SpybotSD_v1.52 : "Error During Check" message

[user139]

Hi all.
Thank the developers for such a compact and powerful tool; I’ve been using it since 2002, greatly satisfied.

In the FAQ or here I couldn’t find information about how to solve the problem I run into (if it is a problem).

Today, as regular on a Friday, I proceeded with the update.
Got the version 1.5.2, got the last updates, immunized and run a full scan.

First time I’ve seen the following message:
Attention mark in a red triangle followed by:

Error during check
-Virtumonde [60](TRegExpr(comp):ParseRegUnmatched()(pos96))
Error during check
-Virtumonde [93](TRegExpr(comp):ParseRegUnmatched()(pos100))

Well, I have run into that nasty beast on another machine, had to use a Ghost to recover a clean state.

I run a full Norton antivirus scan in safe mode, run a Kaspersky online too, run Vundofix too,
results are clean, nothing bad detected.

So my question is, should I worry?
Is there a trojan on my PCs?

I will appreciate help and information.
Thank you.

[user139]

My first post was on Feb.6 in the Software/Spybot S-D section, as of today I see that more than a 100 (hundred!!) have read it but still no replies.

In the mean time I read so much about version 1.52.20 beeing unstable...

Postings in the "Malware" section seem to get replies faster from administrators and I hope there will be one soon to relieve the stress.

Thank you

[tashi]

Hello.

So my question is, should I worry?
Is there a trojan on my PCs?

I will appreciate help and information.
Thank you.

as of today I see that more than a 100 (hundred!!) have read it but still no replies.

Even Google bot searches add up.

Either:

• Open SpyBot.
• Check for problems.
• When the scan completes, right click on the results list, select "Copy results to clipboard".
• Paste (Ctrl+V) or attach those results into this topic.

Or:

Follow the procedure in this link:
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

Then start your own thread in the Malware Removal Forum where a helper will analyze the log/s and advise you when available.

Best regards.

[user139]

Thank for joining my two posts, tashi.
I would like to follow instructions but I still believe my initial question could have been replied in a simple way, google is irrelevant.

Now, impossible to start a new thread, I am asked to login then asked to wait then again a login screen appears and 3 reasons are given for not succesfull login:
1.input wrong login info
2.Administartor may have disabled your account
3.Your account needs activation


Following your instructions here come the results:

=1.SPYBOT SCAN REPORT==part1

--- Search result list ---
Error during check!: Virtumonde [60] (TRegExpr(comp): ParseReg Unmatched () (pos 96)) ()

Error during check!: Virtumonde [93] (TRegExpr(comp): ParseReg Unmatched () (pos 100)) ()


Common Dialogs: [SBI $4CDCC3D5] History (20 files) (Registry key, nothing done)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU

Log: [SBI $4CDCC3D5] Activity: SchedLgU.Txt (Backup file, nothing done)
C:\WINDOWS\SchedLgU.Txt

Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wbemess.log (Backup file, nothing done)
C:\WINDOWS\System32\wbem\logs\wbemess.log

Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wbemprox.log (Backup file, nothing done)
C:\WINDOWS\System32\wbem\logs\wbemprox.log

Log: [SBI $4CDCC3D5] Shutdown: System32\wbem\logs\wmiprov.log (Backup file, nothing done)
C:\WINDOWS\System32\wbem\logs\wmiprov.log

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

Windows Explorer: [SBI $AA0766B5] Stream history (11 files) (Registry key, nothing done)
HKEY_USERS\S-1-5-21-2513411388-3846011740-3897771420-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

Windows Explorer: [SBI $2026AFB6] User Assistant history IE (6 files) (Registry key, nothing done)
HKEY_USERS\S-1-5-21-2513411388-3846011740-3897771420-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: [SBI $6107D172] User Assistant history files (12 files) (Registry key, nothing done)
HKEY_USERS\S-1-5-21-2513411388-3846011740-3897771420-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: [SBI $B7EBA926] Last visited history (2 files) (Registry key, nothing done)
HKEY_USERS\S-1-5-21-2513411388-3846011740-3897771420-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU

Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry key, nothing done)
HKEY_USERS\S-1-5-21-2513411388-3846011740-3897771420-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Windows Explorer: [SBI $85C2C910] Last Copy/MoveTo folder (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2513411388-3846011740-3897771420-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\CopyMoveTo\LastFolder

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry change, nothing done)
HKEY_USERS\S-1-5-21-2513411388-3846011740-3897771420-1005\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry change, nothing done)
HKEY_USERS\S-1-5-21-2513411388-3846011740-3897771420-1005\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2513411388-3846011740-3897771420-1005\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Cookie: Cookie (23) (Cookie, nothing done)

Cache: Cache (1092) (Cache, nothing done)

History: History (210) (History, nothing done)

Congratulations!: No immediate threats were found. ()


--- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

2008-01-28 blindman.exe (1.0.0.7)
2008-01-28 SDDelFile.exe (1.0.2.4)
2008-01-28 SDMain.exe (1.0.0.5)
2008-01-28 SDUpdate.exe (1.0.8.8)
2008-01-28 SDWinSec.exe (1.0.0.11)
2008-01-28 SpybotSD.exe (1.5.2.20)
2008-01-28 TeaTimer.exe (1.5.2.16)
2005-05-31 TeaTimer_original.exe (1.4.0.2)
2006-11-28 unins000.exe (51.41.0.0)
2008-02-08 unins001.exe (51.49.0.0)
2008-01-28 Update.exe (1.4.0.6)
2008-01-28 advcheck.dll (1.5.4.5)
2007-04-02 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2007-11-17 DelZip179.dll (1.79.7.4)
2008-01-28 SDFiles.dll (1.5.1.19)
2008-01-28 SDHelper.dll (1.5.0.11)
2008-01-28 Tools.dll (2.1.3.3)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2008-02-06 Includes\Cookies.sbi (*)
2007-12-26 Includes\Dialer.sbi (*)
2008-02-06 Includes\DialerC.sbi (*)
2008-02-06 Includes\HeavyDuty.sbi (*)
2008-02-06 Includes\Hijackers.sbi (*)
2008-02-06 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2008-02-06 Includes\KeyloggersC.sbi (*)
2008-01-16 Includes\Malware.sbi (*)
2008-02-06 Includes\MalwareC.sbi (*)
2007-10-24 Includes\PUPS.sbi (*)
2008-02-06 Includes\PUPSC.sbi (*)
2008-02-06 Includes\Revision.sbi (*)
2008-01-09 Includes\Security.sbi (*)
2008-02-06 Includes\SecurityC.sbi (*)
2008-01-23 Includes\Spybots.sbi (*)
2008-02-06 Includes\SpybotsC.sbi (*)
2007-11-06 Includes\Tracks.uti (*)
2008-02-06 Includes\Trojans.sbi (*)
2008-02-06 Includes\TrojansC.sbi (*)
2007-12-24 Plugins\TCPIPAddress.dll

[user139]

