Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

help to remove abi network ceres and many otheres


  • This topic is locked This topic is locked

#1
papillondamours

papillondamours

    Member

  • Member
  • PipPip
  • 11 posts
I need some help with this malware that drive me nuts now it is even closing my window while i am surfing. . I have Abi network ceres the casino all the things that you can imagine of i beleive i have it. Reading many topics i tried so many things to get rid of it i ran spypot and adware both in safe mode and regualar mode in safe mode i took out ceres.exe and buddy.exe but i always come back and install itself again in hijackthis i took out so many false entries but it always come back. I even took out ABI network using hijack this uninstall program it appears gone from the remove add software but when i am not in safe mode anymore it comes back as a matter of fact everything that i erease come back jut to let you know the ewido trial is over for me but i beg you to help me please. thank you so much i am putting my ressent hijackthis and my autorun program looks like some stuff are running in the background :tazz: ;)


Logfile of HijackThis v1.99.1
Scan saved at 4:56:02 AM, on 7/9/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
c:\toshiba\ivp\swupdate\swupdtmr.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\00THotkey.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\WINDOWS\System32\TFNF5.exe
C:\Program Files\TOSHIBA\PadTouch\PadExe.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\PROGRA~1\B'SCLI~1\Win2K\BSCLIP.exe
C:\toshiba\ivp\ism\ivpsvmgr.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\KaZaA Lite\Kazaa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
C:\windows\system32\wdecma.exe
C:\WINDOWS\System32\RUNDLL32.exe
C:\WINDOWS\System32\hrpanp.exe
C:\Program Files\AutoUpdate\AutoUpdate.exe
C:\WINDOWS\System32\dsat3032.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\System32\000StTHK.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\TPSBattM.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\drprib.exe
C:\Corel\Graphics8\Programs\MFIndexer.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Aprps\CxtPls.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\DllHost.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drs...esearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drs...esearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drs...esearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drs...esearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://websearch.drs...esearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drs...esearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.toshiba.com/
O2 - BHO: CeresObj Class - {00000049-8F91-4D9C-9573-F016E7626484} - C:\WINDOWS\ceres.dll
O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\PadTouch\PadExe.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [B'sCLiP] C:\PROGRA~1\B'SCLI~1\Win2K\BSCLIP.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [IVPServiceMgr] C:\toshiba\ivp\ism\ivpsvmgr.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [KAZAA] C:\Program Files\KaZaA Lite\Kazaa.exe /SYSTRAY
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
O4 - HKLM\..\Run: [WinTask driver] C:\WINDOWS\System32\wintask.exe
O4 - HKLM\..\Run: [wdecma] c:\windows\system32\wdecma.exe
O4 - HKLM\..\Run: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16
O4 - HKLM\..\Run: [Nsv] C:\WINDOWS\System32\nsvsvc\nsvsvc.exe
O4 - HKLM\..\Run: [KavSvc] C:\WINDOWS\System32\hrpanp.exe reg_run
O4 - HKLM\..\Run: [Win Server Updt] C:\WINDOWS\wupdt.exe
O4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe"
O4 - HKLM\..\Run: [3soj39V] dsat3032.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [IB7tRVZ6V] drprib.exe
O4 - Global Startup: Corel MEDIA FOLDERS INDEXER 8.LNK = C:\Corel\Graphics8\Programs\MFIndexer.exe
O4 - Global Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zon...ry/msgrchkr.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/...UI.cab34120.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg...v45/yacscom.cab
O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.../ST/ActiveX.ocx
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107fd.bay10...es/MsnPUpld.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.co...clean_micro.exe
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/...at.cab32846.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1098887982984
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8C279F4E-917E-4CD2-8DF0-D9C73C0CE763} (ZPA_WheelOfFortune Object) - http://zone.msn.com/...of.cab34501.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...StatsClient.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn...eUC/MsnUpld.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.c.../ymmapi_416.dll
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivi...n/ravonline.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfi...ll/gtdownls.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/...ro.cab34246.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.c...ropper1_3us.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn...UC/MsnPUpld.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://zone.msn.com/...fault/shapo.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/...xy.cab35645.cab
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zon...oF.cab31267.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} (Personal System Administrator Control) - http://206.65.172.23...ll/gtdowngc.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Swupdtmr - Unknown owner - c:\toshiba\ivp\swupdate\swupdtmr.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

and here my auto run

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit

+ C:\WINDOWS\system32\userinit.exe Userinit Logon Application Microsoft Windows XP Publisher c:\windows\system32\userinit.exe

