Having Problems With Hanonvt.ini

Howdy ,

Welcome to Tom Coyote. Reference material suggests a new variant of Vundo infection here, and it surely is showing as well. Let's start some repairs and check some more.


First disable Spyware Doctor, as it may interfere with repairs.

1. Open Spyware Doctor
2. Click on the 'Settings' button on the left hand panel
3. Then click on the 'Startup Settings' under 'Pick a Category'
4. Uncheck the box on the right that says 'Run at Windows Startup'


Then while running this next scan, and perhaps other scans as well, temporarily disable trend Micro, to keep it from interfering as well.


Then download ComboFix.exe from here to your desktop, and click the downloaded file to run the repair.

When the command window opens, select 1 (and Enter). Allow the scan to run. When completed a text window will appear - please copy/paste the contents back here. This log can also be found at C:\ComboFix.txt.

A caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop.

Post back the C:\ComboFix as well as the C:\ComboFix-quarantined-files.txt logs if created, and also post back a new HijackThis log please.

I located the info on that mystery file you first had the alert on which verified it as infection, so let's address that specifically now.


Please Download SmitfraudFix (by S!Ri)

Double-click SmitfraudFix.exe

Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

**If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually the C drive), and launch from there.

NOTE: Please do not run any other options from SmitfraudFix until we discuss the results.



Also there is a very questionable service and driver I would like to check out.
Make sure you can View Hidden Files. Also uncheck "Hide Extensions for Known File Types"

Then Just go here and follow the instructions to upload the following hilighted file.

C:\WINDOWS\SYSTEM32\DRIVERS\ohciusb.sys

You DO NOT need to be a member to upload, anybody can upload the files.

SmitFraudFix v2.212 Scan done at 20:41:23.21, Thu 08/23/2007 Run from C:\Documents and Settings\AndiL\Desktop\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» Process C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe C:\WINDOWS\System32\alg.exe C:\PROGRA~1\TRENDM~1\INTERN~3\PcCtlCom.exe C:\Program Files\Photodex\ProShowGold\progold3\ScsiAccess.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\TRENDM~1\INTERN~3\Tmntsrv.exe C:\WINDOWS\System32\wdfmgr.exe C:\WINDOWS\System32\hkcmd.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe C:\PROGRA~1\TRENDM~1\INTERN~3\TmPfw.exe C:\WINDOWS\System32\DSentry.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\WINDOWS\BCMSMMSG.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe C:\Program Files\Trend Micro\Internet Security 2006\pccguide.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Belkin\F5D9050\Belkinwcui.exe C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe C:\Program Files\AWS\WeatherBug\Weather.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\DvzCommon\DvzMsgr.exe C:\Program Files\eFax Messenger Plus\Dllcmd32.exe C:\Program Files\Pink Calendar\PinkCal.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Spyware Doctor\svcntaux.exe C:\Program Files\Spyware Doctor\swdsvc.exe C:\Program Files\Spyware Doctor\SDTrayApp.exe C:\PROGRA~1\TRENDM~1\INTERN~3\tmproxy.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe C:\WINDOWS\system32\cmd.exe C:\WINDOWS\System32\wbem\wmiprvse.exe »»»»»»»»»»»»»»»»»»»»»»»» hosts »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\AndiL »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\AndiL\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Start Menu »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\andil\FAVORI~1 »»»»»»»»»»»»»»»»»»»»»»»» Desktop »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\\WINDOWS\\System32\\hanonvt.ini" "LoadAppInit_DLLs"=dword:00000001 »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" »»»»»»»»»»»»»»»»»»»»»»»» Rustock »»»»»»»»»»»»»»»»»»»»»»»» DNS Description: Belkin Wireless G Plus MIMO USB Network Adapter #2 - Packet Scheduler Miniport DNS Server Search Order: 24.56.133.69 DNS Server Search Order: 24.56.133.70 HKLM\SYSTEM\CCS\Services\Tcpip\..\{A24CA791-566F-40CD-BD09-DC92956ED427}: DhcpNameServer=[removed] [removed] HKLM\SYSTEM\CS1\Services\Tcpip\..\{A24CA791-566F-40CD-BD09-DC92956ED427}: DhcpNameServer=[removed] [removed] HKLM\SYSTEM\CS2\Services\Tcpip\..\{A24CA791-566F-40CD-BD09-DC92956ED427}: DhcpNameServer=[removed] [removed] HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed] HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed] HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed] »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection »»»»»»»»»»»»»»»»»»»»»»»» End I attempted to upload C:\WINDOWS\SYSTEM32\DRIVERS\ohciusb.sys as requested; however, I got an error message that it is an invalid file: Manage Attachments Upload Errors ohciusb.sys: Invalid File So, I will await further instructions. Thanks!

