Hi….
This is sukhi & I have a window vista operating system on my notebook & the problem is that i'm continuosly getting this message
" Security Alert : Spware Found "
Your Computer is infected with latest version of PSW.x-Virtrojan. PSW trojans steal your Private information such as Password,ip address,credit card info, registration details, document etc.click this baloon to remove PSW.x Vir spywarer"
& when i click on that Icon it try to open a website named www.gatted.com which never opens with message HTTP 403 Forbidden
& one more pop up message which i received is
"Critical system Warning!" Your System is probably infected with latest version of spyware.cybeerlog-X
Type Spyware
Infected Length 266,129 bytes
Risk High
Affected Systems Windows 95,98, 2000, 2003 servers, NT,Windows XP
……………………….
……………………………….
…………………………

Protection Click OK to open Anti Spyware & If click on Ok button again try to open the same website "www.gatted.com " many times this site try to open on its own.


I'm very annoyed with all this stuff, i just bought my notebook 15 days before & now facing all this, Pls help me as soon as possible.I also do have the trial version of Norton Antivirus but it is also unable to find any virus however i update it regularly. One more thing i want to mention that i have download an antivirus Spyhunter that is showing the list of virus 2 of them in memory 4 registry cookies 14, Files 12 I & attaching the log report after Hijack this report.



I am not being able to upload file so same info. i'm pasting here, Pls have a look…

Logfile of HijackThis v1.99.1
Scan saved at 17:20:05, on 22-09-2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Video ActiveX Access\imsmain.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Video ActiveX Access\imsmn.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Users\ACEROE~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Sify Broadband\BBClient.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Sify Broadband\BBImpSec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.in.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.in.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [SetPanel] C:\Acer\APanel\APanel.cmd
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\MSCONFIG.exe" /auto
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKCU\..\Run: [SifyBB] C:\Program Files\Sify Broadband\BBImpSec.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/200707…ex/qtplugin.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jin…ows-i586-jc.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{920C1798-00DD-46DE-BC2E-F7F0344CB705}: NameServer = 202.144.13.50,202.144.66.6
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: eNetHook.dll
O20 - Winlogon Notify: igfxcui - C:\Windows\SYSTEM32\igfxdev.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDataSecurity Service - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: SQL Server (MSSMLBIZ) (MSSQL$MSSMLBIZ) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sMSSMLBIZ (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)