--- System information ---
Windows XP (Build: 2600) Service Pack 2 (5.1.2600)
/ Microsoft .NET Framework 2.0: This Security Update is for Microsoft .NET Framework 2.0. \n
If you later install a more recent service pack, this Security Update will be uninstalled automatically. \n
For more information, visit http://support.microsoft.com/kb/917283
/ Microsoft .NET Framework 2.0: This Security Update is for Microsoft .NET Framework 2.0. \n
If you later install a more recent service pack, this Security Update will be uninstalled automatically. \n
For more information, visit http://support.microsoft.com/kb/922770
/ Windows Media Player 10: Windows Media Player 10 (KB911565) セキュリティ問題の修正プログラム
/ Windows Media Player 10: Windows Media Player 10 (KB917734) セキュリティ問題の修正プログラム
/ Windows XP / SP3: Windows XP ホットフィックス - KB834707
/ Windows XP / SP3: Windows XP ホットフィックス - KB867282
/ Windows XP / SP3: Windows XP ホットフィックス - KB873333
/ Windows XP / SP3: Windows XP ホットフィックス - KB873339
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB883939)
/ Windows XP / SP3: Windows XP ホットフィックス - KB885250
/ Windows XP / SP3: Windows XP ホットフィックス - KB885835
/ Windows XP / SP3: Windows XP ホットフィックス - KB885836
/ Windows XP / SP3: Windows XP ホットフィックス - KB886185
/ Windows XP / SP3: Windows XP ホットフィックス - KB887472
/ Windows XP / SP3: Windows XP ホットフィックス - KB888113
/ Windows XP / SP3: Windows XP ホットフィックス - KB888302
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB890046)
/ Windows XP / SP3: Windows XP ホットフィックス - KB890047
/ Windows XP / SP3: Windows XP ホットフィックス - KB890175
/ Windows XP / SP3: Windows XP ホットフィックス - KB890859
/ Windows XP / SP3: Windows XP ホットフィックス - KB890923
/ Windows XP / SP3: Windows XP ホットフィックス - KB891781
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB893066)
/ Windows XP / SP3: Windows XP ホットフィックス - KB893086
/ Windows XP / SP3: Windows XP ホットフィックス (KB893357)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB893756)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Windows XP 更新 (KB894391)
/ Windows XP / SP3: Windows XP ホットフィックス (KB896256)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB896358)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB896422)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB896423)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB896424)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB896428)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB896688)
/ Windows XP / SP3: Windows XP 更新 (KB896727)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB899587)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB899588)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB899589)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB899591)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB900725)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB901017)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB901190)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB901214)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB902400)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB903235)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB904706)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB905414)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB905749)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB905915)
/ Windows XP / SP3: Windows XP ホットフィックス (KB906569)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB908519)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB908531)
/ Windows XP / SP3: Windows XP ホットフィックス (KB910728)
/ Windows XP / SP3: Windows XP 更新 (KB911164)
/ Windows XP / SP3: Windows XP 更新 (KB911280)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB911562)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB911567)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB911927)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB912812)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB912919)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB913446)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB913580)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB914388)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB914389)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB916281)
/ Windows XP / SP3: Windows XP 更新 (KB916595)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB917159)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB917344)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB917422)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB917537)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB917953)
/ Windows XP / SP3: Windows XP ホットフィックス (KB918005)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB918439)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB918899)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB919007)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB920214)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB920670)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB920683)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB920685)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB921398)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB921883)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB922616)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB922819)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB923191)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB923414)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB924191)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB924496)
/ Windows XP / SP3: Windows XP セキュリティ更新 (KB925486)


--- Startup entries list ---
Located: HK_LM:Run,
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, Acrobat Assistant 7.0
command: "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
file: C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
size: 483328
MD5: 78FF388FD58CE0BAE1F7C9670F5473C1

Located: HK_LM:Run, AnyDVD
command: C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
file: C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
size: 456704
MD5: 9484F1A441E8FD33879872FADEE32478

Located: HK_LM:Run, ccApp
command: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
file: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 58728
MD5: B76FCE8AA8705A8A0DC240D83BD29AD4

Located: HK_LM:Run, HControl
command: C:\WINDOWS\ATK0100\HControl.exe
file: C:\WINDOWS\ATK0100\HControl.exe
size: 98304
MD5: B6911250D13DB8A90CBF218F9247BE79

Located: HK_LM:Run, igfxhkcmd
command: C:\WINDOWS\system32\hkcmd.exe
file: C:\WINDOWS\system32\hkcmd.exe
size: 77824
MD5: FBC32DBF9E460E9CAA516BBABB730925

Located: HK_LM:Run, igfxpers
command: C:\WINDOWS\system32\igfxpers.exe
file: C:\WINDOWS\system32\igfxpers.exe
size: 118784
MD5: F302148C7BD644206181E208E7C31447

Located: HK_LM:Run, igfxtray
command: C:\WINDOWS\system32\igfxtray.exe
file: C:\WINDOWS\system32\igfxtray.exe
size: 94208
MD5: FA680935110ECE1BF93E9AADEBDC865B

Located: HK_LM:Run, IMJPMIG8.1
command: "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
file: C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE
size: 208952
MD5: E5ADDA74EE7EDC5744E16F3E7B8B67A6

Located: HK_LM:Run, IMJPMIG9.0
command: C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMJP9\IMJPMIG.EXE /Preload /Migration32
file: C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMJP9\IMJPMIG.EXE
size: 118984
MD5: 81B579A27734C9642B37B882A9B4A43B

Located: HK_LM:Run, InCD
command: c:\Program Files\Nero\Nero 7\InCD\InCD.exe
file: c:\Program Files\Nero\Nero 7\InCD\InCD.exe
size: 1029632
MD5: 54DF2115FA96DD05E59190DB3C3946E9

Located: HK_LM:Run, PHIME2002A
command: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
file: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
size: 455168
MD5: 024DC0F68DF5FD6AE9DD82DFBAF479D6

Located: HK_LM:Run, PHIME2002ASync
command: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
file: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
size: 455168
MD5: 024DC0F68DF5FD6AE9DD82DFBAF479D6

Located: HK_LM:Run, SigmatelSysTrayApp
command: stsystra.exe
file: C:\WINDOWS\stsystra.exe
size: 282624
MD5: 0451BE661D4699E8C6A1851FB1BA3CAF

Located: HK_LM:Run, Symantec NetDriver Monitor
command: C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
file: C:\PROGRA~1\SYMNET~1\SNDMon.exe
size: 100056
MD5: EF717299B460F556A31B8C9CE35CBF15

Located: HK_LM:Run, SynTPEnh
command: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
file: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
size: 761945
MD5: EFC3319E5BC0FD6A992840E8EBD98BA3

Located: HK_LM:Run, ZoneAlarm Client
command: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
size: 919016
MD5: 29FF6100B7B3D4818B61119BBFAAE53A

Located: HK_LM:Run, Acrobat Assistant 7.0 (DISABLED)
command: "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
file: C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
size: 483328
MD5: 78FF388FD58CE0BAE1F7C9670F5473C1

Located: HK_LM:Run, GhostStartTrayApp (DISABLED)
command: C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
file: C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
size: 94208
MD5: 45725CE2A9BD68CF1526728FCFFCC24E

Located: HK_LM:Run, NeroFilterCheck (DISABLED)
command: c:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
file: c:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
size: 155648
MD5: C93AB037A8C792D5F8A1A9FC88A7C7C5

Located: HK_LM:Run, SCDEmuApp.exe (DISABLED)
command: C:\Program Files\PowerISO\SCDEmuApp.exe
file: C:\Program Files\PowerISO\SCDEmuApp.exe
size: 167936
MD5: 19C891540B6D72DB8A1C0853AD168F63

Located: HK_LM:Run, SunJavaUpdateSched (DISABLED)
command: "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
file: C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
size: 75520
MD5: EDF5D27C6D244740418903626DF5741A

Located: HK_CU:Run, ctfmon.exe
where: .DEFAULT...
command: ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 89B4C9E0A760204257CD09C8859667F7

Located: HK_CU:Run, ctfmon.exe
where: PE_C_ADMINISTRATOR...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 89B4C9E0A760204257CD09C8859667F7

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-19...
command: ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 89B4C9E0A760204257CD09C8859667F7

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-20...
command: ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 89B4C9E0A760204257CD09C8859667F7

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-2513411388-3846011740-3897771420-1005...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 89B4C9E0A760204257CD09C8859667F7

Located: HK_CU:Run, RSD_HDDThermo
where: S-1-5-21-2513411388-3846011740-3897771420-1005...
command: C:\Program Files\HDD Thermometer\HDD Thermometer.exe
file: C:\Program Files\HDD Thermometer\HDD Thermometer.exe
size: 215040
MD5: EBA0A7ED896DCEF64BDAA8584FFE1864

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-2513411388-3846011740-3897771420-1005...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 2097488
MD5: A9A5DB6AC3721BE698B996913693D73F

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-18...
command: ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 89B4C9E0A760204257CD09C8859667F7

Located: Startup (common), Adobe Acrobat Speed Launcher.lnk
where: C:\Documents and Settings\All Users\スタート メニュー\プログラム\スタートアップ...
command: C:\WINDOWS\Installer\{AC76BA86-1041-0000-7760-000000000002}\SC_Acrobat.exe
file: C:\WINDOWS\Installer\{AC76BA86-1041-0000-7760-000000000002}\SC_Acrobat.exe
size: 25214
MD5: D6294D59171AC375CD142003566AA89E

Located: Startup (common), Adobe Acrobat Speed Launcher.lnk (DISABLED)
where: C:\Documents and Settings\All Users\スタート メニュー\プログラム\スタートアップ...
command: C:\WINDOWS\Installer\{AC76BA86-1041-0000-7760-000000000002}\SC_Acrobat.exe
file: C:\WINDOWS\Installer\{AC76BA86-1041-0000-7760-000000000002}\SC_Acrobat.exe
size: 25214
MD5: D6294D59171AC375CD142003566AA89E

Located: Startup (common), Adobe Reader Speed Launch.lnk (DISABLED)
where: C:\Documents and Settings\All Users\スタート メニュー\プログラム\スタートアップ...
command: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
file: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
size: 29696
MD5: 43362B96870CE8649F4F2EC893DA93F0

Located: Startup (common), USB KeyPad.lnk
where: C:\Documents and Settings\All Users\スタート メニュー\プログラム\スタートアップ...
command: C:\WINDOWS\USBPad.exe
file: C:\WINDOWS\USBPad.exe
size: 400896
MD5: 8BC75CAC2766F123D4F811414CFC7976

Located: Startup (common), インフォメーションメニューランチャー.lnk (DISABLED)
where: C:\Documents and Settings\All Users\スタート メニュー\プログラム\スタートアップ...
command: C:\Program Files\Epson Direct\EdiLauncher\EdiLauncher.exe
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, igfxcui
command: igfxdev.dll
file: igfxdev.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

[user139]

--- Browser helper object list ---
--- ActiveX list ---
{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object)
DPF name:
CLSID name: CKAVWebScan Object
Installer: C:\WINDOWS\Downloaded Program Files\kavwebscan.inf
Codebase: http://www.kaspersky.com/kos/jp/part...an_unicode.cab
description:
classification: Legitimate
known filename:
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\
Long name: kavwebscan.dll
Short name: KAVWEB~1.DLL
Date (created): 2007/08/29 15:49:54
Date (last access): 2007/08/29 15:49:54
Date (last write): 2007/08/29 15:49:54
Filesize: 950272
Attributes: archive
MD5: BC915C49931CE46222F9B0A7EFB56CEE
CRC32: 11048171
Version: 5.0.98.0

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
DPF name: Java Runtime Environment 1.5.0
CLSID name: Java Plug-in 1.5.0_11
Installer:
Codebase: http://java.sun.com/update/1.5.0/jin...ndows-i586.cab
description:
classification: Legitimate
known filename: npjpi150_06.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Program Files\Java\jre1.5.0_11\bin\
Long name: NPJPI150_11.dll
Short name: NPJPI1~1.DLL
Date (created): 2006/12/15 3:09:16
Date (last access): 2070/12/15 3:23:24
Date (last write): 2006/12/15 3:23:26
Filesize: 75528
Attributes: archive
MD5: 3B3F6984DBF972DAFF1B7E9C44E2FE75
CRC32: 4BDE2041
Version: 5.0.110.3


--- Process list ---
PID: 0 ( 0) [System]
PID: 556 ( 4) \SystemRoot\System32\smss.exe
size: 50688
PID: 616 ( 556) \??\C:\WINDOWS\system32\csrss.exe
size: 6144
PID: 640 ( 556) \??\C:\WINDOWS\system32\winlogon.exe
size: 492544
PID: 684 ( 640) C:\WINDOWS\system32\services.exe
size: 108032
MD5: 4A606727565CA4CEAC654161E77385BC
PID: 696 ( 640) C:\WINDOWS\system32\lsass.exe
size: 13312
MD5: 989C8AC3DB69B0DEE3AAD06C264D4D04
PID: 860 ( 684) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 5ABA1C6A271424661500829458210602
PID: 916 ( 684) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 5ABA1C6A271424661500829458210602
PID: 984 ( 684) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: 5ABA1C6A271424661500829458210602
PID: 1040 ( 684) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 5ABA1C6A271424661500829458210602
PID: 1096 ( 684) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 5ABA1C6A271424661500829458210602
PID: 1108 ( 684) C:\WINDOWS\system32\ZoneLabs\vsmon.exe
size: 75304
MD5: 1495486C0C39013A98BDB149A3145751
PID: 1468 ( 684) C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
size: 181608
MD5: 76C495A19F694E18BCE9713B3587948E
PID: 1484 ( 684) C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
size: 206552
MD5: 5815052B868B96CAE6CE3D4C53E971EB
PID: 1500 ( 684) C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
size: 173160
MD5: 08FA56B7C13B4CBF0E5D351AECAD92B1
PID: 1580 ( 684) C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
size: 197992
MD5: CF1A0433BB97C839484DD359691DD521
PID: 1752 ( 684) C:\WINDOWS\system32\spoolsv.exe
size: 57856
MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
PID: 256 ( 684) C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
size: 100032
MD5: 7768CE75C5CBF0D8F441CE2BBD806B7F
PID: 280 ( 684) C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
size: 200704
MD5: BC9C77FAC763D84BFDF09B55D4B41AFA
PID: 376 ( 684) c:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
size: 806912
MD5: 8A0F0ECA521F20AC3890D372B3BFF78B
PID: 416 ( 684) C:\Program Files\Norton AntiVirus\navapsvc.exe
size: 177264
MD5: 8FC8458BCB585617AAC9E17A558D9155
PID: 1060 ( 684) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 5ABA1C6A271424661500829458210602
PID: 1156 ( 684) C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
size: 817304
MD5: 287136B3EA7D2FAB893B5CAE47E75EFD
PID: 1172 ( 684) C:\WINDOWS\system32\wdfmgr.exe
size: 38912
MD5: 49501C6BE752D5043ADA8667AC774F7A
PID: 2060 ( 684) C:\WINDOWS\System32\alg.exe
size: 44544
MD5: DD4B64CE5015DB417F970285820EBC30
PID: 2112 (1288) C:\WINDOWS\system32\igfxtray.exe
size: 94208
MD5: FA680935110ECE1BF93E9AADEBDC865B
PID: 2124 (1288) C:\WINDOWS\system32\hkcmd.exe
size: 77824
MD5: FBC32DBF9E460E9CAA516BBABB730925
PID: 2132 (1288) C:\WINDOWS\system32\igfxpers.exe
size: 118784
MD5: F302148C7BD644206181E208E7C31447
PID: 2140 (1288) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
size: 761945
MD5: EFC3319E5BC0FD6A992840E8EBD98BA3
PID: 2224 (1288) C:\WINDOWS\ATK0100\HControl.exe
size: 98304
MD5: B6911250D13DB8A90CBF218F9247BE79
PID: 2336 (1288) C:\WINDOWS\stsystra.exe
size: 282624
MD5: 0451BE661D4699E8C6A1851FB1BA3CAF
PID: 2368 (1288) C:\Program Files\Nero\Nero 7\InCD\InCD.exe
size: 1029632
MD5: 54DF2115FA96DD05E59190DB3C3946E9
PID: 2392 (1288) C:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 58728
MD5: B76FCE8AA8705A8A0DC240D83BD29AD4
PID: 2436 (1288) C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
size: 456704
MD5: 9484F1A441E8FD33879872FADEE32478
PID: 2600 (1288) C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
size: 483328
MD5: 78FF388FD58CE0BAE1F7C9670F5473C1
PID: 2648 (1288) C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
size: 919016
MD5: 29FF6100B7B3D4818B61119BBFAAE53A
PID: 2652 (2224) C:\WINDOWS\ATK0100\ATKOSD.exe
size: 2355200
MD5: 290EA9D9FBF9B0D13A3A7AC86A283E6B
PID: 2672 (1288) C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 89B4C9E0A760204257CD09C8859667F7
PID: 2700 (1288) C:\Program Files\HDD Thermometer\HDD Thermometer.exe
size: 215040
MD5: EBA0A7ED896DCEF64BDAA8584FFE1864
PID: 2776 (1288) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 2097488
MD5: A9A5DB6AC3721BE698B996913693D73F
PID: 2968 (1288) C:\WINDOWS\USBPad.exe
size: 400896
MD5: 8BC75CAC2766F123D4F811414CFC7976
PID: 4052 (1288) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 5146448
MD5: 2ECA8CDEED7C82F879E766DA92A3561A
PID: 3144 ( 640) C:\WINDOWS\explorer.exe
size: 1025536
MD5: B73547CDD8C9B79074E64DC268CBC0CD
PID: 4 ( 0) System


--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 2008/02/12 10:50:33

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir...ie&ar=iesearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
about:blank
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir...ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://epsondirect.infoseek.co.jp
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://www.microsoft.com/isapi/redir...ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm

--- Winsock Layered Service Provider list ---

[user139]

- Uninstall list -
(AddressBook)

Adobe Acrobat 7.0.9 Professional - Japanese 7.0.9 (Adobe Acrobat 7.0 Professional - Japanese)
version (major): 7
version (minor): 5
install date: 2007/12/15
install location: C:\Program Files\Adobe\Acrobat 7.0\
uninstall cmd: msiexec /I {AC76BA86-1041-0000-7760-000000000002}
publisher: Adobe Systems
contact: Customer Support
help link: http://www.adobe.co.jp/support/main.html
help telephone:
readme: C:\Program Files\Adobe\Acrobat 7.0\Readme.htm

AnyDVD (AnyDVD)
install location: C:\Program Files\SlySoft\AnyDVD
uninstall cmd: "C:\Program Files\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program Files\SlySoft\AnyDVD"
publisher: SlySoft

CCleaner (remove only) (CCleaner)
uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"

(Connection Manager)

(DirectAnimation)

(DirectDrawEx)

DivX Pro Codec (DivX Codec)
uninstall cmd: C:\WINDOWS\unvise32.exe C:\Program Files\DivX\DivX Pro Bundle.log

DVD Region-Free 3.22 (DVD Region-Free_is1)
uninstall cmd: "C:\Program Files\DVD Region-Free\unins000.exe"
publisher: Fengtao Software
help link: http://www.dvdidle.com/

(DXM_Runtime)

(Fontcore)

ATK0100 ACPI UTILITY (HControl)
uninstall cmd: C:\WINDOWS\ATK0100\XPunin.exe

HDD Thermometer 1.3 (HDD Thermometer)
uninstall cmd: C:\Program Files\HDD Thermometer\uninstall.exe
publisher: RSD Software Inc.

HexDump plug-in for Ad-Aware SE (HexDump plug-in for Ad-Aware SE)
uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\hexdump\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\hexdump\INSTALL.LOG
publisher: Lavasoft
help link: http://www.lavasoft.de

(ICW)

(IE40)

(IE4Data)

(IE5BAKEX)

(IEData)

(InCD!UninstallKey)
uninstall cmd: c:\WINDOWS\NuNInst.exe /UNINSTALL

Kaspersky Online Scanner 5.0 (Kaspersky Online Scanner)
install location: C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner
uninstall cmd: C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
publisher: Kaspersky Lab
contact: Customer Support Department
help link: http://support.kaspersky.com/helpdesk.html?LANG=en

(KB884016)

Security Update for Microsoft .NET Framework 2.0 (KB917283) 1 (KB917283.T1_1ToU93_1)
uninstall cmd: C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {967B098A-042D-4367-BAC9-8BC11684174F} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
publisher: Microsoft Corporation
help link: http://support.microsoft.com/kb/917283

Microsoft .NET Framework 2.0 用の Security Update (KB922770) 1 (KB922770.T1_1ToU168_1)
uninstall cmd: C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {0E92DD42-76F5-4EF2-B381-F9C1D72BE23D} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
publisher: Microsoft Corporation
help link: http://support.microsoft.com/kb/922770

K-Lite Codec Pack 2.76 Standard 2.76 (KLiteCodecPack_is1)
install location: C:\Program Files\K-Lite Codec Pack\
uninstall cmd: "C:\Program Files\K-Lite Codec Pack\unins000.exe"

LiveReg (Symantec Corporation) 3.0.0 (LiveReg)
install location: C:\Program Files\Common Files\Symantec Shared\LiveReg
uninstall cmd: C:\Program Files\Common Files\Symantec Shared\LiveReg\VCSetup.exe /REMOVE
publisher: Symantec Corporation

LiveUpdate 3.0 (Symantec Corporation) 3.0.0.171 (LiveUpdate)
install location: "C:\Program Files\Symantec\LiveUpdate"
uninstall cmd: "C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
publisher: Symantec Corporation

LSP Explorer plug-in for Ad-Aware SE (LSP Explorer plug-in for Ad-Aware SE)
uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\LSPEXP~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\LSPEXP~1\INSTALL.LOG
publisher: Lavasoft
help link: http://www.lavasoft.de

Microsoft .NET Framework 2.0 (Microsoft .NET Framework 2.0)
install location: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\
uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
publisher: Microsoft Corporation
help link: http://go.microsoft.com/fwlink/?LinkId=45396

(Microsoft Interactive Training)
uninstall cmd: C:\WINDOWS\IsUn0411.exe -fC:\WINDOWS\orun32.isu

(MobileOptionPack)

(MPlayer2)

(MSI30-Beta1)

(MSI30-Beta2)

(MSI30-KB884016)

(MSI30-RC1)

(MSI30-RC2)

(MSI30a-KB884016)

(MSI31-Beta)

(MSI31-RC1)

(Nero - Burning Rom!UninstallKey)
uninstall cmd: c:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL

(NeroBackItUp!UninstallKey)
uninstall cmd: c:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL

(NeroMediaHome!UninstallKey)
uninstall cmd: c:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL

(NeroRecode!UninstallKey)
uninstall cmd: c:\WINDOWS\UNRecode.exe /UNINSTALL

(NeroShowTime!UninstallKey)
uninstall cmd: c:\WINDOWS\UNNeroShowTime.exe /UNINSTALL

(NeroVision!UninstallKey)
uninstall cmd: c:\WINDOWS\UNNeroVision.exe /UNINSTALL

(NetMeeting)

(OutlookExpress)

(PCHealth)
uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

PowerISO (PowerISO)
uninstall cmd: "C:\Program Files\PowerISO\uninstall.exe"

QuickTime Alternative 1.76 1.76 (QuicktimeAlt_is1)
install location: C:\Program Files\QuickTime Alternative\
uninstall cmd: "C:\Program Files\QuickTime Alternative\unins000.exe"

Real Alternative 1.35 1.35 (RealAlt_is1)
install location: C:\Program Files\Real Alternative\
uninstall cmd: "C:\Program Files\Real Alternative\unins000.exe"

(SchedulingAgent)

(Sevinst)

(ShockwaveFlash)

Spybot - Search & Destroy 1.5.2.20 (Spybot - Search & Destroy_is1)
install date: 20080208
uninstall cmd: "C:\WINDOWS\unins000.exe"
publisher: Safer Networking Ltd.
help link: http://www.safer-networking.org/

Norton AntiVirus 2005 (Symantec Corporation) 11.0.1 (SymSetup.{C6F5B6CF-609C-428E-876F-CA83176C021B})
install location: C:\Program Files\Norton AntiVirus
install source: F:\Norton2005+Keygen - installed on Asus\Setup
uninstall cmd: C:\Program Files\Common Files\Symantec Shared\SymSetup\{C6F5B6CF-609C-428E-876F-CA83176C021B}.exe /X
publisher: Symantec Corporation

Synaptics Pointing Device Driver 8.2.0.0 (SynTPDeinstKey)
uninstall cmd: rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
publisher: Synaptics

USB KeyPad (USB KeyPad)
uninstall cmd: C:\WINDOWS\ISUN0411.EXE -f"C:\WINDOWS\USB KeyPad\uninst.isu" -c"C:\WINDOWS\USB KeyPad\UnInst.dll"

Viewpoint Media Player (ViewpointMediaPlayer)
uninstall cmd: C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u

Windows Genuine Advantage Validation Tool (WGA)
install date: 20060908
publisher: Microsoft Corporation
help link: http://www.microsoft.com/genuine

Windows Media Format Runtime (Windows Media Format Runtime)
uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

Windows Media Player 10 (Windows Media Player)
uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

WinRAR archiver (WinRAR archiver)
uninstall cmd: C:\Program Files\WinRAR\uninstall.exe

ZoneAlarm 7.0.462.000 (ZoneAlarm)
uninstall cmd: C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe
publisher: Check Point, Inc
help link: C:\Program Files\Zone Labs\ZoneAlarm\Help\zaclients.chm

