Migwiz opens on startup

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Blindy8

Thread Starter
Joined
Nov 9, 2005
Messages
268
I am revisiting an old problem that I could never solve. I'm using XP. It appears that Migwiz--the Microsoft Migration Wizard keeps opening every time I start the computer. It's not a big deal because I can just close it but I am annoyed that this keeps happening. Upon doing Google searches, many others have this problem.

So what I found out is that the file is located at %SystemRoot%\system32\migwiz\migwiz.exe. I went to regedit and couldn't find this folder. I then went to Windows Explorer and did a search for c:\system32\migwiz\migwiz.exe. and nothing came up. When I searched migwiz\migwiz.exe, I found two executables and renamed them with and .old suffix as I've seen people on the Internet advise this.

Well, I definitely found the right file because when I rebooted, a migwiz folder came up again $%^#^@#$ but this time it was named migwiz.old. Obviously, renaming it with a new suffix doesn't solve the problem. At this point, I have no idea what to do. At least I've learned that %systemroot% means the C:\ folder in this case. I had no idea what the % signs mean but assume they suggest whatever the drive that contains the Windows folder in this case.
 
Joined
Oct 26, 2001
Messages
2,871
Have you checked the startup programs to see if migwiz.exe is loading? To look at the startup files, go to Run, type in 'msconfig' without the quotes, and click the Startup tab. If you find it in the list of startup files, uncheck it.

That file is for the transfer of files between old and new computers. Have you done that recently?
 

Cookiegal

Karen
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
119,981
It sounds like the problem may be because the file transfer wizard was installed in the root drive C: and not in a folder as it should be. It also creates an autorun.inf file which is likely what's causing it to run automatically.

Do you see this file?

C:\autorun.inf

If so, right-click on it and select "open with" and then choose Notepad and copy and paste the contents here please.
 

Blindy8

Thread Starter
Joined
Nov 9, 2005
Messages
268
I did not see Migwiz in the startup menu under msconfig.

However, I did find 54 versions of C:\autorun.inf. One of them is located in C:\program files\Microsoft\migwiz.old. This is the only file in that search that contains a reference to 'Migwiz'. I suspect that it is the errant file because I changed the suffix to .old in regedit.

I assume if I delete that file, I will remove the problem but am not sure if it's safe to do so--will it simply remove this file or will it affect Migwiz in general?

Thanks,

Mark
 

Cookiegal

Karen
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
119,981
There can only be one version of C:\autorun.inf.

The migwiz.inf file should reside in this folder:

C:\WINDOWS\system32\usmt

Let's use this tool to see exactly what is where.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following code box into the main text field:
    Code:
    :filefind
    *autorun*
    *migwiz*
    :dir
    usmt
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
 

Blindy8

Thread Starter
Joined
Nov 9, 2005
Messages
268
I did the scan and came up with the below. Note that the program said usmt didn't find the Migwiz folder but I had renamed it to migwiz.old. I did a following scan by changing the file name to *migwiz.old* and it still said it didn't come up with the folder. Yet I notice, in both cases, the scan results show migwiz and migwiz.old folders in the scan results.



Here's the scan results:

SystemLook 30.07.11 by jpshortstuff
Log created at 16:40 on 01/01/2013 by Bonnie Silverman
Administrator - Elevation successful