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell

+ Explorer.exe Windows Explorer Microsoft Windows XP Publisher c:\windows\explorer.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

+ 000StTHK c:\windows\system32\000stthk.exe

+ 00THotkey THotkey (Not verified) TOSHIBA Corp. c:\windows\system32\00thotkey.exe

+ 3soj39V c:\windows\system32\dsat3032.exe

+ AGRSMMSG SoftModem Messaging Applet (Not verified) Agere Systems c:\windows\agrsmmsg.exe

+ Apoint Alps Pointing-device Driver Microsoft Windows Hardware Compatibility Publisher c:\program files\apoint2k\apoint.exe

+ AUNPS2 c:\windows\system32\aunps2.dll

+ AutoLoaderAproposClient File not found: C:\Documents and Settings\Owner\cxtpls_loader.EXE

+ AutoUpdater c:\program files\autoupdate\autoupdate.exe

+ AutoUpdater c:\program files\autoupdate\autoupdate.exe

+ B'sCLiP c:\program files\b's clip\win2k\bsclip.exe

+ ezShieldProtector for Px ezSP_Px MFC Application (Not verified) Easy Systems Japan Ltd. c:\windows\system32\ezsp_px.exe

+ HotKeysCmds hkcmd Module Microsoft Windows Hardware Compatibility Publisher c:\windows\system32\hkcmd.exe

+ IgfxTray igfxTray Module Microsoft Windows Hardware Compatibility Publisher c:\windows\system32\igfxtray.exe

+ IVPServiceMgr IVP Service Manager Application (Not verified) TOSHIBA Corporation c:\toshiba\ivp\ism\ivpsvmgr.exe

+ KAZAA Kazaa Lite (Not verified) c:\program files\kazaa lite\kazaa.exe

+ LtMoh LtMoh MFC Application (Not verified) Agere Systems c:\program files\ltmoh\ltmoh.exe

+ Nsv File not found: C:\WINDOWS\System32\nsvsvc\nsvsvc.exe

+ PadTouch PadTouch Main (Not verified) TOSHIBA c:\program files\toshiba\padtouch\padexe.exe

+ Pinger TOSHIBA Pinger (Not verified) TOSHIBA Corporation c:\toshiba\ivp\ism\pinger.exe

+ SunJavaUpdateSched c:\program files\java\j2re1.4.2_06\bin\jusched.exe

+ TFncKy TFncKy (Not verified) TOSHIBA Corporation C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe

+ TFNF5 TFnF5 (Not verified) TOSHIBA Corp. c:\windows\system32\tfnf5.exe

+ TkBellExe RealNetworks Scheduler (Not verified) RealNetworks, Inc. c:\program files\common files\real\update_ob\realsched.exe

+ TouchED TouchPad On/Off Utility (Not verified) TOSHIBA Corporation c:\program files\toshiba\touched\touched.exe

+ TPSMain C:\Program Files\TOSHIBA\Power Saver\TPSMain.exe

+ wdecma c:\windows\system32\wdecma.exe

+ Win Server Updt c:\windows\wupdt.exe

+ WinTask driver File not found: C:\WINDOWS\System32\wintask.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup

+ Corel MEDIA FOLDERS INDEXER 8.LNK Utility which indexes Corel Media Folders (Not verified) Corel Corporation c:\corel\graphics8\programs\mfindexer.exe

+ Microsoft Office OneNote 2003 Quick Launch.lnk Microsoft Office OneNote Quick Launcher Microsoft Corporation c:\program files\microsoft office\office11\onenotem.exe