Symantec 11.0.1 ({228F6876-A313-40A3-91C0-C3CBE6997D09})
version: 184549377
version (major): 11
estimated size: 2956
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\Support\MSRedist\
uninstall cmd: MsiExec.exe /I{228F6876-A313-40A3-91C0-C3CBE6997D09}
publisher: Symantec Corp

Internet Worm Protection 11.0.1 ({2908F0CB-C1D4-447F-97A2-CFC135C9F8D4})
version: 184549377
version (major): 11
estimated size: 11241
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\NAV\
uninstall cmd: MsiExec.exe /I{2908F0CB-C1D4-447F-97A2-CFC135C9F8D4}
publisher: Symantec Corp

SymNet 5.4.0 ({2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2})
version: 84148224
version (major): 5
version (minor): 4
estimated size: 2692
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\Support\SymNet\
uninstall cmd: MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
publisher: Symantec Corporation

J2SE Runtime Environment 5.0 Update 8 1.5.0.80 ({3248F0A8-6813-11D6-A77B-00B0D0150080})
version: 17104896
version (major): 1
version (minor): 5
estimated size: 156485
install date: 20060908
install source: C:\Documents and Settings\Administrator\Local Settings\Application Data\Sun\Java\jre1.5.0_08\
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150080}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Program Files\Java\jre1.5.0_08\README.txt

J2SE Runtime Environment 5.0 Update 11 1.5.0.110 ({3248F0A8-6813-11D6-A77B-00B0D0150110})
version: 17104896
version (major): 1
version (minor): 5
estimated size: 149554
install date: 20070211
install source: http://javadl.sun.com/webapps/downlo...windows-i586//
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Program Files\Java\jre1.5.0_11\README.txt

Norton AntiVirus Help 11.00.00 ({34EEB1F5-E939-40A1-A6BA-957282A4B2C8})
version: 184549376
version (major): 11
estimated size: 892
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\Support\Help\
uninstall cmd: MsiExec.exe /I{34EEB1F5-E939-40A1-A6BA-957282A4B2C8}
publisher: Symantec Corp.

WebFldrs XP 9.50.7523 ({350C97B1-3D7C-4EE8-BAA9-00BCB3D54227})
version: 154279267
version (major): 9
version (minor): 50
estimated size: 2616
install date: 20060907
install source: C:\WINDOWS\system32\
publisher: Microsoft Corporation
help link: http://www.microsoft.com/windows

やよいの青色申告 08 導入アドバイザー 1.0.1 ({46928875-A37C-4801-99B5-F81538001BB4})
install location: C:\Program Files\Yayoi\Adviser\Kaikei6B
uninstall cmd: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{46928875-A37C-4801-99B5-F81538001BB4}\Setup.exe" -l0x11
publisher: 弥生株式会社

Nero 7 Essentials 7.02.0610 ({4A7189BA-8E75-49D6-99EE-26ECC68F1041})
version: 117572194
version (major): 7
version (minor): 2
estimated size: 518676
install date: 20061124
install location: c:\Program Files\Nero\Nero 7\
install source: c:\sysprep\data\Nero7ES\Installation\
uninstall cmd: MsiExec.exe /I{4A7189BA-8E75-49D6-99EE-26ECC68F1041}
publisher: Nero AG
comments: Nero AG
contact: techsupport@nero.com
help link: http://www.nero.com/

Norton Ghost 76.00.775 ({6975E810-C92F-45F0-0BFD-187B312F10E8})
version: 1275069191
version (major): 76
estimated size: 60977
install date: 20061128
install source: E:\Norton Ghost 2003\
uninstall cmd: MsiExec.exe /I{6975E810-C92F-45F0-0BFD-187B312F10E8}
publisher: Symantec
help link: http://www.symantec.com
help telephone: 555-555-1234
readme: C:\Program Files\Symantec\Norton Ghost 2003\readme.txt

Microsoft .NET Framework 2.0 2.0.50727 ({7131646D-CD3C-40F4-97B9-CD9E4E6262EF})
version: 33605159
version (major): 2
estimated size: 218792
install date: 20061124
install source: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\
publisher: Microsoft Corporation

SPBBC 1.00.0000 ({77772678-817F-4401-9301-ED1D01A8DA56})
version: 16777216
version (major): 1
estimated size: 1423
install date: 20061128
install location: C:\Program Files\Norton AntiVirus\
install source: F:\Norton2005+Keygen - installed on Asus\Setup\Support\SPBBC\
uninstall cmd: MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
publisher: Your Company Name

リカバリﾂｰﾙ 1.00.000 ({783A6648-A7B1-46F6-B4DE-BB1D70283903})
version: 16777216
install location: C:\Program Files\エプソンダイレクト株式会社\リカバリﾂｰﾙ
uninstall cmd: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{783A6648-A7B1-46F6-B4DE-BB1D70283903}\setup.exe" -l0x11

Ad-Aware SE Personal 1.0.6 ({78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747})
version: 16777222
version (major): 1
estimated size: 3045
install date: 20070217
install source: C:\Program Files\Common Files\Wise Installation Wizard\
uninstall cmd: MsiExec.exe /X{78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747}
publisher: Lavasoft AB
help link: http://www.lavasoftsupport.com

Intel(R) Graphics Media Accelerator Driver 6.14.10.4497 ({8A708DD8-A5E6-11D4-A706-000629E95E20})
uninstall cmd: RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_27A6 PCI\VEN_8086&DEV_27A2

Microsoft Office Personal Edition 2003 11.0.7969.0 ({90330411-6000-11D3-8CFE-0150048383C9})
version: 184557345
version (major): 11
estimated size: 340197
install date: 20070720
install source: E:\
uninstall cmd: MsiExec.exe /I{90330411-6000-11D3-8CFE-0150048383C9}
publisher: Microsoft Corporation
help link: http://www.microsoft.com/support
readme: C:\Program Files\Microsoft Office\OFFICE11\1041\OFREADME.HTM

InterVideo WinDVD 5.0-B11.724 ({91810AFC-A4F8-4EBA-A5AA-B198BBC81144})
version (major): 5
install location: C:\Program Files\InterVideo\WinDVD
uninstall cmd: "C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
publisher: InterVideo Inc.
contact: support@intervideo.com
help link: http://www.intervideo.com/jsp/Support.jsp

REALTEK Gigabit and Fast Ethernet NIC Driver 1.60 ({94FB906A-CF42-4128-A509-D353026A607E})
install location: C:\Program Files\REALTEK Semiconductor Corporation\REALTEK Gigabit and Fast Ethernet NIC Driver
uninstall cmd: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94FB906A-CF42-4128-A509-D353026A607E}\setup.exe" -l0x11 REMOVE
publisher: REALTEK Semiconductor Corp.
comments: REALTEK Gigabit/Fast Ethernet NIC Driver Installation Utility
contact: nicfae@realtek.com.tw
help link: www.realtek.com.tw

SigmaTel Audio 5.10.4700.0 ({A462213D-EED4-42C2-9A60-7BDD4D4B0B17})
version: 84546140
install date: 20060908
install location: C:\Program Files\SigmaTel\C-Major Audio
install source: D:\DriverSet\Audio\SigmaTel\
uninstall cmd: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}\setup.exe" -l0x11 -remove -removeonly
publisher: SigmaTel

Adobe Acrobat 7.0 Professional - Japanese 7.0.9 ({AC76BA86-1041-0000-7760-000000000002})
version: 117440521
version (major): 7
estimated size: 2352389
install date: 20071215
install source: E:\Adobe Acrobat 7.0 Professional\
publisher: Adobe Systems
comments:
contact: カスタマーサポート
help link: http://www.adobe.co.jp/support/main.html
help telephone:
readme: C:\Program Files\Adobe\Acrobat 7.0\Readme.htm

Adobe Reader 7.0.8 - Japanese 7.0.8 ({AC76BA86-7AD7-1041-7B44-A70800000002})
version: 117440520
version (major): 7
estimated size: 78356
install date: 20060908
install location: C:\Program Files\Adobe\Acrobat 7.0\Reader\
install source: C:\Program Files\Adobe\Acrobat 7.0\Setup Files\RdrBig708\JPN\
uninstall cmd: MsiExec.exe /I{AC76BA86-7AD7-1041-7B44-A70800000002}
publisher: Adobe Systems Incorporated
comments:
contact:
help link: http://www.adobe.co.jp/support/main.html
help telephone:
readme: C:\Program Files\Adobe\Acrobat 7.0\Reader\Readme.htm