========== filefind ==========

Searching for "*autorun*"
C:\Documents and Settings\Administrator.D3GLJV11\Desktop\vr\autoruns.exe --a---- 669032 bytes [20:36 16/08/2010] [19:20 12/10/2009] E576D818FF5D64AAB8A57B77C77219C2
C:\Documents and Settings\Administrator.D3GLJV11\Local Settings\Temp\pft193.tmp\Disk1\AUTORUN.INF -ra---- 36 bytes [20:26 16/08/2010] [17:12 28/01/2002] 753017FD56AAB3CF430367AAD96AA5A6
C:\Documents and Settings\Bonnie Silverman\Desktop\AutoRuns data .arn --a---- 5425423 bytes [00:23 13/09/2010] [00:23 13/09/2010] CC147CC859AEEE5AAC707DE9680F7F8D
C:\Documents and Settings\Bonnie Silverman\Desktop\AutoRuns data .zip --a---- 198284 bytes [00:26 13/09/2010] [00:26 13/09/2010] ECB1BB128DD8F16B33FFC65ECD183FCE
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns(2).zip --a---- 620465 bytes [06:49 07/02/2011] [06:49 07/02/2011] B2B28F77B3F757A226C0C2D5B71DA0F6
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\autoruns.exe --a---- 703352 bytes [00:16 13/09/2010] [00:16 13/09/2010] 2D1FB97A87562447B8F0F49B525990D3
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns.zip --a---- 618945 bytes [22:34 12/09/2010] [22:34 12/09/2010] DC9D404E4669BFEA132AFDF02761EDBD
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns\autoruns.chm --a---- 48904 bytes [00:17 31/08/2009] [22:37 12/09/2010] FA264B7388F0C55D121434108E0C23B1
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns\autoruns.exe --a---- 703352 bytes [04:35 22/07/2010] [22:37 12/09/2010] 2D1FB97A87562447B8F0F49B525990D3
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns\autorunsc.exe --a---- 585080 bytes [04:35 22/07/2010] [22:37 12/09/2010] 3679D29ADED2B978592C4A8B598A5848
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns(2)\autoruns.chm --a---- 48904 bytes [01:17 31/08/2009] [06:50 07/02/2011] FA264B7388F0C55D121434108E0C23B1
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns(2)\autoruns.exe --a---- 731000 bytes [15:44 24/11/2010] [06:50 07/02/2011] 78AC633B80C9D081770D1982C47D9CCC
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns(2)\autorunsc.exe --a---- 595832 bytes [15:44 24/11/2010] [06:50 07/02/2011] 70F2772AF8E6DB0EBCD2BA87CD6A86F1
C:\Documents and Settings\Bonnie Silverman\Recent\autorun.inf.lnk --a---- 807 bytes [20:08 01/01/2013] [20:09 01/01/2013] 8918C178D80904BFBB0BD5F5A899A45A
C:\Documents and Settings\Computer\autorun.inf --a---- 27 bytes [18:03 24/10/2001] [18:03 24/10/2001] 31E24163A4547CEE272BC0BA213D8431
C:\Documents and Settings\Markcomputer\autorun.inf --a---- 27 bytes [18:03 24/10/2001] [18:03 24/10/2001] 31E24163A4547CEE272BC0BA213D8431
C:\I386\AUTORUN.INF -ra---- 36 bytes [21:35 19/09/2002] [17:12 28/01/2002] 753017FD56AAB3CF430367AAD96AA5A6
C:\Mark\Computer2\HP\autorun.inf --a---- 27 bytes [18:03 24/10/2001] [18:03 24/10/2001] 31E24163A4547CEE272BC0BA213D8431
C:\Program Files\Broderbund\The Print Shop\Unlock\autorun.exe ------- 86016 bytes [20:06 16/11/2002] [06:58 14/05/2002] DEEABDB1A0FDA7371C09FDEBFA274395
C:\Program Files\Broderbund\The Print Shop\Unlock\Autorun.INI ------- 8067 bytes [20:06 16/11/2002] [06:36 07/05/2002] 77A0326E5F05D6F93F7B125DD25FA5C6
C:\Program Files\Microsoft\MigWiz.old\autorun.inf ------- 103 bytes [20:39 17/07/2006] [20:39 17/07/2006] 0FED91F9DBA0DFF31850526533E87C33
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHS\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHS\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHS\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHS\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHT\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHT\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHT\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHT\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ENG\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ENG\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ENG\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ENG\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\FRN\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\FRN\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\FRN\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\FRN\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\GER\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\GER\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\GER\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\GER\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ITA\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ITA\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ITA\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ITA\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\JPN\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\JPN\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\JPN\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\JPN\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\KOR\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\KOR\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\KOR\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\KOR\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\RUS\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\RUS\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\RUS\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\RUS\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\SPA\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\SPA\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\SPA\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\SPA\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\Autorun.inf --a---- 43 bytes [23:29 16/07/2001] [23:29 16/07/2001] 281AFA75486785787253035B947F7130
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\MRW\Autorun.inf --a---- 37 bytes [19:59 08/01/2002] [19:59 08/01/2002] 53E146BD8C51407251E6D485BDBA3016
C:\Program Files\Sonic\MyDVD\Player\Autorun.inf -ra---- 36 bytes [00:27 11/09/2002] [19:47 08/03/2002] CB3843D533A543AE96675C2231702AF6
C:\Program Files\Sonic\MyDVD\Player\intervideo\autorun.inf -ra---- 45 bytes [00:27 11/09/2002] [19:47 08/03/2002] 2FFA5D8DCE44DC818981CE82CE99D08B
C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Local Settings\Temp\pft193.tmp\Disk1\AUTORUN.INF -ra---- 36 bytes [21:30 19/09/2002] [17:12 28/01/2002] 753017FD56AAB3CF430367AAD96AA5A6

