Trouble with installing AVG 7.5 free

This is a Gateway desktop that I just restored using a recovery CD. Gateway comes with a bunch of freebie and trial software, among them McAfee. When it popped up during the clean install phase, I managed to suspend three of it's already active processes, and then use add/remove software in the control panel to get rid of it, I thought. I then used RegSeeker to clean the registry. When I downloaded AVG 7.5 free, during it's install setup, it told me that there is already an anti-virus program running, and I should first uninstall it before installing AVG. About the only thing I did after the clean system install was download about 75 Microsoft security updates. This machine has XP Media Edition 2002, and came with Internet Explorer 6.0. My update with Microsoft took it all the way through the IE 7 installation. Looking under the security icon in the control panel, I see the firewall is active, as is automatic updates , but under virus protection it states that "McAfee Viruscan reports that it is turned off," etc.... So evidently, McAfee has already insinuated itself into the system.
Should I ignore the AVG warning about the presence of another virus program, or do I need to do some more uninstalling? If so, how?
I attempted to go to AVG forums, where I was registered quite a while ago, but now can no longer log on, for a variety of reasons. It is not a matter of forgotten password, it just won't let me get through. So, I thought I'd give the good old WindowsBBS a shot.

 

Try the following Link ....
How to uninstall or reinstall supported McAfee consumer products using the McAfee Consumer Products Removal tool (MCPR.exe)

 

Thanks Dennis. It did work on my Dell Inspiron laptop. McAfee still popped up whenever I rebooted my laptop, telling me some parts weren't installed correctly. It also warned me not to allow Dell's Support program.
McAfee also periodically popped up whenever I brought my laptop out of standby, telling me about definitions out of date. I just ran the removal tool, and it ended successfully. So far so good. Long ago, when the McAfee popups occurred, I emailed their tech folks, and they gave me a step by step "cleaning" procedure. It didn't work. This automated program did.

On the Gateway desktop, it stated removal incomplete, but immediately followed by the restart command telling me that removal would not be complete until I restarted. I did. Went to the security icon in the control panel and still saw the remarks about McAfee reporting that it was turned off. So, I ran the removal tool again, with the same results. I did save the log in .txt format, and will now try to email it to McAfee.

 

One fixed (Dell) , but Gateway being stubborn.
If you already emailed McAfee, hopefully they will suggest a timely solution.
Sometimes when programs do not properly uninstall, REINSTALLING the program helps. Then try the complete McAfee uninstall process. Keep us posted.

 

Well, I spent a good bit of time "chatting" with McAfee's tech support. They suggested some pretty pedestrian solutions like search for McAfee, then delete,. Nothing found. See if there were any McAfee folders in the application folder, see any listings under programs in the root directory. I had previously already deleted everything McAfee. The second chat resulted in my trying to run MCPR.exe in safe mode. No luck. The third time I attempted to chat, they bumped me out, ended my sessions before they began, and each time, there were more and more in line ahead of me. The first time I chatted, it was with someone named ARUN. The second time, he identified himself as ARUN P. What are the odds? I asked him if he was the same guy. He said no. I suspect he's the only one on duty, and didn't really want to chat a third time.
The grammar and command of the language was similar. So, here I sit. Ran MCPR six times now, rebooted six times. Nobody I could reach was interested in the log file results. Installing AVG7.5 brings the same warning about uninstalling the other AV progam first.
Help?

 

If you try to reinstall, then reboot again into Safe Mode. Now follow McAfee's outline for uninstall. If for some reason the uninstall is not offered in "Add Remove Programs ", go directly to McAfee folder and run the uninstall routine.

 

If you still are having problems, you can download and install RegSeeker. Using RegSeeker, do a search for McAfee and remove all registry entries found. Reboot. Now go back using Windows Explorer and remove all folders named McAfee anything. Look in each of the user profiles and look in All Users making sure to include application data, common files and startup entries. Then reboot again and try your AVG installation.