The actually driver service shows as a known legit, but that file is not well known. To be sure if you get a change zip a copy of it and try to resubmit it again as a zipped file.



Let's do other removal steps now.
Go here and download the free version of SUPERAntiSpyware and install it.

After installation accept any prompts to allow SUPERAntiSpyware to install the latest infection definition files. Next follow the prompts to complete the installation. For now, uncheck the option to have SUPERAntiSpyware "Automatically check for program and definition updates". Providing an email address and allowing the software to send diagnostic reports to it's research center are up to you. Do NOT allow SUPERAntiSpyware to Protect your Home Page settings.

Once the installation is complete open SUPERAntiSpyware and press the Preferences button. Under the General and Startup tab, uncheck the following (leaving all other settings as is).

Start-up Options:
*Start SUPERAntiSpyware when Windows starts

Automatic Updates:
*Check for program updates when the application starts.
Start-up Scanning:
*Check for updates before scanning on startup.

Then select Close. Don't scan just yet though.


Also Go Here and download ATF cleaner. Click on the downloaded file to run it, and select "Select All", then click Empty Selected (and close ATF).

If you have them, also click on Firefox/Opera at the top and repeat the steps (and close ATF). Firefox/Opera will need to be closed first for the cleaning to be effective.


=================================================

Reboot into Safe Mode (at startup tap F8 and select Safe Mode)


Once in Safe Mode, double-click on SmitfraudFix.exe
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; The tool may need to restart your computer to finish the cleaning process. If it does, restart back into Safe Mode to complete the next step.

A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

Warning : running option #2 on a non infected computer will remove your Desktop background.

—————————

Still in Safe Mode Open SUPERAntiSpyware and click the Scan your Computer button. Making sure that Fixed Drive (NTFS) is checked (typically the C Drive), check "Perform Complete Scan", then click Next. SUPERAntiSpyware will now complete a system scan.


SUPERAntiSpyware will now scan your computer and when its finished it will list all the infections it has found. Make sure that they all have a check next to them and click next. If prompted allow the reboot (or manually reboot at this time), and after the reboot open SUPERAntiSpyware again (double click the bug-shaped Taskbar icon).

Click Preferences, then under the Statistics/Logs tab, click to select the most recent Scan Log, then click View Log. Save the log to your desktop, and copy/paste the text from the log back here.


Then post back here a new HijackThis log, along with the rapport.txt and the SUPERAntiSpyware log please.

I did receive that copy, thanks. Likely forum upload restrictions on file types the first time. Still a most unusual driver/service - almost drives a USB device for some specific operating systems (not Windows) and the file analysis indicates it hooks the Explorer process as well. Bad news showing here - both the fact I missed that this is only XP Sp1 without seriously needed security patches and SP2 updates on security, and that infected file shows as remaining active, although the lack of alert on your end is perhaps it was blocked from some startup one time after the Super scan attempted a delete. With only SP1 it means that any creative infection will compromise security and pretty much block attempts at removal. A few more Windows update files showing here as recently modified are not quite the right sizes either, though difficult to tell since those are upgraded fairly often. And another boot startup that is almost solely found on your system here. Before we make any registry or service changes, other than posting back why this system was never upgraded to SP2 (SP1 support ended last year) is this any unique setup, install on a computer that didn't have a previous Windows version etc. - some input on why there are different items from what I would usually see on systems?

I bought the computer new from Dell with factory installed software. I have not done anything unusual to it that I am aware of. The SP2 upgrade would not install on repeated attempts. It would download and halfway install and then I would get an error message. I believe I even ordered the disk and tried that way to install it. Other than that, I don't know why it has odd items on it.

