SpybotSD Results

--- Search result list ---
Hint of the Day: Click the bar at the right of this to see more information! ()
Right Media: Tracking cookie (Internet Explorer: Pearl) (Cookie, nothing done)
DoubleClick: Tracking cookie (Firefox: default) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)
MediaPlex: Tracking cookie (Firefox: default) (Cookie, nothing done)
FastClick: Tracking cookie (Firefox: default) (Cookie, nothing done)
DoubleClick: Tracking cookie (Firefox: default) (Cookie, nothing done)

Zedo: Tracking cookie (Firefox: default) (Cookie, nothing done)
Zedo: Tracking cookie (Firefox: default) (Cookie, nothing done)
BurstMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)
--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---
2008-07-07 blindman.exe (1.0.0.8)

2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-09-16 TeaTimer.exe (1.6.3.25)
2008-12-19 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-10-22 advcheck.dll (1.6.2.13)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-09-15 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2008-10-22 Tools.dll (2.1.6.8)
2008-11-04 Includes\Adware.sbi (*)
2008-12-09 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-11-18 Includes\Hijackers.sbi (*)
2008-12-16 Includes\HijackersC.sbi (*)
2008-12-09 Includes\Keyloggers.sbi (*)
2008-12-16 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-11-18 Includes\Malware.sbi (*)
2008-12-16 Includes\MalwareC.sbi (*)
2008-12-16 Includes\PUPS.sbi (*)
2008-12-16 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-12-16 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-12-10 Includes\Spyware.sbi (*)
2008-12-10 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-11-04 Includes\Trojans.sbi (*)
2008-12-16 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
--- System information ---

Windows XP (Build: 2600) Service Pack 2 (5.1.2600)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Security Update (KB953297)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
/ MSXML4SP2: Security update for MSXML4 SP2 (KB954430)
/ MSXML4SP2: Security update for MSXML4 SP2 (KB973688)
/ Windows Media Format 11 SDK: Hotfix for Windows Media Format 11 SDK (KB929399)
/ Windows Media Player: Security Update for Windows Media Player (KB952069)
/ Windows Media Player 11: Security Update for Windows Media Player 11 (KB936782)
/ Windows Media Player 11: Hotfix for Windows Media Player 11 (KB939683)
/ Windows Media Player 11: Critical Update for Windows Media Player 11 (KB959772)
/ Windows Media Player 6.4: Security Update for Windows Media Player 6.4
(KB925398)
/ Windows XP: Security Update for Windows XP (KB941569)
/ Windows XP / SP10: Microsoft Compression Client Pack 1.0 for Windows XP
/ Windows XP / SP3: Windows XP Hotfix - KB873339
/ Windows XP / SP3: Security Update for Windows XP (KB890046)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Update for Windows XP (KB894391)
/ Windows XP / SP3: Hotfix for Windows XP (KB896344)
/ Windows XP / SP3: Security Update for Windows XP (KB944338-v2)
/ Windows XP / SP4: Security Update for Windows XP (KB951376-v2)
/ Windows XP / SP4: Hotfix for Windows XP (KB954550-v5)
/ XML Paper Specification Shared Components Pack 1.0: XML Paper Specification
Shared Components Pack 1.0
--- Startup entries list ---

Located: HK_LM:Run,
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: HK_LM:Run, Adobe Reader Speed Launcher

command: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
size: 35696
MD5: 452FA961163EF4AEE4815796A13AB2CF
Located: HK_LM:Run, Alcmtr

command: ALCMTR.EXE
file: C:\WINDOWS\ALCMTR.EXE
size: 69632
MD5: 8B4CBBA1EA526830C7F97E7822E2493A
Located: HK_LM:Run, CTSysVol

command: C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
file: C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
size: 57344
MD5: E7D1D8179FE03E2BC569A92B56509414
Located: HK_LM:Run, HP Software Update

command: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
file: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
size: 49152
MD5: 062F3DB9AFA9C3CE0DA52F28595C0C6D
Located: HK_LM:Run, hpqSRMon

command: C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
file: C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
size: 150016
MD5: FF473648E7B1B37C7F3249A6549FAC72
Located: HK_LM:Run, Malwarebytes Anti-Malware (reboot)

command: "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
file: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
size: 1312080
MD5: C5FCC0B761069FABD59E41B7C3280DDF
Located: HK_LM:Run, Microsoft Default Manager

command: "C:\Program Files\Microsoft\Search Enhancement Pack\Default
Manager\DefMgr.exe" -resume
file: C:\Program Files\Microsoft\Search Enhancement Pack\Default
Manager\DefMgr.exe
size: 233304
MD5: A64A7505A7BBA0C54E87E5596C40E2CE
Located: HK_LM:Run, Norman ZANDA

command: "C:\Program Files\Norman\Npm\Bin\ZLH.EXE" /LOAD /SPLASH
file: C:\Program Files\Norman\Npm\Bin\ZLH.EXE
size: 189824
MD5: AFE9D3B86995226AF91FACFBAF6D4B13
Located: HK_LM:Run, NvCplDaemon

command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
file: C:\WINDOWS\system32\NvCpl.dll
size: 7634944
MD5: C63121DE1BCE663B2602E146E45B6FCA
Located: HK_LM:Run, NvMediaCenter

command: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
file: C:\WINDOWS\system32\NvMcTray.dll
size: 86016
MD5: 80C5021B234F3ABFF5A577140A523BDA
Located: HK_LM:Run, nwiz

command: nwiz.exe /install
file: C:\WINDOWS\system32\nwiz.exe
size: 1622016
MD5: 0294E2A5E89BF786F24A9CC2FD753191
Located: HK_LM:Run, QuickCare

command: C:\Program Files\Qwest\Quickcare\bin\sprtcmd.exe /P QuickCare
file: C:\Program Files\Qwest\Quickcare\bin\sprtcmd.exe
size: 202016
MD5: E51925CE5017808EE8CB66BEAF25363F
Located: HK_LM:Run, QuickTime Task

command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 413696
MD5: 6CD5C3276C83F72677D647F27EE14ABD
Located: HK_LM:Run, ReminderApp

command: C:\Program Files\Nova Development\Greeting Card Factory Photo Card
Maker\ReminderApp.exe
file: C:\Program Files\Nova Development\Greeting Card Factory Photo Card
Maker\ReminderApp.exe
size: 156160
MD5: D08A2EF6A92A60000E2837968337A6FB
Located: HK_LM:Run, RTHDCPL

command: RTHDCPL.EXE
file: C:\WINDOWS\RTHDCPL.EXE
size: 16380416
MD5: 321CD85C4B67CA5AC01546EC336FB61B
Located: HK_LM:Run, SkyTel

command: SkyTel.EXE
file: C:\WINDOWS\SkyTel.EXE
size: 1826816
MD5: D373E15EB5E2E463EF01CF7BD8D7A1DF
Located: HK_LM:Run, SoundMan

command: SOUNDMAN.EXE
file: C:\WINDOWS\SOUNDMAN.EXE
size: 86016
MD5: 0D034E8C4F88C5B2B0C1AF3CF438CC4F
Located: HK_LM:Run, SunJavaUpdateSched

command: "C:\Program Files\Java\jre6\bin\jusched.exe"
file: C:\Program Files\Java\jre6\bin\jusched.exe
size: 149280
MD5: 3A0647BDED81DBE0BCBB51D70B22C9E0
Located: HK_LM:Run, UpdReg

command: C:\WINDOWS\UpdReg.EXE
file: C:\WINDOWS\UpdReg.EXE
size: 90112
MD5: C419DF63E0121D72411285780C2FC6CC
Located: HK_CU:RunOnce, NeroHomeFirstStart

where: PE_C_ADMINISTRATOR...
command: "C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe"
file: C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe
size: 16680
MD5: A366AB4A25812A9296020358C785C3B8
Located: HK_CU:Run, BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}

where: PE_C_GUEST...
command: "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
file: C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
size: 152872
MD5: 86F0D0B3A07C142C81DAB47E8495A822
Located: HK_CU:Run, ctfmon.exe

command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8
Located: HK_CU:Run, LightScribe Control Panel

command: C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
-hidden
file: C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
size: 2289664
MD5: 05597A464226C8323B7344CAF37D4335
Located: HK_CU:Run, msnmsgr

command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
size: 3885408
MD5: 16C3811F3A5CD8EA7030A42A75892136
Located: HK_CU:Run, QuickTime Task

command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 413696
MD5: 6CD5C3276C83F72677D647F27EE14ABD
Located: HK_CU:Run, ctfmon.exe

where: S-1-5-21-343818398-1035525444-725345543-1003...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8
Located: HK_CU:Run, Google Update

where: S-1-5-21-343818398-1035525444-725345543-1003...
command: "C:\Documents and Settings\Pearl\Local Settings\Application
Data\Google\Update\GoogleUpdate.exe" /c
file: C:\Documents and Settings\Pearl\Local Settings\Application
Data\Google\Update\GoogleUpdate.exe
size: 133104
MD5: 626A24ED1228580B9518C01930936DF9
Located: HK_CU:Run, msnmsgr

where: S-1-5-21-343818398-1035525444-725345543-1003...
command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
size: 3885408
MD5: 16C3811F3A5CD8EA7030A42A75892136
Located: HK_CU:RunOnce, FlashPlayerUpdate

where: S-1-5-21-343818398-1035525444-725345543-1003...
command: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p
file: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
size: 257440
MD5: F11E16E16682A5D08CBB7A943AFAF368
Located: HK_CU:RunOnce, Shockwave Updater

where: S-1-5-21-343818398-1035525444-725345543-1003...
command: C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150596.exe -Update
-1150596 -"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET
CLR 3.0.4506.2152; .NET CLR 3.5.30729; QwestIE8)" -"http://games.yahoo.com/daily-
games/wordsense"
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: Startup (common), Adobe Gamma Loader.lnk

where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
file: C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
size: 113664
MD5: C2FF17734176CD15221C10044EF0BA1A
Located: Startup (common), Gigabyte Wireless Utility.lnk

command: C:\Program Files\GIGABYTE\Common\GNConfig.exe
file: C:\Program Files\GIGABYTE\Common\GNConfig.exe
size: 753664
MD5: 70E8BC8C6137E0311CBFEE5F44A2D2AD
Located: Startup (common), HP Digital Imaging Monitor.lnk

command: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
file: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
size: 214360
MD5: CF03C8F6F6B0D71F6E5BCE167FCF7CA6
Located: Startup (common), Microsoft Office.lnk

command: C:\Program Files\Microsoft Office\Office\OSA9.EXE
file: C:\Program Files\Microsoft Office\Office\OSA9.EXE
size: 65588
MD5: 0A0EF9886C53675595E517F5C6A45CE7
Located: Startup (common), Symantec Fax Starter Edition Port.lnk

command: C:\Program Files\Microsoft Office\Office\1033\OLFSNT40.EXE
file: C:\Program Files\Microsoft Office\Office\1033\OLFSNT40.EXE
size: 45568
MD5: 60FDD0FCF620DEB6AC1F5FBEDB659489
Located: Startup (common), WinZip Quick Pick.lnk

command: C:\Program Files\WinZip\WZQKPICK.EXE
file: C:\Program Files\WinZip\WZQKPICK.EXE
size: 389120
MD5: F57253AC27C3A93D7409A8B082F5A255
Located: Startup (disabled), Adobe Reader Speed Launch (DISABLED)

command: C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE
file: C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, crypt32chain

command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, cryptnet

command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, cscdll

command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, ScCertProp

command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, Schedule

file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, sclgntfy

command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, SensLogn

command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, termsrv

file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Located: WinLogon, wlballoon

file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
--- Browser helper object list ---

{0347C33E-8762-4905-BF09-768834316C61} (HP Print Enhancer)
location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\
BHO name: HP Print Enhancer
CLSID name: HP Print Enhancer
Path: C:\Program Files\HP\Digital Imaging\Smart Web Printing\
Long name: hpswp_printenhancer.dll
Short name: HPSWP_~3.DLL
Date (created): 3/27/2008 11:51:18 PM
Date (last access): 12/14/2009 1:44:36 PM
Date (last write): 3/27/2008 11:51:18 PM
Filesize: 322880
Attributes: archive
MD5: 9797FDD304A5AAAEB4FE350D080D9DD0
CRC32: BF20B6E3
Version: 110.0.19045.0
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} (AcroIEHelperStub)
location:
Helper Objects\
BHO name: AcroIEHelperStub
CLSID name: Adobe PDF Link Helper
Path: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\
Long name: AcroIEHelperShim.dll
Short name: ACROIE~2.DLL
Date (created): 2/27/2009 11:07:26 AM
Date (last write): 2/27/2009 11:07:26 AM
Filesize: 75128
Attributes: archive
MD5: 5CF6190CD875DA6B35256FEE573E7908
CRC32: 764BA81B
Version: 9.1.0.163
{5C255C8A-E604-49b4-9D64-90988571CECB} ()
location:
Helper Objects\
BHO name:
CLSID name:
{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} (Search Helper)

location:
Helper Objects\
BHO name: Search Helper
CLSID name: Search Helper
Path: C:\Program Files\Microsoft\Search Enhancement Pack\Search
Helper\
Long name: SEPsearchhelperie.dll
Short name: SEPSEA~1.DLL
Date (created): 5/19/2009 10:36:18 AM
Filesize: 137600
Attributes: archive
MD5: F655CDD5506FBB4C40C08C9C6A66F7C8
CRC32: 579241EB
Version: 1.3.59.0
{9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)

location:
Helper Objects\
BHO name:
CLSID name: Windows Live Sign-in Helper
Path: C:\Program Files\Common Files\Microsoft Shared\Windows Live\
Long name: WindowsLiveLogin.dll
Short name: WINDOW~1.DLL
Date (created): 1/22/2009 2:41:30 PM
Filesize: 408448
Attributes: archive
MD5: B7899C3E21B299D7A3C0DA96CAE340BD
CRC32: 288935F8
Version: 5.0.818.5
{d2ce3e00-f94a-4740-988e-03dc2f38c34f} (MSN Toolbar Helper)

location:
Helper Objects\
BHO name:
CLSID name: MSN Toolbar Helper
Path: C:\Program Files\MSN\Toolbar\3.0.1125.0\
Long name: msneshellx.dll
Short name: MSNESH~1.DLL
Date (created): 2/9/2009 8:33:14 PM
Filesize: 82768
Attributes: archive
MD5: ED99A77A15410ED745542ACCDC063FB9
CRC32: 252F9972
Version: 3.0.1125.0
{DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
location:
Helper Objects\
BHO name:
CLSID name: Java(tm) Plug-In 2 SSV Helper
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2ssv.dll
Short name:
Date (created): 12/19/2008 2:23:22 AM
Filesize: 41760
Attributes: archive
MD5: C9EDE29F223A27873E187D9FB6045EA6
CRC32: 5951C3E0
Version: 6.0.170.4
{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} (Windows Live Toolbar Helper)

location:
Helper Objects\
BHO name:
CLSID name: Windows Live Toolbar Helper
Path: C:\Program Files\Windows Live\Toolbar\
Long name: wltcore.dll
Short name:
Date (created): 2/6/2009 5:17:46 PM
Filesize: 1068904
Attributes: archive
MD5: 28455424E3C8B81661C5A40E18066BB1
CRC32: E5BA354B
Version: 14.0.8064.206
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (JQSIEStartDetectorImpl)
location:
Helper Objects\
BHO name: JQSIEStartDetectorImpl
CLSID name: JQSIEStartDetectorImpl Class
Path: C:\Program Files\Java\jre6\lib\deploy\jqs\ie\
Long name: jqs_plugin.dll
Short name: JQS_PL~1.DLL
Date (created): 12/19/2008 2:23:22 AM
Filesize: 73728
Attributes: archive
MD5: DEE8F03D1EACE0C8F914A2C76568EA32
CRC32: 53F8F67C
Version: 6.0.170.4
{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} (HP Smart BHO Class)

location:
Helper Objects\
BHO name: HP Smart BHO Class
CLSID name: HP Smart BHO Class
Path: C:\Program Files\HP\Digital Imaging\Smart Web Printing\
Long name: hpswp_BHO.dll
Short name: HPSWP_~1.DLL
Date (created): 3/27/2008 11:51:18 PM
Filesize: 501056
Attributes: archive
MD5: 12087C57A9B83970E75B53E226996FD1
CRC32: 5393A124
Version: 110.0.19045.0
--- ActiveX list ---

{233C1507-6A77-46A4-9443-F871F945D258} (Shockwave ActiveX Control)
DPF name:
CLSID name: Shockwave ActiveX Control
Installer: C:\WINDOWS\Downloaded Program Files\swdir.inf
Codebase:
http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
description:
classification: Legitimate
known filename: SwDir.dll
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\system32\Adobe\Director\
Long name: SwDir.dll
Short name:
Date (created): 4/29/2009 4:29:00 AM
Filesize: 202168
Attributes: archive
MD5: 1B3A14C57997CC19974BA9F2BE5BD543
CRC32: D43621A2
Version: 11.5.0.596
{30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support)

DPF name:
CLSID name: Installation Support
Installer:
Codebase: C:\Program Files\Yahoo!\Common\Yinsthelper.dll
description: Yahoo! Installation helper
known filename: %SystemRoot%\Downloaded Program Files\yinsthelper.dll
info link:
info source: Patrick M. Kolla
Path: C:\Program Files\Yahoo!\Common\
Long name: YInstHelper.dll
Short name: YINSTH~1.DLL
Date (created): 11/28/2007 3:55:58 PM
Filesize: 211744
Attributes: archive
MD5: 48FF0FA1CAB4AD6ACEF9027F34090880
CRC32: 284355E3
Version: 2007.11.28.1
{6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class)

DPF name:
CLSID name: WUWebControl Class
Installer: C:\WINDOWS\Downloaded Program Files\wuweb.inf
Codebase:
http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_si
te.cab?1229656881281
description:
known filename: wuweb.dll
info link:
Path: C:\WINDOWS\system32\
Long name: wuweb.dll
Short name:
Date (created): 11/30/2008 2:15:50 AM
Filesize: 209632
Attributes: archive
MD5: 033AF4CE25B6D871F0DE2C982658E049
CRC32: 2C204902
Version: 7.4.7600.226
{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)

DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_17
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-
i586.cab
description: Sun Java
known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
info link:
info source: Patrick M. Kolla
Long name: npjpi160_17.dll
Short name: NPJPI1~1.DLL
Date (created): 10/11/2009 2:14:36 AM
Filesize: 136992
Attributes: archive
MD5: 3D58770680F268A23A8CE1F14B49AA2F
CRC32: 6091A816
Version: 6.0.170.4
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)