 

HI Rockster, I already had regseeker installed and just now ran it. Got excited for a minute because it found 9 instances of McAfee whereas when I manually ran regedit and searched for McAfee, I deleted everything McAfee. Guess I was sloppy. Anyway, trying to install AVG7.5 still gives me the warning that there is another AV program installed on this computer. Frustrating. I spent a good bit of time with Mcafee tech support chatting with them. One was pretty thorough, and had me delete quite a bit after showing hidden files, visiting folders that I did not know existed. He then had me uninstall adaware and spyware blaster thinking that they interfered with MCPR.exe's ability to do a successful cleaning. Nothing helped. I contacted them again this am. Someone called "pretty" responded. Did some relatively pedestrian things, and then told me that it wasn't Mcafee's problem, and that I should contact Microsoft. I will now out of desparation run MCPR yet again. Maybe regseeker helped. More to come..

 

After running regseeker and deleting everything McAfee, I ran MCPR.exe twice more, once in safe mode, once normally. In safe mode, right from the start it says something to the effect that there was an error obtaining full permission to run this program, so that a complete uninstall will not be possible. When I boot into safe mode, I have a choice of using administrator and owner. I chose administrator. Much as I hate to do it, I think I'll be forced into installing Mcafee from the system restore CD, and then hope that i I can find a remove option in add/remove in the control panel.
I'll do it later. Right now I'll take my dog for a walk.

 

Did you ever find a solution for your problem? I admit I'm a little stumped by this as I thought the Mcafee removal tool would remove everything related to Mcafee.

I can understand the furstration as yesterday I uninstalled the Norton Internet Security Suite 2007 off of my laptop and rebooted. There were still many files left over, services, and liveupdate was still installed. I downloaded the Norton Removal tool and all was gone.

Let us know about your latest adventures.

 

Hi Skaler2k

It has been several days but I could not help you till now!

Hopefully you did not resort to reinstalling Mcafee to fix thid!

If you still have this issue please let me know and we will fix it.

Mike

 

Hi Mike and Kevin,
No, I never did try to reinstall, just to hopefully uninstall. As I mentioned earlier, that MCPR.EXE program did finally successfully uninstall all vestiges of McAfee on my laptop, but, for some reason, the desktop still balks. The AVG program still sees another AV program, and within the control panel security center, I have a red colored section under the two green sections called firewall and automatic updates. The red section called anti-virus does still state that "McAfee anti-virus reports that it is turned off.... "
To recap, I had used the system restore disk to reformat the harddrive and reinstall the operating system. During that process, a McAfee dialog box popped up telling me about the installation, with no option to quit, just the red x in the upper right corner and a NEXT button. The red M was already present in the task bar's right side. Right clicking it, I saw three processes running that I exited, and that gave me permission to delete McAfee from the Add/Remove icon in the control panel. Then, I installed adaware, spyware blaster, and then tried installing AVG7.5free. I then updated windows and got something like 75 security updates, as well as the update of IE from 6.0 to 7.0. So, this is where I sit-having run regseeker, McAfee's removal tool, and many chats with McAfee's tech support, and deleting everything that had to do with McAfee. I wonder if some McAfee items aren't called something else and I missed them, because all I did was search the registry for "McAfee ", not mf mcf or anything else.
Thanks for your time and interest.

 

Ok Man here we go, there are a few steps to this keep this BBS page open so you can copy and paste (save typing and will be accurate).

Do in the exact order given here!

First off if Mcafee was really all gone you would be able to install AVG.

Norton is not the only one who digs in like an Armadillo!

Anyway a new mpr.exe was released 2 days ago download it at http://majorgeeks.com/McAfee_Consumer_Product_Removal_Tool_d5420.html
Do away with your old and run this one first before proceeding with below.

First backup Registry if using something like Erunt and even if you use Erunt http://www.larshederer.homepage.t-online.de/erunt/ do a System Restore point also.

As you do the below steps (you will see some file not found warnings etc) this is to be expected.

Do the below "MsiExec.exe" as too many files "may" have been removed for it to suceed. Most likely it will not run but try anyway.

