Jan

5

[InActive] Does Anyone know what foxcglm.exe is?

Filed Under Virus | 

I asked this on the Windows XP forum [Does anyone know what "foycglm.exe" is?]and was advised to post in here. I followed the instructions in the Before you Post segment and have the logs required. I hope someone here can help.

info.txt logfile of random’s system information tool 1.04 2008-12-05 09:00:16

======Uninstall list======

–>C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu

–>C:\WINDOWS\System32\\MSIEXEC.EXE /x {09DA4F91-2A09-4232-AB8C-6BC740096DE3}

–>c:\WINDOWS\System32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}

–>c:\WINDOWS\System32\\MSIEXEC.EXE /x {8214CC02-6271-4DC8-B8DD-779933450264}

–>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

Adobe Flash Player 9 ActiveX–>C:\WINDOWS\System32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock

America Online–>C:\Program Files\Common Files\aolshare\Aolunins_us.exe

AOL Coach Version 1.0(Build:20011028.1)–>C:\WINDOWS\AolCInUn.exe

Atomic Pop–>"C:\Program Files\wildtangent\apps\gamechannel.exe" \removeitem {96777B4D-1A97-492E-B5DA-C624AA675280}

Blasterball 2–>"C:\Program Files\wildtangent\apps\gamechannel.exe" \removeitem {357ECB62-CD36-4B63-B57E-769D0CA174F4}

Blasterball Wild–>"C:\Program Files\wildtangent\apps\gamechannel.exe" \removeitem {28BA89E7-2F60-4BE7-BAA2-7949EB3FE527}

Canon Camera Support Core Library–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{91F1A0D6-23AD-49FE-8D4E-379485652214} /l1033

Canon Camera Window DS for ZoomBrowser EX–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{91203BD3-6C3E-472F-ADBD-F60FDC7C4010}

Canon Camera Window DVC for ZoomBrowser EX–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{4C96958A-6562-4143-B820-FF4890D3B734}

Canon Camera Window for ZoomBrowser EX–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{C7281207-4AA4-425E-B57A-0E9EF8445635}

Canon PhotoRecord–>MsiExec.exe /X{0878E100-C0BB-41E8-B4C6-C486B61FDA7B}

Canon RAW Image Task for ZoomBrowser EX–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{45EF4EE3-F591-4B74-A477-0CAE12934CE7}

Canon RemoteCapture Task for ZoomBrowser EX–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{28291BD5-92D2-4685-82DC-CCA925C53CCA}

Canon Utilities PhotoStitch 3.1–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{218BBBE3-FE63-4BB2-81A8-7435575A84FA}

Canon ZoomBrowser EX–>MsiExec.exe /X{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}

CCScore–>MsiExec.exe /I{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}

Click’N Design 3D–>C:\PROGRA~1\CLICK’~1\UNWISE.EXE C:\PROGRA~1\CLICK’~1\INSTALL.LOG

DLA–>MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}

ESSBrwr–>MsiExec.exe /I{643EAE81-920C-4931-9F0B-4B343B225CA6}

ESSCDBK–>MsiExec.exe /I{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}

ESScore–>MsiExec.exe /I{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}

ESSgui–>MsiExec.exe /I{91517631-A9F3-4B7C-B482-43E0068FD55A}

ESShelp–>MsiExec.exe /I{87843A41-7808-4F2E-B13F-25C1E67CF2FD}

ESSini–>MsiExec.exe /I{8E92D746-CD9F-4B90-9668-42B74C14F765}

ESSPCD–>MsiExec.exe /I{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}

ESSPDock–>MsiExec.exe /I{FCDB1C92-03C6-4C76-8625-371224256091}

ESSSONIC–>MsiExec.exe /I{073F22CE-9A5B-4A40-A604-C7270AC6BF34}

ESSTOOLS–>MsiExec.exe /I{8A502E38-29C9-49FA-BCFA-D727CA062589}

essvatgt–>MsiExec.exe /I{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}

essvcpt–>MsiExec.exe /I{D1973749-F5E7-40EB-B528-F2B78685B9FF}

HLPPDOCK–>MsiExec.exe /I{154508C0-07C5-4659-A7A0-E49968750D21}

hp center–>C:\WINDOWS\BWUnin-6.1.0.153.exe -AppId 137903

hp deskjet 3320 series (Remove only)–>C:\Program Files\hp deskjet 3320 series\hpfiui.exe -c -vdivid=HPF -vpnum=95 -vinstport=USB/DeskJet 3320/ -vproduct=3320 -huninstall

HP Instant Support–>C:\PROGRA~1\HPINST~1\UNWISE.EXE C:\PROGRA~1\HPINST~1\INSTALL.LOG

hp learning adventure–>c:\program files\HPSelect\Frontend\uninstall.exe

hp toolkit–>c:\Windows\HPTK\unhptkit.exe

Inactive HP Printer Drivers (Remove only)–>RunDll32 hpuninst.dll,InstallHinfSection UninstDefault 132 prntunin.inf