Installer:
i586.cab
Date (created): 10/11/2009 2:14:36 AM
Filesize: 136992
Attributes: archive
MD5: 3D58770680F268A23A8CE1F14B49AA2F
CRC32: 6091A816
Version: 6.0.170.4
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)

Installer:
i586.cab
description:
known filename: npjpi150_06.dll
info link:
Date (created): 10/11/2009 2:14:36 AM
Filesize: 136992
Attributes: archive
MD5: 3D58770680F268A23A8CE1F14B49AA2F
CRC32: 6091A816
Version: 6.0.170.4
--- Process list ---

PID: 0 ( 0) [System]
PID: 736 ( 4) \SystemRoot\System32\smss.exe
size: 50688
PID: 808 ( 736) \??\C:\WINDOWS\system32\csrss.exe
size: 6144
PID: 832 ( 736) \??\C:\WINDOWS\system32\winlogon.exe
size: 502272
PID: 876 ( 832) C:\WINDOWS\system32\services.exe
size: 110592
MD5: 37561F8D4160D62DA86D24AE41FAE8DE
PID: 888 ( 832) C:\WINDOWS\system32\lsass.exe
size: 13312
MD5: 84885F9B82F4D55C6146EBF6065D75D2
PID: 1040 ( 876) C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
size: 152904
MD5: A8025F5C7BDB90A2E4384D98150A9B96
PID: 1052 ( 876) C:\Program Files\Norman\Ngs\Bin\Nprosec.exe
size: 124232
MD5: 3E8798343F4706D88D232182BDAB439B
PID: 1124 ( 876) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 8F078AE4ED187AAABC0A305146DE6716
size: 14336
PID: 1312 ( 876) C:\WINDOWS\System32\svchost.exe
size: 14336
PID: 1388 ( 876) C:\Program Files\Norman\Npm\Bin\Zanda.exe
size: 411016
MD5: FA3C7625D21F7262FA5F1F80AB474095
PID: 1424 ( 876) C:\Program Files\Norman\npm\bin\nvoy.exe
size: 128328
MD5: 02A1C86708BDF55D02F4C08C9816F0C4
size: 14336
size: 14336
PID: 1648 ( 876) C:\WINDOWS\system32\spoolsv.exe
size: 57856
MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
size: 14336
PID: 1752 ( 876) C:\WINDOWS\system32\CTsvcCDA.exe
size: 44032
MD5: 3C8B6609712F4FF78E521F6DCFC4032B
size: 14336
PID: 1800 ( 876) C:\Program Files\Java\jre6\bin\jqs.exe
size: 153376
MD5: 39133291CB607BDD87CFC565A4A1E7A5
size: 14336
PID: 1844 ( 876) C:\WINDOWS\system32\nvsvc32.exe
size: 155715
MD5: 36032035FA55F030D55237D5C639A81D
size: 14336
PID: 1976 ( 876) C:\Program Files\Microsoft\Search Enhancement
Pack\SeaPort\SeaPort.exe
size: 240512
MD5: 271077B91D7AD1B616F8AFDFE8E3F981
PID: 236 ( 876) C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe
size: 1213728
MD5: 6BD79C3EF6B8AC9BB0B83E0F15478572
size: 14336
PID: 432 ( 876) C:\WINDOWS\system32\MsPMSPSv.exe
size: 53520
MD5: 581176F60885AEF8F78C6E38DCC3CDF9
PID: 1592 (1484) C:\WINDOWS\Explorer.EXE
size: 1033216
MD5: 97BD6515465659FF8F3B7BE375B2EA87
PID: 416 (1592) C:\WINDOWS\SOUNDMAN.EXE
size: 86016
MD5: 0D034E8C4F88C5B2B0C1AF3CF438CC4F
PID: 624 (1592) C:\Program Files\Norman\Npm\Bin\ZLH.EXE
size: 189824
MD5: AFE9D3B86995226AF91FACFBAF6D4B13
PID: 692 (1592) C:\WINDOWS\system32\RUNDLL32.EXE
size: 33280
MD5: DA285490BBD8A1D0CE6623577D5BA1FF
PID: 712 (1592) C:\Program Files\Creative\SB Live! 24-bit\Surround
Mixer\CTSysVol.exe
size: 57344
MD5: E7D1D8179FE03E2BC569A92B56509414
PID: 724 (1592) C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
size: 49152
MD5: 062F3DB9AFA9C3CE0DA52F28595C0C6D
PID: 756 (1592) C:\Program Files\Nova Development\Greeting Card Factory Photo
Card Maker\ReminderApp.exe
size: 156160
MD5: D08A2EF6A92A60000E2837968337A6FB
PID: 892 (1592) C:\Program Files\Qwest\Quickcare\bin\sprtcmd.exe
size: 202016
MD5: E51925CE5017808EE8CB66BEAF25363F
PID: 1228 (1592) C:\Program Files\Java\jre6\bin\jusched.exe
size: 149280
MD5: 3A0647BDED81DBE0BCBB51D70B22C9E0
PID: 1268 (1592) C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8
PID: 1296 (1592) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
size: 3885408
MD5: 16C3811F3A5CD8EA7030A42A75892136
PID: 1400 (1592) C:\Program Files\GIGABYTE\Common\GNConfig.exe
size: 753664
MD5: 70E8BC8C6137E0311CBFEE5F44A2D2AD
PID: 1500 (1592) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
size: 214360
MD5: CF03C8F6F6B0D71F6E5BCE167FCF7CA6
PID: 1956 (1592) C:\Program Files\Microsoft Office\Office\1033\OLFSNT40.EXE
size: 45568
MD5: 60FDD0FCF620DEB6AC1F5FBEDB659489
PID: 2668 (1124) C:\WINDOWS\system32\wbem\wmiprvse.exe
size: 227840
MD5: 31FA172657E941E7CB15C5CCFE36A03E
PID: 2768 (1312) C:\WINDOWS\system32\wuauclt.exe
size: 53472
MD5: 62BB79160F86CD962F312C68C6239BFD
PID: 2920 ( 876) C:\Program Files\Norman\Npm\Bin\scheduler.exe
size: 132424
MD5: 745D245352AF6FC82A7F33C004B4A8FC
PID: 2936 ( 876) C:\Program Files\Norman\Npm\Bin\Njeeves.exe
size: 276712
MD5: 80048714EFA7A8981F52C175751BB02E
PID: 3380 ( 876) C:\Program Files\Norman\nse\bin\NSESVC.EXE
size: 283976
MD5: 81308089E8E084F2A6B34003119CAFB5
PID: 3456 ( 876) C:\WINDOWS\System32\alg.exe
size: 44544
MD5: F1958FBF86D5C004CF19A5951A9514B7
PID: 1900 ( 876) C:\Program Files\Norman\Nvc\bin\nvcoas.exe
size: 197960
MD5: A32EDB46EF073EA3E3E428B1DE768AB5
PID: 2308 (1500) C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
size: 184320
MD5: 80B8AE8E18FF57BE13FF4A5959DB0EC1
PID: 2596 ( 624) C:\Program Files\Norman\Nvc\Bin\Nip.exe
size: 189824
MD5: BEDF037D52FB4713CB2E607C3B35E238
PID: 528 (2620) C:\Program Files\Norman\Nvc\Bin\cclaw.exe
size: 120136
MD5: 6A7BF9B5D5F036C33E2462D9741F2815
PID: 3496 (1124) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
size: 569344
MD5: F0898E9BD7C914FB7389F393D189B32F
PID: 3596 (1124) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
size: 286720
MD5: 85269484DDA143582F06C65CA339FBB9
PID: 880 ( 120) C:\PROGRA~1\WINZIP\wzqkpick.exe
size: 389120
MD5: F57253AC27C3A93D7409A8B082F5A255
PID: 952 (1592) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 4891472
MD5: 3B1B5D09D3C9C4CD39D4DB06ED7A0855
PID: 3364 ( 624) C:\Program Files\Norman\nvc\bin\nvcod.exe
size: 325008
MD5: EDC9A58C56191ACC830B82C326FD66DD
PID: 4 ( 0) System
--- Browser start & search pages list ---

Spybot - Search & Destroy browser pages report, 12/14/2009 3:11:47 PM
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page

C:\WINDOWS\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://search.live.com
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.google.com/
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://qwest.live.com
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
http://toolbar.ask.com/toolbarv/askRedirect?o=10607&gct=&gc=1&q=%s
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.microsoft.com/isapi/redir.dll?
prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://toolbar.ask.com/toolbarv/askRedirect?o=10607&gct=&gc=1&q=
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://search.live.com/sphome.aspx
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
--- Winsock Layered Service Provider list ---
--- Uninstall list ---

Vuze (8461-7759-5462-8226)
version (major): 4
version (minor): 2
install location: C:\Program Files\Vuze
uninstall cmd: C:\Program Files\Vuze\uninstall.exe
publisher: Vuze Inc.
(AddressBook)
Adobe AIR 1.5.0.7220 (Adobe AIR)

install location: c:\
uninstall cmd: c:\Program Files\Common Files\Adobe
AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
publisher: Adobe Systems Inc.
Adobe Flash Player 10 ActiveX 10.0.32.18 (Adobe Flash Player ActiveX)

uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
publisher: Adobe Systems Incorporated
help link: http://www.adobe.com/go/flashplayer_support/
Adobe Flash Player 10 Plugin 10.0.32.18 (Adobe Flash Player Plugin)

uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Photoshop 7.0 7.0 (Adobe Photoshop 7.0)

version (major): 7
install location: C:\Program Files\Adobe\Photoshop 7.0
install source: C:\Documents and Settings\Pearl\My Documents\Unzipped Photoshop
7.0\Photoshop\
uninstall cmd: C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Adobe\Photoshop
7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
publisher: Adobe Systems, Inc.
Adobe Shockwave Player 11.5 11.5 (Adobe Shockwave Player)

version (major): 11
version (minor): 1
install location: C:\WINDOWS\system32\Adobe
uninstall cmd: "C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
publisher: Adobe Systems, Inc.
help link: http://www.adobe.com/support/shockwave
BitZipper 2009 (BitZipper_is1)

install date: 20091214
install location: C:\Program Files\BitZipper\
uninstall cmd: "C:\Program Files\BitZipper\unins000.exe"
publisher: Bitberry Software
(Branding)
(Connection Manager)
(Creative MediaSource)
uninstall cmd: RunDll32
C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program
Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-
9C337476D05D}\setup.exe" -l0x9 /remove
(Creative MediaSource AudioSync Plugin)

Files\InstallShield Installation Information\{5CDC05F7-83E4-4611-AD3C-
A6EB2100332A}\setup.exe" -l0x9 /remove
(Creative MediaSource CD-ROM Burner Plugin)

Files\InstallShield Installation Information\{FD549B7B-3532-4160-80D4-
3E3DD39A9AE5}\setup.exe" -l0x9 /remove
(Creative MediaSource Detector)

Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-
3B2F8CF54B96}\setup.exe" -l0x9 /remove
(Creative MediaSource Go!)

Files\InstallShield Installation Information\{EE6699B3-E5AD-4E59-8F2B-
207DF630670C}\setup.exe" -l0x9 /remove
(Creative MediaSource NOMAD II/MG Plugin)

Files\InstallShield Installation Information\{881A74B3-3D17-4842-B9AF-
0761C6E6C4B5}\setup.exe" -l0x9 /remove
(Creative MediaSource NOMAD Jukebox 2/3/Zen Plugin)

Files\InstallShield Installation Information\{B5BAAFAE-3561-463D-8E3F-
91761A57ADB8}\setup.exe" -l0x9 /remove
(Creative MediaSource NOMAD Jukebox Plugin)

Files\InstallShield Installation Information\{1888DAFD-C634-4BC4-865C-
3455E24F6177}\setup.exe" -l0x9 /remove
(Creative MediaSource NOMAD MuVo Plugin)

Files\InstallShield Installation Information\{869D88A5-BD6C-4E39-8536-
D95259EAD7E8}\setup.exe" -l0x9 /remove
(Creative MediaSource Player Skin Pack)

Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-
00E018013273}\setup.exe" -l0x9 /remove
(Creative MiniDisc Center)

Files\InstallShield Installation Information\{AC157741-3285-4D6A-B934-
9174587A3493}\setup.exe" -l0x9 /remove
(Creative Restore Defaults)

Files\InstallShield Installation Information\{44DC86A0-248D-11D6-9BAF-
0090271AF8A4}\setup.exe" -l0x9 /remove
(Creative WaveStudio)
Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-
3DC8A69C5BDB}\setup.exe" -l0x9 /remove
(DEVCTRL2)
Files\InstallShield Installation Information\{FC0DD8AE-3DC0-11D7-AB2D-
0090271A23A2}\setup.exe" -l0x9 /remove
(Diagnostics3)
Files\InstallShield Installation Information\{F865C2FE-25E7-11D6-9BAF-
0090271AF8A4}\setup.exe" -l0x9 /remove
(DirectAnimation)
(DirectDrawEx)
DVD Shrink 3.2 (DVD Shrink_is1)

install location: C:\Program Files\DVD Shrink\
uninstall cmd: "C:\Program Files\DVD Shrink\unins000.exe"
publisher: DVD Shrink
help link: http://www.dvdshrink.org
DVDx 2.0 (DVDx 2.0_is1)

uninstall cmd: "C:\Program Files\DVDx\unins000.exe"
(DXM_Runtime)
(EAX)
Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-
00A0CC51B2FE}\setup.exe" -l0x9 /remove
(EQUALIZER)
Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-
0090271A23A2}\setup.exe" -l0x9 /remove
(Fontcore)
HijackThis 1.99.1 1.99.1 (HijackThis)

uninstall cmd: D:\Hijack This\HijackThis.exe /uninstall
publisher: Soeperman Enterprises Ltd.
HP Imaging Device Functions 11.0 11.0 (HP Imaging Device Functions)

uninstall cmd: C:\Program Files\HP\Digital
Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
publisher: HP
help link: http://www.hp.com/support
HP Photosmart Essential 3.5 3.5 (HP Photosmart Essential)

uninstall cmd: C:\Program Files\HP\Digital
Imaging\PhotosmartEssential\hpzscr01.exe -datfile hpqbud13.dat
publisher: HP
HP Smart Web Printing 4.0 (HP Smart Web Printing)

uninstall cmd: C:\Program Files\HP\Digital Imaging\Smart Web
Printing\hpzscr01.exe -datfile hpqbud15.dat
publisher: HP
HP Solution Center 11.0 11.0 (HP Solution Center & Imaging Support Tools)
uninstall cmd: C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe
-datfile hpqbud05.dat -forcereboot
publisher: HP
HP Customer Participation Program 11.0 11.0 (HPExtendedCapabilities)

uninstall cmd: C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe
-datfile hpqhsc01.dat -forcereboot
publisher: HP
(ICW)
(IDNMitigationAPIs)
(IE40)
(IE4Data)
(IE5BAKEX)
(ie7)
(IEData)
Windows XP Hotfix - KB873339 20041117.092459 (KB873339)

uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=873339
(KB884016)
(KB884267)
(KB885353)



(KB886612)
(KB887078)

(KB887626)
High Definition Audio Driver Package - KB888111 20040219.000000 (KB888111WXPSP2)

uninstall cmd: "C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
help link: http://support.microsoft.com?kbid=KB888111

(KB888656)
(KB889858)
Security Update for Windows XP (KB890046) 1 (KB890046)

uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Windows XP Hotfix - KB890859 1 (KB890859)

Windows Media Format SDK Hotfix - KB891122 (KB891122)


Windows Genuine Advantage Validation Tool (KB892130) (KB892130)

(KB892313)
(KB893240)
(KB893241)

(KB893803)
Windows Installer 3.1 (KB893803) 3.1 (KB893803v2)

uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
help link: http://go.microsoft.com/fwlink/?LinkId=42467
Update for Windows XP (KB894391) 1 (KB894391)

(KB895181)
(KB895316)
(KB895572)
Hotfix for Windows XP (KB896344) 2 (KB896344)




(KB897586)

(KB898549)


(KB900399)




(KB902344)




(KB907658)


Microsoft Base Smart Card Cryptographic Service Provider Package (KB909520)

uninstall cmd: "C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"



Security Update for Windows Media Player (KB911564) (KB911564)

help link: http://support.microsoft.com/?kbid=911564
(KB911565)
(KB911854)















Security Update for Windows XP (KB923789) (KB923789)

uninstall cmd: C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe
C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf



Security Update for Windows Media Player 6.4 (KB925398) (KB925398_WMP64)

uninstall cmd: "C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"












Hotfix for Windows Media Format 11 SDK (KB929399) (KB929399)









Security Update for Windows Media Player 11 (KB936782) (KB936782_WMP11)

Security Update for Windows Media Player 9 (KB936782) (KB936782_WMP9)




Hotfix for Windows Media Player 11 (KB939683) (KB939683)

Security Update for Windows XP (KB941569) (KB941569)




Update for Windows XP (KB943729) (KB943729)

Security Update for Windows XP (KB944338-v2) 2 (KB944338-v2)

uninstall cmd: "C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"








Security Update for Windows XP (KB951376-v2) 2 (KB951376-v2)




Security Update for Windows Media Player (KB952069) (KB952069_WM9)

uninstall cmd: "C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"


Security Update for Windows Media Player 11 (KB954154) (KB954154_WM11)



Hotfix for Windows XP (KB954550-v5) 5 (KB954550-v5)




















Critical Update for Windows Media Player 11 (KB959772) (KB959772_WM11)



































Security Update for Windows Media Player (KB973540) (KB973540_WM9L)

uninstall cmd: "C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"