Log generated by spyhunter

Log Contents provided by Enigma Software Group, Inc.
###########################Runnning Processes DATA###########################
processName = TASKENG.EXE File Size = 166400 File Path = C:\Windows\system32\taskeng.exe ModuleMD5 = 1226e9fae5b8508801ec974e3c9d9c14
processName = DWM.EXE File Size = 83456 File Path = C:\Windows\system32\Dwm.exe ModuleMD5 = e87b968f3d49117445893eb0503fe34f
processName = EXPLORER.EXE File Size = 2923520 File Path = C:\Windows\Explorer.EXE ModuleMD5 = fd8c53fb002217f6f888bcf6f5d7084d
processName = IMSMAIN.EXE File Size = 24576 File Path = C:\Program Files\Video ActiveX Access\imsmain.exe ModuleMD5 = 15545e425a0e96179468deec3e860941
processName = MSASCUI.EXE File Size = 1004136 File Path = C:\Program Files\Windows Defender\MSASCui.exe ModuleMD5 = 10b5bfbdb6717b58eeab927cfd1ced25
processName = IGFXTRAY.EXE File Size = 138008 File Path = C:\Windows\System32\igfxtray.exe ModuleMD5 = 313688a940bf9a4df4f24bb31dd122c7
processName = HKCMD.EXE File Size = 154392 File Path = C:\Windows\System32\hkcmd.exe ModuleMD5 = c38a93dd4eae89204c1c1341abfd876c
processName = IGFXPERS.EXE File Size = 133912 File Path = C:\Windows\System32\igfxpers.exe ModuleMD5 = faeadc81172b8eec608fa4a24e5cb1bf
processName = RTHDVCPL.EXE File Size = 4423680 File Path = C:\Windows\RtHDVCpl.exe ModuleMD5 = 8fbafd103a801d92e9eb528c9b841aee
processName = SYNTPENH.EXE File Size = 857648 File Path = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ModuleMD5 = 7abae8a7851f9b18ed7a85103015434b
processName = CCAPP.EXE File Size = 107112 File Path = C:\Program Files\Common Files\Symantec Shared\ccApp.exe ModuleMD5 = d12509c433c20d2818e8c03c401a256f
processName = QTZGACER.EXE File Size = 506640 File Path = C:\Program Files\Launch Manager\QtZgAcer.EXE ModuleMD5 = bf3ad57e139a450a3b65089a55461e20
processName = PDVDSERV.EXE File Size = 71216 File Path = C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe ModuleMD5 = b2b2fe2671dd98a322b0ad7079c0b2b2
processName = EDSLOADER.EXE File Size = 457216 File Path = C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe ModuleMD5 = e090ee780714e376062198c6625d5b51
processName = GOOGLEDESKTOP.EXE File Size = 1838592 File Path = C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe ModuleMD5 = c5122c4da36cabd5c0da00b76f48be25
processName = JUSCHED.EXE File Size = 132496 File Path = C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe ModuleMD5 = 896e712a34d654a337c8cbb9deb07200
processName = SIDEBAR.EXE File Size = 1196032 File Path = C:\Program Files\Windows Sidebar\sidebar.exe ModuleMD5 = 43632977504b323f8a41bf7a9965c453
processName = WMPNSCFG.EXE File Size = 201728 File Path = C:\Program Files\Windows Media Player\wmpnscfg.exe ModuleMD5 = 20ef9002cff89c4c1077e4415ec7297b
processName = GOOGLETOOLBARNOTIFIER.EXE File Size = 171448 File Path = C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe ModuleMD5 = 0fa44ea8b03aba3e1d240b5a333d8e6a
processName = BTTRAY.EXE File Size = 719664 File Path = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe ModuleMD5 = 4fe75b79c9962acc424594f75359a80d
processName = ENMTRAY.EXE File Size = 753664 File Path = C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE ModuleMD5 = 5b1a52a2f4573a1ca947a3af859cf6f7
processName = EPOWER_DMC.EXE File Size = 528384 File Path = C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE ModuleMD5 = 0f0e9ebe47a7b2bd7444424473fa3962
processName = ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE File Size = 319488 File Path = C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE ModuleMD5 = f1e604cb0767ff13d69be4339080c221
processName = ERAGENT.EXE File Size = 397312 File Path = C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE ModuleMD5 = 4f779ad993a2975d945ee6985cac0fea
processName = IMSMN.EXE File Size = 6656 File Path = C:\Program Files\Video ActiveX Access\imsmn.exe ModuleMD5 = e13b8b9dbb16fc55afe7d4cb60dfe392
processName = IGFXSRVC.EXE File Size = 252696 File Path = C:\Windows\system32\igfxsrvc.exe ModuleMD5 = 3c06af45e286bba448156fe07e24316b
processName = RTKBTMNT.EXE File Size = 208896 File Path = C:\Users\ACEROE~1\AppData\Local\Temp\RtkBtMnt.exe ModuleMD5 = 5ef87457ab8a58694ebe35e55d093d04
processName = GOOGLEDESKTOP.EXE File Size = 1838592 File Path = C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe ModuleMD5 = c5122c4da36cabd5c0da00b76f48be25
processName = IGFXEXT.EXE File Size = 166680 File Path = C:\Windows\system32\igfxext.exe ModuleMD5 = af7fea991a8d3485725aaab39daf087a
processName = IGFXSRVC.EXE File Size = 252696 File Path = C:\Windows\system32\igfxsrvc.exe ModuleMD5 = 3c06af45e286bba448156fe07e24316b
processName = ALUNOTIFY.EXE File Size = 492912 File Path = C:\Program Files\Symantec\LiveUpdate\ALuNotify.exe ModuleMD5 = ae75328877578eaba536c9a7aedaffb3
processName = SNDVOL.EXE File Size = 197632 File Path = C:\Windows\system32\SndVol.exe ModuleMD5 = 1df98985a19bed845dd1fce0b95d1dca
processName = SPYHUNTER.EXE File Size = 2693248 File Path = C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter.exe ModuleMD5 = 106556f40e0366b98ff715462aa3c3e5
processName = BBCLIENT.EXE File Size = 577536 File Path = C:\Program Files\Sify Broadband\BBClient.exe ModuleMD5 = 14e08932d389aa2040ad0c5855dbabc4
processName = IEUSER.EXE File Size = 294912 File Path = C:\Program Files\Internet Explorer\IEUser.exe ModuleMD5 = 580c95594ba4ac90e1bd4eabf9bf9b27
processName = IEXPLORE.EXE File Size = 625152 File Path = C:\Program Files\Internet Explorer\iexplore.exe ModuleMD5 = 275cee268b9e5d82474c43d5d249d111
processName = BBIMPSEC.EXE File Size = 127085 File Path = C:\Program Files\Sify Broadband\BBImpSec.exe ModuleMD5 = d328b49a85f6e7a994679cacf21d6a18
processName = TASKENG.EXE File Size = 166400 File Path = C:\Windows\system32\taskeng.exe ModuleMD5 = 1226e9fae5b8508801ec974e3c9d9c14
processName = ASWCLNR[1].EXE File Size = 407680 File Path = C:\Users\Acer OEM User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4TBRBVAR\aswclnr[1].exe ModuleMD5 = b8fc967a3d1b3568070b21feef895144
processName = ASWCLNR[1].TMP File Size = 672256 File Path = C:\Users\Acer OEM User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4TBRBVAR\aswclnr[1].tmp ModuleMD5 = ff084269868212b4f35fcba6c9c2dde6
###########################REGISTRY MD5 DATA###########################