Searching for "*migwiz*"
C:\Documents and Settings\Bonnie Silverman\Recent\MigWiz.old.lnk --a---- 623 bytes [20:09 01/01/2013] [20:09 01/01/2013] B6B73C582A7E790DFA39C574A2449C77
C:\I386\MIGWIZ.EXE --a---- 230400 bytes [21:41 19/09/2002] [11:00 18/08/2001] EE640E4638A1BE457F85AF2570C3F4DE
C:\I386\migwiz.exe.manifest --a---- 1392 bytes [21:41 19/09/2002] [11:00 18/08/2001] E684997D7444A913C375C85885C90AAB
C:\I386\MIGWIZ.EX_ --a---- 66209 bytes [11:00 18/08/2001] [11:00 18/08/2001] 6F2379224DD3096AEEB3902E54CAD793
C:\I386\MIGWIZ.HTM --a---- 2575 bytes [21:42 19/09/2002] [11:00 18/08/2001] F76EB25A1816686895608D731F7BD7CA
C:\I386\MIGWIZ.INF --a---- 4631 bytes [21:41 19/09/2002] [11:00 18/08/2001] 5F63789DC311F81931FAF2F2503E41AA
C:\I386\MIGWIZ.IN_ --a---- 1569 bytes [11:00 18/08/2001] [11:00 18/08/2001] 0CF2B4EC0A45DB40E8D626FA976AA98F
C:\I386\MIGWIZ.MA_ --a---- 553 bytes [11:00 18/08/2001] [11:00 18/08/2001] 1D1B8412ED0C63B8BE4E8B70040164BF
C:\I386\MIGWIZ2.HTM --a---- 1644 bytes [21:42 19/09/2002] [11:00 18/08/2001] 32C10A9A2CCF38D1AB112791FFD943D8
C:\I386\MIGWIZ_A.EXE --a---- 226816 bytes [21:41 19/09/2002] [11:00 18/08/2001] CF1AF4ECE7712D63F2D4492599AC51E8
C:\I386\MIGWIZ_A.EX_ --a---- 65221 bytes [11:00 18/08/2001] [11:00 18/08/2001] AFC228FE905B34EC3D803AADF106A19A
C:\Program Files\Microsoft\MigWiz.old\migwiz.exe ------- 153192 bytes [05:51 02/11/2006] [05:51 02/11/2006] 3D1B56512A76C6583D96165A8A3A05A3
C:\Program Files\Microsoft\MigWiz.old\en-US\migwiz.exe.mui ------- 12288 bytes [05:50 02/11/2006] [05:50 02/11/2006] D028BDF916487B7847DA48B3BD5ECCF2
C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe -----c- 240128 bytes [13:49 09/09/2008] [07:56 04/08/2004] 3DC9256DA25BDFF582D7D46C59AD7112
C:\WINDOWS\$NtServicePackUninstall$\migwiz.inf -----c- 4667 bytes [13:49 09/09/2008] [05:01 04/08/2004] D14EA3E6AF89BE7FFEC3C94F5B40C9AB
C:\WINDOWS\Help\MIGWIZ.HTM --a---- 2575 bytes [11:00 18/08/2001] [11:00 18/08/2001] F76EB25A1816686895608D731F7BD7CA
C:\WINDOWS\Help\MIGWIZ2.HTM --a---- 1644 bytes [11:00 18/08/2001] [11:00 18/08/2001] 32C10A9A2CCF38D1AB112791FFD943D8
C:\WINDOWS\ServicePackFiles\i386\migwiz.exe ------- 245248 bytes [07:56 04/08/2004] [00:12 14/04/2008] F69576955AD53CC33A17BA1E4709AA34
C:\WINDOWS\ServicePackFiles\i386\migwiz.htm ------- 2575 bytes [14:57 07/09/2008] [11:00 18/08/2001] F76EB25A1816686895608D731F7BD7CA
C:\WINDOWS\ServicePackFiles\i386\migwiz.inf --a---- 4638 bytes [05:01 04/08/2004] [15:43 13/04/2008] C293A6325D841EC95CA2DE883623E62F
C:\WINDOWS\ServicePackFiles\i386\migwiz.man ------- 1392 bytes [14:57 07/09/2008] [11:00 18/08/2001] E684997D7444A913C375C85885C90AAB
C:\WINDOWS\ServicePackFiles\i386\migwiz2.htm ------- 1644 bytes [14:57 07/09/2008] [11:00 18/08/2001] 32C10A9A2CCF38D1AB112791FFD943D8
C:\WINDOWS\ServicePackFiles\i386\migwiza.exe ------- 241152 bytes [14:57 07/09/2008] [00:12 14/04/2008] 20E27F7A6FE3EAE808EF8460E668FB3E
C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe ------- 236032 bytes [07:56 04/08/2004] [07:56 04/08/2004] 666F6CEF6977AAD0D14605064D5A72EB
C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\migwiza.exe --a---- 241152 bytes [00:07 29/09/2008] [00:12 14/04/2008] 20E27F7A6FE3EAE808EF8460E668FB3E
C:\WINDOWS\SYSTEM32\DLLCACHE\migwiz.exe --a---- 245248 bytes [11:00 18/08/2001] [00:12 14/04/2008] F69576955AD53CC33A17BA1E4709AA34
C:\WINDOWS\SYSTEM32\USMT\migwiz.exe --a---- 245248 bytes [11:00 18/08/2001] [00:12 14/04/2008] F69576955AD53CC33A17BA1E4709AA34
C:\WINDOWS\SYSTEM32\USMT\migwiz.exe.manifest.old --a---- 1392 bytes [11:00 18/08/2001] [11:00 18/08/2001] E684997D7444A913C375C85885C90AAB
C:\WINDOWS\SYSTEM32\USMT\migwiz.exe.old --a---- 245248 bytes [11:00 18/08/2001] [00:12 14/04/2008] F69576955AD53CC33A17BA1E4709AA34
C:\WINDOWS\SYSTEM32\USMT\migwiz.inf --a---- 4638 bytes [05:01 04/08/2004] [15:43 13/04/2008] C293A6325D841EC95CA2DE883623E62FSystemLook 30.07.11 by jpshortstuff
Log created at 16:40 on 01/01/2013 by Bonnie Silverman
Administrator - Elevation successful