The info helps, though still unsure why these different bits of unusual info show here. Let's act on what we know to be bad, then check after that.


Run Notepad and copy the following text in bold into a new file:

@ECHO OFF
cd %windir%
sc config regsvc start= disabled
sc stop regsvc
exit

Save the file as "servstop.bat"
Make sure to save it with the "quotes". Please double-click on servstop.bat. A window should open and close very quickly — this is normal.

————————–


Close Internet Explorer and all running programs and run a scan in HijackThis. Place a check next to all of the following lines, then select “Fix Checked” and close HijackThis.

O4 - Startup: .lnk = C:\WINDOWS\SYSTEM32\regsvc.exe

————————————-


Download The Avenger from here to your Desktop and unzip it.

Copy all the text contained in the code box below by highlighting it and right clicking and selecting "Copy"

Registry values to replace with dummy: 
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs 
Files to delete:
C:\WINDOWS\System32\hanonvt.ini

———————————

Now, start The Avenger program by clicking on its icon on your desktop. Look under "Script file to execute" and click on "Input Script Manually". Next click on the Magnifying Glass icon and a blank dialogue box will open called "View/Edit script". Position your mouse inside the box, rightclick and choose Paste. All the text above in the code box should now appear there. Click Done and click on the Green Light to begin execution of the script. Answer "Yes" twice when prompted.

The Avenger will restart your computer. (if the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)

When you have rebooted, a black command window briefly opens on your desktop, this is normal. A logfile will be created that records all actions that The Avenger performed. This log file is saved to C:\avenger.txt. The deleted files will be backed up and saved to C:\avenger\backup.zip.


=================================================

Once your computer has rebooted, Download SDFix.exe and save it to your desktop.

===================================================


Reboot into Safe Mode (at startup tap the F8 key and select Safe Mode).


In Safe Mode, click the SDFix.exe and allow it to extract to it's own folder. Open the extracted folder and double click RunThis.bat to start the script.


Next type Y to begin the script. Once the fix has run it will prompt you to restart your computer. Press any key to restart at this time. Your system will take longer that normal to restart as the fixtool will be running and removing files.

When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons.
Then open the SDFix folder on your desktop and copy and paste the contents of the results file Report.txt back here.

===============================================

After this reboot Download Get Service

Extract the file to the c:\ drive. Then navigate to the c:\getservice and double-click on the getservices.bat file. A notepad will open up. Please paste the contents of that notepad as a reply to this post.


Post back the C:\Avenger.txt, the SDFix report.txt and the getservices log please. That last one will be pretty large so you can split logs up and use extra posts as needed.

You may find not all things match steps as you make changes there. Go ahead with remainder of the steps if you would.

Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\devsuej^ ******************* Script file located at: \??\C:\WINDOWS\xdaxuauw.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: File C:\WINDOWS\System32\hanonvt.ini not found! Deletion of file C:\WINDOWS\System32\hanonvt.ini failed! Could not process line: C:\WINDOWS\System32\hanonvt.ini Status: 0xc0000034 Registry value HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs replaced with dummy successfully. Completed script processing. ******************* Finished! Terminate.

SDFix: Version 1.100 Run by [removed] on Fri 08/24/2007 at 08:32 PM Microsoft Windows XP [Version 5.1.2600] Running From: C:\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting… Normal Mode: Checking Files: Trojan Files Found: C:\Program Files\Setup.exe - Deleted Removing Temp Files… ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: Remaining Services: —————— Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] Remaining Files: ————— File Backups: - C:\SDFix\backups\backups.zip Files with Hidden Attributes: C:\Documents and Settings\AndiL\NetHood\products on connection.lww.com\Desktop.ini C:\Documents and Settings\AndiL\NetHood\www.usna88.com\Desktop.ini C:\Program Files\Common Files\aolshare\shell\us\shellext.dll C:\Program Files\America Online 8.0\aolphx.exe C:\Program Files\America Online 8.0\aoltray.exe C:\Program Files\America Online 8.0\RBM.exe C:\Program Files\America Online 8.0\waol.exe C:\Program Files\America Online 8.0\COMIT\cswitch.exe C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1698\A0276809.exe C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1698\A0276838.exe C:\Program Files\GlobalSCAPE\CuteFTP\cuteftp.sys C:\Program Files\GlobalSCAPE\CuteFTP Pro\TE\ftpte.sys C:\Documents and Settings\AndiL\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp C:\Documents and Settings\AndiL\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp C:\Documents and Settings\AndiL\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u3\lock.tmp C:\Documents and Settings\AndiL\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u4\lock.tmp C:\Documents and Settings\AndiL\Application Data\Microsoft\Templates\~WRL0540.tmp C:\Documents and Settings\AndiL\Application Data\Microsoft\Templates\~WRL3129.tmp C:\Documents and Settings\AndiL\Application Data\Microsoft\Templates\~WRL3324.tmp C:\Documents and Settings\AndiL\Application Data\Microsoft\Word\~WRL0016.tmp C:\Documents and Settings\AndiL\Application Data\Microsoft\Word\~WRL0182.tmp C:\Documents and Settings\AndiL\Application Data\Microsoft\Word\~WRL0361.tmp C:\Documents and Settings\AndiL\Application Data\Microsoft\Word\~WRL1147.tmp C:\Documents and Settings\AndiL\My Documents\~WRL1992.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\120903\~WRL0931.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\120903\~WRL2734.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\120903\~WRL3008.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\120903\~WRL3044.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\120903\~WRL3068.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\120903\~WRL3755.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL0721.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL0778.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL0913.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL1629.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL2098.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL2375.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL2819.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL2875.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL3509.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121103\~WRL3653.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121503\~WRL0256.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121503\~WRL0618.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121503\~WRL2313.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\December03\121503\~WRL3148.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\KB\~WRL3960.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\KB\~WRL4081.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\KK\~WRL0415.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\KK\~WRL1877.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\KK\~WRL2783.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\KK\~WRL2982.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\KK\~WRL3056.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SNM\~WRL1792.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SNM\~WRL2875.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL0005.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL0012.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL0016.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL0086.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL0100.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL0764.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL1106.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL1261.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL1302.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL1835.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL2017.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL2098.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL3140.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Edits\SP\~WRL3192.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\February0420304\~WRL3480.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\February0420404\~WRL0466.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\February0420404\~WRL3281.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\February0420404\~WRL3934.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL0144.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL0148.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL0213.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL0334.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL0442.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL0582.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL0895.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL0909.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL1000.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL1310.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL1322.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL1342.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL1780.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL2054.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL2336.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL2417.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL2645.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL2718.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL2801.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL2844.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL2962.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL3273.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL3286.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL3559.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10403\~WRL3888.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10604\~WRL0120.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10604\~WRL0538.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10604\~WRL1126.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10604\~WRL1223.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10604\~WRL1541.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10604\~WRL1709.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\January04\10604\~WRL1833.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\November03\111003\~WRL0088.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\November03\111003\~WRL2791.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\November03\111003\~WRL2886.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\November03\111003\~WRL3312.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\November03\111003\~WRL3914.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\November03\111403\~WRL0105.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\November03\111403\~WRL1159.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\November03\111403\~WRL2056.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\October03\101003\~WRL3588.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\October03\102703\~WRL1682.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\October03\102703\~WRL2653.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\September03\91503\~WRL0005.tmp C:\Documents and Settings\AndiL\My Documents\DataKey\Templates\~WRL2075.tmp C:\Documents and Settings\AndiL\My Documents\MDI\~WRL3880.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL0060.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL0407.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL0493.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL0759.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL1008.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL1186.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL1359.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL1379.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL2137.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL2355.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL2478.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL2585.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL2966.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL3095.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL3473.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL3530.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\April07\~WRL3541.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August05\~WRL0003.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August05\~WRL0111.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August05\~WRL0665.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August05\~WRL1974.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August05\~WRL2107.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August05\~WRL3016.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August07\~WRL0004.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August07\~WRL0348.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August07\~WRL2712.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August07\~WRL2749.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\August07\~WRL3249.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0003.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0005.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0200.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0216.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0269.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0283.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0559.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0562.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0713.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0844.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0885.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL0976.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1065.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1158.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1179.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1212.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1292.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1322.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1439.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1503.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1546.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL1656.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL2032.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL2183.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL2267.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL2304.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL2630.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL2712.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL2713.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL2778.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL2936.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3060.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3167.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3176.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3182.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3302.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3431.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3534.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3649.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3677.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3684.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3728.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3848.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December04\~WRL3951.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December06\~WRL2337.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December06\~WRL2633.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\December06\~WRL3940.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL0161.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL0285.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL0362.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL0509.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL0820.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL0959.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL1007.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL1182.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL1474.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL1494.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL1858.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL2294.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL3212.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL3632.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL3706.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\January07\~WRL3984.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of Copy of ~WRL1207.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of Copy of ~WRL1383.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of Copy of ~WRL1599.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of Copy of ~WRL1917.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of Copy of ~WRL2024.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of ~WRL0003.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of ~WRL0111.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of ~WRL0406.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of ~WRL0486.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\July06\Copy of ~WRL1107.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\June04\~WRL0510.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\June04\~WRL3179.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\June06\~WRL0405.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March05\~WRL0003.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March05\~WRL0052.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March05\~WRL2407.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March05\~WRL2881.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March05\~WRL3674.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March07\~WRL0336.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March07\~WRL0938.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March07\~WRL2005.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March07\~WRL3325.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\March07\~WRL3856.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\May07\~WRL0179.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\May07\~WRL0180.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\May07\~WRL0335.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\May07\~WRL1927.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\May07\~WRL1942.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\May07\~WRL2023.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\May07\~WRL2052.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\May07\~WRL3117.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\May07\~WRL3377.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0003.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0004.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0005.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0006.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0013.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0049.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0100.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0169.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0211.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0352.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0544.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0551.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0762.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0896.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0937.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL0997.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1057.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1085.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1162.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1286.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1417.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1796.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1822.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1863.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1876.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1878.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL1897.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL2092.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL2197.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL2256.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL2332.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL2378.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL2444.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL2494.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL2636.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL2989.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3002.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3104.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3147.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3238.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3266.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3659.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3664.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3684.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3699.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3736.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November04\~WRL3905.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November05\~WRL0090.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November05\~WRL0517.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November05\~WRL0883.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November05\~WRL1329.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November05\~WRL1537.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November05\~WRL1742.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November05\~WRL2234.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November05\~WRL2331.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\November05\~WRL2439.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October04\~WRL0003.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October04\~WRL3282.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October05\~WRL0066.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October05\~WRL0939.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October05\~WRL1068.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October05\~WRL2203.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October05\~WRL2461.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October05\~WRL2859.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL0003.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL0361.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL0514.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL0553.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL0598.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL0749.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL0935.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL1019.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL1293.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL1325.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL1374.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL1591.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL1740.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL1961.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL2361.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL2417.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL2440.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL2472.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL2569.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL2775.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL2818.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL2957.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL2961.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL3074.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL3088.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL3212.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL3427.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL3475.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL3763.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\October06\~WRL3834.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL0331.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL0364.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL0552.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL0581.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL0750.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL0873.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL1007.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL1093.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL1462.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL1655.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL1773.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL1837.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL2342.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL2605.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL2770.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL3295.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL3522.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL3704.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL3938.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL3962.tmp C:\Documents and Settings\AndiL\My Documents\MDI\QA LOGS\September06\~WRL3965.tmp C:\Documents and Settings\AndiL\My Documents\MDI\Samples\~WRL0001.tmp C:\Documents and Settings\AndiL\My Documents\MDI\Samples\~WRL3211.tmp C:\Documents and Settings\AndiL\My Documents\MDI\Samples\~WRL3795.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0070.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0083.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0215.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0223.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0276.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0378.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0411.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0465.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0617.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0737.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL0762.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1149.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1206.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1215.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1220.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1255.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1271.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1299.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1460.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1578.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1734.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1764.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1776.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1826.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1853.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1868.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL1970.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2051.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2175.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2180.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2199.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2219.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2346.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2356.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2595.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2743.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2757.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2861.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL2942.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3027.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3094.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3154.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3232.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3237.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3280.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3295.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3322.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3380.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3602.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3683.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL3748.tmp C:\Documents and Settings\AndiL\My Documents\Meal Planning\~WRL4043.tmp C:\Documents and Settings\AndiL\My Documents\Personal\~WRL0003.tmp C:\Documents and Settings\AndiL\My Documents\Personal\~WRL0004.tmp C:\Documents and Settings\AndiL\My Documents\Personal\~WRL1215.tmp C:\Documents and Settings\AndiL\My Documents\Personal\~WRL1547.tmp C:\Documents and Settings\AndiL\My Documents\Personal\~WRL2183.tmp C:\Documents and Settings\AndiL\My Documents\Personal\~WRL2593.tmp C:\Documents and Settings\AndiL\My Documents\Personal\~WRL3422.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0003.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0005.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0006.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0023.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0074.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0193.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0197.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0214.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0240.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0280.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0311.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0335.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0429.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0547.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0596.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0624.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0656.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0657.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0658.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0724.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0836.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0853.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL0896.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1010.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1048.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1350.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1372.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1380.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1518.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1531.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1630.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1643.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1688.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1739.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1751.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1775.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1789.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1796.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1831.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1833.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1865.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL1959.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2007.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2141.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2159.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2165.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2216.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2241.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2289.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2300.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2347.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2442.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2471.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2498.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2519.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2529.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2575.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2576.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2599.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2649.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2715.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2756.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2792.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2849.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2870.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2912.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2919.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2970.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2981.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL2997.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3002.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3035.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3041.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3062.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3077.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3122.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3128.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3136.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3208.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3220.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3241.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3260.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3277.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3350.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3409.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3422.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3502.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3536.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3545.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3604.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3624.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3717.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3752.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3876.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3877.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL3963.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\~WRL4062.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\ADS LOGS\~WRL0001.tmp C:\Documents and Settings\AndiL\My Documents\Stedmans\ADS LOGS\~WRL0004.tmp C:\WINDOWS\SYSTEM32\CONFIG\SAM.tmp.LOG C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.tmp.LOG Finished

PsService v1.1 - local and remote services viewer/controller Copyright © 2001-2003 Mark Russinovich Sysinternals - www.sysinternals.com SERVICE_NAME: AcrSch2Svc Allows Acronis products to schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. TYPE : 110 WIN32_OWN_PROCESS INTERACTIVE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : "C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe" LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Acronis Scheduler2 Service DEPENDENCIES : RpcSs SERVICE_START_NAME: LocalSystem SERVICE_NAME: Alerter Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k LocalService LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Alerter DEPENDENCIES : LanmanWorkstation SERVICE_START_NAME: NT AUTHORITY\LocalService SERVICE_NAME: ALG Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Internet Connection Firewall TYPE : 10 WIN32_OWN_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\alg.exe LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Application Layer Gateway Service DEPENDENCIES : SERVICE_START_NAME: NT AUTHORITY\LocalService SERVICE_NAME: AppMgmt Provides software installation services such as Assign, Publish, and Remove. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 4 DISABLED ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\system32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Application Management DEPENDENCIES : SERVICE_START_NAME: LocalSystem SERVICE_NAME: AudioSrv Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : AudioGroup TAG : 0 DISPLAY_NAME : Windows Audio DEPENDENCIES : PlugPlay : RpcSs SERVICE_START_NAME: LocalSystem SERVICE_NAME: BITS Uses idle network bandwidth to transfer data. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Background Intelligent Transfer Service DEPENDENCIES : Rpcss SERVICE_START_NAME: LocalSystem SERVICE_NAME: Browser Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Computer Browser DEPENDENCIES : LanmanWorkstation : LanmanServer SERVICE_START_NAME: LocalSystem SERVICE_NAME: CiSvc Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. TYPE : 120 WIN32_SHARE_PROCESS INTERACTIVE_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\system32\cisvc.exe LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Indexing Service DEPENDENCIES : RPCSS SERVICE_START_NAME: LocalSystem SERVICE_NAME: ClipSrv Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 10 WIN32_OWN_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\system32\clipsrv.exe LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : ClipBook DEPENDENCIES : NetDDE SERVICE_START_NAME: LocalSystem SERVICE_NAME: COMSysApp Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 10 WIN32_OWN_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : COM+ System Application DEPENDENCIES : rpcss SERVICE_START_NAME: LocalSystem FAIL_RESET_PERIOD : 30 seconds FAILURE_ACTIONS : Restart DELAY: 1000 seconds : Restart DELAY: 5000 seconds : None DELAY: 1000 seconds SERVICE_NAME: CryptSvc Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\system32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Cryptographic Services DEPENDENCIES : RpcSs SERVICE_START_NAME: LocalSystem SERVICE_NAME: Dhcp Manages network configuration by registering and updating IP addresses and DNS names. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : TDI TAG : 0 DISPLAY_NAME : DHCP Client DEPENDENCIES : Tcpip : Afd : NetBT SERVICE_START_NAME: LocalSystem SERVICE_NAME: dmadmin Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\dmadmin.exe /com LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Logical Disk Manager Administrative Service DEPENDENCIES : RpcSs : PlugPlay : DmServer SERVICE_START_NAME: LocalSystem SERVICE_NAME: dmserver Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Logical Disk Manager DEPENDENCIES : RpcSs : PlugPlay SERVICE_START_NAME: LocalSystem SERVICE_NAME: Dnscache Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k NetworkService LOAD_ORDER_GROUP : TDI TAG : 0 DISPLAY_NAME : DNS Client DEPENDENCIES : Tcpip SERVICE_START_NAME: NT AUTHORITY\NetworkService SERVICE_NAME: DSBrokerService (null) TYPE : 10 WIN32_OWN_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 0 IGNORE BINARY_PATH_NAME : "C:\Program Files\DellSupport\brkrsvc.exe" LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : DSBrokerService DEPENDENCIES : SERVICE_START_NAME: LocalSystem SERVICE_NAME: ERSvc Allows error reporting for services and applictions running in non-standard environments. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 0 IGNORE BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Error Reporting Service DEPENDENCIES : RpcSs SERVICE_START_NAME: LocalSystem SERVICE_NAME: Eventlog Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\system32\services.exe LOAD_ORDER_GROUP : Event log TAG : 0 DISPLAY_NAME : Event Log DEPENDENCIES : SERVICE_START_NAME: LocalSystem SERVICE_NAME: EventSystem Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : Network TAG : 0 DISPLAY_NAME : COM+ Event System DEPENDENCIES : RPCSS SERVICE_START_NAME: LocalSystem SERVICE_NAME: FastUserSwitchingCompatibility Provides management for applications that require assistance in a multiple user environment. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Fast User Switching Compatibility DEPENDENCIES : TermService SERVICE_START_NAME: LocalSystem SERVICE_NAME: GoogleDesktopManager (null) TYPE : 10 WIN32_OWN_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : GoogleDesktopManager DEPENDENCIES : RPCSS SERVICE_START_NAME: LocalSystem SERVICE_NAME: gusvc (null) TYPE : 10 WIN32_OWN_PROCESS START_TYPE : 3 DEMAND_START ERROR_CONTROL : 0 IGNORE BINARY_PATH_NAME : "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Google Updater Service DEPENDENCIES : RPCSS SERVICE_START_NAME: LocalSystem FAIL_RESET_PERIOD : 86400 seconds FAILURE_ACTIONS : Restart DELAY: 900000 seconds : Restart DELAY: 900000 seconds : None DELAY: 0 seconds SERVICE_NAME: helpsvc Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. TYPE : 20 WIN32_SHARE_PROCESS START_TYPE : 2 AUTO_START ERROR_CONTROL : 1 NORMAL BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs LOAD_ORDER_GROUP : TAG : 0 DISPLAY_NAME : Help and Support DEPENDENCIES : RPCSS SERVICE_START_NAME: LocalSystem FAIL_RESET_PERIOD : 86400 seconds FAILURE_ACTIONS : Restart DELAY: 100 seconds : Restart DELAY: 100 seconds : None DELAY: 100 seconds