Popups and Permissions....

K

kzeise

I'm having several serious issues that I'm wondering if someone might
be able to help me fix.

The basics... I'm running Windows XP and use Firefox as my primary web
browser - there's several things for work that I need Internet Explorer
to update, so that's used about 2 percent of the time. I have McAfee
Personal Firewall and VirusScan installed - both are current in their
updates. I also use Ad-Aware about once a week.

First problem... At random times, I get popups in Firefox telling me to
download WinAntiVirus Pro 2006. Sometimes, it happens when I'm
checking email, sometimes when I'm viewing ESPN.com or one of the many
newspaper sites I frequent. Now, I know this is a junk message, so I
don't click on anything except to close it. Well, now it's been
happening more and more frequently - three separate messages just when
browsing one thread in the Groups. I'm not clicking on anything to
bring this up, rather just scrolling with the arrow keys on the
keyboard.

Any ideas on how to nuke this thing? Upon reading one similar thread,
I ran SmitFraudFix, and it says it cleaned my system of four bad files,
but they're still popping up.

Second problem.... While working in Firefox, I'll get a popup randomly
for a RooTV or something similar to that, but it'll pop up in Internet
Explorer. Again, any ideas? (sorry for the lack of detail, it hasn't
happened since early this morning, and I don't recall what exactly it
was).

Third problem.... and while this seems totally unrelated, I'm thinking
that perhaps somehow it actually might be related. I had iTunes for
Windows 6.0 installed and decided to update that to iTunes 7.0. Since
I've done that, I haven't been able to burn a CD - I was able to do so
prior to installing the new version. I've checked the Apple site for a
fix, but can't get anywhere with that. Basically, I have a burner
installed - it recognizes it in the drive in the preferences window.
Well, when I put in a blank disk, it never recognizes it, though the CD
is found in My Computer. When I try to make any changes to the write
speed, thinking that if I slow the speed down, it might work, I get an
error message that pops up that says:

--An error occurred while updating the default player for audio file
types. You do not have enough access privileges for this operation--

Now, I'm logged in under my profile, the only one on the computer, and
it does have full administrator privileges. I've tried uninstalling
version 7.0 and re-installing 6.* only to have the same problem.

Any ideas and thoughts to fix for any of the three problems would be
greatly appreciated.
 
G

Guest

Well for the first two it sounds like you have some Adware or similar junk on
your system. There isn't one Adware program that gets all of this junk. So in
addition to Ad Aware I would recommend that you get Spybot
(http://www.safer-networking.org/en/index.html) and Windows Defender
(http://www.microsoft.com/athome/security/spyware/software/default.mspx) and
run those around the time that you run Ad Aware.

You can try running these programs prior to doing anything else, as these
programs might get whatever is causing your problem.

If the spyware programs don't fix the problem get a HijackThis log to see if
we can find out what's causing the problem. You can download the program
here: http://www.spywareinfo.com/~merijn/programs.php#hijackthis
Run it, save the log, and post the contents of the log back here.

Now for the third problem it sounds like iTunes has changed a setting on
your computer to make it the default audio program. However, it doesn't sound
like it's releated to the first two problems.

What program do you use to burn CD's?

You can try to make Windows Media Player the default player for CD's to see
if this fixes your problem. Open Media Player, go to Tools -> Options, select
the File Types tab, and check the Music CD Playback box (if it is currently
checked then uncheck it and recheck it), click on Apply, then OK, then close
Media Player.

See if this corrects your problem, if it doesn't then try a System Restore
to before you installed iTunes 7 on your system.

-Dan
 
K

kzeise

Thanks for the reply, Dan. I've spent most of the eveing trying to fix
the first two issues, with no success - I've run both Spybot and
Windows Defender, with them both claiming to have removed around 150
processes, but I'm still getting the same popups - both the
WinAntiVirus Pro 2006 in Firefox and now a mysafetrip.com popup in
Internet Explorer, which I haven't used in about a week now.

I ran the HijackThis program. The log file is below.

-----
Logfile of HijackThis v1.99.1
Scan saved at 11:07:49 PM, on 10/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\MSC\mctskshd.exe
C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\D-Link\AirPlus Xtreme G\AirPlusCFG.exe
C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\aim\aim.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Kev\LOCALS~1\Temp\Rar$EX01.156\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName
=
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -
c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [D-Link AirPlus Xtreme G] C:\D-Link\AirPlus Xtreme
G\AirPlusCFG.exe
O4 - HKLM\..\Run: [ANIWZCSService] C:\Program Files\Alpha
Networks\ANIWZCS Service\WZCSLDR.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE
C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [AIM] C:\aim\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search
& Destroy\TeaTimer.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Google Search - res://c:\program
files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word -
res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program
files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page -
res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program
files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English -
res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} -
C:\aim\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet
Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} -
http://85.255.114.166/1/rdgUS2404.exe
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image
Uploader 3.5 Control) - http://www.filelodge.com/ImageUploader3.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online
Control) -
http://download.games.yahoo.com/games/web_games/tikgames/cinematycoon/cinematycoon.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object)
- http://download.games.yahoo.com/games/popcap/zuma/popcaploader_v6.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program
Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. -
C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Program Files\Common
Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program
Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program
Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc.
- C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. -
C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. -
c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. -
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. -
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc.
- c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. -
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. -
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc. -
C:\PROGRA~1\McAfee\MSC\mctskshd.exe
O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. -
C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee,
Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe

-----
 
G

Guest

Well, all but one entry from HijackThis looked good. I didn't like the looks
of the one that said: O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} -
http://85.255.114/1/rdgUS2404.exe
(I removed the .166 from the end of the ip address so others won't click on
this and download this junk to their system)

So i googled rdgUS2404.exe and there was a lot of entries that came up with
reference to virus problems. In another forum it was stated that Ewido
anti-spyware flagged this as being a downloader. I would remove this entry
with HijackThis. Restart computer.

As for the persistant popups, if you still have them after getting rid of
the one entry, do you have Firefox set to block all unwanted popups? I'll
assume so, so I'll move on to the next step.

I just had a thought: do you run a firewall? If not then you really should
becasue 1) it's good practice to keep your computer safe and 2) you might be
able to identify and/or stop whatever is causing the popups.

Some unwanted program may be running that's producing these popups.

First get Process Explorer here (download link at bottom of page):
http://www.sysinternals.com/Utilities/ProcessExplorer.html
Extract this program from the zip file, run it, choose File -> Save As...
and save it where you can get to it.

Next get Autoruns (download link at bottom):
http://www.sysinternals.com/Utilities/Autoruns.html
Extract Autoruns.exe (not Autorunsc.exe), run it, choose File -> Save As...
and also save this where you can get to it.

Doing this will create logs of what programs are running on your system, as
well as what programs start up when your computer starts up. Post the logs
back here.

-Dan
 
K

kzeise

Two housekeeping items.... I do have Firefox set to block popups, and I
do run a firewall - I have McAfee Personal Firewall, and I'm pretty
strict about what I allow full access for.

The log file for Process Explorer....
-----
Process PID CPU Description Company Name
System Idle Process 0 56.07
Interrupts n/a Hardware Interrupts
DPCs n/a 4.55 Deferred Procedure Calls
System 4
smss.exe 544 Windows NT Session Manager Microsoft Corporation
csrss.exe 600 Client Server Runtime Process Microsoft Corporation
winlogon.exe 624 Windows NT Logon Application Microsoft Corporation
services.exe 668 2.53 Services and Controller app Microsoft
Corporation
svchost.exe 844 Generic Host Process for Win32 Services Microsoft
Corporation
mcagent.exe 2548 McAfee Integrated Security Platform McAfee,
Inc.
svchost.exe 904 Generic Host Process for Win32 Services Microsoft
Corporation
svchost.exe 940 Generic Host Process for Win32 Services Microsoft
Corporation
svchost.exe 992 Generic Host Process for Win32 Services Microsoft
Corporation
svchost.exe 1048 Generic Host Process for Win32
Services Microsoft Corporation
spoolsv.exe 1320 Spooler SubSystem App Microsoft Corporation
HWAPI.exe 1656 6.33 McAfee HackerWatch Service McAfee, Inc.
mclogsrv.exe 1680 MSC Log Manager McAfee, Inc.
mcupdmgr.exe 1712 McAfee Update Manager Service McAfee, Inc.
McNASvc.exe 1776 McAfee Network Agent McAfee, Inc.
mcods.exe 1812 McAfee VirusScan - On Demand Scan McAfee, Inc.
mcpromgr.exe 1932 McAfee Integrated Security Platform McAfee,
Inc.
RedirSvc.exe 1964 McAfee Redirector Service Module McAfee, Inc.
mcsysmon.exe 152 17.73 McAfee SystemGuards Service McAfee, Inc.
mctskshd.exe 228 McAfee Tqsk Scheduler McAfee, Inc.
mcusrmgr.exe 244 MISP User Manager McAfee, Inc.
MpfSrv.exe 304 McAfee Personal Firewall Service McAfee, Inc.
svchost.exe 468 Generic Host Process for Win32 Services Microsoft
Corporation
wdfmgr.exe 528 Windows User Mode Driver Manager Microsoft
Corporation
svchost.exe 852 Generic Host Process for Win32 Services Microsoft
Corporation
alg.exe 3012 Application Layer Gateway Service Microsoft
Corporation
Mcshield.exe 1468 1.27 On-Access Scanner service McAfee, Inc.
lsass.exe 680 LSA Shell (Export Version) Microsoft Corporation
explorer.exe 2260 1.27 Windows Explorer Microsoft Corporation
AirPlusCFG.exe 3552 D-Link Wireless LAN Monitor D-Link
WZCSLDR.exe 3568 1.27 ANIWZCS launcher for Windows. Alpha Networks
Inc.
jusched.exe 3600 Java(TM) 2 Platform Standard Edition binary Sun
Microsystems, Inc.
realsched.exe 3620 RealNetworks Scheduler RealNetworks, Inc.
aim.exe 3648 AOL Instant Messenger America Online, Inc.
TeaTimer.exe 4068 1.27 System settings protector Safer Networking
Limited
firefox.exe 3544 Firefox Mozilla Corporation
procexp.exe 828 3.80 Sysinternals Process Explorer Sysinternals

-----

And the log file for Autoruns

-----

HKLM\System\CurrentControlSet\Control\Terminal
Server\Wds\rdpwd\StartupPrograms

+ rdpclip RDP Clip Monitor Microsoft
Corporation c:\windows\system32\rdpclip.exe

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit

+ C:\WINDOWS\system32\userinit.exe Userinit Logon Application Microsoft
Corporation c:\windows\system32\userinit.exe

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell

+ Explorer.exe Windows Explorer Microsoft
Corporation c:\windows\explorer.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

+ ANIWZCSService ANIWZCS launcher for Windows. Alpha Networks
Inc. c:\program files\alpha networks\aniwzcs service\wzcsldr.exe

+ D-Link AirPlus Xtreme G D-Link Wireless LAN
Monitor D-Link c:\d-link\airplus xtreme g\airpluscfg.exe

+ NvMediaCenter NVIDIA Media Center Library NVIDIA
Corporation c:\windows\system32\nvmctray.dll

+ SunJavaUpdateSched Java(TM) 2 Platform Standard Edition binary Sun
Microsystems, Inc. c:\program files\java\jre1.5.0_06\bin\jusched.exe

+ TkBellExe RealNetworks Scheduler RealNetworks, Inc. c:\program
files\common files\real\update_ob\realsched.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup

+ Adobe Gamma Loader.lnk Adobe Gamma Loader Adobe Systems,
Inc. c:\program files\common files\adobe\calibration\adobe gamma
loader.exe

C:\Documents and Settings\Kev\Start Menu\Programs\Startup

+ Adobe Gamma.lnk Adobe Gamma Loader Adobe Systems, Inc. c:\program
files\common files\adobe\calibration\adobe gamma loader.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

+ {8857A63C-0573-1033-0306-020806200001} File not found: C:\Program
Files\Common Files\{8857A63C-0573-1033-0306-020806200001}\Update.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

+ AIM AOL Instant Messenger America Online, Inc. c:\aim\aim.exe

+ SpybotSD TeaTimer System settings protector Safer Networking
Limited c:\program files\spybot - search & destroy\teatimer.exe

HKLM\SOFTWARE\Classes\Protocols\Filter

+ Class Install Handler OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ deflate OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ gzip OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ lzdhtml OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ text/webviewhtml Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

HKLM\SOFTWARE\Classes\Protocols\Handler

+ about Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ cdl OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ cdo Microsoft SharePoint Portal Server Object Model Microsoft
Corporation c:\program files\common files\microsoft shared\web
folders\pkmcdo.dll

+ dvd ActiveX control for streaming video Microsoft
Corporation c:\windows\system32\msvidctl.dll

+ file OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ ftp OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ gopher OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ http OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ https OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ its Microsoft® InfoTech Storage System Library Microsoft
Corporation c:\windows\system32\itss.dll

+ javascript Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ lid ActiveX control for streaming video Microsoft
Corporation c:\windows\system32\msvidctl.dll

+ local OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ mailto Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ mhtml Microsoft Internet Messaging API Microsoft
Corporation c:\windows\system32\inetcomm.dll

+ mk OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ ms-its Microsoft® InfoTech Storage System Library Microsoft
Corporation c:\windows\system32\itss.dll

+ mso-offdap Microsoft Office XP Web Components Microsoft
Corporation c:\program files\common files\microsoft shared\web
components\10\owc10.dll

+ res Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ sysimage Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ tv ActiveX control for streaming video Microsoft
Corporation c:\windows\system32\msvidctl.dll

+ vbscript Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ wia WIA Scripting Layer Microsoft
Corporation c:\windows\system32\wiascr.dll

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components

+ Address Book 6 Outlook Express Setup Library Microsoft
Corporation c:\program files\outlook express\setup50.exe

+ Internet Explorer Windows NT User Data Migration Tool Microsoft
Corporation c:\windows\system32\shmgrate.exe

+ Internet Explorer Windows Setup API Microsoft
Corporation c:\windows\system32\setupapi.dll

+ Internet Explorer 6 IE 5.0 Per-User Install Utility Microsoft
Corporation c:\windows\system32\ie4uinit.exe

+ Microsoft Outlook Express 6 Outlook Express Setup Library Microsoft
Corporation c:\program files\outlook express\setup50.exe

+ Microsoft Windows Media Player ADVPACK Microsoft
Corporation c:\windows\system32\advpack.dll

+ NetMeeting 3.01 ADVPACK Microsoft
Corporation c:\windows\system32\advpack.dll

+ Outlook Express Windows NT User Data Migration Tool Microsoft
Corporation c:\windows\system32\shmgrate.exe

+ Themes Setup Microsoft(C) Register Server Microsoft
Corporation c:\windows\system32\regsvr32.exe

+ Windows Desktop Update Microsoft(C) Register Server Microsoft
Corporation c:\windows\system32\regsvr32.exe

+ Windows Media Player Microsoft Windows Media Player Setup
Utility Microsoft Corporation c:\windows\inf\unregmp2.exe

+ Windows Messenger 4.7 ADVPACK Microsoft
Corporation c:\windows\system32\advpack.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler

+ Browseui preloader Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Component Categories cache daemon Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad

+ CDBurn Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

+ PostBootReminder Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

+ SysTray Systray shell service object Microsoft
Corporation c:\windows\system32\stobject.dll

+ WebCheck Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

+ shell32.dll Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell
Extensions\Approved

+ %DESC_PublishDropTarget% Photo Printing Wizard Microsoft
Corporation c:\windows\system32\photowiz.dll

+ &Address Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ .CAB file viewer Cabinet File Viewer Shell Extension Microsoft
Corporation c:\windows\system32\cabview.dll

