New
#11
sorry for the late reply and appreciate your patience, had a powercut in local area... anyway heres the reuslts:
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>NET START SWPRV
The Microsoft Software Shadow Copy Provider service is starting.
The Microsoft Software Shadow Copy Provider service was started successfully.
C:\Windows\system32>SC QC SWPRV
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: SWPRV
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 3 DEMAND_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k swprv
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Microsoft Software Shadow Copy Provider
DEPENDENCIES : RPCSS
SERVICE_START_NAME : LocalSystem
C:\Windows\system32>SC QUERYS SWPRV
ERROR: Unrecognized command
DESCRIPTION:
SC is a command line program used for communicating with the
Service Control Manager and services.
USAGE:
sc <server> [command] [service name] <option1> <option2>...
The option <server> has the form "\\ServerName"
Further help on commands can be obtained by typing: "sc [command]"
Commands:
query-----------Queries the status for a service, or
enumerates the status for types of services.
queryex---------Queries the extended status for a service, or
enumerates the status for types of services.
start-----------Starts a service.
pause-----------Sends a PAUSE control request to a service.
interrogate-----Sends an INTERROGATE control request to a service.
continue--------Sends a CONTINUE control request to a service.
stop------------Sends a STOP request to a service.
config----------Changes the configuration of a service (persistent).
description-----Changes the description of a service.
failure---------Changes the actions taken by a service upon failure.
failureflag-----Changes the failure actions flag of a service.
sidtype---------Changes the service SID type of a service.
privs-----------Changes the required privileges of a service.
qc--------------Queries the configuration information for a service.
qdescription----Queries the description for a service.
qfailure--------Queries the actions taken by a service upon failure.
qfailureflag----Queries the failure actions flag of a service.
qsidtype--------Queries the service SID type of a service.
qprivs----------Queries the required privileges of a service.
qtriggerinfo----Queries the trigger parameters of a service.
qpreferrednode--Queries the preferred NUMA node of a service.
delete----------Deletes a service (from the registry).
create----------Creates a service. (adds it to the registry).
control---------Sends a control to a service.
sdshow----------Displays a service's security descriptor.
sdset-----------Sets a service's security descriptor.
showsid---------Displays the service SID string corresponding to an ar
bitrary name.
triggerinfo-----Configures the trigger parameters of a service.
preferrednode---Sets the preferred NUMA node of a service.
GetDisplayName--Gets the DisplayName for a service.
GetKeyName------Gets the ServiceKeyName for a service.
EnumDepend------Enumerates Service Dependencies.
The following commands don't require a service name:
sc <server> <command> <option>
boot------------(ok | bad) Indicates whether the last boot should
be saved as the last-known-good boot configuration
Lock------------Locks the Service Database
QueryLock-------Queries the LockStatus for the SCManager Database
EXAMPLE:
sc start MyService
Would you like to see help for the QUERY and QUERYEX commands? [ y | n ]:
R
C:\Windows\system32>EG QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{56BE716B
-2F76-4dfa-8702-67AE10044F0B}
'EG' is not recognized as an internal or external command,
operable program or batch file.
C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\AppID\{FAF53CC4-BD73-4E36-83
F1-2B23F46E513E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}
(Default) REG_SZ VssEvent
DllSurrogate REG_SZ
C:\Windows\system32>REG QUERY HKLM\SOFTWARE\Classes\CLSID\{573bdf38-df23-427f-ac
b8-a67abd702698}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{573bdf38-df23-427f-acb8-a67abd702698}
(Default) REG_SZ VssModuleKeeper
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{573bdf38-df23-427f-acb8-a67abd702698}
\InprocServer32
C:\Windows\system32>
Quote