Processes
This screen shows all the running programs except for validated Microsoft® software. A terminated process is watched for a re-spawn and the user is alerted to restart in safe mode.

Services
This screen shows all running services except for validated Microsoft® software. Services are stopped if possible and then disabled. The file associated with the service is renamed in place to filename.exe.bak either directly or on reboot if it is locked.

Registry
Validated Microsoft® software is filtered from this list. This screen shows Run and Runservices keys for the current user and system. It shows the firewall bypass rules if any. It shows any non-default rules related to Security Center. All Browser Helper Objects and Toolbars are listed as well as Zones. Internet Explorer can be returned to pristine state with Reset Internet Explorer Defaults.

Startup Folders
Current user and common startup folder. Links can be enabled and disabled.

WIN.INI - Windows®98SE/ME Only
Edit this and file and save or reload it.

SYSTEM.INI - Windows®98SE/ME Only
Edit this and file and save or reload it.

HOSTS
This screen shows the current IP to hostname mapping. It can be edited or returned to default and saved.

Advanced
Terminate Known Process ID allows you to find and terminate a PID if known.

Advanced Usage
Command line switches

/l = full report
/lp = include processes
/ls = include services
/lr = include registry (-IE zones)
/lz = include IE zones
/lf = include startup folders
/lh = include HOSTS file

Double-click on any item in Processes, Services, Registry or Startup Folders to open Explorer or Regedit to those respective items.

Select File->Dump Process List to see the four internal process lists