+ Accessible Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ ActiveX Cache Folder Object Control Viewer Microsoft
Corporation c:\windows\system32\occache.dll

+ Address Bar Parser Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Address EditBox Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Administrative Tools Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Audio Media Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ Augmented Shell Folder Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Augmented Shell Folder 2 Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Auto Update Property Sheet Extension Automatic Updates Control
Panel Microsoft Corporation c:\windows\system32\wuaucpl.cpl

+ Avi Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ BandProxy Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Briefcase Windows Briefcase Microsoft
Corporation c:\windows\system32\syncui.dll

+ CDF Extension Copy Hook Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Channel File Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Channel Handler Object Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Channel Menu Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Channel Properties Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Channel Shortcut Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Code Download Agent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Compatibility Page Compatibility Tab Shell Extension DLL Microsoft
Corporation c:\windows\system32\slayerxp.dll

+ Compressed (zipped) Folder Compressed (zipped) Folders Microsoft
Corporation c:\windows\system32\zipfldr.dll

+ Compressed (zipped) Folder Right Drag Handler Compressed (zipped)
Folders Microsoft Corporation c:\windows\system32\zipfldr.dll

+ Compressed (zipped) Folder SendTo Target Compressed (zipped)
Folders Microsoft Corporation c:\windows\system32\zipfldr.dll

+ ConnectionAgent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Crypto PKO Extension Crypto Shell Extensions Microsoft
Corporation c:\windows\system32\cryptext.dll

+ Crypto Sign Extension Crypto Shell Extensions Microsoft
Corporation c:\windows\system32\cryptext.dll

+ Custom MRU AutoCompleted List Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Darwin App Publisher Shell Application Manager Microsoft
Corporation c:\windows\system32\appwiz.cpl

+ Desktop Explorer NVIDIA Desktop Explorer, Version 100.35 NVIDIA
Corporation c:\windows\system32\nvshell.dll

+ Desktop Explorer Menu NVIDIA Desktop Explorer, Version 100.35 NVIDIA
Corporation c:\windows\system32\nvshell.dll

+ DfsShell Distributed File System shell extension Microsoft
Corporation c:\windows\system32\dfsshlex.dll

+ Directory Context Menu Verbs Directory Service Common UI Microsoft
Corporation c:\windows\system32\dsuiext.dll

+ Directory Object Find Directory Service Find Microsoft
Corporation c:\windows\system32\dsquery.dll

+ Directory Property UI Directory Service Common UI Microsoft
Corporation c:\windows\system32\dsuiext.dll

+ Directory Query UI Directory Service Find Microsoft
Corporation c:\windows\system32\dsquery.dll

+ Directory Start/Search Find Directory Service Find Microsoft
Corporation c:\windows\system32\dsquery.dll

+ Disk Copy Extension Windows DiskCopy Microsoft
Corporation c:\windows\system32\diskcopy.dll

+ Disk Quota UI Windows Shell Disk Quota UI DLL Microsoft
Corporation c:\windows\system32\dskquoui.dll

+ Display Adapter CPL Extension Advanced display adapter
properties Microsoft Corporation c:\windows\system32\deskadp.dll

+ Display Monitor CPL Extension Advanced display monitor
properties Microsoft Corporation c:\windows\system32\deskmon.dll

+ Display Panning CPL Extension File not found: deskpan.dll

+ Display TroubleShoot CPL Extension Advanced display performance
properties Microsoft Corporation c:\windows\system32\deskperf.dll

+ Download Status Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ DS Security Page Directory Service Security UI Microsoft
Corporation c:\windows\system32\dssec.dll

+ E-mail Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Explorer Band Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Extensions Manager Folder Extensions Manager Microsoft
Corporation c:\windows\system32\extmgr.dll

+ Favorites Band Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Fonts Windows Font Folder Microsoft
Corporation c:\windows\system32\fontext.dll

+ Fonts Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ For &People... Find People Microsoft Corporation c:\program
files\outlook express\wabfind.dll

+ FTP Folders Webview Microsoft Internet Explorer FTP Folder Shell
Extension Microsoft Corporation c:\windows\system32\msieftp.dll

+ GDI+ file thumbnail extractor Windows Picture and Fax
Viewer Microsoft Corporation c:\windows\system32\shimgvw.dll

+ Get a Passport Wizard Map Network Drives/Network Places
Wizard Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Global Folder Settings Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Help and Support Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Help and Support Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ History Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ HTML Thumbnail Extractor Windows Picture and Fax Viewer Microsoft
Corporation c:\windows\system32\shimgvw.dll

+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve,
Inc. c:\windows\system32\hticons.dll

+ ICC Profile Microsoft Color Matching System User Interface
DLL Microsoft Corporation c:\windows\system32\icmui.dll

+ ICM Monitor Management Microsoft Color Matching System User Interface
DLL Microsoft Corporation c:\windows\system32\icmui.dll

+ ICM Printer Management Microsoft Color Matching System User Interface
DLL Microsoft Corporation c:\windows\system32\icmui.dll

+ ICM Scanner Management Microsoft Color Matching System User Interface
DLL Microsoft Corporation c:\windows\system32\icmui.dll

+ ICQ Shell Extension File not found: C:\Program
Files\ICQ\ICQShExt.dll

+ IE4 Suite Splash Screen Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ In-pane search Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Installed Apps Enumerator Shell Application Manager Microsoft
Corporation c:\windows\system32\appwiz.cpl

+ Internet Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Internet Name Space Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ InternetShortcut Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ ISFBand OC Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ iTunes iTunes Mini Player DLL Apple Computer, Inc. c:\program
files\itunes\itunesminiplayer.dll

+ Microsoft Access Custom Icon Handler MSAPP Export Support for
Microsoft Access Microsoft Corporation c:\program files\microsoft
office\office\soa800.dll

+ Microsoft Agent Character Property Sheet Handler Microsoft Agent
Property Sheet Handler Microsoft
Corporation c:\windows\msagent\agentpsh.dll

+ Microsoft AutoComplete Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Microsoft Browser Architecture Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Microsoft BrowserBand Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Microsoft Data Link Microsoft Data Access - OLE DB Core
Services Microsoft Corporation c:\program files\common files\system\ole
db\oledb32.dll

+ Microsoft DocProp Inplace Calendar Control Microsoft DocProp Shell
Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace Droplist Combo Control Microsoft DocProp
Shell Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace Edit Box Control Microsoft DocProp Shell
Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace ML Edit Box Control Microsoft DocProp Shell
Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace Time Control Microsoft DocProp Shell
Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Shell Ext Microsoft DocProp Shell Ext Microsoft
Corporation c:\windows\system32\docprop2.dll

+ Microsoft History AutoComplete List Shell Browser UI
Library Microsoft Corporation c:\windows\system32\browseui.dll

+ Microsoft Internet Toolbar Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Microsoft Multiple AutoComplete List Container Shell Browser UI
Library Microsoft Corporation c:\windows\system32\browseui.dll

+ Microsoft Office HTML Icon Handler Microsoft Office XP
component Microsoft Corporation c:\microsoft office\office10\msohev.dll

+ Microsoft Outlook Custom Icon Handler Outlook Shell Hook for
Start/Find Microsoft Corporation c:\microsoft
office\office10\olkfstub.dll

+ Microsoft Shell Folder AutoComplete List Shell Browser UI
Library Microsoft Corporation c:\windows\system32\browseui.dll

+ Microsoft Url History Service Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Microsoft Url Search Hook Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Midi Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ MMC Icon Handler MMC Shell Extension DLL Microsoft
Corporation c:\windows\system32\mmcshext.dll

+ MRU AutoComplete List Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Multimedia File Property Sheet Control Panel Drivers Applet Microsoft
Corporation c:\windows\system32\mmsys.cpl

+ MyDocs Copy Hook My Documents Folder UI Microsoft
Corporation c:\windows\system32\mydocs.dll

+ MyDocs Drop Target My Documents Folder UI Microsoft
Corporation c:\windows\system32\mydocs.dll

+ MyDocs Properties My Documents Folder UI Microsoft
Corporation c:\windows\system32\mydocs.dll

+ Network Connections Network Connections Shell Microsoft
Corporation c:\windows\system32\netshell.dll

+ Network Connections Network Connections Shell Microsoft
Corporation c:\windows\system32\netshell.dll

+ NTFS Security Page Security Shell Extension Microsoft
Corporation c:\windows\system32\rshx32.dll

+ NvCpl DesktopContext Class NVIDIA Display Properties Extension NVIDIA
Corporation c:\windows\system32\nvcpl.dll

+ nView Desktop Context Menu NVIDIA Desktop Explorer, Version 100.35
NVIDIA Corporation c:\windows\system32\nvshell.dll

+ Offline Files Folder Client Side Caching UI Microsoft
Corporation c:\windows\system32\cscui.dll

+ Offline Files Folder Options Client Side Caching UI Microsoft
Corporation c:\windows\system32\cscui.dll

+ Offline Files Menu Client Side Caching UI Microsoft
Corporation c:\windows\system32\cscui.dll

+ OLE Docfile Property Page OLE DocFile Property Page Microsoft
Corporation c:\windows\system32\docprop.dll

+ PlusPack CPL Extension Windows Theme API Microsoft
Corporation c:\windows\system32\themeui.dll

+ Portable Media Devices Portable Media Devices Shell
Extension Microsoft Corporation c:\windows\system32\audiodev.dll

+ Portable Media Devices Menu Portable Media Devices Shell
Extension Microsoft Corporation c:\windows\system32\audiodev.dll

+ PostAgent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Previous Versions Previous Versions property page Microsoft
Corporation c:\windows\system32\twext.dll

+ Previous Versions Property Page Previous Versions property
page Microsoft Corporation c:\windows\system32\twext.dll

+ Print Ordering via the Web Map Network Drives/Network Places
Wizard Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Printers Security Page Security Shell Extension Microsoft
Corporation c:\windows\system32\rshx32.dll

+ Registry Tree Options Utility Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Remote Sessions CPL Extension Remote Sessions CPL Extension Microsoft
Corporation c:\windows\system32\remotepg.dll

+ Run... Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scheduled Tasks Task Scheduler interface DLL Microsoft
Corporation c:\windows\system32\mstask.dll

+ Search Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Search Assistant OC Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Search Band Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Sendmail service Send Mail Microsoft
Corporation c:\windows\system32\sendmail.dll

+ Sendmail service Send Mail Microsoft
Corporation c:\windows\system32\sendmail.dll

+ Set Program Access and Defaults Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Shell Application Manager Shell Application Manager Microsoft
Corporation c:\windows\system32\appwiz.cpl

+ Shell Automation Inproc Service Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Shell Band Site Menu Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Shell DeskBar Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Shell DeskBarApp Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Shell DocObject Viewer Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Shell extensions for Microsoft Windows Network objects Network object
shell UI Microsoft Corporation c:\windows\system32\ntlanui2.dll

+ Shell Extensions for RealOne Player RealPlayer Shell
Extensions RealNetworks, Inc. c:\program
files\real\realplayer\rpshell.dll

+ Shell extensions for sharing Shell extensions for sharing Microsoft
Corporation c:\windows\system32\ntshrui.dll

+ Shell extensions for sharing Shell extensions for sharing Microsoft
Corporation c:\windows\system32\ntshrui.dll

+ Shell extensions for Windows Script Host Microsoft (r) Shell
Extension for Windows Script Host Microsoft
Corporation c:\windows\system32\wshext.dll

+ Shell Image Data Factory Windows Picture and Fax Viewer Microsoft
Corporation c:\windows\system32\shimgvw.dll

+ Shell Image Property Handler Windows Picture and Fax Viewer Microsoft
Corporation c:\windows\system32\shimgvw.dll

+ Shell Image Verbs Windows Picture and Fax Viewer Microsoft
Corporation c:\windows\system32\shimgvw.dll

+ Shell properties for a DS object Directory Service Find Microsoft
Corporation c:\windows\system32\dsquery.dll

+ Shell Publishing Wizard Object Map Network Drives/Network Places
Wizard Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Shell Rebar BandSite Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Shell Scrap DataHandler Shell scrap object handler Microsoft
Corporation c:\windows\system32\shscrap.dll

+ Shell Search Band Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Subscription Folder Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Subscription Mgr Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Summary Info Thumbnail handler (DOCFILES) Windows Picture and Fax
Viewer Microsoft Corporation c:\windows\system32\shimgvw.dll

+ Taskbar and Start Menu Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

+ Tasks Folder Icon Handler Task Scheduler interface DLL Microsoft
Corporation c:\windows\system32\mstask.dll

+ Tasks Folder Shell Extension Task Scheduler interface DLL Microsoft
Corporation c:\windows\system32\mstask.dll

+ Temporary Internet Files Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Temporary Internet Files Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ The Internet Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Track Popup Bar Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ TrayAgent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ TridentImageExtractor Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ User Accounts Map Network Drives/Network Places Wizard Microsoft
Corporation c:\windows\system32\netplwiz.dll

+ User Assist Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Video Media Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ Video Thumbnail Extractor Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ Wav Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ Web Folders Microsoft Web Folders Microsoft Corporation c:\program
files\common files\microsoft shared\web folders\msonsext.dll

+ Web Printer Shell Extension Print UI DLL Microsoft
Corporation c:\windows\system32\printui.dll

+ Web Publishing Wizard Map Network Drives/Network Places
Wizard Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Web Search Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ WebCheck Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ WebCheck SyncMgr Handler Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ WebCheckChannelAgent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ WebCheckWebCrawler Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Windows Media Player Add to Playlist Context Menu Handler Windows
Media Player Launcher Microsoft
Corporation c:\windows\system32\wmpshell.dll

+ Windows Media Player Burn Audio CD Context Menu Handler Windows Media
Player Launcher Microsoft Corporation c:\windows\system32\wmpshell.dll

+ Windows Media Player Play as Playlist Context Menu Handler Windows
Media Player Launcher Microsoft
Corporation c:\windows\system32\wmpshell.dll

+ WinRAR shell extension c:\program files\winrar\rarext.dll

HKLM\Software\Classes\Folder\Shellex\ColumnHandlers

+ {0D2E74C4-3C34-11d2-A27E-00C04FC30871} Windows Shell Common
Dll Microsoft Corporation c:\windows\system32\shell32.dll

+ {24F14F01-7B1C-11d1-838f-0000F80461CF} Windows Shell Common
Dll Microsoft Corporation c:\windows\system32\shell32.dll

+ {24F14F02-7B1C-11d1-838f-0000F80461CF} Windows Shell Common
Dll Microsoft Corporation c:\windows\system32\shell32.dll

+ {66742402-F9B9-11D1-A202-0000F81FEDEE} Windows Shell Common
Dll Microsoft Corporation c:\windows\system32\shell32.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects

+ AcroIEHlprObj Class AcroIEHelper Module c:\program
files\adobe\acrobat 5.0\acrobat\activex\acroiehelper.ocx

+ Google Toolbar Helper Google IE Client Toolbar Google Inc. c:\program
files\google\googletoolbar1.dll

+ scriptproxy VSCore Script Scanner McAfee, Inc. c:\program
files\mcafee\virusscan\scriptsn.dll

+ SSVHelper Class Java(TM) 2 Platform Standard Edition binary Sun
Microsystems, Inc. c:\program files\java\jre1.5.0_06\bin\ssv.dll

+ {1ED87226-3F43-4C27-80B5-0E1352651902} File not found:
C:\WINDOWS\system32\gebcb.dll

+
{278B661A-14A8-D8B0-6AF4-03088B866149} c:\windows\system32\unaoakg.dll

+ {53707962-6F74-2D53-2644-206D7942484F} Bad download blocker Safer
Networking Limited c:\program files\spybot - search &
destroy\sdhelper.dll

