|
Antivirus XP 2010 |
Post Reply 
|
Page <123> |
| Author |
 Share Topic Printable Version Delicious Digg Facebook Furl Google MySpace Newsvine reddit StumbleUpon Translate Twitter Windows Live Yahoo Bookmarks Topic Search  Topic Options
|
SvenBomwollen 
Senior Member 
Joined: 29 August 2008 Location: Germany Online Status: Offline Posts: 1400 |
 Post Options
 Quote Reply
 Topic: Antivirus XP 2010Posted: 09 February 2010 at 11:12pm |
|
Hello, lisauk1.
According to this post, the fake antivirus software only launches if you logon under your normal account, even in safe mode. But it does not launch when you logon as the administrator. Is this correct? The Autoruns list, have you created it under your own account or under the administrator account? The thing that confuses me is that MBAM should be unable to detect the fake antivirus software Antivirus XP 2010, though it must be on your disk. The next thing that confuses me is that on the one hand the fake AV software should only run if you logon under your own account, but that on the other hand it should be able to hide away from MBAM though it is not running. The detail which confuses me most is that you have not given any comment on this statement which I wrote in a previous reply:
In case that thread over at the Tech Support Forum is really yours and in case it is about the same infection, then I do understand why so far in this thread we have got nowhere: The machine seems to be infected among other things by the TDSS/TDL3 rootkit. If that thread over at the Tech Support Forum is really yours, then simply say so. In this case, I suggest to follow the instructions given there carefully. Trying to follow two different approaches in order to fix the same infection is not really a good idea. Trying to get help against Antivirus XP 2010, although the worst infection really is TDSS/TLD3, is not going to solve any infection. Kind regards, SvenBomwollen Edited by SvenBomwollen - 09 February 2010 at 11:29pm |
|
 |
|
|
SvenBomwollen
Senior Member
Joined: 29 August 2008 Location: Germany Online Status: Offline Posts: 1400 |
Post Options
Quote Reply
Posted: 09 February 2010 at 10:47pm |
|
Hello, lisauk1.
The uploadsize for ZIP/RAR files in this forum is extremely low. So the suggested steps would be: 1. zip up the .ARN file 2. upload the ZIP file to a free hosting service 3. post the link to the uploaded ZIP file here. The big advantage of an .ARN file is that it can be loaded on any other Windows system with the help of Autoruns. The user can then look at your autorun entries as if he were looking at his own system. This is much easier than going through an endless list of pure text lines. And you do not overlook entries so easily. Kind regards, SvenBomwollen Edited by SvenBomwollen - 09 February 2010 at 10:48pm |
|
|
|
|
lisauk1
Newbie 
Joined: 08 February 2010 Online Status: Offline Posts: 7 |
Post Options
Quote Reply
Posted: 09 February 2010 at 9:15pm |
|
Sorry but I can not find the line below in my regedit
HKEY_CURRENT_USER\Software\Classes\.exe Did a search for av.exe and found AV.EXE-11F480E9.pf in the folder
C:\WINDOWS\Prefetch
Should I delete this file.
I have also run another malwarebytes anti-malware scan tonight in safemode administrator and it found nothing but when i restart in my normal user mode the antivirus xp 2010 launches again.
|
|
|
|
|
lisauk1
Newbie
Joined: 08 February 2010 Online Status: Offline Posts: 7 |
Post Options
Quote Reply
Posted: 09 February 2010 at 5:55pm |
|
ARN file to large to upload as a zip so here it is hope this is ok
I have to login to safemode with as administrator if i login with my username I normally use it will not let me run any software to help me the antivirus 2010 just launches even in safemode
"HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms" "" "" "" + "rdpclip" "RDP Clip Monitor" "Microsoft Corporation" "c:\windows\system32\rdpclip.exe" "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" "" "" "" + "C:\WINDOWS\system32\userinit.exe" "Userinit Logon Application" "Microsoft Corporation" "c:\windows\system32\userinit.exe" "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" "" "" "" + "Explorer.exe" "Windows Explorer" "Microsoft Corporation" "c:\windows\explorer.exe" "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" "" + "ATIPTA" "ATI Desktop Control Panel" "ATI Technologies, Inc." "c:\program files\ati technologies\ati control panel\atiptaxx.exe" + "BluetoothAuthenticationAgent" "Bluetooth Control Panel Applet" "Microsoft Corporation" "c:\windows\system32\bthprops.cpl" + "DetectorApp" "DetectorApp Module" "" "c:\program files\sonic\digitalmedia le v7\mydvd le\detectorapp.exe" + "ISUSPM Startup" "InstallShield Update Service Update Manager" "InstallShield Software Corporation" "c:\program files\common files\installshield\updateservice\isuspm.exe" + "ISUSScheduler" "InstallShield Update Service Scheduler" "InstallShield Software Corporation" "c:\program files\common files\installshield\updateservice\issch.exe" + "Malwarebytes Anti-Malware (reboot)" "Malwarebytes' Anti-Malware" "Malwarebytes Corporation" "c:\program files\malwarebytes' anti-malware\mbam.exe" + "PCMService" "CyberLink PowerCinema Resident Program" "CyberLink Corp." "c:\apps\powercinema\pcmservice.exe" + "SoundMan" "Realtek Sound Manager" "Realtek Semiconductor Corp." "c:\windows\soundman.exe" + "SunJavaUpdateSched" "Java(TM) Platform SE binary" "Sun Microsystems, Inc." "c:\program files\java\jre1.6.0_07\bin\jusched.exe" + "TkBellExe" "RealNetworks Scheduler" "RealNetworks, Inc." "c:\program files\common files\real\update_ob\realsched.exe" + "Vade Retro Outlook Express" "" "" "c:\program files\goto software\vade retro\vaderetro_oe.exe" "C:\Documents and Settings\All Users\Start Menu\Programs\Startup" "" "" "" + "PUSH650C.lnk" "" "" "c:\windows\twain_32\push650c.exe" "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" "" "" "" + "MSMSGS" "Windows Messenger" "Microsoft Corporation" "c:\program files\messenger\msmsgs.exe" "HKLM\SOFTWARE\Classes\Protocols\Filter" "" "" "" + "application/octet-stream" "Microsoft .NET Runtime Execution Engine" "Microsoft Corporation" "c:\windows\system32\mscoree.dll" + "application/x-complus" "Microsoft .NET Runtime Execution Engine" "Microsoft Corporation" "c:\windows\system32\mscoree.dll" + "application/x-msdownload" "Microsoft .NET Runtime Execution Engine" "Microsoft Corporation" "c:\windows\system32\mscoree.dll" + "Class Install Handler" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "deflate" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "gzip" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "lzdhtml" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "text/webviewhtml" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "text/xml" "Microsoft Office XML MIME Filter" "Microsoft Corporation" "c:\program files\common files\microsoft shared\office11\msoxmlmf.dll" "HKLM\SOFTWARE\Classes\Protocols\Handler" "" "" "" + "about" "Microsoft (R) HTML Viewer" "Microsoft Corporation" "c:\windows\system32\mshtml.dll" + "cdl" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "dvd" "ActiveX control for streaming video" "Microsoft Corporation" "c:\windows\system32\msvidctl.dll" + "file" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "ftp" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "gopher" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "http" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "https" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "its" "Microsoft® InfoTech Storage System Library" "Microsoft Corporation" "c:\windows\system32\itss.dll" + "javascript" "Microsoft (R) HTML Viewer" "Microsoft Corporation" "c:\windows\system32\mshtml.dll" + "livecall" "MSN Messenger Protocol Handler" "Microsoft Corporation" "c:\program files\msn messenger\msgrapp.8.1.0178.00.dll" + "local" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "mailto" "Microsoft (R) HTML Viewer" "Microsoft Corporation" "c:\windows\system32\mshtml.dll" + "mhtml" "Microsoft Internet Messaging API" "Microsoft Corporation" "c:\windows\system32\inetcomm.dll" + "mk" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "ms-its" "Microsoft® InfoTech Storage System Library" "Microsoft Corporation" "c:\windows\system32\itss.dll" + "ms-itss" "Microsoft® InfoTech Storage System Library" "Microsoft Corporation" "c:\program files\common files\microsoft shared\information retrieval\msitss.dll" + "msnim" "MSN Messenger Protocol Handler" "Microsoft Corporation" "c:\program files\msn messenger\msgrapp.8.1.0178.00.dll" + "mso-offdap" "Microsoft Office XP Web Components" "Microsoft Corporation" "c:\program files\common files\microsoft shared\web components\10\owc10.dll" + "mso-offdap11" "Microsoft Office Web Components 2003" "Microsoft Corporation" "c:\program files\common files\microsoft shared\web components\11\owc11.dll" + "res" "Microsoft (R) HTML Viewer" "Microsoft Corporation" "c:\windows\system32\mshtml.dll" + "sysimage" "Microsoft (R) HTML Viewer" "Microsoft Corporation" "c:\windows\system32\mshtml.dll" + "tv" "ActiveX control for streaming video" "Microsoft Corporation" "c:\windows\system32\msvidctl.dll" + "vbscript" "Microsoft (R) HTML Viewer" "Microsoft Corporation" "c:\windows\system32\mshtml.dll" + "wia" "WIA Scripting Layer" "Microsoft Corporation" "c:\windows\system32\wiascr.dll" "HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components" "" "" "" + "0" "" "" "File not found: About:Home" "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" "" "" "" + "Address Book 6" "Outlook Express Setup Library" "Microsoft Corporation" "c:\program files\outlook express\setup50.exe" + "Browser Customizations" "IEAK branding" "Microsoft Corporation" "c:\windows\system32\iedkcs32.dll" + "Fax" "ADVPACK" "Microsoft Corporation" "c:\windows\system32\advpack.dll" + "IE7 Uninstall Stub" "IE Per User Active Setup Uninstall Utility" "Microsoft Corporation" "c:\windows\system32\ieudinit.exe" + "Internet Explorer" "Windows NT User Data Migration Tool" "Microsoft Corporation" "c:\windows\system32\shmgrate.exe" + "Internet Explorer" "IE Per-User Initialization Utility" "Microsoft Corporation" "c:\windows\system32\ie4uinit.exe" + "Microsoft Outlook Express 6" "Outlook Express Setup Library" "Microsoft Corporation" "c:\program files\outlook express\setup50.exe" + "Microsoft Windows Media Player" "Microsoft Windows Media Player Setup Utility" "Microsoft Corporation" "c:\windows\inf\unregmp2.exe" + "Microsoft Windows Media Player" "ADVPACK" "Microsoft Corporation" "c:\windows\system32\advpack.dll" + "n/a" "Microsoft .NET IE SECURITY REGISTRATION" "Microsoft Corporation" "c:\windows\system32\mscories.dll" + "NetMeeting 3.01" "ADVPACK" "Microsoft Corporation" "c:\windows\system32\advpack.dll" + "Outlook Express" "Windows NT User Data Migration Tool" "Microsoft Corporation" "c:\windows\system32\shmgrate.exe" + "Themes Setup" "Windows Theme API" "Microsoft Corporation" "c:\windows\system32\themeui.dll" + "Windows Desktop Update" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "Windows Messenger 4.7" "ADVPACK" "Microsoft Corporation" "c:\windows\system32\advpack.dll" "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler" "" "" "" + "Browseui preloader" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Component Categories cache daemon" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad" "" "" "" + "CDBurn" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "PostBootReminder" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "SysTray" "Systray shell service object" "Microsoft Corporation" "c:\windows\system32\stobject.dll" + "WebCheck" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks" "" "" "" + "URL Exec Hook" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" "HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers" "" "" "" + "Offline Files" "Client Side Caching UI" "Microsoft Corporation" "c:\windows\system32\cscui.dll" + "Open With" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "Open With EncryptionMenu" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "Start Menu Pin" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" "HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" "" + "MBAMShlExt" "Malwarebytes' Anti-Malware" "Malwarebytes Corporation" "c:\program files\malwarebytes' anti-malware\mbamext.dll" + "Send To" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" "HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers" "" "" "" + "EncryptionMenu" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "Offline Files" "Client Side Caching UI" "Microsoft Corporation" "c:\windows\system32\cscui.dll" + "Sharing" "Shell extensions for sharing" "Microsoft Corporation" "c:\windows\system32\ntshrui.dll" "HKLM\Software\Classes\Directory\Shellex\PropertySheetHandlers" "" "" "" + "DfsShell Class" "Distributed File System shell extension" "Microsoft Corporation" "c:\windows\system32\dfsshlex.dll" + "Folder Customization Tab" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "Previous Versions Property Page" "Previous Versions property page" "Microsoft Corporation" "c:\windows\system32\twext.dll" + "Security Shell Extension" "Security Shell Extension" "Microsoft Corporation" "c:\windows\system32\rshx32.dll" + "Sharing" "Shell extensions for sharing" "Microsoft Corporation" "c:\windows\system32\ntshrui.dll" "HKLM\Software\Classes\Directory\Shellex\CopyHookHandlers" "" "" "" + "CDF" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "FileSystem" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "MyDocuments" "My Documents Folder UI" "Microsoft Corporation" "c:\windows\system32\mydocs.dll" + "Sharing" "Shell extensions for sharing" "Microsoft Corporation" "c:\windows\system32\ntshrui.dll" "HKLM\Software\Classes\Folder\Shellex\ColumnHandlers" "" "" "" + "PDF Shell Extension" "PDF Shell Extension" "Adobe Systems, Inc." "c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll" + "{0D2E74C4-3C34-11d2-A27E-00C04FC30871}" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "{24F14F01-7B1C-11d1-838f-0000F80461CF}" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "{24F14F02-7B1C-11d1-838f-0000F80461CF}" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "{66742402-F9B9-11D1-A202-0000F81FEDEE}" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" "HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" "" + "MBAMShlExt" "Malwarebytes' Anti-Malware" "Malwarebytes Corporation" "c:\program files\malwarebytes' anti-malware\mbamext.dll" "HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" "" + "New" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers" "" "" "" + "Offline Files" "Client Side Caching UI" "Microsoft Corporation" "c:\windows\system32\cscui.dll" "HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" "" "" "" + "%DESC_PublishDropTarget%" "Photo Printing Wizard" "Microsoft Corporation" "c:\windows\system32\photowiz.dll" + "&Address" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "&Links" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + ".CAB file viewer" "Cabinet File Viewer Shell Extension" "Microsoft Corporation" "c:\windows\system32\cabview.dll" + "Accessible" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "ActiveX Cache Folder" "Object Control Viewer" "Microsoft Corporation" "c:\windows\system32\occache.dll" + "Address EditBox" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Administrative Tools" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Audio Media Properties Handler" "Media File Property Extractor Shell Extension" "Microsoft Corporation" "c:\windows\system32\shmedia.dll" + "Augmented Shell Folder" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Augmented Shell Folder 2" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Auto Update Property Sheet Extension" "Automatic Updates Control Panel" "Microsoft Corporation" "c:\windows\system32\wuaucpl.cpl" + "Avi Properties Handler" "Media File Property Extractor Shell Extension" "Microsoft Corporation" "c:\windows\system32\shmedia.dll" + "BandProxy" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Briefcase" "Windows Briefcase" "Microsoft Corporation" "c:\windows\system32\syncui.dll" + "CDF Extension Copy Hook" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Code Download Agent" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "Compatibility Page" "Compatibility Tab Shell Extension DLL" "Microsoft Corporation" "c:\windows\system32\slayerxp.dll" + "Compressed (zipped) Folder" "Compressed (zipped) Folders" "Microsoft Corporation" "c:\windows\system32\zipfldr.dll" + "Compressed (zipped) Folder Right Drag Handler" "Compressed (zipped) Folders" "Microsoft Corporation" "c:\windows\system32\zipfldr.dll" + "Compressed (zipped) Folder SendTo Target" "Compressed (zipped) Folders" "Microsoft Corporation" "c:\windows\system32\zipfldr.dll" + "ConnectionAgent" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "Crypto PKO Extension" "Crypto Shell Extensions" "Microsoft Corporation" "c:\windows\system32\cryptext.dll" + "Crypto Sign Extension" "Crypto Shell Extensions" "Microsoft Corporation" "c:\windows\system32\cryptext.dll" + "Custom MRU AutoCompleted List" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Darwin App Publisher" "Shell Application Manager" "Microsoft Corporation" "c:\windows\system32\appwiz.cpl" + "DfsShell" "Distributed File System shell extension" "Microsoft Corporation" "c:\windows\system32\dfsshlex.dll" + "Directory Context Menu Verbs" "Directory Service Common UI" "Microsoft Corporation" "c:\windows\system32\dsuiext.dll" + "Directory Object Find" "Directory Service Find" "Microsoft Corporation" "c:\windows\system32\dsquery.dll" + "Directory Property UI" "Directory Service Common UI" "Microsoft Corporation" "c:\windows\system32\dsuiext.dll" + "Directory Query UI" "Directory Service Find" "Microsoft Corporation" "c:\windows\system32\dsquery.dll" + "Directory Start/Search Find" "Directory Service Find" "Microsoft Corporation" "c:\windows\system32\dsquery.dll" + "Disk Copy Extension" "Windows DiskCopy" "Microsoft Corporation" "c:\windows\system32\diskcopy.dll" + "Disk Quota UI" "Windows Shell Disk Quota UI DLL" "Microsoft Corporation" "c:\windows\system32\dskquoui.dll" + "Display Adapter CPL Extension" "Advanced display adapter properties" "Microsoft Corporation" "c:\windows\system32\deskadp.dll" + "Display Monitor CPL Extension" "Advanced display monitor properties" "Microsoft Corporation" "c:\windows\system32\deskmon.dll" + "Display Panning CPL Extension" "" "" "File not found: deskpan.dll" + "Display TroubleShoot CPL Extension" "Advanced display performance properties" "Microsoft Corporation" "c:\windows\system32\deskperf.dll" + "Download Status" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "DS Security Page" "Directory Service Security UI" "Microsoft Corporation" "c:\windows\system32\dssec.dll" + "E-mail" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Explorer Band" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Extensions Manager Folder" "Extensions Manager" "Microsoft Corporation" "c:\windows\system32\extmgr.dll" + "Favorites Band" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Fonts" "Windows Font Folder" "Microsoft Corporation" "c:\windows\system32\fontext.dll" + "Fonts" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "For &People..." "Find People" "Microsoft Corporation" "c:\program files\outlook express\wabfind.dll" + "FTP Folders Webview" "Microsoft Internet Explorer FTP Folder Shell Extension" "Microsoft Corporation" "c:\windows\system32\msieftp.dll" + "Fusion Cache" "Microsoft .NET Runtime Execution Engine" "Microsoft Corporation" "c:\windows\system32\mscoree.dll" + "GDI+ file thumbnail extractor" "Windows Picture and Fax Viewer" "Microsoft Corporation" "c:\windows\system32\shimgvw.dll" + "Get a Passport Wizard" "Map Network Drives/Network Places Wizard" "Microsoft Corporation" "c:\windows\system32\netplwiz.dll" + "Global Folder Settings" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Help and Support" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Help and Support" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "History" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "History Band" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "HTML Thumbnail Extractor" "Windows Picture and Fax Viewer" "Microsoft Corporation" "c:\windows\system32\shimgvw.dll" + "HyperTerminal Icon Ext" "HyperTerminal Applet Library" "Hilgraeve, Inc." "c:\windows\system32\hticons.dll" + "ICC Profile" "Microsoft Color Matching System User Interface DLL" "Microsoft Corporation" "c:\windows\system32\icmui.dll" + "ICM Monitor Management" "Microsoft Color Matching System User Interface DLL" "Microsoft Corporation" "c:\windows\system32\icmui.dll" + "ICM Printer Management" "Microsoft Color Matching System User Interface DLL" "Microsoft Corporation" "c:\windows\system32\icmui.dll" + "ICM Scanner Management" "Microsoft Color Matching System User Interface DLL" "Microsoft Corporation" "c:\windows\system32\icmui.dll" + "IE AutoComplete" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE BandProxy" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Custom MRU AutoCompleted List" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Fade Task" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE IShellFolderBand" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Menu Band" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Menu Desk Bar" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Menu Site" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Microsoft BrowserBand" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Microsoft History AutoComplete List" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Microsoft Multiple AutoComplete List Container" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Microsoft Shell Folder AutoComplete List" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE MRU AutoComplete List" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Navigation Bar" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Registry Tree Options Utility" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE RSS Feeder Folder" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Search Band" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Shell Band Site Menu" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Shell Rebar BandSite" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE Tracking Shell Menu" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE User Assist" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "IE4 Suite Splash Screen" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "In-pane search" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Installed Apps Enumerator" "Shell Application Manager" "Microsoft Corporation" "c:\windows\system32\appwiz.cpl" + "Internet" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Internet Name Space" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "InternetShortcut" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "ISFBand OC" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Messenger Sharing Folders" "Messenger File Sharing Shell Extensions" "Microsoft Corporation" "c:\program files\msn messenger\fsshext.8.1.0178.00.dll" + "Microsoft Agent Character Property Sheet Handler" "Microsoft Agent Property Sheet Handler" "Microsoft Corporation" "c:\windows\msagent\agentpsh.dll" + "Microsoft Browser Architecture" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Microsoft Browser Architecture" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "Microsoft BrowserBand" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Microsoft Data Link" "Microsoft Data Access - OLE DB Core Services" "Microsoft Corporation" "c:\program files\common files\system\ole db\oledb32.dll" + "Microsoft DocProp Inplace Calendar Control" "Microsoft DocProp Shell Ext" "Microsoft Corporation" "c:\windows\system32\docprop2.dll" + "Microsoft DocProp Inplace Droplist Combo Control" "Microsoft DocProp Shell Ext" "Microsoft Corporation" "c:\windows\system32\docprop2.dll" + "Microsoft DocProp Inplace Edit Box Control" "Microsoft DocProp Shell Ext" "Microsoft Corporation" "c:\windows\system32\docprop2.dll" + "Microsoft DocProp Inplace ML Edit Box Control" "Microsoft DocProp Shell Ext" "Microsoft Corporation" "c:\windows\system32\docprop2.dll" + "Microsoft DocProp Inplace Time Control" "Microsoft DocProp Shell Ext" "Microsoft Corporation" "c:\windows\system32\docprop2.dll" + "Microsoft DocProp Shell Ext" "Microsoft DocProp Shell Ext" "Microsoft Corporation" "c:\windows\system32\docprop2.dll" + "Microsoft History AutoComplete List" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Microsoft Internet Toolbar" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Microsoft Multiple AutoComplete List Container" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Microsoft Office HTML Icon Handler" "Microsoft Office 2003 component" "Microsoft Corporation" "c:\program files\microsoft office\office11\msohev.dll" + "Microsoft Office Metadata Handler" "Microsoft Office Shell Extension Handlers" "Microsoft Corporation" "c:\program files\common files\microsoft shared\office12\msoshext.dll" + "Microsoft Office Outlook Custom Icon Handler" "Outlook Shell Hook for Start/Find" "Microsoft Corporation" "c:\program files\microsoft office\office11\olkfstub.dll" + "Microsoft Office Outlook Desktop Icon Handler" "Microsoft Shell Extension Library" "Microsoft Corporation" "c:\program files\microsoft office\office11\mlshext.dll" + "Microsoft Office Thumbnail Handler" "Microsoft Office Shell Extension Handlers" "Microsoft Corporation" "c:\program files\common files\microsoft shared\office12\msoshext.dll" + "Microsoft Shell Folder AutoComplete List" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Microsoft Url History Service" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "Microsoft Url Search Hook" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "Midi Properties Handler" "Media File Property Extractor Shell Extension" "Microsoft Corporation" "c:\windows\system32\shmedia.dll" + "MMC Icon Handler" "MMC Shell Extension DLL" "Microsoft Corporation" "c:\windows\system32\mmcshext.dll" + "MRU AutoComplete List" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Multimedia File Property Sheet" "Control Panel Drivers Applet" "Microsoft Corporation" "c:\windows\system32\mmsys.cpl" + "MyDocs Copy Hook" "My Documents Folder UI" "Microsoft Corporation" "c:\windows\system32\mydocs.dll" + "MyDocs Drop Target" "My Documents Folder UI" "Microsoft Corporation" "c:\windows\system32\mydocs.dll" + "MyDocs Properties" "My Documents Folder UI" "Microsoft Corporation" "c:\windows\system32\mydocs.dll" + "Network Connections" "Network Connections Shell" "Microsoft Corporation" "c:\windows\system32\netshell.dll" + "Network Connections" "Network Connections Shell" "Microsoft Corporation" "c:\windows\system32\netshell.dll" + "NTFS Security Page" "Security Shell Extension" "Microsoft Corporation" "c:\windows\system32\rshx32.dll" + "Offline Files Folder" "Client Side Caching UI" "Microsoft Corporation" "c:\windows\system32\cscui.dll" + "Offline Files Folder Options" "Client Side Caching UI" "Microsoft Corporation" "c:\windows\system32\cscui.dll" + "Offline Files Menu" "Client Side Caching UI" "Microsoft Corporation" "c:\windows\system32\cscui.dll" + "OLE Docfile Property Page" "OLE DocFile Property Page" "Microsoft Corporation" "c:\windows\system32\docprop.dll" + "PlusPack CPL Extension" "Windows Theme API" "Microsoft Corporation" "c:\windows\system32\themeui.dll" + "Portable Media Devices" "Portable Media Devices Shell Extension" "Microsoft Corporation" "c:\windows\system32\audiodev.dll" + "Portable Media Devices Menu" "Portable Media Devices Shell Extension" "Microsoft Corporation" "c:\windows\system32\audiodev.dll" + "PostAgent" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "Previous Versions" "Previous Versions property page" "Microsoft Corporation" "c:\windows\system32\twext.dll" + "Previous Versions Property Page" "Previous Versions property page" "Microsoft Corporation" "c:\windows\system32\twext.dll" + "Print Ordering via the Web" "Map Network Drives/Network Places Wizard" "Microsoft Corporation" "c:\windows\system32\netplwiz.dll" + "Printers Security Page" "Security Shell Extension" "Microsoft Corporation" "c:\windows\system32\rshx32.dll" + "Registry Tree Options Utility" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Remote Sessions CPL Extension" "Remote Sessions CPL Extension" "Microsoft Corporation" "c:\windows\system32\remotepg.dll" + "Run..." "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "SampleView" "ShellvRTF" "XSS" "c:\windows\system32\shellvrtf.dll" + "Scanners & Cameras" "Imaging Devices Shell Folder UI" "Microsoft Corporation" "c:\windows\system32\wiashext.dll" + "Scanners & Cameras" "Imaging Devices Shell Folder UI" "Microsoft Corporation" "c:\windows\system32\wiashext.dll" + "Scanners & Cameras" "Imaging Devices Shell Folder UI" "Microsoft Corporation" "c:\windows\system32\wiashext.dll" + "Scanners & Cameras" "Imaging Devices Shell Folder UI" "Microsoft Corporation" "c:\windows\system32\wiashext.dll" + "Scanners & Cameras" "Imaging Devices Shell Folder UI" "Microsoft Corporation" "c:\windows\system32\wiashext.dll" + "Scheduled Tasks" "Task Scheduler interface DLL" "Microsoft Corporation" "c:\windows\system32\mstask.dll" + "Search" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Search Assistant OC" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Sendmail service" "Send Mail" "Microsoft Corporation" "c:\windows\system32\sendmail.dll" + "Sendmail service" "Send Mail" "Microsoft Corporation" "c:\windows\system32\sendmail.dll" + "Set Program Access and Defaults" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Shell Application Manager" "Shell Application Manager" "Microsoft Corporation" "c:\windows\system32\appwiz.cpl" + "Shell Automation Inproc Service" "Shell Doc Object and Control Library" "Microsoft Corporation" "c:\windows\system32\shdocvw.dll" + "Shell Band Site Menu" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Shell DeskBar" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Shell DeskBarApp" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Shell DocObject Viewer" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "Shell extensions for Microsoft Windows Network objects" "Network object shell UI" "Microsoft Corporation" "c:\windows\system32\ntlanui2.dll" + "Shell Extensions for RealOne Player" "RealPlayer Shell Extensions" "RealNetworks, Inc." "c:\program files\real\realplayer\rpshell.dll" + "Shell extensions for sharing" "Shell extensions for sharing" "Microsoft Corporation" "c:\windows\system32\ntshrui.dll" + "Shell extensions for sharing" "Shell extensions for sharing" "Microsoft Corporation" "c:\windows\system32\ntshrui.dll" + "Shell extensions for Windows Script Host" "Microsoft (R) Shell Extension for Windows Script Host" "Microsoft Corporation" "c:\windows\system32\wshext.dll" + "Shell Image Data Factory" "Windows Picture and Fax Viewer" "Microsoft Corporation" "c:\windows\system32\shimgvw.dll" + "Shell Image Property Handler" "Windows Picture and Fax Viewer" "Microsoft Corporation" "c:\windows\system32\shimgvw.dll" + "Shell Image Verbs" "Windows Picture and Fax Viewer" "Microsoft Corporation" "c:\windows\system32\shimgvw.dll" + "Shell Microsoft AutoComplete" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Shell properties for a DS object" "Directory Service Find" "Microsoft Corporation" "c:\windows\system32\dsquery.dll" + "Shell Publishing Wizard Object" "Map Network Drives/Network Places Wizard" "Microsoft Corporation" "c:\windows\system32\netplwiz.dll" + "Shell Rebar BandSite" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Shell Scrap DataHandler" "Shell scrap object handler" "Microsoft Corporation" "c:\windows\system32\shscrap.dll" + "Shell Search Band" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Subscription Folder" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "Subscription Mgr" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "Summary Info Thumbnail handler (DOCFILES)" "Windows Picture and Fax Viewer" "Microsoft Corporation" "c:\windows\system32\shimgvw.dll" + "Taskbar and Start Menu" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "Tasks Folder Icon Handler" "Task Scheduler interface DLL" "Microsoft Corporation" "c:\windows\system32\mstask.dll" + "Tasks Folder Shell Extension" "Task Scheduler interface DLL" "Microsoft Corporation" "c:\windows\system32\mstask.dll" + "Temporary Internet Files" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "Temporary Internet Files" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "The Internet" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" + "Track Popup Bar" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "TrayAgent" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "TridentImageExtractor" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "User Accounts" "Map Network Drives/Network Places Wizard" "Microsoft Corporation" "c:\windows\system32\netplwiz.dll" + "User Assist" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "Video Media Properties Handler" "Media File Property Extractor Shell Extension" "Microsoft Corporation" "c:\windows\system32\shmedia.dll" + "Video Thumbnail Extractor" "Media File Property Extractor Shell Extension" "Microsoft Corporation" "c:\windows\system32\shmedia.dll" + "Wav Properties Handler" "Media File Property Extractor Shell Extension" "Microsoft Corporation" "c:\windows\system32\shmedia.dll" + "Web Folders" "Microsoft Web Folders" "Microsoft Corporation" "c:\program files\common files\microsoft shared\web folders\msonsext.dll" + "Web Printer Shell Extension" "Print UI DLL" "Microsoft Corporation" "c:\windows\system32\printui.dll" + "Web Publishing Wizard" "Map Network Drives/Network Places Wizard" "Microsoft Corporation" "c:\windows\system32\netplwiz.dll" + "Web Search" "Shell Browser UI Library" "Microsoft Corporation" "c:\windows\system32\browseui.dll" + "WebCheck" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "WebCheck SyncMgr Handler" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "WebCheckChannelAgent" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "WebCheckWebCrawler" "Web Site Monitor" "Microsoft Corporation" "c:\windows\system32\webcheck.dll" + "Windows Media Player Add to Playlist Context Menu Handler" "Windows Media Player Launcher" "Microsoft Corporation" "c:\windows\system32\wmpshell.dll" + "Windows Media Player Burn Audio CD Context Menu Handler" "Windows Media Player Launcher" "Microsoft Corporation" "c:\windows\system32\wmpshell.dll" + "Windows Media Player Play as Playlist Context Menu Handler" "Windows Media Player Launcher" "Microsoft Corporation" "c:\windows\system32\wmpshell.dll" "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" "" + "AcroIEHlprObj Class" "Adobe Acrobat IE Helper Version 7.0 for ActiveX" "Adobe Systems Incorporated" "c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll" + "Ask Toolbar" "Ask.com Toolbar" "Ask.com" "c:\program files\ask.com\genericasktoolbar.dll" + "AVG Safe Search" "" "" "File not found: C:\Program Files\AVG\AVG8\avgssie.dll" + "Google Dictionary Compression sdch" "Fast Search" "Google Inc." "c:\program files\google\google toolbar\component\fastsearch_b7c5ac242193bb3e.dll" + "Google Toolbar Helper" "Google Toolbar" "Google Inc." "c:\program files\google\google toolbar\googletoolbar_32.dll" + "Google Toolbar Notifier BHO" "GoogleToolbarNotifier" "Google Inc." "c:\program files\google\googletoolbarnotifier\5.4.4525.1752\swg.dll" + "SSVHelper Class" "Java(TM) Platform SE binary" "Sun Microsystems, Inc." "c:\program files\java\jre1.6.0_07\bin\ssv.dll" "HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks" "" "" "" + "Microsoft Url Search Hook" "Internet Explorer" "Microsoft Corporation" "c:\windows\system32\ieframe.dll" "HKLM\Software\Microsoft\Internet Explorer\Toolbar" "" "" "" + "Ask Toolbar" "Ask.com Toolbar" "Ask.com" "c:\program files\ask.com\genericasktoolbar.dll" + "Google Toolbar" "Google Toolbar" "Google Inc." "c:\program files\google\google toolbar\googletoolbar_32.dll" "HKLM\Software\Microsoft\Internet Explorer\Extensions" "" "" "" + "Diagnose Connection Problems..." "Network Diagnostic for Windows XP" "Microsoft Corporation" "c:\windows\network diagnostic\xpnetdiag.exe" + "Windows Messenger" "Windows Messenger" "Microsoft Corporation" "c:\program files\messenger\msmsgs.exe" "Task Scheduler" "" "" "" + "Scheduled Update for Ask Toolbar.job" "" "" "c:\program files\ask.com\updatetask.exe" "HKLM\System\CurrentControlSet\Services" "" "" "" + "ALG" "Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall." "Microsoft Corporation" "c:\windows\system32\alg.exe" + "AppMgmt" "Provides software installation services such as Assign, Publish, and Remove." "" "File not found: C:\WINDOWS\System32\appmgmts.dll" + "aspnet_state" "Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe" + "Ati HotKey Poller" "ATI External Event Utility EXE Module" "ATI Technologies Inc." "c:\windows\system32\ati2evxx.exe" + "ATI Smart" "ATI Smart" "" "c:\windows\system32\ati2sgag.exe" + "AudioSrv" "Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\audiosrv.dll" + "BITS" "Transfers files in the background using idle network bandwidth. If the service is stopped, features such as Windows Update, and MSN Explorer will be unable to automatically download programs and other information. If this service is disabled, any services that explicitly depend on it may fail to transfer files if they do not have a fail safe mechanism to transfer files directly through IE in case BITS has been disabled." "Microsoft Corporation" "c:\windows\system32\qmgr.dll" + "Bonjour Service" "##Id_String2.6844F930_1628_4223_B5CC_5BB94B879762##" "Apple Computer, Inc." "c:\program files\bonjour\mdnsresponder.exe" + "Browser" "Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\browser.dll" + "BthServ" "Bluetooth Support Service" "Microsoft Corporation" "c:\windows\system32\bthserv.dll" + "CiSvc" "Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language." "Microsoft Corporation" "c:\windows\system32\cisvc.exe" + "CLCapSvc" "Provides background buffering, recording and burning functionality for CyberLink Capturing" "" "c:\apps\powercinema\kernel\tv\clcapsvc.exe" + "CLSched" "Enables a user to configure and schedule a automated task for CyberLink Scheduling" "" "c:\apps\powercinema\kernel\tv\clsched.exe" + "COMSysApp" "Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\dllhost.exe" + "CryptSvc" "Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\cryptsvc.dll" + "CyberLink Media Library Service" "NT CLMLServer" "Cyberlink" "c:\apps\powercinema\kernel\clml_ntservice\clmlserver.exe" + "DcomLaunch" "Provides launch functionality for DCOM services." "Microsoft Corporation" "c:\windows\system32\rpcss.dll" + "Dhcp" "Manages network configuration by registering and updating IP addresses and DNS names." "Microsoft Corporation" "c:\windows\system32\dhcpcsvc.dll" + "dmadmin" "Configures hard disk drives and volumes. The service only runs for configuration processes and then stops." "Microsoft Corp., Veritas Software" "c:\windows\system32\dmadmin.exe" + "dmserver" "Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corp." "c:\windows\system32\dmserver.dll" + "Dnscache" "Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\dnsrslvr.dll" + "Dot3svc" "This service performs IEEE 802.1X authentication on Ethernet interfaces" "Microsoft Corporation" "c:\windows\system32\dot3svc.dll" + "EapHost" "Provides windows clients Extensible Authentication Protocol Service" "Microsoft Corporation" "c:\windows\system32\eapsvc.dll" + "ERSvc" "Allows error reporting for services and applictions running in non-standard environments." "Microsoft Corporation" "c:\windows\system32\ersvc.dll" + "Eventlog" "Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped." "Microsoft Corporation" "c:\windows\system32\services.exe" + "EventSystem" "Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\es.dll" + "FastUserSwitchingCompatibility" "Provides management for applications that require assistance in a multiple user environment." "Microsoft Corporation" "c:\windows\system32\shsvcs.dll" + "Fax" "Enables you to send and receive faxes, utilizing fax resources available on this computer or on the network." "Microsoft Corporation" "c:\windows\system32\fxssvc.exe" + "FLEXnet Licensing Service" "This service performs licensing functions on behalf of FLEXnet enabled products." "Macrovision Europe Ltd." "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" + "gusvc" "Google Updater keeps your Google software up to date. If Google Updater Service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work." "Google" "c:\program files\google\common\google updater\googleupdaterservice.exe" + "helpsvc" "Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" + "hkmsvc" "Manages health certificates and keys (used by NAP)" "Microsoft Corporation" "c:\windows\system32\kmsvc.dll" + "HTTPFilter" "This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\w3ssl.dll" + "ImapiService" "Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\imapi.exe" + "lanmanserver" "Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\srvsvc.dll" + "lanmanworkstation" "Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\wkssvc.dll" + "LmHosts" "Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution." "Microsoft Corporation" "c:\windows\system32\lmhsvc.dll" + "mnmsrvc" "Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\mnmsrvc.exe" + "MSIServer" "Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\msiexec.exe" + "napagent" "Allows windows clients to participate in Network Access Protection" "Microsoft Corporation" "c:\windows\system32\qagentrt.dll" + "Netlogon" "Supports pass-through authentication of account logon events for computers in a domain." "Microsoft Corporation" "c:\windows\system32\lsass.exe" + "Netman" "Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections." "Microsoft Corporation" "c:\windows\system32\netman.dll" + "Nla" "Collects and stores network configuration and location information, and notifies applications when this information changes." "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "NtLmSsp" "Provides security to remote procedure call (RPC) programs that use transports other than named pipes." "Microsoft Corporation" "c:\windows\system32\lsass.exe" + "NtmsSvc" "Removable Storage Manager" "Microsoft Corporation" "c:\windows\system32\ntmssvc.dll" + "ose" "Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports." "Microsoft Corporation" "c:\program files\common files\microsoft shared\source engine\ose.exe" + "PlugPlay" "Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability." "Microsoft Corporation" "c:\windows\system32\services.exe" + "PolicyAgent" "Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver." "Microsoft Corporation" "c:\windows\system32\lsass.exe" + "ProtectedStorage" "Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users." "Microsoft Corporation" "c:\windows\system32\lsass.exe" + "RasAuto" "Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address." "Microsoft Corporation" "c:\windows\system32\rasauto.dll" + "RasMan" "Creates a network connection." "Microsoft Corporation" "c:\windows\system32\rasmans.dll" + "RDSessMgr" "Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box." "Microsoft Corporation" "c:\windows\system32\sessmgr.exe" + "RpcLocator" "Manages the RPC name service database." "Microsoft Corporation" "c:\windows\system32\locator.exe" + "RpcSs" "Provides the endpoint mapper and other miscellaneous RPC services." "Microsoft Corporation" "c:\windows\system32\rpcss.dll" + "RSVP" "Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets." "Microsoft Corporation" "c:\windows\system32\rsvp.exe" + "SamSs" "Stores security information for local user accounts." "Microsoft Corporation" "c:\windows\system32\lsass.exe" + "SCardSvr" "Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\scardsvr.exe" + "Schedule" "Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\schedsvc.dll" + "seclogon" "Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\seclogon.dll" + "SENS" "Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events." "Microsoft Corporation" "c:\windows\system32\sens.dll" + "ShellHWDetection" "Provides notifications for AutoPlay hardware events." "Microsoft Corporation" "c:\windows\system32\shsvcs.dll" + "Spooler" "Loads files to memory for later printing." "Microsoft Corporation" "c:\windows\system32\spoolsv.exe" + "srservice" "Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties" "Microsoft Corporation" "c:\windows\system32\srsvc.dll" + "SSDPSRV" "Enables discovery of UPnP devices on your home network." "Microsoft Corporation" "c:\windows\system32\ssdpsrv.dll" + "stisvc" "Provides image acquisition services for scanners and cameras." "Microsoft Corporation" "c:\windows\system32\wiaservc.dll" + "SwPrv" "Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\dllhost.exe" + "Symantec Core LC" "Symantec Core LC" "" "c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe" + "SysmonLog" "Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\smlogsvc.exe" + "TapiSrv" "Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service." "Microsoft Corporation" "c:\windows\system32\tapisrv.dll" + "TermService" "Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server." "Microsoft Corporation" "c:\windows\system32\termsrv.dll" + "Themes" "Provides user experience theme management." "Microsoft Corporation" "c:\windows\system32\shsvcs.dll" + "TrkWks" "Maintains links between NTFS files within a computer or across computers in a network domain." "Microsoft Corporation" "c:\windows\system32\trkwks.dll" + "UMWdf" "Enables Windows user mode drivers." "Microsoft Corporation" "c:\windows\system32\wdfmgr.exe" + "upnphost" "Provides support to host Universal Plug and Play devices." "Microsoft Corporation" "c:\windows\system32\upnphost.dll" + "UPS" "Manages an uninterruptible power supply (UPS) connected to the computer." "Microsoft Corporation" "c:\windows\system32\ups.exe" + "USBDeviceService" "USBDeviceService Module" "" "c:\program files\sonic\digitalmedia le v7\mydvd le\usbdeviceservice.exe" + "usnjsvc" "Service installed by Messenger to enable sharing scenarios" "Microsoft Corporation" "c:\program files\msn messenger\usnsvc.exe" + "VSS" "Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\vssvc.exe" + "W32Time" "Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\w32time.dll" + "WebClient" "Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\webclnt.dll" + "winmgmt" "Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\wbem\wmisvc.dll" + "WmdmPmSN" "Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device." "Microsoft Corporation" "c:\windows\system32\mspmsnsv.dll" + "WmiApSrv" "Provides performance library information from WMI HiPerf providers." "Microsoft Corporation" "c:\windows\system32\wbem\wmiapsrv.exe" + "wscsvc" "Monitors system security settings and configurations." "Microsoft Corporation" "c:\windows\system32\wscsvc.dll" + "wuauserv" "Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site." "Microsoft Corporation" "c:\windows\system32\wuauserv.dll" + "WZCSVC" "Provides automatic configuration for the 802.11 adapters" "Microsoft Corporation" "c:\windows\system32\wzcsvc.dll" + "xmlprov" "Manages XML configuration files on a domain basis for automatic network provisioning." "Microsoft Corporation" "c:\windows\system32\xmlprov.dll" "HKLM\System\CurrentControlSet\Services" "" "" "" + "ACPI" "ACPI Driver for NT" "Microsoft Corporation" "c:\windows\system32\drivers\acpi.sys" + "aec" "Microsoft Acoustic Echo Canceller" "Microsoft Corporation" "c:\windows\system32\drivers\aec.sys" + "AFD" "AFD Networking Support Environment" "Microsoft Corporation" "c:\windows\system32\drivers\afd.sys" + "ALCXWDM" "Realtek AC'97 Audio Driver (WDM)" "Realtek Semiconductor Corp." "c:\windows\system32\drivers\alcxwdm.sys" + "AsyncMac" "RAS Asynchronous Media Driver" "Microsoft Corporation" "c:\windows\system32\drivers\asyncmac.sys" + "atapi" "IDE/ATAPI Port Driver" "Microsoft Corporation" "c:\windows\system32\drivers\atapi.sys" + "ati2mtag" "ATI Radeon WindowsNT Miniport Driver" "ATI Technologies Inc." "c:\windows\system32\drivers\ati2mtag.sys" + "Atmarpc" "ATM ARP Client Protocol" "Microsoft Corporation" "c:\windows\system32\drivers\atmarpc.sys" + "audstub" "AudStub Driver" "Microsoft Corporation" "c:\windows\system32\drivers\audstub.sys" + "BCM43XX" "BCM 802.11g Network Adapter wireless driver" "Broadcom Corporation" "c:\windows\system32\drivers\bcmwl5.sys" + "Beep" "BEEP Driver" "Microsoft Corporation" "c:\windows\system32\drivers\beep.sys" + "BthEnum" "Bluetooth Bus Extender" "Microsoft Corporation" "c:\windows\system32\drivers\bthenum.sys" + "BthPan" "Bluetooth Device (Personal Area Network)" "Microsoft Corporation" "c:\windows\system32\drivers\bthpan.sys" + "BTHPORT" "Bluetooth Bus Driver" "Microsoft Corporation" "c:\windows\system32\drivers\bthport.sys" + "BTHUSB" "Bluetooth Miniport Driver" "Microsoft Corporation" "c:\windows\system32\drivers\bthusb.sys" + "Cdaudio" "CD-ROM Audio Filter Driver" "Microsoft Corporation" "c:\windows\system32\drivers\cdaudio.sys" + "Cdrom" "SCSI CD-ROM Driver" "Microsoft Corporation" "c:\windows\system32\drivers\cdrom.sys" + "Changer" "" "" "File not found: C:\WINDOWS\System32\Drivers\Changer.sys" + "Disk" "PnP Disk Driver" "Microsoft Corporation" "c:\windows\system32\drivers\disk.sys" + "DMusic" "Microsoft Kernel DLS Synthesizer" "Microsoft Corporation" "c:\windows\system32\drivers\dmusic.sys" + "drmkaud" "Microsoft Kernel DRM Audio Descrambler Filter" "Microsoft Corporation" "c:\windows\system32\drivers\drmkaud.sys" + "Fdc" "Floppy Disk Controller Driver" "Microsoft Corporation" "c:\windows\system32\drivers\fdc.sys" + "Fips" "FIPS Crypto Driver" "Microsoft Corporation" "c:\windows\system32\drivers\fips.sys" + "Flpydisk" "Floppy Driver" "Microsoft Corporation" "c:\windows\system32\drivers\flpydisk.sys" + "FltMgr" "File System Filter Manager Driver" "Microsoft Corporation" "c:\windows\system32\drivers\fltmgr.sys" + "Ftdisk" "FT Disk Driver" "Microsoft Corporation" "c:\windows\system32\drivers\ftdisk.sys" + "Gpc" "Generic Packet Classifier" "Microsoft Corporation" "c:\windows\system32\drivers\msgpc.sys" + "GTNDIS5" "PCAUSA NDIS 5.0 Protocol Driver" "Printing Communications Assoc., Inc. (PCAUSA)" "c:\windows\system32\gtndis5.sys" + "HPZid412" "IEEE-1284.4-1999 Driver (Windows 2000)" "HP" "c:\windows\system32\drivers\hpzid412.sys" + "HPZipr12" "IEEE-1284.4-1999 Print Class Driver" "HP" "c:\windows\system32\drivers\hpzipr12.sys" + "HPZius12" "1284.4<->Usb Datalink Driver (Windows 2000)" "HP" "c:\windows\system32\drivers\hpzius12.sys" + "HTTP" "This service implements the hypertext transfer protocol (HTTP). If this service is disabled, any services that explicitly depend on it will fail to start." "Microsoft Corporation" "c:\windows\system32\drivers\http.sys" + "i2omgmt" "" "" "File not found: C:\WINDOWS\System32\Drivers\i2omgmt.sys" + "i8042prt" "i8042 Port Driver" "Microsoft Corporation" "c:\windows\system32\drivers\i8042prt.sys" + "Imapi" "IMAPI Kernel Driver" "Microsoft Corporation" "c:\windows\system32\drivers\imapi.sys" + "IntelIde" "Intel PCI IDE Driver" "Microsoft Corporation" "c:\windows\system32\drivers\intelide.sys" + "intelppm" "Processor Device Driver" "Microsoft Corporation" "c:\windows\system32\drivers\intelppm.sys" + "Ip6Fw" "Provides intrusion prevention service for a home or small office network." "Microsoft Corporation" "c:\windows\system32\drivers\ip6fw.sys" + "IpFilterDriver" "IP Traffic Filter Driver" "Microsoft Corporation" "c:\windows\system32\drivers\ipfltdrv.sys" + "IpInIp" "IP in IP Tunnel Driver" "Microsoft Corporation" "c:\windows\system32\drivers\ipinip.sys" + "IpNat" "IP Network Address Translator" "Microsoft Corporation" "c:\windows\system32\drivers\ipnat.sys" + "IPSec" "IPSEC driver" "Microsoft Corporation" "c:\windows\system32\drivers\ipsec.sys" + "IRENUM" "Infra-Red Bus Enumerator" "Microsoft Corporation" "c:\windows\system32\drivers\irenum.sys" + "isapnp" "PNP ISA Bus Driver" "Microsoft Corporation" "c:\windows\system32\drivers\isapnp.sys" + "Kbdclass" "Keyboard Class Driver" "Microsoft Corporation" "c:\windows\system32\drivers\kbdclass.sys" + "kmixer" "Kernel Mode Audio Mixer" "Microsoft Corporation" "c:\windows\system32\drivers\kmixer.sys" + "KSecDD" "Kernel Security Support Provider Interface" "Microsoft Corporation" "c:\windows\system32\drivers\ksecdd.sys" + "lbrtfdc" "" "" "File not found: C:\WINDOWS\System32\Drivers\lbrtfdc.sys" + "mnmdd" "Frame buffer simulator" "Microsoft Corporation" "c:\windows\system32\drivers\mnmdd.sys" + "Modem" "Modem Device Driver" "Microsoft Corporation" "c:\windows\system32\drivers\modem.sys" + "Mouclass" "Mouse Class Driver" "Microsoft Corporation" "c:\windows\system32\drivers\mouclass.sys" + "MountMgr" "Mount Manager" "Microsoft Corporation" "c:\windows\system32\drivers\mountmgr.sys" + "MRxDAV" "WebDav Client Redirector" "Microsoft Corporation" "c:\windows\system32\drivers\mrxdav.sys" + "MRxSmb" "MRXSMB" "Microsoft Corporation" "c:\windows\system32\drivers\mrxsmb.sys" + "Msfs" "Mailslot driver" "Microsoft Corporation" "c:\windows\system32\drivers\msfs.sys" + "MSKSSRV" "MS KS Server" "Microsoft Corporation" "c:\windows\system32\drivers\mskssrv.sys" + "MSPCLOCK" "MS Proxy Clock" "Microsoft Corporation" "c:\windows\system32\drivers\mspclock.sys" + "MSPQM" "MS Proxy Quality Manager" "Microsoft Corporation" "c:\windows\system32\drivers\mspqm.sys" + "mssmbios" "System Management BIOS Driver" "Microsoft Corporation" "c:\windows\system32\drivers\mssmbios.sys" + "Mup" "Multiple UNC Provider driver" "Microsoft Corporation" "c:\windows\system32\drivers\mup.sys" + "NDIS" "NDIS 5.1 wrapper driver" "Microsoft Corporation" "c:\windows\system32\drivers\ndis.sys" + "NdisTapi" "Remote Access NDIS TAPI Driver" "Microsoft Corporation" "c:\windows\system32\drivers\ndistapi.sys" + "Ndisuio" "NDIS Usermode I/O Protocol" "Microsoft Corporation" "c:\windows\system32\drivers\ndisuio.sys" + "NdisWan" "Remote Access NDIS WAN Driver" "Microsoft Corporation" "c:\windows\system32\drivers\ndiswan.sys" + "NDProxy" "NDIS Proxy" "Microsoft Corporation" "c:\windows\system32\drivers\ndproxy.sys" + "NetBIOS" "NetBIOS Interface" "Microsoft Corporation" "c:\windows\system32\drivers\netbios.sys" + "NetBT" "NetBios over Tcpip" "Microsoft Corporation" "c:\windows\system32\drivers\netbt.sys" + "Npfs" "NPFS Driver" "Microsoft Corporation" "c:\windows\system32\drivers\npfs.sys" + "Null" "NULL Driver" "Microsoft Corporation" "c:\windows\system32\drivers\null.sys" + "NwlnkFlt" "IPX Traffic Filter Driver" "Microsoft Corporation" "c:\windows\system32\drivers\nwlnkflt.sys" + "NwlnkFwd" "IPX Traffic Forwarder Driver" "Microsoft Corporation" "c:\windows\system32\drivers\nwlnkfwd.sys" + "Parport" "Parallel Port Driver" "Microsoft Corporation" "c:\windows\system32\drivers\parport.sys" + "PartMgr" "Partition Manager" "Microsoft Corporation" "c:\windows\system32\drivers\partmgr.sys" + "PCI" "NT Plug and Play PCI Enumerator" "Microsoft Corporation" "c:\windows\system32\drivers\pci.sys" + "PCIDump" "" "" "File not found: C:\WINDOWS\System32\Drivers\PCIDump.sys" + "PCIIde" "Generic PCI IDE Bus Driver" "Microsoft Corporation" "c:\windows\system32\drivers\pciide.sys" + "PDCOMP" "" "" "File not found: C:\WINDOWS\System32\Drivers\PDCOMP.sys" + "PDFRAME" "" "" "File not found: C:\WINDOWS\System32\Drivers\PDFRAME.sys" + "PDRELI" "" "" "File not found: C:\WINDOWS\System32\Drivers\PDRELI.sys" + "PDRFRAME" "" "" "File not found: C:\WINDOWS\System32\Drivers\PDRFRAME.sys" + "PptpMiniport" "WAN Miniport (PPTP)" "Microsoft Corporation" "c:\windows\system32\drivers\raspptp.sys" + "PSched" "QoS Packet Scheduler" "Microsoft Corporation" "c:\windows\system32\drivers\psched.sys" + "Ptilink" "Direct Parallel Link Driver" "Parallel Technologies, Inc." "c:\windows\system32\drivers\ptilink.sys" + "PxHelp20" "Px Engine Device Driver for Windows 2000/XP" "Sonic Solutions" "c:\windows\system32\drivers\pxhelp20.sys" + "RasAcd" "Remote Access Auto Connection Driver" "Microsoft Corporation" "c:\windows\system32\drivers\rasacd.sys" + "Rasl2tp" "WAN Miniport (L2TP)" "Microsoft Corporation" "c:\windows\system32\drivers\rasl2tp.sys" + "RasPppoe" "Remote Access PPPOE Driver" "Microsoft Corporation" "c:\windows\system32\drivers\raspppoe.sys" + "Raspti" "Direct Parallel" "Microsoft Corporation" "c:\windows\system32\drivers\raspti.sys" + "Rdbss" "Rdbss" "Microsoft Corporation" "c:\windows\system32\drivers\rdbss.sys" + "RDPCDD" "RDP Miniport" "Microsoft Corporation" "c:\windows\system32\drivers\rdpcdd.sys" + "RDPWD" "RDP Terminal Stack Driver (US/Canada Only, Not for Export)" "Microsoft Corporation" "c:\windows\system32\drivers\rdpwd.sys" + "redbook" "Redbook Audio Filter Driver" "Microsoft Corporation" "c:\windows\system32\drivers\redbook.sys" + "RFCOMM" "Bluetooth Device (RFCOMM Protocol TDI)" "Microsoft Corporation" "c:\windows\system32\drivers\rfcomm.sys" + "RTL8023xp" "Realtek 10/100/1000 NDIS 5.1 Driver " "Realtek Semiconductor Corporation " "c:\windows\system32\drivers\rtnicxp.sys" + "rtl8139" "Realtek RTL8139 NDIS 5.0 Driver" "Realtek Semiconductor Corporation" "c:\windows\system32\drivers\rtl8139.sys" + "Secdrv" "SafeDisc driver" "Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K." "c:\windows\system32\drivers\secdrv.sys" + "Serial" "Serial Device Driver" "Microsoft Corporation" "c:\windows\system32\drivers\serial.sys" + "Sfloppy" "SCSI Floppy Driver" "Microsoft Corporation" "c:\windows\system32\drivers\sfloppy.sys" + "splitter" "Microsoft Kernel Audio Splitter" "Microsoft Corporation" "c:\windows\system32\drivers\splitter.sys" + "sr" "System Restore Filesystem Filter Driver" "Microsoft Corporation" "c:\windows\system32\drivers\sr.sys" + "Srv" "Srv" "Microsoft Corporation" "c:\windows\system32\drivers\srv.sys" + "swenum" "Plug and Play Software Device Enumerator" "Microsoft Corporation" "c:\windows\system32\drivers\swenum.sys" + "swmidi" "Microsoft GS Wavetable Synthesizer" "Microsoft Corporation" "c:\windows\system32\drivers\swmidi.sys" + "symlcbrd" "Symantec Core Component" "Symantec Corporation" "c:\windows\system32\drivers\symlcbrd.sys" + "sysaudio" "System Audio WDM Filter" "Microsoft Corporation" "c:\windows\system32\drivers\sysaudio.sys" + "Tcpip" "TCP/IP Protocol Driver" "Microsoft Corporation" "c:\windows\system32\drivers\tcpip.sys" + "TDPIPE" "Named Pipe Transport Driver" "Microsoft Corporation" "c:\windows\system32\drivers\tdpipe.sys" + "TDTCP" "TCP Transport Driver" "Microsoft Corporation" "c:\windows\system32\drivers\tdtcp.sys" + "TermDD" "Terminal Server Driver" "Microsoft Corporation" "c:\windows\system32\drivers\termdd.sys" + "Update" "Update Driver" "Microsoft Corporation" "c:\windows\system32\drivers\update.sys" + "usbccgp" "USB Common Class Generic Parent Driver" "Microsoft Corporation" "c:\windows\system32\drivers\usbccgp.sys" + "usbehci" "EHCI eUSB Miniport Driver" "Microsoft Corporation" "c:\windows\system32\drivers\usbehci.sys" + "usbhub" "Default Hub Driver for USB" "Microsoft Corporation" "c:\windows\system32\drivers\usbhub.sys" + "usbohci" "OHCI USB Miniport Driver" "Microsoft Corporation" "c:\windows\system32\drivers\usbohci.sys" + "usbprint" "USB Printer driver" "Microsoft Corporation" "c:\windows\system32\drivers\usbprint.sys" + "usbstor" "USB Mass Storage Class Driver" "Microsoft Corporation" "c:\windows\system32\drivers\usbstor.sys" + "VgaSave" "Controls the VGA display adapter to provide basic display capabilities." "Microsoft Corporation" "c:\windows\system32\drivers\vga.sys" + "VolSnap" "Volume Shadow Copy Driver" "Microsoft Corporation" "c:\windows\system32\drivers\volsnap.sys" + "Wanarp" "Remote Access IP ARP Driver" "Microsoft Corporation" "c:\windows\system32\drivers\wanarp.sys" + "wanatw" "" "" "File not found: system32\DRIVERS\wanatw4.sys" + "WDICA" "" "" "File not found: C:\WINDOWS\System32\Drivers\WDICA.sys" + "wdmaud" "MMSYSTEM Wave/Midi API mapper" "Microsoft Corporation" "c:\windows\system32\drivers\wdmaud.sys" + "WpdUsb" "WPD USB Driver" "Microsoft Corporation" "c:\windows\system32\drivers\wpdusb.sys" "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" "" + "midi" "WDM Audio driver mapper" "Microsoft Corporation" "c:\windows\system32\wdmaud.drv" + "midimapper" "Microsoft MIDI Mapper" "Microsoft Corporation" "c:\windows\system32\midimap.dll" + "mixer" "WDM Audio driver mapper" "Microsoft Corporation" "c:\windows\system32\wdmaud.drv" + "msacm.iac2" "Indeo® audio software" "Intel Corporation" "c:\windows\system32\iac25_32.ax" + "msacm.imaadpcm" "IMA ADPCM CODEC for MSACM" "Microsoft Corporation" "c:\windows\system32\imaadp32.acm" + "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\system32\l3codeca.acm" + "msacm.msadpcm" "Microsoft ADPCM CODEC for MSACM" "Microsoft Corporation" "c:\windows\system32\msadp32.acm" + "msacm.msaudio1" "Windows Media Audio" "Microsoft Corporation" "c:\windows\system32\msaud32.acm" + "msacm.msg711" "Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM" "Microsoft Corporation" "c:\windows\system32\msg711.acm" + "msacm.msg723" "Microsoft G.723.1 CODEC for MSACM" "Microsoft Corporation" "c:\windows\system32\msg723.acm" + "msacm.msgsm610" "Microsoft GSM 6.10 Audio CODEC for MSACM" "Microsoft Corporation" "c:\windows\system32\msgsm32.acm" + "msacm.siren" "Messenger Audio Codec" "Microsoft Corp." "c:\windows\system32\sirenacm.dll" + "msacm.sl_anet" "Audio codec for MS ACM" "Sipro Lab Telecom Inc." "c:\windows\system32\sl_anet.acm" + "msacm.trspch" "DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50" "DSP GROUP, INC." "c:\windows\system32\tssoft32.acm" + "vidc.cvid" "Cinepak® Codec" "Radius Inc." "c:\windows\system32\iccvid.dll" + "vidc.I420" "Microsoft H.263 ICM Driver" "Microsoft Corporation" "c:\windows\system32\msh263.drv" + "vidc.iv31" "" "" "c:\windows\system32\ir32_32.dll" + "vidc.iv32" "" "" "c:\windows\system32\ir32_32.dll" + "vidc.iv41" "Intel Indeo® Video 4.5" "Intel Corporation" "c:\windows\system32\ir41_32.ax" + "vidc.iv50" "Intel Indeo® video 5.10" "Intel Corporation" "c:\windows\system32\ir50_32.dll" + "vidc.iyuv" "Intel Indeo(R) Video YUV Codec" "Microsoft Corporation" "c:\windows\system32\iyuv_32.dll" + "vidc.M261" "Microsoft H.261 ICM Driver" "Microsoft Corporation" "c:\windows\system32\msh261.drv" + "vidc.M263" "Microsoft H.263 ICM Driver" "Microsoft Corporation" "c:\windows\system32\msh263.drv" + "vidc.mrle" "Microsoft RLE Compressor" "Microsoft Corporation" "c:\windows\system32\msrle32.dll" + "vidc.msvc" "Microsoft Video 1 Compressor" "Microsoft Corporation" "c:\windows\system32\msvidc32.dll" + "vidc.uyvy" "Microsoft UYVY Video Decompressor" "Microsoft Corporation" "c:\windows\system32\msyuv.dll" + "vidc.yuy2" "Microsoft UYVY Video Decompressor" "Microsoft Corporation" "c:\windows\system32\msyuv.dll" + "vidc.yvu9" "Toshiba Video Codec" "Microsoft Corporation" "c:\windows\system32\tsbyuv.dll" + "vidc.yvyu" "Microsoft UYVY Video Decompressor" "Microsoft Corporation" "c:\windows\system32\msyuv.dll" + "wave" "WDM Audio driver mapper" "Microsoft Corporation" "c:\windows\system32\wdmaud.drv" + "wavemapper" "Microsoft Sound Mapper" "Microsoft Corporation" "c:\windows\system32\msacm32.drv" "HKLM\Software\Classes\Filter" "" "" "" + "Indeo® video 4.4 Compression Filter" "Intel Indeo® Video 4.5" "Intel Corporation" "c:\windows\system32\ir41_32.ax" + "Indeo® video 4.4 Decompression Filter" "Intel Indeo® Video 4.5" "Intel Corporation" "c:\windows\system32\ir41_32.ax" "HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" "" + ".RAM Parser" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "9x8Resize" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "AC3 Parser Filter" "DirectShow MPEG-2 Splitter." "Microsoft Corporation" "c:\windows\system32\mpg2splt.ax" + "ACELP.net Audio Decoder" "ACELP.net Audio Decoder" "Sipro Lab Telecom Inc." "c:\windows\system32\acelpdec.ax" + "ACM Wrapper" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Allocator Fix" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "ASF ACM Handler" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "ASF Animation Handler" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "ASF DIB Handler" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "ASF DJPEG Handler" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "ASF ICM Handler" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "ASF JPEG Handler" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "ASF URL Handler" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "ASX File Parser" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "ASX v.2 File Parser" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "AVI Decompressor" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "AVI Draw Filter" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "AVI mux" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\qcap.dll" + "AVI Splitter" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "AVI/WAV File Source" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Bitmap" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Color Space Converter" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "CyberLink AudAna Filter" "CLAudAna" "CyberLink" "c:\apps\powercinema\kernel\videoprocessor\mdaudana.dll" + "CyberLink Audio Commercial Cut Analyzer (PCM45)" "CLAudCM" "Cyberlink Corp." "c:\apps\powercinema\kernel\video\claudcm.ax" + "CyberLink Audio Decoder" "CyberLink Audio Decoder Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmbclaud.ax" + "CyberLink Audio Decoder" "CyberLink Audio Decoder Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\mdaud.ax" + "CyberLink Audio Decoder (PCM45)" "CyberLink Audio Decoder Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\movie\claud.ax" + "CyberLink Audio Effect" "CyberLink Audio Effect Filter" "CyberLink Corporation" "c:\apps\powercinema\kernel\tv\pcmraudfx.ax" + "CyberLink Audio Effect (PCM45)" "CyberLink Audio Effect Filter" "CyberLink Corporation" "c:\apps\powercinema\kernel\movie\claudfx.ax" + "CyberLink Audio Encoder" "CyberLink Audio Encoder Filter" "Cyberlink Corp." "c:\apps\powercinema\kernel\dv\pcmdv_audenc.ax" + "CyberLink Audio Encoder" "CyberLink Audio Encoder Filter" "Cyberlink Corp." "c:\apps\powercinema\kernel\tv\pcmbaudenc.ax" + "CyberLink Audio Encoder" "CyberLink Audio Encoder Filter" "Cyberlink Corp." "c:\apps\powercinema\kernel\videoprocessor\mdaudenc.ax" + "CyberLink Audio Noise Reduction" "CLAuNR" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\claunrwrapper.ax" + "CyberLink Audio Noise Reduction" "CLAuNR" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmraunrwrapper.ax" + "CyberLink Audio Resampler" "CLAuRsmpl.ax" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\mdaursmpl.ax" + "CyberLink AudioCD Filter (PCM45)" "CyberLink AudioCD Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\movie\claudiocd.ax" + "CyberLink DDR" "CyberLink DDR" "CyberLink Corp." "c:\apps\powercinema\kernel\dv\pcmdv_render.ax" + "CyberLink Demultiplexer" "MPEG-2 Dempltiplexer" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmrdemuxer.ax" + "CyberLink Demultiplexer (PCM45)" "MPEG-2 Dempltiplexer" "CyberLink Corp." "c:\apps\powercinema\kernel\movie\cldemuxer.ax" + "CyberLink Double Pin Tee" "Cyberlink Double Tee Filter" "CtberLink Corporation" "c:\apps\powercinema\kernel\dv\pcmdv_doubletee.ax" + "Cyberlink Dump Dispatch Filter" "Cyberlink File Dump Dispatch Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\mddumpdispatch.ax" + "Cyberlink Dump Filter" "Cyberlink File Dump Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\dv\pcmdv_dump.ax" + "Cyberlink Dump Filter" "Cyberlink File Dump Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\mddump.ax" + "CyberLink DV Buffer" "CLDVBuffer Filter" "CyberLink" "c:\apps\powercinema\kernel\dv\pcmdv_dvbuffer.ax" + "CyberLink DV Dump Filter" "DV dump Filter" "CyberLink Corporation" "c:\apps\powercinema\kernel\dv\pcmdv_dvdump.ax" + "CyberLink DV Filter" "DVTCR" "CyberLink" "c:\apps\powercinema\kernel\dv\pcmdv_dvtcr.ax" + "CyberLink DV Reader Filter" "DVMultReader Filter" "CyberLink" "c:\apps\powercinema\kernel\dv\pcmdv_dvmrd.ax" + "CyberLink DVD Navigator (PCM45)" "CyberLink DVD Navigation Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\movie\clnavx.ax" + "CyberLink Editing Service (Source)" "CES Kernel" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\cledtkrn.dll" + "CyberLink EPG Decoder" "EPGDec" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmrepgdec.ax" + "CyberLink File Map Sink" "CyberLink File Map Sink" "Cyberlink Corporation." "c:\apps\powercinema\kernel\tv\pcmrfmsnk.ax" + "CyberLink File Map Source" "CyberLink File Map Source" "CyberLink File Map Source" "c:\apps\powercinema\kernel\tv\pcmrfmsrc.ax" + "Cyberlink Gate Filter" "CLGate" "CyberLink" "c:\apps\powercinema\kernel\dv\pcmdv_gate.ax" + "CyberLink Line21 Decoder Filter (PCM45)" "CyberLink Line21 Decoder Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\movie\clline21.ax" + "CyberLink Load Image Filter" "CLImage" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmbimage.ax" + "CyberLink Load Image Filter" "CLImage" "CyberLink" "c:\apps\powercinema\kernel\videoprocessor\climage.ax" + "CyberLink M2V Writer" "CLM2VWriter" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmbm2vwriter.ax" + "CyberLink MP3 Wrapper-PCM" "CyberLink MP3 Wrapper" "CyberLink Corp." "c:\apps\powercinema\kernel\music\clmp3wrap.ax" + "CyberLink MP3 Wrapper-PCM" "CyberLink MP3 Wrapper" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmrmp3wrap.ax" + "CyberLink MPEG Decoder" "CyberLink Video/SP Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\mdmvd.ax" + "CyberLink MPEG Muxer" "MpgMux" "CyberLink" "c:\apps\powercinema\kernel\videoprocessor\mdmpgmux.ax" + "CyberLink MPEG Muxer" "MpgMux" "CyberLink" "c:\apps\powercinema\kernel\dv\pcmdv_mpgmux.ax" + "CyberLink MPEG Video Decoder" "CyberLink Video/SP Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\dv\pcmdv_mmv.ax" + "CyberLink MPEG Video Encoder" "CyberLink MPEG Video Encoder " "CyberLink Corp. " "c:\apps\powercinema\kernel\dv\pcmdv_mpgvenc.ax" + "CyberLink MPEG Video Encoder" "CyberLink MPEG Video Encoder " "CyberLink Corp. " "c:\apps\powercinema\kernel\videoprocessor\mdmpgvenc.ax" + "CyberLink MPEG Video Encoder" "CyberLink MPEG Video Encoder " "CyberLink Corp. " "c:\apps\powercinema\kernel\tv\pcmbmpgvenc.ax" + "CyberLink MPEG-1 Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmbm1splter.ax" + "CyberLink MPEG-1 Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\apps\powercinema\kernel\video\clm1splter.ax" + "CyberLink MPEG-2 Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmbm2splter.ax" + "CyberLink MPEG-2 Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\apps\powercinema\kernel\video\clm2splter.ax" + "CyberLink MPEGV Analyzer" "CLMPEGAnalysis" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmrmpegvanalyzer.ax" + "CyberLink PCM Wrapper" "CyberLink PCM Wrapper" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmbpcmenc.ax" + "CyberLink Pipe Switch" "CyberLink Pipe Switch" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmrpipswch.ax" + "CyberLink PTS Regulator" "CyberLink PTS Regulator " "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmptsreg.ax" + "CyberLink SBE Filter" "CLSBE" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmrsbe.ax" + "CyberLink SBE Source Filter" "CLSBESrc" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmrsbesrc.ax" + "CyberLink SnapShot Filter" "CLSnapShot Filter" "CyberLink" "c:\apps\powercinema\kernel\dv\pcmdv_snapshot.ax" + "Cyberlink SubTitle Importor (PCM45)" "CLSubTitle.ax" "CyberLink Corp." "c:\apps\powercinema\kernel\movie\clsubtitle.ax" + "CyberLink Teletext Decoder Filter" "Teletext Renderer Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmrttxdec.ax" + "CyberLink TimeStretch Filter" "CLAuTS.ax" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmrauts.ax" + "CyberLink TimeStretch Filter (CES)" "CLAuTS.ax" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\clauts.ax" + "CyberLink TimeStretch Filter (PCM45)" "CLAuTS.ax" "CyberLink Corp." "c:\apps\powercinema\kernel\movie\clauts.ax" + "CyberLink TL MPEG-1 Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\mdtlm1splter.ax" + "CyberLink TL MPEG-2 Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\apps\powercinema\kernel\videoprocessor\mdtlm2splter.ax" + "Cyberlink TS Filter Filter" "TSFF" "Cyberlink" "c:\apps\powercinema\kernel\tv\pcmrtsff.ax" + "Cyberlink TS Information" "CLTSInfo" "Cyberlink" "c:\apps\powercinema\kernel\tv\pcmrtsinfo.ax" + "CyberLink VAudAna Filter" "CLVAudAna" "CyberLink" "c:\apps\powercinema\kernel\videoprocessor\mdvaudana.dll" + "CyberLink VidAna Filter" "CLVidAna" "CyberLink" "c:\apps\powercinema\kernel\videoprocessor\mdvidana.dll" + "CyberLink Video Effect" "CLVidFx" "CyberLink" "c:\apps\powercinema\kernel\videoprocessor\clvidfx.ax" + "CyberLink Video Effect (PCM45)" "CLVidFx" "CyberLink" "c:\apps\powercinema\kernel\movie\clvidfx.ax" + "Cyberlink Video Regulator" "CyberLink Video Regulator" "CyberLink" "c:\apps\powercinema\kernel\dv\pcmdv_resample.ax" + "CyberLink Video Regulator" "CLRGL" "Cyberlink" "c:\apps\powercinema\kernel\videoprocessor\clrgl.ax" + "CyberLink Video/SP Decoder" "CyberLink Video/SP Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmbvsd.ax" + "CyberLink Video/SP Decoder (PCM45)" "CyberLink Video/SP Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\movie\clvsd.ax" + "CyberLink Video/SP Decoder (ShEX)" "CyberLink Video/SP Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\video\climagevsd.ax" + "CyberLink XDS Codec" "CLXDSCodec" "Cyberlink" "c:\apps\powercinema\kernel\tv\pcmrxdscodec.ax" + "CyberLink YUY2 DeInterlace" "DitlYuY2" "CyberLink" "c:\apps\powercinema\kernel\dv\pcmdv_ditlyuy2.ax" + "CyberLink YUY2 Sub-Sampling" "SubYUY2 Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\dv\pcmdv_subyuy2.ax" + "Default Video Renderer" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "DV Muxer" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\qdv.dll" + "DV Splitter" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\qdv.dll" + "DV Video Decoder" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\qdv.dll" + "DVD Navigator" "DirectShow DVD PlayBack Runtime." "Microsoft Corporation" "c:\windows\system32\qdvd.dll" + "File Source (Async.)" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "File Source (URL)" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "File stream renderer" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "File Writer" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\qcap.dll" + "Frame Eater" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Full Screen Renderer" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "G.711 Codec" "Intel G711 CODEC" "Microsoft Corporation" "c:\windows\system32\g711codc.ax" + "IDM Filter" "idmf" "Cyberlink" "c:\apps\powercinema\kernel\videoprocessor\mdidmf.ax" + "Indeo® audio software" "Indeo® audio software" "Intel Corporation" "c:\windows\system32\iac25_32.ax" + "Indeo® video 5.10 Compression Filter" "Intel Indeo® video 5.10" "Intel Corporation" "c:\windows\system32\ir50_32.dll" + "Indeo® video 5.10 Decompression Filter" "Intel Indeo® video 5.10" "Intel Corporation" "c:\windows\system32\ir50_32.dll" + "Infinite Pin Tee Filter" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\qcap.dll" + "Internal Text Renderer" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Line 21 Decoder" "DirectShow DVD PlayBack Runtime." "Microsoft Corporation" "c:\windows\system32\qdvd.dll" + "Line 21 Decoder 2" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Microsoft MPEG-4 Video Decompressor" "Microsoft MPEG-4 Video Decompressor" "Microsoft Corporation" "c:\windows\system32\mpg4ds32.ax" + "Microsoft Screen Video Decompressor" "Microsoft Screen Video Decompressor" "Microsoft Corporation" "c:\windows\system32\msscds32.ax" + "MIDI Parser" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "MJPEG Decompressor" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "MPEG Audio Codec" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "MPEG Layer-3 Decoder" "MPEG Layer-3 Audio Decoder" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\system32\l3codecx.ax" + "MPEG Video Codec" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "MPEG-2 Demultiplexer" "DirectShow MPEG-2 Splitter." "Microsoft Corporation" "c:\windows\system32\mpg2splt.ax" + "MPEG-2 Sections and Tables" "Microsoft MPEG-2 Section and Table Acquisition Module" "Microsoft Corporation" "c:\windows\system32\mpeg2data.ax" + "MPEG-2 Splitter" "DirectShow MPEG-2 Splitter." "Microsoft Corporation" "c:\windows\system32\mpg2splt.ax" + "Mpeg-2 Video Stream Analysis" "DirectShow Stream Buffer Filter." "Microsoft Corporation" "c:\windows\system32\sbe.dll" + "MPEG-I Stream Splitter" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Multi-file Parser" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "NSC File Parser" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "Null Renderer" "DirectShow Editing." "Microsoft Corporation" "c:\windows\system32\qedit.dll" + "Overlay Mixer" "DirectShow DVD PlayBack Runtime." "Microsoft Corporation" "c:\windows\system32\qdvd.dll" + "Overlay Mixer2" "DirectShow DVD PlayBack Runtime." "Microsoft Corporation" "c:\windows\system32\qdvd.dll" + "PCM Audio Decoder" "CyberLink Audio Decoder Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmraud.ax" + "PCM Audio Encoder" "CyberLink Audio Encoder Filter" "Cyberlink Corp." "c:\apps\powercinema\kernel\tv\pcmraudenc.ax" + "PCM Audio Resampler" "CLAuRsmpl.ax" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmbaursmpl.ax" + "PCM Audio Resampler" "CLAuRsmpl.ax" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmraursmpl.ax" + "PCM Dump Dispatch Filter" "Cyberlink File Dump Dispatch Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmbdumpdispatch.ax" + "PCM Dump Filter" "Cyberlink File Dump Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmbdump.ax" + "PCM Dump Filter" "Cyberlink File Dump Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmrdump.ax" + "PCM MPEG Muxer" "MpgMux" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmrmpgmux.ax" + "PCM MPEG Video Encoder" "CyberLink MPEG Video Encoder " "CyberLink Corp. " "c:\apps\powercinema\kernel\tv\pcmrmpgvenc2.ax" + "PCM MPEG Video Encoder" "CyberLink MPEG Video Encoder " "CyberLink Corp. " "c:\apps\powercinema\kernel\tv\pcmrmpgvenc.ax" + "PCM MPEG-2 Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmrm2splter.ax" + "PCM SnapShotTIP Filter" "CLSShot" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmrsshot.ax" + "PCM Video Effect" "CLVidFx" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmrvidfx.ax" + "PCM Video Regulator" "CyberLink Video Regulator" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmrresample.ax" + "PCM Video/SP Decoder" "CyberLink Video/SP Filter" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmrvsd.ax" + "PP File Reader (Async.)" "Cyberlink MPEG File Reader" "CyberLink Corp." "c:\apps\powercinema\kernel\tv\pcmbreader.ax" + "PP Video Regulator" "CyberLink Video Regulator" "CyberLink" "c:\apps\powercinema\kernel\tv\pcmbresample.ax" + "QT Decompressor" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "QuickTime Movie Parser" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "RealPlayer Audio Filter" "Audio Filter Plugin" "RealNetworks, Inc." "c:\program files\real\realplayer\rdsf3260.dll" + "Record Queue" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "SAMI (CC) Reader" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Sample Grabber" "DirectShow Editing." "Microsoft Corporation" "c:\windows\system32\qedit.dll" + "ShotDetect" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "Smart Tee Filter" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\qcap.dll" + "Stetch" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "StreamBufferSink" "DirectShow Stream Buffer Filter." "Microsoft Corporation" "c:\windows\system32\sbe.dll" + "StreamBufferSource" "DirectShow Stream Buffer Filter." "Microsoft Corporation" "c:\windows\system32\sbe.dll" + "Time Regulator" "TimeRegulator" "cyberlink" "c:\apps\powercinema\kernel\tv\pcmravi_audtr.ax" + "Tivo DirectShow Source Filter" "TiVo DirectShow Filter" "TiVo Inc." "c:\program files\common files\tivo shared\directshow\tivodirectshowfilter.dll" + "VBI Surface Allocator" "VBI Surface Allocator Filter" "Microsoft Corporation" "c:\windows\system32\vbisurf.ax" + "VGA 16 color ditherer" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Video Mixing Renderer 9" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Video Port Manager" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Video Renderer" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "Wave Parser" "DirectShow Runtime." "Microsoft Corporation" "c:\windows\system32\quartz.dll" + "WIA Stream Snapshot Filter" "WIA Stream Snapshot Filter" "MyCompanyName" "c:\windows\system32\wiasf.ax" + "Windows Media Audio Decoder" "Windows Media Audio Decoder" "Microsoft Corporation" "c:\windows\system32\msadds32.ax" + "Windows Media Multiplexer" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "Windows Media splitter" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "Windows Media Update" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "Windows Media URL File Source" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" + "Windows Media Video Decoder" "Windows Media Video Decoder" "Microsoft Corporation" "c:\windows\system32\wmvds32.ax" + "Windows Media Video Decoder" "Windows Media Video Decoder V8" "Microsoft Corporation" "c:\windows\system32\wmv8ds32.ax" + "WM ASF Reader" "DirectShow ASF Support" "Microsoft Corporation" "c:\windows\system32\qasf.dll" + "WM ASF Writer" "DirectShow ASF Support" "Microsoft Corporation" "c:\windows\system32\qasf.dll" + "WM VIH2 Fix" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMEnc Screen Capture Filter" "WMPSrcWp Module" "Microsoft Corporation" "c:\windows\system32\wmpsrcwp.dll" + "WMT Audio Analyzer" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Black Frame Generator" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT DirectX Transform Wrapper" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT DV Extract Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT FormatConversion" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Import Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Interlacer" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Log Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT MuxDeMux Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Sample Info Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Screen capture Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Switch Filter" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Virtual Renderer" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Virtual Source" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "WMT Volume" "Movie Maker Filters" "Microsoft Corporation" "c:\program files\movie maker\wmm2filt.dll" + "World Standard Teletext Decoder" "WST Decoder Filter" "Microsoft Corporation" "c:\windows\system32\wstdecod.dll" + "XML-based ASX Parser" "Windows Media Filter Shim" "Microsoft Corporation" "c:\windows\system32\wmpasf.dll" "HKLM\Software\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}\Instance" "" "" "" + "{0131BE10-2001-4C5F-A9B0-CC88FAB64CE8}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{114F5598-0B22-40A0-86A1-C83EA495ADBD}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{1A34F5C1-4A5A-46DC-B644-1F4567E7A676}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{27949969-876A-41D7-9447-568F6A35A4DC}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{69BE8BB4-D66D-47C8-865A-ED1589433782}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{AC4CE3CB-E1C1-44CD-8215-5A1665509EC2}" "Windows Media Photo Codec" "Microsoft Corporation" "c:\windows\system32\wmphoto.dll" "HKLM\Software\Classes\CLSID\{7ED96837-96F0-4812-B211-F13C24117ED3}\Instance" "" "" "" + "{381DDA3C-9CE9-4834-A23E-1F98F8FC52BE}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{389EA17B-5078-4CDE-B6EF-25C15175C751}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{6B462062-7CBF-400D-9FDB-813DD10F2778}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{9456A480-E88B-43EA-9E73-0B2D9B71B1CA}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{A26CEC36-234C-4950-AE16-E34AACE71D0D}" "Windows Media Photo Codec" "Microsoft Corporation" "c:\windows\system32\wmphoto.dll" + "{B54E85D9-FE23-499F-8B88-6ACEA713752B}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{C61BFCDF-2E0F-4AAD-A8D7-E06BAFEBCDFE}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" "HKLM\Software\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\Instance" "" "" "" + "{00108226-EE41-44A2-9E9C-4BE4D5B1D2CD}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{076C2A6C-F78F-4C46-A723-3583E70876EA}" "Microsoft Windows Codecs Extended Library" "Microsoft Corporation" "c:\windows\system32\windowscodecsext.dll" + "{122EC645-CD7E-44D8-B186-2C8C20C3B50F}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{1249B20C-5DD0-44FE-B0B3-8F92C8E6D080}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{1765E14E-1BD4-462E-B6B1-590BF1262AC6}" "Microsoft Windows Codecs Extended Library" "Microsoft Corporation" "c:\windows\system32\windowscodecsext.dll" + "{22C21F93-7DDB-411C-9B17-C5B7BD064ABC}" "Microsoft Windows Codecs Extended Library" "Microsoft Corporation" "c:\windows\system32\windowscodecsext.dll" + "{5C5C1935-0235-4434-80BC-251BC1EC39C6}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{6D68D1DE-D432-4B0F-923A-091183A9BDA7}" "Microsoft Windows Codecs Extended Library" "Microsoft Corporation" "c:\windows\system32\windowscodecsext.dll" + "{7B19A919-A9D6-49E5-BD45-02C34E4E4CD5}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{8ADE5386-8E9B-4F4C-ACF2-F0008706B238}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{A09CCA86-27BA-4F39-9053-121FA4DC08FC}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{B1EBFC28-C9BD-47A2-8D33-B948769777A7}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{B5EBAFB9-253E-4A72-A744-0762D2685683}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{C9A14CDA-C339-460B-9078-D4DEBCFABE91}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{CB8C13E4-62B5-4C96-A48B-6BA6ACE39C76}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{D049B20C-5DD0-44FE-B0B3-8F92C8E6D080}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{ED822C8C-D6BE-4301-A631-0E1416BAD28F}" "Microsoft Windows Codecs Extended Library" "Microsoft Corporation" "c:\windows\system32\windowscodecsext.dll" + "{EE366069-1832-420F-B381-0479AD066F19}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" + "{F3C633A2-46C8-498E-8FBB-CC6F721BBCDE}" "Microsoft Windows Codecs Library" "Microsoft Corporation" "c:\windows\system32\windowscodecs.dll" "HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute" "" "" "" + "autocheck autochk *" "Auto Check Utility" "Microsoft Corporation" "c:\windows\system32\autochk.exe" "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" "" "" "" + "Your Image File Name Here without a path" "Symbolic Debugger for Windows 2000" "Microsoft Corporation" "c:\windows\system32\ntsd.exe" "HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls" "" "" "" + "advapi32" "Advanced Windows 32 Base API" "Microsoft Corporation" "c:\windows\system32\advapi32.dll" + "comdlg32" "Common Dialogs DLL" "Microsoft Corporation" "c:\windows\system32\comdlg32.dll" + "gdi32" "GDI Client DLL" "Microsoft Corporation" "c:\windows\system32\gdi32.dll" + "imagehlp" "Windows NT Image Helper" "Microsoft Corporation" "c:\windows\system32\imagehlp.dll" + "kernel32" "Windows NT BASE API Client DLL" "Microsoft Corporation" "c:\windows\system32\kernel32.dll" + "lz32" "LZ Expand/Compress API DLL" "Microsoft Corporation" "c:\windows\system32\lz32.dll" + "ole32" "Microsoft OLE for Windows" "Microsoft Corporation" "c:\windows\system32\ole32.dll" + "oleaut32" "" "Microsoft Corporation" "c:\windows\system32\oleaut32.dll" + "olecli32" "Object Linking and Embedding Client Library" "Microsoft Corporation" "c:\windows\system32\olecli32.dll" + "olecnv32" "Microsoft OLE for Windows" "Microsoft Corporation" "c:\windows\system32\olecnv32.dll" + "olesvr32" "Object Linking and Embedding Server Library" "Microsoft Corporation" "c:\windows\system32\olesvr32.dll" + "olethk32" "Microsoft OLE for Windows" "Microsoft Corporation" "c:\windows\system32\olethk32.dll" + "rpcrt4" "Remote Procedure Call Runtime" "Microsoft Corporation" "c:\windows\system32\rpcrt4.dll" + "shell32" "Windows Shell Common Dll" "Microsoft Corporation" "c:\windows\system32\shell32.dll" + "url" "Internet Shortcut Shell Extension DLL" "Microsoft Corporation" "c:\windows\system32\url.dll" + "urlmon" "OLE32 Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\urlmon.dll" + "user32" "Windows XP USER API Client DLL" "Microsoft Corporation" "c:\windows\system32\user32.dll" + "version" "Version Checking and File Installation Libraries" "Microsoft Corporation" "c:\windows\system32\version.dll" + "wininet" "Internet Extensions for Win32" "Microsoft Corporation" "c:\windows\system32\wininet.dll" + "wldap32" "Win32 LDAP API DLL" "Microsoft Corporation" "c:\windows\system32\wldap32.dll" "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost" "" "" "" + "logonui.exe" "Windows Logon UI" "Microsoft Corporation" "c:\windows\system32\logonui.exe" "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify" "" "" "" + "AtiExtEvent" "ATI External Event Utility DLL Module" "ATI Technologies Inc." "c:\windows\system32\ati2evxx.dll" + "crypt32chain" "Crypto API32" "Microsoft Corporation" "c:\windows\system32\crypt32.dll" + "cryptnet" "Crypto Network Related API" "Microsoft Corporation" "c:\windows\system32\cryptnet.dll" + "cscdll" "Offline Network Agent" "Microsoft Corporation" "c:\windows\system32\cscdll.dll" + "dimsntfy" "DIMS Notification Handler" "Microsoft Corporation" "c:\windows\system32\dimsntfy.dll" + "ScCertProp" "Common DLL to receive Winlogon notifications" "Microsoft Corporation" "c:\windows\system32\wlnotify.dll" + "Schedule" "Common DLL to receive Winlogon notifications" "Microsoft Corporation" "c:\windows\system32\wlnotify.dll" + "sclgntfy" "Secondary Logon Service Notification DLL" "Microsoft Corporation" "c:\windows\system32\sclgntfy.dll" + "SensLogn" "Common DLL to receive Winlogon notifications" "Microsoft Corporation" "c:\windows\system32\wlnotify.dll" + "termsrv" "Common DLL to receive Winlogon notifications" "Microsoft Corporation" "c:\windows\system32\wlnotify.dll" + "WgaLogon" "Windows Genuine Advantage Notification" "Microsoft Corporation" "c:\windows\system32\wgalogon.dll" + "wlballoon" "Common DLL to receive Winlogon notifications" "Microsoft Corporation" "c:\windows\system32\wlnotify.dll" "HKCU\Control Panel\Desktop\Scrnsave.exe" "" "" "" + "C:\WINDOWS\system32\logon.scr" "Logon Screen Saver" "Microsoft Corporation" "c:\windows\system32\logon.scr" "HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries" "" "" "" + "000000000001" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000002" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000003" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000004" "Microsoft Windows Rsvp 1.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\rsvpsp.dll" + "000000000005" "Microsoft Windows Rsvp 1.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\rsvpsp.dll" + "000000000006" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000007" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000008" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000009" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000010" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000011" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000012" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000013" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000014" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000015" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000016" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000017" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "000000000018" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" "HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries" "" "" "" + "Bluetooth Namespace" "Windows Sockets Helper DLL" "Microsoft Corporation" "c:\windows\system32\wshbth.dll" + "mdnsNSP" "Bonjour Namespace Provider" "Apple Computer, Inc." "c:\program files\bonjour\mdnsnsp.dll" + "Network Location Awareness (NLA) Namespace" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" + "NTDS" "LDAP RnR Provider DLL" "Microsoft Corporation" "c:\windows\system32\winrnr.dll" + "Tcpip" "Microsoft Windows Sockets 2.0 Service Provider" "Microsoft Corporation" "c:\windows\system32\mswsock.dll" "HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors" "" "" "" + "BJ Language Monitor" "Langage Monitor for Canon Bubble-Jet Printer" "Microsoft Corporation" "c:\windows\system32\cnbjmon.dll" + "Local Port" "Local Spooler DLL" "Microsoft Corporation" "c:\windows\system32\localspl.dll" + "Microsoft Document Imaging Writer Monitor" "Microsoft® Document Imaging" "Microsoft Corporation" "c:\windows\system32\mdimon.dll" + "Microsoft Shared Fax Monitor" "Microsoft Fax Print Monitor" "Microsoft Corporation" "c:\windows\system32\fxsmon.dll" + "PCL Language Monitor" "LanguageMonitor" "Hewlett-Packard Company" "c:\windows\system32\hpz3l3xu.dll" + "PJL Language Monitor" "PJL Language monitor" "Microsoft Corporation" "c:\windows\system32\pjlmon.dll" + "Standard TCP/IP Port" "Standard TCP/IP Port Monitor DLL" "Microsoft Corporation" "c:\windows\system32\tcpmon.dll" + "USB Monitor" "Standard Dynamic Printing Port Monitor DLL" "Microsoft Corporation" "c:\windows\system32\usbmon.dll" "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders" "" "" "" + "digest.dll" "Digest SSPI Authentication Package" "Microsoft Corporation" "c:\windows\system32\digest.dll" + "msapsspc.dll" "DPA Client for 32 bit platforms" "Microsoft Corporation" "c:\windows\system32\msapsspc.dll" + "msnsspc.dll" "MSN Internet Access" "Microsoft Corporation" "c:\windows\system32\msnsspc.dll" + "schannel.dll" "TLS / SSL Security Provider" "Microsoft Corporation" "c:\windows\system32\schannel.dll" "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages" "" "" "" + "msv1_0" "Microsoft Authentication Package v1.0" "Microsoft Corporation" "c:\windows\system32\msv1_0.dll" "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages" "" "" "" + "scecli" "Windows Security Configuration Editor Client Engine" "Microsoft Corporation" "c:\windows\system32\scecli.dll" "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages" "" "" "" + "kerberos" "Kerberos Security Package" "Microsoft Corporation" "c:\windows\system32\kerberos.dll" + "msv1_0" "Microsoft Authentication Package v1.0" "Microsoft Corporation" "c:\windows\system32\msv1_0.dll" + "schannel" "TLS / SSL Security Provider" "Microsoft Corporation" "c:\windows\system32\schannel.dll" + "wdigest" "Microsoft Digest Access" "Microsoft Corporation" "c:\windows\system32\wdigest.dll" "HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order" "" "" "" + "LanmanWorkstation" "Microsoft Windows Network" "Microsoft Corporation" "c:\windows\system32\ntlanman.dll" + "RDPNP" "Microsoft Terminal Services" "Microsoft Corporation" "c:\windows\system32\drprov.dll" + "WebClient" "Web Client Network" "Microsoft Corporation" "c:\windows\system32\davclnt.dll" Edited by lisauk1 - 09 February 2010 at 5:57pm |
|
|
|
|
amolsupp
Newbie
Joined: 09 February 2010 Location: Nashik Online Status: Offline Posts: 6 |
Post Options
Quote Reply
Posted: 09 February 2010 at 11:48am |
|
Dear All,
very simple problem ,just follow the below steps. HKEY_CURRENT_USER\Software\Classes\.exe first delete this registry entry from given location. then go to start *search -search av.exe and if found just simply delete it from system. and once restart system. THanks, Amol Gajare |
|
|
amolngajare
|
|
|
|
|
redhawk
Moderator Group 
Joined: 14 September 2005 Location: United Kingdom Online Status: Offline Posts: 1220 |
Post Options
Quote Reply
Posted: 09 February 2010 at 10:39am |
|
If you have access to a boot CD i.e. XP install (Recovery Console), BartPE or Hiren's Tools then you could disable the malware by crippling it's files and folders.
Richard S. |
|
|
|
|
SvenBomwollen
Senior Member
Joined: 29 August 2008 Location: Germany Online Status: Offline Posts: 1400 |
Post Options
Quote Reply
Posted: 09 February 2010 at 9:51am |
|
Hello, lisauk1.
About the foldername "AV2010" and the registry key names: Please, keep in mind that it is more than easy to use slightly modified foldernames and registry key names on every installation. Please, have a look at these two writeups on how to remove the faked antivirus software "Antivirus XP 2010": + How to remove Antivirus XP 2010 + How to remove Antivirus XP 2010 rogue anti-spyware Kind regards, SvenBomwollen Edited by SvenBomwollen - 09 February 2010 at 9:51am |
|
|
|
|
SvenBomwollen
Senior Member
Joined: 29 August 2008 Location: Germany Online Status: Offline Posts: 1400 |
Post Options
Quote Reply
Posted: 09 February 2010 at 12:11am |
|
Hello, lisauk1.
This may be a hint that the makers of Antivirus XP 2010 have read the thread and the instruction and studied MBAM and spent a few malicious thoughts on how to work around it.  .ARN file: Sysinternals Autoruns can create a hopefully complete list of everything which Windows will launch automatically. As Antivirus XP 2010 must be launched automatically somewhere as well, its traces might appear in the .ARN file. So it is similar to the HJT logfile which you posted in this tech support forum thread. Kind regards, SvenBomwollen Edited by SvenBomwollen - 09 February 2010 at 12:25am |
|
|
|
|
lisauk1
Newbie
Joined: 08 February 2010 Online Status: Offline Posts: 7 |
Post Options
Quote Reply
Posted: 09 February 2010 at 12:03am |
|
If I try to run malwarebyes anti-malware while not in safemode the antivirus xp 2010 launches and I have to close the av.exe process
|
|
|
|
|
lisauk1
Newbie
Joined: 08 February 2010 Online Status: Offline Posts: 7 |
Post Options
Quote Reply
Posted: 09 February 2010 at 12:00am |
|
I have folled the instructsion at the link provided by bootsect and my machine restarted and the antivirus xp 2010 launched again. I looked in my regedit and none of the below are present, what is a .ARN so i can do this. Thank you Associated Antivirus 2010 Files: c:\Program Files\AV2010 Associated Antivirus 2010 Windows HKEY_CURRENT_USER\Software\AV2010 |
|
|
|
|
Post Reply
|
Page <123> |
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