Intel(R) 845G Chipset Graphics Driver Software–>RUNDLL32.EXE C:\WINDOWS\System32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2562

InterVideo WinDVD–>"C:\Program Files\InstallShield Installation Information\{C1939820-A945-11D4-86F6-0001031E5712}\setup.exe" REMOVEALL

IrfanView (remove only)–>C:\Program Files\IrfanView\iv_uninstall.exe

J2SE Runtime Environment 5.0 Update 3–>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}

kgcbaby–>MsiExec.exe /I{E18B549C-5D15-45DA-8D8F-8FD2BD946344}

kgcbase–>MsiExec.exe /I{F22C222C-3CE2-4A4B-A83F-AF4681371ABE}

kgchday–>MsiExec.exe /I{11F3F858-4131-4FFA-A560-3FE282933B6E}

kgchlwn–>MsiExec.exe /I{03EDED24-8375-407D-A721-4643D9768BE1}

kgcinvt–>MsiExec.exe /I{9BD54685-1496-46A5-AB62-357CD140ED8B}

kgckids–>MsiExec.exe /I{693C08A7-9E76-43FF-B11E-9A58175474C4}

kgcmove–>MsiExec.exe /I{A1588373-1D86-4D44-86C9-78ABD190F9CC}

kgcvday–>MsiExec.exe /I{8A8664E1-84C8-4936-891C-BC1F07797549}

Kodak EasyShare software–>C:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_140010_4392011\Setup.exe /APR-REMOVE

KSU–>MsiExec.exe /I{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}

Kublox–>"C:\Program Files\wildtangent\apps\gamechannel.exe" \removeitem {F7A4D9BE-D989-45B9-BB49-2C0EA34B9991}

Lernout & Hauspie TruVoice American English TTS Engine–>RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\tv_enua.inf, Uninstall

Malwarebytes’ Anti-Malware–>"C:\Program Files\Malwarebytes’ Anti-Malware\unins000.exe"

Microsoft Web Publishing Wizard 1.52–>RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie4×86.inf,WebPostUninstall

Microsoft XML Parser and SDK–>MsiExec.exe /I{3E908702-AF35-4611-9518-955DA24B7E07}

Musicmatch?Jukebox–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,Launc hSetup "C:\Program Files\InstallShield Installation Information\{8EF1122E-E90C-4EE9-AB0C-7FDE2BA42C26}\setup.exe" -l0×9 -uninst

Nero Media Player–>C:\WINDOWS\UNNMP.exe /UNINSTALL

Network Play System (Patching)–>C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Electronic Arts\Network Play System\NPSPatch.isu"

Notifier–>MsiExec.exe /I{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}

NVIDIA Windows 2000/XP Display Drivers–>rundll32.exe C:\WINDOWS\System32\nvinstnt.dll,NvUninstallNT4 nvhp.inf

OfotoXMI–>MsiExec.exe /I{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}

OTtBP–>MsiExec.exe /I{F71760CD-0F8B-4DCC-B7B7-6B223CC3843C}

OTtBPSDK–>MsiExec.exe /I{3CA39B0C-BA85-4D42-AC0F-1FF5F60C3353}

PC-Doctor for Windows–>C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\PC-DOC~1\INSTALL.LOG

QuickTime–>C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{929408E6-D265-4174-805F-81D1D914E2A4} /l1033

RD Platinum v5.0–>"C:\Program Files\Angle Interactive\RD Platinum v5.0\Uninstall.exe" "C:\Program Files\Angle Interactive\RD Platinum v5.0\install.log" -u

RealPlayer Basic–>C:\Program Files\Common Files\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0

RecordNow Update Manager–>MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}

RecordNow–>MsiExec.exe /I{8214CC02-6271-4DC8-B8DD-779933450264}

RingMaster from Hewlett-Packard Desktops (remove only)–>"C:\Program Files\WildTangent\Apps\GameChannel\Games\8c9c48d7-2d03-4a1f-a303-5bd22ccabae1\Uninstall.exe"

S3Display–>s3uninst.exe -reg 5 ‘HKLM\Software\S3\S3Uninst\S3Display’

S3Gamma2–>s3uninst.exe -reg 5 ‘HKLM\Software\S3\S3Uninst\S3Gamma2′

S3Info2–>s3uninst.exe -reg 5 ‘HKLM\Software\S3\S3Uninst\S3Info2′

S3Overlay–>s3uninst.exe -reg 5 ‘HKLM\Software\S3\S3Uninst\S3Overlay’

SFR–>MsiExec.exe /I{DB02F716-6275-42E9-B8D2-83BA2BF5100B}

SHASTA–>MsiExec.exe /I{605A4E39-613C-4A12-B56F-DEFBE6757237}

SKIN0001–>MsiExec.exe /I{FDF9943A-3D5C-46B3-9679-586BD237DDEE}

SKINXSDK–>MsiExec.exe /I{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}

staticcr–>MsiExec.exe /I{8943CE61-53BD-475E-90E1-A580869E98A2}

The Sims Hot Date–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{017E65B1-7484-461A-B16F-7C931166083B}\setup.exe" -l0009

TypingTutorial 4.40–>C:\WINDOWS\TypingTutorial\pmqUnInstall.exe

VPRINTOL–>MsiExec.exe /I{999D43F4-9709-4887-9B1A-83EBB15A8370}

Walgreens PhotoShow Express–>"C:\Program Files\Walgreens\Walgreens PhotoShow\data\Xtras\Uninstall.exe"

WildTangent GameChannel (remove only)–>"C:\Program Files\WildTangent\Apps\uninstallgamechannel.exe"

WildTangent Multiplayer Library–>C:\WINDOWS\wt\updater\wcmdmgr.exe -uninstall wtdmmp

WildTangent Updater–>C:\WINDOWS\wt\updater\wcmdmgr.exe -uninstall wcmdmgr.exe

WildTangent Web Driver–>C:\WINDOWS\wt\updater\wcmdmgr.exe -uninstall wtwebdriver

Windows XP Hotfix - KB823559–>C:\WINDOWS\$NtUninstallKB823559$\spuninst\spuninst.exe

Windows XP Hotfix - KB828741–>C:\WINDOWS\$NtUninstallKB828741$\spuninst\spuninst.exe

Windows XP Hotfix - KB834707–>C:\WINDOWS\$NtUninstallKB834707-IE6-20040929.115007$\spuninst\spuninst.exe

Windows XP Hotfix - KB835732–>C:\WINDOWS\$NtUninstallKB835732$\spuninst\spuninst.exe

Windows XP Hotfix - KB842773–>C:\WINDOWS\$NtUninstallKB842773$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q308676 for more information]–>C:\WINDOWS\$NtUninstallQ308676$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q308677 for more information]–>C:\WINDOWS\$NtUninstallQ308677$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q309521 for more information]–>C:\WINDOWS\$NtUninstallQ309521$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q309691 for more information]–>C:\WINDOWS\$NtUninstallQ309691$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q311842 for more information]–>C:\WINDOWS\$NtUninstallQ311842$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q311889 for more information]–>C:\WINDOWS\$NtUninstallQ311889$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q312370 for more information]–>C:\WINDOWS\$NtUninstallQ312370$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q315000 for more information]–>C:\WINDOWS\$NtUninstallQ315000$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q315403 for more information]–>C:\WINDOWS\$NtUninstallQ315403$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q321856 for more information]–>C:\WINDOWS\$NtUninstallQ321856$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q329048 for more information]–>C:\WINDOWS\$NtUninstallQ329048$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q329390 for more information]–>C:\WINDOWS\$NtUninstallQ329390$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q329441 for more information]–>C:\WINDOWS\$NtUninstallQ329441$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) [See Q329834 for more information]–>C:\WINDOWS\$NtUninstallQ329834$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) Q329170–>C:\WINDOWS\$NtUninstallQ329170$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) Q810577–>C:\WINDOWS\$NtUninstallQ810577$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) Q810833–>C:\WINDOWS\$NtUninstallQ810833$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) Q815021–>C:\WINDOWS\$NtUninstallQ815021$\spuninst\spuninst.exe

Windows XP Hotfix (SP1) Q817606–>C:\WINDOWS\$NtUninstallQ817606$\spuninst\spuninst.exe

Windows XP Hotfix (SP2) [See Q329115 for more information]–>C:\WINDOWS\$NtUninstallQ329115$\spuninst\spuninst.exe

Windows XP Service Pack 2–>C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe

WIRELESS–>MsiExec.exe /I{F9593CFB-D836-49BC-BFF1-0E669A411D9F}

WordPerfect Productivity Pack–>C:\WINDOWS\Corel\uninst32.exe

WordPerfect Productivity Pack–>C:\WINDOWS\Corel\Uninst32.exe

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe

"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;c:\Pyt hon22;C:\Program files\PC-Doctor for Windows XP\WINDSAPI;C:\Program Files\QuickTime\QTSystem\

"windir"=%SystemRoot%

"OS"=Windows_NT

"PROCESSOR_ARCHITECTURE"=x86

"PROCESSOR_LEVEL"=15

"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 7, GenuineIntel

"PROCESSOR_REVISION"=0207

"NUMBER_OF_PROCESSORS"=1

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

"CLASSPATH"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

—————–EOF—————–

agraves is offline

Related Posts:

written by lina \\ tags: , , , , , , , , , , , , , , , , , , , , , , , ,

Comments

Leave a Reply

You must be logged in to post a comment.