+
{B7672BAF-E9A3-49B6-86B2-C81719A18A4C} c:\windows\system32\imfmyxst.dll

HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks

+ shdocvw.dll Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

HKLM\Software\Microsoft\Internet Explorer\Toolbar

+ googletoolbar1.dll Google IE Client Toolbar Google Inc. c:\program
files\google\googletoolbar1.dll

HKLM\Software\Microsoft\Internet Explorer\Extensions

+ AIM AOL Instant Messenger America Online, Inc. c:\aim\aim.exe

+ Windows Messenger Windows Messenger Microsoft Corporation c:\program
files\messenger\msmsgs.exe

Task Scheduler

+ AppleSoftwareUpdate.job File not found: C:\Program Files\Apple
Software Update\SoftwareUpdate.exe

+ McDefragTask.job Disk Defragmenter Module Microsoft Corp. and
Executive Software International, Inc. c:\windows\system32\defrag.exe

+ McQcTask.job QuickClean Console Application McAfee, Inc. c:\program
files\mcafee\mqc\qcconsol.exe

HKLM\System\CurrentControlSet\Services

+ 6to4 Provides DDNS name registration and automatic IPv6 connectivity
over an IPv4 network. If this service is stopped, other computers may
not be able to reach it by name and the machine will only have IPv6
connectivity if it is connected to a native IPv6 network. If this
service is disabled, any other services that explicitly depend on this
service will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ AudioSrv Manages audio devices for Windows-based programs. If this
service is stopped, audio devices and effects will not function
properly. If this service is disabled, any services that explicitly
depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ Browser Maintains an updated list of computers on the network and
supplies this list to computers designated as browsers. If this service
is stopped, this list will not be updated or maintained. If this
service is disabled, any services that explicitly depend on it will
fail to start. Microsoft Corporation c:\windows\system32\svchost.exe

+ CryptSvc Provides three management services: Catalog Database
Service, which confirms the signatures of Windows files; Protected Root
Service, which adds and removes Trusted Root Certification Authority
certificates from this computer; and Key Service, which helps enroll
this computer for certificates. If this service is stopped, these
management services will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to
start. Microsoft Corporation c:\windows\system32\svchost.exe

+ DcomLaunch Provides launch functionality for DCOM services. Microsoft
Corporation c:\windows\system32\svchost.exe

+ Dhcp Manages network configuration by registering and updating IP
addresses and DNS names. Microsoft
Corporation c:\windows\system32\svchost.exe

+ Dnscache Resolves and caches Domain Name System (DNS) names for this
computer. If this service is stopped, this computer will not be able to
resolve DNS names and locate Active Directory domain controllers. If
this service is disabled, any services that explicitly depend on it
will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ ERSvc Allows error reporting for services and applictions running in
non-standard environments. Microsoft
Corporation c:\windows\system32\svchost.exe

+ Eventlog Enables event log messages issued by Windows-based programs
and components to be viewed in Event Viewer. This service cannot be
stopped. Microsoft Corporation c:\windows\system32\services.exe

+ helpsvc Enables Help and Support Center to run on this computer. If
this service is stopped, Help and Support Center will be unavailable.
If this service is disabled, any services that explicitly depend on it
will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ lanmanserver Supports file, print, and named-pipe sharing over the
network for this computer. If this service is stopped, these functions
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ lanmanworkstation Creates and maintains client network connections to
remote servers. If this service is stopped, these connections will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ LmHosts Enables support for NetBIOS over TCP/IP (NetBT) service and
NetBIOS name resolution. Microsoft
Corporation c:\windows\system32\svchost.exe

+ McAfee HackerWatch Service McAfee HackerWatch Service McAfee,
Inc. c:\program files\common files\mcafee\hackerwatch\hwapi.exe

+ McLogManagerService Logs event messages for McAfee programs. McAfee,
Inc. c:\program files\mcafee\msc\mclogsrv.exe

+ mcmispupdmgr Downloads and installs updates for McAfee
programs. McAfee, Inc. c:\program files\mcafee\msc\mcupdmgr.exe

+ McNASvc McAfee Network Agent McAfee, Inc. c:\program files\common
files\mcafee\mna\mcnasvc.exe

+ McODS Scans specified locations on this computer for viruses and
other threats. The service runs for scheduled scans and manual
scans. McAfee, Inc. c:\program files\mcafee\virusscan\mcods.exe

+ mcpromgr Manages protection problems on this computer for McAfee
programs. McAfee, Inc. c:\program files\mcafee\msc\mcpromgr.exe

+ McRedirector McAfee Redirector Service McAfee, Inc. c:\program
files\common files\mcafee\redirsvc\redirsvc.exe

+ McShield Scans files for viruses and other threats when they are
accessed by this computer. McAfee, Inc. c:\program
files\mcafee\virusscan\mcshield.exe

+ McSysmon Monitors potentially unauthorized changes to this
computer. McAfee, Inc. c:\program files\mcafee\virusscan\mcsysmon.exe

+ McTskshd.exe Schedules McAfee programs to run at a specified
time. McAfee, Inc. c:\program files\mcafee\msc\mctskshd.exe

+ mcusrmgr Manages McAfee users. McAfee, Inc. c:\program
files\mcafee\msc\mcusrmgr.exe

+ MpfService McAfee Personal Firewall Service McAfee, Inc. c:\program
files\mcafee\mpf\mpfsrv.exe

+ PlugPlay Enables a computer to recognize and adapt to hardware
changes with little or no user input. Stopping or disabling this
service will result in system instability. Microsoft
Corporation c:\windows\system32\services.exe

+ PolicyAgent Manages IP security policy and starts the ISAKMP/Oakley
(IKE) and the IP security driver. Microsoft
Corporation c:\windows\system32\lsass.exe

+ ProtectedStorage Provides protected storage for sensitive data, such
as private keys, to prevent access by unauthorized services, processes,
or users. Microsoft Corporation c:\windows\system32\lsass.exe

+ RpcSs Provides the endpoint mapper and other miscellaneous RPC
services. Microsoft Corporation c:\windows\system32\svchost.exe

+ SamSs Stores security information for local user accounts. Microsoft
Corporation c:\windows\system32\lsass.exe

+ Schedule Enables a user to configure and schedule automated tasks on
this computer. If this service is stopped, these tasks will not be run
at their scheduled times. If this service is disabled, any services
that explicitly depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ seclogon Enables starting processes under alternate credentials. If
this service is stopped, this type of logon access will be unavailable.
If this service is disabled, any services that explicitly depend on it
will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ SENS Tracks system events such as Windows logon, network, and power
events. Notifies COM+ Event System subscribers of these
events. Microsoft Corporation c:\windows\system32\svchost.exe

+ SharedAccess Provides network address translation, addressing, name
resolution and/or intrusion prevention services for a home or small
office network. Microsoft Corporation c:\windows\system32\svchost.exe

+ ShellHWDetection Generic Host Process for Win32 Services Microsoft
Corporation c:\windows\system32\svchost.exe

+ Spooler Loads files to memory for later printing. Microsoft
Corporation c:\windows\system32\spoolsv.exe

+ srservice Performs system restore functions. To stop service, turn
off System Restore from the System Restore tab in My
Computer->Properties Microsoft
Corporation c:\windows\system32\svchost.exe

+ stisvc Provides image acquisition services for scanners and
cameras. Microsoft Corporation c:\windows\system32\svchost.exe

+ Themes Provides user experience theme management. Microsoft
Corporation c:\windows\system32\svchost.exe

+ TrkWks Maintains links between NTFS files within a computer or across
computers in a network domain. Microsoft
Corporation c:\windows\system32\svchost.exe

+ UMWdf Enables Windows user mode drivers. Microsoft
Corporation c:\windows\system32\wdfmgr.exe

+ W32Time Maintains date and time synchronization on all clients and
servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.

Microsoft Corporation c:\windows\system32\svchost.exe

+ WebClient Enables Windows-based programs to create, access, and
modify Internet-based files. If this service is stopped, these
functions will not be available. If this service is disabled, any
services that explicitly depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ winmgmt Provides a common interface and object model to access
management information about operating system, devices, applications
and services. If this service is stopped, most Windows-based software
will not function properly. If this service is disabled, any services
that explicitly depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ wscsvc Monitors system security settings and
configurations. Microsoft Corporation c:\windows\system32\svchost.exe

+ wuauserv Enables the download and installation of critical Windows
updates. If the service is disabled, the operating system can be
manually updated at the Windows Update Web site. Microsoft
Corporation c:\windows\system32\svchost.exe

+ WZCSVC Provides automatic configuration for the 802.11
adapters Microsoft Corporation c:\windows\system32\svchost.exe

HKLM\System\CurrentControlSet\Services

+ A3AB Driver for D-Link Wireless Network Adapter D-Link
Corporation c:\windows\system32\drivers\a3ab.sys

+ ac97intc Intel(r) Integrated Controller Hub Audio Driver Intel
Corporation c:\windows\system32\drivers\ac97intc.sys

+ ACPI ACPI Driver for NT Microsoft
Corporation c:\windows\system32\drivers\acpi.sys

+ aec Microsoft Acoustic Echo Canceller Microsoft
Corporation c:\windows\system32\drivers\aec.sys

+ AFD AFD Networking Support Environment Microsoft
Corporation c:\windows\system32\drivers\afd.sys

+ ANIO ANIO (NT5) Driver Alpha Networks
Inc. c:\windows\system32\anio.sys

+ AsyncMac RAS Asynchronous Media Driver Microsoft
Corporation c:\windows\system32\drivers\asyncmac.sys

+ atapi IDE/ATAPI Port Driver Microsoft
Corporation c:\windows\system32\drivers\atapi.sys

+ Atmarpc ATM ARP Client Protocol Microsoft
Corporation c:\windows\system32\drivers\atmarpc.sys

+ audstub AudStub Driver Microsoft
Corporation c:\windows\system32\drivers\audstub.sys

+ basic2 NTRksample
driver Conexant c:\windows\system32\drivers\hsf_bsc2.sys

+ Cdrom SCSI CD-ROM Driver Microsoft
Corporation c:\windows\system32\drivers\cdrom.sys

+ Disk PnP Disk Driver Microsoft
Corporation c:\windows\system32\drivers\disk.sys

+ DMusic Microsoft Kernel DLS Synthesizer Microsoft
Corporation c:\windows\system32\drivers\dmusic.sys

+ drmkaud Microsoft Kernel DRM Audio Descrambler Filter Microsoft
Corporation c:\windows\system32\drivers\drmkaud.sys

+ EL90XBC 3Com EtherLink PCI Driver 3Com
Corporation c:\windows\system32\drivers\el90xbc5.sys

+ Fallback Fallback
driver Conexant c:\windows\system32\drivers\hsf_fall.sys

+ Fdc Floppy Disk Controller Driver Microsoft
Corporation c:\windows\system32\drivers\fdc.sys

+ Flpydisk Floppy Driver Microsoft
Corporation c:\windows\system32\drivers\flpydisk.sys

+ Fsks FSKsNT driver Conexant c:\windows\system32\drivers\hsf_fsks.sys

+ Ftdisk FT Disk Driver Microsoft
Corporation c:\windows\system32\drivers\ftdisk.sys

+ gameenum Game Port Enumerator Microsoft
Corporation c:\windows\system32\drivers\gameenum.sys

+ GEARAspiWDM CDRom Class Filter Driver GEAR Software
Inc. c:\windows\system32\drivers\gearaspiwdm.sys

+ Gpc Generic Packet Classifier Microsoft
Corporation c:\windows\system32\drivers\msgpc.sys

+ HidUsb USB Miniport Driver for Input Devices Microsoft
Corporation c:\windows\system32\drivers\hidusb.sys

+ HSF_DP HSF_DP driver Conexant
Systems c:\windows\system32\drivers\hsf_dp.sys

+ hsf_msft WinACHSF
driver Conexant c:\windows\system32\drivers\hsf_msft.sys

+ HSFHWBS2 HSF_HWB2 WDM driver Conexant
Systems c:\windows\system32\drivers\hsfhwbs2.sys

+ HTTP This service implements the hypertext transfer protocol (HTTP).
If this service is disabled, any services that explicitly depend on it
will fail to start. Microsoft
Corporation c:\windows\system32\drivers\http.sys

+ i8042prt i8042 Port Driver Microsoft
Corporation c:\windows\system32\drivers\i8042prt.sys

+ i81x Miniport Driver for Intel Graphics Driver Intel(R)
Corporation c:\windows\system32\drivers\i81xnt5.sys

+ iAimFP0 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv01nt.sys

+ iAimFP1 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv02nt.sys

+ iAimFP2 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv05nt.sys

+ iAimFP3 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wsiintxx.sys

+ iAimFP4 Local Flat Panel Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wvchntxx.sys

+ iAimFP5 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv07nt.sys

+ iAimFP6 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv08nt.sys

+ iAimFP7 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv09nt.sys

+ iAimTV0 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv01nt.sys

+ iAimTV1 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv02nt.sys

+ iAimTV2 File not found: System32\DRIVERS\wATV03nt.sys

+ iAimTV3 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv04nt.sys

+ iAimTV4 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wch7xxnt.sys

+ iAimTV5 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv10nt.sys

+ iAimTV6 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv06nt.sys

+ IntelIde Intel PCI IDE Driver Microsoft
Corporation c:\windows\system32\drivers\intelide.sys

+ ip6fw Provides intrusion prevention service for a home or small
office network. Microsoft
Corporation c:\windows\system32\drivers\ip6fw.sys

+ IpFilterDriver IP Traffic Filter Driver Microsoft
Corporation c:\windows\system32\drivers\ipfltdrv.sys

+ IpInIp IP in IP Tunnel Driver Microsoft
Corporation c:\windows\system32\drivers\ipinip.sys

+ IpNat IP Network Address Translator Microsoft
Corporation c:\windows\system32\drivers\ipnat.sys

+ IPSec IPSEC driver Microsoft
Corporation c:\windows\system32\drivers\ipsec.sys

+ IRENUM Infra-Red Bus Enumerator Microsoft
Corporation c:\windows\system32\drivers\irenum.sys

+ isapnp PNP ISA Bus Driver Microsoft
Corporation c:\windows\system32\drivers\isapnp.sys

+ K56 K56NT driver Conexant c:\windows\system32\drivers\hsf_k56k.sys

+ Kbdclass Keyboard Class Driver Microsoft
Corporation c:\windows\system32\drivers\kbdclass.sys

+ kmixer Kernel Mode Audio Mixer Microsoft
Corporation c:\windows\system32\drivers\kmixer.sys

+ mdmxsdk Diagnostic Interface
DRIVER Conexant c:\windows\system32\drivers\mdmxsdk.sys

+ mfeavfk Anti-Virus File System Filter Driver McAfee,
Inc. c:\windows\system32\drivers\mfeavfk.sys

+ mfebopk Buffer Overflow Protection Driver McAfee,
Inc. c:\windows\system32\drivers\mfebopk.sys

+ mfehidk Host Intrusion Detection Link Driver McAfee,
Inc. c:\windows\system32\drivers\mfehidk.sys

+ mferkdk VSCore Code Analysis Driver McAfee,
Inc. c:\windows\system32\drivers\mferkdk.sys

+ mfesmfk System Monitor Filter Driver McAfee,
Inc. c:\windows\system32\drivers\mfesmfk.sys

+ Mouclass Mouse Class Driver Microsoft
Corporation c:\windows\system32\drivers\mouclass.sys

+ moufiltr Mouse filter driver Chic
Tech. c:\windows\system32\drivers\moufiltr.sys

+ mouhid HID Mouse Filter Driver Microsoft
Corporation c:\windows\system32\drivers\mouhid.sys

+ MPFP McAfee Personal Firewall Plus Driver McAfee,
Inc. c:\windows\system32\drivers\mpfp.sys

+ ms_mpu401 MPU401 Adapter Driver Microsoft
Corporation c:\windows\system32\drivers\msmpu401.sys

+ MSKSSRV MS KS Server Microsoft
Corporation c:\windows\system32\drivers\mskssrv.sys

+ MSPCLOCK MS Proxy Clock Microsoft
Corporation c:\windows\system32\drivers\mspclock.sys

+ MSPQM MS Proxy Quality Manager Microsoft
Corporation c:\windows\system32\drivers\mspqm.sys

+ mssmbios System Management BIOS Driver Microsoft
Corporation c:\windows\system32\drivers\mssmbios.sys

+ NdisTapi Remote Access NDIS TAPI Driver Microsoft
Corporation c:\windows\system32\drivers\ndistapi.sys

+ Ndisuio NDIS Usermode I/O Protocol Microsoft
Corporation c:\windows\system32\drivers\ndisuio.sys

+ NdisWan Remote Access NDIS WAN Driver Microsoft
Corporation c:\windows\system32\drivers\ndiswan.sys

+ NetBT NetBios over Tcpip Microsoft
Corporation c:\windows\system32\drivers\netbt.sys

+ nv NVIDIA Compatible Windows 2000 Miniport Driver, Version 56.73
NVIDIA Corporation c:\windows\system32\drivers\nv4_mini.sys

+ NwlnkFlt IPX Traffic Filter Driver Microsoft
Corporation c:\windows\system32\drivers\nwlnkflt.sys

+ NwlnkFwd IPX Traffic Forwarder Driver Microsoft
Corporation c:\windows\system32\drivers\nwlnkfwd.sys

+ NwlnkIpx NWLink IPX/SPX/NetBIOS Compatible Transport
Protocol Microsoft Corporation c:\windows\system32\drivers\nwlnkipx.sys

+ NwlnkNb NWLink NetBIOS Microsoft
Corporation c:\windows\system32\drivers\nwlnknb.sys

+ NwlnkSpx NWLink SPX/SPXII Protocol Microsoft
Corporation c:\windows\system32\drivers\nwlnkspx.sys

+ P3 Processor Device Driver Microsoft
Corporation c:\windows\system32\drivers\p3.sys

+ Parport Parallel Port Driver Microsoft
Corporation c:\windows\system32\drivers\parport.sys

+ PCI NT Plug and Play PCI Enumerator Microsoft
Corporation c:\windows\system32\drivers\pci.sys

+ pnicml File not found: C:\DOCUME~1\Kev\LOCALS~1\Temp\pnicml.sys

+ PptpMiniport WAN Miniport (PPTP) Microsoft
Corporation c:\windows\system32\drivers\raspptp.sys

+ Processor Processor Device Driver Microsoft
Corporation c:\windows\system32\drivers\processr.sys

+ prodrv06 StarForce Protection Environment Driver Protection
Technology c:\windows\system32\drivers\prodrv06.sys

+ prohlp02 StarForce Protection Helper Driver Protection
Technology c:\windows\system32\drivers\prohlp02.sys

+ prosync1 StarForce Protection Synchronization Driver Protection
Technology c:\windows\system32\drivers\prosync1.sys

+ PSched QoS Packet Scheduler Microsoft
Corporation c:\windows\system32\drivers\psched.sys

+ Ptilink Direct Parallel Link Driver Parallel Technologies,
Inc. c:\windows\system32\drivers\ptilink.sys

+ PxHelp20 Px Engine Device Driver for Windows 2000/XP Sonic
Solutions c:\windows\system32\drivers\pxhelp20.sys

+ RasAcd Remote Access Auto Connection Driver Microsoft
Corporation c:\windows\system32\drivers\rasacd.sys

+ Rasl2tp WAN Miniport (L2TP) Microsoft
Corporation c:\windows\system32\drivers\rasl2tp.sys

+ RasPppoe Remote Access PPPOE Driver Microsoft
Corporation c:\windows\system32\drivers\raspppoe.sys

+ Raspti Direct Parallel Microsoft
Corporation c:\windows\system32\drivers\raspti.sys

+ RDPCDD RDP Miniport Microsoft
Corporation c:\windows\system32\drivers\rdpcdd.sys

+ redbook Redbook Audio Filter Driver Microsoft
Corporation c:\windows\system32\drivers\redbook.sys

+ Rksample Rksample WDM
driver Conexant c:\windows\system32\drivers\hsf_samp.sys

+ rtl8139 Realtek RTL8139 NDIS 5.0 Driver Realtek Semiconductor
Corporation c:\windows\system32\drivers\rtl8139.sys

+ Secdrv SafeDisc driver Macrovision Corporation, Macrovision Europe
Limited, and Macrovision Japan and Asia
K.K. c:\windows\system32\drivers\secdrv.sys

+ serenum Serial Port Enumerator Microsoft
Corporation c:\windows\system32\drivers\serenum.sys

+ Serial Serial Device Driver Microsoft
Corporation c:\windows\system32\drivers\serial.sys

+ sfhlp01 StarForce Protection Helper Driver Protection
Technology c:\windows\system32\drivers\sfhlp01.sys

+ smwdm SoundMAX Integrated Digital Audio Analog Devices,
Inc. c:\windows\system32\drivers\smwdm.sys

+ SoftFax FaxNT
driver Conexant c:\windows\system32\drivers\hsf_faxx.sys

+ splitter Microsoft Kernel Audio Splitter Microsoft
Corporation c:\windows\system32\drivers\splitter.sys

+ swenum Plug and Play Software Device Enumerator Microsoft
Corporation c:\windows\system32\drivers\swenum.sys

+ swmidi Microsoft GS Wavetable Synthesizer Microsoft
Corporation c:\windows\system32\drivers\swmidi.sys

+ sysaudio System Audio WDM Filter Microsoft
Corporation c:\windows\system32\drivers\sysaudio.sys

+ Tcpip TCP/IP Protocol Driver Microsoft
Corporation c:\windows\system32\drivers\tcpip.sys

+ Tcpip6 Microsoft IPv6 Protocol Driver Microsoft
Corporation c:\windows\system32\drivers\tcpip6.sys

+ TermDD Terminal Server Driver Microsoft
Corporation c:\windows\system32\drivers\termdd.sys

+ Tones TonesNT
driver Conexant c:\windows\system32\drivers\hsf_tone.sys

+ tunmp Microsoft Tunnel Interface Driver Microsoft
Corporation c:\windows\system32\drivers\tunmp.sys

+ Update Update Driver Microsoft
Corporation c:\windows\system32\drivers\update.sys

+ usbhub Default Hub Driver for USB Microsoft
Corporation c:\windows\system32\drivers\usbhub.sys

+ usbscan USB Scanner Driver Microsoft
Corporation c:\windows\system32\drivers\usbscan.sys

+ USBSTOR USB Mass Storage Class Driver Microsoft
Corporation c:\windows\system32\drivers\usbstor.sys

+ usbuhci UHCI USB Miniport Driver Microsoft
Corporation c:\windows\system32\drivers\usbuhci.sys

+ V124 V124NT driver Conexant c:\windows\system32\drivers\hsf_v124.sys

+ VgaSave Controls the VGA display adapter to provide basic display
capabilities. Microsoft Corporation c:\windows\system32\drivers\vga.sys

+ Wanarp Remote Access IP ARP Driver Microsoft
Corporation c:\windows\system32\drivers\wanarp.sys

+ wdmaud MMSYSTEM Wave/Midi API mapper Microsoft
Corporation c:\windows\system32\drivers\wdmaud.sys

+ winachsf WinACHSF driver Conexant
Systems c:\windows\system32\drivers\hsf_cnxt.sys

HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute

+ autocheck autochk * Auto Check Utility Microsoft
Corporation c:\windows\system32\autochk.exe

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options

+ Your Image File Name Here without a path Symbolic Debugger for
Windows 2000 Microsoft Corporation c:\windows\system32\ntsd.exe

HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls

+ advapi32 Advanced Windows 32 Base API Microsoft
Corporation c:\windows\system32\advapi32.dll

+ comdlg32 Common Dialogs DLL Microsoft
Corporation c:\windows\system32\comdlg32.dll

+ gdi32 GDI Client DLL Microsoft
Corporation c:\windows\system32\gdi32.dll

+ imagehlp Windows NT Image Helper Microsoft
Corporation c:\windows\system32\imagehlp.dll

+ kernel32 Windows NT BASE API Client DLL Microsoft
Corporation c:\windows\system32\kernel32.dll

+ lz32 LZ Expand/Compress API DLL Microsoft
Corporation c:\windows\system32\lz32.dll

+ ole32 Microsoft OLE for Windows Microsoft
Corporation c:\windows\system32\ole32.dll

+ oleaut32 Microsoft Corporation c:\windows\system32\oleaut32.dll

+ olecli32 Object Linking and Embedding Client Library Microsoft
Corporation c:\windows\system32\olecli32.dll

+ olecnv32 Microsoft OLE for Windows Microsoft
Corporation c:\windows\system32\olecnv32.dll

+ olesvr32 Object Linking and Embedding Server Library Microsoft
Corporation c:\windows\system32\olesvr32.dll

+ olethk32 Microsoft OLE for Windows Microsoft
Corporation c:\windows\system32\olethk32.dll

+ rpcrt4 Remote Procedure Call Runtime Microsoft
Corporation c:\windows\system32\rpcrt4.dll

+ shell32 Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

+ url Internet Shortcut Shell Extension DLL Microsoft
Corporation c:\windows\system32\url.dll

+ urlmon OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ user32 Windows XP USER API Client DLL Microsoft
Corporation c:\windows\system32\user32.dll

+ version Version Checking and File Installation Libraries Microsoft
Corporation c:\windows\system32\version.dll

+ wininet Internet Extensions for Win32 Microsoft
Corporation c:\windows\system32\wininet.dll

+ wldap32 Win32 LDAP API DLL Microsoft
Corporation c:\windows\system32\wldap32.dll

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost

+ logonui.exe Windows Logon UI Microsoft
Corporation c:\windows\system32\logonui.exe

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

+ crypt32chain Crypto API32 Microsoft
Corporation c:\windows\system32\crypt32.dll

+ cryptnet Crypto Network Related API Microsoft
Corporation c:\windows\system32\cryptnet.dll

+ cscdll Offline Network Agent Microsoft
Corporation c:\windows\system32\cscdll.dll

+ ScCertProp Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

+ Schedule Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

+ sclgntfy Secondary Logon Service Notification DLL Microsoft
Corporation c:\windows\system32\sclgntfy.dll

+ SensLogn Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

+ termsrv Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

+ WgaLogon Windows Genuine Advantage Notification Microsoft
Corporation c:\windows\system32\wgalogon.dll

+ winbue32 File not found: winbue32.dll

+ wlballoon Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

HKCU\Control Panel\Desktop\Scrnsave.exe

+ C:\WINDOWS\System32\ssmarque.scr Marquee Screen Saver Microsoft
Corporation c:\windows\system32\ssmarque.scr

HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{895343B1-03B2-410A-B939-2D9D9C4F82C5}] DATAGRAM
7 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{895343B1-03B2-410A-B939-2D9D9C4F82C5}] SEQPACKET
7 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{C6AC366E-9922-42CA-A144-96EB9A73E5F2}] DATAGRAM
5 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{C6AC366E-9922-42CA-A144-96EB9A73E5F2}] SEQPACKET
5 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{F8E42EDF-67F8-489F-923D-F5DD69583CB7}] DATAGRAM
6 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{F8E42EDF-67F8-489F-923D-F5DD69583CB7}] SEQPACKET
6 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{C6AC366E-9922-42CA-A144-96EB9A73E5F2}] DATAGRAM
0 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{C6AC366E-9922-42CA-A144-96EB9A73E5F2}] SEQPACKET
0 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{D3CDCA96-282E-4E0E-BA04-1BC10FD0E787}] DATAGRAM
1 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{D3CDCA96-282E-4E0E-BA04-1BC10FD0E787}] SEQPACKET
1 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{E9C9A4EE-2047-4960-9E0F-29F51FA0C00F}] DATAGRAM
2 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{E9C9A4EE-2047-4960-9E0F-29F51FA0C00F}] SEQPACKET
2 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{F8E42EDF-67F8-489F-923D-F5DD69583CB7}] DATAGRAM
3 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{F8E42EDF-67F8-489F-923D-F5DD69583CB7}] SEQPACKET
3 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS [\Device\NwlnkNb] DATAGRAM 4 Microsoft Windows Sockets
2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS [\Device\NwlnkNb] SEQPACKET 4 Microsoft Windows Sockets
2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkipx [IPX] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkspx [SPX II] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkspx [SPX II] [Pseudo Stream] Microsoft Windows Sockets 2.0
Service Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkspx [SPX] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkspx [SPX] [Pseudo Stream] Microsoft Windows Sockets 2.0
Service Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [RAW/IP] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [RAW/IPv6] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [TCP/IP] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [TCP/IPv6] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [UDP/IP] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [UDP/IPv6] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ RSVP TCP Service Provider Microsoft Windows Rsvp 1.0 Service
Provider Microsoft Corporation c:\windows\system32\rsvpsp.dll

+ RSVP UDP Service Provider Microsoft Windows Rsvp 1.0 Service
Provider Microsoft Corporation c:\windows\system32\rsvpsp.dll

HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors

+ BJ Language Monitor Langage Monitor for Canon Bubble-Jet
Printer Microsoft Corporation c:\windows\system32\cnbjmon.dll

+ Local Port Local Spooler DLL Microsoft
Corporation c:\windows\system32\localspl.dll

+ PDF Port Acrobat ® PDF Port Adobe Systems
Incorporated. c:\windows\system32\pdfports.dll

+ PJL Language Monitor PJL Language monitor Microsoft
Corporation c:\windows\system32\pjlmon.dll

+ Standard TCP/IP Port Standard TCP/IP Port Monitor DLL Microsoft
Corporation c:\windows\system32\tcpmon.dll

+ USB Monitor Standard Dynamic Printing Port Monitor DLL Microsoft
Corporation c:\windows\system32\usbmon.dll

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages

+ msv1_0 Microsoft Authentication Package v1.0 Microsoft
Corporation c:\windows\system32\msv1_0.dll

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages

+ scecli Windows Security Configuration Editor Client Engine Microsoft
Corporation c:\windows\system32\scecli.dll

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages

+ kerberos Kerberos Security Package Microsoft
Corporation c:\windows\system32\kerberos.dll

+ msv1_0 Microsoft Authentication Package v1.0 Microsoft
Corporation c:\windows\system32\msv1_0.dll

+ schannel TLS / SSL Security Provider Microsoft
Corporation c:\windows\system32\schannel.dll

+ wdigest Microsoft Digest Access Microsoft
Corporation c:\windows\system32\wdigest.dll
 
L

LittleMoo

Ok (as I breathe a sigh of relief), that was a huge Autoruns log (about 4X
the size of mine). Everything I looked at in Process Explorer looked fine.
In Autoruns I found 1 thing that I didn't like and 2 things that I'm unsure
of.

The one entry that I didn't like (along with it's sub-entries):
HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9
This is an entry from something called New.Net (also goes by NewDotNet). It
is unwanted software, and usually the user doesn't even know that it's on
their system. If it is on your system then you can uninstall it from the
Add/Remove Programs entry in the Control Panel. If it's not there then it
was probably already cleaned up by antivirus or anti-spyware programs that
you have used, and this entry is just a remenant (in which case you
shouldn't worry about it).
New.Net information and removal: http://www.cexx.org/newnet.htm

The other two are under
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects

+
{278B661A-14A8-D8B0-6AF4-03088B866149} c:\windows\system32\unaoakg.dll

+
{B7672BAF-E9A3-49B6-86B2-C81719A18A4C} c:\windows\system32\imfmyxst.dll

I couldn't find any information on these dll files on the web, which gets me
a little suspicious of them. This isn't to say that these files aren't
legit, because they could be. If you want to you can try to disable these
within the Autoruns program (uncheck the check box) and see if that makes a
difference. If it doesn't, or if it makes your computer run in an adverse
way then I would re-enable them. To make it more specific, you could try
disabling them one at a time.

Other than this, I find it strange that when you're in Firefox you get
pop-up windows in Internet Explorer - this leads my attention to an external
program of some type that is running on your system.

Here are a few things that I would do:
Go into RealPlayer, get into it's settings and disable it from running on
startup.
Open up Internet Explorer and disable Google Toolbar - View -> Toolbars and
uncheck Google Toolbar. (I kind of doubt this is causing it, but you can try
this just to rule it out)

If none of this helps, then there is some program running on your system
that we are missing. In this case you could keep Process Explorer running
during your normal computer operation. In Process Explorer go to Options ->
Difference Highlighting Duration, change the value to 10 seconds. When an
popup comes up see what entries are highlighted red and/or green (except for
IEXPLORE.EXE because this is the Internet Explorer entry and I think that IE
itself probably doesn't have anything to do with the popups. If you can nail
down the rogue process then you can probably get some information on it to
post back here (at least try to get the process name). You might also be
able to use Filemon from Sysinternals:
http://www.sysinternals.com/Utilities/Filemon.html to try to track down what
is causing the problem - just look for the entries closest to the time that
it poped up.

-Dan

Two housekeeping items.... I do have Firefox set to block popups, and I
do run a firewall - I have McAfee Personal Firewall, and I'm pretty
strict about what I allow full access for.

The log file for Process Explorer....
-----
Process PID CPU Description Company Name
System Idle Process 0 56.07
Interrupts n/a Hardware Interrupts
DPCs n/a 4.55 Deferred Procedure Calls
System 4
smss.exe 544 Windows NT Session Manager Microsoft Corporation
csrss.exe 600 Client Server Runtime Process Microsoft Corporation
winlogon.exe 624 Windows NT Logon Application Microsoft Corporation
services.exe 668 2.53 Services and Controller app Microsoft
Corporation
svchost.exe 844 Generic Host Process for Win32 Services Microsoft
Corporation
mcagent.exe 2548 McAfee Integrated Security Platform McAfee,
Inc.
svchost.exe 904 Generic Host Process for Win32 Services Microsoft
Corporation
svchost.exe 940 Generic Host Process for Win32 Services Microsoft
Corporation
svchost.exe 992 Generic Host Process for Win32 Services Microsoft
Corporation
svchost.exe 1048 Generic Host Process for Win32
Services Microsoft Corporation
spoolsv.exe 1320 Spooler SubSystem App Microsoft Corporation
HWAPI.exe 1656 6.33 McAfee HackerWatch Service McAfee, Inc.
mclogsrv.exe 1680 MSC Log Manager McAfee, Inc.
mcupdmgr.exe 1712 McAfee Update Manager Service McAfee, Inc.
McNASvc.exe 1776 McAfee Network Agent McAfee, Inc.
mcods.exe 1812 McAfee VirusScan - On Demand Scan McAfee, Inc.
mcpromgr.exe 1932 McAfee Integrated Security Platform McAfee,
Inc.
RedirSvc.exe 1964 McAfee Redirector Service Module McAfee, Inc.
mcsysmon.exe 152 17.73 McAfee SystemGuards Service McAfee, Inc.
mctskshd.exe 228 McAfee Tqsk Scheduler McAfee, Inc.
mcusrmgr.exe 244 MISP User Manager McAfee, Inc.
MpfSrv.exe 304 McAfee Personal Firewall Service McAfee, Inc.
svchost.exe 468 Generic Host Process for Win32 Services Microsoft
Corporation
wdfmgr.exe 528 Windows User Mode Driver Manager Microsoft
Corporation
svchost.exe 852 Generic Host Process for Win32 Services Microsoft
Corporation
alg.exe 3012 Application Layer Gateway Service Microsoft
Corporation
Mcshield.exe 1468 1.27 On-Access Scanner service McAfee, Inc.
lsass.exe 680 LSA Shell (Export Version) Microsoft Corporation
explorer.exe 2260 1.27 Windows Explorer Microsoft Corporation
AirPlusCFG.exe 3552 D-Link Wireless LAN Monitor D-Link
WZCSLDR.exe 3568 1.27 ANIWZCS launcher for Windows. Alpha Networks
Inc.
jusched.exe 3600 Java(TM) 2 Platform Standard Edition binary Sun
Microsystems, Inc.
realsched.exe 3620 RealNetworks Scheduler RealNetworks, Inc.
aim.exe 3648 AOL Instant Messenger America Online, Inc.
TeaTimer.exe 4068 1.27 System settings protector Safer Networking
Limited
firefox.exe 3544 Firefox Mozilla Corporation
procexp.exe 828 3.80 Sysinternals Process Explorer Sysinternals

-----

And the log file for Autoruns

-----

HKLM\System\CurrentControlSet\Control\Terminal
Server\Wds\rdpwd\StartupPrograms

+ rdpclip RDP Clip Monitor Microsoft
Corporation c:\windows\system32\rdpclip.exe

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit

+ C:\WINDOWS\system32\userinit.exe Userinit Logon Application Microsoft
Corporation c:\windows\system32\userinit.exe

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell

+ Explorer.exe Windows Explorer Microsoft
Corporation c:\windows\explorer.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

+ ANIWZCSService ANIWZCS launcher for Windows. Alpha Networks
Inc. c:\program files\alpha networks\aniwzcs service\wzcsldr.exe

+ D-Link AirPlus Xtreme G D-Link Wireless LAN
Monitor D-Link c:\d-link\airplus xtreme g\airpluscfg.exe

+ NvMediaCenter NVIDIA Media Center Library NVIDIA
Corporation c:\windows\system32\nvmctray.dll

+ SunJavaUpdateSched Java(TM) 2 Platform Standard Edition binary Sun
Microsystems, Inc. c:\program files\java\jre1.5.0_06\bin\jusched.exe

+ TkBellExe RealNetworks Scheduler RealNetworks, Inc. c:\program
files\common files\real\update_ob\realsched.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup

+ Adobe Gamma Loader.lnk Adobe Gamma Loader Adobe Systems,
Inc. c:\program files\common files\adobe\calibration\adobe gamma
loader.exe

C:\Documents and Settings\Kev\Start Menu\Programs\Startup

+ Adobe Gamma.lnk Adobe Gamma Loader Adobe Systems, Inc. c:\program
files\common files\adobe\calibration\adobe gamma loader.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

+ {8857A63C-0573-1033-0306-020806200001} File not found: C:\Program
Files\Common Files\{8857A63C-0573-1033-0306-020806200001}\Update.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

+ AIM AOL Instant Messenger America Online, Inc. c:\aim\aim.exe

+ SpybotSD TeaTimer System settings protector Safer Networking
Limited c:\program files\spybot - search & destroy\teatimer.exe

HKLM\SOFTWARE\Classes\Protocols\Filter

+ Class Install Handler OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ deflate OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ gzip OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ lzdhtml OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ text/webviewhtml Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

HKLM\SOFTWARE\Classes\Protocols\Handler

+ about Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ cdl OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ cdo Microsoft SharePoint Portal Server Object Model Microsoft
Corporation c:\program files\common files\microsoft shared\web
folders\pkmcdo.dll

+ dvd ActiveX control for streaming video Microsoft
Corporation c:\windows\system32\msvidctl.dll

+ file OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ ftp OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ gopher OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ http OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ https OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ its Microsoft® InfoTech Storage System Library Microsoft
Corporation c:\windows\system32\itss.dll

+ javascript Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ lid ActiveX control for streaming video Microsoft
Corporation c:\windows\system32\msvidctl.dll

+ local OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ mailto Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ mhtml Microsoft Internet Messaging API Microsoft
Corporation c:\windows\system32\inetcomm.dll

+ mk OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ ms-its Microsoft® InfoTech Storage System Library Microsoft
Corporation c:\windows\system32\itss.dll

+ mso-offdap Microsoft Office XP Web Components Microsoft
Corporation c:\program files\common files\microsoft shared\web
components\10\owc10.dll

+ res Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ sysimage Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ tv ActiveX control for streaming video Microsoft
Corporation c:\windows\system32\msvidctl.dll

+ vbscript Microsoft (R) HTML Viewer Microsoft
Corporation c:\windows\system32\mshtml.dll

+ wia WIA Scripting Layer Microsoft
Corporation c:\windows\system32\wiascr.dll

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components

+ Address Book 6 Outlook Express Setup Library Microsoft
Corporation c:\program files\outlook express\setup50.exe

+ Internet Explorer Windows NT User Data Migration Tool Microsoft
Corporation c:\windows\system32\shmgrate.exe

+ Internet Explorer Windows Setup API Microsoft
Corporation c:\windows\system32\setupapi.dll

+ Internet Explorer 6 IE 5.0 Per-User Install Utility Microsoft
Corporation c:\windows\system32\ie4uinit.exe

+ Microsoft Outlook Express 6 Outlook Express Setup Library Microsoft
Corporation c:\program files\outlook express\setup50.exe

+ Microsoft Windows Media Player ADVPACK Microsoft
Corporation c:\windows\system32\advpack.dll

+ NetMeeting 3.01 ADVPACK Microsoft
Corporation c:\windows\system32\advpack.dll

+ Outlook Express Windows NT User Data Migration Tool Microsoft
Corporation c:\windows\system32\shmgrate.exe

+ Themes Setup Microsoft(C) Register Server Microsoft
Corporation c:\windows\system32\regsvr32.exe

+ Windows Desktop Update Microsoft(C) Register Server Microsoft
Corporation c:\windows\system32\regsvr32.exe

+ Windows Media Player Microsoft Windows Media Player Setup
Utility Microsoft Corporation c:\windows\inf\unregmp2.exe

+ Windows Messenger 4.7 ADVPACK Microsoft
Corporation c:\windows\system32\advpack.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler

+ Browseui preloader Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Component Categories cache daemon Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad

+ CDBurn Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

+ PostBootReminder Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

+ SysTray Systray shell service object Microsoft
Corporation c:\windows\system32\stobject.dll

+ WebCheck Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

+ shell32.dll Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell
Extensions\Approved

+ %DESC_PublishDropTarget% Photo Printing Wizard Microsoft
Corporation c:\windows\system32\photowiz.dll

+ &Address Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ .CAB file viewer Cabinet File Viewer Shell Extension Microsoft
Corporation c:\windows\system32\cabview.dll

+ Accessible Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ ActiveX Cache Folder Object Control Viewer Microsoft
Corporation c:\windows\system32\occache.dll

+ Address Bar Parser Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Address EditBox Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Administrative Tools Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Audio Media Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ Augmented Shell Folder Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Augmented Shell Folder 2 Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Auto Update Property Sheet Extension Automatic Updates Control
Panel Microsoft Corporation c:\windows\system32\wuaucpl.cpl

+ Avi Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ BandProxy Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Briefcase Windows Briefcase Microsoft
Corporation c:\windows\system32\syncui.dll

+ CDF Extension Copy Hook Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Channel File Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Channel Handler Object Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Channel Menu Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Channel Properties Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Channel Shortcut Channel Definition File Viewer Microsoft
Corporation c:\windows\system32\cdfview.dll

+ Code Download Agent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Compatibility Page Compatibility Tab Shell Extension DLL Microsoft
Corporation c:\windows\system32\slayerxp.dll

+ Compressed (zipped) Folder Compressed (zipped) Folders Microsoft
Corporation c:\windows\system32\zipfldr.dll

+ Compressed (zipped) Folder Right Drag Handler Compressed (zipped)
Folders Microsoft Corporation c:\windows\system32\zipfldr.dll

+ Compressed (zipped) Folder SendTo Target Compressed (zipped)
Folders Microsoft Corporation c:\windows\system32\zipfldr.dll

+ ConnectionAgent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Crypto PKO Extension Crypto Shell Extensions Microsoft
Corporation c:\windows\system32\cryptext.dll

+ Crypto Sign Extension Crypto Shell Extensions Microsoft
Corporation c:\windows\system32\cryptext.dll

+ Custom MRU AutoCompleted List Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Darwin App Publisher Shell Application Manager Microsoft
Corporation c:\windows\system32\appwiz.cpl

+ Desktop Explorer NVIDIA Desktop Explorer, Version 100.35 NVIDIA
Corporation c:\windows\system32\nvshell.dll

+ Desktop Explorer Menu NVIDIA Desktop Explorer, Version 100.35 NVIDIA
Corporation c:\windows\system32\nvshell.dll

+ DfsShell Distributed File System shell extension Microsoft
Corporation c:\windows\system32\dfsshlex.dll

+ Directory Context Menu Verbs Directory Service Common UI Microsoft
Corporation c:\windows\system32\dsuiext.dll

+ Directory Object Find Directory Service Find Microsoft
Corporation c:\windows\system32\dsquery.dll

+ Directory Property UI Directory Service Common UI Microsoft
Corporation c:\windows\system32\dsuiext.dll

+ Directory Query UI Directory Service Find Microsoft
Corporation c:\windows\system32\dsquery.dll

+ Directory Start/Search Find Directory Service Find Microsoft
Corporation c:\windows\system32\dsquery.dll

+ Disk Copy Extension Windows DiskCopy Microsoft
Corporation c:\windows\system32\diskcopy.dll

+ Disk Quota UI Windows Shell Disk Quota UI DLL Microsoft
Corporation c:\windows\system32\dskquoui.dll

+ Display Adapter CPL Extension Advanced display adapter
properties Microsoft Corporation c:\windows\system32\deskadp.dll

+ Display Monitor CPL Extension Advanced display monitor
properties Microsoft Corporation c:\windows\system32\deskmon.dll

+ Display Panning CPL Extension File not found: deskpan.dll

+ Display TroubleShoot CPL Extension Advanced display performance
properties Microsoft Corporation c:\windows\system32\deskperf.dll

+ Download Status Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ DS Security Page Directory Service Security UI Microsoft
Corporation c:\windows\system32\dssec.dll

+ E-mail Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Explorer Band Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Extensions Manager Folder Extensions Manager Microsoft
Corporation c:\windows\system32\extmgr.dll

+ Favorites Band Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Fonts Windows Font Folder Microsoft
Corporation c:\windows\system32\fontext.dll

+ Fonts Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ For &People... Find People Microsoft Corporation c:\program
files\outlook express\wabfind.dll

+ FTP Folders Webview Microsoft Internet Explorer FTP Folder Shell
Extension Microsoft Corporation c:\windows\system32\msieftp.dll

+ GDI+ file thumbnail extractor Windows Picture and Fax
Viewer Microsoft Corporation c:\windows\system32\shimgvw.dll

+ Get a Passport Wizard Map Network Drives/Network Places
Wizard Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Global Folder Settings Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Help and Support Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Help and Support Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ History Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ HTML Thumbnail Extractor Windows Picture and Fax Viewer Microsoft
Corporation c:\windows\system32\shimgvw.dll

+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve,
Inc. c:\windows\system32\hticons.dll

+ ICC Profile Microsoft Color Matching System User Interface
DLL Microsoft Corporation c:\windows\system32\icmui.dll

+ ICM Monitor Management Microsoft Color Matching System User Interface
DLL Microsoft Corporation c:\windows\system32\icmui.dll

+ ICM Printer Management Microsoft Color Matching System User Interface
DLL Microsoft Corporation c:\windows\system32\icmui.dll

+ ICM Scanner Management Microsoft Color Matching System User Interface
DLL Microsoft Corporation c:\windows\system32\icmui.dll

+ ICQ Shell Extension File not found: C:\Program
Files\ICQ\ICQShExt.dll

+ IE4 Suite Splash Screen Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ In-pane search Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Installed Apps Enumerator Shell Application Manager Microsoft
Corporation c:\windows\system32\appwiz.cpl

+ Internet Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Internet Name Space Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ InternetShortcut Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ ISFBand OC Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ iTunes iTunes Mini Player DLL Apple Computer, Inc. c:\program
files\itunes\itunesminiplayer.dll

+ Microsoft Access Custom Icon Handler MSAPP Export Support for
Microsoft Access Microsoft Corporation c:\program files\microsoft
office\office\soa800.dll

+ Microsoft Agent Character Property Sheet Handler Microsoft Agent
Property Sheet Handler Microsoft
Corporation c:\windows\msagent\agentpsh.dll

+ Microsoft AutoComplete Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Microsoft Browser Architecture Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Microsoft BrowserBand Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Microsoft Data Link Microsoft Data Access - OLE DB Core
Services Microsoft Corporation c:\program files\common files\system\ole
db\oledb32.dll

+ Microsoft DocProp Inplace Calendar Control Microsoft DocProp Shell
Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace Droplist Combo Control Microsoft DocProp
Shell Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace Edit Box Control Microsoft DocProp Shell
Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace ML Edit Box Control Microsoft DocProp Shell
Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace Time Control Microsoft DocProp Shell
Ext Microsoft Corporation c:\windows\system32\docprop2.dll

+ Microsoft DocProp Shell Ext Microsoft DocProp Shell Ext Microsoft
Corporation c:\windows\system32\docprop2.dll

+ Microsoft History AutoComplete List Shell Browser UI
Library Microsoft Corporation c:\windows\system32\browseui.dll

+ Microsoft Internet Toolbar Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Microsoft Multiple AutoComplete List Container Shell Browser UI
Library Microsoft Corporation c:\windows\system32\browseui.dll

+ Microsoft Office HTML Icon Handler Microsoft Office XP
component Microsoft Corporation c:\microsoft office\office10\msohev.dll

+ Microsoft Outlook Custom Icon Handler Outlook Shell Hook for
Start/Find Microsoft Corporation c:\microsoft
office\office10\olkfstub.dll

+ Microsoft Shell Folder AutoComplete List Shell Browser UI
Library Microsoft Corporation c:\windows\system32\browseui.dll

+ Microsoft Url History Service Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Microsoft Url Search Hook Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Midi Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ MMC Icon Handler MMC Shell Extension DLL Microsoft
Corporation c:\windows\system32\mmcshext.dll

+ MRU AutoComplete List Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Multimedia File Property Sheet Control Panel Drivers Applet Microsoft
Corporation c:\windows\system32\mmsys.cpl

+ MyDocs Copy Hook My Documents Folder UI Microsoft
Corporation c:\windows\system32\mydocs.dll

+ MyDocs Drop Target My Documents Folder UI Microsoft
Corporation c:\windows\system32\mydocs.dll

+ MyDocs Properties My Documents Folder UI Microsoft
Corporation c:\windows\system32\mydocs.dll

+ Network Connections Network Connections Shell Microsoft
Corporation c:\windows\system32\netshell.dll

+ Network Connections Network Connections Shell Microsoft
Corporation c:\windows\system32\netshell.dll

+ NTFS Security Page Security Shell Extension Microsoft
Corporation c:\windows\system32\rshx32.dll

+ NvCpl DesktopContext Class NVIDIA Display Properties Extension NVIDIA
Corporation c:\windows\system32\nvcpl.dll

+ nView Desktop Context Menu NVIDIA Desktop Explorer, Version 100.35
NVIDIA Corporation c:\windows\system32\nvshell.dll

+ Offline Files Folder Client Side Caching UI Microsoft
Corporation c:\windows\system32\cscui.dll

+ Offline Files Folder Options Client Side Caching UI Microsoft
Corporation c:\windows\system32\cscui.dll

+ Offline Files Menu Client Side Caching UI Microsoft
Corporation c:\windows\system32\cscui.dll

+ OLE Docfile Property Page OLE DocFile Property Page Microsoft
Corporation c:\windows\system32\docprop.dll

+ PlusPack CPL Extension Windows Theme API Microsoft
Corporation c:\windows\system32\themeui.dll

+ Portable Media Devices Portable Media Devices Shell
Extension Microsoft Corporation c:\windows\system32\audiodev.dll

+ Portable Media Devices Menu Portable Media Devices Shell
Extension Microsoft Corporation c:\windows\system32\audiodev.dll

+ PostAgent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Previous Versions Previous Versions property page Microsoft
Corporation c:\windows\system32\twext.dll

+ Previous Versions Property Page Previous Versions property
page Microsoft Corporation c:\windows\system32\twext.dll

+ Print Ordering via the Web Map Network Drives/Network Places
Wizard Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Printers Security Page Security Shell Extension Microsoft
Corporation c:\windows\system32\rshx32.dll

+ Registry Tree Options Utility Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Remote Sessions CPL Extension Remote Sessions CPL Extension Microsoft
Corporation c:\windows\system32\remotepg.dll

+ Run... Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft
Corporation c:\windows\system32\wiashext.dll

+ Scheduled Tasks Task Scheduler interface DLL Microsoft
Corporation c:\windows\system32\mstask.dll

+ Search Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Search Assistant OC Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Search Band Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Sendmail service Send Mail Microsoft
Corporation c:\windows\system32\sendmail.dll

+ Sendmail service Send Mail Microsoft
Corporation c:\windows\system32\sendmail.dll

+ Set Program Access and Defaults Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Shell Application Manager Shell Application Manager Microsoft
Corporation c:\windows\system32\appwiz.cpl

+ Shell Automation Inproc Service Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Shell Band Site Menu Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Shell DeskBar Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Shell DeskBarApp Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Shell DocObject Viewer Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Shell extensions for Microsoft Windows Network objects Network object
shell UI Microsoft Corporation c:\windows\system32\ntlanui2.dll

+ Shell Extensions for RealOne Player RealPlayer Shell
Extensions RealNetworks, Inc. c:\program
files\real\realplayer\rpshell.dll

+ Shell extensions for sharing Shell extensions for sharing Microsoft
Corporation c:\windows\system32\ntshrui.dll

+ Shell extensions for sharing Shell extensions for sharing Microsoft
Corporation c:\windows\system32\ntshrui.dll

+ Shell extensions for Windows Script Host Microsoft (r) Shell
Extension for Windows Script Host Microsoft
Corporation c:\windows\system32\wshext.dll

+ Shell Image Data Factory Windows Picture and Fax Viewer Microsoft
Corporation c:\windows\system32\shimgvw.dll

+ Shell Image Property Handler Windows Picture and Fax Viewer Microsoft
Corporation c:\windows\system32\shimgvw.dll

+ Shell Image Verbs Windows Picture and Fax Viewer Microsoft
Corporation c:\windows\system32\shimgvw.dll

+ Shell properties for a DS object Directory Service Find Microsoft
Corporation c:\windows\system32\dsquery.dll

+ Shell Publishing Wizard Object Map Network Drives/Network Places
Wizard Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Shell Rebar BandSite Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Shell Scrap DataHandler Shell scrap object handler Microsoft
Corporation c:\windows\system32\shscrap.dll

+ Shell Search Band Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Subscription Folder Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Subscription Mgr Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Summary Info Thumbnail handler (DOCFILES) Windows Picture and Fax
Viewer Microsoft Corporation c:\windows\system32\shimgvw.dll

+ Taskbar and Start Menu Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

+ Tasks Folder Icon Handler Task Scheduler interface DLL Microsoft
Corporation c:\windows\system32\mstask.dll

+ Tasks Folder Shell Extension Task Scheduler interface DLL Microsoft
Corporation c:\windows\system32\mstask.dll

+ Temporary Internet Files Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ Temporary Internet Files Shell Doc Object and Control
Library Microsoft Corporation c:\windows\system32\shdocvw.dll

+ The Internet Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

+ Track Popup Bar Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ TrayAgent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ TridentImageExtractor Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ User Accounts Map Network Drives/Network Places Wizard Microsoft
Corporation c:\windows\system32\netplwiz.dll

+ User Assist Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ Video Media Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ Video Thumbnail Extractor Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ Wav Properties Handler Media File Property Extractor Shell
Extension Microsoft Corporation c:\windows\system32\shmedia.dll

+ Web Folders Microsoft Web Folders Microsoft Corporation c:\program
files\common files\microsoft shared\web folders\msonsext.dll

+ Web Printer Shell Extension Print UI DLL Microsoft
Corporation c:\windows\system32\printui.dll

+ Web Publishing Wizard Map Network Drives/Network Places
Wizard Microsoft Corporation c:\windows\system32\netplwiz.dll

+ Web Search Shell Browser UI Library Microsoft
Corporation c:\windows\system32\browseui.dll

+ WebCheck Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ WebCheck SyncMgr Handler Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ WebCheckChannelAgent Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ WebCheckWebCrawler Web Site Monitor Microsoft
Corporation c:\windows\system32\webcheck.dll

+ Windows Media Player Add to Playlist Context Menu Handler Windows
Media Player Launcher Microsoft
Corporation c:\windows\system32\wmpshell.dll

+ Windows Media Player Burn Audio CD Context Menu Handler Windows Media
Player Launcher Microsoft Corporation c:\windows\system32\wmpshell.dll

+ Windows Media Player Play as Playlist Context Menu Handler Windows
Media Player Launcher Microsoft
Corporation c:\windows\system32\wmpshell.dll

+ WinRAR shell extension c:\program files\winrar\rarext.dll

HKLM\Software\Classes\Folder\Shellex\ColumnHandlers

+ {0D2E74C4-3C34-11d2-A27E-00C04FC30871} Windows Shell Common
Dll Microsoft Corporation c:\windows\system32\shell32.dll

+ {24F14F01-7B1C-11d1-838f-0000F80461CF} Windows Shell Common
Dll Microsoft Corporation c:\windows\system32\shell32.dll

+ {24F14F02-7B1C-11d1-838f-0000F80461CF} Windows Shell Common
Dll Microsoft Corporation c:\windows\system32\shell32.dll

+ {66742402-F9B9-11D1-A202-0000F81FEDEE} Windows Shell Common
Dll Microsoft Corporation c:\windows\system32\shell32.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects

+ AcroIEHlprObj Class AcroIEHelper Module c:\program
files\adobe\acrobat 5.0\acrobat\activex\acroiehelper.ocx

+ Google Toolbar Helper Google IE Client Toolbar Google Inc. c:\program
files\google\googletoolbar1.dll

+ scriptproxy VSCore Script Scanner McAfee, Inc. c:\program
files\mcafee\virusscan\scriptsn.dll

+ SSVHelper Class Java(TM) 2 Platform Standard Edition binary Sun
Microsystems, Inc. c:\program files\java\jre1.5.0_06\bin\ssv.dll

+ {1ED87226-3F43-4C27-80B5-0E1352651902} File not found:
C:\WINDOWS\system32\gebcb.dll

+
{278B661A-14A8-D8B0-6AF4-03088B866149} c:\windows\system32\unaoakg.dll

+ {53707962-6F74-2D53-2644-206D7942484F} Bad download blocker Safer
Networking Limited c:\program files\spybot - search &
destroy\sdhelper.dll

+
{B7672BAF-E9A3-49B6-86B2-C81719A18A4C} c:\windows\system32\imfmyxst.dll

HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks

+ shdocvw.dll Shell Doc Object and Control Library Microsoft
Corporation c:\windows\system32\shdocvw.dll

HKLM\Software\Microsoft\Internet Explorer\Toolbar

+ googletoolbar1.dll Google IE Client Toolbar Google Inc. c:\program
files\google\googletoolbar1.dll

HKLM\Software\Microsoft\Internet Explorer\Extensions

+ AIM AOL Instant Messenger America Online, Inc. c:\aim\aim.exe

+ Windows Messenger Windows Messenger Microsoft Corporation c:\program
files\messenger\msmsgs.exe

Task Scheduler

+ AppleSoftwareUpdate.job File not found: C:\Program Files\Apple
Software Update\SoftwareUpdate.exe

+ McDefragTask.job Disk Defragmenter Module Microsoft Corp. and
Executive Software International, Inc. c:\windows\system32\defrag.exe

+ McQcTask.job QuickClean Console Application McAfee, Inc. c:\program
files\mcafee\mqc\qcconsol.exe

HKLM\System\CurrentControlSet\Services

+ 6to4 Provides DDNS name registration and automatic IPv6 connectivity
over an IPv4 network. If this service is stopped, other computers may
not be able to reach it by name and the machine will only have IPv6
connectivity if it is connected to a native IPv6 network. If this
service is disabled, any other services that explicitly depend on this
service will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ AudioSrv Manages audio devices for Windows-based programs. If this
service is stopped, audio devices and effects will not function
properly. If this service is disabled, any services that explicitly
depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ Browser Maintains an updated list of computers on the network and
supplies this list to computers designated as browsers. If this service
is stopped, this list will not be updated or maintained. If this
service is disabled, any services that explicitly depend on it will
fail to start. Microsoft Corporation c:\windows\system32\svchost.exe

+ CryptSvc Provides three management services: Catalog Database
Service, which confirms the signatures of Windows files; Protected Root
Service, which adds and removes Trusted Root Certification Authority
certificates from this computer; and Key Service, which helps enroll
this computer for certificates. If this service is stopped, these
management services will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to
start. Microsoft Corporation c:\windows\system32\svchost.exe

+ DcomLaunch Provides launch functionality for DCOM services. Microsoft
Corporation c:\windows\system32\svchost.exe

+ Dhcp Manages network configuration by registering and updating IP
addresses and DNS names. Microsoft
Corporation c:\windows\system32\svchost.exe

+ Dnscache Resolves and caches Domain Name System (DNS) names for this
computer. If this service is stopped, this computer will not be able to
resolve DNS names and locate Active Directory domain controllers. If
this service is disabled, any services that explicitly depend on it
will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ ERSvc Allows error reporting for services and applictions running in
non-standard environments. Microsoft
Corporation c:\windows\system32\svchost.exe

+ Eventlog Enables event log messages issued by Windows-based programs
and components to be viewed in Event Viewer. This service cannot be
stopped. Microsoft Corporation c:\windows\system32\services.exe

+ helpsvc Enables Help and Support Center to run on this computer. If
this service is stopped, Help and Support Center will be unavailable.
If this service is disabled, any services that explicitly depend on it
will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ lanmanserver Supports file, print, and named-pipe sharing over the
network for this computer. If this service is stopped, these functions
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ lanmanworkstation Creates and maintains client network connections to
remote servers. If this service is stopped, these connections will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ LmHosts Enables support for NetBIOS over TCP/IP (NetBT) service and
NetBIOS name resolution. Microsoft
Corporation c:\windows\system32\svchost.exe

+ McAfee HackerWatch Service McAfee HackerWatch Service McAfee,
Inc. c:\program files\common files\mcafee\hackerwatch\hwapi.exe

+ McLogManagerService Logs event messages for McAfee programs. McAfee,
Inc. c:\program files\mcafee\msc\mclogsrv.exe

+ mcmispupdmgr Downloads and installs updates for McAfee
programs. McAfee, Inc. c:\program files\mcafee\msc\mcupdmgr.exe

+ McNASvc McAfee Network Agent McAfee, Inc. c:\program files\common
files\mcafee\mna\mcnasvc.exe

+ McODS Scans specified locations on this computer for viruses and
other threats. The service runs for scheduled scans and manual
scans. McAfee, Inc. c:\program files\mcafee\virusscan\mcods.exe

+ mcpromgr Manages protection problems on this computer for McAfee
programs. McAfee, Inc. c:\program files\mcafee\msc\mcpromgr.exe

+ McRedirector McAfee Redirector Service McAfee, Inc. c:\program
files\common files\mcafee\redirsvc\redirsvc.exe

+ McShield Scans files for viruses and other threats when they are
accessed by this computer. McAfee, Inc. c:\program
files\mcafee\virusscan\mcshield.exe

+ McSysmon Monitors potentially unauthorized changes to this
computer. McAfee, Inc. c:\program files\mcafee\virusscan\mcsysmon.exe

+ McTskshd.exe Schedules McAfee programs to run at a specified
time. McAfee, Inc. c:\program files\mcafee\msc\mctskshd.exe

+ mcusrmgr Manages McAfee users. McAfee, Inc. c:\program
files\mcafee\msc\mcusrmgr.exe

+ MpfService McAfee Personal Firewall Service McAfee, Inc. c:\program
files\mcafee\mpf\mpfsrv.exe

+ PlugPlay Enables a computer to recognize and adapt to hardware
changes with little or no user input. Stopping or disabling this
service will result in system instability. Microsoft
Corporation c:\windows\system32\services.exe

+ PolicyAgent Manages IP security policy and starts the ISAKMP/Oakley
(IKE) and the IP security driver. Microsoft
Corporation c:\windows\system32\lsass.exe

+ ProtectedStorage Provides protected storage for sensitive data, such
as private keys, to prevent access by unauthorized services, processes,
or users. Microsoft Corporation c:\windows\system32\lsass.exe

+ RpcSs Provides the endpoint mapper and other miscellaneous RPC
services. Microsoft Corporation c:\windows\system32\svchost.exe

+ SamSs Stores security information for local user accounts. Microsoft
Corporation c:\windows\system32\lsass.exe

+ Schedule Enables a user to configure and schedule automated tasks on
this computer. If this service is stopped, these tasks will not be run
at their scheduled times. If this service is disabled, any services
that explicitly depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ seclogon Enables starting processes under alternate credentials. If
this service is stopped, this type of logon access will be unavailable.
If this service is disabled, any services that explicitly depend on it
will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ SENS Tracks system events such as Windows logon, network, and power
events. Notifies COM+ Event System subscribers of these
events. Microsoft Corporation c:\windows\system32\svchost.exe

+ SharedAccess Provides network address translation, addressing, name
resolution and/or intrusion prevention services for a home or small
office network. Microsoft Corporation c:\windows\system32\svchost.exe

+ ShellHWDetection Generic Host Process for Win32 Services Microsoft
Corporation c:\windows\system32\svchost.exe

+ Spooler Loads files to memory for later printing. Microsoft
Corporation c:\windows\system32\spoolsv.exe

+ srservice Performs system restore functions. To stop service, turn
off System Restore from the System Restore tab in My
Computer->Properties Microsoft
Corporation c:\windows\system32\svchost.exe

+ stisvc Provides image acquisition services for scanners and
cameras. Microsoft Corporation c:\windows\system32\svchost.exe

+ Themes Provides user experience theme management. Microsoft
Corporation c:\windows\system32\svchost.exe

+ TrkWks Maintains links between NTFS files within a computer or across
computers in a network domain. Microsoft
Corporation c:\windows\system32\svchost.exe

+ UMWdf Enables Windows user mode drivers. Microsoft
Corporation c:\windows\system32\wdfmgr.exe

+ W32Time Maintains date and time synchronization on all clients and
servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.

Microsoft Corporation c:\windows\system32\svchost.exe

+ WebClient Enables Windows-based programs to create, access, and
modify Internet-based files. If this service is stopped, these
functions will not be available. If this service is disabled, any
services that explicitly depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ winmgmt Provides a common interface and object model to access
management information about operating system, devices, applications
and services. If this service is stopped, most Windows-based software
will not function properly. If this service is disabled, any services
that explicitly depend on it will fail to start. Microsoft
Corporation c:\windows\system32\svchost.exe

+ wscsvc Monitors system security settings and
configurations. Microsoft Corporation c:\windows\system32\svchost.exe

+ wuauserv Enables the download and installation of critical Windows
updates. If the service is disabled, the operating system can be
manually updated at the Windows Update Web site. Microsoft
Corporation c:\windows\system32\svchost.exe

+ WZCSVC Provides automatic configuration for the 802.11
adapters Microsoft Corporation c:\windows\system32\svchost.exe

HKLM\System\CurrentControlSet\Services

+ A3AB Driver for D-Link Wireless Network Adapter D-Link
Corporation c:\windows\system32\drivers\a3ab.sys

+ ac97intc Intel(r) Integrated Controller Hub Audio Driver Intel
Corporation c:\windows\system32\drivers\ac97intc.sys

+ ACPI ACPI Driver for NT Microsoft
Corporation c:\windows\system32\drivers\acpi.sys

+ aec Microsoft Acoustic Echo Canceller Microsoft
Corporation c:\windows\system32\drivers\aec.sys

+ AFD AFD Networking Support Environment Microsoft
Corporation c:\windows\system32\drivers\afd.sys

+ ANIO ANIO (NT5) Driver Alpha Networks
Inc. c:\windows\system32\anio.sys

+ AsyncMac RAS Asynchronous Media Driver Microsoft
Corporation c:\windows\system32\drivers\asyncmac.sys

+ atapi IDE/ATAPI Port Driver Microsoft
Corporation c:\windows\system32\drivers\atapi.sys

+ Atmarpc ATM ARP Client Protocol Microsoft
Corporation c:\windows\system32\drivers\atmarpc.sys

+ audstub AudStub Driver Microsoft
Corporation c:\windows\system32\drivers\audstub.sys

+ basic2 NTRksample
driver Conexant c:\windows\system32\drivers\hsf_bsc2.sys

+ Cdrom SCSI CD-ROM Driver Microsoft
Corporation c:\windows\system32\drivers\cdrom.sys

+ Disk PnP Disk Driver Microsoft
Corporation c:\windows\system32\drivers\disk.sys

+ DMusic Microsoft Kernel DLS Synthesizer Microsoft
Corporation c:\windows\system32\drivers\dmusic.sys

+ drmkaud Microsoft Kernel DRM Audio Descrambler Filter Microsoft
Corporation c:\windows\system32\drivers\drmkaud.sys

+ EL90XBC 3Com EtherLink PCI Driver 3Com
Corporation c:\windows\system32\drivers\el90xbc5.sys

+ Fallback Fallback
driver Conexant c:\windows\system32\drivers\hsf_fall.sys

+ Fdc Floppy Disk Controller Driver Microsoft
Corporation c:\windows\system32\drivers\fdc.sys

+ Flpydisk Floppy Driver Microsoft
Corporation c:\windows\system32\drivers\flpydisk.sys

+ Fsks FSKsNT driver Conexant c:\windows\system32\drivers\hsf_fsks.sys

+ Ftdisk FT Disk Driver Microsoft
Corporation c:\windows\system32\drivers\ftdisk.sys

+ gameenum Game Port Enumerator Microsoft
Corporation c:\windows\system32\drivers\gameenum.sys

+ GEARAspiWDM CDRom Class Filter Driver GEAR Software
Inc. c:\windows\system32\drivers\gearaspiwdm.sys

+ Gpc Generic Packet Classifier Microsoft
Corporation c:\windows\system32\drivers\msgpc.sys

+ HidUsb USB Miniport Driver for Input Devices Microsoft
Corporation c:\windows\system32\drivers\hidusb.sys

+ HSF_DP HSF_DP driver Conexant
Systems c:\windows\system32\drivers\hsf_dp.sys

+ hsf_msft WinACHSF
driver Conexant c:\windows\system32\drivers\hsf_msft.sys

+ HSFHWBS2 HSF_HWB2 WDM driver Conexant
Systems c:\windows\system32\drivers\hsfhwbs2.sys

+ HTTP This service implements the hypertext transfer protocol (HTTP).
If this service is disabled, any services that explicitly depend on it
will fail to start. Microsoft
Corporation c:\windows\system32\drivers\http.sys

+ i8042prt i8042 Port Driver Microsoft
Corporation c:\windows\system32\drivers\i8042prt.sys

+ i81x Miniport Driver for Intel Graphics Driver Intel(R)
Corporation c:\windows\system32\drivers\i81xnt5.sys

+ iAimFP0 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv01nt.sys

+ iAimFP1 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv02nt.sys

+ iAimFP2 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv05nt.sys

+ iAimFP3 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wsiintxx.sys

+ iAimFP4 Local Flat Panel Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wvchntxx.sys

+ iAimFP5 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv07nt.sys

+ iAimFP6 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv08nt.sys

+ iAimFP7 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wadv09nt.sys

+ iAimTV0 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv01nt.sys

+ iAimTV1 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv02nt.sys

+ iAimTV2 File not found: System32\DRIVERS\wATV03nt.sys

+ iAimTV3 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv04nt.sys

+ iAimTV4 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\wch7xxnt.sys

+ iAimTV5 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv10nt.sys

+ iAimTV6 Digital Display Minidriver for Intel(R) Graphics
Driver Intel(R) Corporation c:\windows\system32\drivers\watv06nt.sys

+ IntelIde Intel PCI IDE Driver Microsoft
Corporation c:\windows\system32\drivers\intelide.sys

+ ip6fw Provides intrusion prevention service for a home or small
office network. Microsoft
Corporation c:\windows\system32\drivers\ip6fw.sys

+ IpFilterDriver IP Traffic Filter Driver Microsoft
Corporation c:\windows\system32\drivers\ipfltdrv.sys

+ IpInIp IP in IP Tunnel Driver Microsoft
Corporation c:\windows\system32\drivers\ipinip.sys

+ IpNat IP Network Address Translator Microsoft
Corporation c:\windows\system32\drivers\ipnat.sys

+ IPSec IPSEC driver Microsoft
Corporation c:\windows\system32\drivers\ipsec.sys

+ IRENUM Infra-Red Bus Enumerator Microsoft
Corporation c:\windows\system32\drivers\irenum.sys

+ isapnp PNP ISA Bus Driver Microsoft
Corporation c:\windows\system32\drivers\isapnp.sys

+ K56 K56NT driver Conexant c:\windows\system32\drivers\hsf_k56k.sys

+ Kbdclass Keyboard Class Driver Microsoft
Corporation c:\windows\system32\drivers\kbdclass.sys

+ kmixer Kernel Mode Audio Mixer Microsoft
Corporation c:\windows\system32\drivers\kmixer.sys

+ mdmxsdk Diagnostic Interface
DRIVER Conexant c:\windows\system32\drivers\mdmxsdk.sys

+ mfeavfk Anti-Virus File System Filter Driver McAfee,
Inc. c:\windows\system32\drivers\mfeavfk.sys

+ mfebopk Buffer Overflow Protection Driver McAfee,
Inc. c:\windows\system32\drivers\mfebopk.sys

+ mfehidk Host Intrusion Detection Link Driver McAfee,
Inc. c:\windows\system32\drivers\mfehidk.sys

+ mferkdk VSCore Code Analysis Driver McAfee,
Inc. c:\windows\system32\drivers\mferkdk.sys

+ mfesmfk System Monitor Filter Driver McAfee,
Inc. c:\windows\system32\drivers\mfesmfk.sys

+ Mouclass Mouse Class Driver Microsoft
Corporation c:\windows\system32\drivers\mouclass.sys

+ moufiltr Mouse filter driver Chic
Tech. c:\windows\system32\drivers\moufiltr.sys

+ mouhid HID Mouse Filter Driver Microsoft
Corporation c:\windows\system32\drivers\mouhid.sys

+ MPFP McAfee Personal Firewall Plus Driver McAfee,
Inc. c:\windows\system32\drivers\mpfp.sys

+ ms_mpu401 MPU401 Adapter Driver Microsoft
Corporation c:\windows\system32\drivers\msmpu401.sys

+ MSKSSRV MS KS Server Microsoft
Corporation c:\windows\system32\drivers\mskssrv.sys

+ MSPCLOCK MS Proxy Clock Microsoft
Corporation c:\windows\system32\drivers\mspclock.sys

+ MSPQM MS Proxy Quality Manager Microsoft
Corporation c:\windows\system32\drivers\mspqm.sys

+ mssmbios System Management BIOS Driver Microsoft
Corporation c:\windows\system32\drivers\mssmbios.sys

+ NdisTapi Remote Access NDIS TAPI Driver Microsoft
Corporation c:\windows\system32\drivers\ndistapi.sys

+ Ndisuio NDIS Usermode I/O Protocol Microsoft
Corporation c:\windows\system32\drivers\ndisuio.sys

+ NdisWan Remote Access NDIS WAN Driver Microsoft
Corporation c:\windows\system32\drivers\ndiswan.sys

+ NetBT NetBios over Tcpip Microsoft
Corporation c:\windows\system32\drivers\netbt.sys

+ nv NVIDIA Compatible Windows 2000 Miniport Driver, Version 56.73
NVIDIA Corporation c:\windows\system32\drivers\nv4_mini.sys

+ NwlnkFlt IPX Traffic Filter Driver Microsoft
Corporation c:\windows\system32\drivers\nwlnkflt.sys

+ NwlnkFwd IPX Traffic Forwarder Driver Microsoft
Corporation c:\windows\system32\drivers\nwlnkfwd.sys

+ NwlnkIpx NWLink IPX/SPX/NetBIOS Compatible Transport
Protocol Microsoft Corporation c:\windows\system32\drivers\nwlnkipx.sys

+ NwlnkNb NWLink NetBIOS Microsoft
Corporation c:\windows\system32\drivers\nwlnknb.sys

+ NwlnkSpx NWLink SPX/SPXII Protocol Microsoft
Corporation c:\windows\system32\drivers\nwlnkspx.sys

+ P3 Processor Device Driver Microsoft
Corporation c:\windows\system32\drivers\p3.sys

+ Parport Parallel Port Driver Microsoft
Corporation c:\windows\system32\drivers\parport.sys

+ PCI NT Plug and Play PCI Enumerator Microsoft
Corporation c:\windows\system32\drivers\pci.sys

+ pnicml File not found: C:\DOCUME~1\Kev\LOCALS~1\Temp\pnicml.sys

+ PptpMiniport WAN Miniport (PPTP) Microsoft
Corporation c:\windows\system32\drivers\raspptp.sys

+ Processor Processor Device Driver Microsoft
Corporation c:\windows\system32\drivers\processr.sys

+ prodrv06 StarForce Protection Environment Driver Protection
Technology c:\windows\system32\drivers\prodrv06.sys

+ prohlp02 StarForce Protection Helper Driver Protection
Technology c:\windows\system32\drivers\prohlp02.sys

+ prosync1 StarForce Protection Synchronization Driver Protection
Technology c:\windows\system32\drivers\prosync1.sys

+ PSched QoS Packet Scheduler Microsoft
Corporation c:\windows\system32\drivers\psched.sys

+ Ptilink Direct Parallel Link Driver Parallel Technologies,
Inc. c:\windows\system32\drivers\ptilink.sys

+ PxHelp20 Px Engine Device Driver for Windows 2000/XP Sonic
Solutions c:\windows\system32\drivers\pxhelp20.sys

+ RasAcd Remote Access Auto Connection Driver Microsoft
Corporation c:\windows\system32\drivers\rasacd.sys

+ Rasl2tp WAN Miniport (L2TP) Microsoft
Corporation c:\windows\system32\drivers\rasl2tp.sys

+ RasPppoe Remote Access PPPOE Driver Microsoft
Corporation c:\windows\system32\drivers\raspppoe.sys

+ Raspti Direct Parallel Microsoft
Corporation c:\windows\system32\drivers\raspti.sys

+ RDPCDD RDP Miniport Microsoft
Corporation c:\windows\system32\drivers\rdpcdd.sys