Highlight and copy the following 2 lines

cd %SystemDir%
MsiExec.exe /X{E4DC62CE-5F95-11D6-B254-00C04FF4B435}

Then

Start-run
type cmd <enter> or click OK

paste the above MsiExec lines that you copied here

hit enter a couple of times to assure you are back at the prompt

success or not
type
exit <enter>

Download install and run MS Installer cleanup http://download.microsoft.com/download/e/9/d/e9d80355-7ab4-45b8-80e8-983a48d5e1bd/msicuu2.exe
Look for Mcafee and chose to remove them. If there are other items listed here that you positive you have uninstalled before you can remove them also.

Next:

Copy the text between the lines but not the lines

------------------------------------------------------------------------
cd\
attrib -h -s -r McAfee*.* /d /s
attrib -h -s -r AvSynMgr*.* /d /s
attrib -h -s -r McShield*.* /d /s
attrib -h -s -r NaiFiltr*.* /d /s
attrib -h -s -r VirusScan*.* /d /s
attrib -h -s -r AlogServ*.* /d /s
attrib -h -s -r Avconsole*.* /d /s
attrib -h -s -r Vshwin32*.* /d /s
attrib -h -s -r Avsmcpa*.* /d /s
attrib -h -s -r naifsrec*.* /d /s
attrib -h -s -r mckrnl*.* /d /s
attrib -h -s -r mcscan32*.* /d /s
attrib -h -s -r mcutil*.* /d /s
attrib -h -s -r vshield*.* /d /s
attrib -h -s -r vshinit*.* /d /s
attrib -h -s -r vsstat*.* /d /s
attrib -h -s -r webscanx*.* /d /s
attrib -h -s -r scan32*.* /d /s
del /f /s /q mcafee*.*
del /f /s /q AvSynMgr*.*
del /f /s /q McShield*.*
del /f /s /q NaiFiltr*.*
del /f /s /q VirusScan*.*
del /f /s /q AlogServ*.*
del /f /s /q Avconsole*.*
del /f /s /q Vshwin32*.*
del /f /s /q Avsmcpa*.*
del /f /s /q naifsrec*.*
del /f /s /q mckrnl*.*
del /f /s /q mcscan32*.*
del /f /s /q mcutil*.*
del /f /s /q vshield*.*
del /f /s /q vshinit*.*
del /f /s /q vsstat*.*
del /f /s /q webscanx*.*
del /f /s /q scan32*.*
------------------------------------------------------------------------

Once copied, open command prompt as above and paste to the prompt
hit enter if needed until back to prompt before exiting.

Now do a windows search, enable, Advanced options-Search System Folders-Search Hidden Files and folders-Search sub folders

Then file search for each of the following. You will need to chose only those that relate to Mcafee or Network Associates.
"DO NOT DELETE ALL" only those that are clearly Mcafee or network associates, if not clear then leave them alone.

Search for
network*.*
then
epolicy*.*
then
Orchestrator*.*

I warn you again if you can not tell that the found items are not related to Mcafee or Network Associates then leave them alone.

Once the above is finished do a Regseeker search for each of the below and remove all. Copy and paste these items to the Regseeker search
remove ALL found!

E4DC62CE-5F95-11D6-B254-00C04FF4B435
EC26CD4E59F56D112B45000CF44F4B53
McAfee
AvSynMgr
McShield
NaiFiltr
VirusScan
AlogServ
Avconsole
Vshwin32
Avsmcpa
naifsrec
mckrnl
mcscan32
vshield
shinit
webscanx
scan32

When this is complete

Reboot
run the mcpr program once again

then run a Regseeker general registry clean click to check Invalid Services, also a CCleaner http://www.ccleaner.com/download/builds/downloading-slim
Temp clean
Registry clean (Issues).

Only then try the AVG install.

Mike

 

Well Mike, I did it-twice, and McAfee is still there, interfering with the AVG installation. Thanks for your help. I did find quite a number of "hits" in running Regseeker, and was much encouraged while deleting perhaps a total of 25 instances of items to delete. But, even the updated MCPR.exe is still ending up with an incomplete uninstall.
Thanks again.

 

OK Skaler

Sorry so long getting back but for a couple of hours my posts dissapeared!

This should have cleared Mcafee.

Now I have doubts it is even Mcafee!

Can you give me the exact error AVG gives and does it specifically say it is Mcafee?

Lets get the book on your system.

Copy the next line and paste to cmd prompt

%SystemRoot%\system32\cmd.exe /c %windir%\system32\tasklist.exe /svc > "%USERPROFILE% "\Desktop\Tasklist.txt

A file tasklist.txt will appear on your desktop
paste it back to bbs.

Then

Go here Download http://www.runscanner.net/runscanner161/runscanner.exe

Run it
chose Expert
Click OK
Click start scan
wait till finished
click Save Log file

name it runscan

save to desktop

post contents to bbs

It is midnight headed for bed will be back early AM.

Mike

 

Hi Skaler

What happened when you ran the msiexec process?
And the Installer cleanup?

You said you ran twice, did the regseeker search come up clean the second run or were there entries that would not delete?

Lets see if any Mcafee services are still running.
Paste the following to cmd prompt then on desktop copy the contents of the ScQuery.txt back to us.

%SystemRoot%\system32\cmd.exe /c %windir%\system32\sc query type= service > "%USERPROFILE% "\Desktop\ScQuery.txt

Here are 2 more Mcafee cleanup tools download and run both then reboot to safe mode and run them again to be sure.

http://download.mcafee.com/products/licensed/cust_support_patches/MPFCleanupTool.exe

http://download.mcafee.com/products/licensed/cust_support_patches/VSCleanupTool.exe

If you get errors click OK and let the programs continue.

You may delete any of these .txt files (after posting them) from your Desktop as they can be recreated again as needed.

Mike

PS Don't wait for me to give up or quit on you, but if you don't want to pursue just let me know!

 

I appreciate all you're doing Mike. There's just a lot happening today, so I won't be able to tackle the problem till tomorrow, and I'll give you an update.
The first time I ran MSIE.exe, it said something to the effect that the program you're trying to delete is not intalled on your system. The first time I ran regseeker, I did it ineffectively: I copied and pasted all of the items(at once) you listed into the search box of regseeker, but didn't realize that it only took that first line, and ignored all the others. The second time I ran regseeker, I took the items one at a time. It is then that about 20 or so items were removed.
More to come....
Thanks again.

 

Hi Mike, here is the tasklist:
Image Name PID Services
========================= ====== =============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 644 N/A
csrss.exe 708 N/A
winlogon.exe 748 N/A
services.exe 792 Eventlog, PlugPlay
lsass.exe 804 PolicyAgent, ProtectedStorage, SamSs
ati2evxx.exe 972 Ati HotKey Poller
svchost.exe 988 DcomLaunch, TermService
svchost.exe 1040 RpcSs
svchost.exe 1144 AudioSrv, CryptSvc, Dhcp, dmserver, ERSvc,
EventSystem, FastUserSwitchingCompatibility,
helpsvc, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks, W32Time,
winmgmt, wscsvc, wuauserv
svchost.exe 1264 Dnscache
svchost.exe 1336 LmHosts, RemoteRegistry, WebClient
ati2evxx.exe 1464 N/A
spoolsv.exe 1644 Spooler
ehrecvr.exe 1772 ehRecvr
ehSched.exe 1792 ehSched
PRISMXL.SYS 1944 PrismXL
explorer.exe 256 N/A
svchost.exe 372 SSDPSRV
WLService.exe 520 WMP54Gv4SVC
WMP54Gv4.exe 556 N/A
mcrdsvc.exe 680 McrdSvc
dllhost.exe 1208 COMSysApp
alg.exe 1524 ALG
ehtray.exe 2144 N/A
readericon45G.exe 2152 N/A
CTSysVol.exe 2228 N/A
rundll32.exe 2236 N/A
msmsgs.exe 2296 N/A
MOM.exe 2304 N/A
ctfmon.exe 2320 N/A
bigfix.exe 2360 N/A
ehmsas.exe 2380 N/A
CCC.exe 2524 N/A
wmiprvse.exe 2960 N/A
svchost.exe 3552 HTTPFilter
iexplore.exe 3664 N/A
wuauclt.exe 1972 N/A
cmd.exe 3856 N/A
cmd.exe 3932 N/A
tasklist.exe 3944 N/A



I'll next download the runscanner and post its results.
Thanks.

 

Ok, Here's the runscan file:Runscanner logfile http://www.runscanner.net

* = signed file
- = file not found

000 General info
----------------
Computer name : YOUR-11C3B1ADEC
Creation time : 2/4/2008 5:44:53 PM
Hosts <> 127.0.0.1 : 0
Hosts file location : %SystemRoot%\System32\drivers\etc
IE version : 7.0.5730.13
OS : Microsoft Windows XP
OS Build : 2600
OS SP : Service Pack 2
RunScanner Version : 1.6.1.0
User Language : English (United States)
User rights : Administrator
Windows folder : C:\WINDOWS

001 Running processes
---------------------
* c:\windows\system32\alg.exe (Microsoft Corporation)
* c:\windows\system32\ati2evxx.exe (ATI Technologies Inc.)
* c:\windows\system32\ati2evxx.exe (ATI Technologies Inc.)
* c:\program files\bigfix\bigfix.exe (BigFix Inc.)
c:\program files\ati technologies\ati.ace\core-static\mom.exe (Advanced Micro Devices Inc.)
c:\program files\ati technologies\ati.ace\core-static\ccc.exe (ATI Technologies Inc.)
* c:\windows\system32\csrss.exe (Microsoft Corporation)
* c:\windows\system32\dllhost.exe (Microsoft Corporation)
* c:\windows\system32\ctfmon.exe (Microsoft Corporation)
c:\program files\creative\sbaudigy\surround mixer\ctsysvol.exe (Creative Technology Ltd)
* c:\windows\system32\svchost.exe (Microsoft Corporation)
* c:\windows\system32\svchost.exe (Microsoft Corporation)
* c:\windows\system32\svchost.exe (Microsoft Corporation)
* c:\windows\system32\svchost.exe (Microsoft Corporation)
* c:\windows\system32\svchost.exe (Microsoft Corporation)
* c:\windows\system32\svchost.exe (Microsoft Corporation)
* c:\windows\system32\svchost.exe (Microsoft Corporation)
* c:\program files\internet explorer\iexplore.exe (Microsoft Corporation)
* c:\windows\system32\lsass.exe (Microsoft Corporation)
* c:\windows\ehome\mcrdsvc.exe (Microsoft Corporation)
* c:\windows\ehome\ehmsas.exe (Microsoft Corporation)
* c:\windows\ehome\ehrecvr.exe (Microsoft Corporation)
* c:\windows\ehome\ehsched.exe (Microsoft Corporation)
* c:\windows\ehome\ehtray.exe (Microsoft Corporation)
c:\program files\common files\new boundary\prismxl\prismxl.sys (New Boundary Technologies, Inc.)
* c:\windows\system32\rundll32.exe (Microsoft Corporation)
* c:\temp\runscanner.exe (Runscanner.net)
* c:\windows\system32\services.exe (Microsoft Corporation)
* c:\windows\system32\spoolsv.exe (Microsoft Corporation)
c:\program files\digital media reader\readericon45g.exe (Alcor Micro, Corp.)
* c:\windows\explorer.exe (Microsoft Corporation)
* c:\program files\messenger\msmsgs.exe (Microsoft Corporation)
* c:\windows\system32\winlogon.exe (Microsoft Corporation)
* c:\windows\system32\smss.exe (Microsoft Corporation)
c:\program files\linksys wireless-g pci wireless network monitor\wlservice.exe (GEMTEKS)
* c:\windows\system32\wbem\wmiprvse.exe (Microsoft Corporation)
c:\program files\linksys wireless-g pci wireless network monitor\wmp54gv4.exe (Linksys)

002 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (+subkeys)
-----------------------------------------------------------------
c:\program files\creative\sbaudigy\surround mixer\ctsysvol.exe (Creative Technology Ltd)
c:\program files\digital media reader\readericon45g.exe (Alcor Micro, Corp.)
C:\WINDOWS\sminst\recguard.exe
C:\WINDOWS\creator\remind_xp.exe (SoftThinks)
c:\program files\ati technologies\ati.ace\core-static\clistart.exe
c:\windows\updreg.exe (Creative Technology Ltd.)

005 C:\Documents and Settings\All Users\Start Menu\Programs\Startup
-------------------------------------------------------------------
* c:\progra~1\bigfix\bigfix.exe (BigFix Inc.)

008 Default user \Software\Microsoft\Windows\CurrentVersion\Run (+subkeys)
--------------------------------------------------------------------------
- na

009 System user\Software\Microsoft\Windows\CurrentVersion\Run (+subkeys)
------------------------------------------------------------------------
- na

010 HKLM\SYSTEM\CurrentControlSet\Services (Services)
-----------------------------------------------------
c:\windows\system32\ati2sgag.exe (ATI Smart)
c:\program files\common files\new boundary\prismxl\prismxl.sys (PrismXL)
c:\program files\linksys wireless-g pci wireless network monitor\wlservice.exe (WMP54Gv4SVC)

011 HKLM\SYSTEM\CurrentControlSet\Services (drivers)
----------------------------------------------------
C:\WINDOWS\system32\drivers\aegisp.sys (AEGIS Protocol (IEEE 802.1x) v3.4.3.0)
c:\windows\system32\bcm42rly.sys (BCM42RLY)
c:\windows\system32\drivers\cdr4_xp.sys (Cdr4_xp)
c:\windows\system32\drivers\cdralw2k.sys (Cdralw2k)
- c:\windows\system32\drivers\changer.sys (Changer)
c:\windows\system32\gtndis5.sys (GTNDIS5 NDIS Protocol Driver)
C:\WINDOWS\system32\drivers\iastor.sys (iaStor)
- c:\windows\system32\drivers\lbrtfdc.sys (lbrtfdc)
- c:\windows\system32\drivers\pcidump.sys (PCIDump)
- c:\windows\system32\drivers\pdcomp.sys (PDCOMP)
- c:\windows\system32\drivers\pdframe.sys (PDFRAME)
- c:\windows\system32\drivers\pdreli.sys (PDRELI)
- c:\windows\system32\drivers\pdrframe.sys (PDRFRAME)
- c:\windows\system32\drivers\alcxwdm.sys (Service for Realtek AC97 Audio (WDM))
- c:\windows\system32\drivers\wdica.sys (WDICA)

031 HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
-------------------------------------------
c:\program files\common files\microsoft shared\information retrieval\msitss.dll (Microsoft Corporation) {0A9007C0-4076-11D3-8789-0000F8105754}

042 HKLM\Software\Microsoft\Internet Explorer\Extensions
--------------------------------------------------------
GUID / CLSID not found {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}

052 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
----------------------------------------------------------------------------------
c:\windows\system32\bae.dll (Gateway Inc.) {CA6319C0-31B7-401E-A518-A07C3DB8F777}

061 HKLM-HCKU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
---------------------------------------------------------------------------------
c:\program files\ati technologies\ati.ace\core-static\atiacmxx.dll {5E2121EE-0300-11D4-8D3B-444553540000}
- deskpan.dll {42071714-76d4-11d1-8b24-00a0c9068ff3}
c:\windows\system32\shellvrtf.dll (XSS) {7F67036B-66F1-411A-AD85-759FB9C5B0DB}

100 Internet Explorer settings
------------------------------
ShellNext HKCU : http://www.gateway.com/g/startpage.html?Ch=Retail&Br=GTW&Loc=ENG_US&Sys=DTP&M=GT5056
Start Page HKCU : http://www.comcast.net/home.html

104 HKLM\Software\Microsoft\Code Store Database\Distribution Units
------------------------------------------------------------------
c:\program files\java\jre1.5.0_02\bin\npjpi150_02.dll (Sun Microsystems, Inc.) {8AD9C840-044E-11D1-B3E9-00805F499D93}
c:\program files\java\jre1.5.0_02\bin\npjpi150_02.dll (Sun Microsystems, Inc.) {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}
* c:\windows\system32\macromed\flash\flash9e.ocx (Adobe Systems, Inc.) {D27CDB6E-AE6D-11CF-96B8-444553540000}

105 HKCU\Software\Microsoft\Internet Explorer\MenuExt
-----------------------------------------------------
E&xport to Microsoft Excel : res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

 