Name=Windows Defender Data=%ProgramFiles%\Windows Defender\MSASCui.exe -hide FileSize = MD5=
Name=ALaunch Data=C:\Acer\ALaunch\AlaunchClient.exe FileSize = MD5=********************************
Name=IgfxTray Data=C:\Windows\system32\igfxtray.exe FileSize = 138008 MD5=313688a940bf9a4df4f24bb31dd122c7
Name=HotKeysCmds Data=C:\Windows\system32\hkcmd.exe FileSize = 154392 MD5=c38a93dd4eae89204c1c1341abfd876c
Name=Persistence Data=C:\Windows\system32\igfxpers.exe FileSize = 133912 MD5=faeadc81172b8eec608fa4a24e5cb1bf
Name=RtHDVCpl Data=RtHDVCpl.exe FileSize = 4423680 MD5=8fbafd103a801d92e9eb528c9b841aee
Name=SynTPEnh Data=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe FileSize = 857648 MD5=7abae8a7851f9b18ed7a85103015434b
Name=Acer Tour Data= FileSize = MD5=
Name=ccApp Data="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" FileSize = 107112 MD5=d12509c433c20d2818e8c03c401a256f
Name=osCheck Data="C:\Program Files\Norton Internet Security\osCheck.exe" FileSize = 22696 MD5=9f9169ba9b0e44b6c86a5247cec2cdee
Name=LManager Data=C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE FileSize = 506640 MD5=bf3ad57e139a450a3b65089a55461e20
Name=RemoteControl Data="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" FileSize = 71216 MD5=b2b2fe2671dd98a322b0ad7079c0b2b2
Name=LanguageShortcut Data="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" FileSize = 54832 MD5=2798313dbb6ae778207eb1b1c68a1988
Name=eDataSecurity Loader Data=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe FileSize = 457216 MD5=e090ee780714e376062198c6625d5b51
Name=PLFSet Data=rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting FileSize = 45056 MD5=6e9bfdb5c4cd5085b20e9a54cc4c0968
Name=eRecoveryService Data= FileSize = MD5=
Name=Acer Tour Reminder Data=C:\Acer\AcerTour\Reminder.exe FileSize = 151552 MD5=8abc91fcd511fe7a9367aa3286d8facf
Name=SetPanel Data=C:\Acer\APanel\APanel.cmd FileSize = MD5=
Name=Google Desktop Search Data="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup FileSize = 1838592 MD5=c5122c4da36cabd5c0da00b76f48be25
Name=SunJavaUpdateSched Data="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" FileSize = 132496 MD5=896e712a34d654a337c8cbb9deb07200
Name=ALUAlert Data=C:\Program Files\Symantec\LiveUpdate\ALuNotify.exe FileSize = 492912 MD5=ae75328877578eaba536c9a7aedaffb3
Name=SpyHunter Data=C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter.exe
FileSize = 2693248 MD5=106556f40e0366b98ff715462aa3c3e5



Name=Sidebar Data=C:\Program Files\Windows Sidebar\sidebar.exe FileSize = 1196032 MD5=43632977504b323f8a41bf7a9965c453
Name=WindowsWelcomeCenter Data=rundll32.exe oobefldr.dll,ShowWelcomeCenter FileSize = MD5=
Name=Acer Tour Reminder Data=C:\Acer\AcerTour\Reminder.exe FileSize = 151552 MD5=8abc91fcd511fe7a9367aa3286d8facf
Name=SifyBB Data=C:\Program Files\Sify Broadband\BBImpSec.exe FileSize = 127085 MD5=d328b49a85f6e7a994679cacf21d6a18
Name=WMPNSCFG Data=C:\Program Files\Windows Media Player\WMPNSCFG.exe FileSize = 201728 MD5=20ef9002cff89c4c1077e4415ec7297b
Name=swg Data=C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
FileSize = 171448 MD5=0fa44ea8b03aba3e1d240b5a333d8e6a




C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL eNetHook.dll FileSize = 145408 MD5=5684e0be330c3a3b14603d66dcab28a3

Name=rare Data=C:\Program Files\Video ActiveX Access\imsmain.exe
FileSize = 24576 MD5=15545e425a0e96179468deec3e860941

explorer.exe FileSize = 2923520 MD5=fd8c53fb002217f6f888bcf6f5d7084d

C:\Windows\system32\userinit.exe, FileSize = 24576 MD5=22027835939f86c3e47ad8e3fbde3d11
#############################FILE MD5 DATA#############################