========== filefind ==========

Searching for "*autorun*"
C:\Documents and Settings\Administrator.D3GLJV11\Desktop\vr\autoruns.exe --a---- 669032 bytes [20:36 16/08/2010] [19:20 12/10/2009] E576D818FF5D64AAB8A57B77C77219C2
C:\Documents and Settings\Administrator.D3GLJV11\Local Settings\Temp\pft193.tmp\Disk1\AUTORUN.INF -ra---- 36 bytes [20:26 16/08/2010] [17:12 28/01/2002] 753017FD56AAB3CF430367AAD96AA5A6
C:\Documents and Settings\Bonnie Silverman\Desktop\AutoRuns data .arn --a---- 5425423 bytes [00:23 13/09/2010] [00:23 13/09/2010] CC147CC859AEEE5AAC707DE9680F7F8D
C:\Documents and Settings\Bonnie Silverman\Desktop\AutoRuns data .zip --a---- 198284 bytes [00:26 13/09/2010] [00:26 13/09/2010] ECB1BB128DD8F16B33FFC65ECD183FCE
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns(2).zip --a---- 620465 bytes [06:49 07/02/2011] [06:49 07/02/2011] B2B28F77B3F757A226C0C2D5B71DA0F6
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\autoruns.exe --a---- 703352 bytes [00:16 13/09/2010] [00:16 13/09/2010] 2D1FB97A87562447B8F0F49B525990D3
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns.zip --a---- 618945 bytes [22:34 12/09/2010] [22:34 12/09/2010] DC9D404E4669BFEA132AFDF02761EDBD
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns\autoruns.chm --a---- 48904 bytes [00:17 31/08/2009] [22:37 12/09/2010] FA264B7388F0C55D121434108E0C23B1
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns\autoruns.exe --a---- 703352 bytes [04:35 22/07/2010] [22:37 12/09/2010] 2D1FB97A87562447B8F0F49B525990D3
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns\autorunsc.exe --a---- 585080 bytes [04:35 22/07/2010] [22:37 12/09/2010] 3679D29ADED2B978592C4A8B598A5848
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns(2)\autoruns.chm --a---- 48904 bytes [01:17 31/08/2009] [06:50 07/02/2011] FA264B7388F0C55D121434108E0C23B1
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns(2)\autoruns.exe --a---- 731000 bytes [15:44 24/11/2010] [06:50 07/02/2011] 78AC633B80C9D081770D1982C47D9CCC
C:\Documents and Settings\Bonnie Silverman\My Documents\Downloads\Autoruns(2)\autorunsc.exe --a---- 595832 bytes [15:44 24/11/2010] [06:50 07/02/2011] 70F2772AF8E6DB0EBCD2BA87CD6A86F1
C:\Documents and Settings\Bonnie Silverman\Recent\autorun.inf.lnk --a---- 807 bytes [20:08 01/01/2013] [20:09 01/01/2013] 8918C178D80904BFBB0BD5F5A899A45A
C:\Documents and Settings\Computer\autorun.inf --a---- 27 bytes [18:03 24/10/2001] [18:03 24/10/2001] 31E24163A4547CEE272BC0BA213D8431
C:\Documents and Settings\Markcomputer\autorun.inf --a---- 27 bytes [18:03 24/10/2001] [18:03 24/10/2001] 31E24163A4547CEE272BC0BA213D8431
C:\I386\AUTORUN.INF -ra---- 36 bytes [21:35 19/09/2002] [17:12 28/01/2002] 753017FD56AAB3CF430367AAD96AA5A6
C:\Mark\Computer2\HP\autorun.inf --a---- 27 bytes [18:03 24/10/2001] [18:03 24/10/2001] 31E24163A4547CEE272BC0BA213D8431
C:\Program Files\Broderbund\The Print Shop\Unlock\autorun.exe ------- 86016 bytes [20:06 16/11/2002] [06:58 14/05/2002] DEEABDB1A0FDA7371C09FDEBFA274395
C:\Program Files\Broderbund\The Print Shop\Unlock\Autorun.INI ------- 8067 bytes [20:06 16/11/2002] [06:36 07/05/2002] 77A0326E5F05D6F93F7B125DD25FA5C6
C:\Program Files\Microsoft\MigWiz.old\autorun.inf ------- 103 bytes [20:39 17/07/2006] [20:39 17/07/2006] 0FED91F9DBA0DFF31850526533E87C33
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHS\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHS\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHS\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHS\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHT\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHT\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHT\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\CHT\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ENG\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ENG\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ENG\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ENG\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\FRN\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\FRN\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\FRN\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\FRN\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\GER\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\GER\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\GER\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\GER\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ITA\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ITA\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ITA\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\ITA\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\JPN\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\JPN\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\JPN\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\JPN\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\KOR\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\KOR\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\KOR\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\KOR\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\RUS\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\RUS\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\RUS\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\RUS\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\SPA\Family\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [15:14 07/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\SPA\SimpleBlack\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\SPA\SimpleWhite\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\PIXELA\ImageMixer\Resources\HTMLAlbum\SPA\Stylish\AUTORUN.INF ------- 74 bytes [19:01 05/02/2006] [00:14 08/05/2004] 952B5C296659802869321C1F7FB0803C
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\Autorun.inf --a---- 43 bytes [23:29 16/07/2001] [23:29 16/07/2001] 281AFA75486785787253035B947F7130
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\MRW\Autorun.inf --a---- 37 bytes [19:59 08/01/2002] [19:59 08/01/2002] 53E146BD8C51407251E6D485BDBA3016
C:\Program Files\Sonic\MyDVD\Player\Autorun.inf -ra---- 36 bytes [00:27 11/09/2002] [19:47 08/03/2002] CB3843D533A543AE96675C2231702AF6
C:\Program Files\Sonic\MyDVD\Player\intervideo\autorun.inf -ra---- 45 bytes [00:27 11/09/2002] [19:47 08/03/2002] 2FFA5D8DCE44DC818981CE82CE99D08B
C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Local Settings\Temp\pft193.tmp\Disk1\AUTORUN.INF -ra---- 36 bytes [21:30 19/09/2002] [17:12 28/01/2002] 753017FD56AAB3CF430367AAD96AA5A6

Searching for "*migwiz*"
C:\Documents and Settings\Bonnie Silverman\Recent\MigWiz.old.lnk --a---- 623 bytes [20:09 01/01/2013] [20:09 01/01/2013] B6B73C582A7E790DFA39C574A2449C77
C:\I386\MIGWIZ.EXE --a---- 230400 bytes [21:41 19/09/2002] [11:00 18/08/2001] EE640E4638A1BE457F85AF2570C3F4DE
C:\I386\migwiz.exe.manifest --a---- 1392 bytes [21:41 19/09/2002] [11:00 18/08/2001] E684997D7444A913C375C85885C90AAB
C:\I386\MIGWIZ.EX_ --a---- 66209 bytes [11:00 18/08/2001] [11:00 18/08/2001] 6F2379224DD3096AEEB3902E54CAD793
C:\I386\MIGWIZ.HTM --a---- 2575 bytes [21:42 19/09/2002] [11:00 18/08/2001] F76EB25A1816686895608D731F7BD7CA
C:\I386\MIGWIZ.INF --a---- 4631 bytes [21:41 19/09/2002] [11:00 18/08/2001] 5F63789DC311F81931FAF2F2503E41AA
C:\I386\MIGWIZ.IN_ --a---- 1569 bytes [11:00 18/08/2001] [11:00 18/08/2001] 0CF2B4EC0A45DB40E8D626FA976AA98F
C:\I386\MIGWIZ.MA_ --a---- 553 bytes [11:00 18/08/2001] [11:00 18/08/2001] 1D1B8412ED0C63B8BE4E8B70040164BF
C:\I386\MIGWIZ2.HTM --a---- 1644 bytes [21:42 19/09/2002] [11:00 18/08/2001] 32C10A9A2CCF38D1AB112791FFD943D8
C:\I386\MIGWIZ_A.EXE --a---- 226816 bytes [21:41 19/09/2002] [11:00 18/08/2001] CF1AF4ECE7712D63F2D4492599AC51E8
C:\I386\MIGWIZ_A.EX_ --a---- 65221 bytes [11:00 18/08/2001] [11:00 18/08/2001] AFC228FE905B34EC3D803AADF106A19A
C:\Program Files\Microsoft\MigWiz.old\migwiz.exe ------- 153192 bytes [05:51 02/11/2006] [05:51 02/11/2006] 3D1B56512A76C6583D96165A8A3A05A3
C:\Program Files\Microsoft\MigWiz.old\en-US\migwiz.exe.mui ------- 12288 bytes [05:50 02/11/2006] [05:50 02/11/2006] D028BDF916487B7847DA48B3BD5ECCF2
C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe -----c- 240128 bytes [13:49 09/09/2008] [07:56 04/08/2004] 3DC9256DA25BDFF582D7D46C59AD7112
C:\WINDOWS\$NtServicePackUninstall$\migwiz.inf -----c- 4667 bytes [13:49 09/09/2008] [05:01 04/08/2004] D14EA3E6AF89BE7FFEC3C94F5B40C9AB
C:\WINDOWS\Help\MIGWIZ.HTM --a---- 2575 bytes [11:00 18/08/2001] [11:00 18/08/2001] F76EB25A1816686895608D731F7BD7CA
C:\WINDOWS\Help\MIGWIZ2.HTM --a---- 1644 bytes [11:00 18/08/2001] [11:00 18/08/2001] 32C10A9A2CCF38D1AB112791FFD943D8
C:\WINDOWS\ServicePackFiles\i386\migwiz.exe ------- 245248 bytes [07:56 04/08/2004] [00:12 14/04/2008] F69576955AD53CC33A17BA1E4709AA34
C:\WINDOWS\ServicePackFiles\i386\migwiz.htm ------- 2575 bytes [14:57 07/09/2008] [11:00 18/08/2001] F76EB25A1816686895608D731F7BD7CA
C:\WINDOWS\ServicePackFiles\i386\migwiz.inf --a---- 4638 bytes [05:01 04/08/2004] [15:43 13/04/2008] C293A6325D841EC95CA2DE883623E62F
C:\WINDOWS\ServicePackFiles\i386\migwiz.man ------- 1392 bytes [14:57 07/09/2008] [11:00 18/08/2001] E684997D7444A913C375C85885C90AAB
C:\WINDOWS\ServicePackFiles\i386\migwiz2.htm ------- 1644 bytes [14:57 07/09/2008] [11:00 18/08/2001] 32C10A9A2CCF38D1AB112791FFD943D8
C:\WINDOWS\ServicePackFiles\i386\migwiza.exe ------- 241152 bytes [14:57 07/09/2008] [00:12 14/04/2008] 20E27F7A6FE3EAE808EF8460E668FB3E
C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe ------- 236032 bytes [07:56 04/08/2004] [07:56 04/08/2004] 666F6CEF6977AAD0D14605064D5A72EB
C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e\migwiza.exe --a---- 241152 bytes [00:07 29/09/2008] [00:12 14/04/2008] 20E27F7A6FE3EAE808EF8460E668FB3E
C:\WINDOWS\SYSTEM32\DLLCACHE\migwiz.exe --a---- 245248 bytes [11:00 18/08/2001] [00:12 14/04/2008] F69576955AD53CC33A17BA1E4709AA34
C:\WINDOWS\SYSTEM32\USMT\migwiz.exe --a---- 245248 bytes [11:00 18/08/2001] [00:12 14/04/2008] F69576955AD53CC33A17BA1E4709AA34
C:\WINDOWS\SYSTEM32\USMT\migwiz.exe.manifest.old --a---- 1392 bytes [11:00 18/08/2001] [11:00 18/08/2001] E684997D7444A913C375C85885C90AAB
C:\WINDOWS\SYSTEM32\USMT\migwiz.exe.old --a---- 245248 bytes [11:00 18/08/2001] [00:12 14/04/2008] F69576955AD53CC33A17BA1E4709AA34
C:\WINDOWS\SYSTEM32\USMT\migwiz.inf --a---- 4638 bytes [05:01 04/08/2004] [15:43 13/04/2008] C293A6325D841EC95CA2DE883623E62F
C:\WINDOWS\SYSTEM32\USMT\migwiza.exe ------- 241152 bytes [14:57 07/09/2008] [00:12 14/04/2008] 20E27F7A6FE3EAE808EF8460E668FB3E
C:\WINDOWS\SYSTEM32\USMT\migwiz_a.exe --a---- 236032 bytes [11:00 18/08/2001] [07:56 04/08/2004] 666F6CEF6977AAD0D14605064D5A72EB

========== dir ==========

usmt - Unable to find folder.

-= EOF =-
C:\WINDOWS\SYSTEM32\USMT\migwiza.exe ------- 241152 bytes [14:57 07/09/2008] [00:12 14/04/2008] 20E27F7A6FE3EAE808EF8460E668FB3E
C:\WINDOWS\SYSTEM32\USMT\migwiz_a.exe --a---- 236032 bytes [11:00 18/08/2001] [07:56 04/08/2004] 666F6CEF6977AAD0D14605064D5A72EB

========== dir ==========

usmt - Unable to find folder.

-= EOF =-
 

Blindy8

Thread Starter
Joined
Nov 9, 2005
Messages
268
When I did an Windows Explorer search, I found these files in the C:\WINDOWS\system32\usmt file under usmt. They were all 240k or less. Again, I had remamed that migwiz file that kept coming up from migwiz to migwiz.old. It had to be the problem file because the next time I rebooted, the file that came up with startup was named migwiz.old.

migwiz.exe
migwig.exe.manifest.old
migwiz.exe.old
migwiz.inf
migwiz_a.exe
migwiza.exe
 

Cookiegal

Karen
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
119,981
Please right-click the following file:

C:\Program Files\Microsoft\MigWiz.old\autorun.inf

Then select "open with" and "Notepad" and copy and paste the contents here.
 

Blindy8

Thread Starter
Joined
Nov 9, 2005
Messages
268
I didn't see Notepad in the "open with menu but did see Wordpad and opened the file below with that. These were the results for C:\Program Files\Microsoft\MigWiz.old\autorun.inf


[Autorun]
OPEN=CDLaunch\shelexec \readmesp.htm

[Autorun.x86]
OPEN=CDLaunch\shelexec \readmesp.htm
 

Cookiegal

Karen
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
119,981
Navigate to this file:

C:\Program Files\Microsoft\MigWiz.old\autorun.inf

and rename it (change the file extension) to:

C:\Program Files\Microsoft\MigWiz.old\autorun.old

Reboot and see if that solves the problem.
 

Blindy8

Thread Starter
Joined
Nov 9, 2005
Messages
268
I did rename C:\Program Files\Microsoft\MigWiz.old\autorun.inf

to

C:\Program Files\Microsoft\MigWiz.old\autorun.old

and what happens is that Migwiz continues to open at startup but now it is labled Migwiz.old

Regards,

Mark
 

Cookiegal

Karen
Administrator
Malware Specialist Coordinator
Joined
Aug 27, 2003
Messages
119,981
Please run SystemLook again with the following script:

Code:
:dir /s
C:\Program Files\Microsoft\MigWiz.old
:regfind
migwiz.old
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top