K-Lite Codec Pack 4.7.0 (Full) 4.7.0 (KLiteCodecPack_is1)

install location: C:\Program Files\K-Lite Codec Pack\
uninstall cmd: "C:\Program Files\K-Lite Codec Pack\unins000.exe"
Microsoft .NET Framework 1.1 Security Update (KB953297) (M953297)

uninstall cmd:
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe"
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp
"
Malwarebytes' Anti-Malware (Malwarebytes' Anti-Malware_is1)

install location: C:\Program Files\Malwarebytes' Anti-Malware\
uninstall cmd: "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
publisher: Malwarebytes Corporation
help link: http://www.malwarebytes.org
Microsoft .NET Framework 1.1 (Microsoft .NET Framework 1.1 (1033))

uninstall cmd: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
readme:
file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm
Microsoft .NET Framework 3.5 SP1 (Microsoft .NET Framework 3.5 SP1)
install location: C:\WINDOWS\Microsoft.NET\Framework\v3.5\
uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework
3.5 SP1\setup.exe
(MobileOptionPack)
Mozilla Firefox (3.5.5) 3.5.5 (en-US) (Mozilla Firefox (3.5.5))

install location: C:\Program Files\Mozilla Firefox
uninstall cmd: C:\Program Files\Mozilla Firefox\uninstall\helper.exe
publisher: Mozilla
comments: Mozilla Firefox
(MPlayer2)
Microsoft Compression Client Pack 1.0 for Windows XP 1 (MSCompPackV1)

uninstall cmd: "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
(MSI30-Beta1)
(MSI30-Beta2)
(MSI30-KB884016)
(MSI30-RC1)
(MSI30-RC2)
(MSI30a-KB884016)
(MSI31-Beta)
(MSI31-RC1)
(Nero - Burning Rom!UninstallKey)

uninstall cmd: C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe
/UNINSTALL
(NeroBackItUp!UninstallKey)
uninstall cmd: C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
(NeroMediaHome!UninstallKey)
uninstall cmd: C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
(NeroRecode!UninstallKey)
uninstall cmd: C:\WINDOWS\UNRecode.exe /UNINSTALL
(NeroShowTime!UninstallKey)
uninstall cmd: C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
(NeroVision!UninstallKey)
uninstall cmd: C:\WINDOWS\UNNeroVision.exe /UNINSTALL
(NetMeeting)
(NLSDownlevelMapping)
NVIDIA Drivers (NVIDIA Drivers)

uninstall cmd: C:\WINDOWS\system32\nvuninst.exe UninstallGUI
(OutlookExpress)
(PCHealth)
uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall
132 C:\WINDOWS\INF\PCHealth.inf
Qwest Quickcare 2.6 2.6.0906.0212 (QwestQuickCare_is1)

install location: C:\Program Files\Qwest\Quickcare\
uninstall cmd: "C:\Program Files\Qwest\Quickcare\unins000.exe"
publisher: Qwest
help link: http://www.qwest.com/internethelp/
(SchedulingAgent)
(SFBM)
Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-
(Sound Blaster Live! 24-bit)
(Sound Blaster Live! 24-bit Windows Drivers)

uninstall cmd: "C:\Program Files\Creative\SB Live! 24-
bit\Program\Ctzapxx.EXE" /U /S
(SPEAKER)
Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-
(SURMIXER)
Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-
Creative System Information (SysInfo)

Files\InstallShield Installation Information\{87499F38-FD69-4A2B-B41A-
BAB8DE9B94FE}\setup.exe" -l0x9 /remove
(Wdf01000)
(Wdf01001)
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 (Wdf01005)

uninstall cmd: "C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Windows Genuine Advantage Validation Tool (KB892130) 1.7.0069.2 (WGA)

Windows Genuine Advantage Notifications (KB905474) 1.9.0040.0 (WgaNotify)

Windows Imaging Component 3.0.0.0 (WIC)

uninstall cmd: "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Media Format 11 runtime (Windows Media Format Runtime)

uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe"
/UninstallAll
Windows Media Player 11 (Windows Media Player)

uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Live Essentials 14.0.8064.0206 (WinLiveSuite_Wave3)

install location: C:\Program Files\Windows Live\
uninstall cmd: C:\Program Files\Windows Live\Installer\wlarp.exe
help link: http://support.live.com/
WinZip 11.0 (7313) (WinZip)

version (major): 11
install location: C:\PROGRA~1\WINZIP\
uninstall cmd: "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
publisher: WinZip Computing LP
help link: HTTP://www.winzip.com/wzgate.cgi?
lang=EN&url=www.winzip.com/xsupport.htm
(WMCSetup)
Windows Media Format 11 runtime (WMFDist11)

uninstall cmd: "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
help link: http:
Windows Media Player 11 (wmp11)

uninstall cmd: "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
help link: http:
Microsoft User-Mode Driver Framework Feature Pack 1.0 (Wudf01000)

uninstall cmd: "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
comments: Build Number 5716
XML Paper Specification Shared Components Pack 1.0 (XpsEPSC)

help link: http://support.microsoft.com?kbid=test
Yahoo! Toolbar (Yahoo! Companion)

uninstall cmd: C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
(Yahoo! Toolbar)
uninstall cmd: C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
Yahoo! Install Manager (YInstHelper)

uninstall cmd: C:\WINDOWS\system32\regsvr32 /u
C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
Microsoft Office 2000 Premium 9.00.2720 ({00000409-78E1-11D2-B60F-006097C998E7})

version: 150997664
version (major): 9
estimated size: 384397
install source: C:\Documents and Settings\Pearl\My Documents\Office 2k unzipped\
uninstall cmd: MsiExec.exe /I{00000409-78E1-11D2-B60F-006097C998E7}
help link: http://www.microsoft.com/support
readme: C:\Program Files\Microsoft Office\Office\ofread9.txt
Status 110.0.180.000 ({0289B35E-DC07-4c7a-9710-BBD686EA4B7D})
version: 1845493940
version (major): 110
install source: D:\setup\Status\
publisher: Hewlett-Packard
PSSWCORE 2.03.0000 ({09633A5E-3089-41A8-9FF1-382171423C5D})

version: 33751040
version (major): 2
version (minor): 3
install source: D:\setup\HPPhotoSmartCore\
Windows Live Messenger 14.0.8064.0206 ({0AAA9C97-74D4-47CE-B089-0B147EF3553C})

version: 234889088
version (major): 14
install source: C:\Program Files\Common Files\Windows
Live\.cache\b8a4a9e21ca49e0\
uninstall cmd: MsiExec.exe /X{0AAA9C97-74D4-47CE-B089-0B147EF3553C}
({1888DAFD-C634-4BC4-865C-3455E24F6177})
Files\InstallShield Installation Information\{1888DAFD-C634-4BC4-865C-
3455E24F6177}\setup.exe" -l0x9
Windows Live Upload Tool 14.0.8014.1029 ({205C6BDD-7B73-42DE-8505-9A093F35A238})

version: 234889038
version (major): 14
estimated size: 225
Live\.cache\ad0ebc8a1ca49e0\
uninstall cmd: MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
MSVCRT 14.0.1468.721 ({22B775E7-6C42-4FC5-8E10-9A5E3257BD94})

version: 234882492
version (major): 14
Live\.cache\a83bba6e1ca49e0\
uninstall cmd: MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
publisher: Microsoft
VideoToolkit01 110.0.171.000 ({22F761D1-8063-4170-ADF7-2D2F47834CA9})

version: 1845493931
estimated size: 445
install source: D:\setup\VideoToolkit01\
32 Bit HP CIO Components Installer 2.1.5 ({2614F54E-A828-49FA-93BA-45A3F756BFAA})

version: 33619973
version (major): 2
version (minor): 1
estimated size: 440
install source:
C:\DOCUME~1\Pearl\LOCALS~1\Temp\7zS0990\installer\CIO_DUSTDEVIL_COMBINED_INSTALLER
\i386\
uninstall cmd: MsiExec.exe /I{2614F54E-A828-49FA-93BA-45A3F756BFAA}
Java(TM) 6 Update 17 6.0.170 ({26A24AE4-039D-4CA4-87B4-2F83216011FF})

version: 100663406
version (major): 6
install location: C:\Program Files\Java\jre6\
install source: C:\Documents and Settings\Pearl\Application
Data\Sun\Java\jre1.6.0_11\
uninstall cmd: MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Program Files\Java\jre6\README.txt
({26A24AE4-039D-4CA4-87B4-2F83216013FB})
({26A24AE4-039D-4CA4-87B4-2F83216017FB})
HPProductAssistant 110.0.180.000 ({27197499-7680-4208-8FD8-5439CDB0FDC1})

version: 1845493940
install source: D:\setup\hpproductassistant\
Acrobat.com 1.6.65 ({287ECFA4-719A-2143-A09B-D6A12DE54E40})

version: 17170497
version (major): 1
version (minor): 6
install location: C:\Program Files\Adobe\Acrobat.com
install source: C:\Documents and Settings\Pearl\Local Settings\Temp\flaD2.tmp\
uninstall cmd: MsiExec.exe /X{287ECFA4-719A-2143-A09B-D6A12DE54E40}
Gigabyte Wireless LAN Card 1.00.0000 ({2C564A58-BD28-4926-95E1-EC7812FCA44F})

version: 16777216
install location: C:\Program Files\GIGABYTE\Gigabyte Wireless-G Adapter
install source: D:\Mach AG\Utility\
uninstall cmd: C:\Program Files\InstallShield Installation Information\
{2C564A58-BD28-4926-95E1-EC7812FCA44F}\setup.exe -runfromtemp -l0x0009 -removeonly
publisher: Gigabyte
DVD Copy Plus 4.2 ({2E661193-B28F-4D59-A534-9E0D294B39F8})

version: 67239936
version (major): 4
version (minor): 2
install source: C:\Program Files\Common Files\Wise Installation Wizard\
uninstall cmd: MsiExec.exe /I{2E661193-B28F-4D59-A534-9E0D294B39F8}
publisher: 321 Studios
help link: http://support.321studios.com
help telephone: +1 866-DVD-COPY
WebFldrs XP 9.50.7523 ({350C97B0-3D7C-4EE8-BAA9-00BCB3D54227})

version: 154279267
version (major): 9
version (minor): 50
install source: C:\WINDOWS\system32\
help link: http://www.microsoft.com/windows
Windows Live Communications Platform 14.0.8064.206 ({3B4E636E-9D65-4D67-BA61-

189800823F52})
version: 234889088
version (major): 14
Live\.cache\a9f9922c1ca49e0\
uninstall cmd: MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Photo Gallery 14.0.8064.206 ({3C52E7DA-C431-4239-B66B-1BF703D5B194})

version: 234889088
version (major): 14
Live\.cache\c454d1181ca49e0\
uninstall cmd: MsiExec.exe /X{3C52E7DA-C431-4239-B66B-1BF703D5B194}
help link: http://photogallery.live.com/
({435E969D-867E-4364-8E74-3DC8A69C5BDB})
Files\InstallShield Installation Information\{435E969D-867E-4364-8E74-
3DC8A69C5BDB}\setup.exe" -l0x9
({44DC86A0-248D-11D6-9BAF-0090271AF8A4})
Files\InstallShield Installation Information\{44DC86A0-248D-11D6-9BAF-
0090271AF8A4}\setup.exe" -l0x9
Windows Live Sign-in Assistant 5.000.818.5 ({45338B07-A236-4270-9A77-

EBB4115517B5})
version: 83886898
version (major): 5
Live\.cache\ae1c26441ca49e0\
uninstall cmd: MsiExec.exe /I{45338B07-A236-4270-9A77-EBB4115517B5}
QuickConnect 4.0 ({4998FF95-709A-430A-B104-92A009ABB848})

version: 67108864
install location: C:\Program Files\Qwest\QuickConnect
install source: D:\
{4998FF95-709A-430A-B104-92A009ABB848}\setup.exe -runfromtemp -l0x0009 -removeonly
publisher: Qwest
contact: Qwest Customer Service
help link:
http://www.qwest.com/residential/customerService/contactus/dsl.html
help telephone: 1-888-777-9569
Microsoft Search Enhancement Pack 1.3.59.0 ({4CBA3D4C-8F51-4D60-B27E-

F6B641C571E7})
version: 16973883
version (major): 1
version (minor): 3
estimated size: 770
install source:
C:\WINDOWS\SoftwareDistribution\Download\d261ac122901a09fbb3161480ae64e69\img\
uninstall cmd: MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
({5210ED6D-52A9-11D6-A285-00A0CC51B2FE})
Files\InstallShield Installation Information\{5210ED6D-52A9-11D6-A285-
00A0CC51B2FE}\setup.exe" -l0x9
neroxml 1.0.0 ({56C049BE-79E9-4502-BEA7-9754A3E60F9B})

version: 16777216
version (major): 1
install source: D:\NeroExpress\Installation\Redist\
uninstall cmd: MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
publisher: Nero AG
contact: Nero AG
MSXML 6 Service Pack 2 (KB973686) 6.20.2003.0 ({56EA8BC0-3751-4B93-BC9D-

6651CC36E5AA})
version: 101976019
version (major): 6
version (minor): 20
install source: c:\0a38bf187f85507d9ec84a\
uninstall cmd: MsiExec.exe /I{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}
help link: http://support.microsoft.com/kb/973686
Creative MediaSource ({56F3E1FF-54FE-4384-A153-6CCABA097814})

Files\InstallShield Installation Information\{56F3E1FF-54FE-4384-A153-
6CCABA097814}\SETUP.EXE" -l0x9 /remove
SolutionCenter 110.0.180.000 ({593A6CAF-E114-4e31-884F-74FF349E8E36})

version: 1845493940
install source: D:\setup\SolutionCenter\
({5CDC05F7-83E4-4611-AD3C-A6EB2100332A})
Files\InstallShield Installation Information\{5CDC05F7-83E4-4611-AD3C-
A6EB2100332A}\setup.exe" -l0x9
({5CDDF96A-BC34-4D72-9ABA-E1FFF0C39977})
Files\InstallShield Installation Information\{5CDDF96A-BC34-4D72-9ABA-
E1FFF0C39977}\setup.exe" -l0x9
DJ_AIO_03_F4200_Software 110.0.206.000 ({60D4F9F1-B828-4048-A5AB-9AA2FD0C4751})

version: 1845493966
install source: D:\setup\Software\
DJ_AIO_03_F4200_ProductContext 110.0.206.000 ({6365C963-4B72-43F8-8392-

2A5441EC2A86})
version: 1845493966
estimated size: 149
install source: C:\Program Files\HP\Digital Imaging\{C3B6AEB1-390C-4792-8677-
CD87F8B2C959}\
eSupportQFolder 1.00.0000 ({66E6CE0C-5A1E-430C-B40A-0C90FF1804A8})

version: 16777216
version (major): 1
estimated size: 124
install source: D:\setup\QFolder\
({67AEFC4C-69E4-11D7-85F4-00E018013273})
Files\InstallShield Installation Information\{67AEFC4C-69E4-11D7-85F4-
00E018013273}\setup.exe" -l0x9
HPPhotoSmartDiscLabelContent1 2.04.0000 ({681B698F-C997-42C3-B184-B489C6CA24C9})

version: 33816576
version (major): 2
version (minor): 4
install source:
C:\DOCUME~1\Pearl\LOCALS~1\Temp\7zS4176\setup\hpphotosmartdisclabelcontent1\
Qwest Windows Live Toolbar Buttons 2.0.0.0 ({693EF7BC-C5CA-43E6-AFA8-

1F3FB63A8D92})
version: 33554432
install location: C:\Program Files\Qwest\Qwest Windows Live Toolbar Buttons
install source: D:\WindowsLive\WLTBBSetup.exe
{693EF7BC-C5CA-43E6-AFA8-1F3FB63A8D92}\setup.exe -runfromtemp -l0x0009 -removeonly
publisher: Qwest
contact: Qwest Customer Service
help link:
http://www.qwest.com/residential/customerService/contactus/dsl.html
Apple Software Update 2.1.1.116 ({6956856F-B6B3-4BE0-BA0B-8F495BE32033})

version: 33619969
version (major): 2
version (minor): 1
install location: C:\Program Files\Apple Software Update\
install source: C:\DOCUME~1\Pearl\LOCALS~1\Temp\IXP156.TMP\
uninstall cmd: MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
publisher: Apple Inc.
contact: AppleCare Support
help link: http://www.apple.com/support/
CustomerResearchQFolder 1.00.0000 ({6F5E2F4A-377D-4700-B0E3-8F7F7507EA15})

version: 16777216
version (major): 1
estimated size: 124
Norman Virus Control 5.99.0600 ({704C87B4-B089-4415-BCE0-CBE76172F104})

version: 90374744
version (major): 5
version (minor): 99
install location: C:\Program Files\Norman\
install source: C:\Documents and Settings\Pearl\My Documents\
uninstall cmd: MsiExec.exe /X{704C87B4-B089-4415-BCE0-CBE76172F104}
publisher: Norman ASA
help link: http://www.norman.com/support/
({7201B853-5833-11D6-A285-00A0CC51B2FE})
Files\InstallShield Installation Information\{7201B853-5833-11D6-A285-
Sound Blaster Live! 24-bit ({734BB64A-5A3D-4624-867D-6358B7068496})

Files\InstallShield Installation Information\{734BB64A-5A3D-4624-867D-
6358B7068496}\SETUP.EXE" -l0x9
({7A900EAB-DA37-4554-AF19-9C337476D05D})
Files\InstallShield Installation Information\{7A900EAB-DA37-4554-AF19-
9C337476D05D}\setup.exe" -l0x9
Nero 7 Essentials 7.03.0976 ({7BAA9BA8-0761-42EF-842A-23FAA5321033})

version: 117638096
version (major): 7
version (minor): 3
install location: C:\Program Files\Nero\Nero 7\
install source: D:\NeroExpress\Installation\
uninstall cmd: MsiExec.exe /X{7BAA9BA8-0761-42EF-842A-23FAA5321033}
publisher: Nero AG
comments: Nero AG
contact: techsupport@nero.com retail-support@nero.com chinese-
techsupport@nero.com
help link: techsupport@nero.com retail-support@nero.com chinese-
techsupport@nero.com
help telephone: xxxxxxxxxxxxxx
HP Update 5.002.001.004 ({818ABC3C-635C-4651-8183-D0E9640B7DD1})

version: 84017153
version (major): 5
version (minor): 2
install location: C:\Program Files\HP\HP Software Update
install source: C:\WINDOWS\Hewlett-Packard\Setup Files\HP Software Update\
{EC391058-A292-41C5-92C7-95C5A09793B8}\
uninstall cmd: MsiExec.exe /X{818ABC3C-635C-4651-8183-D0E9640B7DD1}
contact: http://www.hp.com/support
MSXML 4.0 SP2 (KB954430) 4.20.9870.0 ({86493ADD-824D-4B8E-BD72-8C5DCDC52A71})

version: 68429454
version (major): 4
version (minor): 20
install source: c:\8772358282b52c7ef5921e038be6a8e3\
uninstall cmd: MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
({869D88A5-BD6C-4E39-8536-D95259EAD7E8})
Files\InstallShield Installation Information\{869D88A5-BD6C-4E39-8536-
D95259EAD7E8}\setup.exe" -l0x9
({87499F38-FD69-4A2B-B41A-BAB8DE9B94FE})
Files\InstallShield Installation Information\{87499F38-FD69-4A2B-B41A-
BAB8DE9B94FE}\setup.exe" -l0x9
({881A74B3-3D17-4842-B9AF-0761C6E6C4B5})
Files\InstallShield Installation Information\{881A74B3-3D17-4842-B9AF-
0761C6E6C4B5}\setup.exe" -l0x9
Microsoft Silverlight 3.0.40818.0 ({89F4137D-6C26-4A84-BDB8-2E5A4BB71E00})

version: 50372466
version (major): 3
install location: c:\Program Files\Microsoft Silverlight\
install source: c:\4293dccad59f281baf9b36\
uninstall cmd: MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
help link: http://go.microsoft.com/fwlink/?LinkID=91955
Microsoft Sync Framework Runtime Native v1.0 (x86) 1.0.1215.0 ({8A74E887-8F0F-

4017-AF53-CBA42211AAA5})
version: 16778431
version (major): 1
Live\.cache\c809b9041ca49e0\
uninstall cmd: MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
contact: MS
QuickTime 7.55.90.70 ({8DC42D05-680B-41B0-8878-6C14D24602DB})

version: 121045082
version (major): 7
version (minor): 55
install location: C:\Program Files\QuickTime\
uninstall cmd: MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
publisher: Apple Inc.
contact: AppleCare Support
help link: http://www.apple.com/support/
Choice Guard 1.2.87.0 ({8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E})

version: 16908375
version (major): 1
version (minor): 2
estimated size: 186
Live\.cache\affdc1481ca49e0\
uninstall cmd: MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Microsoft Application Error Reporting 12.0.6012.5000 ({95120000-00B9-0409-0000-

0000000FF1CE})
version: 201332604
version (major): 12
Live\.cache\a6cc904a1ca49e0\
help link: http://support.microsoft.com
Actiontec Gateway ({9692FD03-6662-4E62-B08C-30DFF51651E1})

Files\InstallShield Installation Information\{9692FD03-6662-4E62-B08C-
30DFF51651E1}\setup.exe" -l0x9
InstallMgr 1.0.39.0 ({98177940-C048-4831-A279-F3888B1E2C7F})

version: 16777255
version (major): 1
estimated size: 70
install source: C:\WINDOWS\TEMP\
uninstall cmd: MsiExec.exe /I{98177940-C048-4831-A279-F3888B1E2C7F}
Windows Live Toolbar 14.0.8064.206 ({995F1E2E-F542-4310-8E1D-9926F5A279B3})

version: 234889088
version (major): 14
Live\.cache\ca6027421ca49e0\
uninstall cmd: MsiExec.exe /X{995F1E2E-F542-4310-8E1D-9926F5A279B3}
PowerCDR Express 0 ({9B2B0EAD-2CC7-4589-B3AA-D23BAB724065})

install source: C:\Program Files\Common Files\Wise Installation Wizard\
uninstall cmd: MsiExec.exe /I{9B2B0EAD-2CC7-4589-B3AA-D23BAB724065}
publisher: S.A.D.
TrayApp 110.0.180.000 ({9C2D4047-0E40-499a-AC7A-C4B9BB12FE03})

version: 1845493940
install source: D:\setup\TrayApp\
Greeting Card Factory Photo Card Maker 1.0.0.5 ({9C627F78-DBB9-4293-AA89-

E83119C39CE9})
version: 16777216
version (major): 1
install location: C:\Program Files\Nova Development\Greeting Card Factory Photo
Card Maker\
install source: D:\GCF6\
uninstall cmd: MsiExec.exe /I{9C627F78-DBB9-4293-AA89-E83119C39CE9}
publisher: Nova Development
contact: Technical Support
help link: http://www.novadevelopment.com/support
help telephone: 818-591-6245
MarketResearch 110.0.180.000 ({9F4EE72A-C5C9-42ad-ABEF-427690843577})

version: 1845493940
install source: D:\setup\MarketResearch\
({A1185190-514F-11D6-A285-00A0CC51B2FE})
Files\InstallShield Installation Information\{A1185190-514F-11D6-A285-
Windows Live Sync 14.0.8064.206 ({A1BF9950-8CDB-468E-83FA-EACFB00EA7D5})

version: 234889088
version (major): 14
Live\.cache\be06b9161ca49e0\
uninstall cmd: MsiExec.exe /X{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}
Segoe UI 14.0.4327.805 ({A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7})

version: 234885351
version (major): 14
Live\.cache\ab1c71101ca49e0\
uninstall cmd: MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
publisher: Microsoft Corp
Adobe AIR 1.5.0.7220 ({A2BCA9F1-566C-4805-97D1-7FDC93386723})
version: 17104896
version (major): 1
version (minor): 5
install source: c:\docume~1\pearl\locals~1\temp\aircb.tmp\
uninstall cmd: MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
publisher: Adobe Systems Inc.
Microsoft .NET Framework 3.0 Service Pack 2 3.2.30729 ({A3051CD0-2F64-3813-A88D-

B8DCCDE8F8C7})
version: 50493449
version (major): 3
version (minor): 2
install source: c:\e9af0549a9b9a70c6add\wcu\dotNetFramework\dotnetfx30\
uninstall cmd: MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
({A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}.KB958483)
Qwest QuickAssist Desktop Tools 23 ({A63E18AC-B504-4045-AFE6-A279BBABB988})

version: 385875968
version (major): 23
install source: D:\quickassist\
uninstall cmd: MsiExec.exe /I{A63E18AC-B504-4045-AFE6-A279BBABB988}
publisher: SupportSoft
MSN Toolbar 1.0.39.0 ({A8AC89BA-D8CB-4372-9743-1C54D23286B0})

uninstall cmd: "C:\Program Files\Microsoft\Search Enhancement
Pack\InstallMgr\InstallMgr.exe"
help link: http://g.msn.com/ENUSTB0IAMSNE/3001
WebReg 110.0.180.000 ({AA2E8A46-B45E-4aea-8A23-88AB57D04523})

version: 1845493940
estimated size: 905
install source: D:\setup\WebReg\
DeviceManagementQFolder 1.00.0000 ({AB5D51AE-EBC3-438D-872C-705C7C2084B0})

version: 16777216
version (major): 1
estimated size: 124
({AC157741-3285-4D6A-B934-9174587A3493})
Files\InstallShield Installation Information\{AC157741-3285-4D6A-B934-
9174587A3493}\setup.exe" -l0x9
Adobe Reader 9.1 9.1.0 ({AC76BA86-7AD7-1033-7B44-A91000000001})

version: 151060480
version (major): 9
version (minor): 1
install location: C:\Program Files\Adobe\Reader 9.0\Reader\
install source: C:\Documents and Settings\Pearl\Local Settings\Application
Data\Adobe\Reader 9.1\Setup Files\
uninstall cmd: MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A91000000001}
comments:
contact: Customer Support
help link: http://www.adobe.com/support/main.html
readme: C:\Program Files\Adobe\Reader 9.0\Readme.htm
Spybot - Search & Destroy 1.6.0 ({B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1)

install location: C:\Program Files\Spybot - Search & Destroy\
uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
publisher: Safer Networking Limited
help link: http://www.safer-networking.org/index.php?page=support
({B5BAAFAE-3561-463D-8E3F-91761A57ADB8})
Files\InstallShield Installation Information\{B5BAAFAE-3561-463D-8E3F-
91761A57ADB8}\setup.exe" -l0x9
F4200 110.0.206.000 ({B61A79BE-E94C-42C0-921D-8B7E5217069C})

version: 1845493966
estimated size: 323
install source: C:\Program Files\HP\Digital Imaging\{C3B6AEB1-390C-4792-8677-
CD87F8B2C959}\Product\
MSN Toolbar 3.0.1125.0 ({B6EF6DCE-078E-4952-A7FA-352A9C349EB0})

version: 50332773
version (major): 3
uninstall cmd: MsiExec.exe /X{B6EF6DCE-078E-4952-A7FA-352A9C349EB0}
help link: http://g.msn.com/ENUSTB0IAMSNE/3001
Microsoft Default Manager 1.1.53.0 ({B7148D71-0A8F-4501-96B4-4E1CC67F874E})

version: 16842805
version (major): 1
version (minor): 1
estimated size: 239
install location: C:\Program Files\Microsoft\Search Enhancement Pack\Default
Manager\
uninstall cmd: MsiExec.exe /I{B7148D71-0A8F-4501-96B4-4E1CC67F874E}
Windows Presentation Foundation 3.0.6920.0 ({BAF78226-3200-4DB4-BE33-

4D922A799840})
version: 50338568
version (major): 3
install source: c:\7cd3ec794a585ad230488ccebc\wcu\wpf\
uninstall cmd: MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
({BB8B979E-E336-47E7-96BC-1031C1B94561})
Microsoft Sync Framework Services Native v1.0 (x86) 1.0.1215.0 ({BD64AF4A-8C80-

4152-AD77-FCDDF05208AB})
version: 16778431
version (major): 1
Live\.cache\c92c97e81ca49e0\
uninstall cmd: MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
contact: MS
DJ_AIO_03_F4200_Software_Min 110.0.206.000 ({BE8A9C2C-8E41-445B-A746-

BEB0B1F992F8})
version: 1845493966
estimated size: 907
install source: D:\setup\Software_min\
BufferChm 110.0.180.000 ({BF08AB1C-3357-4f20-A200-8EBB8EF27C59})

version: 1845493940
install source: D:\setup\BufferChm\
Microsoft .NET Framework 2.0 Service Pack 2 2.2.30729 ({C09FB3CD-3D0C-3F2D-899A-

6A1D67F2073F})
version: 33716233
version (major): 2
version (minor): 2
install source: c:\e9af0549a9b9a70c6add\wcu\dotNetFramework\dotnetfx20\
uninstall cmd: MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
({C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}.KB200003)
HP Deskjet F4200 All-In-One Driver Software 11.0 Rel .3 11.0 ({C3B6AEB1-390C-4792-

8677-CD87F8B2C959})
uninstall cmd: C:\Program Files\HP\Digital Imaging\{C3B6AEB1-390C-4792-8677-
CD87F8B2C959}\setup\hpzscr01.exe -datfile hposcr28.dat -onestop
publisher: HP
({C6866B7D-ACFD-4C49-B77B-3B2F8CF54B96})
Files\InstallShield Installation Information\{C6866B7D-ACFD-4C49-B77B-
3B2F8CF54B96}\setup.exe" -l0x9
Windows Live Essentials 14.0.8064.206 ({C6CA8874-5F22-4AF0-9BE3-016BF299C536})

version: 234889088
version (major): 14
Live\.cache\af24cb4a1ca49e0\
uninstall cmd: MsiExec.exe /I{C6CA8874-5F22-4AF0-9BE3-016BF299C536}
help link: http://support.live.com/
Scan 11.0.0.0 ({C89B5E3A-690F-4CEE-909A-BF869E198B0A})

version: 184549376
version (major): 11
install source: D:\setup\Scan\
comments: 0
contact: 0
help link: 0
help telephone: 0
readme: 0
Microsoft .NET Framework 1.1 1.1.4322 ({CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1})

version: 16847074
version (major): 1
version (minor): 1
uninstall cmd: MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
publisher: Microsoft
readme:
file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm
SmartWebPrinting 110.0.182.000 ({CC0E1AE3-091D-4969-B151-7AC142062C28})

version: 1845493942
install source: D:\setup\WebPrinting\
Microsoft .NET Framework 3.5 SP1 3.5.30729 ({CE2CDD62-0124-36CA-84D3-

9F4DCF5C5BD9})
version: 50690057
version (major): 3
version (minor): 5
install source: C:\DOCUME~1\Pearl\LOCALS~1\Temp\IXP027E0.tmp\dotnetfx35\x86\
uninstall cmd: MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
({CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB350003)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) 1 ({CE2CDD62-0124-36CA-

84D3-9F4DCF5C5BD9}.KB953595)
uninstall cmd: C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-
84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
comments: This hotfix is for Microsoft .NET Framework 3.5 SP1.
If you later install a more recent service pack, this hotfix will be uninstalled
automatically.
For more information, visit http://support.microsoft.com/kb/953595.
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) 1 ({CE2CDD62-0124-36CA-

84D3-9F4DCF5C5BD9}.KB958484)
84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+
REBOOTPROMPT=""
comments: This hotfix is for Microsoft .NET Framework 3.5 SP1.
If you later install a more recent service pack, this hotfix will be uninstalled
automatically.
({CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB960043)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) 1 ({CE2CDD62-0124-36CA-

84D3-9F4DCF5C5BD9}.KB963707)
84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+
REBOOTPROMPT=""
comments: This update is for Microsoft .NET Framework 3.5 SP1.
If you later install a more recent service pack, this update will be uninstalled
automatically.
LightScribe System Software 1.12.29.2 1.12.29.2 ({CF8C077A-B467-4C43-8DB5-

3A9B94FF9681})
version: 17563677
version (major): 1
version (minor): 12
install location: C:\Program Files\Common Files\LightScribe\
install source: D:\NeroExpress\Installation\Redist\
uninstall cmd: MsiExec.exe /X{CF8C077A-B467-4C43-8DB5-3A9B94FF9681}
publisher: http://www.lightscribe.com
comments: LightScribe System Software
help link: http://www.lightscribe.com
GPBaseService 110.0.180.000 ({D16B4BE6-8B10-422f-8034-96D1CA9483B5})

version: 1845493940
install source: D:\setup\GPBaseService\
HPPhotosmartEssential 2.04.0000 ({D79113E7-274C-470B-BD46-01B10219DF6A})

version: 33816576
version (major): 2
version (minor): 4
install source:
C:\DOCUME~1\Pearl\LOCALS~1\Temp\7zS4176\setup\HPPhotoSmartEssential\
({DEBD7BF3-5856-11D6-A285-00A0CC51B2FE})
Files\InstallShield Installation Information\{DEBD7BF3-5856-11D6-A285-
Copy 110.0.180.000 ({E133E97F-5186-4503-BEC8-752EB9E8EBD7})

version: 1845493940
install source: D:\setup\Copy\
Cards_Calendar_OrderGift_DoMorePlugout 2.03.0000 ({E535C94A-B87F-4182-BEA8-

1E9322078D3E})
version: 33751040
version (major): 2
version (minor): 3
install source: D:\setup\Cards_Calendar_Ordergift_Domore_Plugout\
Toolbox 110.0.180.000 ({E96B0085-6659-486b-A221-5042A042728D})

version: 1845493940
install source: D:\setup\Toolbox\
({EE6699B3-E5AD-4E59-8F2B-207DF630670C})
Files\InstallShield Installation Information\{EE6699B3-E5AD-4E59-8F2B-
207DF630670C}\setup.exe" -l0x9
DeviceDiscovery 110.0.180.000 ({EF1ADA5A-0B1A-4662-8C55-7475A61D8B65})

version: 1845493940
install source: D:\setup\DeviceDiscovery\
Destination Component 110.0.0.0 ({EF9E56EE-0243-4BAD-88F4-5E7508AA7D96})

version: 1845493760
install source: D:\setup\Destinations\
Microsoft SQL Server 2005 Compact Edition [ENU] 3.1.0000 ({F0B430D1-B6AA-473D-

9B06-AA3DD01FD0B8})
version: 50397184
version (major): 3
version (minor): 1
install location: C:\Program Files\Microsoft SQL Server Compact Edition\
install source: D:\WindowsLive\
uninstall cmd: MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
help link: http://www.microsoft.com/sql/everywhere
Realtek High Definition Audio Driver ({F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC})

uninstall cmd: RtlUpd.exe -r -m
MSXML 4.0 SP2 (KB973688) 4.20.9876.0 ({F662A8E6-F4DC-41A2-901E-8C11F044BDEC})

version: 68429460
version (major): 4
version (minor): 20
install source: c:\9ccb3402e172ca01fb753c98a8\
uninstall cmd: MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Windows Live Call 14.0.8064.0206 ({F6BD194C-4190-4D73-B1B1-C48C99921BFE})

version: 234889088
version (major): 14
Live\.cache\ac29daca1ca49e0\
uninstall cmd: MsiExec.exe /I{F6BD194C-4190-4D73-B1B1-C48C99921BFE}
({F865C2FE-25E7-11D6-9BAF-0090271AF8A4})
Files\InstallShield Installation Information\{F865C2FE-25E7-11D6-9BAF-
0090271AF8A4}\setup.exe" -l0x9
F4200_Help 110.0.206.000 ({F8A5531E-FEB4-4F7C-AF51-342E40FA7A0D})

version: 1845493966
install source: D:\Setup\ProductHelp\
({FB2292C6-1F0A-11D7-AB2D-0090271A23A2})
Files\InstallShield Installation Information\{FB2292C6-1F0A-11D7-AB2D-
0090271A23A2}\setup.exe" -l0x9
({FC0DD8AE-3DC0-11D7-AB2D-0090271A23A2})
Files\InstallShield Installation Information\{FC0DD8AE-3DC0-11D7-AB2D-
0090271A23A2}\setup.exe" -l0x9
({FD549B7B-3532-4160-80D4-3E3DD39A9AE5})
Files\InstallShield Installation Information\{FD549B7B-3532-4160-80D4-
3E3DD39A9AE5}\setup.exe" -l0x9
--- System Services ---

Service (registry key): .NET CLR Data
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0
Service (registry key): .NET CLR Networking

Start: 0
Type: 0
Error Control: 0
Service (registry key): .NET Data Provider for Oracle

Start: 0
Type: 0
Error Control: 0
Service (registry key): .NET Data Provider for SqlServer

Start: 0
Type: 0
Error Control: 0
Service (registry key): .NETFramework

Start: 0
Type: 0
Error Control: 0
Service (registry key): 6to4

Display name: IPv6 Helper Service
Description: Provides DDNS name registration and automatic IPv6 connectivity
over an IPv4 network. If this service is stopped, other computers may not be able
to reach it by name and the machine will only have IPv6 connectivity if it is
connected to a native IPv6 network. If this service is disabled, any other
services that explicitly depend on this service will fail to start.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 8F078AE4ED187AAABC0A305146DE6716
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSS,tcpip6,winmgmt
Service (registry key): Abiosdsk

Start: 4
Type: 1
Error Control: 0
Service (registry key): abp480n5

Start: 4
Type: 1
Error Control: 1
Service (registry key): ACPI

Display name: Microsoft ACPI Driver
Image path: system32\DRIVERS\ACPI.sys
Image size: 187776
Image MD5: A10C7534F7223F4A73A948967D00E69B
Start: 0
Type: 1
Error Control: 1
Service (registry key): ACPIEC