+ redbook Redbook Audio Filter Driver Microsoft
Corporation c:\windows\system32\drivers\redbook.sys

+ Rksample Rksample WDM
driver Conexant c:\windows\system32\drivers\hsf_samp.sys

+ rtl8139 Realtek RTL8139 NDIS 5.0 Driver Realtek Semiconductor
Corporation c:\windows\system32\drivers\rtl8139.sys

+ Secdrv SafeDisc driver Macrovision Corporation, Macrovision Europe
Limited, and Macrovision Japan and Asia
K.K. c:\windows\system32\drivers\secdrv.sys

+ serenum Serial Port Enumerator Microsoft
Corporation c:\windows\system32\drivers\serenum.sys

+ Serial Serial Device Driver Microsoft
Corporation c:\windows\system32\drivers\serial.sys

+ sfhlp01 StarForce Protection Helper Driver Protection
Technology c:\windows\system32\drivers\sfhlp01.sys

+ smwdm SoundMAX Integrated Digital Audio Analog Devices,
Inc. c:\windows\system32\drivers\smwdm.sys

+ SoftFax FaxNT
driver Conexant c:\windows\system32\drivers\hsf_faxx.sys

+ splitter Microsoft Kernel Audio Splitter Microsoft
Corporation c:\windows\system32\drivers\splitter.sys

+ swenum Plug and Play Software Device Enumerator Microsoft
Corporation c:\windows\system32\drivers\swenum.sys

+ swmidi Microsoft GS Wavetable Synthesizer Microsoft
Corporation c:\windows\system32\drivers\swmidi.sys

+ sysaudio System Audio WDM Filter Microsoft
Corporation c:\windows\system32\drivers\sysaudio.sys

+ Tcpip TCP/IP Protocol Driver Microsoft
Corporation c:\windows\system32\drivers\tcpip.sys

+ Tcpip6 Microsoft IPv6 Protocol Driver Microsoft
Corporation c:\windows\system32\drivers\tcpip6.sys

+ TermDD Terminal Server Driver Microsoft
Corporation c:\windows\system32\drivers\termdd.sys

+ Tones TonesNT
driver Conexant c:\windows\system32\drivers\hsf_tone.sys

+ tunmp Microsoft Tunnel Interface Driver Microsoft
Corporation c:\windows\system32\drivers\tunmp.sys

+ Update Update Driver Microsoft
Corporation c:\windows\system32\drivers\update.sys

+ usbhub Default Hub Driver for USB Microsoft
Corporation c:\windows\system32\drivers\usbhub.sys

+ usbscan USB Scanner Driver Microsoft
Corporation c:\windows\system32\drivers\usbscan.sys

+ USBSTOR USB Mass Storage Class Driver Microsoft
Corporation c:\windows\system32\drivers\usbstor.sys

+ usbuhci UHCI USB Miniport Driver Microsoft
Corporation c:\windows\system32\drivers\usbuhci.sys

+ V124 V124NT driver Conexant c:\windows\system32\drivers\hsf_v124.sys

+ VgaSave Controls the VGA display adapter to provide basic display
capabilities. Microsoft Corporation c:\windows\system32\drivers\vga.sys

+ Wanarp Remote Access IP ARP Driver Microsoft
Corporation c:\windows\system32\drivers\wanarp.sys

+ wdmaud MMSYSTEM Wave/Midi API mapper Microsoft
Corporation c:\windows\system32\drivers\wdmaud.sys

+ winachsf WinACHSF driver Conexant
Systems c:\windows\system32\drivers\hsf_cnxt.sys

HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute

+ autocheck autochk * Auto Check Utility Microsoft
Corporation c:\windows\system32\autochk.exe

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options

+ Your Image File Name Here without a path Symbolic Debugger for
Windows 2000 Microsoft Corporation c:\windows\system32\ntsd.exe

HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls

+ advapi32 Advanced Windows 32 Base API Microsoft
Corporation c:\windows\system32\advapi32.dll

+ comdlg32 Common Dialogs DLL Microsoft
Corporation c:\windows\system32\comdlg32.dll

+ gdi32 GDI Client DLL Microsoft
Corporation c:\windows\system32\gdi32.dll

+ imagehlp Windows NT Image Helper Microsoft
Corporation c:\windows\system32\imagehlp.dll

+ kernel32 Windows NT BASE API Client DLL Microsoft
Corporation c:\windows\system32\kernel32.dll

+ lz32 LZ Expand/Compress API DLL Microsoft
Corporation c:\windows\system32\lz32.dll

+ ole32 Microsoft OLE for Windows Microsoft
Corporation c:\windows\system32\ole32.dll

+ oleaut32 Microsoft Corporation c:\windows\system32\oleaut32.dll

+ olecli32 Object Linking and Embedding Client Library Microsoft
Corporation c:\windows\system32\olecli32.dll

+ olecnv32 Microsoft OLE for Windows Microsoft
Corporation c:\windows\system32\olecnv32.dll

+ olesvr32 Object Linking and Embedding Server Library Microsoft
Corporation c:\windows\system32\olesvr32.dll

+ olethk32 Microsoft OLE for Windows Microsoft
Corporation c:\windows\system32\olethk32.dll

+ rpcrt4 Remote Procedure Call Runtime Microsoft
Corporation c:\windows\system32\rpcrt4.dll

+ shell32 Windows Shell Common Dll Microsoft
Corporation c:\windows\system32\shell32.dll

+ url Internet Shortcut Shell Extension DLL Microsoft
Corporation c:\windows\system32\url.dll

+ urlmon OLE32 Extensions for Win32 Microsoft
Corporation c:\windows\system32\urlmon.dll

+ user32 Windows XP USER API Client DLL Microsoft
Corporation c:\windows\system32\user32.dll

+ version Version Checking and File Installation Libraries Microsoft
Corporation c:\windows\system32\version.dll

+ wininet Internet Extensions for Win32 Microsoft
Corporation c:\windows\system32\wininet.dll

+ wldap32 Win32 LDAP API DLL Microsoft
Corporation c:\windows\system32\wldap32.dll

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost

+ logonui.exe Windows Logon UI Microsoft
Corporation c:\windows\system32\logonui.exe

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

+ crypt32chain Crypto API32 Microsoft
Corporation c:\windows\system32\crypt32.dll

+ cryptnet Crypto Network Related API Microsoft
Corporation c:\windows\system32\cryptnet.dll

+ cscdll Offline Network Agent Microsoft
Corporation c:\windows\system32\cscdll.dll

+ ScCertProp Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

+ Schedule Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

+ sclgntfy Secondary Logon Service Notification DLL Microsoft
Corporation c:\windows\system32\sclgntfy.dll

+ SensLogn Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

+ termsrv Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

+ WgaLogon Windows Genuine Advantage Notification Microsoft
Corporation c:\windows\system32\wgalogon.dll

+ winbue32 File not found: winbue32.dll

+ wlballoon Common DLL to receive Winlogon notifications Microsoft
Corporation c:\windows\system32\wlnotify.dll

HKCU\Control Panel\Desktop\Scrnsave.exe

+ C:\WINDOWS\System32\ssmarque.scr Marquee Screen Saver Microsoft
Corporation c:\windows\system32\ssmarque.scr

HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{895343B1-03B2-410A-B939-2D9D9C4F82C5}] DATAGRAM
7 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{895343B1-03B2-410A-B939-2D9D9C4F82C5}] SEQPACKET
7 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{C6AC366E-9922-42CA-A144-96EB9A73E5F2}] DATAGRAM
5 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{C6AC366E-9922-42CA-A144-96EB9A73E5F2}] SEQPACKET
5 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{F8E42EDF-67F8-489F-923D-F5DD69583CB7}] DATAGRAM
6 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip6_{F8E42EDF-67F8-489F-923D-F5DD69583CB7}] SEQPACKET
6 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{C6AC366E-9922-42CA-A144-96EB9A73E5F2}] DATAGRAM
0 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{C6AC366E-9922-42CA-A144-96EB9A73E5F2}] SEQPACKET
0 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{D3CDCA96-282E-4E0E-BA04-1BC10FD0E787}] DATAGRAM
1 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{D3CDCA96-282E-4E0E-BA04-1BC10FD0E787}] SEQPACKET
1 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{E9C9A4EE-2047-4960-9E0F-29F51FA0C00F}] DATAGRAM
2 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{E9C9A4EE-2047-4960-9E0F-29F51FA0C00F}] SEQPACKET
2 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{F8E42EDF-67F8-489F-923D-F5DD69583CB7}] DATAGRAM
3 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS
[\Device\NetBT_Tcpip_{F8E42EDF-67F8-489F-923D-F5DD69583CB7}] SEQPACKET
3 Microsoft Windows Sockets 2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS [\Device\NwlnkNb] DATAGRAM 4 Microsoft Windows Sockets
2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD NetBIOS [\Device\NwlnkNb] SEQPACKET 4 Microsoft Windows Sockets
2.0 Service Provider Microsoft
Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkipx [IPX] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkspx [SPX II] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkspx [SPX II] [Pseudo Stream] Microsoft Windows Sockets 2.0
Service Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkspx [SPX] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD nwlnkspx [SPX] [Pseudo Stream] Microsoft Windows Sockets 2.0
Service Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [RAW/IP] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [RAW/IPv6] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [TCP/IP] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [TCP/IPv6] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [UDP/IP] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ MSAFD Tcpip [UDP/IPv6] Microsoft Windows Sockets 2.0 Service
Provider Microsoft Corporation c:\windows\system32\mswsock.dll

+ RSVP TCP Service Provider Microsoft Windows Rsvp 1.0 Service
Provider Microsoft Corporation c:\windows\system32\rsvpsp.dll

+ RSVP UDP Service Provider Microsoft Windows Rsvp 1.0 Service
Provider Microsoft Corporation c:\windows\system32\rsvpsp.dll

HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors

+ BJ Language Monitor Langage Monitor for Canon Bubble-Jet
Printer Microsoft Corporation c:\windows\system32\cnbjmon.dll

+ Local Port Local Spooler DLL Microsoft
Corporation c:\windows\system32\localspl.dll

+ PDF Port Acrobat ® PDF Port Adobe Systems
Incorporated. c:\windows\system32\pdfports.dll

+ PJL Language Monitor PJL Language monitor Microsoft
Corporation c:\windows\system32\pjlmon.dll

+ Standard TCP/IP Port Standard TCP/IP Port Monitor DLL Microsoft
Corporation c:\windows\system32\tcpmon.dll

+ USB Monitor Standard Dynamic Printing Port Monitor DLL Microsoft
Corporation c:\windows\system32\usbmon.dll

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages

+ msv1_0 Microsoft Authentication Package v1.0 Microsoft
Corporation c:\windows\system32\msv1_0.dll

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages

+ scecli Windows Security Configuration Editor Client Engine Microsoft
Corporation c:\windows\system32\scecli.dll

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages

+ kerberos Kerberos Security Package Microsoft
Corporation c:\windows\system32\kerberos.dll

+ msv1_0 Microsoft Authentication Package v1.0 Microsoft
Corporation c:\windows\system32\msv1_0.dll

+ schannel TLS / SSL Security Provider Microsoft
Corporation c:\windows\system32\schannel.dll

+ wdigest Microsoft Digest Access Microsoft
Corporation c:\windows\system32\wdigest.dll
 
K

kzeise

Alright, the good news is in the hour or so I've been working tonight,
I haven't had a single pop-up, either in Firefox or IE. My hope is
that everything appears to be fixed on that front.

Now, on to part three of the problem.... I'm a little concerned by this
one, because a spool of blank CDs that I used prior to moving now
apparently no longer works with my CD-R drive. It's either that, or my
drive has lost ability to write - is that possible?

No matter what I try to burn a CD with - iTunes, Windows Media Player,
even just moving data files to that drive and trying to write them - it
tells me there's no blank disk in the drive. I've tried that with
probably 10 of the 25 disks remaining on the spool, and each one comes
up the same way. I guess my next step is to get a blank disk from
somewhere else and try that, but I'm at a loss as to why disks that
worked fine one week are no longer good the next week.

Thoughts?
 
L

LittleMoo

Well it's possible that your drive has malfunctioned. But first lets look on
the software side of it. Have you made Windows Media Player the default CD
player. If you haven't done it yet do this:

Open Media Player, go to Tools -> Options, select
the File Types tab, and check the Music CD Playback box (if it is currently
checked then uncheck it and recheck it), click on Apply, then OK, then close
Media Player.
After this you might need to restart your computer.

You can try other CD burning software, but I don't think that this is where
the problem is because you said in an earlier post that you started having
this problem after you upgraded to iTunes 7. You can try DeepBurner:
http://www.download.com/DeepBurner-Free/3000-2646_4-10527371.html?tag=lst-0-7 -
though I'm not too hopeful about this one.

The next thing I would try is CD media from a different manufacturer.

Next thing you can try is uninstalling your CD burner, restarting your
computer, then re-installing it, update your drivers for it to the most
current ones, and also make sure that your firmware is up to date. To
uninstall it go to the Control Panel -> System -> the Hardware tab -> and
then click on the Device Manager button. When you get to the Device Manager
go to the CD-ROM drives listing (could say DVD/CD-Rom or just CD-ROM).
Expand it by clicking on the +. Right click on the drive that's giving you
the problem, choose Uninstall and follow the prompts to uninstall it.
Restart your computer. After the restart your computer should recognize the
drive and run the New Hardware wizard, however, if it doesn't get back into
Device Manager, click on Action, then click Scan for Hardware Changes.
Next you should download the latest drivers and firmware updates from either
A) your computer manufacturer's web site (i.e. HP, Dell, etc.) or B) from
the CD drive manufacturer's web site (i.e. LiteOn, Plextor, etc.).
It is not recommended to get the drivers through Windows. Install the latest
drivers and/or firmware, and see if your drive works.

As a last resort to trying the software end of it you could try to do a
System Restore back to when the drive worked, as what probably happened is
that when you uninstalled the old iTunes it probably uninstalled some
essential driver for CD burning.
Use System Restore to Undo Changes if Problems Occur:
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/systemrestore.mspx

If none of this works you could try cleaning your CD drive, either by using
a cleaning disk or manually using a Q-Tip dipped in alcohol on the lens
which might require disassembly of the drive (not recommended unless you
know what you are doing).

If you're still having problems with it then you can find out if your drive
is bad by removing it from your computer and putting it into another
computer and seeing if you can burn CDs with it in the other computer. If
you can't then your drive is bad an you'll need to get a new one.

-Dan
 
K

kzeise

I do have WMP as the default player - I'd never changed that in spite
of having iTunes. I have no problem with reading CDs, and it plays
audio disks just fine. The problem only comes up whenever I try to
burn anything - music related or not. I tried (for the sake of
experimenting) burning a text file to a CD, only to again have my
system keep telling me to insert a blank disk in the drive.

I've snared a blank disk from work of a different manufacturer and will
try that tonight when I get home. If that doesn't work, then I think
I'm at a loss - I don't think I have any restore points, since I
usually keep System Restore turned off to save hard drive space.

My guess is that you're correct, the new iTunes overwrote a DLL that is
needed to burn a CD, and even though I removed that and reinstalled the
older version, it didn't overwrite the DLL because it wasn't a newer
file.

The thing that concerns me about that scenario is that I can't get
around that, even if I were to try getting a new CD burner. Without
knowing exactly what file might have been replaced, I'm probably shot.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Windows 10 One of my previous builds is experiencing random, multiple BSODs 9
Windows 7 Problem with Facebook 9
Please Help! Virus? Avast, Firefox, Windows update quit working 4
Thunderbird problem 1
Ground loop isolator causes loss of audio signal 9
Popup to show ongoing activity 6
System restore wont restore 13
error messages 1

Top