File Path = C:\Users\Acer OEM User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini File Size = 4096 md5=7f1698bab066b764a314a589d338daae
#############################SERVICES DATA#############################
Service Name = AeLookupSvc Service Display Name = Application Experience Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = AgereModemAudio Service Display Name = Agere Modem Call Progress Audio Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\agrsmsvc.exe Binary Size = 9216 Binary MD5 = 39e435c90c9c4f780fa0ed05ca3c3a1b
Service Name = ALaunchService Service Display Name = ALaunch Service Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 0 Service Binary Path = C:\Acer\ALaunch\ALaunchSvc.exe Binary Size = 50688 Binary MD5 = 3845b6555de995f6c0c07ae2abcc0532
Service Name = Appinfo Service Display Name = Application Information Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = AudioEndpointBuilder Service Display Name = Windows Audio Endpoint Builder Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = Audiosrv Service Display Name = Windows Audio Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = Automatic LiveUpdate Scheduler Service Display Name = Automatic LiveUpdate Scheduler Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" Binary Size = 0 Binary MD5 =
Service Name = BFE Service Display Name = Base Filtering Engine Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork Binary Size = 0 Binary MD5 =
Service Name = BITS Service Display Name = Background Intelligent Transfer Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = Browser Service Display Name = Computer Browser Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = BthServ Service Display Name = Bluetooth Support Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k bthsvcs Binary Size = 0 Binary MD5 =
Service Name = ccEvtMgr Service Display Name = Symantec Event Manager Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 0 Service Binary Path = "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon Binary Size = 0 Binary MD5 =
Service Name = ccSetMgr Service Display Name = Symantec Settings Manager Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 0 Service Binary Path = "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon Binary Size = 0 Binary MD5 =
Service Name = CLTNetCnService Service Display Name = Symantec Lic NetConnect service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 0 Service Binary Path = "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon Binary Size = 0 Binary MD5 =
Service Name = CryptSvc Service Display Name = Cryptographic Services Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k NetworkService Binary Size = 0 Binary MD5 =
Service Name = DcomLaunch Service Display Name = DCOM Server Process Launcher Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k DcomLaunch Binary Size = 0 Binary MD5 =
Service Name = Dhcp Service Display Name = DHCP Client Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = Dnscache Service Display Name = DNS Client Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k NetworkService Binary Size = 0 Binary MD5 =
Service Name = DPS Service Display Name = Diagnostic Policy Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork Binary Size = 0 Binary MD5 =
Service Name = EapHost Service Display Name = Extensible Authentication Protocol Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = eDataSecurity Service Service Display Name = eDataSecurity Service Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = "C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe" Binary Size = 0 Binary MD5 =
Service Name = eLockService Service Display Name = eLock Service Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe Binary Size = 24576 Binary MD5 = fb5383bfd4dec6792aaef76c9343ecff
Service Name = EMDMgmt Service Display Name = ReadyBoost Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 0 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = eNet Service Service Display Name = eNet Service Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Acer\Empowering Technology\eNet\eNet Service.exe Binary Size = 135168 Binary MD5 = 9316c26f089cf2cea2bd1496ac9f38a4
Service Name = eRecoveryService Service Display Name = eRecovery Service Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe Binary Size = 53248 Binary MD5 = 3d184410ef5ee017e186ac96181b3ff8
Service Name = eSettingsService Service Display Name = eSettings Service Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe Binary Size = 24576 Binary MD5 = cf2584cdf90da24d3044021aaad5dbab
Service Name = Eventlog Service Display Name = Windows Event Log Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = EventSystem Service Display Name = COM+ Event System Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = fdPHost Service Display Name = Function Discovery Provider Host Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = gpsvc Service Display Name = Group Policy Client Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = hidserv Service Display Name = Human Interface Device Access Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = IKEEXT Service Display Name = IKE and AuthIP IPsec Keying Modules Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = iphlpsvc Service Display Name = IP Helper Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k NetSvcs Binary Size = 0 Binary MD5 =
Service Name = Irmon Service Display Name = Infrared monitor service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = KeyIso Service Display Name = CNG Key Isolation Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\system32\lsass.exe Binary Size = 7680 Binary MD5 = 6a0e382e74280e4cc0df17fe2661d003
Service Name = KtmRm Service Display Name = KtmRm for Distributed Transaction Coordinator Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k NetworkService Binary Size = 0 Binary MD5 =
Service Name = LanmanServer Service Display Name = Server Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = LanmanWorkstation Service Display Name = Workstation Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = LightScribeService Service Display Name = LightScribeService Direct Disc Labeling Service Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 0 Service Binary Path = "C:\Program Files\Common Files\LightScribe\LSSrvc.exe" Binary Size = 0 Binary MD5 =
Service Name = lmhosts Service Display Name = TCP/IP NetBIOS Helper Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = MDM Service Display Name = Machine Debug Manager Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = "C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe" Binary Size = 0 Binary MD5 =
Service Name = MMCSS Service Display Name = Multimedia Class Scheduler Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = MobilityService Service Display Name = MobilityService Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Acer\Mobility Center\MobilityService.exe -p Binary Size = 0 Binary MD5 =
Service Name = MpsSvc Service Display Name = Windows Firewall Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork Binary Size = 0 Binary MD5 =
Service Name = MSSQL$MSSMLBIZ Service Display Name = SQL Server (MSSMLBIZ) Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = "C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sMSSMLBIZ Binary Size = 0 Binary MD5 =
Service Name = Netman Service Display Name = Network Connections Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = netprofm Service Display Name = Network List Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = NlaSvc Service Display Name = Network Location Awareness Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k NetworkService Binary Size = 0 Binary MD5 =
Service Name = nsi Service Display Name = Network Store Interface Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = PcaSvc Service Display Name = Program Compatibility Assistant Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = PlugPlay Service Display Name = Plug and Play Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k DcomLaunch Binary Size = 0 Binary MD5 =
Service Name = PolicyAgent Service Display Name = IPsec Policy Agent Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = ProfSvc Service Display Name = User Profile Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = RasMan Service Display Name = Remote Access Connection Manager Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = RichVideo Service Display Name = Cyberlink RichVideo Service(CRVS) Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = "C:\Program Files\CyberLink\Shared Files\RichVideo.exe" Binary Size = 0 Binary MD5 =
Service Name = RpcSs Service Display Name = Remote Procedure Call (RPC) Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k rpcss Binary Size = 0 Binary MD5 =
Service Name = SamSs Service Display Name = Security Accounts Manager Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\lsass.exe Binary Size = 7680 Binary MD5 = 6a0e382e74280e4cc0df17fe2661d003
Service Name = Schedule Service Display Name = Task Scheduler Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = seclogon Service Display Name = Secondary Logon Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = SENS Service Display Name = System Event Notification Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = ShellHWDetection Service Display Name = Shell Hardware Detection Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 0 Service Binary Path = C:\Windows\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = slsvc Service Display Name = Software Licensing Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\SLsvc.exe Binary Size = 2592256 Binary MD5 = 7610645679bb5994210d21a347e0c479
Service Name = Spooler Service Display Name = Print Spooler Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\spoolsv.exe Binary Size = 124928 Binary MD5 = da612ef2556776df2630b68bf2d48935
Service Name = SSDPSRV Service Display Name = SSDP Discovery Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = stisvc Service Display Name = Windows Image Acquisition (WIA) Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k imgsvc Binary Size = 0 Binary MD5 =
Service Name = Symantec Core LC Service Display Name = Symantec Core LC Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 3 Service Error Control = 1 Service Binary Path = "C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe" Binary Size = 0 Binary MD5 =
Service Name = SymAppCore Service Display Name = Symantec AppCore Service Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 0 Service Binary Path = "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" Binary Size = 0 Binary MD5 =
Service Name = SysMain Service Display Name = Superfetch Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 0 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = TabletInputService Service Display Name = Tablet PC Input Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = TapiSrv Service Display Name = Telephony Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k NetworkService Binary Size = 0 Binary MD5 =
Service Name = TermService Service Display Name = Terminal Services Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k NetworkService Binary Size = 0 Binary MD5 =
Service Name = Themes Service Display Name = Themes Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = TrkWks Service Display Name = Distributed Link Tracking Client Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = upnphost Service Display Name = UPnP Device Host Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = UxSms Service Display Name = Desktop Window Manager Session Manager Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = W32Time Service Display Name = Windows Time Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = wcncsvc Service Display Name = Windows Connect Now - Config Registrar Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = WdiSystemHost Service Display Name = Diagnostic System Host Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = WebClient Service Display Name = WebClient Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalService Binary Size = 0 Binary MD5 =
Service Name = WerSvc Service Display Name = Windows Error Reporting Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 0 Service Binary Path = C:\Windows\System32\svchost.exe -k WerSvcGroup Binary Size = 0 Binary MD5 =
Service Name = WinDefend Service Display Name = Windows Defender Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k secsvcs Binary Size = 0 Binary MD5 =
Service Name = Winmgmt Service Display Name = Windows Management Instrumentation Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 0 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = Wlansvc Service Display Name = WLAN AutoConfig Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = WMIService Service Display Name = ePower Service Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 0 Service Binary Path = C:\Acer\Empowering Technology\ePower\ePowerSvc.exe Binary Size = 163840 Binary MD5 = ee80ac462a171dbf06eeb2058b5d3bc6
Service Name = WMPNetworkSvc Service Display Name = Windows Media Player Network Sharing Service Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 3 Service Error Control = 1 Service Binary Path = "C:\Program Files\Windows Media Player\wmpnetwk.exe" Binary Size = 0 Binary MD5 =
Service Name = WPDBusEnum Service Display Name = Portable Device Enumerator Service Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = wscsvc Service Display Name = Security Center Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Binary Size = 0 Binary MD5 =
Service Name = WSearch Service Display Name = Windows Search Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\SearchIndexer.exe /Embedding Binary Size = 0 Binary MD5 =
Service Name = wuauserv Service Display Name = Windows Update Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = wudfsvc Service Display Name = Windows Driver Foundation - User-mode Driver Framework Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted Binary Size = 0 Binary MD5 =
#############################WINLOGON DATA#############################

Subkey Name = Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui Filepath = C:\Windows\system32\igfxdev.dll File Size = 204800 File MD5 = 62099d7687a3b949a6cdd5234f78ca37
Subkey Name = Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
##########################BROWSER ADD-ON DATA##########################

CLSID = {90222687-F593-4738-B738-FBEE9C7B26DF} FilePath = C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll File Size = 565960 File MD5 = 668e3888e866469602b42b42f9cf6eee Description = NCO Toolbar
CLSID = {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} FilePath = C:\Windows\system32\eDStoolbar.dll File Size = 151552 File MD5 = 5c142ec504f37c5ff36ac1ab73f20c1b Description = 0
CLSID = {EF99BD32-C1FB-11D2-892F-0090271D4F88} FilePath = C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll File Size = 436288 File MD5 = 3374c2a0344be49368dc342329404b49 Description = 0
CLSID = {2318C2B1-4965-11d4-9B18-009027A5CD4F} FilePath = c:\program files\google\googletoolbar2.dll File Size = 2403392 File MD5 = 6319f2d4708dbcae37cfa03da10782c0 Description = 0

CLSID = {02478D38-C3F9-4EFB-9B51-7695ECA05670} FilePath = C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll File Size = 436288 File MD5 = 3374c2a0344be49368dc342329404b49
CLSID = {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} FilePath = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll File Size = 63136 File MD5 = 42729c3de75a7a51fc6f9ef6546c9199
CLSID = {1E8A6170-7264-4D0F-BEAE-D42A53123C75} FilePath = C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll File Size = 96984 File MD5 = 57e8cf524aff1d945aabd65b9aaa8075
CLSID = {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} FilePath = C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll File Size = 501136 File MD5 = d6137540bdf0f9f9b9055c60add8007a
CLSID = {AA58ED58-01DD-4d91-8333-CF10577473F7} FilePath = c:\program files\google\googletoolbar2.dll File Size = 2403392 File MD5 = 6319f2d4708dbcae37cfa03da10782c0

CLSID = {08B0E5C0-4FCB-11CF-AAA5-00401C608501} FilePath = File Size = 0 File MD5 =
CLSID = {92780B25-18CC-41C8-B9BE-3C9C571A8263} FilePath = File Size = 0 File MD5 =
CLSID = {CCA281CA-C863-46ef-9331-5C8D4460577F} FilePath = File Size = 0 File MD5 =

CLSID = CmdMapping FilePath = File Size = 0 File MD5 =

CLSID = {CFBFAE00-17A6-11D0-99CB-00C04FD64497} FilePath = C:\Windows\system32\ieframe.dll File Size = 6058496 File MD5 = 7786e0787b8627d4d4a6efd542b3aa6a Description =
CLSID = {EF99BD32-C1FB-11D2-892F-0090271D4F88} FilePath = C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll File Size = 436288 File MD5 = 3374c2a0344be49368dc342329404b49 Description =

CLSID = {8C7461EF-2B13-11d2-BE35-3078302C2030} FilePath = C:\Windows\system32\browseui.dll File Size = 1321472 File MD5 = ec4a360ba892320da05ba504ea7390bc Description = Component Categories cache daemon
##########################LSP CHAIN DATA##########################

Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000001 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000002 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000003 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000004 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000005 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000006 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000007 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000008 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000009 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000010 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000011 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000012 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000013 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000014 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000015 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000016 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000017 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000018 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000019 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000020 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000021 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000022 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000023 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\0000000024 Filepath = C:\Windows\system32\mswsock.dll File Size = 227328 File MD5 = 54e9576169a248ad62a1eb9773225826
##########################UNINSTALL DATA##########################

Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Activation Assistant for the 2007 Microsoft Office suites DisplayName = Activation Assistant for the 2007 Microsoft Office suites
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Agere Systems Soft Modem DisplayName = Agere Systems HDA Modem
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Business Contact Manager for Outlook 2007 DisplayName = Business Contact Manager for Outlook 2007 InstallLocation = C:\Program Files\Microsoft Small Business\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Desktop DisplayName = Google Desktop
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\GridVista DisplayName = Acer GridVista
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\HDMI DisplayName = Intel® Graphics Media Accelerator Driver
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\IE40
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\IEData
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\IExplorer Security Plug-in DisplayName = IExplorer Security Plug-in
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield Uninstall Information
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} DisplayName = NTI CD & DVD-Maker InstallLocation = C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Secure Bar DisplayName = Internet Explorer Secure Bar
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\LiveUpdate DisplayName = LiveUpdate 3.2 (Symantec Corporation) InstallLocation = "C:\Program Files\Symantec\LiveUpdate"
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\LManager DisplayName = Launch Manager
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Messenger Service DisplayName = Messenger Service
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft SQL Server 2005 DisplayName = Microsoft SQL Server 2005
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\PROHYBRIDR DisplayName = 2007 Microsoft Office system InstallLocation = C:\Program Files\Microsoft Office
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Sevinst
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\ShockwaveFlash DisplayName = Adobe Flash Player 9 ActiveX
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Sify Broadband_is1 DisplayName = Sify Broadband 3.22 InstallLocation = C:\Program Files\Sify Broadband\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\SymSetup.{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B} DisplayName = Norton Internet Security (Symantec Corporation) InstallLocation = C:\Program Files\Norton Internet Security
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\SynTPDeinstKey DisplayName = Synaptics Pointing Device Driver
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion DisplayName = Yahoo! Toolbar
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar DisplayName = Yahoo! Toolbar
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{03D1988F-469F-4843-8E6E-E5FE9D17889D} DisplayName = WIDCOMM Bluetooth Software 6.0.1.4900 InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{11316260-6666-467B-AC34-183FCB5D4335} DisplayName = Acer Mobility Center Plug-In InstallLocation = C:\Acer\Mobility Center\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3} DisplayName = Acer eLock Management InstallLocation = C:\Acer\Empowering Technology\eLock
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} DisplayName = NTI CD & DVD-Maker InstallLocation = C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F} DisplayName = Google Toolbar for Internet Explorer
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F} DisplayName = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2} DisplayName = SymNet InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160020} DisplayName = Java™ 6 Update 2 InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{399C37FB-08AF-493B-BFED-20FBD85EDF7F} DisplayName = Acer Crystal Eye webcam InstallLocation = C:\Program Files\Sonix\Acer Crystal Eye webcam
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{3CCAD2EF-CFF2-4637-82AA-AABF370282D3} DisplayName = ccCommon InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{48185814-A224-447A-81DA-71BD20580E1B} DisplayName = Norton Internet Security InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{4843B611-8FCB-4428-8C23-31D0A5EAE164} DisplayName = Norton Confidential Browser Component InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{50120000-1105-0000-0000-0000000FF1CE} DisplayName = Microsoft Office 2007 Primary Interop Assemblies InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{50A0893D-47D8-48E0-A7E8-44BCD7E4422E} DisplayName = Microsoft SQL Server Native Client InstallLocation = C:\Program Files\Microsoft SQL Server\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE} DisplayName = Microsoft SQL Server Setup Support Files (English) InstallLocation = C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{58E5844B-7CE2-413D-83D1-99294BF6C74F} DisplayName = Acer ePower Management InstallLocation = C:\Acer\Empowering Technology\ePower
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B} DisplayName = Norton Internet Security InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{65DA2EC9-0642-47E9-AAE2-B5267AA14D75} DisplayName = Activation Assistant for the 2007 Microsoft Office suites InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{67ADE9AF-5CD9-4089-8825-55DE4B366799} DisplayName = NTI Backup NOW! 4.7 InstallLocation = C:\Program Files\NewTech Infosystems\NTI Backup NOW! 4.7
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1} DisplayName = PowerDVD
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{6CD40625-E6A7-4C02-B281-3A4CB0D94AA9}
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{77772678-817F-4401-9301-ED1D01A8DA56} DisplayName = SPBBC 32bit InstallLocation = C:\Program Files\Norton Internet Security
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC} DisplayName = Acer ScreenSaver InstallLocation = C:\Program Files\Acer Inc.\Acer ScreenSaver
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{830D8CBD-C668-49e2-A969-C2C2106332E0} DisplayName = Norton AntiVirus InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-0015-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Access MUI (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-0016-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Excel MUI (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-0018-0409-0000-0000000FF1CE} DisplayName = Microsoft Office PowerPoint MUI (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-0019-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Publisher MUI (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-001A-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Outlook MUI (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-001B-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Word MUI (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-001F-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Proof (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-001F-040C-0000-0000000FF1CE} DisplayName = Microsoft Office Proof (French) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-001F-0C0A-0000-0000000FF1CE} DisplayName = Microsoft Office Proof (Spanish) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-002C-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Proofing (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-006E-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Shared MUI (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-0115-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Shared Setup Metadata MUI (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-0117-0409-0000-0000000FF1CE} DisplayName = Microsoft Office Access Setup Metadata MUI (English) 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90280409-6000-11D3-8CFE-0050048383C9} DisplayName = Microsoft Office XP Professional with FrontPage InstallLocation = INSTALLLOCATION
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{90A40409-6000-11D3-8CFE-0150048383C9} DisplayName = Microsoft Office 2003 Web Components InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{91120000-0031-0000-0000-0000000FF1CE} DisplayName = Microsoft Office Professional Hybrid 2007 InstallLocation = C:\Program Files\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{2B939677-2FFD-48F6-9075-7BF48CB87C80} DisplayName = Update for Office 2007 (KB934528)
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{D8E9BEBD-655F-467D-8176-CA9959C140A3} DisplayName = Update for Office System 2007 Setup (KB929722)
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{94389919-B0AA-4882-9BE8-9F0B004ECA35} DisplayName = Acer Tour InstallLocation = C:\Acer\AcerTour\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8} DisplayName = Norton Protection Center InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{A49F249F-0C91-497F-86DF-B2585E8E76B7} DisplayName = Microsoft Visual C++ 2005 Redistributable InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{A939D341-5A04-4E0A-BB55-3E65B386432D} DisplayName = Microsoft Office Small Business Connectivity Components InstallLocation = C:\Program Files\Microsoft Small Business\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{AA047D7C-5E7C-4878-B75C-77589151B563} DisplayName = Acer Crystal Eye webcam InstallLocation = C:\Program Files\SUYIN\Acer Crystal Eye webcam
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{AB6097D9-D722-4987-BD9E-A076E2848EE2} DisplayName = Acer Empowering Technology InstallLocation = C:\Acer\Empowering Technology
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-1033-7B44-A70000000000} DisplayName = Adobe Reader 7.0 InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{AEEAE013-92F1-4515-B278-139F1A692A36} DisplayName = Acer eDataSecurity Management InstallLocation = C:\Acer\Empowering Technology\eDataSecurity\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{B32C4059-6E7A-41EF-AD20-56DF1872B923} DisplayName = Business Contact Manager for Outlook 2007 InstallLocation = C:\Program Files\Microsoft Small Business\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{B7C61755-DB48-4003-948F-3D34DB8EAF69} DisplayName = MSRedist InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{BF839132-BD43-4056-ACBF-4377F4A88E2A} DisplayName = Acer ePresentation Management InstallLocation = C:\Acer\Empowering Technology\ePresentation
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{C06554A1-2C1E-4D20-B613-EE62C79927CC} DisplayName = Acer eNet Management InstallLocation = C:\Acer\Empowering Technology\eNet
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{C0D2F614-5CE5-4DCB-8678-E5C9AF7044F8} DisplayName = Microsoft SQL Server VSS Writer InstallLocation = C:\Program Files\Microsoft SQL Server\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{CE386A4E-D0DA-4208-8235-BCE43275C694} DisplayName = LightScribe 1.4.142.1 InstallLocation = C:\Program Files\Common Files\LightScribe\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{CE65A9A0-9686-45C6-9098-3C9543A412F0} DisplayName = Acer eSettings Management InstallLocation = C:\Acer\Empowering Technology\eSettings
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{D353CC51-430D-4C6F-9B7E-52003DA1E05A} DisplayName = Norton Confidential Web Protection Component InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{D3B3B9B2-FE73-44CB-8C0A-F737D92F991B} DisplayName = Broadcom Gigabit Integrated Controller InstallLocation = C:\Program Files\Broadcom\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{D6E6FA4A-5445-4850-8365-CF216C1CBB7A} DisplayName = Symantec Real Time Storage Protection Component InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{DBEA1034-5882-4A88-8033-81C4EF0CFA29} DisplayName = Google Toolbar for Internet Explorer InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{E3EFA461-EB83-4C3B-9C47-2C1D58A01555} DisplayName = Norton Internet Security InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{E5EE9939-259F-4DE2-8023-5C49E16A4F43} DisplayName = Norton Internet Security InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{EE5B8E34-973C-4FBE-AC83-99F064009FC7} DisplayName = SpyHunter InstallLocation = C:\Program Files\Enigma Software Group\SpyHunter
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B} DisplayName = AppCore InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} DisplayName = Realtek High Definition Audio Driver InstallLocation = C:\Program Files\Realtek\InstallShield\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstall\{F4DB525F-A986-4249-B98B-42A8066251CA} DisplayName = AV InstallLocation =