Start: 4
Type: 1
Error Control: 1
Service (registry key): adpu160m

Start: 4
Type: 1
Error Control: 1
Service (registry key): aec

Display name: Microsoft Kernel Acoustic Echo Canceller
Image path: system32\drivers\aec.sys
Image size: 142464
Image MD5: 1EE7B434BA961EF845DE136224C30FEC
Start: 3
Type: 1
Error Control: 1
Service (registry key): AegisP

Display name: AEGIS Protocol (IEEE 802.1x) v3.5.3.0
Description: AEGIS Protocol (IEEE 802.1x) v3.5.3.0
Image path: system32\DRIVERS\AegisP.sys
Image size: 21419
Image MD5: 15E655BAA989444F56787EF558823643
Start: 2
Type: 1
Error Control: 1
Service (registry key): AFD

Display name: AFD
Description: AFD Networking Support Environment
Image path: \SystemRoot\System32\drivers\afd.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Start: 1
Type: 1
Error Control: 1
Service (registry key): Aha154x

Start: 4
Type: 1
Error Control: 1
Service (registry key): aic78u2

Start: 4
Type: 1
Error Control: 1
Service (registry key): aic78xx

Start: 4
Type: 1
Error Control: 1
Service (registry key): Alerter

Display name: Alerter
Description: Notifies selected users and computers of administrative alerts. If
the service is stopped, programs that use administrative alerts will not receive
them. If this service is disabled, any services that explicitly depend on it will
fail to start.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\system32\svchost.exe -k LocalService
Image size: 14336
Start: 4
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation
Service (registry key): ALG

Display name: Application Layer Gateway Service
Description: Provides support for 3rd party protocol plug-ins for Internet
Connection Sharing and the Windows Firewall.
Image path: %SystemRoot%\System32\alg.exe
Image size: 44544
Image MD5: F1958FBF86D5C004CF19A5951A9514B7
Start: 3
Type: 16
Error Control: 1
Service (registry key): AliIde

Start: 4
Type: 1
Error Control: 1
Service (registry key): amsint

Start: 4
Type: 1
Error Control: 1
Service (registry key): AppMgmt

Display name: Application Management
Description: Provides software installation services such as Assign, Publish,
and Remove.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Service (registry key): asc

Start: 4
Type: 1
Error Control: 1
Service (registry key): asc3350p

Start: 4
Type: 1
Error Control: 1
Service (registry key): asc3550
Start: 4
Type: 1
Error Control: 1
Service (registry key): ASP.NET

Start: 0
Type: 0
Error Control: 0
Service (registry key): ASP.NET_1.1.4322

Start: 0
Type: 0
Error Control: 0
Service (registry key): ASP.NET_2.0.50727

Start: 0
Type: 0
Error Control: 0
Service (registry key): aspnet_state

Display name: ASP.NET State Service
Description: Provides support for out-of-process session states for ASP.NET. If
this service is stopped, out-of-process requests will not be processed. If this
service is disabled, any services that explicitly depend on it will fail to start.
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
Image size: 34312
Image MD5: 0E5E4957549056E2BF2C49F4F6B601AD
Start: 3
Type: 16
Error Control: 1
Service (registry key): AsyncMac

Display name: RAS Asynchronous Media Driver
Description: RAS Asynchronous Media Driver
Image path: system32\DRIVERS\asyncmac.sys
Image size: 14336
Image MD5: 02000ABF34AF4C218C35D257024807D6
Start: 3
Type: 1
Error Control: 1
Service (registry key): atapi

Display name: Standard IDE/ESDI Hard Disk Controller
Image path: system32\DRIVERS\atapi.sys
Image size: 95360
Image MD5: CDFE4411A69C224BD1D11B2DA92DAC51
Start: 0
Type: 1
Error Control: 1
Service (registry key): Atdisk

Start: 4
Type: 1
Error Control: 0
Service (registry key): Atmarpc

Display name: ATM ARP Client Protocol
Description: ATM ARP Client Protocol
Image path: system32\DRIVERS\atmarpc.sys
Image size: 59904
Image MD5: EC88DA854AB7D7752EC8BE11A741BB7F
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip
Service (registry key): AudioSrv

Display name: Windows Audio
Description: Manages audio devices for Windows-based programs. If this service
is stopped, audio devices and effects will not function properly. If this service
is disabled, any services that explicitly depend on it will fail to start.
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Depends On services: PlugPlay,RpcSs
Service (registry key): audstub

Display name: Audio Stub Driver
Image path: system32\DRIVERS\audstub.sys
Image size: 3072
Image MD5: D9F724AA26C010A217C97606B160ED68
Start: 3
Type: 1
Error Control: 1
Service (registry key): BattC

Start: 0
Type: 0
Error Control: 0
Service (registry key): Beep

Start: 1
Type: 1
Error Control: 1
Service (registry key): BITS

Display name: Background Intelligent Transfer Service
Description: Transfers data between clients and servers in the background. If
BITS is disabled, features such as Windows Update will not work correctly.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs
Service (registry key): Browser

Display name: Computer Browser
Description: Maintains an updated list of computers on the network and supplies
this list to computers designated as browsers. If this service is stopped, this
list will not be updated or maintained. If this service is disabled, any services
that explicitly depend on it will fail to start.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,LanmanServer
Service (registry key): cbidf2k

Start: 4
Type: 1
Error Control: 1
Service (registry key): cd20xrnt

Start: 4
Type: 1
Error Control: 1
Service (registry key): Cdaudio
Start: 1
Type: 1
Error Control: 0
Service (registry key): Cdfs

Start: 4
Type: 2
Error Control: 1
Depends On group: "SCSI CDROM Class"
Service (registry key): Cdrom

Display name: CD-ROM Driver
Image path: system32\DRIVERS\cdrom.sys
Image size: 49536
Image MD5: AF9C19B3100FE010496B1A27181FBF72
Start: 1
Type: 1
Error Control: 1
Depends On group: "SCSI miniport"
Service (registry key): Changer

Start: 1
Type: 1
Error Control: 0
Service (registry key): CiSvc

Display name: Indexing Service
Description: Indexes contents and properties of files on local and remote
computers; provides rapid access to files through flexible querying language.
Image path: %SystemRoot%\system32\cisvc.exe
Image size: 5632
Image MD5: 3192BD04D032A9C4A85A3278C268A13A
Start: 3
Type: 288
Error Control: 1
Depends On services: RPCSS
Service (registry key): ClipSrv

Display name: ClipBook
Description: Enables ClipBook Viewer to store information and share it with
remote computers. If the service is stopped, ClipBook Viewer will not be able to
share information with remote computers. If this service is disabled, any services
Image path: %SystemRoot%\system32\clipsrv.exe
Image size: 33280
Image MD5: C8DEC22C4137D7A90F8BDF41CA4B82AE
Start: 4
Type: 16
Error Control: 1
Depends On services: NetDDE
Service (registry key): clr_optimization_v2.0.50727_32

Display name: .NET Runtime Optimization Service v2.0.50727_X86
Description: Microsoft .NET Framework NGEN
Image path: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Image size: 69632
Image MD5: D87ACAED61E417BBA546CED5E7E36D9C
Start: 3
Type: 16
Error Control: 0
Service (registry key): CmdIde

Start: 4
Type: 1
Error Control: 1
Service (registry key): COMSysApp

Display name: COM+ System Application
Description: Manages the configuration and tracking of Component Object Model
(COM)+-based components. If the service is stopped, most COM+-based components
will not function properly. If this service is disabled, any services that
explicitly depend on it will fail to start.
Image path: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-
960D-00805FC79235}
Image size: 5120
Image MD5: DD87DB7387B9EB441C5674888A0D840C
Start: 3
Type: 16
Error Control: 1
Depends On services: rpcss
Service (registry key): ContentFilter

Start: 0
Type: 0
Error Control: 0
Service (registry key): ContentIndex

Start: 0
Type: 0
Error Control: 0
Service (registry key): Cpqarray

Start: 4
Type: 1
Error Control: 1
Service (registry key): Creative Service for CDROM Access

Display name: Creative Service for CDROM Access
Image path: C:\WINDOWS\system32\CTsvcCDA.exe
Image size: 44032
Image MD5: 3C8B6609712F4FF78E521F6DCFC4032B
Start: 2
Type: 16
Error Control: 1
Service (registry key): CryptSvc

Display name: Cryptographic Services
Description: Provides three management services: Catalog Database Service,
which confirms the signatures of Windows files; Protected Root Service, which adds
and removes Trusted Root Certification Authority certificates from this computer;
and Key Service, which helps enroll this computer for certificates. If this
service is stopped, these management services will not function properly. If this
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): ctsfm2k

Display name: Creative SoundFont Management Device Driver
Image path: system32\DRIVERS\ctsfm2k.sys
Image size: 130192
Image MD5: B459AE4AFCA570088ADDDBE55EABBC92
Start: 3
Type: 1
Error Control: 1
Service (registry key): dac2w2k

Start: 4
Type: 1
Error Control: 0
Service (registry key): dac960nt
Start: 4
Type: 1
Error Control: 1
Service (registry key): DcomLaunch

Display name: DCOM Server Process Launcher
Description: Provides launch functionality for DCOM services.
Image path: %SystemRoot%\system32\svchost -k DcomLaunch
Image size: 0
Start: 2
Type: 32
Error Control: 1
Service (registry key): Dhcp

Display name: DHCP Client
Description: Manages network configuration by registering and updating IP
addresses and DNS names.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Depends On services: Tcpip,Afd,NetBT
Service (registry key): Disk

Display name: Disk Driver
Image path: system32\DRIVERS\disk.sys
Image size: 36352
Image MD5: 00CA44E4534865F8A3B64F7C0984BFF0
Start: 0
Type: 1
Error Control: 1
Service (registry key): dmadmin

Display name: Logical Disk Manager Administrative Service
Description: Configures hard disk drives and volumes. The service only runs for
configuration processes and then stops.
Image path: %SystemRoot%\System32\dmadmin.exe /com
Image size: 224768
Image MD5: 554C7CB178FE3BD12450B81AD63ADBC3
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay,DmServer
Service (registry key): dmboot

Image path: System32\drivers\dmboot.sys
Image size: 799744
Image MD5: C0FBB516E06E243F0CF31F597E7EBF7D
Start: 4
Type: 1
Error Control: 1
Service (registry key): dmio

Display name: Logical Disk Manager Driver
Image path: System32\drivers\dmio.sys
Image size: 153344
Image MD5: F5E7B358A732D09F4BCF2824B88B9E28
Start: 0
Type: 1
Error Control: 1
Service (registry key): dmload

Image path: System32\drivers\dmload.sys
Image size: 5888
Image MD5: E9317282A63CA4D188C0DF5E09C6AC5F
Start: 0
Type: 1
Error Control: 1
Service (registry key): dmserver

Display name: Logical Disk Manager
Description: Detects and monitors new hard disk drives and sends disk volume
information to Logical Disk Manager Administrative Service for configuration. If
this service is stopped, dynamic disk status and configuration information may
become out of date. If this service is disabled, any services that explicitly
depend on it will fail to start.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay
Service (registry key): DMusic

Display name: Microsoft Kernel DLS Syntheiszer
Image path: system32\drivers\DMusic.sys
Image size: 52864
Image MD5: A6F881284AC1150E37D9AE47FF601267
Start: 3
Type: 1
Error Control: 1
Service (registry key): Dnscache

Display name: DNS Client
Description: Resolves and caches Domain Name System (DNS) names for this
computer. If this service is stopped, this computer will not be able to resolve
DNS names and locate Active Directory domain controllers. If this service is
disabled, any services that explicitly depend on it will fail to start.
Image path: %SystemRoot%\system32\svchost.exe -k NetworkService
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): dpti2o

Start: 4
Type: 1
Error Control: 1
Service (registry key): drmkaud

Display name: Microsoft Kernel DRM Audio Descrambler
Image path: system32\drivers\drmkaud.sys
Image size: 2944
Image MD5: 1ED4DBBAE9F5D558DBBA4CC450E3EB2E
Start: 3
Type: 1
Error Control: 1
Service (registry key): eLoggerSvc6

Display name: Norman eLogger service 6
Image path: "C:\Program Files\Norman\Npm\Bin\Elogsvc.exe"
Image size: 152904
Image MD5: A8025F5C7BDB90A2E4384D98150A9B96
Start: 2
Type: 16
Error Control: 1
Service (registry key): ERSvc

Display name: Error Reporting Service
Description: Allows error reporting for services and applictions running in
non-standard environments.
Image size: 14336
Start: 2
Type: 32
Error Control: 0
Service (registry key): Eventlog

Display name: Event Log
Description: Enables event log messages issued by Windows-based programs and
components to be viewed in Event Viewer. This service cannot be stopped.
Image path: %SystemRoot%\system32\services.exe
Image size: 110592
Image MD5: 37561F8D4160D62DA86D24AE41FAE8DE
Start: 2
Type: 32
Error Control: 1
Service (registry key): EventSystem

Display name: COM+ Event System
Description: Supports System Event Notification Service (SENS), which provides
automatic distribution of events to subscribing Component Object Model (COM)
components. If the service is stopped, SENS will close and will not be able to
provide logon and logoff notifications. If this service is disabled, any services
Image path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Service (registry key): Fastfat

Start: 4
Type: 2
Error Control: 1
Service (registry key): FastUserSwitchingCompatibility

Display name: Fast User Switching Compatibility
Description: Provides management for applications that require assistance in a
multiple user environment.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: TermService
Service (registry key): Fdc

Display name: Floppy Disk Controller Driver
Image path: system32\DRIVERS\fdc.sys
Image size: 27392
Image MD5: CED2E8396A8838E59D8FD529C680E02C
Start: 3
Type: 1
Error Control: 1
Service (registry key): Fips

Start: 1
Type: 1
Error Control: 1
Service (registry key): Flpydisk

Display name: Floppy Disk Driver
Image path: system32\DRIVERS\flpydisk.sys
Image size: 20480
Image MD5: 0DD1DE43115B93F4D85E889D7A86F548
Start: 3
Type: 1
Error Control: 1
Service (registry key): FltMgr

Display name: FltMgr
Description: File System Filter Manager Driver
Image path: system32\DRIVERS\fltMgr.sys
Image size: 128896
Image MD5: 3D234FB6D6EE875EB009864A299BEA29
Start: 0
Type: 2
Error Control: 1
Service (registry key): FontCache3.0.0.0

Display name: Windows Presentation Foundation Font Cache 3.0.0.0
Description: Optimizes performance of Windows Presentation Foundation (WPF)
applications by caching commonly used font data. WPF applications will start this
service if it is not already running. It can be disabled, though doing so will
degrade the performance of WPF applications.
Image path:
c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
Image size: 46104
Image MD5: 8BA7C024070F2B7FDD98ED8A4BA41789
Start: 3
Type: 16
Error Control: 1
Service (registry key): Fs_Rec

Start: 1
Type: 8
Error Control: 0
Service (registry key): Ftdisk

Display name: Volume Manager Driver
Image path: system32\DRIVERS\ftdisk.sys
Image size: 125056
Image MD5: 6AC26732762483366C3969C9E4D2259D
Start: 0
Type: 1
Error Control: 1
Service (registry key): Gpc

Display name: Generic Packet Classifier
Description: Generic Packet Classifier
Image path: system32\DRIVERS\msgpc.sys
Image size: 35072
Image MD5: C0F1D4A21DE5A415DF8170616703DEBF
Start: 3
Type: 1
Error Control: 1
Service (registry key): HDAudBus

Display name: Microsoft UAA Bus Driver for High Definition Audio
Image path: system32\DRIVERS\HDAudBus.sys
Image size: 138752
Image MD5: 3FCC124B6E08EE0E9351F717DD136939
Start: 3
Type: 1
Error Control: 1
Service (registry key): helpsvc

Display name: Help and Support
Description: Enables Help and Support Center to run on this computer. If this
service is stopped, Help and Support Center will be unavailable. If this service
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): HidServ

Display name: Human Interface Device Access
Description: Enables generic input access to Human Interface Devices (HID),
which activates and maintains the use of predefined hot buttons on keyboards,
remote controls, and other multimedia devices. If this service is stopped, hot
buttons controlled by this service will no longer function. If this service is
Image size: 14336
Start: 4
Type: 32
Error Control: 1
Service (registry key): hpn

Start: 4
Type: 1
Error Control: 1
Service (registry key): hpqcxs08

Display name: hpqcxs08
Image path: %SystemRoot%\system32\svchost.exe -k hpdevmgmt
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Service (registry key): hpqddsvc

Display name: HP CUE DeviceDiscovery Service
Description: This service detects and monitors CUE devices on the system.
Image path: %SystemRoot%\system32\svchost.exe -k hpdevmgmt
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): HPZid412
Display name: IEEE-1284.4 Driver HPZid412
Image path: system32\DRIVERS\HPZid412.sys
Image size: 49920
Image MD5: D03D10F7DED688FECF50F8FBF1EA9B8A
Start: 3
Type: 1
Error Control: 1
Service (registry key): HPZipr12

Display name: Print Class Driver for IEEE-1284.4 HPZipr12
Image path: system32\DRIVERS\HPZipr12.sys
Image size: 16496
Image MD5: 89F41658929393487B6B7D13C8528CE3
Start: 3
Type: 1
Error Control: 1
Service (registry key): HPZius12

Display name: USB to IEEE-1284.4 Translation Driver HPZius12
Image path: system32\DRIVERS\HPZius12.sys
Image size: 21568
Image MD5: ABCB05CCDBF03000354B9553820E39F8
Start: 3
Type: 1
Error Control: 1
Service (registry key): HTTP

Display name: HTTP
Description: This service implements the hypertext transfer protocol (HTTP). If
this service is disabled, any services that explicitly depend on it will fail to
start.
Image path: System32\Drivers\HTTP.sys
Image size: 263552
Image MD5: 9F8B0F4276F618964FD118BE4289B7CD
Start: 3
Type: 1
Error Control: 1
Service (registry key): HTTPFilter

Display name: HTTP SSL
Description: This service implements the secure hypertext transfer protocol
(HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this
Image path: %SystemRoot%\System32\svchost.exe -k HTTPFilter
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: HTTP
Service (registry key): i2omgmt

Start: 1
Type: 1
Error Control: 1
Service (registry key): i2omp

Start: 4
Type: 1
Error Control: 1
Service (registry key): i8042prt

Display name: i8042 Keyboard and PS/2 Mouse Port Driver
Image path: system32\DRIVERS\i8042prt.sys
Image size: 52736
Image MD5: 5502B58EEF7486EE6F93F3F164DCB808
Start: 1
Type: 1
Error Control: 1
Service (registry key): idsvc

