This is that Viper bit:
Editor's Note: This information was originally created and belongs to Black Viper (Dead link, obviously). We have reproduced it, in large part until the original website returns, if ever. There were a lot of pages, so if you dig far enough reading it here, you will eventually hit dead links from older pages we do not have. The original scripts are also available for download.
Do not use msconfig to disable services. Type in the Run box "services.msc" instead!
Before disabling ANY service, check out the information listed about each service by clicking on the name.
Only disable a few services at a time to avoid changing "50" settings and trying to figure out "what broke it."
Still unsure? Put your setting to "manual" or the listing under "Safe." Manual allows Windows XP to start the service when it needs to (or when ever it feels like it,) but not at boot up. NOTE: Depending on your configuration, not all services will start when required while in Manual mode. If you find you need a service, place it in Auto.
After adjusting your service settings, reboot your computer.
If you do not have some of these services listed, don't panic! If your computer manufacture "pre-installed" your XP, they choose not to have certain services installed for you.
Notes
Disabling all of the "unneeded services" frees up 12-70MB of RAM, depending on system.
--------------------------------------------------------------------------------
Display Name ~ Is how it is displayed in the Services Control Panel
Service Name ~ Is what the service is called, usually the "short" name
Process Name ~ Name of the Process running in the background (displayed in Task Manager by hitting Ctrl+Alt+Del)
Dependencies ~ What other services this service needs to run
Need it? ~ From what I have concluded by trial and error and also the services that I have found pointless.
MINE ~ My configuration & recommended to start. Cross between Gaming (Power User) & Safe configuration.
DEFAULT Pro ~ What Microsoft thinks should be running on Windows XP Professional.
"SAFE" Configuration ~ This is the configuration that 95% of the people will be able to use with little side effects. It will also minimizes the amount of "errors" that is reported in the Event Viewer. This does NOT guarantee it will work for you, but if you are scared, this configuration should be a good starting point.
Internet Gateway Configuration ~ Setup to allow multiple computers on a network to share one internet connection access point using Microsoft's "Internet Connection Sharing and Personal Firewall" software. If you do not have this type of setup, compare the differences between "SAFE" and "GAMING" to find a middle ground that works for your system.
Gaming Configuration ~ The power user setup. DO NOT JUMP RIGHT TO THIS CONFIGURATION. This setup is a system that connects through a network to the internet, provides file and print sharing resources and gaming enjoyment. Some things MAY not function with this setup. No passwords are saved. It is not intended for a computer with analog modems or some DSL/cable connections. Try "Internet Gateway" Configuration first.
--------------------------------------------------------------------------------
Windows XP Professional Services Configurations
Display Name Service Name Process Name Dependencies Need it?
(Vital, Yes, Maybe, No, Not Installed, Never) MINE DEFAULT
Pro "SAFE" Internet Gateway Gaming
Alerter Alerter services.exe Workstation No. Disabled Manual Disabled Disabled Disabled
Application Layer Gateway Service ALG alg.exe None Maybe. Disabled Manual Manual Auto Disabled
Application Management AppMgmt svchost.exe None Yes. Manual Manual Manual Manual Manual
Auto Updates wuauserv svchost.exe None Maybe. Disabled Auto Auto Auto Disabled
Background Intelligent Transfer Service BITS svchost.exe Remote Procedure Call (RPC), Workstation No. Disabled Manual Disabled Disabled Disabled
ClipBook ClipSrv clipsrv.exe Network DDE No. Disabled Manual Disabled Disabled Disabled
COM+ Event System EventSystem svchost.exe Remote Procedure Call (RPC) No. Disabled Manual Manual Disabled Disabled
COM+ System Application COMSysApp dllhost.exe Remote Procedure Call (RPC) No. Disabled Manual Manual Disabled Disabled
Computer Browser Browser svchost.exe Server, Workstation Maybe. Disabled Auto Manual Auto Disabled
Cryptographic Services CryptSvc svchost.exe Remote Procedure Call (RPC) Maybe. Manual Auto Auto Auto Disabled
--------------------------------------------------------------------------------
Display Name Service Name Process Name Dependencies Need it?
(Vital, Yes, Maybe, No, Not Installed, Never) MINE DEFAULT
Pro "SAFE" Internet Gateway Gaming
DHCP Client Dhcp svchost.exe AFD Networking Support Environment, NetBios over TCP/IP, TCP/IP Protocol Driver Maybe. Auto Auto Auto Disabled Auto
Distributed Link Tracking Client TrkWks svchost.exe Remote Procedure Call (RPC) No. Disabled Auto Manual Disabled Disabled
Distributed Transaction Coordinator MSDTC msdtc.exe Remote Procedure Call (RPC), Security Accounts Manager No. Disabled Manual Manual Disabled Disabled
DNS Client Dnscache svchost.exe TCP/IP Protocol Driver No. Disabled Auto Auto Disabled Disabled
Error Reporting Service ERSvc svchost.exe Remote Procedure Call (RPC) Never. Disabled Auto Disabled Disabled Disabled
Event Log Eventlog services.exe None Yes. Auto Auto Auto Auto Auto
Fast User Switching Compatibility FastUserSwitching Compatibility svchost.exe Terminal Services No. Manual Manual Manual Disabled Disabled
Fax Service FAX fxssvc.exe Plug and Play, Print Spooler, Remote Procedure Call (RPC), Telephony Not Installed. Not Installed Not Installed Not Installed Not Installed Not Installed
FTP Publishing Service inetinfo.exe IIS Admin Not Installed. Not Available Not Installed Not Installed Not Installed Not Installed
--------------------------------------------------------------------------------
Display Name Service Name Process Name Dependencies Need it?
(Vital, Yes, Maybe, No, Not Installed, Never) MINE DEFAULT
Pro "SAFE" Internet Gateway Gaming
Help and Support helpsvc svchost,exe Remote Procedure Call (RPC) No. Disabled Auto Disabled Disabled Disabled
Human Interface Device Access HidServ svchost,exe Remote Procedure Call (RPC) No. Auto Disabled Disabled Disabled Disabled
IIS Admin IISADMIN inetinfo.exe Remote Procedure Call (RPC), Security Accounts Manager Not Installed. Not Available Not Installed Not Installed Not Installed Not Installed
IMAPI CD-Burning COM Service ImapiService imapi.exe None Maybe. Disabled Manual Auto Disabled Disabled
Indexing Service cisvc cisvc.exe Remote Procedure Call (RPC) Never. Disabled Manual Disabled Disabled Disabled
Internet Connection Firewall/Internet Connection Sharing SharedAccess svchost.exe Application Layer Gateway Service, Network Connections, Network Location Awareness, Remote Access Connection Manager Maybe. Disabled Auto Auto Auto Disabled
IPSEC Services PolicyAgent lsass,exe IPSEC driver, Remote Procedure Call (RPC), TCP/IP Protocol Driver No. Disabled Auto Disabled Disabled Disabled
Logical Disk Manager dmserver svchost.exe Plug and Play, Remote Procedure Call (RPC) Maybe. Disabled Auto Manual Disabled Disabled
Logical Disk Manager Administrative Service dmadmin dmadmin.exe Logical Disk Manager, Plug and Play, Remote Procedure Call (RPC) Maybe. Disabled Manual Manual Disabled Disabled
Message Queuing mqsvc.exe Distributed Transaction Coordinator, Message Queuing access control, NT LM Security Support Provider, Reliable Multicast Protocol driver, Remote Procedure Call (RPC), Server Not Installed. Not Available Not Installed Not Installed Not Installed Not Installed
--------------------------------------------------------------------------------
Display Name Service Name Process Name Dependencies Need it?
(Vital, Yes, Maybe, No, Not Installed, Never) MINE DEFAULT
Pro "SAFE" Internet Gateway Gaming
Message Queuing Triggers mqtgsvc.exe Message Queuing Not Installed. Not Available Not Installed Not Installed Not Installed Not Installed
Messenger Messenger services.exe NetBIOS Interface, Plug and Play, Remote Procedure Call (RPC), Workstation No. Disabled Auto Disabled Disabled Disabled
MS Software Shadow Copy Provider SwPrv dllhost.exe Remote Procedure Call (RPC) No. Disabled Manual Manual Disabled Disabled
Net Login Netlogon lsass.exe Workstation No. Disabled Auto Disabled Disabled Disabled
NetMeeting Remote Desktop Sharing mnmsrvc mnmsrvc.exe None Never. Manual Manual Disabled Disabled Disabled
Network Connections Netman svchost.exe Remote Procedure Call (RPC) Vital. Manual Manual Auto Auto Manual
Network DDE NetDDE netdde.exe Network DDE DSDM No. Disabled Manual Disabled Disabled Disabled
Network DDE DSDM NetDDE dsdm netdde.exe AFD Networking Support Enviroment, TCP/IP Protocol Driver No. Disabled Manual Disabled Disabled Disabled
Network Location Awareness (NLA) Nla svchost.exe None Maybe. Disabled Manual Manual Auto Disabled
NT LM Security Support Provider NtLmSsp lsass.exe None No. Disabled Manual Disabled Disabled Disabled
--------------------------------------------------------------------------------
Display Name Service Name Process Name Dependencies Need it?
(Vital, Yes, Maybe, No, Not Installed, Never) MINE DEFAULT
Pro "SAFE" Internet Gateway Gaming
Performance Logs and Alerts SysmonLog smlogsvc.exe None Never. Disabled Manual Disabled Disabled Disabled
Plug and Play PlugPlay services.exe None Vital. Auto Auto Auto Auto Auto
Portable Media Serial Number WmdmPmSp svchost.exe None Never. Manual Auto Disabled Disabled Disabled
Print Spooler Spooler spoolsv.exe Remote Procedure Call (RPC) Maybe. Auto Auto Auto Auto Auto
Protected Storage ProtectedStorage lsass.exe Remote Procedure Call (RPC) No. Auto Auto Auto Auto Disabled
QoS RSVP RSVP rsvp.exe AFD Networking Support Environment, Remote Procedure Call (RPC), TCP/IP Protocol Driver No Disabled Manual Disabled Disabled Disabled
Remote Access Auto Connection Manager RasAuto svchost.exe Remote Access Connection Manager, Telephony Maybe. Manual Manual Manual Auto Disabled
Remote Access Connection Manager RasMan svchost.exe Telephony Maybe. Manual Manual Manual Auto Disabled
Remote Desktop Help Session Manager RDSessMgr sessmgr.exe Remote Procedure Call (RPC) No. Disabled Manual Disabled Disabled Disabled
Remote Procedure Call (RPC) RpcSs svchost.exe None (but everything depends on IT!) Vital. Auto Auto Auto Auto Auto
--------------------------------------------------------------------------------
Display Name Service Name Process Name Dependencies Need it?
(Vital, Yes, Maybe, No, Not Installed, Never) MINE DEFAULT
Pro "SAFE" Internet Gateway Gaming
Remote Procedure Call (RPC) Locator RpcLocator locator.exe Workstation No. Manual Manual Manual Manual Manual
Remote Registry Service RemoteRegistry svchost.exe None Never. Disabled Auto Disabled Disabled Disabled
Removable Storage NtmsSvc svchost.exe Remote Procedure Call (RPC) No. Disabled Manual Manual Disabled Disabled
RIP Listener svchost.exe Remote Procedure Call (RPC) Not Installed. Not Installed Not Installed Not Installed Not Installed Not Installed
Routing and Remote Access RemoteAccess svchost.exe NetBIOSGroup, Remote Procedure Call (RPC) No. Disabled Manual Disabled Disabled Disabled
Secondary Logon seclogon svchost.exe None No. Disabled Auto Disabled Disabled Disabled
Security Accounts Manager SamSs lsass.exe Remote Procedure Call (RPC) No. Disabled Auto Disabled Disabled Disabled
Server lanmanserver svchost.exe None Maybe. Auto Auto Auto Auto Disabled
Shell Hardware Detection ShellHWDetection svchost.exe Remote Procedure Call (RPC) Maybe. Disabled Auto Auto Disabled Disabled
Simple Mail Transport Protocol (SMTP) SMTPSVC inetinfo.exe Event Log, IIS Admin Not Installed. Not Available Not Installed Not Installed Not Installed Not Installed
--------------------------------------------------------------------------------
Display Name Service Name Process Name Dependencies Need it?
(Vital, Yes, Maybe, No, Not Installed, Never) MINE DEFAULT
Pro "SAFE" Internet Gateway Gaming
Simple TCP/IP Services tcpsvcs.exe AFD Networking Support Environment Not Installed. Not Installed Not Installed Not Installed Not Installed Not Installed
Smart Card SCardSvr SCardSvr.exe Plug and Play Never. Disabled Manual Disabled Disabled Disabled
Smart Card Helper SCardDrv SCardSvr.exe None Never. Disabled Manual Disabled Disabled Disabled
SNMP Service snmp.exe Event Log Not Installed. Not Installed Not Installed Not Installed Not Installed Not Installed
SNMP Trap Service snmptrap.exe Event Log Not Installed. Not Installed Not Installed Not Installed Not Installed Not Installed
SSDP Discovery Service SSDPSRV svchost.exe None No. Manual Manual Disabled Disabled Disabled
System Event Notification SENS svchost.exe COM+ Event System No. Disabled Auto Auto Disabled Disabled
System Restore Service srservice svchost.exe Remote Procedure Call (RPC) Never. Disabled Auto Disabled Disabled Disabled
Task Scheduler Schedule svchost.exe Remote Procedure Call (RPC) Maybe. Disabled Auto Auto Disabled Disabled
TCP/IP NetBIOS Helper Service LmHosts svchost.exe AFD Networking Support Enviroment, NetBios over TCP/IP No. Disabled Auto Disabled Disabled Disabled
--------------------------------------------------------------------------------
Display Name Service Name Process Name Dependencies Need it?
(Vital, Yes, Maybe, No, Not Installed, Never) MINE DEFAULT
Pro "SAFE" Internet Gateway Gaming
TCP/IP Printer Server LPDSVC tcpsvcs.exe Print Spooler, TCP/IP Protocol Driver Not Installed. Not Installed Not Installed Not Installed Not Installed Not Installed
Telephony TapiSrv svchost.exe Plug and Play, Remote Procedure Call (RPC) Maybe. Manual Manual Manual Auto Disabled
Telnet TlntSvr tlntsvr.exe NT LM Security Support Provider, Remote Procedure Call (RPC), TCP/IP Protocol Driver Never. Disabled Manual Disabled Disabled Disabled
Terminal Services TermService svchost.exe Remote Procedure Call (RPC) No. Disabled Manual Manual Disabled Disabled
Themes Themes svchost.exe None No. Disabled Auto Auto Disabled Disabled
Uninterruptible Power Supply UPS ups.exe None No. Disabled Manual Disabled Disabled Disabled
Universal Plug and Play Device Host UPNPhost svchost.exe SSDP Discovery Service No. Manual Manual Disabled Disabled Disabled
Upload Manager uploadmgr svchost.exe Remote Procedure Call (RPC) No. Disabled Auto Disabled Disabled Disabled
Volume Shadow Copy VSS vssvc.exe Remote Procedure Call (RPC) No. Manual Manual Manual Disabled Disabled
WebClient WebClient svchost.exe WebDav Client Redirector Never. Disabled Auto Disabled Disabled Disabled
--------------------------------------------------------------------------------
Display Name Service Name Process Name Dependencies Need it?
(Vital, Yes, Maybe, No, Not Installed, Never) MINE DEFAULT
Pro "SAFE" Internet Gateway Gaming
Windows Audio AudioSrv svchost.exe Plug and Play, Remote Procedure Call (RPC) Vital. Auto Auto Auto Disabled (no sound card in this system) Auto
Windows Image Acquisition (WIA) stisvc svchost.exe Remote Procedure Call (RPC) No. Manual Manual Manual Disabled Disabled
Windows Installer MSIServer msiexec.exe Remote Procedure Call (RPC) Yes. Manual Manual Manual Manual Manual
Windows Management Instrumentation Minmgmt svchost.exe Event Log, Remote Procedure Call (RPC) Vital. Auto Auto Auto Auto Auto
Windows Management Instrumentation Driver Extension Wmi svchost.exe None Yes. Manual Manual Manual Manual Manual
Windows Time W32Time svchost.exe None No. Disabled Auto Disabled Disabled Disabled
Wireless Zero Configuration WZCSVC svchost.exe NDIS Usermode I/O Protocol, Remote Procedure Call (RPC) No. Manual Auto Disabled Disabled Disabled
WMI Performance Adapter WmiApSrv wmiapsrv.exe Remote Procedure Call (RPC) No. Manual Manual Disabled Disabled Disabled
Workstation lanmanworkstation svchost.exe None (but plenty depend on it...) Vital. Auto Auto Auto Auto Auto
World Wide Web Publishing Service W3SVC inetinfo.exe IIS Admin No. Not Available Not Installed Not Installed Not Installed Not Installed
Totally beyond me this part!!!!
--------------------------------------------------------------------------------
Up to date HijackThis Log
Logfile of HijackThis v1.99.1
Scan saved at 19:41:59, on 18/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\PROGRA~1\BTHOME~1\Help\SMARTB~1\BTHelpNotifier.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\PROGRA~1\Yahoo!\YOP\secstat.exe
C:\Program Files\BT Home Hub\Help\bin\mpbtn.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Yahoo!\browser\ybrowser.exe
C:\Program Files\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page =
http://go.microsoft.com/fwlink/?LinkId=54843
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BTHOME~1\Help\SMARTB~1\BTHelpNotifier.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet
O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Global Startup: BT Broadband Desktop Help.lnk = C:\Program Files\BT Home Hub\Help\bin\matcli.exe
O4 - Global Startup: HotSync Manager.lnk.disabled
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: &eBay Search -
res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/Shar ... /cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/activescan ... asinst.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE