Optimizing an Intel Dual Core E6300 1.8Ghz Machine

Alinator
Alinator
Joined: 8 May 05
Posts: 927
Credit: 9352143
RAC: 0

All righty then... From

All righty then...

From looking at the performance metrics now, your's seem to be in the ball park for a typical daily driver.

Most likely your issue isn't being caused by other background processes grabbing time from BOINC, or some kind of infection.

So the question is now why isn't you output comparable to to Mr. Gergels E6300.

Some possibilities:

1.) It's being throttled back when idle to save power. If it was being done from the BIOS, Windows may not give an indication of that.

2.) If it's a brandname machine, or even a homebuilt, a lot of times certain operating parameters are set for maximum stability rather than maximum performance. Memeory timings are one which can have a big effect.

3.) Do you have Integrated Graphics, or are you using a separate graphics card?

4.) His is in fact overclocked, and your's is fine running stock.

Alinator

FWIW I did a search for E6300's in the Top 1000 computers, and you definitely seem to be taking roughly 2000 seconds more than the others I looked at. So something screwy's going on since I think it's unlikely the 25-30 or so I looked are all overclocked.

Jeff
Jeff
Joined: 17 Jan 06
Posts: 19
Credit: 150640
RAC: 0

Alinator, Thank you for

Message 61659 in response to message 61658

Alinator,

Thank you for taking the time to look into this.

Here are my Intel PC's specs

Windows XP SP2
Intel Core 2 Duo CPU @ 1.86GHz
Asus P5B Deluxe Wifi-AP Motherboard
2Gb AData DDR-II 800MHz
Asus 7300GT 256mb NVida PC-Express Graphics Card
2x 320GB Seagate 16mb SATA II HDD
1x External 320GB Seagate 16mb SATA II HDD
1x 250GB Maxtor
S12 430W Seasonic PSU

This was a DIY machine, and still tinkering with it.

Just for grins and giggles, I went to SETI and Rosetta which I also run just for comparison. (And just deleted them all in an edit because I realized all the numbers were the same.) And then for more grins and giggles, I went to look at the AMD chip. Which runs on another PC I have. That PC only has 512MB of RAM and a Radeon 9600SE 256mb graphics card.

------------------------

AMD results for Einstein:
CPU type AuthenticAMD
AMD Athlon(tm) XP 2500+ [x86 Family 6 Model 10 Stepping 0] [fpu tsc sse 3dnow mmx]
Number of CPUs 1
Operating System Microsoft Windows XP
Professional Edition, Service Pack 2, (05.01.2600.00)
Memory 511.48 MB
Cache 976.56 KB
Swap space 1249.97 MB
Total disk space 13.98 GB
Free Disk Space 1.58 GB
Measured floating point speed 1033.14 million ops/sec
Measured integer speed 1729.28 million ops/sec
Average upload rate 3.49 KB/sec
Average download rate Unknown
Average turnaround time 1.54 days
Maximum daily WU quota per CPU 72/day
Results 5
Number of times client has contacted server 2009
Last time contacted server 22 Mar 2007 20:28:41 UTC
% of time BOINC client is running 78.2429 %
While BOINC running, % of time work is allowed 81.6962 %
Average CPU efficiency 0.451344
Result duration correction factor 0.444124

One thing I will say, is that this chip is easily and a really good chip to overclock, which I am planning to do. I have been told that I can OC this chip to 2.5GHz with no change in cooling.

So.. at this point where do I go?

Jeff

Svenie25
Svenie25
Joined: 21 Mar 05
Posts: 139
Credit: 2436862
RAC: 0

My E6300 is overclocked to

My E6300 is overclocked to 3.3 GHz. It has an Artic Cooler 7. Up to now no problems with the temperatures. But it isn´t summer right now. ;) It has an RAC of 1000 and Measured floating point speed 3079.88 million ops/sec
Measured integer speed 6407.87 million ops/sec .
It doesn´t run 24/7.

Alinator
Alinator
Joined: 8 May 05
Posts: 927
Credit: 9352143
RAC: 0

RE: Alinator, Thank you

Message 61661 in response to message 61659

Quote:

Alinator,

Thank you for taking the time to look into this.

So.. at this point where do I go?