Display name: Windows CardSpace
Description: Securely enables the creation, management, and disclosure of
digital identities.
Image path: "C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication
Foundation\infocard.exe"
Image size: 881664
Image MD5: C01AC32DC5C03076CFB852CB5DA5229C
Start: 3
Type: 32
Error Control: 1
Service (registry key): Imapi

Display name: CD-Burning Filter Driver
Image path: system32\DRIVERS\imapi.sys
Image size: 41856
Image MD5: F8AA320C6A0409C0380E5D8A99D76EC6
Start: 1
Type: 1
Error Control: 1
Service (registry key): ImapiService

Display name: IMAPI CD-Burning COM Service
Description: Manages CD recording using Image Mastering Applications
Programming Interface (IMAPI). If this service is stopped, this computer will be
unable to record CDs. If this service is disabled, any services that explicitly
depend on it will fail to start.
Image path: C:\WINDOWS\system32\imapi.exe
Image size: 150016
Image MD5: FA788520BCAC0F5D9D5CDE5615C0D931
Start: 3
Type: 16
Error Control: 1
Service (registry key): inetaccs

Start: 0
Type: 0
Error Control: 0
Service (registry key): ini910u

Start: 4
Type: 1
Error Control: 1
Service (registry key): Inport

Start: 0
Type: 0
Error Control: 0
Service (registry key): IntcAzAudAddService

Display name: Service for Realtek HD Audio (WDM)
Image path: system32\drivers\RtkHDAud.sys
Image size: 4449280
Image MD5: 1EBDE650D97A8ECCDC1CC4A0804647CD
Start: 3
Type: 1
Error Control: 1
Service (registry key): IntelIde

Start: 4
Type: 1
Error Control: 1
Service (registry key): Ip6Fw

Display name: IPv6 Windows Firewall Driver
Description: Provides intrusion prevention service for a home or small office
network.
Image path: system32\DRIVERS\Ip6Fw.sys
Image size: 29056
Image MD5: 4448006B6BC60E6C027932CFC38D6855
Start: 3
Type: 1
Error Control: 1
Service (registry key): IpFilterDriver

Display name: IP Traffic Filter Driver
Description: IP Traffic Filter Driver
Image path: system32\DRIVERS\ipfltdrv.sys
Image size: 32896
Image MD5: 731F22BA402EE4B62748ADAF6363C182
Start: 3
Type: 1
Error Control: 1
Service (registry key): IpInIp

Display name: IP in IP Tunnel Driver
Description: IP in IP Tunnel Driver
Image path: system32\DRIVERS\ipinip.sys
Image size: 20992
Image MD5: E1EC7F5DA720B640CD8FB8424F1B14BB
Start: 3
Type: 1
Error Control: 1
Service (registry key): IpNat

Display name: IP Network Address Translator
Description: IP Network Address Translator
Image path: system32\DRIVERS\ipnat.sys
Image size: 134912
Image MD5: E2168CBC7098FFE963C6F23F472A3593
Start: 3
Type: 1
Error Control: 1
Service (registry key): IPSec

Display name: IPSEC driver
Description: IPSEC driver
Image path: system32\DRIVERS\ipsec.sys
Image size: 74752
Image MD5: 64537AA5C003A6AFEEE1DF819062D0D1
Start: 1
Type: 1
Error Control: 1
Service (registry key): IRENUM
Display name: IR Enumerator Service
Image path: system32\DRIVERS\irenum.sys
Image size: 11264
Image MD5: 50708DAA1B1CBB7D6AC1CF8F56A24410
Start: 3
Type: 1
Error Control: 1
Service (registry key): ISAPISearch

Start: 0
Type: 0
Error Control: 0
Service (registry key): isapnp

Display name: PnP ISA/EISA Bus Driver
Image path: system32\DRIVERS\isapnp.sys
Image size: 35840
Image MD5: E504F706CCB699C2596E9A3DA1596E87
Start: 0
Type: 1
Error Control: 3
Service (registry key): JavaQuickStarterService

Display name: Java Quick Starter
Description: Prefetches JRE files for faster startup of Java applets and
applications
Image path: "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config
"C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
Image size: 153376
Image MD5: 39133291CB607BDD87CFC565A4A1E7A5
Start: 2
Type: 16
Error Control: 1
Service (registry key): Kbdclass

Display name: Keyboard Class Driver
Image path: system32\DRIVERS\kbdclass.sys
Image size: 24576
Image MD5: EBDEE8A2EE5393890A1ACEE971C4C246
Start: 1
Type: 1
Error Control: 1
Service (registry key): kmixer

Display name: Microsoft Kernel Wave Audio Mixer
Image path: system32\drivers\kmixer.sys
Image size: 172416
Image MD5: BA5DEDA4D934E6288C2F66CAF58D2562
Start: 3
Type: 1
Error Control: 1
Service (registry key): KSecDD

Start: 0
Type: 1
Error Control: 1
Service (registry key): lanmanserver

Display name: Server
Description: Supports file, print, and named-pipe sharing over the network for
this computer. If this service is stopped, these functions will be unavailable. If
start.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): lanmanworkstation

Display name: Workstation
Description: Creates and maintains client network connections to remote
servers. If this service is stopped, these connections will be unavailable. If
start.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): lbrtfdc

Start: 1
Type: 1
Error Control: 0
Service (registry key): ldap

Start: 0
Type: 0
Error Control: 0
Service (registry key): LicenseService

Start: 0
Type: 0
Error Control: 0
Service (registry key): LightScribeService

Display name: LightScribeService Direct Disc Labeling Service
Description: Used by the LightScribe software components to support 3rd party
disc labeling applications using the LightScribe COM Application Programming
Interface (LSCAPI). This service needs to run for LightScribe direct disc labeling
to work.
Image path: "C:\Program Files\Common Files\LightScribe\LSSrvc.exe"
Image size: 73728
Image MD5: D57D1BE0129C1B45653B0FA920BC4B38
Start: 4
Type: 16
Error Control: 0
Service (registry key): LmHosts

Display name: TCP/IP NetBIOS Helper
Description: Enables support for NetBIOS over TCP/IP (NetBT) service and
NetBIOS name resolution.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Depends On services: NetBT,Afd
Service (registry key): Messenger

Display name: Messenger
Description: Transmits net send and Alerter service messages between clients
and servers. This service is not related to Windows Messenger. If this service is
stopped, Alerter messages will not be transmitted. If this service is disabled,
any services that explicitly depend on it will fail to start.
Image size: 14336
Start: 4
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,NetBIOS,PlugPlay,RpcSS
Service (registry key): mnmdd
Start: 1
Type: 1
Error Control: 0
Service (registry key): mnmsrvc

Display name: NetMeeting Remote Desktop Sharing
Description: Enables an authorized user to access this computer remotely by
using NetMeeting over a corporate intranet. If this service is stopped, remote
desktop sharing will be unavailable. If this service is disabled, any services
Image path: C:\WINDOWS\system32\mnmsrvc.exe
Image size: 32768
Image MD5: F6415361201915B9FE3896B0E4E724FF
Start: 3
Type: 272
Error Control: 1
Service (registry key): Modem

Start: 3
Type: 1
Error Control: 0
Service (registry key): motmodem

Display name: Motorola USB CDC ACM Driver
Image path: system32\DRIVERS\motmodem.sys
Image size: 23680
Image MD5: FE80C18BA448DDD76B7BEAD9EB203D37
Start: 3
Type: 1
Error Control: 0
Service (registry key): Mouclass

Display name: Mouse Class Driver
Image path: system32\DRIVERS\mouclass.sys
Image size: 23040
Image MD5: 34E1F0031153E491910E12551400192C
Start: 1
Type: 1
Error Control: 1
Service (registry key): MountMgr

Start: 0
Type: 1
Error Control: 1
Service (registry key): mraid35x

Start: 4
Type: 1
Error Control: 1
Service (registry key): MRxDAV

Display name: WebDav Client Redirector
Description: WebDav Client Redirector
Image path: system32\DRIVERS\mrxdav.sys
Image size: 179584
Image MD5: 29414447EB5BDE2F8397DC965DBB3156
Start: 3
Type: 2
Error Control: 1
Service (registry key): MRxSmb

Display name: MRXSMB
Description: MRXSMB
Image path: system32\DRIVERS\mrxsmb.sys
Image size: 453632
Image MD5: 6F2D483B97B395544E59749C47963C6A
Start: 1
Type: 2
Error Control: 1
Service (registry key): MSDTC

Display name: Distributed Transaction Coordinator
Description: Coordinates transactions that span multiple resource managers,
such as databases, message queues, and file systems. If this service is stopped,
these transactions will not occur. If this service is disabled, any services that
Image path: C:\WINDOWS\system32\msdtc.exe
Image size: 6144
Image MD5: C7C3D89EB0A6F3DBA622EA737FA335B1
Start: 3
Type: 16
Error Control: 1
Depends On services: RPCSS,SamSS
Service (registry key): MSDTC Bridge 3.0.0.0

Start: 0
Type: 0
Error Control: 0
Service (registry key): Msfs

Start: 1
Type: 2
Error Control: 1
Service (registry key): MSIServer

Display name: Windows Installer
Description: Adds, modifies, and removes applications provided as a Windows
Installer (*.msi) package. If this service is disabled, any services that
Image path: C:\WINDOWS\system32\msiexec.exe /V
Image size: 78848
Image MD5: F5F0146580E7023ADB963879840777F8
Start: 3
Type: 32
Error Control: 1
Service (registry key): MSKSSRV

Display name: Microsoft Streaming Service Proxy
Image path: system32\drivers\MSKSSRV.sys
Image size: 7552
Image MD5: AE431A8DD3C1D0D0610CDBAC16057AD0
Start: 3
Type: 1
Error Control: 1
Service (registry key): MSPCLOCK

Display name: Microsoft Streaming Clock Proxy
Image path: system32\drivers\MSPCLOCK.sys
Image size: 5376
Image MD5: 13E75FEF9DFEB08EEDED9D0246E1F448
Start: 3
Type: 1
Error Control: 1
Service (registry key): MSPQM

Display name: Microsoft Streaming Quality Manager Proxy
Image path: system32\drivers\MSPQM.sys
Image size: 4992
Image MD5: 1988A33FF19242576C3D0EF9CE785DA7
Start: 3
Type: 1
Error Control: 1
Service (registry key): mssmbios

Display name: Microsoft System Management BIOS Driver
Image path: system32\DRIVERS\mssmbios.sys
Image size: 15488
Image MD5: 469541F8BFD2B32659D5D463A6714BCE
Start: 3
Type: 1
Error Control: 1
Service (registry key): Mup

Display name: Mup
Start: 0
Type: 2
Error Control: 1
Service (registry key): NBService

Display name: NBService
Description: Nero BackItUp Service is responsible to control all jobs created
using Nero BackItUp. These jobs can create backups of selected
files/folders/partitions or complete hard disk to hard disk, network drive, disc
or FTP.
Image path: C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
Image size: 800040
Image MD5: 5E8EDD6A52E897C19EC6E149FE6C7A8E
Start: 3
Type: 16
Error Control: 1
Service (registry key): NDIS

Display name: NDIS System Driver
Start: 0
Type: 1
Error Control: 1
Service (registry key): Ndiskio

Display name: Ndiskio
Image path: \??\C:\Program Files\Norman\Nse\bin\NDISKIO.SYS
Image size: 24168
Image MD5: 0BC1739DC0553548B7920ACD8B61389D
Start: 2
Type: 1
Error Control: 1
Service (registry key): NdisTapi

Display name: Remote Access NDIS TAPI Driver
Description: Remote Access NDIS TAPI Driver
Image path: system32\DRIVERS\ndistapi.sys
Image size: 9600
Image MD5: 08D43BBDACDF23F34D79E44ED35C1B4C
Start: 3
Type: 1
Error Control: 1
Service (registry key): Ndisuio

Display name: NDIS Usermode I/O Protocol
Description: NDIS Usermode I/O Protocol
Image path: system32\DRIVERS\ndisuio.sys
Image size: 12928
Image MD5: 34D6CD56409DA9A7ED573E1C90A308BF
Start: 3
Type: 1
Error Control: 1
Service (registry key): NdisWan

Display name: Remote Access NDIS WAN Driver
Description: Remote Access NDIS WAN Driver
Image path: system32\DRIVERS\ndiswan.sys
Image size: 91776
Image MD5: 0B90E255A9490166AB368CD55A529893
Start: 3
Type: 1
Error Control: 1
Service (registry key): NDProxy

Start: 3
Type: 1
Error Control: 1
Service (registry key): Net Driver HPZ12

Image path: %SystemRoot%\System32\svchost.exe -k HPZ12
Image size: 14336
Start: 2
Type: 16
Error Control: 1
Service (registry key): NetBIOS

Display name: NetBIOS Interface
Description: NetBIOS Interface
Image path: system32\DRIVERS\netbios.sys
Image size: 34560
Image MD5: 3A2ACA8FC1D7786902CA434998D7CEB4
Start: 1
Type: 2
Error Control: 1
Service (registry key): NetBT

Display name: NetBios over Tcpip
Description: NetBios over Tcpip
Image path: system32\DRIVERS\netbt.sys
Image size: 162816
Image MD5: 0C80E410CD2F47134407EE7DD19CC86B
Start: 1
Type: 1
Error Control: 1
Service (registry key): NetDDE

Display name: Network DDE
Description: Provides network transport and security for Dynamic Data Exchange
(DDE) for programs running on the same computer or on different computers. If this
service is stopped, DDE transport and security will be unavailable. If this
Image path: %SystemRoot%\system32\netdde.exe
Image size: 111104
Image MD5: 05AFB5AD06462257BEA7495283C86D50
Start: 4
Type: 32
Error Control: 1
Depends On services: NetDDEDSDM
Service (registry key): NetDDEdsdm

Display name: Network DDE DSDM
Description: Manages Dynamic Data Exchange (DDE) network shares. If this
service is stopped, DDE network shares will be unavailable. If this service is
Image path: %SystemRoot%\system32\netdde.exe
Image size: 111104
Image MD5: 05AFB5AD06462257BEA7495283C86D50
Start: 4
Type: 32
Error Control: 1
Service (registry key): Netlogon

Display name: Net Logon
Description: Supports pass-through authentication of account logon events for
computers in a domain.
Image path: %SystemRoot%\system32\lsass.exe
Image size: 13312
Image MD5: 84885F9B82F4D55C6146EBF6065D75D2
Start: 3
Type: 32
Error Control: 1
Service (registry key): Netman

Display name: Network Connections
Description: Manages objects in the Network and Dial-Up Connections folder, in
which you can view both local area network and remote connections.
Image size: 14336
Start: 3
Type: 288
Error Control: 1
Service (registry key): NetTcpPortSharing

Display name: Net.Tcp Port Sharing Service
Description: Provides ability to share TCP ports over the net.tcp protocol.
Image path: "C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication
Foundation\SMSvcHost.exe"
Image size: 132096
Image MD5: D34612C5D02D026535B3095D620626AE
Start: 4
Type: 32
Error Control: 1
Service (registry key): NGS

Display name: Norman General Security Driver
Image path: \??\c:\program files\norman\ngs\bin\ngs.sys
Image size: 25032
Image MD5: 72798CD0F757E80D791B7E087D9BE3F6
Start: 1
Type: 1
Error Control: 1
Service (registry key): Nla

Display name: Network Location Awareness (NLA)
Description: Collects and stores network configuration and location
information, and notifies applications when this information changes.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: Tcpip,Afd
Service (registry key): NMIndexingService
Display name: NMIndexingService
Image path: "C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"
Image size: 279848
Image MD5: A328A46D87BB92CE4D8A4528E9D84787
Start: 3
Type: 16
Error Control: 1
Service (registry key): Norman NJeeves

Display name: Norman NJeeves
Image path: "C:\Program Files\Norman\Npm\Bin\Njeeves.exe"
Image size: 276712
Image MD5: 80048714EFA7A8981F52C175751BB02E
Start: 3
Type: 272
Error Control: 1
Service (registry key): Norman ZANDA

Display name: Norman ZANDA
Image path: "C:\Program Files\Norman\Npm\Bin\Zanda.exe"
Image size: 411016
Image MD5: FA3C7625D21F7262FA5F1F80AB474095
Start: 2
Type: 272
Error Control: 1
Service (registry key): Npfs

Start: 1
Type: 2
Error Control: 1
Service (registry key): NPROSEC

Display name: Norman Security driver
Image path: \??\C:\Program Files\Norman\Ngs\Bin\nprosec.sys
Image size: 56136
Image MD5: 9F97D7CEDBE26AA9C31A268636EE2D62
Start: 1
Type: 1
Error Control: 1
Service (registry key): NPROSECSVC

Display name: Norman Security service
Image path: "C:\Program Files\Norman\Ngs\Bin\Nprosec.exe"
Image size: 124232
Image MD5: 3E8798343F4706D88D232182BDAB439B
Start: 2
Type: 16
Error Control: 1
Service (registry key): nsesvc

Display name: Norman Scanner Engine Service
Image path: "C:\Program Files\Norman\nse\bin\NSESVC.EXE" -daemon
Image size: 283976
Image MD5: 81308089E8E084F2A6B34003119CAFB5
Start: 3
Type: 16
Error Control: 1
Service (registry key): Ntfs

Start: 4
Type: 2
Error Control: 1
Service (registry key): NtLmSsp

Display name: NT LM Security Support Provider
Description: Provides security to remote procedure call (RPC) programs that use
transports other than named pipes.
Image size: 13312
Start: 3
Type: 32
Error Control: 1
Service (registry key): NtmsSvc

Display name: Removable Storage
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Service (registry key): Null

Start: 1
Type: 1
Error Control: 1
Service (registry key): nv

Image path: system32\DRIVERS\nv4_mini.sys
Image size: 3964256
Image MD5: EB2858F920B8135B807B5CCAA3ED73DC
Start: 3
Type: 1
Error Control: 0
Service (registry key): nvata

Image path: system32\DRIVERS\nvata.sys
Image size: 105088
Image MD5: 9ECCD189A9554C30A0D18A429778C7BA
Start: 0
Type: 1
Error Control: 3
Service (registry key): NvcMFlt

Display name: NvcMFlt
Description: NvcMFlt mini-filter driver
Image path: system32\DRIVERS\nvcw32mf.sys
Image size: 21832
Image MD5: D3A31D2CE97137394CD624C5ABC98A37
Start: 3
Type: 2
Error Control: 1
Depends On services: FltMgr
Service (registry key): nvcoas

