list empty
thread779-1267685

 

[LilBob]

Both regsvr32 /u appwiz.cpl &regsvr32 appwiz.cpl ran successfully. However, when I ran regsvr32 /u Mshtml.dll & got the following message: 'Mshtml.dll was loaded but the DIIUnregisterServer entry point was not found. This file can not be registered'. Got the same message when I ran regsvr32 Mshtml.dll.

Could this be the cause of the problem? I'll check those other threads now.

Thanks again, Bob

 

[linney]

Sometimes the registration of a .dll fails with that message, there is mention of some of the reasons in one of the links I posted (regsvr32). Other reasons include dependencies of the particular .dll that are not accessible or available (I don't fully understand that myself).

It was just something to try and I wouldn't worry too much about MsHtml.dll as it is probably not the cause.

The cause, to my way of thinking, when the usual fixes fail to work, is a corrupted registry brought on by malware, or the use of registry cleaners and the like.

 

[LilBob]

None of those threads helped. Either they weren't pertinent, didn't work or was something I tried before (obviously ,unsuccessfully). :-(

I've never trusted registry cleaners & will not run them. They usually cause more damage than what you had before. I'm backing up all files now. I did find a back-up of my registry from about 3 weeks ago saved on my desktop. I usually back up registry & set a new restore point with any new apps added or major changes to my system. Once back up is completed, I may try restoring that earlier version of my registry or do a clean install (something I'm not looking forward to doing). It may depend on how much I think this glitch is worth doing so.

Thanks for all your help & I'll let you know how things work out.

Bob

 

[goombawaho]

I have never seen CCleaner registry cleaner cause a problem with a computer and I use it regularly. If you create the backup file before fixing, you should have no worries.

I wouldn't be afraid of CCLeaner - cannot speak for others.

 

[ANFPS26]

I've used several reg cleaners over the years. I've found them quite useful and never had a problem. CCleaner is one of the best. When in doubt back up the registry first.

Jim

 

[goombawaho]

Don't know that cleaning the registry is the problem here though!!!!

 

[LilBob]

Use CCleaner (been using it since it was 1st called Crap Cleaner) with no problems. I just don't trust registry cleaners. Tried using Sys Restore from point dated 1/31/10. No luck there either. I re-tried Repair Install with no success. I've finished full back up of my HD. Found a few apps that weren't working; uninstalled them (most using Revo, others with their uninstall program as those weren't listed in Add/Remove or Revo). Backed up Registry & wiil try importing earlier version of registry. If that doesn't work, I may keep running as is since Add/Remove & Revo not populating a full list of apps seems to be the only issue (now that all is safely backed up anyway). I'll update all as to the outcome.

Thanks for all your input, Bob

 

[goombawaho]

If you spend the time and went to the trouble of doing a repair install, I would have done a full format/reinstall. More bang for your buck, so to speak.

 

[LilBob]

Yes goombawaho, that's true but I would have had to reinstall all apps & updates for them & drivers. Tried easier method 1st with hope, alas, not the case. I've uninstalled the last few apps that I introduced to my system, no go there either. I've uninstalled a few apps that I found were not working & reinstalled. They work now & appear in both Add/Remove & Revo. All else still works fine & nothing detected on any scan I run. Have all critical files backed up in 2 places & may continue to run as is unless something else goes wrong. Have all my discs handy in case something does go wrong. Also checked MOBO & HD both showing no problems (temps running well in range for all too). If I find the cause & solution, I'll let all know for future reference.

Thanks to all again for your suggestions, Bob

 

[goombawaho]

When you get to 2 hours troubleshooting, it's generally time to cut your losses because for most people, 2.5 hrs would put Windows, all updates and all programs back onto a machine - not including data copy back.

This may not be correct if you have bootleg software or software install sources that are not available.

It's also not correct if you just like a challenge, but time is money, even if it's your own time that you could spend doing something else.