And here's the scQuery te
SERVICE_NAME: ALG
DISPLAY_NAME: Application Layer Gateway Service
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Ati HotKey Poller
DISPLAY_NAME: Ati HotKey Poller
TYPE : 110 WIN32_OWN_PROCESS (interactive)
STATE : 4 RUNNING
(NOT_STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: AudioSrv
DISPLAY_NAME: Windows Audio
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: COMSysApp
DISPLAY_NAME: COM+ System Application
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: CryptSvc
DISPLAY_NAME: Cryptographic Services
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: DcomLaunch
DISPLAY_NAME: DCOM Server Process Launcher
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Dhcp
DISPLAY_NAME: DHCP Client
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: dmserver
DISPLAY_NAME: Logical Disk Manager
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Dnscache
DISPLAY_NAME: DNS Client
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: ehRecvr
DISPLAY_NAME: Media Center Receiver Service
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: ehSched
DISPLAY_NAME: Media Center Scheduler Service
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: ERSvc
DISPLAY_NAME: Error Reporting Service
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Eventlog
DISPLAY_NAME: Event Log
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(NOT_STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: EventSystem
DISPLAY_NAME: COM+ Event System
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: FastUserSwitchingCompatibility
DISPLAY_NAME: Fast User Switching Compatibility
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: helpsvc
DISPLAY_NAME: Help and Support
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: HTTPFilter
DISPLAY_NAME: HTTP SSL
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: lanmanserver
DISPLAY_NAME: Server
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: lanmanworkstation
DISPLAY_NAME: Workstation
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: LmHosts
DISPLAY_NAME: TCP/IP NetBIOS Helper
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: McrdSvc
DISPLAY_NAME: Media Center Extender Service
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Netman
DISPLAY_NAME: Network Connections
TYPE : 120 WIN32_SHARE_PROCESS (interactive)
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Nla
DISPLAY_NAME: Network Location Awareness (NLA)
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: PlugPlay
DISPLAY_NAME: Plug and Play
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(NOT_STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: PolicyAgent
DISPLAY_NAME: IPSEC Services
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: PrismXL
DISPLAY_NAME: PrismXL
TYPE : 110 WIN32_OWN_PROCESS (interactive)
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: ProtectedStorage
DISPLAY_NAME: Protected Storage
TYPE : 120 WIN32_SHARE_PROCESS (interactive)
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: RasMan
DISPLAY_NAME: Remote Access Connection Manager
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: RemoteRegistry
DISPLAY_NAME: Remote Registry
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: RpcSs
DISPLAY_NAME: Remote Procedure Call (RPC)
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: SamSs
DISPLAY_NAME: Security Accounts Manager
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Schedule
DISPLAY_NAME: Task Scheduler
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: seclogon
DISPLAY_NAME: Secondary Logon
TYPE : 120 WIN32_SHARE_PROCESS (interactive)
STATE : 4 RUNNING
(STOPPABLE,PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: SENS
DISPLAY_NAME: System Event Notification
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: SharedAccess
DISPLAY_NAME: Windows Firewall/Internet Connection Sharing (ICS)
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: ShellHWDetection
DISPLAY_NAME: Shell Hardware Detection
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Spooler
DISPLAY_NAME: Print Spooler
TYPE : 110 WIN32_OWN_PROCESS (interactive)
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: srservice
DISPLAY_NAME: System Restore Service
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: SSDPSRV
DISPLAY_NAME: SSDP Discovery Service
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: TapiSrv
DISPLAY_NAME: Telephony
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: TermService
DISPLAY_NAME: Terminal Services
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Themes
DISPLAY_NAME: Themes
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: TrkWks
DISPLAY_NAME: Distributed Link Tracking Client
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: W32Time
DISPLAY_NAME: Windows Time
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: WebClient
DISPLAY_NAME: WebClient
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: winmgmt
DISPLAY_NAME: Windows Management Instrumentation
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: WMP54Gv4SVC
DISPLAY_NAME: WMP54Gv4SVC
TYPE : 110 WIN32_OWN_PROCESS (interactive)
STATE : 4 RUNNING
(STOPPABLE,PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: wscsvc
DISPLAY_NAME: Security Center
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: wuauserv
DISPLAY_NAME: Automatic Updates
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
xt: