MyWay.MyWebSearch - help please

Ink Mathematics · Dec 14, 2008

Spybot removed 9 MyWay.MyWebSearch items but 2 remain. Thanks in anticipation of good advice.
........................................................................................................

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:13:10, on 14-12-2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programmer\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\Spybot - Search & Destroy\TeaTimer.exe
C:\Programmer\Windows Media Player\WMPNSCFG.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\AVG\AVG8\avgupd.exe
C:\Programmer\Fælles filer\Real\Update_OB\realsched.exe
C:\Programmer\AVG\AVG8\avgui.exe
C:\Programmer\Spybot - Search & Destroy\SpybotSD.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.guardian.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmer\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmer\Java\jre1.6.0_07\bin\ssv.dll
O3 - Toolbar: (no name) - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - (no file)
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmer\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Programmer\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://gis.aarhus.dk/Mapguide viewer/mgaxctrl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130881093968
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner371420.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.bgbank.dk/html/activex/e-Safekey/BG/e-Safekey.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programmer\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Programmer\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmer\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 6477 bytes

random/random · Dec 15, 2008

I need a spybot report to see what it's detecting

To do this:

Run a scan with Spybot
Right click in the results window and click Copy results to clipboard
Then use ctrl+v or right click>paste to paste the results a reply to this topic

Ink Mathematics · Dec 16, 2008

pt 1

Thanks random/random
........................................................................................................

--- Search result list ---
Hint of the Day: Click the bar at the right of this to see more information! ()

MyWay.MyWebSearch: [SBI $B267ADF3] IE toolbar (Registry value, nothing done)
HKEY_USERS\S-1-5-21-1606980848-1958367476-682003330-500\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $11334F10] IE toolbar (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}

--- Spybot - Search & Destroy version: 1.6.0 (build: 20080729) ---

2008-08-14 blindman.exe (1.0.0.8)
2008-01-28 SDDelFile.exe (1.0.2.4)
2008-08-14 SDFiles.exe (1.6.0.4)
2008-08-14 SDMain.exe (1.0.0.6)
2008-08-14 SDShred.exe (1.0.2.3)
2008-08-14 SDUpdate.exe (1.6.0.9)
2008-08-14 SDWinSec.exe (1.0.0.12)
2008-07-30 SpybotSD.exe (1.6.0.31)
2008-09-16 TeaTimer.exe (1.6.3.25)
2005-09-23 unins000.exe (51.41.0.0)
2008-08-26 unins001.exe (51.49.0.0)
2008-08-14 Update.exe (1.6.0.7)
2008-10-22 advcheck.dll (1.6.2.13)
2007-04-02 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-09-15 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2008-10-22 Tools.dll (2.1.6.8)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2008-11-04 Includes\Adware.sbi (*)
2008-12-09 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-11-18 Includes\Hijackers.sbi (*)
2008-11-18 Includes\HijackersC.sbi (*)
2008-12-09 Includes\Keyloggers.sbi (*)
2008-12-09 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-11-18 Includes\Malware.sbi (*)
2008-12-09 Includes\MalwareC.sbi (*)
2008-11-03 Includes\PUPS.sbi (*)
2008-12-09 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-12-09 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-12-10 Includes\Spyware.sbi (*)
2008-12-10 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-11-04 Includes\Trojans.sbi (*)
2008-12-10 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

--- System information ---
Windows XP (Build: 2600) Service Pack 3 (5.1.2600)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB928366)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
/ Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
/ Windows / SP1: Microsoft National Language Support Downlevel APIs
/ Windows Media Format 11 SDK: Hotfix for Windows Media Format 11 SDK (KB929399)
/ Windows Media Player: Sikkerhedsopdatering til Windows Media Player (KB952069)
/ Windows Media Player 10: Sikkerhedsopdatering til Windows Media Player 10 (KB911565)
/ Windows Media Player 10: Sikkerhedsopdatering til Windows Media Player 10 (KB917734)
/ Windows Media Player 10: Sikkerhedsopdatering til Windows Media Player 10 (KB936782)
/ Windows Media Player 11: Sikkerhedsopdatering til Windows Media Player 11 (KB936782)
/ Windows Media Player 11: Hotfix til Windows Media Player 11 (KB939683)
/ Windows Media Player 11: Sikkerhedsopdatering til Windows Media Player 11 (KB954154)
/ Windows Media Player 6.4: Sikkerhedsopdatering til Windows Media Player 6.4 (KB925398)
/ Windows XP: Sikkerhedsopdatering til Windows XP (KB923689)
/ Windows XP: Sikkerhedsopdatering til Windows XP (KB941569)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB928090)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB929969)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB931768)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB933566)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB937143)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB938127)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB939653)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB942615)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB944533)
/ Windows XP / SP0: Hotfix til Windows Internet Explorer 7 (KB947864)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB950759)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB953838)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB956390)
/ Windows XP / SP0: Sikkerhedsopdatering til Windows Internet Explorer 7 (KB958215)
/ Windows XP / SP10: Microsoft Compression Client Pack 1.0 for Windows XP
/ Windows XP / SP3: Sikkerhedsopdatering til Windows XP (KB929969)
/ Windows XP / SP3: Windows XP Service Pack 3
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB938464)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB946648)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB950760)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB950762)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB950974)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB951066)
/ Windows XP / SP4: Opdatering til Windows XP (KB951072-v2)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB951376)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB951376-v2)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB951698)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB951748)
/ Windows XP / SP4: Opdatering til Windows XP (KB951978)
/ Windows XP / SP4: Hotfix til Windows XP (KB952287)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB952954)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB953839)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB954211)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB954459)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB954600)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB955069)
/ Windows XP / SP4: Opdatering til Windows XP (KB955839)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB956391)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB956802)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB956803)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB956841)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB957095)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB957097)
/ Windows XP / SP4: Sikkerhedsopdatering til Windows XP (KB958644)

--- Startup entries list ---
Located: HK_LM:Run, AVG8_TRAY
command: C:\PROGRA~1\AVG\AVG8\avgtray.exe
file: C:\PROGRA~1\AVG\AVG8\avgtray.exe
size: 1261336
MD5: B5C69900C0F9541CEF80EDC60A88E691

Located: HK_LM:Run, QuickTime Task
command: "C:\Programmer\QuickTime\qttask.exe" -atboottime
file: C:\Programmer\QuickTime\qttask.exe
size: 413696
MD5: F34EB5D4F145ED5FE50033CA3A41ED24

Located: HK_LM:Run, ZoneAlarm Client
command: "C:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe"
file: C:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe
size: 919016
MD5: 8800130156B0642B15ECB75E7CC7E6F1

Located: HK_LM:Run, ASUS Probe (DISABLED)
command: C:\Program Files\ASUS\Probe\AsusProb.exe
file: C:\Program Files\ASUS\Probe\AsusProb.exe
size: 617984
MD5: B7E260F00988380F72FF06D2FE181D70

Located: HK_LM:Run, iTunesHelper (DISABLED)
command: "C:\Programmer\iTunes\iTunesHelper.exe"
file: C:\Programmer\iTunes\iTunesHelper.exe
size: 278528
MD5: 8778072A594E1310C0B7D0A93771E8BD

Located: HK_LM:Run, QuickTime Task (DISABLED)
command: "C:\Programmer\QuickTime\QTTask.exe" -atboottime
file: C:\Programmer\QuickTime\QTTask.exe
size: 413696
MD5: F34EB5D4F145ED5FE50033CA3A41ED24

Located: HK_LM:Run, RoxioAudioCentral (DISABLED)
command: "C:\Programmer\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
file: C:\Programmer\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
size: 319488
MD5: B96CB1DA50F3C1D37E08E756264597B6

Located: HK_LM:Run, RoxioDragToDisc (DISABLED)
command: "C:\Programmer\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
file: C:\Programmer\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
size: 868352
MD5: C912E08D1127E0420F75C3EAE3365FC4

Located: HK_LM:Run, RoxioEngineUtility (DISABLED)
command: "C:\Programmer\Fælles filer\Roxio Shared\System\EngUtil.exe"
file: C:\Programmer\Fælles filer\Roxio Shared\System\EngUtil.exe
size: 65536
MD5: 364784A6F653DF81B76424A39DBA237B

Located: HK_CU:Run, CTFMON.EXE
where: .DEFAULT...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: CB8D8AB9CED50556501014F97A9FA270

Located: HK_CU:Run, CTFMON.EXE
where: PE_C_HEJ...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: CB8D8AB9CED50556501014F97A9FA270

Located: HK_CU:Run, MSMSGS (DISABLED)
where: PE_C_HEJ...
command: "C:\Programmer\Messenger\msmsgs.exe" /background
file: C:\Programmer\Messenger\msmsgs.exe
size: 1695232
MD5: 2489FA43377D182FBD3E3F235A28F8D3

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-19...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: CB8D8AB9CED50556501014F97A9FA270

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-20...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: CB8D8AB9CED50556501014F97A9FA270

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-21-1606980848-1958367476-682003330-500...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: CB8D8AB9CED50556501014F97A9FA270

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-1606980848-1958367476-682003330-500...
command: C:\Programmer\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Programmer\Spybot - Search & Destroy\TeaTimer.exe
size: 1833296
MD5: 63B3FF83B87AFCEBA89CED54695DA0F6

Located: HK_CU:Run, WMPNSCFG
where: S-1-5-21-1606980848-1958367476-682003330-500...
command: C:\Programmer\Windows Media Player\WMPNSCFG.exe
file: C:\Programmer\Windows Media Player\WMPNSCFG.exe
size: 204288
MD5: 0A4EACD8B8E473F0FFDEB6EC8CB81EDD

Located: HK_CU:Run, I&F Viewer toolbar (DISABLED)
where: S-1-5-21-1606980848-1958367476-682003330-500...
command: "C:\Programmer\Photo Toolkit\ivbar\phototoolkitmem.exe" -start
file: C:\Programmer\Photo Toolkit\ivbar\phototoolkitmem.exe
size: 65536
MD5: 605ECDFE33179080E490D1344AEC8973

Located: HK_CU:Run, MSMSGS (DISABLED)
where: S-1-5-21-1606980848-1958367476-682003330-500...
command: "C:\Programmer\Messenger\msmsgs.exe" /background
file: C:\Programmer\Messenger\msmsgs.exe
size: 1695232
MD5: 2489FA43377D182FBD3E3F235A28F8D3

Located: HK_CU:Run, CTFMON.EXE
where: S-1-5-18...
command: C:\WINDOWS\system32\CTFMON.EXE
file: C:\WINDOWS\system32\CTFMON.EXE
size: 15360
MD5: CB8D8AB9CED50556501014F97A9FA270

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, dimsntfy
command: %SystemRoot%\System32\dimsntfy.dll
file: %SystemRoot%\System32\dimsntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

--- Browser helper object list ---
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (WormRadar.com IESiteBlocker.NavFilter)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: WormRadar.com IESiteBlocker.NavFilter
CLSID name: AVG Safe Search
Path: C:\Programmer\AVG\AVG8\
Long name: avgssie.dll
Short name:
Date (created): 21-05-2008 08:40:40
Date (last access): 16-12-2008 20:24:32
Date (last write): 29-08-2008 13:37:12
Filesize: 455960
Attributes: archive
MD5: 19A9C541D4EE8E3471B26986D785AB4D
CRC32: 93FD7D83
Version: 8.0.0.152

--- ActiveX list ---
{17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool)
DPF name:
CLSID name: Windows Genuine Advantage Validation Tool
Installer: C:\WINDOWS\Downloaded Program Files\LegitCheckControl.inf
Codebase: http://go.microsoft.com/fwlink/?linkid=39204
description:
classification: Legitimate
known filename: LegitCheckControl.DLL
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\system32\
Long name: LegitCheckControl.dll
Short name: LEGITC~1.DLL
Date (created): 12-07-2005 17:04:22
Date (last access): 16-12-2008 21:15:22
Date (last write): 05-09-2008 23:30:06
Filesize: 1480232
Attributes: archive
MD5: D0E44C9C8BD85350828458EAD715BD30
CRC32: 1F5F2366
Version: 1.8.31.9

{4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool)
DPF name:
CLSID name: MSN Photo Upload Tool
Installer: C:\WINDOWS\Downloaded Program Files\MsnPUpld.inf
Codebase: http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
description:
classification: Legitimate
known filename: MsnPUpld.dll
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\Downloaded Program Files\
Long name: MsnPUpld.dll
Short name:
Date (created): 20-06-2006 14:44:04
Date (last access): 16-12-2008 21:02:24
Date (last write): 20-06-2006 14:44:04
Filesize: 379704
Attributes: archive
MD5: D2FB109C3F0DAAAA4A73E5921656DB3E
CRC32: A13093E8
Version: 10.0.913.0

{62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control)
DPF name:
CLSID name: Autodesk MapGuide ActiveX Control
Installer: C:\WINDOWS\Downloaded Program Files\MgAxCtrl.inf
Codebase: http://gis.aarhus.dk/Mapguide viewer/mgaxctrl.cab
description:
classification: Legitimate
known filename: MGAXCTRL.DLL
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\Downloaded Program Files\
Long name: MgAxCtrl.dll
Short name:
Date (created): 07-04-2004 00:01:36
Date (last access): 16-12-2008 21:02:24
Date (last write): 07-04-2004 00:01:36
Filesize: 3384512
Attributes: archive
MD5: 3C2860E997F9AFC4E5CACB7151959290
CRC32: 30FF59E5
Version: 6.5.5.7

{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class)
DPF name:
CLSID name: MUWebControl Class
Installer: C:\WINDOWS\Downloaded Program Files\muweb.inf
Codebase: http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130881093968
description:
classification: Legitimate
known filename: muweb.dll
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\system32\
Long name: muweb.dll
Short name:
Date (created): 26-05-2005 04:19:32
Date (last access): 16-12-2008 21:08:44
Date (last write): 16-10-2008 14:06:48
Filesize: 208744
Attributes: archive
MD5: D2E6F0A06391FE5556E8A1D6D5041A5E
CRC32: 27FBFA7D
Version: 7.2.6001.788

{7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class)
DPF name:
CLSID name: ICSScanner Class
Installer: C:\WINDOWS\Downloaded Program Files\ICSScanner.inf
Codebase: http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner371420.cab
description:
classification: Legitimate
known filename: ICSSCAN.DLL
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\Downloaded Program Files\
Long name: ICSScan.dll
Short name:
Date (created): 14-10-2005 12:28:38
Date (last access): 14-12-2008 13:51:40
Date (last write): 23-02-2007 20:43:30
Filesize: 2639608
Attributes: archive
MD5: 618FBC678E3617F4BB9C6E816FD6D47C
CRC32: 2AFEC489
Version: 3.7.142.0

{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_07
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
description: Sun Java
classification: Legitimate
known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
info link:
info source: Patrick M. Kolla
Path: C:\Programmer\Java\jre1.6.0_07\bin\
Long name: npjpi160_07.dll
Short name: NPJPI1~1.DLL
Date (created): 10-06-2008 01:32:34
Date (last access): 14-12-2008 13:18:08
Date (last write): 10-06-2008 03:27:02
Filesize: 132496
Attributes: archive
MD5: 7C83A2809E13950359189767AC9D5DB8
CRC32: 925C2A88
Version: 6.0.70.6

{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ()
DPF name:
CLSID name:
Installer: C:\WINDOWS\Downloaded Program Files\erma.inf
Codebase: http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
description:
classification: Open for discussion
known filename:
info link:
info source: Safer Networking Ltd.