Jeff

OK, you seem to be running some solid hardware here. I searched over on SAH where there's been a lot talking about OC'ing Quads lately, and I didn't see any showstoppers about the P5B. I couldn't reach the AData site today, so I couldn't get any specific information about your RAM timings. However, the review sites I looked at generally seemed to be of the opinion they were decent units and a bargain to boot in the high end memory market.

I know ASUS has pretty good documentation on their stuff, and the RAM should have basic recommendations included with it. So a thorough review of that should help make sure all your ducks are in a row regarding BIOS settings. Depending on how old the P5B is, checking for BIOS updates might not be a bad idea either.

Since you do run a wide variety of projects, one easy thing to try would be to run each of them in turn by themselves as a test. This would tell you if CPU affinity issues are coming into play. This is the factor Arche86 was talking about. IIRC, this was a real player on HT P4's but my take was it's much less of a factor on true dual cores and quads. In your case though it could come into play as BOINC switches from one project running to a different one, and could account for the CPU time discrepancy. This is because as the CPU shuffles things in and out of the main memory and the L1 and L2 caches, the clock is running but it's not really doing any calculating on the results just getting everything organized to start doing the "real" work.

HTH,

Alinator

Boris Gergel
Boris Gergel
Joined: 5 Jan 06
Posts: 3
Credit: 101593464
RAC: 0

RE: All righty

Message 61662 in response to message 61658

Quote:

All righty then...

From looking at the performance metrics now, your's seem to be in the ball park for a typical daily driver.

Most likely your issue isn't being caused by other background processes grabbing time from BOINC, or some kind of infection.

So the question is now why isn't you output comparable to to Mr. Gergels E6300.

Some possibilities:

1.) It's being throttled back when idle to save power. If it was being done from the BIOS, Windows may not give an indication of that.

2.) If it's a brandname machine, or even a homebuilt, a lot of times certain operating parameters are set for maximum stability rather than maximum performance. Memeory timings are one which can have a big effect.

3.) Do you have Integrated Graphics, or are you using a separate graphics card?

4.) His is in fact overclocked, and your's is fine running stock.

Alinator

FWIW I did a search for E6300's in the Top 1000 computers, and you definitely seem to be taking roughly 2000 seconds more than the others I looked at. So something screwy's going on since I think it's unlikely the 25-30 or so I looked are all overclocked.


Boris Gergel
Boris Gergel
Joined: 5 Jan 06
Posts: 3
Credit: 101593464
RAC: 0

This is Mr. Gergel; "Boris"

Message 61663 in response to message 61658

This is Mr. Gergel; "Boris" will do as well.

Sorry for having posted an empty reply first. I'm new to this board.

You're referencing my machine as somewhat fast. Well, it's my self-made PC with following specs:

Windows XP SP2
Intel Core 2 Duo CPU @ 1.86GHz
Asus P5B-VM Motherboard with Intel G965/ICH8
2x1GB PQI DDR2 800MHz
320GB + 250GB WD 16MB SATA II HDD

Absolutely no tuning or overclocking. It's simply my working horse and I'm working with Office, Photohop, Corel, Winfax, Nero etc. all day long. I never switch the gear off. Reset about twice a week. Einstein doesn't seem to influence anything.

Have a look at my other self-made machine. Here the specs:

Windows XP SP2
Intel Core 2 Duo CPU @ 1.86GHz
Foxconn 9657AA-8EKRS Motherboard with Intel P965/ICH8
2x1GB Goodram DDR2 667MHz
160GB Seagate 16MB SATA II HDD

Although the RAMs are slower, the machine runs even faster than the first one without any special settings.

____________
Cheers,
Boris Gergel.

Alinator
Alinator
Joined: 8 May 05
Posts: 927
Credit: 9352143
RAC: 0

OK and welcome to the EAH NC

OK and welcome to the EAH NC forum and thanks for posting some details about your hosts, Boris. When I was scanning for E6300's, yours were right in line with the rest of the ones I looked at (about 25-30 or so).

@ Jeff: Boris posting his details highlighted a difference between his P5B and yours which is yours is the wireless version.

Another relatively easy thing to try is to disable Wireless Zero Configuration in Windows. This has been known to cause issues and system slowdowns in some cases. Sorry, I should have seen that before.

Alinator

Jeff
Jeff
Joined: 17 Jan 06
Posts: 19
Credit: 150640
RAC: 0

Ok, hi guys, sorry for my

Message 61665 in response to message 61664

Ok, hi guys, sorry for my absence these last few days.

How do you disable the wireless zero configuration? I do not use the wireless feature of my motherboard right now, I actually sort of regret buying the wi-fi addition, I should have just bought the deluxe. But anyway...

Also how do I add the climate project ot my bonic stats? I meant to ask this earlier.

Ok here's whats been happening the last few days. I have been OCing my CPU. I went from 1.86 to 2.33 to now 2.8Ghz. Only a couple of exhaust fans, CPU runs around 50C. I am really disappointed, although I am still tweaking things, I have seen virtually no increase in productivity on Boinc. I have contacted A-Data for the RAM settings because now I am overclocking and need that information to try to make my machine a little more stable. I am still waiting for them to get back to me. Here are the new numbers.

CPU type GenuineIntel
Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz [x86 Family 6 Model 15 Stepping 2] [fpu tsc sse sse2 mmx]
Number of CPUs 2
Operating System Microsoft Windows XP
Professional Edition, Service Pack 2, (05.01.2600.00)
Memory 2047.11 MB
Cache 976.56 KB
Swap space 2665.57 MB
Total disk space 117.19 GB
Free Disk Space 108.08 GB
Measured floating point speed 2008.24 million ops/sec
Measured integer speed 4170.58 million ops/sec
Average upload rate 4.7 KB/sec
Average download rate 380.76 KB/sec
Average turnaround time 0.35 days
Maximum daily WU quota per CPU 72/day
Results 32
Number of times client has contacted server 594
Last time contacted server 27 Mar 2007 2:40:45 UTC
% of time BOINC client is running 90.3644 %
While BOINC running, % of time work is allowed 91.1373 %
Average CPU efficiency 0.964694
Result duration correction factor 0.348809

By the way, what I have done is increased the amount of time spent per prject, up from 2 hours to now 6 hours before switching. 6 hours seems like a decent number because most projects I am getting are between 2-3 hours, though some are over 5-10. I am hoping this is going to help. But a question... EVEN if I were to run only one project, everytime it finished and downloaded another the CPU would still have to switch things around right? So the result would be the same as if I were switching from project to project?

Jeff

Alinator
Alinator
Joined: 8 May 05
Posts: 927
Credit: 9352143
RAC: 0

This should do it: Disable

This should do it:

Disable WZC Service

Also, if you aren't using wireless right now you can probably disable the wireless hardware in the BIOS as well. Never hurts to turn stuff off you're not using.

Regarding task switching overhead, yes starting a new result, or returning to a result when it's time slice come up to run again always involves shuffling stuff back into the caches and that overhead. The general idea of the CPU affinity and other tricks is to minimize that and the effects other taks you're running have on overhead when Windows decides it needs to use the CPU's more.

Increasing the time slice value can help, and it made a pretty significant difference on my AMD "slugs". Although I would expect it to be much less noticable on later Athlons and Pentium/Core x processors.

Alinator

BTW, it just dawned on me you said you're trying an OC, and I sure can see a difference! It looks like you knocked 4 or 5 thousands sec per result off those last few it pushed through. ;-)

Jeff
Jeff
Joined: 17 Jan 06
Posts: 19
Credit: 150640
RAC: 0

Before I do anything I would

Message 61667 in response to message 61666

Before I do anything I would like you guys to take a look at the following log to tell me if you see anything strange or out of place, maybe you can find my wi-fi working under there.

Logfile of HijackThis v1.99.1
Scan saved at 5:19:20 PM, on 3/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\\WINDOWS\\System32\\smss.exe
C:\\WINDOWS\\system32\\winlogon.exe
C:\\WINDOWS\\system32\\services.exe
C:\\WINDOWS\\system32\\lsass.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\System32\\svchost.exe
c:\\Program Files\\Common Files\\Symantec Shared\\ccSetMgr.exe
c:\\Program Files\\Common Files\\Symantec Shared\\ccEvtMgr.exe
c:\\Program Files\\Common Files\\Symantec Shared\\ccProxy.exe
c:\\Program Files\\Common Files\\Symantec Shared\\SNDSrvc.exe
c:\\Program Files\\Common Files\\Symantec Shared\\SPBBC\\SPBBCSvc.exe
C:\\Program Files\\Common Files\\Symantec Shared\\CCPD-LC\\symlcsvc.exe
C:\\WINDOWS\\system32\\spoolsv.exe
C:\\Program Files\\Symantec\\LiveUpdate\\ALUSchedulerSvc.exe
D:\\Program Files\\Norton Internet Secuirty 20006\\Norton AntiVirus\\navapsvc.exe
C:\\WINDOWS\\system32\\nvsvc32.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\Explorer.EXE
C:\\Program Files\\Analog Devices\\SoundMAX\\Smax4.exe
C:\\Program Files\\Analog Devices\\Core\\smax4pnp.exe
C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe
C:\\Program Files\\ASUS\\AASP\\1.00.09\\aaCenter.exe
C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATIACP.EXE
C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe
C:\\WINDOWS\\system32\\CTFMON.EXE
D:\\Program Files\\Adobe\\Acrobat 6.0\\Distillr\\acrotray.exe
c:\\Program Files\\Common Files\\Symantec Shared\\Security Console\\NSCSRVCE.EXE
C:\\Program Files\\ASUS\\AI Suite\\AiNap\\AiNap.exe
C:\\Program Files\\MSN Messenger\\usnsvc.exe
D:\\Program Files\\BOINC\\boincmgr.exe
D:\\Program Files\\BOINC\\boinc.exe
C:\\PROGRA~1\\MICROS~2\\Office10\\OUTLOOK.EXE
C:\\Program Files\\MSN Messenger\\msnmsgr.exe
C:\\Program Files\\Skype\\Phone\\Skype.exe
C:\\Program Files\\Skype\\Plugin Manager\\SkypePM.exe
D:\\Program Files\\Opera\\Opera.exe
D:\\Program Files\\Mozilla Firefox\\firefox.exe
D:\\Program Files\\BOINC\\projects\\setiathome.berkeley.edu\\setiathome_5.15_windows_intelx86.exe
D:\\Program Files\\Adobe\\Acrobat 6.0\\Acrobat\\Acrobat.exe
D:\\Program Files\\BOINC\\projects\\boinc.bakerlab.org_rosetta\\rosetta_5.54_windows_intelx86.exe
C:\\Program Files\\Messenger\\msmsgs.exe
D:\\Program Files\\WinRAR\\WinRAR.exe
C:\\DOCUME~1\\111\\LOCALS~1\\Temp\\Rar$EX00.016\\HijackThis.exe

O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\\Program Files\\Common Files\\Symantec Shared\\AdBlocking\\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - D:\\Program Files\\Norton Internet Secuirty 20006\\Norton AntiVirus\\NavShExt.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - D:\\Program Files\\Adobe\\Acrobat 6.0\\Acrobat\\AcroIEFavClient.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\\Program Files\\EPSON\\EPSON Web-To-Page\\EPSON Web-To-Page.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - c:\\Program Files\\Common Files\\Symantec Shared\\AdBlocking\\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - D:\\Program Files\\Norton Internet Secuirty 20006\\Norton AntiVirus\\NavShExt.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\\Program Files\\Adobe\\Acrobat 6.0\\Acrobat\\AcroIEFavClient.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\\Program Files\\EPSON\\EPSON Web-To-Page\\EPSON Web-To-Page.dll
O4 - HKLM\\..\\Run: [SoundMAX] "C:\\Program Files\\Analog Devices\\SoundMAX\\Smax4.exe" /tray
O4 - HKLM\\..\\Run: [NvCplDaemon] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup
O4 - HKLM\\..\\Run: [nwiz] nwiz.exe /install
O4 - HKLM\\..\\Run: [NvMediaCenter] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\\..\\Run: [SoundMAXPnP] C:\\Program Files\\Analog Devices\\Core\\smax4pnp.exe
O4 - HKLM\\..\\Run: [ccApp] "c:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe"
O4 - HKLM\\..\\Run: [AsusServiceProvider] C:\\Program Files\\ASUS\\AASP\\1.00.09\\aaCenter.exe
O4 - HKLM\\..\\Run: [MSConfig] C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\MSConfig.exe /auto
O4 - HKLM\\..\\Run: [EPSON Stylus CX3700 Series] C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATIACP.EXE /P26 "EPSON Stylus CX3700 Series" /O6 "USB001" /M "Stylus CX3700"
O4 - HKLM\\..\\Run: [SunJavaUpdateSched] "C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe"
O4 - HKLM\\..\\Run: [IMJPMIG8.1] "C:\\WINDOWS\\IME\\imjp8_1\\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\\..\\Run: [IMEKRMIG6.1] C:\\WINDOWS\\ime\\imkr6_1\\IMEKRMIG.EXE
O4 - HKLM\\..\\Run: [MSPY2002] C:\\WINDOWS\\system32\\IME\\PINTLGNT\\ImScInst.exe /SYNC
O4 - HKLM\\..\\Run: [PHIME2002ASync] C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /SYNC
O4 - HKLM\\..\\Run: [PHIME2002A] C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /IMEName
O4 - HKCU\\..\\Run: [Skype] "C:\\Program Files\\Skype\\Phone\\Skype.exe" /nosplash /minimized
O4 - HKCU\\..\\Run: [ctfmon.exe] C:\\WINDOWS\\system32\\ctfmon.exe
O4 - HKCU\\..\\Run: [msnmsgr] "C:\\Program Files\\MSN Messenger\\msnmsgr.exe" /background
O4 - Global Startup: Acrobat Assistant.lnk = D:\\Program Files\\Adobe\\Acrobat 6.0\\Distillr\\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\\Program Files\\Common Files\\Adobe\\Calibration\\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\\Program Files\\Microsoft Office\\Office10\\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\\PROGRA~1\\MICROS~2\\Office10\\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_11\\bin\\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_11\\bin\\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\\PROGRA~1\\Skype\\Phone\\IEPlugin\\SKYPEI~1.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{62F0ADA4-298C-4203-86A6-644B5525B795}: NameServer = 210.200.211.193 210.200.211.225
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\\PROGRA~1\\COMMON~1\\Skype\\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\\WINDOWS\\SYSTEM32\\WgaLogon.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\\Program Files\\Symantec\\LiveUpdate\\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\\Program Files\\Common Files\\Symantec Shared\\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - D:\\Program Files\\Norton Internet Secuirty 20006\\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\\Program Files\\Common Files\\Symantec Shared\\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\\Program Files\\Common Files\\Symantec Shared\\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - D:\\Program Files\\Norton Internet Secuirty 20006\\comHost.exe
O23 - Service: iPod Service - Apple Inc. - C:\\Program Files\\iPod\\bin\\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\\PROGRA~1\\Symantec\\LIVEUP~1\\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - D:\\Program Files\\Norton Internet Secuirty 20006\\Norton AntiVirus\\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - c:\\Program Files\\Common Files\\Symantec Shared\\Security Console\\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\\WINDOWS\\system32\\nvsvc32.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - D:\\Program Files\\Norton Internet Secuirty 20006\\Norton AntiVirus\\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\\Program Files\\Common Files\\Symantec Shared\\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\\Program Files\\Common Files\\Symantec Shared\\SPBBC\\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\\Program Files\\Common Files\\Symantec Shared\\CCPD-LC\\symlcsvc.exe

And also this test as below:

L2MFIX find log 032106
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify]

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\WgaLogon]
"Logon"="WLEventLogon"
"Logoff"="WLEventLogoff"
"Startup"="WLEventStartup"
"Shutdown"="WLEventShutdown"
"StartScreenSaver"="WLEventStartScreenSaver"
"StopScreenSaver"="WLEventStopScreenSaver"
"Lock"="WLEventLock"
"Unlock"="WLEventUnlock"
"StartShell"="WLEventStartShell"
"PostShell"="WLEventPostShell"
"Disconnect"="WLEventDisconnect"
"Reconnect"="WLEventReconnect"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000000
"SafeMode"=dword:00000001
"MaxWait"=dword:ffffffff
"DllName"=hex(2):57,00,67,00,61,00,4c,00,6f,00,67,00,6f,00,6e,00,2e,00,64,00,\\
6c,00,6c,00,00,00
"Event"=dword:00000000
"EulaAccepted"=dword:00000001

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\WgaLogon\\Settings]
"Data"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,\\
00,00,a2,6e,ec,e9,31,10,59,4b,93,70,08,49,5e,8b,62,47,04,00,00,00,04,00,00,\\
00,53,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,eb,b3,85,27,e8,b4,7c,0c,\\
8e,73,4f,b9,54,16,89,7c,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,d0,\\
2d,9d,86,e0,85,88,ae,d5,a9,f2,eb,ce,bd,34,5f,b0,01,00,00,f9,07,7a,3c,7d,a4,\\
27,52,fb,e0,dc,d7,b2,94,a9,b1,6c,e7,d8,8f,79,fd,7f,36,f4,06,d6,65,5d,00,e6,\\
31,dd,79,11,73,8b,b3,19,06,0c,8b,4b,ea,6e,5e,00,14,34,27,3a,a9,bd,fc,c9,f4,\\
b5,b8,45,9c,b2,01,b6,41,15,67,68,e0,2a,74,7c,99,3b,c8,9c,53,1b,2e,ef,20,fe,\\
6a,f6,b5,78,c9,5a,29,d9,af,16,1d,5d,3c,d7,b2,a7,6d,c0,b5,f4,9a,c4,aa,e5,30,\\
63,36,32,fe,b8,d0,3f,5c,99,53,50,e1,08,01,6b,3a,b5,38,11,f2,c4,bc,e2,3b,ea,\\
67,af,ba,2a,ff,9c,d2,ef,e4,c5,d3,15,3d,54,59,6e,a6,49,fc,23,bc,fc,7e,da,10,\\
af,f1,64,05,16,f8,e0,86,f6,72,06,c9,ea,79,79,b4,23,14,c7,11,74,48,f9,b6,8a,\\
d4,7d,7d,e0,24,8e,33,3f,81,3a,53,da,97,a0,7b,f6,5f,f3,f5,2c,00,a2,95,30,6c,\\
0f,a5,7b,d2,96,1e,8a,74,d0,b1,11,73,64,70,3f,07,a5,fc,8f,07,cd,0a,a9,9d,d0,\\
47,1d,26,9c,f4,78,f7,24,7c,a7,d0,2b,37,41,7c,d8,d1,f9,e5,72,92,46,67,2f,66,\\
8d,16,ac,3d,87,cb,12,6d,29,c1,b2,e0,ae,98,3f,46,57,26,1e,9d,8a,5e,1f,52,e8,\\
c9,88,6b,07,e5,ff,77,97,9a,06,4d,c9,f5,0c,3e,c8,0b,fe,81,c6,c8,e7,8d,9c,3f,\\
a0,c2,41,bf,b8,5c,4c,f3,03,94,f8,a9,ae,3b,72,05,74,ae,a7,bf,50,36,9f,a8,e1,\\
08,ba,86,28,68,1a,51,56,0c,39,a8,8f,2f,94,cc,bd,29,1f,23,51,fb,55,5a,8b,82,\\
37,60,77,66,fd,61,01,99,8d,b1,37,3f,87,b3,6a,f7,c2,d7,46,60,fc,85,74,73,8a,\\
27,fb,dc,30,31,49,5e,16,ab,99,ba,1c,75,4d,76,0c,83,e8,fd,13,f5,d6,c1,7c,0c,\\
7b,ee,3e,c7,41,f2,23,2e,9d,85,b2,59,a4,24,0c,22,e3,3a,fb,23,6b,89,f1,e1,ba,\\
65,14,00,00,00,54,56,38,0a,30,62,ae,e7,a6,34,25,2f,17,08,0a,19,e4,da,fa,bf

[HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\Post Platform]
"SV1"=""

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Approved]
"{00022613-0000-0000-C000-000000000046}"="Multimedia File Property Sheet"
"{176d6597-26d3-11d1-b350-080036a75b03}"="ICM Scanner Management"
"{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="NTFS Security Page"
"{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="OLE Docfile Property Page"
"{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Shell extensions for sharing"
"{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension"
"{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Display Adapter CPL Extension"
"{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Display Monitor CPL Extension"
"{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Display Panning CPL Extension"
"{4E40F770-369C-11d0-8922-00A024AB2DBB}"="DS Security Page"
"{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Compatibility Page"
"{56117100-C0CD-101B-81E2-00AA004AE837}"="Shell Scrap DataHandler"
"{59099400-57FF-11CE-BD94-0020AF85B590}"="Disk Copy Extension"
"{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Shell extensions for Microsoft Windows Network objects"
"{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="ICM Monitor Management"
"{675F097E-4C4D-11D0-B6C1-0800091AA605}"="ICM Printer Management"
"{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Shell extensions for file compression"
"{77597368-7b15-11d0-a0c2-080036af3f03}"="Web Printer Shell Extension"
"{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
"{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Encryption Context Menu"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="Briefcase"
"{88895560-9AA2-1069-930E-00AA0030EBC8}"="HyperTerminal Icon Ext"
"{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
"{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="ICC Profile"
"{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Printers Security Page"
"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Shell extensions for sharing"
"{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
"{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Crypto PKO Extension"
"{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Crypto Sign Extension"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Network Connections"
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Network Connections"
"{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="Scanners & Cameras"
"{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="Scanners & Cameras"
"{905667aa-acd6-11d2-8080-00805f6596d2}"="Scanners & Cameras"
"{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="Scanners & Cameras"
"{83bbcbf3-b28a-4919-a5aa-73027445d672}"="Scanners & Cameras"
"{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension"
"{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Shell extensions for Windows Script Host"
"{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Microsoft Data Link"
"{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
"{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Scheduled Tasks"
"{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}"="Set Program Access and Defaults"
"{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension"
"{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Taskbar and Start Menu"
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Search"
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Help and Support"
"{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Help and Support"
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Run..."
"{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet"
"{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="E-mail"
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Fonts"
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Administrative Tools"
"{596AB062-B4D2-4215-9F74-E9109B0A8153}"="Previous Versions Property Page"
"{9DB7A13C-F208-4981-8353-73CC61AE2783}"="Previous Versions"
"{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler"
"{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler"
"{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler"
"{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler"
"{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler"
"{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor"
"{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Microsoft Internet Toolbar"
"{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="Download Status"
"{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Augmented Shell Folder"
"{6413BA2C-B461-11d1-A18A-080036B11A03}"="Augmented Shell Folder 2"
"{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
"{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Microsoft BrowserBand"
"{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Search Band"
"{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="In-pane search"
"{07798131-AF23-11d1-9111-00A0C98BA67D}"="Web Search"
"{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Registry Tree Options Utility"
"{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Address"
"{A08C11D2-A228-11d0-825B-00AA005B4383}"="Address EditBox"
"{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Microsoft AutoComplete"
"{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
"{6756A641-DE71-11d0-831B-00AA005B4383}"="MRU AutoComplete List"
"{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Custom MRU AutoCompleted List"
"{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible"
"{acf35015-526e-4230-9596-becbe19f0ac9}"="Track Popup Bar"
"{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Microsoft History AutoComplete List"
"{03C036F1-A186-11D0-824A-00AA005B4383}"="Microsoft Shell Folder AutoComplete List"
"{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Microsoft Multiple AutoComplete List Container"
"{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Shell Band Site Menu"
"{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
"{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Shell DeskBar"
"{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
"{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="User Assist"
"{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="Global Folder Settings"
"{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
"{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
"{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
"{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture"
"{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
"{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="History"
"{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
"{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="IE4 Suite Splash Screen"
"{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
"{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
"{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
"{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="The Internet"
"{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
"{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band"
"{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{88C6C381-2E85-11D0-94DE-444553540000}"="ActiveX Cache Folder"
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
"{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="Subscription Folder"
"{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
"{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
"{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
"{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
"{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
"{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
"{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
"{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Shell Application Manager"
"{0B124F8F-91F0-11D1-B8B5-006008059382}"="Installed Apps Enumerator"
"{CFCCC7A0-A282-11D1-9082-006008059382}"="Darwin App Publisher"
"{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs"
"{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory"
"{00E7B358-F65B-4dcf-83DF-CD026B94BFD4}"="Autoplay for SlideShow"
"{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="GDI+ file thumbnail extractor"
"{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Summary Info Thumbnail handler (DOCFILES)"
"{EAB841A0-9550-11cf-8C16-00805F1408F3}"="HTML Thumbnail Extractor"
"{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler"
"{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Web Publishing Wizard"
"{add36aa8-751a-4579-a266-d66f5202ccbb}"="Print Ordering via the Web"
"{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Shell Publishing Wizard Object"
"{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Get a Passport Wizard"
"{7A9D77BD-5403-11d2-8785-2E0420524153}"="User Accounts"
"{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
"{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
"{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Channel File"
"{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Channel Shortcut"
"{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
"{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
"{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
"{692F0339-CBAA-47e6-B5B5-3B84DB604E87}"="Extensions Manager Folder"
"{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview"
"{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext"
"{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control"
"{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control"
"{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control"
"{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control"
"{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control"
"{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
"{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
"{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
"{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
"{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
"{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
"{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
"{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
"{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
"{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu"
"{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options"
"{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Offline Files Folder"
"{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler"
"{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell"
"{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%"
"{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
"{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
"{32714800-2E5F-11d0-8B85-00AA0044F941}"="For &People..."
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{A70C977A-BF00-412C-90B7-034C51DA2439}"="NvCpl DesktopContext Class"
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}"="Play on my TV helper"
"{1CDB2949-8F65-4355-8456-263E7C208A5D}"="Desktop Explorer"
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}"="Desktop Explorer Menu"
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}"="nView Desktop Context Menu"
"{21569614-B795-46b1-85F4-E737A8DC09AD}"="Shell Search Band"
"{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Web Folders"
"{0006F045-0000-0000-C000-000000000046}"="Microsoft Outlook Custom Icon Handler"
"{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler"
"{FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D}"="Messenger Sharing Folders"
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
"{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}"="Adobe.Acrobat.ContextMenu"
"{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}"="iTunes"

**********************************************************************************
HKEY ROOT CLASSIDS:
**********************************************************************************
Files Found are not all bad files:

C:\\WINDOWS\\SYSTEM32\\
browseui.dll Thu Jan 4 2007 9:36:30p A.... 1,023,488 999.50 K
cdfview.dll Thu Jan 4 2007 9:36:30p A.... 151,040 147.50 K
danim.dll Thu Jan 4 2007 9:36:34p A.... 1,054,208 1.00 M
dxtmsft.dll Thu Jan 4 2007 9:36:36p A.... 357,888 349.50 K
dxtrans.dll Thu Jan 4 2007 9:36:36p A.... 205,312 200.50 K
extmgr.dll Thu Jan 4 2007 9:36:38p A.... 55,808 54.50 K
iepeers.dll Thu Jan 4 2007 9:36:38p A.... 251,392 245.50 K
inseng.dll Thu Jan 4 2007 9:36:38p A.... 96,256 94.00 K
jsproxy.dll Thu Jan 4 2007 9:36:38p A.... 16,384 16.00 K
legitc~1.dll Fri Mar 16 2007 9:19:28a A.... 1,476,992 1.41 M
mshtml.dll Thu Jan 4 2007 9:36:48p A.... 3,056,640 2.91 M
mshtmled.dll Thu Jan 4 2007 9:36:52p A.... 448,512 438.00 K
msrating.dll Thu Jan 4 2007 9:36:52p A.... 146,432 143.00 K
mstime.dll Thu Jan 4 2007 9:36:54p A.... 532,480 520.00 K
pngfilt.dll Thu Jan 4 2007 9:36:54p A.... 39,424 38.50 K
s32evnt1.dll Thu Mar 22 2007 5:01:54a A.... 48,776 47.63 K
shdocvw.dll Thu Jan 4 2007 9:37:04p A.... 1,494,528 1.42 M
shlwapi.dll Thu Jan 4 2007 9:37:04p A.... 474,112 463.00 K
sirenacm.dll Sat Jan 20 2007 3:53:04a A.... 51,056 49.86 K
symneti.dll Tue Feb 13 2007 8:22:48a A.... 538,256 525.64 K
symredir.dll Tue Feb 13 2007 8:22:46a A.... 161,424 157.64 K
urlmon.dll Thu Jan 25 2007 8:48:50p A.... 615,424 601.00 K
wgalogon.dll Fri Mar 16 2007 9:16:42a ..... 236,928 231.38 K
wininet.dll Thu Jan 4 2007 9:37:08p A.... 658,944 643.50 K
xpsp3res.dll Thu Jan 4 2007 6:25:02p A.... 115,200 112.50 K

25 items found: 25 files, 0 directories.
Total of file sizes: 13,306,904 bytes 12.69 M
Locate .tmp files:

No matches found.
**********************************************************************************

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.