Microsoft .NET Framework 1.1 Japanese Language Pack 1.1.4322 ({AD0DDEC6-4798-4DE5-87DC-4367D694ED06})
version: 16847074
version (major): 1
version (minor): 1
estimated size: 3150
install date: 20070123
install source: C:\DOCUME~1\ME\LOCALS~1\Temp\IXP000.TMP\
uninstall cmd: MsiExec.exe /X{AD0DDEC6-4798-4DE5-87DC-4367D694ED06}
publisher: Microsoft
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1041\RepairRedist.htm

Spybot - Search & Destroy 1.5.2 ({B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1)
install date: 20080208
install location: C:\Program Files\Spybot - Search & Destroy\
uninstall cmd: "C:\Program Files\Spybot - Search & Destroy\unins001.exe"
publisher: Safer Networking Limited
help link: http://www.safer-networking.org/index.php?page=support

携快電話11 11.06.0068 ({BC6CACDD-0E68-4A93-B8A9-8B4A502172FE})
version: 184942660
version (major): 11
version (minor): 6
estimated size: 61357
install date: 20070123
install source: C:\WINDOWS\Downloaded Installations\{6AEFA972-1FE4-47E4-85C9-F7A161786D4E}\
uninstall cmd: MsiExec.exe /X{BC6CACDD-0E68-4A93-B8A9-8B4A502172FE}
publisher: ソースネクスト株式会社
comments: ソースネクスト携快電話
help link: http://www.sourcenext.com/products/kei11/

Norton AntiVirus 2005 11.0.1 ({C6F5B6CF-609C-428E-876F-CA83176C021B})
version: 184549377
version (major): 11
estimated size: 58628
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\NAV\
uninstall cmd: MsiExec.exe /X{C6F5B6CF-609C-428E-876F-CA83176C021B}
publisher: Symantec Corporation

やよいの青色申告 08 14.0.1 ({C83BF402-8DBE-4718-8218-B03F5827FDD0})
install location: C:\Program Files\Yayoi\Kaikei6
uninstall cmd: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C83BF402-8DBE-4718-8218-B03F5827FDD0}\Setup.exe" -l0x11
publisher: 弥生株式会社

Symantec Network Drivers Update 5.5.6.604 ({CA0A1E54-CE0F-4366-B09C-A87B61DC5633})
version: 84213766
version (major): 5
version (minor): 5
estimated size: 4398
install date: 20070421
install source: C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec\LIVEUP~1\DOWNLO~1\Updt652\
publisher: Symantec Corporation

Microsoft .NET Framework 1.1 1.1.4322 ({CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1})
version: 16847074
version (major): 1
version (minor): 1
estimated size: 35956
install date: 20070123
install source: C:\DOCUME~1\ME\LOCALS~1\Temp\IXP000.TMP\
uninstall cmd: MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
publisher: Microsoft
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm

Norton AntiVirus SYMLT MSI 11.0.1 ({D1FF75E7-DD42-4CFD-B052-20B3FFF4EDB8})
version: 184549377
version (major): 11
estimated size: 1159
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\NAV\
uninstall cmd: MsiExec.exe /I{D1FF75E7-DD42-4CFD-B052-20B3FFF4EDB8}
publisher: Symantec Corp.

[user139]

Norton AntiVirus SYMLT MSI 11.0.1 ({D1FF75E7-DD42-4CFD-B052-20B3FFF4EDB8})
version: 184549377
version (major): 11
estimated size: 1159
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\NAV\
uninstall cmd: MsiExec.exe /I{D1FF75E7-DD42-4CFD-B052-20B3FFF4EDB8}
publisher: Symantec Corp.

Symantec Script Blocking Installer 11.0.1 ({D327AFC9-7BAA-473A-8319-6EB7A0D40138})
version: 184549377
version (major): 11
estimated size: 477
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\Support\ScrBlock\
uninstall cmd: MsiExec.exe /I{D327AFC9-7BAA-473A-8319-6EB7A0D40138}
publisher: Symantec

ccCommon 103.0.1.26 ({DC367608-64A7-4BF7-92F4-8BAA25BA02DB})
version: 1728053249
version (major): 103
estimated size: 5682
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\Support\ccCommon\
uninstall cmd: MsiExec.exe /I{DC367608-64A7-4BF7-92F4-8BAA25BA02DB}
publisher: Symantec

2.15.00 ({DD4F051C-1A2B-4A91-B187-B093C597418C})
version: 34537472
install location: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\{6867AC40-192E-472D-AEBB-2ACD5C31048F}\{DD4F051C-1A2B-4A91-B187-B093C597418C}\
uninstall cmd: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DD4F051C-1A2B-4A91-B187-B093C597418C}\setup.exe" -l0x11 anything

Norton AntiVirus Parent MSI 11.0.1 ({E5EE9939-259F-4DE2-8023-5C49E16A4F43})
version: 184549377
version (major): 11
estimated size: 661
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\NAV\
uninstall cmd: MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
publisher: Symantec Corp.

SOURCENEXT 携快電話 USBドライバー 1.00.0008 ({F3F71843-8BFE-4B48-9A0C-B369BE6BEBE7})
version: 16777224
version (major): 1
estimated size: 200
install date: 20070123
install source: C:\DOCUME~1\ME\LOCALS~1\Temp\_is2D\
uninstall cmd: MsiExec.exe /X{F3F71843-8BFE-4B48-9A0C-B369BE6BEBE7}
publisher: ソースネクスト株式会社
comments: ソースネクスト携快電話
contact: ｶｽﾀﾏ ｻﾎﾟｰﾄ部
help link: http://www.sourcenext.com/keikai

Norton WMI Update 2005.1.0.111 ({F64306A5-4C32-41bb-B153-53986527FAB4})
version (major): 2005
version (minor): 1
estimated size: 613
install date: 20061128
install source: F:\Norton2005+Keygen - installed on Asus\Setup\Support\SymSC\
uninstall cmd: MsiExec.exe /X{F64306A5-4C32-41bb-B153-53986527FAB4}
publisher: Symantec Corporation



--- System Services ---
Service (registry key): .NET CLR Data
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): .NET CLR Networking
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): .NET Data Provider for Oracle
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): .NET Data Provider for SqlServer
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): .NETFramework
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): Abiosdsk
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 0

Service (registry key): abp480n5
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): ACPI
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft ACPI Driver
Image path: system32\DRIVERS\ACPI.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): ACPIEC
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Embedded Controller Driver
Image path: system32\DRIVERS\ACPIEC.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): Adobe LM Service
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Adobe LM Service
Description: AdobeLM Service
Object name: LocalSystem
Image path: "C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"
Image size: 69632
Image MD5: 6D182C31ACF16213407F2768F1107FE3
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1

Service (registry key): adpu160m
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): aec
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel Acoustic Echo Canceller
Image path: system32\drivers\aec.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): AFD
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: AFD
Description: AFD ネットワーク サポート環境
Image path: \SystemRoot\System32\drivers\afd.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): Aha154x
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): aic78u2
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): aic78xx
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Alerter
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Alerter
Description: 選択したユーザーとコンピュータに管理警告を通知します。サービスが停止している場合は、管理警告を使用するプログラムは警告を受信しません。このサービスが無効になっている場合は、このサービスに明示的に依存するサービスは何も開始できなくなります。
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\system32\svchost.exe -k LocalService
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation

Service (registry key): ALG
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Application Layer Gateway Service
Description: インターネット接続の共有および Windows ファイアウォールのための、サード パーティのプロトコルのプラグインのサポートを提供します。
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\alg.exe
Image size: 44544
Image MD5: DD4B64CE5015DB417F970285820EBC30
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1

Service (registry key): AliIde
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): amsint
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): AnyDVD
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: AnyDVD
Image path: System32\Drivers\AnyDVD.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): AppMgmt
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Application Management
Description: 割り当て、公開、削除などのソフトウェアのインストール サービスを供給します。
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1

Service (registry key): Arp1394
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: 1394 ARP Client プロトコル
Description: 1394 ARP Client プロトコル
Image path: system32\DRIVERS\arp1394.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): asc
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): asc3350p
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): asc3550
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): ASP.NET
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): ASP.NET_1.1.4322
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): ASP.NET_2.0.50727
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): Aspi32
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 2
Type: 1
Error Control: 1

Service (registry key): aspnet_state
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ASP.NET State Service
Description: Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
Image size: 29896
Image MD5: D33C507942299753868204CC7642FA27
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1

Service (registry key): AsyncMac
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: RAS Asynchronous Media Driver
Description: RAS Asynchronous Media Driver
Image path: system32\DRIVERS\asyncmac.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): atapi
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: 標準 IDE/ESDI ハード ディスク コントローラ
Image path: system32\DRIVERS\atapi.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): Atdisk
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 0

Service (registry key): Atmarpc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ATM ARP クライアント プロトコル
Description: ATM ARP クライアント プロトコル
Image path: system32\DRIVERS\atmarpc.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): AudioSrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Audio
Description: Windows ベース プログラムのオーディオ デバイスを管理します。このサービスが停止されている場合は、オーディオ デバイスとオーディオ効果は正しく機能しません。このサービスが無効な場合は、明示的にこのサービスに依存しているすべてのサービスを開始できません。
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: PlugPlay,RpcSs

Service (registry key): audstub
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: オーディオ スタブ ドライバ
Image path: system32\DRIVERS\audstub.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Automatic LiveUpdate Scheduler
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Automatic LiveUpdate Scheduler
Description: Manages the scheduling of Automatic LiveUpdate sessions
Object name: LocalSystem
Image path: "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"
Image size: 100032
Image MD5: 7768CE75C5CBF0D8F441CE2BBD806B7F
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 1
Depends On services: RPCSS

Service (registry key): BattC
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): Beep
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

[user139]

Service (registry key): BITS
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Background Intelligent Transfer Service
Description: バックグラウンドでクライアントとサーバー間のデータを転送します。BITS を無効にすると、Windows Update などの機能が正しく動作しなくなります。
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): Browser
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Computer Browser
Description: ネットワーク上のコンピュータの最新の一覧を管理し、その参照者として指定されたコンピュータに一覧を提供します。このサービスが停止している場合は、一覧は更新も維持もされません。このサービスが無効になっている場合は、このサービスに明示的に依存するサービスは何も開始できなくなります。
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,LanmanServer

Service (registry key): BUFADPT
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: BUFADPT
Image path: \??\C:\WINDOWS\system32\BUFADPT.SYS
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): CBBCM43
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: BUFFALO WLI-CB-XXX Series Wireless LAN Adapter
Image path: system32\DRIVERS\CBG54.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): cbidf2k
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): ccEvtMgr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Symantec Event Manager
Description: Symantec Event Manager
Object name: LocalSystem
Image path: "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
Image size: 197992
Image MD5: CF1A0433BB97C839484DD359691DD521
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 0
Depends On services: RPCSS,ccSetMgr

Service (registry key): ccPwdSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Symantec Password Validation
Description: Symantec Password Validation Service
Object name: LocalSystem
Image path: "C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"
Image size: 79208
Image MD5: F6394A17866C8E553874DE5EFF3F3679
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 0

Service (registry key): ccSetMgr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Symantec Settings Manager
Description: Symantec Settings Manager
Object name: LocalSystem
Image path: "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
Image size: 181608
Image MD5: 76C495A19F694E18BCE9713B3587948E
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 0
Depends On services: RPCSS

Service (registry key): cd20xrnt
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Cdaudio
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): Cdfs
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 2
Error Control: 1
Depends On group: "SCSI CDROM Class"

Service (registry key): Cdrom
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: CD-ROM ドライバ
Image path: system32\DRIVERS\cdrom.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1
Depends On group: "SCSI miniport"

Service (registry key): Changer
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): CiSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Indexing Service
Description: ローカル コンピュータとリモート コンピュータ上のファイルのコンテンツとプロパティにインデックスを付けます。クエリ言語を使用するので、ファイルへ急速にアクセスできます。
Object name: LocalSystem
Image path: %SystemRoot%\system32\cisvc.exe
Image size: 5632
Image MD5: D81D87E5170CE8A99DC55DD519ED2FB0
Control Set: CurrentControlSet
Start: 4
Type: 288
Error Control: 1
Depends On services: RPCSS

Service (registry key): ClipSrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ClipBook
Description: クリップブックを使って情報を保管し、リモート コンピュータと共有することができます。サービスが停止された場合は、リモート コンピュータと情報を共有できなくなります。このサービスが無効になった場合は、このサービスに明示的に依存しているサービスはすべて開始できなくなります。
Object name: LocalSystem
Image path: %SystemRoot%\system32\clipsrv.exe
Image size: 33280
Image MD5: 16306C949CC9AD4379E4CDFEAE64D216
Control Set: CurrentControlSet
Start: 4
Type: 16
Error Control: 1
Depends On services: NetDDE

Service (registry key): clr_optimization_v2.0.50727_32
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: .NET Runtime Optimization Service v2.0.50727_X86
Description: Microsoft .NET Framework NGEN
Object name: LocalSystem
Image path: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Image size: 66240
Image MD5: 3C4D595E7F9B747325AEF28B4ADCAAE5
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 0

Service (registry key): CmBatt
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft AC Adapter Driver
Image path: system32\DRIVERS\CmBatt.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): CmdIde
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Compbatt
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Composite Battery Driver
Image path: system32\DRIVERS\compbatt.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): COMSysApp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: COM+ System Application
Description: コンポーネント オブジェクト モデル (COM)+ ベース コンポーネントの構成と追跡を管理します。サービスが停止すると、COM+ ベース コンポーネントは正しく機能しません。サービスが無効になると、このサービスに依存するサービスは開始できなくなります。
Object name: LocalSystem
Image path: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Image size: 5120
Image MD5: 75C96F730E07B82519F7BE109BC50719
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1
Depends On services: rpcss

Service (registry key): ContentFilter
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): ContentIndex
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): Cpqarray
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): CryptSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Cryptographic Services
Description: 提供される管理サービスは、次の 3 つです。カタログ データベース サービス: Windows ファイルの署名を確認します。保護ルート サービス: 信頼されたルート証明機関の証明書をこのコンピュータに追加および削除します。キー サービス: 証明書用このコンピュータに登録します。このサービスが無効な場合は、明示的にこれに依存しているサービスを開始できません。
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): dac2w2k
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 0

Service (registry key): dac960nt
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): DcomLaunch
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: DCOM Server Process Launcher
Description: DCOM サービスを起動する機能を提供します。
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost -k DcomLaunch
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): Dhcp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: DHCP Client
Description: IP アドレスと DNS 名を登録および更新してネットワーク構成を管理します。
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: Tcpip,Afd,NetBT

Service (registry key): Disk
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ディスク ドライバ
Image path: system32\DRIVERS\disk.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1
Depends On group: "SCSI miniport"

Service (registry key): dmadmin
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Logical Disk Manager Administrative Service
Description: ハード ディスク ドライブとボリュームを構成します。サービスはプロセスの構成のためだけに実行され、停止されます。
Object name: LocalSystem
Image path: %SystemRoot%\System32\dmadmin.exe /com
Image size: 224256
Image MD5: FF8A44173F739E370F674685C57E8ADF
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay,DmServer

Service (registry key): dmboot
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: System32\drivers\dmboot.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): dmio
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: 論理ディスク マネージャ ドライバ
Image path: System32\drivers\dmio.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): dmload
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: System32\drivers\dmload.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): dmserver
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Logical Disk Manager
Description: 新しいハード ディスク ドライブを検出、監視し、構成のためのディスク ボリューム情報を論理ディスク マネージャ管理サービスに送信します。このサービスが停止している場合は、ダイナミック ディスクの状態と構成情報が最新ではなくなることがあります。このサービスが無効な場合は、明示的にこれに依存しているサービスを開始できません。
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay

Service (registry key): DMusic
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel DLS Syntheiszer
Image path: system32\drivers\DMusic.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Dnscache
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: DNS Client
Description: このコンピュータのドメイン ネーム システム (DNS) 名を解決およびキャッシュします。このサービスが停止した場合、このコンピュータは DNS 名を解決できず、Active Directory ドメイン コントローラーを見つけることができなくなります。このサービスが使用不可にされた場合、このサービスに明示的に依存するサービスはすべて起動できなくなります。
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\system32\svchost.exe -k NetworkService
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: Tcpip

Service (registry key): dpti2o
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): drmkaud
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel DRM Audio Descrambler
Image path: system32\drivers\drmkaud.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): ElbyCDIO
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ElbyCDIO Driver
Image path: System32\Drivers\ElbyCDIO.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 2
Type: 1
Error Control: 1

Service (registry key): ERSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Error Reporting Service
Description: 標準ではない環境で実行しているサービスやアプリケーションのエラー報告を可能にします。
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 4
Type: 32
Error Control: 0
Depends On services: RpcSs

Service (registry key): Eventlog
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Event Log
Description: Windows ベースのプログラムと Windows コンポーネントによって発行されるイベント ログ メッセージをイベント ビューアで表示します。このサービスは停止できません。
Object name: LocalSystem
Image path: %SystemRoot%\system32\services.exe
Image size: 108032
Image MD5: 4A606727565CA4CEAC654161E77385BC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): EventSystem
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: COM+ Event System
Description: サポート システム イベント通知サービス (SENS) は、イベント通知先として登録された COM コンポーネントにイベントを自動的に通知します。サービスが停止すると、SENS は終了し、ログオンやログオフを通知できなくなります。このサービスが無効な場合、このサービスに依存するサービスは開始できません。
Object name: LocalSystem
Image path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RPCSS

Service (registry key): Fastfat
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 2
Error Control: 1

Service (registry key): FastUserSwitchingCompatibility
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Fast User Switching Compatibility
Description: 複数ユーザーの環境でアシスタンスが必要なアプリケーションの管理を提供します。
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: TermService

Service (registry key): Fdc
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): Fips
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): Flpydisk
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): FltMgr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: FltMgr
Description: ファイル システム フィルタ マネージャ ドライバ
Image path: system32\DRIVERS\fltMgr.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 2
Error Control: 1

Service (registry key): FsVga
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: system32\DRIVERS\fsvga.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): Fs_Rec
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 8
Error Control: 0

Service (registry key): Ftdisk
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ボリューム マネージャ ドライバ
Image path: system32\DRIVERS\ftdisk.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): GhostStartService
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: GhostStartService
Description: Background service to allow Norton Ghost to perform priviledged operations
Object name: LocalSystem
Image path: C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
Image size: 200704
Image MD5: BC9C77FAC763D84BFDF09B55D4B41AFA
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 1
Depends On services: RPCSS

Service (registry key): GhPciScan
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: GhostPciScanner
Image path: \??\C:\Program Files\Symantec\Norton Ghost 2003\ghpciscan.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): Gpc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Generic Packet Classifier
Description: Generic Packet Classifier
Image path: system32\DRIVERS\msgpc.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): HDAudBus
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft UAA バス ドライバ (High Definition Audio 用)
Image path: system32\DRIVERS\HDAudBus.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

[user139]

Service (registry key): helpsvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Help and Support
Description: ヘルプとサポート センターを有効にし、このコンピュータで実行するようにします。このサービスを停止すると、ヘルプとサポート センターを利用することはできなくなります。このサービスを無効にすると、このサービスに明示的に依存するサービスは開始しません。
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RPCSS

Service (registry key): HidServ
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: HID Input Service
Description: ヒューマン インターフェイス デバイス (HID) を有効にします。ヒューマン インターフェイス デバイスは、キーボード、リモート制御、およびマルチ デバイスにあらかじめ定義されているホット ボタンの使用を有効にして、保守します。このサービスが停止されている場合、このサービスによって制御されているホット ボタンは機能しなくなります。このサービスが無効な場合は、明示的にこれに依存しているサービスを開始できません。
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): HidUsb
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft HID Class Driver
Image path: system32\DRIVERS\hidusb.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): hpn
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): HTTP
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: HTTP
Description: このサービスは、hypertext transfer protocol (HTTP) を実装します。このサービスが無効な場合は、明示的にこれに依存しているサービスを開始できません。
Image path: System32\Drivers\HTTP.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): HTTPFilter
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: HTTP SSL
Description: このサービスは、Secure Socket Layer (SSL) を使って HTTP サービスのために secure hypertext transfer protocol (HTTPS) を実装します。このサービスが無効な場合は、明示的にこれに依存しているサービスを開始できません。
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k HTTPFilter
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: HTTP

Service (registry key): i2omgmt
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): i2omp
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): i8042prt
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: i8042 キーボードと PS/2 マウス ポート ドライバ
Image path: system32\DRIVERS\i8042prt.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): ialm
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: system32\DRIVERS\ialmnt5.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): IFXTPM
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IFXTPM
Image path: system32\DRIVERS\IFXTPM.SYS
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Imapi
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: 書き込みフィルタ ドライバ
Image path: system32\DRIVERS\imapi.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): ImapiService
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IMAPI CD-Burning COM Service
Description: IMAPI (Image Mastering Applications Programming Interface) を使用する CD 記録を管理します。このサービスを停止すると、このコンピュータで CD に記録することができなくなります。このサービスを無効にすると、このサービスに明示的に依存するサービスは開始しません。
Object name: LocalSystem
Image path: C:\WINDOWS\system32\imapi.exe
Image size: 150016
Image MD5: DF05892CD6D608AD50717C6D4C8E88AA
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 1

Service (registry key): InCDfs
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: InCD File System
Image path: system32\drivers\InCDFs.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 4
Type: 2
Error Control: 1

Service (registry key): InCDPass
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: InCDPass
Image path: system32\drivers\InCDPass.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): InCDrec
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 8
Error Control: 1

Service (registry key): incdrm
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: InCD Reader
Image path: system32\drivers\InCDRm.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): InCDsrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: InCD Helper
Description: Helper service for the InCD filesystem driver
Object name: LocalSystem
Image path: c:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
Image size: 806912
Image MD5: 8A0F0ECA521F20AC3890D372B3BFF78B
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 1

Service (registry key): inetaccs
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): ini910u
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Inport
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): IntelIde
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): intelppm
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Intel Processor Driver
Image path: system32\DRIVERS\intelppm.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): Ip6Fw
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IPv6 Windows Firewall Driver
Description: ホーム ネットワークまたは小規模オフィスのネットワークに対してアタックの防止のサービスを提供します。
Image path: system32\DRIVERS\Ip6Fw.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): IpFilterDriver
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IP Traffic Filter Driver
Description: IP Traffic Filter Driver
Image path: system32\DRIVERS\ipfltdrv.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): IpInIp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IP in IP Tunnel Driver
Description: IP in IP Tunnel Driver
Image path: system32\DRIVERS\ipinip.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): IpNat
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IP Network Address Translator
Description: IP Network Address Translator
Image path: system32\DRIVERS\ipnat.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): IPSec
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IPSEC driver
Description: IPSEC driver
Image path: system32\DRIVERS\ipsec.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): IRENUM
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IR Enumerator Service
Image path: system32\DRIVERS\irenum.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): ISAPISearch
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): isapnp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: PnP ISA/EISA バス ドライバ
Image path: system32\DRIVERS\isapnp.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 3

Service (registry key): Kbdclass
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: キーボード クラス ドライバ
Image path: system32\DRIVERS\kbdclass.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): kbdhid
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: キーボード HID ドライバ
Image path: system32\DRIVERS\kbdhid.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): KLIF
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: KLIF
Description: KLIF Minifilter
Image path: system32\DRIVERS\klif.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1
Depends On services: FltMgr

Service (registry key): kmixer
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel Wave Audio Mixer
Image path: system32\drivers\kmixer.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): KSecDD
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): lanmanserver
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Server
Description: このコンピュータでネットワークをとおしてのファイル、印刷、および名前付パイプ共有をサポートします。このサービスが停止した場合、これらの機能は利用できなくなります。このサービスが使用不可にされた場合、このサービスに明示的に依存するサービスはすべて起動できなくなります。
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): lanmanworkstation
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Workstation
Description: リモート サーバーへのクライアント ネットワーク接続を作成し、維持します。このサービスが停止している場合は、これらの接続は利用できなくなります。このサービスが無効になっている場合は、このサービスに明示的に依存するサービスは何も開始できなくなります。
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 5ABA1C6A271424661500829458210602
Control Set: CurrentControlSet
Start: 2