{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
DPF name: Java Runtime Environment 1.5.0
CLSID name: Java Plug-in 1.5.0_06
Installer:
Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
description:
classification: Legitimate
known filename: npjpi150_06.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Programmer\Java\jre1.5.0_06\bin\
Long name: NPJPI150_06.dll
Short name: NPJPI1~1.DLL
Date (created): 02-03-2006 12:52:58
Date (last access): 14-12-2008 13:08:26
Date (last write): 10-11-2005 12:22:12
Filesize: 69746
Attributes: archive
MD5: D2CF6BB5E9020E6707B62575F8083954
CRC32: 7F39DC54
Version: 5.0.60.5

{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
DPF name: Java Runtime Environment 1.5.0
CLSID name: Java Plug-in 1.5.0_09
Installer:
Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
description:
classification: Legitimate
known filename: NPJPI150_09.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Programmer\Java\jre1.5.0_09\bin\
Long name: NPJPI150_09.dll
Short name: NPJPI1~1.DLL
Date (created): 12-10-2006 03:10:58
Date (last access): 14-12-2008 13:10:46
Date (last write): 12-10-2006 03:25:44
Filesize: 69746
Attributes: archive
MD5: A3CDEB59B6B8C2EA81B9ED2D3EF4C95E
CRC32: 2A32A9A2
Version: 5.0.90.3

{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
DPF name: Java Runtime Environment 1.5.0
CLSID name: Java Plug-in 1.5.0_11
Installer:
Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
description:
classification: Legitimate
known filename: npjpi150_11.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Programmer\Java\jre1.5.0_11\bin\
Long name: NPJPI150_11.dll
Short name: NPJPI1~1.DLL
Date (created): 15-12-2006 02:09:16
Date (last access): 14-12-2008 13:13:06
Date (last write): 15-12-2006 02:23:26
Filesize: 75528
Attributes: archive
MD5: 3B3F6984DBF972DAFF1B7E9C44E2FE75
CRC32: 4BDE2041
Version: 5.0.110.3

{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_03
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
Path: C:\Programmer\Java\jre1.6.0_03\bin\
Long name: npjpi160_03.dll
Short name: NPJPI1~1.DLL
Date (created): 24-09-2007 23:31:44
Date (last access): 14-12-2008 13:15:36
Date (last write): 25-09-2007 01:11:34
Filesize: 132496
Attributes: archive
MD5: D6A4682A6FF41832A3F1A7AB9AE08199
CRC32: 9080B537
Version: 6.0.30.5

{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_07
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
Path: C:\Programmer\Java\jre1.6.0_07\bin\
Long name: npjpi160_07.dll
Short name: NPJPI1~1.DLL
Date (created): 10-06-2008 01:32:34
Date (last access): 16-12-2008 21:41:32
Date (last write): 10-06-2008 03:27:02
Filesize: 132496
Attributes: archive
MD5: 7C83A2809E13950359189767AC9D5DB8
CRC32: 925C2A88
Version: 6.0.70.6

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_07
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
description:
classification: Legitimate
known filename: npjpi150_06.dll
info link:
info source: Safer Networking Ltd.
Path: C:\Programmer\Java\jre1.6.0_07\bin\
Long name: npjpi160_07.dll
Short name: NPJPI1~1.DLL
Date (created): 10-06-2008 01:32:34
Date (last access): 16-12-2008 21:41:32
Date (last write): 10-06-2008 03:27:02
Filesize: 132496
Attributes: archive
MD5: 7C83A2809E13950359189767AC9D5DB8
CRC32: 925C2A88
Version: 6.0.70.6

{CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class)
DPF name:
CLSID name: Live365Player Class
Installer: C:\WINDOWS\Downloaded Program Files\play365.inf
Codebase: http://www.live365.com/players/play365.cab
description:
classification: Legitimate
known filename: PLAY365.DLL
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\Downloaded Program Files\
Long name: Play365.dll
Short name:
Date (created): 23-05-2005 12:21:40
Date (last access): 14-12-2008 13:51:42
Date (last write): 23-05-2005 12:21:40
Filesize: 339968
Attributes: archive
MD5: BE3064590B589A4347A717820364E061
CRC32: 911D5E0F
Version: 1.0.0.10

{D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
DPF name:
CLSID name: Shockwave Flash Object
Installer: C:\WINDOWS\Downloaded Program Files\swflash.inf
Codebase: http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
description: Macromedia Shockwave Flash Player
classification: Legitimate
known filename:
info link:
info source: Patrick M. Kolla
Path: C:\WINDOWS\system32\Macromed\Flash\
Long name: Flash10a.ocx
Short name:
Date (created): 05-10-2008 04:16:26
Date (last access): 16-12-2008 20:24:40
Date (last write): 05-10-2008 04:16:26
Filesize: 3789728
Attributes: readonly archive
MD5: 466C1355934925768822E380DA6E6E4A
CRC32: 48EC1E52
Version: 10.0.12.36

{D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class)
DPF name:
CLSID name: CRLDownloadWrapper Class
Installer:
Codebase: http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
Path: C:\WINDOWS\Downloaded Program Files\
Long name: crlocx.ocx
Short name:
Date (created): 29-05-2008 20:05:34
Date (last access): 14-12-2008 13:51:40
Date (last write): 29-05-2008 20:05:34
Filesize: 43760
Attributes: archive
MD5: 83412AE824500F533C22599DCAE43F1A
CRC32: AB100875
Version: 1.0.0.1

{D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey)
DPF name:
CLSID name: e-Safekey
Installer: C:\WINDOWS\Downloaded Program Files\e-Safekey.inf
Codebase: https://netbank.bgbank.dk/html/activex/e-Safekey/BG/e-Safekey.cab
description:
classification: Open for discussion
known filename: e-Safekey.dll
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\Downloaded Program Files\
Long name: e-Safekey.dll
Short name: E-SAFE~1.DLL
Date (created): 03-10-2005 17:04:38
Date (last access): 14-12-2008 21:45:52
Date (last write): 22-05-2006 08:33:18
Filesize: 684032
Attributes: archive
MD5: 5B92E81E7A8AA72A7461FBF3D88409D9
CRC32: 3EF95CD0
Version: 4.0.3.6

--- Process list ---
PID: 0 ( 0) [System]
PID: 668 ( 4) \SystemRoot\System32\smss.exe
size: 50688
PID: 724 ( 668) \??\C:\WINDOWS\system32\csrss.exe
size: 6144
PID: 748 ( 668) \??\C:\WINDOWS\system32\winlogon.exe
size: 507904
PID: 804 ( 748) C:\WINDOWS\system32\services.exe
size: 108544
MD5: AB2B6ABF3FCDA803FF0E2251F9A5274E
PID: 816 ( 748) C:\WINDOWS\system32\lsass.exe
size: 13312
MD5: AC9FCA8BCD685ABDB9928B1964B731A2
PID: 1020 ( 804) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 555F8F4CB284FE94059DCACF6074F9EC
PID: 1108 ( 804) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 555F8F4CB284FE94059DCACF6074F9EC
PID: 1224 ( 804) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: 555F8F4CB284FE94059DCACF6074F9EC
PID: 1328 ( 804) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 555F8F4CB284FE94059DCACF6074F9EC
PID: 1468 ( 804) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 555F8F4CB284FE94059DCACF6074F9EC
PID: 1556 ( 804) C:\Programmer\Lavasoft\Ad-Aware\aawservice.exe
size: 611664
MD5: 17067069B9A7865028C1F2E6971D0CCC
PID: 1808 ( 804) C:\WINDOWS\system32\spoolsv.exe
size: 57856
MD5: E06D0A59737CF479466A86AB5E2A0B6B
PID: 180 (2024) C:\WINDOWS\Explorer.EXE
size: 1034752
MD5: 1D9BD1CAA1E4CF63370F201DF742DC7D
PID: 288 ( 804) C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
size: 231704
MD5: 9B40D378D4E521464212E878BE8216A4
PID: 436 ( 804) C:\WINDOWS\System32\svchost.exe
size: 14336
MD5: 555F8F4CB284FE94059DCACF6074F9EC
PID: 476 ( 804) C:\Programmer\Analog Devices\SoundMAX\SMAgent.exe
size: 45056
MD5: 3978F082274F723AD5A0A8058C2417DD
PID: 500 ( 804) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 555F8F4CB284FE94059DCACF6074F9EC
PID: 1528 ( 180) C:\PROGRA~1\AVG\AVG8\avgtray.exe
size: 1261336
MD5: B5C69900C0F9541CEF80EDC60A88E691
PID: 1624 ( 180) C:\Programmer\Zone Labs\ZoneAlarm\zlclient.exe
size: 919016
MD5: 8800130156B0642B15ECB75E7CC7E6F1
PID: 1540 ( 180) C:\Programmer\QuickTime\qttask.exe
size: 413696
MD5: F34EB5D4F145ED5FE50033CA3A41ED24
PID: 1584 ( 180) C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: CB8D8AB9CED50556501014F97A9FA270
PID: 1996 ( 180) C:\Programmer\Spybot - Search & Destroy\TeaTimer.exe
size: 1833296
MD5: 63B3FF83B87AFCEBA89CED54695DA0F6
PID: 1720 ( 288) C:\Programmer\AVG\AVG8\avgrsx.exe
size: 287000
MD5: BA1CE056CE1466CA28CE118585EA86C4
PID: 2020 ( 180) C:\Programmer\Windows Media Player\WMPNSCFG.exe
size: 204288
MD5: 0A4EACD8B8E473F0FFDEB6EC8CB81EDD
PID: 584 ( 804) C:\WINDOWS\system32\MsPMSPSv.exe
size: 53248
MD5: 668056D5C3C11AB7D266819A96B964E8
PID: 1372 ( 804) C:\Programmer\Windows Media Player\WMPNetwk.exe
size: 914432
MD5: 6EE45AD8DBEF8785B8CD312736626EBE
PID: 2764 ( 804) C:\WINDOWS\System32\alg.exe
size: 44544
MD5: AB74A1B7500ACA7D43D84804CBDF11FB
PID: 2780 ( 804) C:\WINDOWS\system32\ZoneLabs\vsmon.exe
size: 75304
MD5: 4ABE946715D5E17C013D70FABB9E9780
PID: 1704 ( 180) C:\Programmer\Spybot - Search & Destroy\SpybotSD.exe
size: 4891984
MD5: 9C8F0F34F66BB845B42F70E92A972B5F
PID: 4 ( 0) System

--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 16-12-2008 21:41:35

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.guardian.co.uk/
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
http://go.microsoft.com/fwlink/?LinkId=54896
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://go.microsoft.com/fwlink/?LinkId=69157
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://go.microsoft.com/fwlink/?LinkId=69157
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://go.microsoft.com/fwlink/?LinkId=54896
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm

--- Winsock Layered Service Provider list ---

--- Uninstall list ---
(AddressBook)

Adobe Flash Player 10 ActiveX 10.0.12.36 (Adobe Flash Player ActiveX)
uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
publisher: Adobe Systems Incorporated
help link: http://www.adobe.com/go/flashplayer_support/

Adobe Photoshop 7.0 7.0 (Adobe Photoshop 7.0)
version (major): 7
install location: C:\Programmer\Adobe\Photoshop 7.0
install source: D:\Adobe Photoshop 7.0\
uninstall cmd: C:\WINDOWS\ISUNINST.EXE -f"C:\Programmer\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Programmer\Adobe\Photoshop 7.0\Uninst.dll"
publisher: Adobe Systems, Inc.

Animated GIF producer 3.2 TRIAL (Animated GIF producer 3.2 TRIAL_is1)
install location: C:\Programmer\Animated GIF producer 3.2 TRIAL\
uninstall cmd: "C:\Programmer\Animated GIF producer 3.2 TRIAL\unins000.exe"
publisher: AVLAN Design
help link: http://www.avlandesign.com

ASUS Probe V2.23.01 (ASUS Probe V2.23.01)
uninstall cmd: C:\WINDOWS\uninst.exe -f"C:\Program Files\ASUS\Probe\DeIsL1.isu" -c"C:\Program Files\ASUS\Probe\probunis.dll"

Audacity 1.2.6 (Audacity_is1)
install location: C:\Programmer\Audacity\
uninstall cmd: "C:\Programmer\Audacity\unins000.exe"
help link: http://audacity.sourceforge.net

AVD Video Processor 7.5 TRIAL (AVD Video Processor 7.5 TRIAL_is1)
install location: C:\Programmer\AVD Video Processor 7.5 TRIAL\
uninstall cmd: "C:\Programmer\AVD Video Processor 7.5 TRIAL\unins000.exe"
publisher: AVLAN Design
help link: http://www.avlandesign.com

AVG Free 8.0 (AVG8Uninstall)
uninstall cmd: C:\Programmer\AVG\AVG8\setup.exe /UNINSTALL

(Branding)

Certifikat til truck v9.1 (Certifikat til truck_is1)
install location: C:\Programmer\TUR Programmer\
uninstall cmd: "C:\Programmer\TUR Programmer\TRUCK\unins000.exe"
publisher: TUR Forlag
help link: http://www.turforlag.dk/

(Connection Manager)

Microsoft Windows XP Video Decoder Checkup Utility (DECCHECK)
uninstall cmd: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\DECCHECK.inf,Uninstall

(DirectAnimation)

(DirectDrawEx)

(DXM_Runtime)

Microsoft DirectX Transform optional components (DXTXTRA)
uninstall cmd: RUNDLL32.EXE ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\DXTXTRA.INF,UNINSTALL.NT,12

FastStone Capture 4.2 4.2 (FastStone Capture)
uninstall cmd: C:\Programmer\FastStone Capture\uninst.exe
publisher: FastStone Soft

(Fontcore)

FPAdjust (FPAdjust)
uninstall cmd: C:\WINDOWS\IsUninst.exe -f"C:\Programmer\Flat Panel Adjust\Uninst.isu"

FREE Hi-Q Recorder 1.92 (FREE Hi-Q Recorder_is1)
install date: 20080315
install location: C:\Programmer\FREE Hi-Q Recorder\
uninstall cmd: "C:\Programmer\FREE Hi-Q Recorder\unins000.exe"
publisher: Rick Roemer, (Roemer Software)
help link: http://www.RoemerSoftware.com