Display name: Norman Virus Control on-access component
Image path: "C:\Program Files\Norman\Nvc\bin\nvcoas.exe"
Image size: 197960
Image MD5: A32EDB46EF073EA3E3E428B1DE768AB5
Start: 3
Type: 16
Error Control: 1
Service (registry key): NVCScheduler

Display name: Norman Virus Control Scheduler
Image path: C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE
Image size: 0
Start: 3
Type: 272
Error Control: 1
Service (registry key): NVENETFD

Display name: NVIDIA nForce 10/100 Mbps Ethernet
Image path: system32\DRIVERS\NVENETFD.sys
Image size: 54784
Image MD5: 7D275ECDA4628318912F6C945D5CF963
Start: 3
Type: 1
Error Control: 1
Service (registry key): nvnetbus

Display name: NVIDIA Network Bus Enumerator
Image path: system32\DRIVERS\nvnetbus.sys
Image size: 22016
Image MD5: B64AACEFAD2BE5BFF5353FE681253C67
Start: 3
Type: 1
Error Control: 1
Service (registry key): NVOY

Display name: Norman Resource Provider
Image path: "C:\Program Files\Norman\npm\bin\nvoy.exe"
Image size: 128328
Image MD5: 02A1C86708BDF55D02F4C08C9816F0C4
Start: 2
Type: 272
Error Control: 1
Service (registry key): NVSvc

Display name: NVIDIA Display Driver Service
Description: Provides system and desktop level support to the NVIDIA display
driver
Image path: %SystemRoot%\system32\nvsvc32.exe
Image size: 155715
Image MD5: 36032035FA55F030D55237D5C639A81D
Start: 2
Type: 16
Error Control: 1
Service (registry key): NwlnkFlt

Display name: IPX Traffic Filter Driver
Description: IPX Traffic Filter Driver
Image path: system32\DRIVERS\nwlnkflt.sys
Image size: 12416
Image MD5: B305F3FAD35083837EF46A0BBCE2FC57
Start: 3
Type: 1
Error Control: 1
Depends On services: NwlnkFwd
Service (registry key): NwlnkFwd

Display name: IPX Traffic Forwarder Driver
Description: IPX Traffic Forwarder Driver
Image path: system32\DRIVERS\nwlnkfwd.sys
Image size: 32512
Image MD5: C99B3415198D1AAB7227F2C88FD664B9
Start: 3
Type: 1
Error Control: 1
Service (registry key): ossrv

Display name: Creative OS Services Driver
Image path: system32\DRIVERS\ctoss2k.sys
Image size: 178672
Image MD5: C720C25B2D0C93DC425155F5B6A707F3
Start: 3
Type: 1
Error Control: 1
Service (registry key): P17

Display name: Sound Blaster Live! 24-bit
Image path: system32\drivers\P17.sys
Image size: 840960
Image MD5: ABFB35446F754702F7EDBA131A2B43FE
Start: 3
Type: 1
Error Control: 1
Service (registry key): Parport

Display name: Parallel port driver
Image path: system32\DRIVERS\parport.sys
Image size: 80128
Image MD5: 29744EB4CE659DFE3B4122DEB45BC478
Start: 3
Type: 1
Error Control: 1
Service (registry key): PartMgr

Start: 0
Type: 1
Error Control: 1
Service (registry key): ParVdm

Start: 2
Type: 1
Error Control: 0
Depends On services: Parport
Depends On group: "Parallel arbitrator"
Service (registry key): PCI

Display name: PCI Bus Driver
Image path: system32\DRIVERS\pci.sys
Image size: 68224
Image MD5: 8086D9979234B603AD5BC2F5D890B234
Start: 0
Type: 1
Error Control: 3
Service (registry key): PCIDump

Start: 1
Type: 1
Error Control: 0
Service (registry key): PCIIde

Image path: system32\DRIVERS\pciide.sys
Image size: 3328
Image MD5: CCF5F451BB1A5A2A522A76E670000FF0
Start: 0
Type: 1
Error Control: 1
Service (registry key): Pcmcia

Start: 4
Type: 1
Error Control: 1
Service (registry key): PDCOMP

Start: 3
Type: 1
Error Control: 0
Service (registry key): PDFRAME

Start: 3
Type: 1
Error Control: 0
Service (registry key): PDRELI

Start: 3
Type: 1
Error Control: 0
Service (registry key): PDRFRAME

Start: 3
Type: 1
Error Control: 0
Service (registry key): perc2

Start: 4
Type: 1
Error Control: 1
Service (registry key): perc2hib

Start: 4
Type: 1
Error Control: 1
Service (registry key): PerfDisk

Start: 0
Type: 0
Error Control: 0
Service (registry key): PerfNet

Start: 0
Type: 0
Error Control: 0
Service (registry key): PerfOS

Start: 0
Type: 0
Error Control: 0
Service (registry key): PerfProc

Start: 0
Type: 0
Error Control: 0
Service (registry key): pfc
Display name: Padus ASPI Shell
Image path: system32\drivers\pfc.sys
Image size: 14604
Image MD5: F2B3785D7282BAC66D4B644FC88749F0
Start: 3
Type: 1
Error Control: 1
Service (registry key): PfModNT

Image path: \??\C:\WINDOWS\system32\drivers\PfModNT.sys
Image size: 15840
Image MD5: C8A2D6FF660AC601B7BB9A9B16A5C25E
Start: 2
Type: 1
Error Control: 1
Service (registry key): PlugPlay

Display name: Plug and Play
Description: Enables a computer to recognize and adapt to hardware changes with
little or no user input. Stopping or disabling this service will result in system
instability.
Image path: %SystemRoot%\system32\services.exe
Image size: 110592
Image MD5: 37561F8D4160D62DA86D24AE41FAE8DE
Start: 2
Type: 32
Error Control: 1
Service (registry key): Pml Driver HPZ12

Image path: %SystemRoot%\System32\svchost.exe -k HPZ12
Image size: 14336
Start: 2
Type: 16
Error Control: 1
Service (registry key): PolicyAgent

Display name: IPSEC Services
Description: Manages IP security policy and starts the ISAKMP/Oakley (IKE) and
the IP security driver.
Image size: 13312
Start: 2
Type: 32
Error Control: 1
Depends On services: RPCSS,Tcpip,IPSec
Service (registry key): PortProxy

Start: 0
Type: 0
Error Control: 0
Service (registry key): PptpMiniport

Display name: WAN Miniport (PPTP)
Description: WAN Miniport (PPTP)
Image path: system32\DRIVERS\raspptp.sys
Image size: 48384
Image MD5: 1C5CC65AAC0783C344F16353E60B72AC
Start: 3
Type: 1
Error Control: 1
Service (registry key): Processor

Display name: Processor Driver
Image path: system32\DRIVERS\processr.sys
Image size: 35328
Image MD5: 0D97D88720A4087EC93AF7DBB303B30A
Start: 1
Type: 1
Error Control: 1
Service (registry key): ProtectedStorage

Display name: Protected Storage
Description: Provides protected storage for sensitive data, such as private
keys, to prevent access by unauthorized services, processes, or users.
Image size: 13312
Start: 2
Type: 288
Error Control: 1
Service (registry key): PSched

Display name: QoS Packet Scheduler
Description: QoS Packet Scheduler
Image path: system32\DRIVERS\psched.sys
Image size: 69120
Image MD5: 48671F327553DCF1D27F6197F622A668
Start: 3
Type: 1
Error Control: 1
Depends On services: Gpc
Service (registry key): Ptilink

Display name: Direct Parallel Link Driver
Description: Direct Parallel Link Driver
Image path: system32\DRIVERS\ptilink.sys
Image size: 17792
Image MD5: 80D317BD1C3DBC5D4FE7B1678C60CADD
Start: 3
Type: 1
Error Control: 1
Service (registry key): ql1080

Start: 4
Type: 1
Error Control: 1
Service (registry key): Ql10wnt

Start: 4
Type: 1
Error Control: 1

Start: 4
Type: 1
Error Control: 1

Start: 4
Type: 1
Error Control: 1

Start: 4
Type: 1
Error Control: 1
Service (registry key): RasAcd

Display name: Remote Access Auto Connection Driver
Description: Remote Access Auto Connection Driver
Image path: system32\DRIVERS\rasacd.sys
Image size: 8832
Image MD5: FE0D99D6F31E4FAD8159F690D68DED9C
Start: 1
Type: 1
Error Control: 1
Service (registry key): RasAuto

Display name: Remote Access Auto Connection Manager
Description: Creates a connection to a remote network whenever a program
references a remote DNS or NetBIOS name or address.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: RasMan,Tapisrv
Service (registry key): Rasl2tp

Display name: WAN Miniport (L2TP)
Description: WAN Miniport (L2TP)
Image path: system32\DRIVERS\rasl2tp.sys
Image size: 51328
Image MD5: 98FAEB4A4DCF812BA1C6FCA4AA3E115C
Start: 3
Type: 1
Error Control: 1
Service (registry key): RasMan

Display name: Remote Access Connection Manager
Description: Creates a network connection.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: Tapisrv
Service (registry key): RasPppoe

Display name: Remote Access PPPOE Driver
Description: Remote Access PPPOE Driver
Image path: system32\DRIVERS\raspppoe.sys
Image size: 41472
Image MD5: 7306EEED8895454CBED4669BE9F79FAA
Start: 3
Type: 1
Error Control: 1
Service (registry key): Raspti
Display name: Direct Parallel
Description: Direct Parallel
Image path: system32\DRIVERS\raspti.sys
Image size: 16512
Image MD5: FDBB1D60066FCFBB7452FD8F9829B242
Start: 3
Type: 1
Error Control: 1
Service (registry key): Rdbss

Display name: Rdbss
Description: Rdbss
Image path: system32\DRIVERS\rdbss.sys
Image size: 174592
Image MD5: 03B965B1CA47F6EF60EB5E51CB50E0AF
Start: 1
Type: 2
Error Control: 1
Service (registry key): RDPCDD

Image path: System32\DRIVERS\RDPCDD.sys
Image size: 4224
Image MD5: 4912D5B403614CE99C28420F75353332
Start: 1
Type: 1
Error Control: 0
Service (registry key): RDPDD

Start: 0
Type: 0
Error Control: 0
Service (registry key): rdpdr

Display name: Terminal Server Device Redirector Driver
Image path: system32\DRIVERS\rdpdr.sys
Image size: 196864
Image MD5: A2CAE2C60BC37E0751EF9DDA7CEAF4AD
Start: 3
Type: 1
Error Control: 1
Service (registry key): RDPNP

Start: 0
Type: 0
Error Control: 0
Service (registry key): RDPWD
Start: 3
Type: 1
Error Control: 0
Service (registry key): RDSessMgr

Display name: Remote Desktop Help Session Manager
Description: Manages and controls Remote Assistance. If this service is
stopped, Remote Assistance will be unavailable. Before stopping this service, see
the Dependencies tab of the Properties dialog box.
Image path: C:\WINDOWS\system32\sessmgr.exe
Image size: 140800
Image MD5: 729798E0933076B8FCFCD9934698F164
Start: 3
Type: 16
Error Control: 1
Service (registry key): redbook

Display name: Digital CD Audio Playback Filter Driver
Image path: system32\DRIVERS\redbook.sys
Image size: 57472
Image MD5: B31B4588E4086D8D84ADBF9845C2402B
Start: 1
Type: 1
Error Control: 1
Service (registry key): RemoteAccess

Display name: Routing and Remote Access
Description: Offers routing services to businesses in local area and wide area
network environments.
Image size: 14336
Start: 4
Type: 32
Error Control: 1
Depends On services: RpcSS
Depends On group: NetBIOSGroup
Service (registry key): RemoteRegistry

Display name: Remote Registry
Description: Enables remote users to modify registry settings on this computer.
If this service is stopped, the registry can be modified only by users on this
computer. If this service is disabled, any services that explicitly depend on it
will fail to start.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): RpcLocator

Display name: Remote Procedure Call (RPC) Locator
Description: Manages the RPC name service database.
Image path: %SystemRoot%\system32\locator.exe
Image size: 75264
Image MD5: 793F04A09B15E7C6C11DBDFFAF06C0AB
Start: 3
Type: 16
Error Control: 1
Service (registry key): RpcSs

Display name: Remote Procedure Call (RPC)
Description: Provides the endpoint mapper and other miscellaneous RPC services.
Image path: %SystemRoot%\system32\svchost -k rpcss
Image size: 0
Start: 2
Type: 16
Error Control: 1
Service (registry key): RSVP

Display name: QoS RSVP
Description: Provides network signaling and local traffic control setup
functionality for QoS-aware programs and control applets.
Image path: %SystemRoot%\system32\rsvp.exe
Image size: 132608
Image MD5: 471B3F9741D762ABE75E9DEEA4787E47
Start: 3
Type: 16
Error Control: 1
Depends On services: TcpIp,Afd,RpcSs
Service (registry key): RT61

Display name: Gigabyte RT61 Wireless Driver
Image path: system32\DRIVERS\RT61.sys
Image size: 495104
Image MD5: B1A055F3B4CF2A60ADA63009F157126C
Start: 3
Type: 1
Error Control: 1
Service (registry key): SamSs

Display name: Security Accounts Manager
Description: Stores security information for local user accounts.
Image size: 13312
Start: 2
Type: 32
Error Control: 1
Service (registry key): SCardSvr

Display name: Smart Card
Description: Manages access to smart cards read by this computer. If this
service is stopped, this computer will be unable to read smart cards. If this
Image path: %SystemRoot%\System32\SCardSvr.exe
Image size: 95744
Image MD5: 25D8DE134DF108E3DBC8D7D23B1AA58E
Start: 3
Type: 32
Error Control: 0
Depends On services: PlugPlay
Service (registry key): Schedule

Display name: Task Scheduler
Description: Enables a user to configure and schedule automated tasks on this
computer. If this service is stopped, these tasks will not be run at their
scheduled times. If this service is disabled, any services that explicitly depend
on it will fail to start.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): Scheduler

Display name: Norman Scheduler Service
Image path: "C:\Program Files\Norman\Npm\Bin\scheduler.exe"
Image size: 132424
Image MD5: 745D245352AF6FC82A7F33C004B4A8FC
Start: 3
Type: 272
Error Control: 1
Service (registry key): SeaPort

Display name: SeaPort
Description: Enables the detection, download and installation of up-to-date
configuration files for Microsoft Search Enhancement applications. Also provides
server communication for the customer experience improvement program. If this
service is disabled, search enhancement features such as search history may not
work correctly.
Image path: "C:\Program Files\Microsoft\Search Enhancement
Pack\SeaPort\SeaPort.exe"
Image size: 240512
Image MD5: 271077B91D7AD1B616F8AFDFE8E3F981
Start: 2
Type: 16
Error Control: 1
Service (registry key): Secdrv

Display name: Secdrv
Description: SafeDisc driver
Image path: system32\DRIVERS\secdrv.sys
Image size: 20480
Image MD5: 90A3935D05B494A5A39D37E71F09A677
Start: 3
Type: 1
Error Control: 1
Service (registry key): seclogon

Display name: Secondary Logon
Description: Enables starting processes under alternate credentials. If this
service is stopped, this type of logon access will be unavailable. If this service
Image size: 14336
Start: 2
Type: 288
Error Control: 0
Service (registry key): SENS

Display name: System Event Notification
Description: Tracks system events such as Windows logon, network, and power
events. Notifies COM+ Event System subscribers of these events.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Depends On services: EventSystem
Service (registry key): serenum

Display name: Serenum Filter Driver
Image path: system32\DRIVERS\serenum.sys
Image size: 15488
Image MD5: A2D868AEEFF612E70E213C451A70CAFB
Start: 3
Type: 1
Error Control: 1
Service (registry key): Serial

Display name: Serial port driver
Image path: system32\DRIVERS\serial.sys
Image size: 64896
Image MD5: CD9404D115A00D249F70A371B46D5A26
Start: 1
Type: 1
Error Control: 0
Service (registry key): ServiceModelEndpoint 3.0.0.0

Start: 0
Type: 0
Error Control: 0
Service (registry key): ServiceModelOperation 3.0.0.0

Start: 0
Type: 0
Error Control: 0
Service (registry key): ServiceModelService 3.0.0.0

Start: 0
Type: 0
Error Control: 0
Service (registry key): Sfloppy

Start: 1
Type: 1
Error Control: 0
Service (registry key): SharedAccess
Display name: Windows Firewall/Internet Connection Sharing (ICS)
Description: Provides network address translation, addressing, name resolution
and/or intrusion prevention services for a home or small office network.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Depends On services: Netman,WinMgmt
Service (registry key): ShellHWDetection

Display name: Shell Hardware Detection
Description: Provides notifications for AutoPlay hardware events.
Image size: 14336
Start: 2
Type: 32
Error Control: 0
Service (registry key): Simbad

Start: 4
Type: 1
Error Control: 1
Service (registry key): SMSvcHost 3.0.0.0

Start: 0
Type: 0
Error Control: 0
Service (registry key): Sparrow

Start: 4
Type: 1
Error Control: 1
Service (registry key): splitter

Display name: Microsoft Kernel Audio Splitter
Image path: system32\drivers\splitter.sys
Image size: 6400
Image MD5: 0CE218578FFF5F4F7E4201539C45C78F
Start: 3
Type: 1
Error Control: 1
Service (registry key): Spooler

Display name: Print Spooler
Description: Loads files to memory for later printing.
Image path: %SystemRoot%\system32\spoolsv.exe
Image size: 57856
Image MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
Start: 2
Type: 272
Error Control: 1
Service (registry key): sprtlisten

Display name: SupportSoft Listener Service
Image path: C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe
/identity QUICKASSIST
Image size: 1213728
Image MD5: 6BD79C3EF6B8AC9BB0B83E0F15478572
Start: 2
Type: 272
Error Control: 1
Service (registry key): sr

Display name: System Restore Filter Driver
Image path: system32\DRIVERS\sr.sys
Image size: 73472
Image MD5: E41B6D037D6CD08461470AF04500DC24
Start: 0
Type: 2
Error Control: 1
Service (registry key): srservice

Display name: System Restore Service
Description: Performs system restore functions. To stop service, turn off
System Restore from the System Restore tab in My Computer->Properties
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): Srv
Display name: Srv
Description: Srv
Image path: system32\DRIVERS\srv.sys
Image size: 333184
Image MD5: AB9C79ED12D65E800AAAD3D72A04792F
Start: 3
Type: 2
Error Control: 1
Service (registry key): SSDPSRV

Display name: SSDP Discovery Service
Description: Enables discovery of UPnP devices on your home network.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: HTTP
Service (registry key): stisvc

Display name: Windows Image Acquisition (WIA)
Description: Provides image acquisition services for scanners and cameras.
Image path: %SystemRoot%\system32\svchost.exe -k imgsvc
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): SupportSoft RemoteAssist

Display name: SupportSoft RemoteAssist
Image path: C:\Program Files\Common Files\supportsoft\bin\ssrc.exe
Image size: 382320
Image MD5: 9A97B7024E2CA4D42046BF272997E14C
Start: 3
Type: 272
Error Control: 1
Service (registry key): swenum

Display name: Software Bus Driver
Image path: system32\DRIVERS\swenum.sys
Image size: 4352
Image MD5: 03C1BAE4766E2450219D20B993D6E046
Start: 3
Type: 1
Error Control: 1
Service (registry key): swmidi

Display name: Microsoft Kernel GS Wavetable Synthesizer
Image path: system32\drivers\swmidi.sys
Image size: 54272
Image MD5: 94ABC808FC4B6D7D2BBF42B85E25BB4D
Start: 3
Type: 1
Error Control: 1
Service (registry key): SwPrv

Display name: MS Software Shadow Copy Provider
Description: Manages software-based volume shadow copies taken by the Volume
Shadow Copy service. If this service is stopped, software-based volume shadow
copies cannot be managed. If this service is disabled, any services that
Image path: C:\WINDOWS\system32\dllhost.exe /Processid:{51C6E774-61D2-403D-
A18D-021BA1DB8156}
Image size: 5120
Image MD5: DD87DB7387B9EB441C5674888A0D840C
Start: 3
Type: 16
Error Control: 0
Depends On services: rpcss
Service (registry key): symc810

Start: 4
Type: 1
Error Control: 1
Service (registry key): symc8xx

Start: 4
Type: 1
Error Control: 1
Service (registry key): sym_hi

Start: 4
Type: 1
Error Control: 1
Service (registry key): sym_u3

Start: 4
Type: 1
Error Control: 1
Service (registry key): sysaudio

Display name: Microsoft Kernel System Audio Device
Image path: system32\drivers\sysaudio.sys
Image size: 60800
Image MD5: 650AD082D46BAC0E64C9C0E0928492FD
Start: 3
Type: 1
Error Control: 1
Service (registry key): SysmonLog

Display name: Performance Logs and Alerts
Description: Collects performance data from local or remote computers based on
preconfigured schedule parameters, then writes the data to a log or triggers an
alert. If this service is stopped, performance information will not be collected.
If this service is disabled, any services that explicitly depend on it will fail
to start.
Object name: NT Authority\NetworkService
Image path: %SystemRoot%\system32\smlogsvc.exe
Image size: 89600
Image MD5: 8B54AA346D1B1B113FFAA75501B8B1B2
Start: 3
Type: 16
Error Control: 1
Service (registry key): TapiSrv

Display name: Telephony
Description: Provides Telephony API (TAPI) support for programs that control
telephony devices and IP based voice connections on the local computer and,
through the LAN, on servers that are also running the service.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: PlugPlay,RpcSs
Service (registry key): Tcpip

Display name: TCP/IP Protocol Driver
Description: TCP/IP Protocol Driver
Image path: system32\DRIVERS\tcpip.sys
Image size: 360320
Image MD5: 2A5554FC5B1E04E131230E3CE035C3F9
Start: 1
Type: 1
Error Control: 1
Depends On services: IPSec
Service (registry key): Tcpip6

Display name: Microsoft IPv6 Protocol Driver
Description: Microsoft IPv6 Protocol Driver
Image path: system32\DRIVERS\tcpip6.sys
Image size: 225920
Image MD5: 00586ED87AB564B03870A2A3DCC84B55
Start: 1
Type: 1
Error Control: 1
Service (registry key): TDPIPE

Start: 3
Type: 1
Error Control: 0
Service (registry key): TDTCP

Start: 3
Type: 1
Error Control: 0
Service (registry key): TermDD

Display name: Terminal Device Driver
Image path: system32\DRIVERS\termdd.sys
Image size: 40840
Image MD5: A540A99C281D933F3D69D55E48727F47
Start: 1
Type: 1
Error Control: 1
Service (registry key): TermService

Display name: Terminal Services
Description: Allows multiple users to be connected interactively to a machine
as well as the display of desktops and applications to remote computers. The
underpinning of Remote Desktop (including RD for Administrators), Fast User
Switching, Remote Assistance, and Terminal Server.
Image path: %SystemRoot%\System32\svchost -k DComLaunch
Image size: 0
Start: 3
Type: 32
Error Control: 1
Service (registry key): Themes
Display name: Themes
Description: Provides user experience theme management.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): TlntSvr

Display name: Telnet
Description: Enables a remote user to log on to this computer and run programs,
and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based
computers. If this service is stopped, remote user access to programs might be
unavailable. If this service is disabled, any services that explicitly depend on
it will fail to start.
Image path: C:\WINDOWS\system32\tlntsvr.exe
Image size: 73216
Image MD5: 37DB0A7D097310E8B4DE803FC3119C78
Start: 4
Type: 16
Error Control: 1
Depends On services: RPCSS,TCPIP,NTLMSSP
Service (registry key): TosIde

Start: 4
Type: 1
Error Control: 1
Service (registry key): TrkWks

Display name: Distributed Link Tracking Client
Description: Maintains links between NTFS files within a computer or across
computers in a network domain.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): TSDDD

Start: 0
Type: 0
Error Control: 0
Service (registry key): tunmp

Display name: Microsoft Tun Miniport Adapter Driver
Image path: system32\DRIVERS\tunmp.sys
Image size: 12416
Image MD5: 87A0E9E18C10A9E454238E3330E2A26D
Start: 3
Type: 1
Error Control: 1
Service (registry key): Udfs

Start: 4
Type: 2
Error Control: 1
Service (registry key): ultra

Start: 4
Type: 1
Error Control: 1
Service (registry key): Update

Display name: Microcode Update Driver
Image path: system32\DRIVERS\update.sys
Image size: 209408
Image MD5: AFF2E5045961BBC0A602BB6F95EB1345
Start: 3
Type: 1
Error Control: 1
Service (registry key): upnphost

Display name: Universal Plug and Play Device Host
Description: Provides support to host Universal Plug and Play devices.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: SSDPSRV,HTTP
Service (registry key): UPS

Display name: Uninterruptible Power Supply
Description: Manages an uninterruptible power supply (UPS) connected to the
computer.
Image path: %SystemRoot%\System32\ups.exe
Image size: 18432
Image MD5: 3F5DF65B0758675F95A2D43918A740A3
Start: 3
Type: 16
Error Control: 1
Service (registry key): usbccgp

Display name: Microsoft USB Generic Parent Driver
Image path: system32\DRIVERS\usbccgp.sys
Image size: 31616
Image MD5: BFFD9F120CC63BCBAA3D840F3EEF9F79
Start: 3
Type: 1
Error Control: 1
Service (registry key): usbehci

Display name: Microsoft USB 2.0 Enhanced Host Controller Miniport Driver
Image path: system32\DRIVERS\usbehci.sys
Image size: 26624
Image MD5: 15E993BA2F6946B2BFBBFCD30398621E
Start: 3
Type: 1
Error Control: 1
Service (registry key): usbhub

Display name: USB2 Enabled Hub
Image path: system32\DRIVERS\usbhub.sys
Image size: 57600
Image MD5: C72F40947F92CEA56A8FB532EDF025F1
Start: 3
Type: 1
Error Control: 1
Service (registry key): usbohci

Display name: Microsoft USB Open Host Controller Miniport Driver
Image path: system32\DRIVERS\usbohci.sys
Image size: 17024
Image MD5: BDFE799A8531BAD8A5A985821FE78760
Start: 3
Type: 1
Error Control: 1
Service (registry key): usbprint

Display name: Microsoft USB PRINTER Class
Image path: system32\DRIVERS\usbprint.sys
Image size: 25856
Image MD5: A42369B7CD8886CD7C70F33DA6FCBCF5
Start: 3
Type: 1
Error Control: 1
Service (registry key): usbscan

Display name: USB Scanner Driver
Image path: system32\DRIVERS\usbscan.sys
Image size: 15104
Image MD5: A6BC71402F4F7DD5B77FD7F4A8DDBA85
Start: 3
Type: 1
Error Control: 1
Service (registry key): USBSTOR

Display name: USB Mass Storage Driver
Image path: system32\DRIVERS\USBSTOR.SYS
Image size: 26496
Image MD5: 6CD7B22193718F1D17A47A1CD6D37E75
Start: 3
Type: 1
Error Control: 1
Service (registry key): VgaSave

Image path: \SystemRoot\System32\drivers\vga.sys
Image size: 0
Start: 1
Type: 1
Error Control: 0
Service (registry key): ViaIde

Start: 4
Type: 1
Error Control: 1
Service (registry key): VolSnap

Start: 0
Type: 1
Error Control: 1
Service (registry key): VSS

Display name: Volume Shadow Copy
Description: Manages and implements Volume Shadow Copies used for backup and
other purposes. If this service is stopped, shadow copies will be unavailable for
backup and the backup may fail. If this service is disabled, any services that
Image path: %SystemRoot%\System32\vssvc.exe
Image size: 289792
Image MD5: 3EE00364AE0FD8D604F46CBAF512838A
Start: 3
Type: 16
Error Control: 1
Service (registry key): W32Time

Display name: Windows Time
Description: Maintains date and time synchronization on all clients and servers
in the network. If this service is stopped, date and time synchronization will be
unavailable. If this service is disabled, any services that explicitly depend on
it will fail to start.

Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): W3SVC

Start: 0
Type: 0
Error Control: 0
Service (registry key): Wanarp

Display name: Remote Access IP ARP Driver
Description: Remote Access IP ARP Driver
Image path: system32\DRIVERS\wanarp.sys
Image size: 34560
Image MD5: 984EF0B9788ABF89974CFED4BFBAACBC
Start: 3
Type: 1
Error Control: 1
Service (registry key): Wdf01000

Display name: Wdf01000
Image path: system32\DRIVERS\Wdf01000.sys
Image size: 492000
Image MD5: FD47474BD21794508AF449D9D91AF6E6
Start: 3
Type: 1
Error Control: 1
Service (registry key): WDICA
Start: 3
Type: 1
Error Control: 0
Service (registry key): wdmaud

Display name: Microsoft WINMM WDM Audio Compatibility Driver
Image path: system32\drivers\wdmaud.sys
Image size: 82944
Image MD5: EFD235CA22B57C81118C1AEB4798F1C1
Start: 3
Type: 1
Error Control: 1
Service (registry key): WebClient

Display name: WebClient
Description: Enables Windows-based programs to create, access, and modify
Internet-based files. If this service is stopped, these functions will not be
available. If this service is disabled, any services that explicitly depend on it
will fail to start.
Image size: 14336
Start: 2
Type: 16
Error Control: 1
Depends On services: MRxDAV
Service (registry key): Windows Workflow Foundation 3.0.0.0

Start: 0
Type: 0
Error Control: 0
Service (registry key): winmgmt

Display name: Windows Management Instrumentation
Description: Provides a common interface and object model to access management
information about operating system, devices, applications and services. If this
service is stopped, most Windows-based software will not function properly. If
start.
Image path: %systemroot%\system32\svchost.exe -k netsvcs
Image size: 14336
Start: 2
Type: 32
Error Control: 0
Service (registry key): Winsock

Start: 3
Type: 4
Error Control: 1
Service (registry key): WinSock2

Start: 0
Type: 0
Error Control: 0
Service (registry key): WinTrust

Start: 0
Type: 0
Error Control: 0
Service (registry key): WMDM PMSP Service

Display name: WMDM PMSP Service
Image path: C:\WINDOWS\system32\MsPMSPSv.exe
Image size: 53520
Image MD5: 581176F60885AEF8F78C6E38DCC3CDF9
Start: 2
Type: 16
Error Control: 1
Service (registry key): WmdmPmSN

Display name: Portable Media Serial Number Service
Description: Retrieves the serial number of any portable media player connected
to this computer. If this service is stopped, protected content might not be down
loaded to the device.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Service (registry key): Wmi

Display name: Windows Management Instrumentation Driver Extensions
Description: Provides systems management information to and from drivers.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Service (registry key): WmiApRpl

Start: 0
Type: 0
Error Control: 0
Service (registry key): WmiApSrv

Display name: WMI Performance Adapter
Description: Provides performance library information from WMI HiPerf
providers.
Image path: C:\WINDOWS\system32\wbem\wmiapsrv.exe
Image size: 126464
Image MD5: BA8CECC3E813E1F7C441B20393D4F86C
Start: 3
Type: 16
Error Control: 1
Service (registry key): WMPNetworkSvc

Display name: Windows Media Player Network Sharing Service
Description: Shares Windows Media Player libraries to other networked players
and media devices using Universal Plug and Play
Image path: "C:\Program Files\Windows Media Player\WMPNetwk.exe"
Image size: 913408
Image MD5: F74E3D9A7FA9556C3BBB14D4E5E63D3B
Start: 3
Type: 16
Error Control: 1
Depends On services: upnphost,http,HTTPFilter
Service (registry key): WS2IFSL

Start: 1
Type: 0
Error Control: 0
Service (registry key): wscsvc

Display name: Security Center
Description: Monitors system security settings and configurations.
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs,winmgmt
Service (registry key): wuauserv

Display name: Automatic Updates
Description: Enables the download and installation of Windows updates. If this
service is disabled, this computer will not be able to use the Automatic Updates
feature or the Windows Update Web site.
Image path: %systemroot%\system32\svchost.exe -k netsvcs
Image size: 14336
Start: 2
Type: 32
Error Control: 1
Service (registry key): WudfPf

Display name: Windows Driver Foundation - User-mode Driver Framework Platform
Driver
Description: Provide communciation services for UMDF components.
Image path: system32\DRIVERS\WudfPf.sys
Image size: 77568
Image MD5: F15FEAFFFBB3644CCC80C5DA584E6311
Start: 3
Type: 1
Error Control: 1
Service (registry key): WudfRd

Display name: Windows Driver Foundation - User-mode Driver Framework Reflector
Description: Reflect device requests to user-mode driver drivers
Image path: system32\DRIVERS\wudfrd.sys
Image size: 82944
Image MD5: 28B524262BCE6DE1F7EF9F510BA3985B
Start: 3
Type: 1
Error Control: 1
Service (registry key): WudfSvc

Display name: Windows Driver Foundation - User-mode Driver Framework
Description: Manages user-mode driver host processes
Image path: %SystemRoot%\system32\svchost.exe -k WudfServiceGroup
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: PlugPlay
Service (registry key): WZCSVC
Display name: Wireless Zero Configuration
Description: Provides automatic configuration for the 802.11 adapters
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs,Ndisuio
Service (registry key): xmlprov

Display name: Network Provisioning Service
Description: Manages XML configuration files on a domain basis for automatic
network provisioning.
Image size: 14336
Start: 3
Type: 32
Error Control: 1
Service (registry key): {443EF79A-9CAB-4355-BC56-C3DE3F442165}

Start: 0
Type: 0
Error Control: 0
Service (registry key): {9ABBE6D8-2E29-4B0A-A082-2E154AF1F42F}

Start: 0
Type: 0
Error Control: 0

SpybotSD Results

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

SpybotSD Results

Uploaded by

Copyright:

Available Formats

--- Search result list ---

DoubleClick: Tracking cookie (Firefox: default) (Cookie, nothing done)

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

MediaPlex: Tracking cookie (Firefox: default) (Cookie, nothing done)

FastClick: Tracking cookie (Firefox: default) (Cookie, nothing done)

FastClick: Tracking cookie (Firefox: default) (Cookie, nothing done)

FastClick: Tracking cookie (Firefox: default) (Cookie, nothing done)

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

CasaleMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

MediaPlex: Tracking cookie (Firefox: default) (Cookie, nothing done)

MediaPlex: Tracking cookie (Firefox: default) (Cookie, nothing done)

FastClick: Tracking cookie (Firefox: default) (Cookie, nothing done)

DoubleClick: Tracking cookie (Firefox: default) (Cookie, nothing done)

Zedo: Tracking cookie (Firefox: default) (Cookie, nothing done)

BurstMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

BurstMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

BurstMedia: Tracking cookie (Firefox: default) (Cookie, nothing done)

2008-07-07 blindman.exe (1.0.0.8)

--- System information ---

--- Startup entries list ---

Located: HK_LM:Run, Adobe Reader Speed Launcher

Located: HK_LM:Run, Alcmtr

Located: HK_LM:Run, CTSysVol

Located: HK_LM:Run, HP Software Update

Located: HK_LM:Run, hpqSRMon

Located: HK_LM:Run, Malwarebytes Anti-Malware (reboot)

Located: HK_LM:Run, Microsoft Default Manager

Located: HK_LM:Run, Norman ZANDA

Located: HK_LM:Run, NvCplDaemon

Located: HK_LM:Run, NvMediaCenter

Located: HK_LM:Run, nwiz

Located: HK_LM:Run, QuickCare

Located: HK_LM:Run, QuickTime Task

Located: HK_LM:Run, ReminderApp

Located: HK_LM:Run, RTHDCPL

Located: HK_LM:Run, SkyTel

Located: HK_LM:Run, SoundMan

Located: HK_LM:Run, SunJavaUpdateSched

Located: HK_LM:Run, UpdReg

Located: HK_CU:RunOnce, NeroHomeFirstStart

Located: HK_CU:Run, BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}

Located: HK_CU:Run, ctfmon.exe

Located: HK_CU:Run, LightScribe Control Panel

Located: HK_CU:Run, msnmsgr

Located: HK_CU:Run, QuickTime Task

Located: HK_CU:Run, ctfmon.exe

Located: HK_CU:Run, Google Update

Located: HK_CU:Run, msnmsgr

Located: HK_CU:RunOnce, FlashPlayerUpdate

Located: HK_CU:RunOnce, Shockwave Updater

Located: Startup (common), Adobe Gamma Loader.lnk

Located: Startup (common), Gigabyte Wireless Utility.lnk

Located: Startup (common), HP Digital Imaging Monitor.lnk

Located: Startup (common), Microsoft Office.lnk

Located: Startup (common), Symantec Fax Starter Edition Port.lnk

Located: Startup (common), WinZip Quick Pick.lnk

Located: Startup (disabled), Adobe Reader Speed Launch (DISABLED)

Located: WinLogon, crypt32chain