+ RAMASST.lnk CD Burning of Windows XP disabling tool for DVD MULTI Drive (Not verified) Matsushita Electric Industrial Co., Ltd. c:\windows\system32\ramasst.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

+ CAS Client File not found: C:\Program Files\Cas\Client\casclient.exe

+ ctfmon.exe CTF Loader Microsoft Windows XP Publisher c:\windows\system32\ctfmon.exe

+ IB7tRVZ6V c:\windows\system32\drprib.exe

+ MsnMsgr MSN Messenger (Not verified) Microsoft Corporation c:\program files\msn messenger\msnmsgr.exe

+ TOSCDSPD CD/DVD Drive Acoustic Silencer (Not verified) TOSHIBA c:\program files\toshiba\toscdspd\toscdspd.exe

+ Yahoo! Pager Yahoo! Messenger (Not verified) Yahoo! Inc. c:\program files\yahoo!\messenger\ypager.exe

HKLM\System\CurrentControlSet\Services

+ 6to4 Offers IPv6 connectivity over an IPv4 network Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ AOL ACS AOL Connectivity Service (Not verified) America Online, Inc. c:\program files\common files\aol\acs\acsd.exe

+ AudioSrv Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ Browser Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ ccEvtMgr Symantec Event Manager Symantec Corporation c:\program files\common files\symantec shared\ccevtmgr.exe

+ ccSetMgr Symantec Settings Manager Symantec Corporation c:\program files\common files\symantec shared\ccsetmgr.exe

+ CFSvcs Service of ConfigFree. (Not verified) TOSHIBA CORPORATION c:\program files\toshiba\configfree\cfsvcs.exe

+ CryptSvc Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ Dhcp Manages network configuration by registering and updating IP addresses and DNS names. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ dmserver Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ Dnscache Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ DVD-RAM_Service Service of RAMAsst for Windows XP (Not verified) Matsushita Electric Industrial Co., Ltd. c:\windows\system32\dvdramsv.exe

+ ERSvc Allows error reporting for services and applictions running in non-standard environments. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ Eventlog Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. Microsoft Windows XP Publisher c:\windows\system32\services.exe

+ Fax Enables you to send and receive faxes, utilizing fax resources available on this computer or on the network. Microsoft Windows XP Publisher c:\windows\system32\fxssvc.exe

+ helpsvc Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ lanmanserver Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ lanmanworkstation Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ LmHosts Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ MDM Manages local and remote debugging for Visual Studio debuggers (Not verified) Microsoft Corporation c:\program files\common files\microsoft shared\vs7debug\mdm.exe

+ navapsvc Handles Norton AntiVirus Auto-Protect events. Symantec Corporation c:\program files\norton antivirus\navapsvc.exe

+ PlugPlay Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. Microsoft Windows XP Publisher c:\windows\system32\services.exe

+ PolicyAgent Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. Microsoft Windows XP Publisher c:\windows\system32\lsass.exe

+ ProtectedStorage Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. Microsoft Windows XP Publisher c:\windows\system32\lsass.exe

+ RemoteRegistry Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ RpcSs Provides the endpoint mapper and other miscellaneous RPC services. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ SamSs Stores security information for local user accounts. Microsoft Windows XP Publisher c:\windows\system32\lsass.exe

+ SAVScan Handles Norton AntiVirus Auto-Protect Archive Scanning Symantec Corporation c:\program files\norton antivirus\savscan.exe

+ SBService ScriptBlocking registration Symantec Corporation c:\program files\common files\symantec shared\script blocking\sbserv.exe

+ Schedule Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ seclogon Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ SENS Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ SharedAccess Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ ShellHWDetection Provides notifications for AutoPlay hardware events. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ SoundMAX Agent Service (default) SoundMAX service agent component (Not verified) Analog Devices, Inc. c:\program files\analog devices\soundmax\smagent.exe

+ Spooler Loads files to memory for later printing. Microsoft Windows XP Publisher c:\windows\system32\spoolsv.exe

+ srservice Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ stisvc Provides image acquisition services for scanners and cameras. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ Swupdtmr c:\toshiba\ivp\swupdate\swupdtmr.exe

+ Themes Provides user experience theme management. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ TrkWks Maintains links between NTFS files within a computer or across computers in a network domain. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ uploadmgr Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ W32Time Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ WANMiniportService Wan Miniport (ATW) Service (Not verified) America Online, Inc. c:\windows\wanmpsvc.exe

+ WebClient Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ winmgmt Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ WMDM PMSP Service WMDM PMSP Service (Not verified) Microsoft Corporation c:\windows\system32\mspmspsv.exe

+ wuauserv Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

+ WZCSVC Provides automatic configuration for the 802.11 adapters Microsoft Windows XP Publisher c:\windows\system32\svchost.exe

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components

+ Address Book 6 Outlook Express Setup Library Microsoft Windows XP Publisher c:\program files\outlook express\setup50.exe

+ Browser Customizations Microsoft Internet Explorer Customization DLL Microsoft Windows XP Publisher c:\windows\system32\iedkcs32.dll

+ Fax ADVPACK Microsoft Windows XP Publisher c:\windows\system32\advpack.dll

+ Internet Explorer Windows NT User Data Migration Tool Microsoft Windows XP Publisher c:\windows\system32\shmgrate.exe

+ Internet Explorer 6 IE 5.0 Per-User Install Utility Microsoft Windows XP Publisher c:\windows\system32\ie4uinit.exe

+ Microsoft Outlook Express 6 Outlook Express Setup Library Microsoft Windows XP Publisher c:\program files\outlook express\setup50.exe

+ Microsoft Windows Media Player ADVPACK Microsoft Windows XP Publisher c:\windows\system32\advpack.dll

+ NetMeeting 3.01 ADVPACK Microsoft Windows XP Publisher c:\windows\system32\advpack.dll

+ Outlook Express Windows NT User Data Migration Tool Microsoft Windows XP Publisher c:\windows\system32\shmgrate.exe

+ Themes Setup Microsoft© Register Server Microsoft Windows XP Publisher c:\windows\system32\regsvr32.exe

+ Windows Desktop Update Microsoft© Register Server Microsoft Windows XP Publisher c:\windows\system32\regsvr32.exe

+ Windows Media Player Microsoft Windows Media Player Setup Utility Microsoft Windows Component Publisher c:\windows\inf\unregmp2.exe

+ Windows Messenger ADVPACK Microsoft Windows XP Publisher c:\windows\system32\advpack.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler

+ Browseui preloader Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Component Categories cache daemon Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad

+ CDBurn Windows Shell Common Dll Microsoft Windows XP Publisher c:\windows\system32\shell32.dll

+ PostBootReminder Windows Shell Common Dll Microsoft Windows XP Publisher c:\windows\system32\shell32.dll

+ SysTray Systray shell service object Microsoft Windows XP Publisher c:\windows\system32\stobject.dll

+ WebCheck Web Site Monitor Microsoft Windows XP Publisher c:\windows\system32\webcheck.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

+ shell32.dll Windows Shell Common Dll Microsoft Windows XP Publisher c:\windows\system32\shell32.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

+ %DESC_PublishDropTarget% Photo Printing Wizard Microsoft Windows XP Publisher c:\windows\system32\photowiz.dll

+ &Address Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ .CAB file viewer Cabinet File Viewer Shell Extension Microsoft Windows XP Publisher c:\windows\system32\cabview.dll

+ Accessible Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ ActiveX Cache Folder Object Control Viewer Microsoft Windows XP Publisher c:\windows\system32\occache.dll

+ Address Bar Parser Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Address EditBox Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Administrative Tools Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ America Online AOL Shell Extension America Online, Inc. c:\program files\common files\aolshare\shell\us\shellext.dll

+ Audio Media Properties Handler Media File Property Extractor Shell Extension Microsoft Windows XP Publisher c:\windows\system32\shmedia.dll