GOM Player (GOM Player)
uninstall cmd: "C:\Programmer\GRETECH\GomPlayer\Uninstall.exe"

HijackThis 2.0.2 2.0.2 (HijackThis)
uninstall cmd: "C:\Program Files\HijackThis.exe" /uninstall
publisher: TrendMicro

Color LaserJet 1600 (HP-Color LaserJet 1600)
uninstall cmd: C:\Programmer\Zenographics\{DD15993B-BABE-40CD-BF21-A38FCDF7245A}\setup.exe -u "HPCLJKCInstaller.dll=CLJ1600.INF"

(ICW)

Microsoft Internationalized Domain Names Mitigation APIs (IDNMitigationAPIs)
install date: 20070119
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
publisher: Microsoft Corporation

(IE40)

(IE4Data)

(IE5BAKEX)

Windows Internet Explorer 7 20061107.210142 (ie7)
install date: 20070119
publisher: Microsoft Corporation
help link: http://www.microsoft.com/ie

(IEData)

(InstallShield Uninstall Information)

iTunes 6.0.4.2 (InstallShield_{59C4F14F-7590-45FC-BE9F-A67AB3590709})
version: 100663300
version (major): 6
estimated size: 34690
install date: 20060313
install location: C:\Programmer\iTunes\
install source: C:\WINDOWS\Downloaded Installations\{59C4F14F-7590-45FC-BE9F-A67AB3590709}\
uninstall cmd: C:\PROGRA~1\FLLESF~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{59C4F14F-7590-45FC-BE9F-A67AB3590709} /l1033
publisher: Apple Computer, Inc.
contact: AppleCare Support
help link: http://www.info.apple.com/
help telephone: 1-800-275-2273

(KB884016)

(KB884267)

(KB885353)

(KB885884)

(KB886612)

(KB887078)

(KB887626)

(KB888656)

(KB889858)

(KB891122)

Windows Genuine Advantage Validation Tool (KB892130) (KB892130)
install date: 20071030
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=892130

(KB892313)

(KB893240)

(KB893241)

(KB893803)

(KB895181)

(KB895316)

(KB895572)

(KB897586)

(KB898549)

(KB900399)

(KB902344)

(KB907658)

Sikkerhedsopdatering til Windows Media Player (KB911564) (KB911564)
install date: 20060217
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=911564

Sikkerhedsopdatering til Windows Media Player 10 (KB911565) (KB911565)
install date: 20060217
uninstall cmd: "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=911565

(KB911854)

Sikkerhedsopdatering til Windows Media Player 10 (KB917734) (KB917734_WMP10)
install date: 20060617
uninstall cmd: "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=917734

Sikkerhedsopdatering til Windows XP (KB923689) (KB923689)
install date: 20061214
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=923689

Sikkerhedsopdatering til Windows Media Player 6.4 (KB925398) (KB925398_WMP64)
install date: 20061214
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=925398

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB928090) 20070117.120000 (KB928090-IE7)
install date: 20070218
uninstall cmd: "C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=928090

Hotfix for Windows Media Format 11 SDK (KB929399) (KB929399)
install date: 20080314
uninstall cmd: "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=929399

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB929969) 20061222.120000 (KB929969)
install date: 20070120
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=929969

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB931768) 1 (KB931768-IE7)
install date: 20070509
uninstall cmd: "C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=931768

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB933566) 1 (KB933566-IE7)
install date: 20070613
uninstall cmd: "C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=933566

Sikkerhedsopdatering til Windows Media Player 10 (KB936782) (KB936782_WMP10)
install date: 20070814
uninstall cmd: "C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=936782

Sikkerhedsopdatering til Windows Media Player 11 (KB936782) (KB936782_WMP11)
install date: 20080314
uninstall cmd: "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=936782

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB937143) 1 (KB937143-IE7)
install date: 20070814
uninstall cmd: "C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=937143

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB938127) 1 (KB938127-IE7)
install date: 20070814
uninstall cmd: "C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=938127

Sikkerhedsopdatering til Windows XP (KB938464) 1 (KB938464)
install date: 20080910
uninstall cmd: "C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=938464

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB939653) 1 (KB939653-IE7)
install date: 20071030
uninstall cmd: "C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=939653

Hotfix til Windows Media Player 11 (KB939683) (KB939683)
install date: 20080314
uninstall cmd: "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=939683

Sikkerhedsopdatering til Windows XP (KB941569) (KB941569)
install date: 20071212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=941569

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB942615) 1 (KB942615-IE7)
install date: 20071212
uninstall cmd: "C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=942615

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB944533) 1 (KB944533-IE7)
install date: 20080213
uninstall cmd: "C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=944533

Sikkerhedsopdatering til Windows XP (KB946648) 1 (KB946648)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=946648

Hotfix til Windows Internet Explorer 7 (KB947864) 1 (KB947864-IE7)
install date: 20080409
uninstall cmd: "C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=947864

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB950759) 1 (KB950759-IE7)
install date: 20080611
uninstall cmd: "C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=950759

Sikkerhedsopdatering til Windows XP (KB950760) 1 (KB950760)
install date: 20080611
uninstall cmd: "C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=950760

Sikkerhedsopdatering til Windows XP (KB950762) 1 (KB950762)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=950762

Sikkerhedsopdatering til Windows XP (KB950974) 1 (KB950974)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=950974

Sikkerhedsopdatering til Windows XP (KB951066) 1 (KB951066)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=951066

Opdatering til Windows XP (KB951072-v2) 2 (KB951072-v2)
install date: 20080813
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=951072

Sikkerhedsopdatering til Windows XP (KB951376) 1 (KB951376)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=951376

Sikkerhedsopdatering til Windows XP (KB951376-v2) 2 (KB951376-v2)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=951376

Sikkerhedsopdatering til Windows XP (KB951698) 1 (KB951698)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=951698

Sikkerhedsopdatering til Windows XP (KB951748) 1 (KB951748)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=951748

Opdatering til Windows XP (KB951978) 1 (KB951978)
install date: 20080827
uninstall cmd: "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=951978

Sikkerhedsopdatering til Windows Media Player (KB952069) (KB952069_WM9)
install date: 20081212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=952069

Hotfix til Windows XP (KB952287) 1 (KB952287)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=952287

Sikkerhedsopdatering til Windows XP (KB952954) 1 (KB952954)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=952954

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB953838) 1 (KB953838-IE7)
install date: 20080813
uninstall cmd: "C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=953838

Sikkerhedsopdatering til Windows XP (KB953839) 1 (KB953839)
install date: 20080813
uninstall cmd: "C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=953839

Sikkerhedsopdatering til Windows Media Player 11 (KB954154) (KB954154_WM11)
install date: 20080910
uninstall cmd: "C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com/?kbid=954154

Sikkerhedsopdatering til Windows XP (KB954211) 1 (KB954211)
install date: 20081016
uninstall cmd: "C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=954211

Ink Mathematics · Dec 16, 2008

pt 2

Sikkerhedsopdatering til Windows XP (KB954459) 1 (KB954459)
install date: 20081112
uninstall cmd: "C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=954459

Sikkerhedsopdatering til Windows XP (KB954600) 1 (KB954600)
install date: 20081212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=954600

Sikkerhedsopdatering til Windows XP (KB955069) 1 (KB955069)
install date: 20081112
uninstall cmd: "C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=955069

Opdatering til Windows XP (KB955839) 1 (KB955839)
install date: 20081212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=955839

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB956390) 1 (KB956390-IE7)
install date: 20081016
uninstall cmd: "C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=956390

Sikkerhedsopdatering til Windows XP (KB956391) 1 (KB956391)
install date: 20081016
uninstall cmd: "C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=956391

Sikkerhedsopdatering til Windows XP (KB956802) 1 (KB956802)
install date: 20081212
uninstall cmd: "C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=956802

Sikkerhedsopdatering til Windows XP (KB956803) 1 (KB956803)
install date: 20081016
uninstall cmd: "C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=956803

Sikkerhedsopdatering til Windows XP (KB956841) 1 (KB956841)
install date: 20081016
uninstall cmd: "C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=956841

Sikkerhedsopdatering til Windows XP (KB957095) 1 (KB957095)
install date: 20081016
uninstall cmd: "C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=957095

Sikkerhedsopdatering til Windows XP (KB957097) 1 (KB957097)
install date: 20081112
uninstall cmd: "C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=957097

Sikkerhedsopdatering til Windows Internet Explorer 7 (KB958215) 1 (KB958215-IE7)
install date: 20081212
uninstall cmd: "C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=958215

Sikkerhedsopdatering til Windows XP (KB958644) 1 (KB958644)
install date: 20081023
uninstall cmd: "C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=958644

LærSelv® PC-kørekort® Office 2000 (LærSelv® PC-kørekort® Office 2000)
uninstall cmd: C:\WINDOWS\IsUn0406.exe -f"C:\Programmer\Børsen Software\LærSelv PC-kørekort Office 2000\Uninst.isu" -c"C:\Programmer\Børsen Software\Minimanual\_UnInstall.dll"

Microsoft .NET Framework 1.1 Hotfix (KB928366) (M928366)
uninstall cmd: "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"

Microsoft .NET Framework 1.1 (Microsoft .NET Framework 1.1 (1033))
uninstall cmd: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm

(MobileOptionPack)

MPEG2 Codec(libmpeg2/mad) (MPEG2 Codec(libmpeg2/mad))
uninstall cmd: "C:\Programmer\GNU\MPEG2\Uninstall.exe"

(MPlayer2)

Microsoft Compression Client Pack 1.0 for Windows XP 1 (MSCompPackV1)
install date: 20080313
uninstall cmd: "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://go.microsoft.com/fwlink/?LinkId=74087

(MSI30-Beta1)

(MSI30-Beta2)

(MSI30-KB884016)

(MSI30-RC1)

(MSI30-RC2)

(MSI30a-KB884016)

(MSI31-Beta)

(MSI31-RC1)

(Nero - Burning Rom!UninstallKey)
uninstall cmd: C:\Programmer\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL

Nero Suite (NeroMultiInstaller!UninstallKey)
uninstall cmd: C:\Programmer\Fælles filer\Ahead\Uninstall\setup.exe /uninstall ExtraUninstallID=""

(NetMeeting)

Microsoft National Language Support Downlevel APIs (NLSDownlevelMapping)
install date: 20070119
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
publisher: Microsoft Corporation

(NMPUninstallKey)
uninstall cmd: C:\WINDOWS\UNNMP.exe /UNINSTALL

Nykredit Privatbudget (Nykredit Privatbudget)
uninstall cmd: C:\PROGRA~1\PRIVAT~1\UNWISE.EXE C:\PROGRA~1\PRIVAT~1\INSTALL.LOG

(OutlookExpress)

(PCHealth)
uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

PFS Browser V1.03 (PFS Browser_is1)
install location: C:\Programmer\Browser PFS\
uninstall cmd: "C:\Programmer\Browser PFS\unins000.exe"
publisher: ProFotoSoftware Ltd
help link: http://www.profotosoftware.com

SIGMA Photo Pro (PhotoPro)
uninstall cmd: C:\WINDOWS\System32\PPUninstall.exe
publisher: SIGMA

Photo Toolkit 1.0 (PhotoToolkit_is1)
install location: C:\Programmer\Photo Toolkit\
uninstall cmd: "C:\Programmer\Photo Toolkit\unins000.exe"
publisher: VicMan Software
help link: http://www.photo-toolkit.com

(RealJukebox 1.0)
uninstall cmd: C:\Programmer\Fælles filer\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

RealPlayer (RealPlayer 6.0)
uninstall cmd: C:\Programmer\Fælles filer\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

(SchedulingAgent)

Spybot - Search & Destroy 1.5.2.20 (Spybot - Search & Destroy_is1)
install date: 20080321
uninstall cmd: "C:\WINDOWS\unins000.exe"
publisher: Safer Networking Ltd.
help link: http://www.safer-networking.org/

Windows Genuine Advantage Validation Tool (KB892130) 1.7.0036.0 (WGA)
install date: 20060406
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=892130

Windows Genuine Advantage Notifications (KB905474) 1.8.0031.9 (WgaNotify)
install date: 20070223
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=905474

(WIC)

Windows Media Format 11 runtime (Windows Media Format Runtime)
uninstall cmd: "C:\Programmer\Windows Media Player\wmsetsdk.exe" /UninstallAll
help link: http://go.microsoft.com/fwlink/?LinkId=62768

Windows Media Player 11 (Windows Media Player)
uninstall cmd: "C:\Programmer\Windows Media Player\Setup_wm.exe" /Uninstall

Windows XP Service Pack 3 20080414.052804 (Windows XP Service Pack)
install date: 20080826
uninstall cmd: "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http://support.microsoft.com?kbid=936929

Pivot Software (WinPortrait)
uninstall cmd: C:\Programmer\WinPortrait\wpbegone.exe

(WMCSetup)

Windows Media Format 11 runtime (WMFDist11)
install date: 20080313
uninstall cmd: "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http:

Windows Media Player 11 (wmp11)
install date: 20080313
uninstall cmd: "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
help link: http:

Microsoft User-Mode Driver Framework Feature Pack 1.0 (Wudf01000)
install date: 20080313
uninstall cmd: "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
publisher: Microsoft Corporation
comments: Build Number 5716

ZoneAlarm 7.0.483.000 (ZoneAlarm)
uninstall cmd: C:\Programmer\Zone Labs\ZoneAlarm\zauninst.exe
publisher: Check Point, Inc
help link: C:\Programmer\Zone Labs\ZoneAlarm\Help\zaclients.chm

ZoneAlarm Spy Blocker (ZoneAlarmSB Uninstall)
uninstall cmd: rundll32 C:\PROGRA~1\ZONEAL~1\bar\1.bin\SpyBlock.dll,O
publisher: ZoneAlarm
help link: http://www.zonealarm.com/store/content/company/spyblocker/help/index.jsp?menu=3&c=P100014

Macromedia Flash Player 7.0.19.0 ({0456ebd7-5f67-4ab6-852e-63781e3f389c})
version: 117440531
version (major): 7
estimated size: 906
install date: 20051024
install source: C:\DOCUME~1\ADMINI~1\LOKALE~1\Temp\{06EFF934-0C56-4523-BF88-FF62044FA042}\{1E2F8AE3-3437-44E6-BB75-E95751D6B83F}\
uninstall cmd: MsiExec.exe /X{0456ebd7-5f67-4ab6-852e-63781e3f389c}
publisher: Macromedia, Inc.

QuickTime 7.50.61.0 ({08CA9554-B5FE-4313-938F-D4A417B81175})
version: 120717373
version (major): 7
version (minor): 50
estimated size: 79772
install date: 20080826
install location: C:\Programmer\QuickTime\
install source: C:\DOCUME~1\ADMINI~1\LOKALE~1\Temp\IXP686.TMP\
uninstall cmd: MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
publisher: Apple Inc.
contact: AppleCare Support
help link: http://www.apple.com/dk/support/
help telephone: (45) 70 10 20 07

ALi LAN Driver ({143BE018-D8F8-4014-8CB6-AF63F5799D21})
uninstall cmd: C:\WINDOWS\system32\UnLAN.EXE RunDll32 C:\PROGRA~1\FLLESF~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{143BE018-D8F8-4014-8CB6-AF63F5799D21}\Setup.exe" -uninst

Picture Package 1.05.001 ({1E2F8AE3-3437-44E6-BB75-E95751D6B83F})
version: 17104897
install location: C:\Programmer\Sony Corporation\Picture Package
uninstall cmd: RunDll32 C:\PROGRA~1\FLLESF~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{1E2F8AE3-3437-44E6-BB75-E95751D6B83F}\setup.exe" -l0x9 UNINSTALL

J2SE Runtime Environment 5.0 Update 6 1.5.0.60 ({3248F0A8-6813-11D6-A77B-00B0D0150060})
version: 17104896
version (major): 1
version (minor): 5
estimated size: 122273
install date: 20060502
install source: http://jdl.sun.com/webapps/download/GetFile/1.5.0_06plus-b05/windows-i586//
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Programmer\Java\jre1.5.0_06\README.txt

J2SE Runtime Environment 5.0 Update 9 1.5.0.90 ({3248F0A8-6813-11D6-A77B-00B0D0150090})
version: 17104896
version (major): 1
version (minor): 5
estimated size: 122833
install date: 20061101
install source: http://jdl.sun.com/webapps/download/GetFile/1.5.0_09-b03/windows-i586//
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Programmer\Java\jre1.5.0_09\README.txt

J2SE Runtime Environment 5.0 Update 11 1.5.0.110 ({3248F0A8-6813-11D6-A77B-00B0D0150110})
version: 17104896
version (major): 1
version (minor): 5
estimated size: 123326
install date: 20070401
install source: http://javadl.sun.com/webapps/download/GetFile/1.5.0_11-b03/windows-i586//
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Programmer\Java\jre1.5.0_11\README.txt

Java(TM) 6 Update 3 1.6.0.30 ({3248F0A8-6813-11D6-A77B-00B0D0160030})
version: 17170432
version (major): 1
version (minor): 6
estimated size: 113966
install date: 20080224
install source: http://javadl.sun.com/webapps/download/GetFile/1.6.0_03-b05/windows-i586/
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Programmer\Java\jre1.6.0_03\README.txt

Java(TM) 6 Update 7 1.6.0.70 ({3248F0A8-6813-11D6-A77B-00B0D0160070})
version: 17170432
version (major): 1
version (minor): 6
estimated size: 117050
install date: 20080801
install source: http://javadl.sun.com/webapps/download/GetFile/1.6.0_07-b06/windows-i586/
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Programmer\Java\jre1.6.0_07\README.txt

WebFldrs XP 9.50.7523 ({350C9406-3D7C-4EE8-BAA9-00BCB3D54227})
version: 154279267
version (major): 9
version (minor): 50
estimated size: 2596
install date: 20050915
install source: C:\WINDOWS\system32\
publisher: Microsoft Corporation
help link: http://www.microsoft.com/windows

Easy CD & DVD Creator 6 6.1.1.40 ({46DDF76F-ACD4-42BC-B48F-B89C4EE2E1A9})
version: 100663296
version (major): 6
estimated size: 636782
install date: 20051119
install source: D:\
uninstall cmd: MsiExec.exe /I{46DDF76F-ACD4-42BC-B48F-B89C4EE2E1A9}
publisher: Roxio Inc.,
contact: Tech Support
help link: http://support.roxio.com
help telephone: +1 408-367-5555

iTunes 6.0.4.2 ({59C4F14F-7590-45FC-BE9F-A67AB3590709})
version: 100663300
version (major): 6
estimated size: 34690
install date: 20060313
install location: C:\Programmer\iTunes\
install source: C:\WINDOWS\Downloaded Installations\{59C4F14F-7590-45FC-BE9F-A67AB3590709}\
publisher: Apple Computer, Inc.
contact: AppleCare Support
help link: http://www.info.apple.com/
help telephone: 1-800-275-2273

FirstClass® Client 8.043 ({5B35C417-2649-11D6-83D1-0050FC01225C})
version: 137035776
install location: C:\Documents and Settings\Administrator\Skrivebord
uninstall cmd: RunDll32 C:\PROGRA~1\FLLESF~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{5B35C417-2649-11D6-83D1-0050FC01225C}\setup.exe" -l0x6 -uninst

Sony USB Driver ({5C29CB8B-AC1E-4114-8D68-9CD080140D4A})
uninstall cmd: RunDll32 C:\PROGRA~1\FLLESF~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\Setup.exe" UNINSTALL

Windows Genuine Advantage v1.3.0254.0 1.3.0254.0 ({63569CE9-FA00-469C-AF5C-E5D4D93ACF91})
version: 16974078
version (major): 1
version (minor): 3
estimated size: 519
install date: 20050918
install source: C:\DOCUME~1\ADMINI~1\LOKALE~1\Temp\IXP000.TMP\
uninstall cmd: MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
publisher: Microsoft
comments: Your Comments
contact: Customer Support Department
help link: http://www.microsoft.com/genuine/downloads/whyValidate.aspx/help
help telephone: 1-425.882.8080

Microsoft Visual C++ 2005 Redistributable 8.0.56336 ({7299052b-02a4-4627-81f2-1818da5d550d})
version: 134274064
version (major): 8
estimated size: 5330
install date: 20080521
install source: C:\DOCUME~1\ADMINI~1\LOKALE~1\Temp\RarSFX0\
uninstall cmd: MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
publisher: Microsoft Corporation

Jul i Svinget ({81A9CA55-E80B-4109-9A3A-8CF2901142BE})
uninstall cmd: RunDll32 C:\PROGRA~1\FLLESF~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{81A9CA55-E80B-4109-9A3A-8CF2901142BE}\SETUP.EXE" -l0x6

Microsoft Silverlight 2.0.31005.0 ({89F4137D-6C26-4A84-BDB8-2E5A4BB71E00})
version: 33585437
version (major): 2
estimated size: 6000
install date: 20081020
install location: C:\Programmer\Microsoft Silverlight\
install source: h:\6c2705de0454ed58d9eb1e1af8\
uninstall cmd: MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
publisher: Microsoft Corporation
help link: http://go.microsoft.com/fwlink/?LinkID=91955

Microsoft Office XP Professional with FrontPage 10.0.6626.0 ({90280409-6000-11D3-8CFE-0050048383C9})
version: 167778786
version (major): 10
estimated size: 788439
install date: 20081212
install source: G:\
uninstall cmd: MsiExec.exe /I{90280409-6000-11D3-8CFE-0050048383C9}
publisher: Microsoft Corporation
help link: http://www.microsoft.com/support
readme: C:\Programmer\Microsoft Office\Office10\1033\OFREAD10.HTM

Microsoft .NET Framework 1.1 Danish Language Pack 1.1.4322 ({973F8409-F8DA-4A40-ACB4-12B02F3399D7})
version: 16847074
version (major): 1
version (minor): 1
estimated size: 2982
install date: 20050918
install source: C:\DOCUME~1\ADMINI~1\LOKALE~1\Temp\IXP000.TMP\
uninstall cmd: MsiExec.exe /X{973F8409-F8DA-4A40-ACB4-12B02F3399D7}
publisher: Microsoft
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1030\RepairRedist.htm

Google Earth 4.3.7191.6508 ({97C0EA4A-1A0B-4C53-ACEB-49984DA79C90})
version: 67312663
version (major): 4
version (minor): 3
estimated size: 25864
install date: 20080418
install location: C:\Programmer\Google\Google Earth\
install source: C:\DOCUME~1\ADMINI~1\LOKALE~1\Temp\7ZipSfx.000\
uninstall cmd: MsiExec.exe /I{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}
publisher: Google

Adobe Reader 7.1.0 7.1.0 ({AC76BA86-7AD7-1033-7B44-A71000000002})
version: 117506048
version (major): 7
version (minor): 1
estimated size: 67854
install date: 20080821
install source: C:\Programmer\Adobe\Acrobat 7.0\Setup Files\RdrBig710\ENU\
uninstall cmd: MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A71000000002}
publisher: Adobe Systems Incorporated
comments:
contact:
help link: http://www.adobe.com/support/main.html
help telephone:
readme: C:\Programmer\Adobe\Acrobat 7.0\Reader\Readme.htm

Spybot - Search & Destroy 1.6.0 ({B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1)
install date: 20080826
install location: C:\Programmer\Spybot - Search & Destroy\
uninstall cmd: "C:\Programmer\Spybot - Search & Destroy\unins001.exe"
publisher: Safer Networking Limited
help link: http://www.safer-networking.org/index.php?page=support

First Step Guide 1.00.000 ({C797EAF2-707A-4239-BDF3-F2672314A734})
version: 16777216
install location: C:\Programmer\Sony Corporation\Picture Package\First Step Guide
uninstall cmd: RunDll32 C:\PROGRA~1\FLLESF~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{C797EAF2-707A-4239-BDF3-F2672314A734}\setup.exe" -l0x9 UNINSTALL

Microsoft .NET Framework 1.1 1.1.4322 ({CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1})
version: 16847074
version (major): 1
version (minor): 1
estimated size: 75259
install date: 20070716
install source: C:\DOCUME~1\ADMINI~1\LOKALE~1\Temp\IXP000.TMP\
uninstall cmd: MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
publisher: Microsoft
readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm

Uninstall Startup Inspector ({DE114695-AE58-4B66-8E0F-2505188602FB}_is1)
uninstall cmd: "C:\Programmer\Startup Inspector for Windows\unins000.exe"

Ad-Aware 7.1.0.7 ({DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF})
version: 117506048
version (major): 7
version (minor): 1
estimated size: 25797
install date: 20081014
install location: C:\Programmer\Lavasoft\Ad-Aware\
install source: C:\Programmer\Fælles filer\Wise Installation Wizard\
uninstall cmd: MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
publisher: Lavasoft
help link: http://www.lavasoftsupport.com

ALi AGP Driver 2.10 ({EC16B64A-38A7-4D7D-BA2E-671ED441304F})
uninstall cmd: C:\WINDOWS\system32\UnAGP.EXE RunDll32 C:\PROGRA~1\FLLESF~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{EC16B64A-38A7-4D7D-BA2E-671ED441304F}\Setup.exe" -uninst

SoundMAX 5.12.01.4520 ({F0A37341-D692-11D4-A984-009027EC0A9C})
install location: C:\Programmer\Analog Devices\SoundMAX
uninstall cmd: RunDll32 C:\PROGRA~1\FLLESF~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\Setup.exe"
publisher: Analog Devices

ImageMixer VCD2 2.01.002.3 ({F8C6BABF-0837-4EA0-AD6C-8E5A392A7538})
version: 33619970
install location: C:\Programmer\PIXELA\ImageMixer
uninstall cmd: RunDll32 C:\PROGRA~1\FLLESF~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programmer\InstallShield Installation Information\{F8C6BABF-0837-4EA0-AD6C-8E5A392A7538}\setup.exe" -l0x9 UNINSTALL

--- System Services ---
Service (registry key): .NET CLR Data
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): .NET CLR Networking
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): .NETFramework
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): 61883
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: 61883-enhed
Image path: system32\DRIVERS\61883.sys
Image size: 48128
Image MD5: 914A9709FC3BF419AD2F85547F2A4832
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): aawservice
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Lavasoft Ad-Aware Service
Description: Ad-Aware service
Object name: LocalSystem
Image path: C:\Programmer\Lavasoft\Ad-Aware\aawservice.exe
Image size: 611664
Image MD5: 17067069B9A7865028C1F2E6971D0CCC
Control Set: CurrentControlSet
Start: 2
Type: 272
Error Control: 0
Depends On services: RpcSS

Service (registry key): Abiosdsk
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 0

Service (registry key): abp480n5
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): ACPI
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft ACPI-driver
Image path: system32\DRIVERS\ACPI.sys
Image size: 188032
Image MD5: 991B6D6FE2A4D70CAF76C41334E60926
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): ACPIEC
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): adpu160m
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): aeaudio
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: system32\drivers\aeaudio.sys
Image size: 4816
Image MD5: 11C04B17ED2ABBB4833694BCD644AC90
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): aec
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel Acoustic Echo Canceller
Image path: system32\drivers\aec.sys
Image size: 142592
Image MD5: 8BED39E3C35D6A489438B8141717A557
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): AFD
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: AFD
Description: Understøttelse af AFD-netværk
Image path: \SystemRoot\System32\drivers\afd.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): Aha154x
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): aic78u2
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): aic78xx
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Alerter
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Alerter
Description: Sender administrative beskeder til udvalgte brugere og computere. Hvis tjenesten er stoppet, modtager programmer, som bruger administrative administrative beskeder, ikke disse beskeder. Hvis tjenesten er deaktiveret, starter tjenester, som er udtrykkeligt afhængige af den, ikke.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\system32\svchost.exe -k LocalService
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 4
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation

Service (registry key): ALG
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Gatewaytjeneste til programlaget
Description: Understøtter protokol-plug-ins fra andre leverandører til Deling af Internetforbindelse og Windows Firewall.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\alg.exe
Image size: 44544
Image MD5: AB74A1B7500ACA7D43D84804CBDF11FB
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1

Service (registry key): ALI5261
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ALi Based Ethernet NT Driver
Image path: system32\DRIVERS\ALILAN.SYS
Image size: 29184
Image MD5: D644CC2E95FDDDB5497A274727A66F8E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): ALiAGP
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ALi AGP Bus Filter Driver
Image path: system32\DRIVERS\ALiAGP.sys
Image size: 29056
Image MD5: CAB781668A204F5B8CEA4DE7D9E57921
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): AliIde
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: system32\DRIVERS\aliide.sys
Image size: 5248
Image MD5: 1140AB9938809700B46BB88E46D72A96
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): amsint
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): AppMgmt
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Programadministration
Description: Installationstjenester, som f.eks. Tildel, Udgiv og Fjern.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1

Service (registry key): Arp1394
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: 1394 ARP-klientprotokol
Description: 1394 ARP-klientprotokol
Image path: system32\DRIVERS\arp1394.sys
Image size: 60800
Image MD5: B5B8A80875C1DEDEDA8B02765642C32F
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): asc
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): asc3350p
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): asc3550
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): aslm75
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: aslm75
Image path: \??\C:\WINDOWS\system32\drivers\aslm75.sys
Image size: 6272
Image MD5: 71356A1370739E25375A1D17B6AE318F
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): ASP.NET
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): ASP.NET_1.1.4322
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): aspnet_state
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ASP.NET-tilstandstjeneste
Description: Leverer understøttelse af out-of-process-sessionstilstande til ASP.NET. Hvis tjenesten stoppes, bliver out-of-process-anmodninger ikke behandlet. Hvis tjenesten deaktiveres, kan tjenester, der udtrykkeligt afhænger af den, ikke startes.
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
Image size: 32768
Image MD5: E1A1206A4FB19B675E947B29CCD25FBA
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1

Service (registry key): AsyncMac
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: RAS-asynkron mediedriver
Description: RAS-asynkron mediedriver
Image path: system32\DRIVERS\asyncmac.sys
Image size: 14336
Image MD5: B153AFFAC761E7F5FCFA822B9C4E97BC
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): atapi
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Standard IDE/ESDI-harddiskcontroller
Image path: system32\DRIVERS\atapi.sys
Image size: 96512
Image MD5: 9F3A2F5AA6875C72BF062C712CFA2674
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): Atdisk
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 0

Service (registry key): Atmarpc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: ATM ARP-klientprotokol
Description: ATM ARP-klientprotokol
Image path: system32\DRIVERS\atmarpc.sys
Image size: 59904
Image MD5: 9916C1225104BA14794209CFA8012159
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): AudioSrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Audio
Description: Administrerer lydenheder til Windows-baserede programmer. Hvis denne tjeneste stoppes, vil lydenheder og -effekter ikke fungere korrekt. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: PlugPlay,RpcSs

Service (registry key): audstub
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Lydstubdriver
Image path: system32\DRIVERS\audstub.sys
Image size: 3072
Image MD5: D9F724AA26C010A217C97606B160ED68
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Avc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: AVC-enhed
Image path: system32\DRIVERS\avc.sys
Image size: 38912
Image MD5: F8E6956A614F15A0860474C5E2A7DE6B
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): avg8wd
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: AVG8 WatchDog
Object name: LocalSystem
Image path: C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
Image size: 231704
Image MD5: 9B40D378D4E521464212E878BE8216A4
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 1

Service (registry key): AvgLdx86
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: AVG AVI Loader Driver x86
Image path: \SystemRoot\System32\Drivers\avgldx86.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): AvgMfx86
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: AVG On-access Scanner Minifilter Driver x86
Image path: \SystemRoot\System32\Drivers\avgmfx86.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1

Service (registry key): BattC
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): Beep
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): BITS
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Tjenesten Background Intelligent Transfer
Description: Overfører filer i baggrunden ved hjælp af inaktiv netværksbåndbredde. Hvis tjenesten stoppes, kan funktioner som Windows Update og MSN Explorer ikke automatisk hente programmer og andre oplysninger. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, muligvis ikke overføre filer, hvis tjenesterne ikke har en fejlsikker mekanisme til at overføre filer direkte gennem Internet Explorer, når BITS er blevet deaktiveret.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: Rpcss

Service (registry key): Browser
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Computerbrowser
Description: Opretter en opdateret liste over computere på netværket og leverer denne liste til computere, der er angivet som webbrowsere. Hvis tjenesten stoppes, opdateres og vedligeholdes listen ikke. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,LanmanServer

Service (registry key): cbidf2k
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): CCDECODE
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Dekoder til tekstning for hørehæmmede
Image path: system32\DRIVERS\CCDECODE.sys
Image size: 17024
Image MD5: 0BE5AEF125BE881C4F854C554F2B025C
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): cd20xrnt
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Cdaudio
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): Cdfs
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 2
Error Control: 1
Depends On group: "SCSI CDROM Class"

Service (registry key): Cdr4_xp
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): Cdralw2k
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Ink Mathematics · Dec 16, 2008

pt 3

Service (registry key): cdrbsdrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): Cdrom
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Cd-rom-driver
Image path: system32\DRIVERS\cdrom.sys
Image size: 62976
Image MD5: 1F4260CC5B42272D71F79E570A27A4FE
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1
Depends On group: "SCSI miniport"

Service (registry key): cdudf_xp
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1

Service (registry key): Changer
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): CiSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Indekseringstjeneste
Description: Indekserer indholdet og egenskaberne i filerne på lokale computere og fjerncomputere; skaber hurtig filadgang gennem et fleksibelt forespørgselssprog.
Object name: LocalSystem
Image path: %SystemRoot%\system32\cisvc.exe
Image size: 5632
Image MD5: 1838615C98AFA3A0AC1F4B15A113A82F
Control Set: CurrentControlSet
Start: 3
Type: 288
Error Control: 1
Depends On services: RPCSS

Service (registry key): ClipSrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Udklipsbog
Description: Aktiverer Udklipsbog, så oplysninger kan gemmes og deles med fjerncomputere. Hvis tjenesten stoppes, kan Udklipsbog ikke dele oplysninger med fjerncomputere. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\system32\clipsrv.exe
Image size: 33280
Image MD5: 5CEA9FBC68FBD66A91E7EF09900AB566
Control Set: CurrentControlSet
Start: 4
Type: 16
Error Control: 1
Depends On services: NetDDE

Service (registry key): CmdIde
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): COMSysApp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: COM+-systemprogram
Description: Styrer konfiguration og sporing af COM+-baserede (Component Object Model) komponenter. Hvis tjenesten stoppes, fungerer de fleste COM+-baserede tjenester ikke korrekt. Hvis tjenesten deaktiveres, kan tjenester, der udtrykkeligt afhænger af den, ikke startes.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Image size: 5120
Image MD5: 209CDA717E7E3078B9050BACE392172F
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1
Depends On services: rpcss

Service (registry key): ContentFilter
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): ContentIndex
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): Cpqarray
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): CryptSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Kryptografiske tjenester
Description: Indeholder tre administrationstjenester: Tjenesten Katalogdatabase, der bekræfter signaturer for Windows-filer, tjenesten Beskyttet rod, der tilføjer og fjerner certifikater på computeren fra rodnøglecentre, der er tillid til, samt tjenesten Nøgle, der hjælper med at registrere denne computer til certifikater. Hvis denne tjeneste stoppes, fungerer disse administrative tjenester ikke korrekt. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): dac2w2k
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 0

Service (registry key): dac960nt
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): DcomLaunch
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Startprogram til DCOM Serverproces
Description: Giver kørefunktionalitet for DCOM-tjenester.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost -k DcomLaunch
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): Dhcp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: DHCP-klientprogram
Description: Styrer netværkskonfigurationen ved at registrere og opdatere IP-adresser og DNS-navne.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: Tcpip,Afd,NetBT

Service (registry key): Disk
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Diskdriver
Image path: system32\DRIVERS\disk.sys
Image size: 36352
Image MD5: 044452051F3E02E7963599FC8F4F3E25
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1
Depends On group: "SCSI miniport"

Service (registry key): dmadmin
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Logical Disk Manager Administrative Service
Description: Konfigurerer harddiskdrev og diskenheder. Tjenesten kører kun for konfigurationsprocesser og stopper derefter.
Object name: LocalSystem
Image path: %SystemRoot%\System32\dmadmin.exe /com
Image size: 225280
Image MD5: 18A0FA9E374EA49F28AE2D2A0351E6AE
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay,DmServer

Service (registry key): dmboot
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: System32\drivers\dmboot.sys
Image size: 800000
Image MD5: 8A3088F97B2CAA3340BBB068F314E596
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): dmio
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til Logical Disk Manager
Image path: System32\drivers\dmio.sys
Image size: 153600
Image MD5: 6D152A2781FFBD6A63A1E58801240E8E
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): dmload
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: System32\drivers\dmload.sys
Image size: 5888
Image MD5: E9317282A63CA4D188C0DF5E09C6AC5F
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): dmserver
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Logical Disk Manager
Description: Registrerer og overvåger nye harddiskdrev og sender oplysninger om diskenheder til tjenesten Logical Disk Manager Administrative Service til konfiguration. Hvis denne tjeneste stoppes, kan den dynamiske diskstatus og konfigurationsoplysningerne blive forældede. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs,PlugPlay

Service (registry key): DMusic
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel DLS-synthesizer
Image path: system32\drivers\DMusic.sys
Image size: 52864
Image MD5: 8A208DFCF89792A484E76C40E5F50B45
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Dnscache
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: DNS-klient
Description: Fortolker og gemmer DNS-navne for denne computer. Hvis denne tjeneste stoppes, kan computeren ikke fortolke DNS-navne og finde Active Directory-domænecontrollere. Hvis denne tjeneste er deaktiveret, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\system32\svchost.exe -k NetworkService
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: Tcpip

Service (registry key): Dot3svc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Automatisk konfiguration af traditionelt netværk
Description: Denne tjeneste udfører IEEE 802.1X-godkendelse af Ethernet-grænseflade
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k dot3svc
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: Ndisuio,eaphost

Service (registry key): dpti2o
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): drmkaud
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel DRM Audio Descrambler
Image path: system32\drivers\drmkaud.sys
Image size: 2944
Image MD5: 8F5FCFF8E8848AFAC920905FBD9D33C8
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): DVDVRRdr_xp
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1

Service (registry key): dvd_2K
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): EapHost
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Tjenesten Extensible Authentication Protocol
Description: Leverer tjenesten Extensible Authentication Protocol til Windows-klienter
Object name: localSystem
Image path: %SystemRoot%\System32\svchost.exe -k eapsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): ERSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Tjenesten Fejlrapportering
Description: Gør rapportering mulig for tjenester og programmer, der kører i miljøer, der ikke er standard.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 0
Depends On services: RpcSs

Service (registry key): Eventlog
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Hændelseslog
Description: Aktiverer hændelseslogmeddelelser fra Windows-baserede programmer og- komponenter, så de kan ses i Logbog. Denne tjeneste kan ikke stoppes.
Object name: LocalSystem
Image path: %SystemRoot%\system32\services.exe
Image size: 108544
Image MD5: AB2B6ABF3FCDA803FF0E2251F9A5274E
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): EventSystem
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: COM+-hændelsessystem
Description: Understøtter SENS (System Event Notification Service), der indeholder automatisk distribution af hændelser til COM-komponenter, der benytter DTC. Hvis tjenesten stoppes, lukkes SENS, og tjenesten kan derfor ikke levere meddelelser om logon og logoff. Hvis tjenesten deaktiveres, kan tjenester, der udtrykkeligt afhænger af den, ikke startes.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RPCSS

Service (registry key): F1394
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: 1394 X3 Camera
Image path: system32\DRIVERS\F13942k.sys
Image size: 116712
Image MD5: 805502C97AD75B539B803D2C7A6CB528
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Fastfat
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 2
Error Control: 1

Service (registry key): FastUserSwitchingCompatibility
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Hurtigt brugerskift-kompatibilitet
Description: Indeholder administration til programmer, som kræver hjælp i et miljø med flere brugere.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: TermService

Service (registry key): Fdc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til diskettedrevscontroller
Image path: system32\DRIVERS\fdc.sys
Image size: 27392
Image MD5: 92CDD60B6730B9F50F6A1A0C1F8CDC81
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Fips
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): Flpydisk
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til diskettedrev
Image path: system32\DRIVERS\flpydisk.sys
Image size: 20480
Image MD5: 9D27E7B80BFCDF1CDD9B555862D5E7F0
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): FltMgr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: FltMgr
Description: File System Filter Manager Driver
Image path: system32\drivers\fltmgr.sys
Image size: 129792
Image MD5: B2CF4B0786F8212CB92ED2B50C6DB6B0
Control Set: CurrentControlSet
Start: 0
Type: 2
Error Control: 1

Service (registry key): Fs_Rec
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 8
Error Control: 0

Service (registry key): Ftdisk
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til diskenhedsstyring
Image path: system32\DRIVERS\ftdisk.sys
Image size: 125312
Image MD5: 0A58505B5D0ABA661D2FF59CD8CF79B9
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): gameenum
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Spilportoptælling
Image path: system32\DRIVERS\gameenum.sys
Image size: 10624
Image MD5: 065639773D8B03F33577F6CDAEA21063
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): GEARAspiWDM
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: GEARAspiWDM
Image path: System32\Drivers\GEARAspiWDM.sys
Image size: 14408
Image MD5: 32A73A8952580B284A47290ADB62032A
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Gpc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Standardpakkeklassificering
Description: Standardpakkeklassificering
Image path: system32\DRIVERS\msgpc.sys
Image size: 35072
Image MD5: 0A02C63C8B144BD8C86B103DEE7C86A2
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): helpsvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Hjælp og support
Description: Aktiverer Hjælp og support for denne computer. Hvis denne tjeneste stoppes, vil Hjælp og support ikke længere være tilgængelig. Hvis denne tjeneste deaktiveres, vil tjenester, der er direkte afhængige af den, ikke kunne startes.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RPCSS

Service (registry key): HidServ
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Adgang til brugerstyrede inputenheder (HID)
Description: Aktiverer standardadgang for input til Brugerstyrede inputenheder (HID), der aktiverer og vedligeholder brug af foruddefinerede genvejstaster på tastaturer, fjernstyringer og andre multimedieenheder. Hvis denne tjeneste stoppes, fungerer genvejstaster, der styres af denne tjeneste, ikke længere. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 4
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): hkmsvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Tjenesten Tilstandsnøgle og certifikatadministration
Description: Administrerer tilstandscertifikater og -nøgler (anvendt af NAP)
Object name: localSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): hpn
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): HTTP
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: HTTP
Description: Denne tjeneste implementerer HTTP-protokollen (hypertext transfer protocol). Hvis denne tjeneste er deaktiveret, kan ingen direkte afhængige tjenester starte.
Image path: System32\Drivers\HTTP.sys
Image size: 264832
Image MD5: F6AACF5BCE2893E0C1754AFEB672E5C9
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): HTTPFilter
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: HTTP SSL
Description: Denne tjeneste implementerer den sikre HTTPS-protokol (secure hypertext transfer protocol) for HTTP-tjenesten ved hjælp af SSL (Secure Socket Layer). Hvis denne tjeneste er deaktiveret, kan ingen direkte afhængige tjenester starte.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k HTTPFilter
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: HTTP

Service (registry key): i2omgmt
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): i2omp
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): i8042prt
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: i8042-tastatur og PS/2-museportdriver
Image path: system32\DRIVERS\i8042prt.sys
Image size: 52864
Image MD5: 42F890598EFB480076558CA3CC151107
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): IDriverT
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: InstallDriver Table Manager
Description: Provides support for the Running Object Table for InstallShield Drivers
Object name: LocalSystem
Image path: "C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe"
Image size: 69632
Image MD5: 1CF03C69B49ACB70C722DF92755C0C8C
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 0

Service (registry key): Imapi
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Filterdriver til cd-skrivning
Image path: system32\DRIVERS\imapi.sys
Image size: 42112
Image MD5: 083A052659F5310DD8B6A6CB05EDCF8E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): ImapiService
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: COM-tjenesten IMAPI cd-skrivning
Description: Administerer CD-indspilning ved hjælp af IMAPI (Image Mastering Applications Programming Interface). Hvis denne tjeneste stoppes, kan computeren ikke indspille cd'er. Hvis denne tjeneste deaktiveres, vil alle tjenester, som er afhængige af den, ikke starte.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\imapi.exe
Image size: 150528
Image MD5: F73C9C37D4B7453C2CB7DCFD2640C75F
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1

Service (registry key): inetaccs
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): ini910u
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Inport
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): IntelIde
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): intelppm
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til Intel-processor
Image path: system32\DRIVERS\intelppm.sys
Image size: 40192
Image MD5: D1CD31B6CD4A99F3B82AEC84CFDD4CBA
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): Ip6Fw
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IPv6-driver til Windows Firewall
Description: Beskytter mod uønsket indtrængen på et hjemmenetværk eller et mindre kontornetværk.
Image path: system32\drivers\ip6fw.sys
Image size: 36608
Image MD5: 3BB22519A194418D5FEC05D800A19AD0
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): IpFilterDriver
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Filterdriver til IP-trafik
Description: Filterdriver til IP-trafik
Image path: system32\DRIVERS\ipfltdrv.sys
Image size: 32896
Image MD5: 731F22BA402EE4B62748ADAF6363C182
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): IpInIp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til IP i IP-tunnel
Description: Driver til IP i IP-tunnel
Image path: system32\DRIVERS\ipinip.sys
Image size: 20864
Image MD5: B87AB476DCF76E72010632B5550955F5
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): IpNat
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Oversætter til IP-netværksadresser
Description: Oversætter til IP-netværksadresser
Image path: system32\DRIVERS\ipnat.sys
Image size: 152832
Image MD5: CC748EA12C6EFFDE940EE98098BF96BB
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): iPodService
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: iPodService
Description: iPod hardware management services
Object name: LocalSystem
Image path: C:\Programmer\iPod\bin\iPodService.exe
Image size: 323584
Image MD5: 962BC769D1008D83F6A00B9DE887EEF4
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1
Depends On services: RPCSS

Service (registry key): IPSec
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IPSEC-driver
Description: IPSEC-driver
Image path: system32\DRIVERS\ipsec.sys
Image size: 75264
Image MD5: 23C74D75E36E7158768DD63D92789A91
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): IRENUM
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Tjeneste til IR-optælling
Image path: system32\DRIVERS\irenum.sys
Image size: 11264
Image MD5: C93C9FF7B04D772627A3646D89F7BF89
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): ISAPISearch
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): isapnp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: PnP ISA/EISA-busdriver
Image path: system32\DRIVERS\isapnp.sys
Image size: 37504
Image MD5: 3CE6EC5903C59223B61F6A0B9B84B022
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 3

Service (registry key): Kbdclass
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Klassedriver til tastatur
Image path: system32\DRIVERS\kbdclass.sys
Image size: 24832
Image MD5: 32E823DFD0A7F18CF3B024F78C7AA7DD
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): kbfilter
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Keyboard Filter Driver
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): KLIF
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: KLIF
Description: KLIF Minifilter
Image path: system32\DRIVERS\klif.sys
Image size: 127768
Image MD5: 2CF7C3DD0102A32A680EF97F3B1C861A
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1
Depends On services: FltMgr

Service (registry key): kmixer
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel Wave-lydmixer
Image path: system32\drivers\kmixer.sys
Image size: 172416
Image MD5: 692BCF44383D056AED41B045A323D378
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): KSecDD
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): lanmanserver
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Server
Description: Understøtter deling af filer, udskrifter og navngivne pipes på netværket for denne computer. Hvis denne tjeneste stoppes, vil disse funktioner ikke være tilgængelige. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): lanmanworkstation
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Arbejdsstation
Description: Opretter og vedligeholder klientnetværksforbindelser til fjernservere. Hvis denne tjeneste stoppes, vil forbindelserne ikke være tilgængelige. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke startes.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): lbrtfdc
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): ldap
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): LicenseService
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): LmHosts
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Tjenesten TCP/IP NetBIOS Helper
Description: Muliggør understøttelse af tjenesten NetBIOS over TCP/IP (NetBT) og NetBIOS-navnefortolkning.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\system32\svchost.exe -k LocalService
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: NetBT,Afd

Service (registry key): Messenger
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Messenger
Description: Overfører net send- og meddelelser fra tjenesten Alerter mellem klienter og servere. Denne tjeneste er ikke tilknyttet Windows Messenger. Hvis denne tjeneste stoppes, overføres meddelelser fra tjenesten Alerter ikke. Hvis denne tjeneste deaktiveres, vil tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 4
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation,NetBIOS,PlugPlay,RpcSS

Service (registry key): mmc_2K
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): mnmdd
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): mnmsrvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: NetMeeting - Deling af fjernskrivebord
Description: Giver mulighed for at en autoriseret bruger kan opnå adgang til denne computer fra en ekstern placering ved hjælp af NetMeeting over firmaets intranet. Hvis denne tjeneste stoppes, er Deling af fjernskrivebord ikke tilgængelig. Hvis denne tjeneste er deaktiveret, kan ingen direkte afhængige tjenester starte.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\mnmsrvc.exe
Image size: 32768
Image MD5: 8184E5463AB9BB8CFB37A28852DB16C5
Control Set: CurrentControlSet
Start: 3
Type: 272
Error Control: 1

Service (registry key): Modem
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): Mouclass
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Klassedriver til mus
Image path: system32\DRIVERS\mouclass.sys
Image size: 23296
Image MD5: 22774A2AB832972ECA2CE227819F5AF0
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): moufiltr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Mouse Filter Driver
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): MountMgr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Styring af tilslutningspunkter
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): mraid35x
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): MRxDAV
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Klientomdirigering for WebDav
Description: Klientomdirigering for WebDav
Image path: system32\DRIVERS\mrxdav.sys
Image size: 180608
Image MD5: 11D42BB6206F33FBB3BA0288D3EF81BD
Control Set: CurrentControlSet
Start: 3
Type: 2
Error Control: 1

Service (registry key): MRxSmb
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: MRXSMB
Description: MRXSMB
Image path: system32\DRIVERS\mrxsmb.sys
Image size: 455296
Image MD5: 60AE98742484E7AB80C3C1450E708148
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1

Service (registry key): MSDTC
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: DTC (Distributed Transaction Coordinator)
Description: Koordinerer transaktioner, der spænder over flere ressourcestyringsprogrammer, f.eks. databaser, meddelelseskøer og filsystemer. Hvis tjenesten stoppes, finder disse transaktioner ikke sted. Hvis tjenesten deaktiveres, kan tjenester, der udtrykkeligt afhænger af den, ikke startes.
Object name: NT AUTHORITY\NetworkService
Image path: C:\WINDOWS\system32\msdtc.exe
Image size: 6144
Image MD5: 5375122A1C3ABF51A9DBE222398E3A25
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1
Depends On services: RPCSS,SamSS

Service (registry key): MSDV
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft DV Camera and VCR
Image path: system32\DRIVERS\msdv.sys
Image size: 51200
Image MD5: 1477849772712BAC69C144DCF2C9CE81
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Msfs
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1

Service (registry key): MSIServer
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Installer
Description: Tilføjer, ændrer og fjerner programmer, der er angivet som en Windows Installer-pakke (*.msi). Hvis tjenesten deaktiveres, vil alle tjenester, der er direkte afhængige af denne tjeneste, ikke kunne starte.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\msiexec.exe /V
Image size: 78848
Image MD5: 0055742F61EC4924110F7B097ED5787C
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): MSKSSRV
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Serviceproxy til Microsoft Streaming
Image path: system32\drivers\MSKSSRV.sys
Image size: 7552
Image MD5: D1575E71568F4D9E14CA56B7B0453BF1
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): MSPCLOCK
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Streaming Clock Proxy
Image path: system32\drivers\MSPCLOCK.sys
Image size: 5376
Image MD5: 325BB26842FC7CCC1FCCE2C457317F3E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): MSPQM
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Kvalitetsstyringsproxy til Microsoft Streaming
Image path: system32\drivers\MSPQM.sys
Image size: 4992
Image MD5: BAD59648BA099DA4A17680B39730CB3D
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): mssmbios
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til Microsoft System Management BIOS
Image path: system32\DRIVERS\mssmbios.sys
Image size: 15488
Image MD5: AF5F4F3F14A8EA2C26DE30F7A1E17136
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): MSTEE
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Streaming Tee/Sink-to-Sink-konverteringsprogram
Image path: system32\drivers\MSTEE.sys
Image size: 5504
Image MD5: E53736A9E30C45FA9E7B5EAC55056D1D
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): ms_mpu401
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft MPU-401 MIDI UART-driver
Image path: system32\drivers\msmpu401.sys
Image size: 2944
Image MD5: CA3E22598F411199ADC2DFEE76CD0AE0
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Mup
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Mup
Control Set: CurrentControlSet
Start: 0
Type: 2
Error Control: 1

Service (registry key): NABTSFEC
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: NABTS/FEC VBI Codec
Image path: system32\DRIVERS\NABTSFEC.sys
Image size: 85248
Image MD5: 5B50F1B2A2ED47D560577B221DA734DB
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): napagent
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Network Access Protection Agent
Description: Tillad, at Windows-klienter deltager i Network Access Protection
Object name: localSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): NDIS
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: NDIS-systemdriver
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): NdisIP
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft TV/Video-forbindelse
Image path: system32\DRIVERS\NdisIP.sys
Image size: 10880
Image MD5: 7FF1F1FD8609C149AA432F95A8163D97
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): NdisTapi
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Remote Access NDIS TAPI-driver
Description: Remote Access NDIS TAPI-driver
Image path: system32\DRIVERS\ndistapi.sys
Image size: 10112
Image MD5: 1AB3D00C991AB086E69DB84B6C0ED78F
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Ndisuio
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: NDIS-protokol til I/O i brugertilstand
Description: NDIS-protokol til I/O i brugertilstand
Image path: system32\DRIVERS\ndisuio.sys
Image size: 14592
Image MD5: F927A4434C5028758A842943EF1A3849
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): NdisWan
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Remote Access NDIS WAN-driver
Description: Remote Access NDIS WAN-driver
Image path: system32\DRIVERS\ndiswan.sys
Image size: 91520
Image MD5: EDC1531A49C80614B2CFDA43CA8659AB
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): NDProxy
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): NetBIOS
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: NetBIOS-grænseflade
Description: NetBIOS-grænseflade
Image path: system32\DRIVERS\netbios.sys
Image size: 34688
Image MD5: 5D81CF9A2F1A3A756B66CF684911CDF0
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1

Service (registry key): NetBT
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: NetBIOS over TCP/IP
Description: NetBIOS over TCP/IP
Image path: system32\DRIVERS\netbt.sys
Image size: 162816
Image MD5: 74B2B2F5BEA5E9A3DC021D685551BD3D
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): NetDDE
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Network DDE
Description: Leverer netværkstransport og sikkerhed for DDE (Dynamic Data Exchange) til programmer, der kører på den samme computer eller på forskellige computere. Hvis denne tjeneste stoppes, er DDE-transport og -sikkerhed ikke tilgængelig. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\system32\netdde.exe
Image size: 112640
Image MD5: 1B81D1D833268A82F979CB4CC8F7A4EF
Control Set: CurrentControlSet
Start: 4
Type: 32
Error Control: 1
Depends On services: NetDDEDSDM

Service (registry key): NetDDEdsdm
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Network DDE DSDM
Description: Administrerer DDE-netværksshares (Dynamic Data Exchange ). Hvis denne tjeneste stoppes, er DDE-netværksshares ikke tilgængelige. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\system32\netdde.exe
Image size: 112640
Image MD5: 1B81D1D833268A82F979CB4CC8F7A4EF
Control Set: CurrentControlSet
Start: 4
Type: 32
Error Control: 1

Ink Mathematics · Dec 16, 2008

pt 4

Service (registry key): Netlogon
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Netlogon
Description: Understøtter videregivelse af godkendelse af kontologon-handlinger for computere i et domæne.
Object name: LocalSystem
Image path: %SystemRoot%\system32\lsass.exe
Image size: 13312
Image MD5: AC9FCA8BCD685ABDB9928B1964B731A2
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation

Service (registry key): Netman
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Netværksforbindelser
Description: Administrerer objekter i mappen Netværks- og opkaldsforbindelser, hvor du kan se forbindelser til både fjern- og lokalnetværk.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 288
Error Control: 1
Depends On services: RpcSs

Service (registry key): NIC1394
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: 1394-netværksdriver
Image path: system32\DRIVERS\nic1394.sys
Image size: 61824
Image MD5: E9E47CFB2D461FA0FC75B7A74C6383EA
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Nla
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: NLA (Network Location Awareness)
Description: Indsamler og gemmer oplysninger om netværkskonfigurationen og -placeringen og giver besked til programmer, når oplysningerne ændres.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: Tcpip,Afd

Service (registry key): Npfs
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1

Service (registry key): Ntfs
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 2
Error Control: 1

Service (registry key): NtLmSsp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: NT LM Security Support Provider
Description: Giver sikkerhed til programmer til fjernprocedurekald (RPC), der bruger andre transportformer end navngivne pipes.
Object name: LocalSystem
Image path: %SystemRoot%\system32\lsass.exe
Image size: 13312
Image MD5: AC9FCA8BCD685ABDB9928B1964B731A2
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1

Service (registry key): NtmsSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Flytbare lagermedier
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): Null
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): nv
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: system32\DRIVERS\nv4_mini.sys
Image size: 1897408
Image MD5: 2B298519EDBFCF451D43E0F1E8F1006D
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): NwlnkFlt
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Filterdriver til IPX-trafik
Description: Filterdriver til IPX-trafik
Image path: system32\DRIVERS\nwlnkflt.sys
Image size: 12416
Image MD5: B305F3FAD35083837EF46A0BBCE2FC57
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: NwlnkFwd

Service (registry key): NwlnkFwd
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til IPX-trafikvideresendelse
Description: Driver til IPX-trafikvideresendelse
Image path: system32\DRIVERS\nwlnkfwd.sys
Image size: 32512
Image MD5: C99B3415198D1AAB7227F2C88FD664B9
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): ohci1394
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: VIA OHCI Compliant IEEE 1394-værtscontroller
Image path: system32\DRIVERS\ohci1394.sys
Image size: 61696
Image MD5: CA33832DF41AFB202EE7AEB05145922F
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): Parport
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til parallel port
Image path: system32\DRIVERS\parport.sys
Image size: 80256
Image MD5: 9E048790F33FE5F4FA9D27B5650A1DD5
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): PartMgr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Partitionsstyring
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): ParVdm
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 2
Type: 1
Error Control: 0
Depends On services: Parport
Depends On group: "Parallel arbitrator"

Service (registry key): PCI
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: PCI Bus Driver
Image path: system32\DRIVERS\pci.sys
Image size: 68096
Image MD5: 5D756DA95BD1E2F6E495704715532FDC
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): PCIDump
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): PCIIde
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Pcmcia
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): PDCOMP
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): PDFRAME
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): PDRELI
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): PDRFRAME
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): perc2
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): perc2hib
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): PerfDisk
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): PerfNet
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): PerfOS
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): PerfProc
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): PlugPlay
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Plug and Play
Description: Aktiverer en computer, så den genkender hardwareændringer og tilpasser sig disse med lidt eller intet input fra brugeren. Hvis denne tjeneste stoppes eller deaktiveres, resulterer det i at systemet bliver ustabilt.
Object name: LocalSystem
Image path: %SystemRoot%\system32\services.exe
Image size: 108544
Image MD5: AB2B6ABF3FCDA803FF0E2251F9A5274E
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): PolicyAgent
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: IPSEC Policy Agent
Description: Styrer IP-sikkerhedspolitik og starter driverne for ISAKMP/Oakley (IKE) og IP-sikkerhed.
Object name: LocalSystem
Image path: %SystemRoot%\system32\lsass.exe
Image size: 13312
Image MD5: AC9FCA8BCD685ABDB9928B1964B731A2
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RPCSS,Tcpip,IPSec

Service (registry key): PptpMiniport
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: WAN-miniport (PPTP)
Description: WAN-miniport (PPTP)
Image path: system32\DRIVERS\raspptp.sys
Image size: 48384
Image MD5: EFEEC01B1D3CF84F16DDD24D9D9D8F99
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): ProtectedStorage
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Beskyttet lager
Description: Yder beskyttet lager til følsomme data, som f.eks. private nøgler, til at forhindre uautoriserede tjenester, processer eller brugere i at få adgang.
Object name: LocalSystem
Image path: %SystemRoot%\system32\lsass.exe
Image size: 13312
Image MD5: AC9FCA8BCD685ABDB9928B1964B731A2
Control Set: CurrentControlSet
Start: 2
Type: 288
Error Control: 1
Depends On services: RpcSs

Service (registry key): PSched
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: QoS-pakkeplanlægning
Description: QoS-pakkeplanlægning
Image path: system32\DRIVERS\psched.sys
Image size: 69120
Image MD5: 09298EC810B07E5D582CB3A3F9255424
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1
Depends On services: Gpc

Service (registry key): Ptilink
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til direkte, parallel forbindelse
Description: Driver til direkte, parallel forbindelse
Image path: system32\DRIVERS\ptilink.sys
Image size: 17792
Image MD5: 80D317BD1C3DBC5D4FE7B1678C60CADD
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): pwd_2k
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): ql1080
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Ql10wnt
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): ql12160
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): ql1240
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): ql1280
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): RasAcd
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til Remote Access Auto Connection
Description: Driver til Remote Access Auto Connection
Image path: system32\DRIVERS\rasacd.sys
Image size: 8832
Image MD5: FE0D99D6F31E4FAD8159F690D68DED9C
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): RasAuto
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Remote Access Auto Connection Manager
Description: Opretter en forbindelse til et fjernnetværk, når et program henviser til andre DNS- eller NetBIOS-navne eller adresser.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RasMan,Tapisrv

Service (registry key): Rasl2tp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: WAN-miniport (L2TP)
Description: WAN-miniport (L2TP)
Image path: system32\DRIVERS\rasl2tp.sys
Image size: 51328
Image MD5: 11B4A627BC9614B885C4969BFA5FF8A6
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): RasMan
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Remote Access Connection Manager
Description: Opretter en netværksforbindelse.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: Tapisrv

Service (registry key): RasPppoe
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Remote Access PPPOE-driver
Description: Remote Access PPPOE-driver
Image path: system32\DRIVERS\raspppoe.sys
Image size: 41472
Image MD5: 5BC962F2654137C9909C3D4603587DEE
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Raspti
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Direkte parallel
Description: Direkte parallel
Image path: system32\DRIVERS\raspti.sys
Image size: 16512
Image MD5: FDBB1D60066FCFBB7452FD8F9829B242
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Rdbss
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Rdbss
Description: Rdbss
Image path: system32\DRIVERS\rdbss.sys
Image size: 175744
Image MD5: 7AD224AD1A1437FE28D89CF22B17780A
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1

Service (registry key): RDPCDD
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: System32\DRIVERS\RDPCDD.sys
Image size: 4224
Image MD5: 4912D5B403614CE99C28420F75353332
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): RDPDD
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): rdpdr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til Terminal Server-enhedsomdirigering
Image path: system32\DRIVERS\rdpdr.sys
Image size: 196224
Image MD5: 15CABD0F7C00C47C70124907916AF3F1
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): RDPNP
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): RDPWD
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): RDSessMgr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Hjælp til Sessionsstyring til Fjernskrivebord
Description: Administrerer og kontrollerer Fjernsupport. Hvis denne tjeneste stoppes, er Fjernsupport ikke tilgængelig. Se under fanen Afhængighed i dialogboksen Egenskaber, inden du stopper denne tjeneste.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\sessmgr.exe
Image size: 141824
Image MD5: 2C0AB39D91E3C9118A191A48F7BD67F6
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1
Depends On services: RPCSS

Service (registry key): redbook
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Filterdriver til digital cd-lydafspilning
Image path: system32\DRIVERS\redbook.sys
Image size: 58112
Image MD5: D2EA9DAE9A9F1BF40C0EA1D1D7C5592C
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): RemoteAccess
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Routing og Remote Access
Description: Tilbyder routingtjenester til virksomheder i LAN- og WAN-miljøer.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 4
Type: 32
Error Control: 1
Depends On services: RpcSS
Depends On group: NetBIOSGroup

Service (registry key): RemoteRegistry
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Remote Registry
Description: Gør det muligt for fjernbrugere at ændre indstillingerne i registreringsdatabasen på denne computer. Hvis denne tjeneste stoppes, kan registreringsdatabasen kun ændres af brugere på denne computer. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\system32\svchost.exe -k LocalService
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RPCSS

Service (registry key): RpcLocator
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Remote Procedure Call (RPC) Locator
Description: Administrerer databasen for RPC-navnetjenesten.
Object name: NT AUTHORITY\NetworkService
Image path: %SystemRoot%\system32\locator.exe
Image size: 75264
Image MD5: 9FABC6ADD7A3212EA934E62943DE252C
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1
Depends On services: LanmanWorkstation

Service (registry key): RpcSs
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: RPC (Remote Procedure Call )
Description: Slutpunktsafbildning og diverse andre RPC-tjenester.
Object name: NT Authority\NetworkService
Image path: %SystemRoot%\system32\svchost -k rpcss
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): RSVP
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: QoS RSVP
Description: Giver netværkssignalering og lokal trafikkontrol til QoS-sikre programmer og kontrolunderprogrammer.
Object name: LocalSystem
Image path: %SystemRoot%\system32\rsvp.exe
Image size: 132608
Image MD5: 72309905945D7EAAB911B376F86B95E6
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1
Depends On services: TcpIp,Afd,RpcSs

Service (registry key): SamSs
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: SAM (Security Accounts Manager)
Description: Gemmer sikkerhedsoplysninger om lokale brugerkonti.
Object name: LocalSystem
Image path: %SystemRoot%\system32\lsass.exe
Image size: 13312
Image MD5: AC9FCA8BCD685ABDB9928B1964B731A2
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RPCSS

Service (registry key): SCardSvr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Chipkort
Description: Administrerer adgang til chipkort, der læses af denne computer. Hvis denne tjeneste stoppes, kan computeren ikke læse chipkort. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\SCardSvr.exe
Image size: 97280
Image MD5: C8BF6AE55768820130ECF35A6E4D64CC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 0
Depends On services: PlugPlay

Service (registry key): Schedule
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Opgavestyring
Description: Gør det muligt for en bruger at konfigurere og planlægge automatiserede opgaver på denne computer. Hvis denne tjeneste stoppes, køres disse opgaver ikke på de planlagte tidspunkter. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): ScsiPort
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: %SystemRoot%\system32\drivers\scsiport.sys
Image size: 96384
Image MD5: 76C465F570E90C28942D52CCB2580A10
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): Secdrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Secdrv
Description: SafeDisc driver
Image path: system32\DRIVERS\secdrv.sys
Image size: 20480
Image MD5: 90A3935D05B494A5A39D37E71F09A677
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): seclogon
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Alternativt logon
Description: Gør det muligt at starte processer med alternative legitimationsoplysninger. Hvis denne tjeneste stoppes, er denne logongtype ikke tilgængelig. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 288
Error Control: 0

Service (registry key): SENS
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: System Event Notification
Description: Sporer systemhændelser som Windows-logon, netværks- og strømhændelser. Giver besked om disse hændelser til abonnenter af tjenesten COM+ Event System.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: EventSystem

Service (registry key): serenum
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Serenum-filterdriver
Image path: system32\DRIVERS\serenum.sys
Image size: 15744
Image MD5: 0F29512CCD6BEAD730039FB4BD2C85CE
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Serial
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Seriel portdriver
Image path: system32\DRIVERS\serial.sys
Image size: 64768
Image MD5: 680ED46039EBD4C23EB708F1AF6B9E5D
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): Sfloppy
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0
Depends On group: "SCSI miniport"

Service (registry key): SharedAccess
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Firewall/Deling af Internetforbindelse
Description: Giver mulighed for adresseoversættelse, adressering, navnefortolkning og/eller tjenester til forebyggelse af uautoriseret brug for netværksadresser på et hjemmenetværk eller mindre kontornetværk.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: Netman,WinMgmt

Service (registry key): ShellHWDetection
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Hardwaregenkendelse på brugergrænsefladen
Description: Indeholder beskeder om hardwarehændelser i forbindelse med automatisk afspilning.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 0
Depends On services: RpcSs

Service (registry key): Simbad
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): SLIP
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: BDA Slip De-Framer
Image path: system32\DRIVERS\SLIP.sys
Image size: 11136
Image MD5: 866D538EBE33709A5C9F5C62B73B7D14
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): smwdm
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: system32\drivers\smwdm.sys
Image size: 602880
Image MD5: F1B8248D5D7E151B8934CDEF4424FB6E
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): sonypvs1
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Sony Digital Imaging Video2
Image path: system32\DRIVERS\sonypvs1.sys
Image size: 102220
Image MD5: DFADFC2C86662F40759BF02ADD27D569
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): SONYPVU1
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Sony USB-filterdriver (SONYPVU1)
Image path: system32\DRIVERS\SONYPVU1.SYS
Image size: 7552
Image MD5: A1ECEEAA5C5E74B2499EB51D38185B84
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): SoundMAX Agent Service (default)
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: SoundMAX Agent Service
Object name: LocalSystem
Image path: C:\Programmer\Analog Devices\SoundMAX\SMAgent.exe
Image size: 45056
Image MD5: 3978F082274F723AD5A0A8058C2417DD
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 1

Service (registry key): Sparrow
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): splitter
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel Audio Splitter
Image path: system32\drivers\splitter.sys
Image size: 6272
Image MD5: AB8B92451ECB048A4D1DE7C3FFCB4A9F
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): Spooler
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Print Spooler
Description: Indlæser filer i hukommelsen til senere udskrivning.
Object name: LocalSystem
Image path: %SystemRoot%\system32\spoolsv.exe
Image size: 57856
Image MD5: E06D0A59737CF479466A86AB5E2A0B6B
Control Set: CurrentControlSet
Start: 2
Type: 272
Error Control: 1
Depends On services: RPCSS

Service (registry key): sr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Filterdriver til Systemgendannelse
Image path: system32\DRIVERS\sr.sys
Image size: 73344
Image MD5: B3ECB8B07F7991132C71C1B16A82FFE3
Control Set: CurrentControlSet
Start: 0
Type: 2
Error Control: 1

Service (registry key): srescan
Registry path: \SYSTEM\CurrentControlSet\Services\
Image path: system32\ZoneLabs\srescan.sys
Image size: 51176
Image MD5: BDA0ECC7CBA1D3B9FD7FF2881BF9B463
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 0

Service (registry key): srservice
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Tjenesten Systemgendannelse
Description: Udfører funktioner til Systemgendannelse. Hvis du vil stoppe denne tjeneste, skal du slå Systemgendannelse fra på fanen Systemgendannelse i Denne computer->Egenskaber
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): Srv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Srv
Description: Srv
Image path: system32\DRIVERS\srv.sys
Image size: 333824
Image MD5: 4F8A43ADEF66F135564085A9DCA96A26
Control Set: CurrentControlSet
Start: 3
Type: 2
Error Control: 1

Service (registry key): SSDPSRV
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: SSDP-genkendelsestjeneste
Description: Gør det muligt at finde UPnP-enheder på hjemmenetværket.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\system32\svchost.exe -k LocalService
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: HTTP

Service (registry key): stisvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows-billedscanning
Description: Stiller billedscanningstjenester til rådighed for scannere og kameraer.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k imgsvc
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): streamip
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: BDA IPSink
Image path: system32\DRIVERS\StreamIP.sys
Image size: 15232
Image MD5: 77813007BA6265C4B6098187E6ED79D2
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): swenum
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Software-busdriver
Image path: system32\DRIVERS\swenum.sys
Image size: 4352
Image MD5: 3941D127AEF12E93ADDF6FE6EE027E0F
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): swmidi
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel GS Wavetable-synthesizer
Image path: system32\drivers\swmidi.sys
Image size: 56576
Image MD5: 8CE882BCC6CF8A62F2B2323D95CB3D01
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): SwPrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: MS Software Shadow Copy Provider
Description: Administrerer softwarebaserede øjebliksbilleder, der tages af tjenesten Volume Shadow Copy. Hvis denne tjeneste stoppes, kan softwarebaserede øjebliksbilleder ikke administreres. Hvis denne tjeneste deaktiveres, kan ingen tjenester, der er afhængige af den, starte.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\dllhost.exe /Processid:{B63D200E-C76D-40C5-BAF9-86E75CE8A944}
Image size: 5120
Image MD5: 209CDA717E7E3078B9050BACE392172F
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 0
Depends On services: rpcss

Service (registry key): swwd
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): symc810
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): symc8xx
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): sym_hi
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): sym_u3
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): sysaudio
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft Kernel System Audio-enhed
Image path: system32\drivers\sysaudio.sys
Image size: 60800
Image MD5: 8B83F3ED0F1688B4958F77CD6D2BF290
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): SysmonLog
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Performance Logs and Alerts
Description: Indsamler ydelsesdata fra lokale eller fjerncomputere baseret på forudkonfigurerede planlægningsparametre, og skriver derefter dataene til en logfil eller udløser en besked. Hvis denne tjeneste stoppes, indsamles der ikke ydelsesoplysninger. Hvis denne tjeneste deaktiveres, vil alle tjenester, som er afhængige af den, ikke starte.
Object name: NT Authority\NetworkService
Image path: %SystemRoot%\system32\smlogsvc.exe
Image size: 90624
Image MD5: 6453945E83873CDC17E81B0E6A71E707
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1

Service (registry key): TapiSrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Telekommunikation
Description: Giver understøttelse af telekommunikation (TAPI) til programmer, der styrer telekommunikationsenheder og IP-baserede telefonforbindelser på den lokale computer, og gennem lokalnetværket på servere, der også kører tjenesten Telephony.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: PlugPlay,RpcSs

Service (registry key): Tcpip
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: TCP/IP-protokoldriver
Description: TCP/IP-protokoldriver
Image path: system32\DRIVERS\tcpip.sys
Image size: 361600
Image MD5: 9AEFA14BD6B182D61E3119FA5F436D3D
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1
Depends On services: IPSec

Service (registry key): TDPIPE
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): TDTCP
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): TermDD
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til terminalenhed
Image path: system32\DRIVERS\termdd.sys
Image size: 40840
Image MD5: 88155247177638048422893737429D9E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): TermService
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Terminal Services
Description: Tillader, at flere brugere opretter interaktiv forbindelse til en computer, samt visning af skriveborde og programmer på fjerncomputere. Understøttelse af Fjernskrivebord (inklusive Fjernskrivebord for administratorer), Hurtigt brugerskift, Fjernsupport og Terminalserver.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost -k DComLaunch
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RPCSS

Service (registry key): Themes
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Temaer
Description: Indeholder administration af temaer på brugergrænsefladen.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): TlntSvr
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Telnet
Description: Gør det muligt for en fjernbruger at logge på denne computer og køre programmer, og understøtter diverse TCP/IP Telnet-klienter, inklusive UNIX- og Windows-baserede computere. Hvis denne tjeneste stoppes, er fjernadgang til programmer muligvis ikke tilgængelig. Hvis denne tjeneste deaktiveres, vil alle tjenester, som er afhængige af den, ikke starte.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\tlntsvr.exe
Image size: 74240
Image MD5: 5CA8CA112235E9178F20422A07135F0E
Control Set: CurrentControlSet
Start: 4
Type: 16
Error Control: 1
Depends On services: RPCSS,TCPIP,NTLMSSP

Service (registry key): TosIde
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): TrkWks
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Distributed Link Tracking Client
Description: Bevarer links mellem NTFS-filer på en computer eller mellem computere i et netværksdomæne.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): TSDDD
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): UdfReadr_xp
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 2
Error Control: 1

Service (registry key): Udfs
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 2
Error Control: 1

Service (registry key): ultra
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): Update
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Opdateringsdriver til mikrokode
Image path: system32\DRIVERS\update.sys
Image size: 384768
Image MD5: 402DDC88356B1BAC0EE3DD1580C76A31
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): upnphost
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Vært for Universal Plug and Play-enhed
Description: Understøtter vært for Universal Plug and Play-enheder.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\system32\svchost.exe -k LocalService
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: SSDPSRV,HTTP

Service (registry key): UPS
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: UPS (Uninterruptible Power Supply)
Description: Styrer en UPS, der er tilsluttet computeren.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\ups.exe
Image size: 18432
Image MD5: 925EDCAE2170355679E1D2D1E638F68E
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1

Service (registry key): usbaudio
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: USB-lyddriver (WDM)
Image path: system32\drivers\usbaudio.sys
Image size: 60032
Image MD5: E919708DB44ED8543A7C017953148330
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): usbccgp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Overordnet Microsoft USB-standarddriver
Image path: system32\DRIVERS\usbccgp.sys
Image size: 32128
Image MD5: 173F317CE0DB8E21322E71B7E60A27E8
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): usbehci
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Miniportdriver til Microsoft USB 2.0-udvidet værtscontroller
Image path: system32\DRIVERS\usbehci.sys
Image size: 30208
Image MD5: 65DCF09D0E37D4C6B11B5B0B76D470A7
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): usbhub
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til Microsoft USB-standardhub
Image path: system32\DRIVERS\usbhub.sys
Image size: 59520
Image MD5: 1AB3CDDE553B6E064D2E754EFE20285C
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): usbohci
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Miniportdriver til Microsoft USB-åben værtscontroller
Image path: system32\DRIVERS\usbohci.sys
Image size: 17152
Image MD5: 0DAECCE65366EA32B162F85F07C6753B
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): usbprint
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft USB PRINTER-klasse
Image path: system32\DRIVERS\usbprint.sys
Image size: 25856
Image MD5: A717C8721046828520C9EDF31288FC00
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): USBSTOR
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Driver til USB-lagerenhed
Image path: system32\DRIVERS\USBSTOR.SYS
Image size: 26368
Image MD5: A32426D9B14A089EAA1D922E0C5801A9
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): VgaSave
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: VGA-skærmkort.
Description: Styrer VGA-skærmkortet, så det kan vise grundlæggende grafik.
Image path: \SystemRoot\System32\drivers\vga.sys
Image size: 0
Image MD5: D41D8CD98F00B204E9800998ECF8427E
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 0

Service (registry key): ViaIde
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 4
Type: 1
Error Control: 1

Service (registry key): VolSnap
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 1
Error Control: 1

Service (registry key): vsdatant
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: vsdatant
Image path: System32\vsdatant.sys
Image size: 394952
Image MD5: 279761AD6562C0D4309CB1BBB260233F
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1
Depends On services: TCPIP

Service (registry key): vsmon
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: TrueVector Internet Monitor
Description: Monitors internet traffic and generates alerts for disallowed access.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service
Image size: 75304
Image MD5: 4ABE946715D5E17C013D70FABB9E9780
Control Set: CurrentControlSet
Start: 2
Type: 272
Error Control: 1
Depends On services: Afd,RpcSs,vsdatant

Service (registry key): VSS
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Øjebliksbillede af diskenhed
Description: Administrerer og implementerer øjebliksbilleder, der bruges til sikkerhedskopiering og andre formål. Hvis denne tjeneste stoppes vil øjebliksbilleder ikke være tilgængelige til sikkerhedskopiering, og sikkerhedskopieringen mislykkes muligvis. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: LocalSystem
Image path: %SystemRoot%\System32\vssvc.exe
Image size: 290816
Image MD5: 3F5D90C4BB1C6A75E264E8D7148EB3CE
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1
Depends On services: RPCSS

Service (registry key): W32Time
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Time
Description: Vedligeholder dato- og tidssynkronisering på alle klienter og servere på netværket. Hvis denne tjeneste stoppes, er dato- og tidssynkronisering ikke tilgængelig. Hvis tjenesten deaktiveres, kan tjenester, der er afhængige af den, ikke starte.

Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): W3SVC
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): Wanarp
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Remote Access IP ARP-driver
Description: Remote Access IP ARP-driver
Image path: system32\DRIVERS\wanarp.sys
Image size: 34560
Image MD5: E20B95BAEDB550F32DD489265C1DA1F6
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): WDICA
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 0

Service (registry key): wdmaud
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Microsoft WINNM WDM-kompatibel lyddriver
Image path: system32\drivers\wdmaud.sys
Image size: 83072
Image MD5: 6768ACF64B18196494413695F0C3A00F
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): WebClient
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Webklient
Description: Gør det muligt for Windows-baserede programmer at oprette, få adgang til og ændre Internetbaserede filer. Hvis denne tjeneste stoppes, er disse funktioner ikke tilgængelige. Hvis denne tjeneste deaktiveres, kan tjenester, der er direkte afhængige af den, ikke starte.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\system32\svchost.exe -k LocalService
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: MRxDAV

Service (registry key): winmgmt
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Management Instrumentation
Description: Omfatter en fælles grænseflade og objektmodel, der giver adgang til oplysninger om administration af operativsystemer, enheder, programmer og tjenester. Hvis denne tjeneste stoppes, vil de fleste Windows-baserede programmer ikke fungere korrekt. Hvis denne tjeneste deaktiveres, vil alle tjenester, som er afhængige af den, ikke kunne starte.
Object name: LocalSystem
Image path: %systemroot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 0
Depends On services: RPCSS

Service (registry key): WinRTUSB
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: USB X3 Camera
Image path: system32\DRIVERS\WinRTUSB.sys
Image size: 41856
Image MD5: 332150C55C243D3CBB49F2C86960C935
Control Set: CurrentControlSet
Start: 1
Type: 1
Error Control: 1

Service (registry key): Winsock
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 3
Type: 4
Error Control: 1

Service (registry key): WinSock2
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): WinTrust
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): WMDM PMSP Service
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: WMDM PMSP Service
Object name: LocalSystem
Image path: C:\WINDOWS\system32\MsPMSPSv.exe
Image size: 53248
Image MD5: 668056D5C3C11AB7D266819A96B964E8
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 1

Service (registry key): WmdmPmSN
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Serienummertjenesten for bærbart medie
Description: Henter serienummeret til en bærbar medieafspiller, der er tilsluttet denne computer. Hvis denne tjeneste er stoppet, hentes det beskyttede indhold til enheden.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1

Service (registry key): Wmi
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Management Instrumentation-driverudvidelser
Description: Systembehandlingsoplysninger til og fra drivere.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1

Service (registry key): WmiApRpl
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): WmiApSrv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: WMI-ydelseskort
Description: Giver oplysninger om ydelsesbiblioteker fra WMI HiPerf-providere.
Object name: LocalSystem
Image path: C:\WINDOWS\system32\wbem\wmiapsrv.exe
Image size: 126464
Image MD5: A11D7A4DBABBF29BD66E189905C21D4E
Control Set: CurrentControlSet
Start: 3
Type: 16
Error Control: 1
Depends On services: RPCSS

Service (registry key): WMPNetworkSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Media Player Network Sharing Service
Description: Deler Windows Media Player-biblioteker med andre afspillere og medieenheder på netværket ved hjælp af Universal Plug and Play
Object name: NT AUTHORITY\NetworkService
Image path: "C:\Programmer\Windows Media Player\WMPNetwk.exe"
Image size: 914432
Image MD5: 6EE45AD8DBEF8785B8CD312736626EBE
Control Set: CurrentControlSet
Start: 2
Type: 16
Error Control: 1
Depends On services: upnphost,http,HTTPFilter

Service (registry key): WS2IFSL
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 1
Type: 0
Error Control: 0

Service (registry key): wscsvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Sikkerhedscenter
Description: Overvåger sikkerhedsindstillinger og -konfigurationer på systemet.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs,winmgmt

Service (registry key): WSTCODEC
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: World Standard Teletext Codec
Image path: system32\DRIVERS\WSTCODEC.SYS
Image size: 19200
Image MD5: C98B39829C2BBD34E454150633C62C78
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): wuauserv
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Automatiske opdateringer
Description: Muliggør hentning og installation af Windows-opdateringer. Hvis denne tjeneste deaktiveres, vil computeren ikke være i stand til at bruge funktionen automatiske opdateringer eller webstedet Windows Update.
Object name: LocalSystem
Image path: %systemroot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1

Service (registry key): WudfPf
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Driver Foundation - User-mode Driver Framework Platform Driver
Description: Provide communciation services for UMDF components.
Image path: system32\DRIVERS\WudfPf.sys
Image size: 77568
Image MD5: F15FEAFFFBB3644CCC80C5DA584E6311
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): WudfRd
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Driver Foundation - User-mode Driver Framework Reflector
Description: Reflect device requests to user-mode driver drivers
Image path: system32\DRIVERS\wudfrd.sys
Image size: 82944
Image MD5: 28B524262BCE6DE1F7EF9F510BA3985B
Control Set: CurrentControlSet
Start: 3
Type: 1
Error Control: 1

Service (registry key): WudfSvc
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Windows Driver Foundation - User-mode Driver Framework
Description: Manages user-mode driver host processes
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k WudfServiceGroup
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: PlugPlay

Service (registry key): WZCSVC
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Automatisk konfiguration af trådløse enheder
Description: Gør automatisk konfiguration af 802.11-kort mulig
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 2
Type: 32
Error Control: 1
Depends On services: RpcSs,Ndisuio

Service (registry key): xmlprov
Registry path: \SYSTEM\CurrentControlSet\Services\
Display name: Tjenesten Netværksadgang
Description: Administrerer XML-konfigurationsfiler på domænebasis til automatisk netværksadgang.
Object name: LocalSystem
Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 555F8F4CB284FE94059DCACF6074F9EC
Control Set: CurrentControlSet
Start: 3
Type: 32
Error Control: 1
Depends On services: RpcSs

Service (registry key): {3AF79FE3-0D7B-4503-8A9A-F68BB9EEDCC0}
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): {D2644A47-5B69-4F0B-BCD6-6C44409FE585}
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

Service (registry key): {E986F66D-5ACA-466F-8B6E-4C690DE0AF87}
Registry path: \SYSTEM\CurrentControlSet\Services\
Control Set: CurrentControlSet
Start: 0
Type: 0
Error Control: 0

random/random · Dec 17, 2008

Backup Your Registry with ERUNT

Please use the following link and scroll down to ERUNT and download it.
http://aumha.org/freeware/freeware.php
For version with the Installer:
Use the setup program to install ERUNT on your computer
For the zipped version:
Unzip all the files into a folder of your choice.

Click Erunt.exe to backup your registry to the folder of your choice.

Note: to restore your registry, go to the folder and start ERDNT.exe

Copy the contents of the following codebox to a notepad window

Code:

REGEDIT4

[-HKEY_USERS\S-1-5-21-1606980848-1958367476-682003330-500\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}]

Save it to the desktop as fix.reg, making sure save as type is set to all files

Locate Fix.reg on your desktop and double-click it. When asked if you want to merge with the registry, click YES. Wait for the merged successfully prompt

Run Spybot Search & Destroy again, and let me know if it still detects anything.

Ink Mathematics · Dec 18, 2008

I've followed your instructions but Spybot Search & Destroy still detects 2 MyWay.MyWebSearch items. What should I do now?

random/random · Dec 19, 2008

Copy the contents of the following codebox to a notepad window

Code:

REGEDIT4

[HKEY_USERS\S-1-5-21-1606980848-1958367476-682003330-500\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}"=-

Save it to the desktop as fix.reg, making sure save as type is set to all files

Locate Fix.reg on your desktop and double-click it. When asked if you want to merge with the registry, click YES. Wait for the merged successfully prompt

Run Spybot Search & Destroy again, and let me know if it still detects anything.

tashi · Dec 29, 2008

This topic has been archived due to inactivity.

As it has been five days or more since your last post, and your helper posted a response to which you did not reply, this topic has been archived and will not be reopened. If you still require help, please start a new topic and include a fresh HijackThis log and a link to this thread.

Applies only to the original poster, anyone else with similar problems please start a new topic.

MyWay.MyWebSearch - help please

Ink Mathematics

New member

random/random

Security Expert: Visiting Fellow

Ink Mathematics

New member

Ink Mathematics

New member

Ink Mathematics

New member

Ink Mathematics

New member

random/random

Security Expert: Visiting Fellow

Ink Mathematics

New member

random/random

Security Expert: Visiting Fellow

tashi

Member of Team Spybot