+ Augmented Shell Folder Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Augmented Shell Folder 2 Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Auto Update Property Sheet Extension Automatic Updates Control Panel Microsoft Windows XP Publisher c:\windows\system32\wuaucpl.cpl

+ Avi Properties Handler Media File Property Extractor Shell Extension Microsoft Windows XP Publisher c:\windows\system32\shmedia.dll

+ BandProxy Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Briefcase Windows Briefcase Microsoft Windows XP Publisher c:\windows\system32\syncui.dll

+ CDF Extension Copy Hook Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Channel File Channel Definition File Viewer Microsoft Windows XP Publisher c:\windows\system32\cdfview.dll

+ Channel Handler Object Channel Definition File Viewer Microsoft Windows XP Publisher c:\windows\system32\cdfview.dll

+ Channel Menu Channel Definition File Viewer Microsoft Windows XP Publisher c:\windows\system32\cdfview.dll

+ Channel Properties Channel Definition File Viewer Microsoft Windows XP Publisher c:\windows\system32\cdfview.dll

+ Channel Shortcut Channel Definition File Viewer Microsoft Windows XP Publisher c:\windows\system32\cdfview.dll

+ Code Download Agent Web Site Monitor Microsoft Windows XP Publisher c:\windows\system32\webcheck.dll

+ Compatibility Page Compatibility Tab Shell Extension DLL Microsoft Windows XP Publisher c:\windows\system32\slayerxp.dll

+ Compressed (zipped) Folder Compressed (zipped) Folders Microsoft Windows XP Publisher c:\windows\system32\zipfldr.dll

+ Compressed (zipped) Folder Right Drag Handler Compressed (zipped) Folders Microsoft Windows XP Publisher c:\windows\system32\zipfldr.dll

+ Compressed (zipped) Folder SendTo Target Compressed (zipped) Folders Microsoft Windows XP Publisher c:\windows\system32\zipfldr.dll

+ ConnectionAgent Web Site Monitor Microsoft Windows XP Publisher c:\windows\system32\webcheck.dll

+ Corel Media Find Folder MFFolder DLL c:\corel\graphics8\programs\cmffld80.dll

+ Corel Media Folder MFFolder DLL c:\corel\graphics8\programs\cmffld80.dll

+ Corel Media Folder MFFolder DLL c:\corel\graphics8\programs\cmffld80.dll

+ Corel Media Folder Copy Hook Handler MFFolder DLL c:\corel\graphics8\programs\cmffld80.dll

+ Corel Media Folder Root Menu Handler MFFolder DLL c:\corel\graphics8\programs\cmffld80.dll

+ Crypto PKO Extension Crypto Shell Extensions Microsoft Windows XP Publisher c:\windows\system32\cryptext.dll

+ Crypto Sign Extension Crypto Shell Extensions Microsoft Windows XP Publisher c:\windows\system32\cryptext.dll

+ Custom MRU AutoCompleted List Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Darwin App Publisher Shell Application Manager Microsoft Windows XP Publisher c:\windows\system32\appwiz.cpl

+ DfsShell Distributed File System shell extension Microsoft Windows XP Publisher c:\windows\system32\dfsshlex.dll

+ Directory Context Menu Verbs Directory Service Common UI Microsoft Windows XP Publisher c:\windows\system32\dsuiext.dll

+ Directory Object Find Directory Service Find Microsoft Windows XP Publisher c:\windows\system32\dsquery.dll

+ Directory Property UI Directory Service Common UI Microsoft Windows XP Publisher c:\windows\system32\dsuiext.dll

+ Directory Query UI Directory Service Find Microsoft Windows XP Publisher c:\windows\system32\dsquery.dll

+ Directory Start/Search Find Directory Service Find Microsoft Windows XP Publisher c:\windows\system32\dsquery.dll

+ Disk Copy Extension Windows DiskCopy Microsoft Windows XP Publisher c:\windows\system32\diskcopy.dll

+ Disk Quota UI Windows Shell Disk Quota UI DLL Microsoft Windows XP Publisher c:\windows\system32\dskquoui.dll

+ Display Adapter CPL Extension Advanced display adapter properties Microsoft Windows XP Publisher c:\windows\system32\deskadp.dll

+ Display Monitor CPL Extension Advanced display monitor properties Microsoft Windows XP Publisher c:\windows\system32\deskmon.dll

+ Display Panning CPL Extension File not found: deskpan.dll

+ Display TroubleShoot CPL Extension Advanced display performance properties Microsoft Windows XP Publisher c:\windows\system32\deskperf.dll

+ Download Status Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ DS Security Page Directory Service Security UI Microsoft Windows XP Publisher c:\windows\system32\dssec.dll

+ E-mail Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Explorer Band Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Favorites Band Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Folder To Corel Media Folder Menu Handler MFFolder DLL c:\corel\graphics8\programs\cmffld80.dll

+ Fonts Windows Font Folder Microsoft Windows XP Publisher c:\windows\system32\fontext.dll

+ Fonts Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ For &People... Find People Microsoft Windows Component Publisher c:\program files\outlook express\wabfind.dll

+ FTP Folders Webview Microsoft Internet Explorer FTP Folder Shell Extension Microsoft Windows XP Publisher c:\windows\system32\msieftp.dll

+ Fusion Cache Microsoft .NET Runtime Execution Engine (Not verified) Microsoft Corporation c:\windows\system32\mscoree.dll

+ GDI+ file thumbnail extractor Windows Picture and Fax Viewer Microsoft Windows XP Publisher c:\windows\system32\shimgvw.dll

+ Get a Passport Wizard Map Network Drives/Network Places Wizard Microsoft Windows XP Publisher c:\windows\system32\netplwiz.dll

+ Global Folder Settings Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Help and Support Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Help and Support Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ History Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ HTML Thumbnail Extractor Windows Picture and Fax Viewer Microsoft Windows XP Publisher c:\windows\system32\shimgvw.dll

+ HyperTerminal Icon Ext HyperTerminal Applet Library Microsoft Windows XP Publisher c:\windows\system32\hticons.dll

+ ICC Profile Microsoft Color Matching System User Interface DLL Microsoft Windows XP Publisher c:\windows\system32\icmui.dll

+ ICM Monitor Management Microsoft Color Matching System User Interface DLL Microsoft Windows XP Publisher c:\windows\system32\icmui.dll

+ ICM Printer Management Microsoft Color Matching System User Interface DLL Microsoft Windows XP Publisher c:\windows\system32\icmui.dll

+ ICM Scanner Management Microsoft Color Matching System User Interface DLL Microsoft Windows XP Publisher c:\windows\system32\icmui.dll

+ IconFactTemp.NSIconHandlerFactory Active X Interface to Corel's Filter Manager (Not verified) Corel Corporation c:\corel\graphics8\programs\cnsflt80.dll

+ IE4 Suite Splash Screen Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ In-pane search Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Installed Apps Enumerator Shell Application Manager Microsoft Windows XP Publisher c:\windows\system32\appwiz.cpl

+ Internet Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Internet Name Space Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ InternetShortcut Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ ISFBand OC Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Media Band Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Microsoft Agent Character Property Sheet Handler Microsoft Agent Property Sheet Handler Microsoft Windows XP Publisher c:\windows\msagent\agentpsh.dll

+ Microsoft AutoComplete Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Microsoft Browser Architecture Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Microsoft BrowserBand Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Microsoft Data Link Microsoft Data Access - OLE DB Core Services Microsoft Windows Component Publisher c:\program files\common files\system\ole db\oledb32.dll

+ Microsoft DocProp Inplace Calendar Control Microsoft DocProp Shell Ext Microsoft Windows XP Publisher c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace Droplist Combo Control Microsoft DocProp Shell Ext Microsoft Windows XP Publisher c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace Edit Box Control Microsoft DocProp Shell Ext Microsoft Windows XP Publisher c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace ML Edit Box Control Microsoft DocProp Shell Ext Microsoft Windows XP Publisher c:\windows\system32\docprop2.dll

+ Microsoft DocProp Inplace Time Control Microsoft DocProp Shell Ext Microsoft Windows XP Publisher c:\windows\system32\docprop2.dll

+ Microsoft DocProp Shell Ext Microsoft DocProp Shell Ext Microsoft Windows XP Publisher c:\windows\system32\docprop2.dll

+ Microsoft History AutoComplete List Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Microsoft Internet Toolbar Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Microsoft Multiple AutoComplete List Container Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Microsoft Office HTML Icon Handler Microsoft Office XP component Microsoft Corporation c:\program files\microsoft office\office10\msohev.dll

+ Microsoft Outlook Custom Icon Handler Outlook Shell Hook for Start/Find Microsoft Corporation c:\program files\microsoft office\office10\olkfstub.dll

+ Microsoft Shell Folder AutoComplete List Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Microsoft Url History Service Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Microsoft Url Search Hook Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Midi Properties Handler Media File Property Extractor Shell Extension Microsoft Windows XP Publisher c:\windows\system32\shmedia.dll

+ MMC Icon Handler MMC Shell Extension DLL Microsoft Windows XP Publisher c:\windows\system32\mmcshext.dll

+ MRU AutoComplete List Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Multimedia File Property Sheet Control Panel Drivers Applet Microsoft Windows XP Publisher c:\windows\system32\mmsys.cpl

+ MyDocs Copy Hook My Documents Folder UI Microsoft Windows XP Publisher c:\windows\system32\mydocs.dll

+ MyDocs Drop Target My Documents Folder UI Microsoft Windows XP Publisher c:\windows\system32\mydocs.dll

+ MyDocs Properties My Documents Folder UI Microsoft Windows XP Publisher c:\windows\system32\mydocs.dll

+ Network Connections Network Connections Shell Microsoft Windows XP Publisher c:\windows\system32\netshell.dll

+ Network Connections Network Connections Shell Microsoft Windows XP Publisher c:\windows\system32\netshell.dll

+ NSFiltManDll.FiltManCom Active X Interface to Corel's Filter Manager (Not verified) Corel Corporation c:\corel\graphics8\programs\cnsflt80.dll

+ NSFiltManDll.FiltManCom Translatable Resources for CMFFnd80 (Not verified) Corel Corporation c:\corel\graphics8\programs\cmffnd80.dll

+ NTFS Security Page Security Shell Extension Microsoft Windows XP Publisher c:\windows\system32\rshx32.dll

+ Offline Files Folder Client Side Caching UI Microsoft Windows XP Publisher c:\windows\system32\cscui.dll

+ Offline Files Folder Options Client Side Caching UI Microsoft Windows XP Publisher c:\windows\system32\cscui.dll

+ Offline Files Menu Client Side Caching UI Microsoft Windows XP Publisher c:\windows\system32\cscui.dll

+ OLE Docfile Property Page OLE DocFile Property Page Microsoft Windows XP Publisher c:\windows\system32\docprop.dll

+ PlusPack CPL Extension Windows Theme API Microsoft Windows XP Publisher c:\windows\system32\themeui.dll

+ PostAgent Web Site Monitor Microsoft Windows XP Publisher c:\windows\system32\webcheck.dll

+ Print Ordering via the Web Map Network Drives/Network Places Wizard Microsoft Windows XP Publisher c:\windows\system32\netplwiz.dll

+ Printers Security Page Security Shell Extension Microsoft Windows XP Publisher c:\windows\system32\rshx32.dll

+ Registry Tree Options Utility Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Remote Sessions CPL Extension Remote Sessions CPL Extension Microsoft Windows XP Publisher c:\windows\system32\remotepg.dll

+ Run... Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft Windows XP Publisher c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft Windows XP Publisher c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft Windows XP Publisher c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft Windows XP Publisher c:\windows\system32\wiashext.dll

+ Scanners & Cameras Imaging Devices Shell Folder UI Microsoft Windows XP Publisher c:\windows\system32\wiashext.dll

+ Scheduled Tasks Task Scheduler interface DLL Microsoft Windows XP Publisher c:\windows\system32\mstask.dll

+ Search Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Search Assistant OC Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Search Band Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Sendmail service Send Mail Microsoft Windows XP Publisher c:\windows\system32\sendmail.dll

+ Sendmail service Send Mail Microsoft Windows XP Publisher c:\windows\system32\sendmail.dll

+ Shell Application Manager Shell Application Manager Microsoft Windows XP Publisher c:\windows\system32\appwiz.cpl

+ Shell Automation Inproc Service Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Shell Band Site Menu Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Shell DeskBar Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Shell DeskBarApp Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Shell DocObject Viewer Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Shell extensions for Microsoft Windows Network objects Network object shell UI Microsoft Windows XP Publisher c:\windows\system32\ntlanui2.dll

+ Shell Extensions for RealOne Player RealPlayer Shell Extensions (Not verified) RealNetworks, Inc. c:\program files\real\realplayer\rpshell.dll

+ Shell extensions for sharing Shell extensions for sharing Microsoft Windows XP Publisher c:\windows\system32\ntshrui.dll

+ Shell extensions for sharing Shell extensions for sharing Microsoft Windows XP Publisher c:\windows\system32\ntshrui.dll

+ Shell extensions for Windows Script Host Microsoft ® Shell Extension for Windows Script Host Microsoft Windows XP Publisher c:\windows\system32\wshext.dll

+ Shell Image Data Factory Windows Picture and Fax Viewer Microsoft Windows XP Publisher c:\windows\system32\shimgvw.dll

+ Shell Image Property Handler Windows Picture and Fax Viewer Microsoft Windows XP Publisher c:\windows\system32\shimgvw.dll

+ Shell Image Verbs Windows Picture and Fax Viewer Microsoft Windows XP Publisher c:\windows\system32\shimgvw.dll

+ Shell properties for a DS object Directory Service Find Microsoft Windows XP Publisher c:\windows\system32\dsquery.dll

+ Shell Publishing Wizard Object Map Network Drives/Network Places Wizard Microsoft Windows XP Publisher c:\windows\system32\netplwiz.dll

+ Shell Rebar BandSite Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ Shell Scrap DataHandler Shell scrap object handler Microsoft Windows XP Publisher c:\windows\system32\shscrap.dll

+ Subscription Folder Web Site Monitor Microsoft Windows XP Publisher c:\windows\system32\webcheck.dll

+ Subscription Mgr Web Site Monitor Microsoft Windows XP Publisher c:\windows\system32\webcheck.dll

+ Summary Info Thumbnail handler (DOCFILES) Windows Picture and Fax Viewer Microsoft Windows XP Publisher c:\windows\system32\shimgvw.dll

+ Taskbar and Start Menu Windows Shell Common Dll Microsoft Windows XP Publisher c:\windows\system32\shell32.dll

+ Tasks Folder Icon Handler Task Scheduler interface DLL Microsoft Windows XP Publisher c:\windows\system32\mstask.dll

+ Tasks Folder Shell Extension Task Scheduler interface DLL Microsoft Windows XP Publisher c:\windows\system32\mstask.dll

+ Temporary Internet Files Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ Temporary Internet Files Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ The Internet Shell Doc Object and Control Library Microsoft Windows Component Publisher c:\windows\system32\shdocvw.dll

+ TouchED TouchPad On/Off Utility (Not verified) TOSHIBA Corporation c:\program files\toshiba\touched\touched.dll

+ Track Popup Bar Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ TrayAgent Web Site Monitor Microsoft Windows XP Publisher c:\windows\system32\webcheck.dll

+ TridentImageExtractor Shell Browser UI Library Microsoft Windows Component Publisher c:\windows\system32\browseui.dll

+ User Accounts Map Network Drives/Network Places Wizard Microsoft Windows X

Attached Files


  • 0

Advertisements


#2
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
Duplicate topic here.

Topic closed.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP