StartupList report, 4/4/2012, 8:12:54 PM StartupList version: 1.52.2 Started from : C:\Users\Jesse\Downloads\HijackThis.EXE Detected: Windows 7 SP1 (WinNT 6.00.3505) Detected: Internet Explorer v9.00 (9.00.8112.16421) * Using default options * Including empty and uninteresting sections * Showing rarely important sections ================================================== Running processes: C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe C:\Program Files (x86)\Samsung\Easy Software Manager\SWMAgent.exe C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe C:\Program Files (x86)\Secunia\PSI\psi_tray.exe C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe C:\Program Files (x86)\Ask.com\Updater\Updater.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe C:\Program Files (x86)\Trend Micro\Browser Guard\BGUI.exe C:\Program Files (x86)\Trend Micro\Browser Guard\tmiegsrv.exe C:\Program Files (x86)\Trend Micro\RUBotted\RUBottedGUI.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Samsung\Software Launcher\Software Launcher.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Users\Jesse\Downloads\HijackThis.exe C:\windows\SysWOW64\NOTEPAD.EXE -------------------------------------------------- Listing of startup folders: Shell folders Startup: [C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup] *No files* Shell folders AltStartup: *Folder not found* User shell folders Startup: *Folder not found* User shell folders AltStartup: *Folder not found* Shell folders Common Startup: [C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup] Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe Shell folders Common AltStartup: *Folder not found* User shell folders Common Startup: *Folder not found* User shell folders Alternate Common Startup: *Folder not found* -------------------------------------------------- Checking Windows NT UserInit: [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = userinit.exe [HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] *Registry value not found* [HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run (Default) = ApnUpdater = "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" SunJavaUpdateSched = "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" GrooveMonitor = "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" Trend Micro Browser Guard = "C:\Program Files (x86)\Trend Micro\Browser Guard\BGUI.EXE" Trend Micro RUBotted V2.0 Beta = C:\Program Files (x86)\Trend Micro\RUBotted\RUBottedGUI.exe -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Run Skype = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\Run *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\Run *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- File association entry for .EXE: HKEY_CLASSES_ROOT\exefile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .COM: HKEY_CLASSES_ROOT\comfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .BAT: HKEY_CLASSES_ROOT\batfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .PIF: HKEY_CLASSES_ROOT\piffile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .SCR: HKEY_CLASSES_ROOT\scrfile\shell\open\command (Default) = "%1" /S -------------------------------------------------- File association entry for .HTA: HKEY_CLASSES_ROOT\htafile\shell\open\command (Default) = C:\Windows\SysWOW64\mshta.exe "%1" %* -------------------------------------------------- File association entry for .TXT: HKEY_CLASSES_ROOT\txtfile\shell\open\command (Default) = %SystemRoot%\system32\NOTEPAD.EXE %1 -------------------------------------------------- Enumerating Active Setup stub paths: HKLM\Software\Microsoft\Active Setup\Installed Components (* = disabled by HKCU twin) [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] StubPath = %SystemRoot%\system32\unregmp2.exe /ShowWMP [>{26923b43-4d38-484f-9b9e-de460746276c}] * StubPath = C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig [>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] * StubPath = "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP [{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] * StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] * StubPath = "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] * StubPath = %SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI [{89820200-ECBD-11cf-8B85-00AA005B4340}] * StubPath = regsvr32.exe /s /n /i:U shell32.dll [{89820200-ECBD-11cf-8B85-00AA005B4383}] * StubPath = C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] * StubPath = C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install -------------------------------------------------- Enumerating ICQ Agent Autostart apps: HKCU\Software\Mirabilis\ICQ\Agent\Apps *Registry key not found* -------------------------------------------------- Load/Run keys from C:\windows\WIN.INI: load=*INI section not found* run=*INI section not found* Load/Run keys from Registry: HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found* HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=C:\windows\SysWOW64\nvinit.dll -------------------------------------------------- Shell & screensaver key from C:\windows\SYSTEM.INI: Shell=*INI section not found* SCRNSAVE.EXE=*INI section not found* drivers=*INI section not found* Shell & screensaver key from Registry: Shell=explorer.exe SCRNSAVE.EXE=*Registry value not found* drivers=*Registry value not found* Policies Shell key: HKCU\..\Policies: Shell=*Registry key not found* HKLM\..\Policies: Shell=*Registry value not found* -------------------------------------------------- Checking for EXPLORER.EXE instances: C:\windows\Explorer.exe: PRESENT! C:\Explorer.exe: not present C:\windows\Explorer\Explorer.exe: not present C:\windows\System\Explorer.exe: not present C:\windows\System32\Explorer.exe: not present C:\windows\Command\Explorer.exe: not present C:\windows\Fonts\Explorer.exe: not present -------------------------------------------------- Checking for superhidden extensions: .lnk: HIDDEN! (arrow overlay: yes) .pif: HIDDEN! (arrow overlay: yes) .exe: not hidden .com: not hidden .bat: not hidden .hta: not hidden .scr: not hidden .shs: *Registry key not found* .shb: *Registry key not found* .vbs: not hidden .vbe: not hidden .wsh: not hidden .scf: HIDDEN! (arrow overlay: NO!) .url: HIDDEN! (arrow overlay: yes) .js: not hidden .jse: not hidden -------------------------------------------------- Verifying REGEDIT.EXE integrity: - Regedit.exe found in C:\windows - .reg open command is normal (regedit.exe %1) - Company name OK: 'Microsoft Corporation' - Original filename NOT OK: 'REGEDIT.EXE.MUI' - File description: 'Registry Editor' Registry check failed! -------------------------------------------------- Enumerating Browser Helper Objects: Trend Micro NSC BHO - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} (no name) - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} (no name) - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6} IEGBH0 - (no file) - {9F3209E2-334B-41E9-B09C-703F398742E7} TmBpIeBHO - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1102\7.1.1102\TmBpIe32.dll - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} Ask Toolbar BHO - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll - {D4027C7F-154A-4066-A1AD-4243D8127440} (no name) - C:\Program Files (x86)\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll - {DBC80044-A445-435b-BC74-9C25C1C588A9} TMIEGBHO - C:\Program Files (x86)\Trend Micro\Browser Guard\TMAMS.dll - {F1AD4A42-BA52-47BC-89DF-3F68F24C017F} -------------------------------------------------- Enumerating Task Scheduler jobs: Adobe Flash Player Updater.job -------------------------------------------------- Enumerating Download Program Files: [Java Plug-in 10.3.0] InProcServer32 = C:\Program Files (x86)\Java\jre7\bin\jp2iexp.dll CODEBASE = http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab [Java Plug-in 1.7.0_03] InProcServer32 = C:\Program Files (x86)\Java\jre7\bin\jp2iexp.dll CODEBASE = http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab [Java Plug-in 1.7.0_03] InProcServer32 = C:\Program Files (x86)\Java\jre7\bin\ssv.dll CODEBASE = http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab -------------------------------------------------- Enumerating Winsock LSP files: NameSpace #1: C:\windows\system32\NLAapi.dll NameSpace #2: C:\windows\system32\napinsp.dll NameSpace #3: C:\windows\system32\pnrpnsp.dll NameSpace #4: C:\windows\system32\pnrpnsp.dll NameSpace #5: C:\windows\System32\mswsock.dll NameSpace #6: C:\windows\System32\winrnr.dll NameSpace #7: C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL NameSpace #8: C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL NameSpace #9: C:\windows\system32\wshbth.dll Protocol #1: C:\windows\system32\mswsock.dll Protocol #2: C:\windows\system32\mswsock.dll Protocol #3: C:\windows\system32\mswsock.dll Protocol #4: C:\windows\system32\mswsock.dll Protocol #5: C:\windows\system32\mswsock.dll Protocol #6: C:\windows\system32\mswsock.dll Protocol #7: C:\windows\system32\mswsock.dll Protocol #8: C:\windows\system32\mswsock.dll Protocol #9: C:\windows\system32\mswsock.dll Protocol #10: C:\windows\system32\mswsock.dll Protocol #11: C:\windows\system32\mswsock.dll -------------------------------------------------- Enumerating Windows NT/2000/XP services 1394 OHCI Compliant Host Controller: \SystemRoot\system32\drivers\1394ohci.sys (manual start) Microsoft ACPI Driver: system32\drivers\ACPI.sys (system) ACPI Power Meter Driver: \SystemRoot\system32\drivers\acpipmi.sys (manual start) Adobe Flash Player Update Service: C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (manual start) adp94xx: \SystemRoot\system32\drivers\adp94xx.sys (manual start) adpahci: \SystemRoot\system32\drivers\adpahci.sys (manual start) adpu320: \SystemRoot\system32\drivers\adpu320.sys (manual start) @%SystemRoot%\system32\aelupsvc.dll,-1: %systemroot%\system32\svchost.exe -k netsvcs (manual start) @%systemroot%\system32\drivers\afd.sys,-1000: \SystemRoot\system32\drivers\afd.sys (system) Intel AGP Bus Filter: \SystemRoot\system32\drivers\agp440.sys (manual start) @%SystemRoot%\system32\Alg.exe,-112: %SystemRoot%\System32\alg.exe (manual start) aliide: \SystemRoot\system32\drivers\aliide.sys (manual start) amdide: \SystemRoot\system32\drivers\amdide.sys (manual start) AMD K8 Processor Driver: \SystemRoot\system32\drivers\amdk8.sys (manual start) AMD Processor Driver: \SystemRoot\system32\drivers\amdppm.sys (manual start) amdsata: \SystemRoot\system32\drivers\amdsata.sys (manual start) amdsbs: \SystemRoot\system32\drivers\amdsbs.sys (manual start) amdxata: system32\drivers\amdxata.sys (system) Trend Micro Solution Platform: "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=nb -dt=60000 -ad (autostart) @%systemroot%\system32\appidsvc.dll,-102: \SystemRoot\system32\drivers\appid.sys (manual start) @%systemroot%\system32\appidsvc.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation (manual start) @%systemroot%\system32\appinfo.dll,-100: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) arc: \SystemRoot\system32\drivers\arc.sys (manual start) arcsas: \SystemRoot\system32\drivers\arcsas.sys (manual start) @%systemroot%\system32\rascfg.dll,-32000: system32\DRIVERS\asyncmac.sys (manual start) IDE Channel: system32\drivers\atapi.sys (system) @%SystemRoot%\system32\audiosrv.dll,-204: %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted (autostart) @%SystemRoot%\system32\audiosrv.dll,-200: %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted (autostart) @%SystemRoot%\system32\AxInstSV.dll,-103: %SystemRoot%\system32\svchost.exe -k AxInstSVGroup (manual start) Broadcom NetXtreme II VBD: \SystemRoot\system32\drivers\bxvbda.sys (manual start) Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0: system32\DRIVERS\b57nd60a.sys (manual start) @%SystemRoot%\system32\bdesvc.dll,-100: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) @%SystemRoot%\system32\bfe.dll,-1001: %systemroot%\system32\svchost.exe -k LocalServiceNoNetwork (autostart) @%SystemRoot%\system32\qmgr.dll,-1000: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) blbdrive: system32\DRIVERS\blbdrive.sys (system) Bluetooth Device Monitor: "C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe" (autostart) Bluetooth Media Service: "C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe" (manual start) Bluetooth OBEX Service: "C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe" (autostart) @%systemroot%\system32\browser.dll,-102: system32\DRIVERS\bowser.sys (manual start) Brother USB Mass-Storage Lower Filter Driver: \SystemRoot\system32\drivers\BrFiltLo.sys (manual start) Brother USB Mass-Storage Upper Filter Driver: \SystemRoot\system32\drivers\BrFiltUp.sys (manual start) @%systemroot%\system32\browser.dll,-100: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Brother MFC Serial Port Interface Driver (WDM): \SystemRoot\System32\Drivers\Brserid.sys (manual start) Brother WDM Serial driver: \SystemRoot\System32\Drivers\BrSerWdm.sys (manual start) Brother MFC USB Fax Only Modem: \SystemRoot\System32\Drivers\BrUsbMdm.sys (manual start) Brother MFC USB Serial WDM Driver: \SystemRoot\System32\Drivers\BrUsbSer.sys (manual start) Bluetooth Enumerator Service: system32\DRIVERS\BthEnum.sys (manual start) Bluetooth Serial Communications Driver: \SystemRoot\system32\drivers\bthmodem.sys (manual start) Bluetooth Device (Personal Area Network): system32\DRIVERS\bthpan.sys (manual start) Bluetooth Port Driver: System32\Drivers\BTHport.sys (manual start) @%SystemRoot%\System32\bthserv.dll,-101: %SystemRoot%\system32\svchost.exe -k bthsvcs (manual start) Bluetooth Radio USB Driver: System32\Drivers\BTHUSB.sys (manual start) Intel Bluetooth Auxiliary Service: system32\DRIVERS\btmaux.sys (manual start) btmhsf: system32\DRIVERS\btmhsf.sys (manual start) CD/DVD File System Reader: system32\DRIVERS\cdfs.sys (disabled) CD-ROM Driver: system32\DRIVERS\cdrom.sys (system) @%SystemRoot%\System32\certprop.dll,-11: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Consumer IR Devices: \SystemRoot\system32\drivers\circlass.sys (manual start) @%SystemRoot%\system32\clfs.sys,-100: System32\CLFS.sys (system) Microsoft .NET Framework NGEN v2.0.50727_X86: %systemroot%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (disabled) Microsoft .NET Framework NGEN v2.0.50727_X64: %systemroot%\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (disabled) Microsoft .NET Framework NGEN v4.0.30319_X86: C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (autostart) Microsoft .NET Framework NGEN v4.0.30319_X64: C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (autostart) CyberLink WebCam Virtual Driver: system32\DRIVERS\clwvd.sys (manual start) Microsoft ACPI Control Method Battery Driver: system32\DRIVERS\CmBatt.sys (manual start) cmdide: \SystemRoot\system32\drivers\cmdide.sys (manual start) : System32\Drivers\cng.sys (system) Microsoft Composite Battery Driver: system32\DRIVERS\compbatt.sys (system) Composite Bus Enumerator Driver: system32\DRIVERS\CompositeBus.sys (manual start) @comres.dll,-947: %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} (manual start) Crcdisk Filter Driver: \SystemRoot\system32\drivers\crcdisk.sys (disabled) @%SystemRoot%\system32\cryptsvc.dll,-1001: %SystemRoot%\system32\svchost.exe -k NetworkService (autostart) Client Virtualization Handler: "C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE" (autostart) @oleres.dll,-5012: %SystemRoot%\system32\svchost.exe -k DcomLaunch (autostart) @%SystemRoot%\system32\defragsvc.dll,-101: %SystemRoot%\system32\svchost.exe -k defragsvc (manual start) @%systemroot%\system32\drivers\dfsc.sys,-101: System32\Drivers\dfsc.sys (system) @%SystemRoot%\system32\dhcpcore.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted (autostart) @%systemroot%\system32\drivers\discache.sys,-102: System32\drivers\discache.sys (system) Disk Driver: system32\drivers\disk.sys (system) @%SystemRoot%\System32\dnsapi.dll,-101: %SystemRoot%\system32\svchost.exe -k NetworkService (autostart) @%systemroot%\system32\dot3svc.dll,-1102: %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted (manual start) @%systemroot%\system32\dps.dll,-500: %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork (autostart) Microsoft Trusted Audio Drivers: system32\drivers\drmkaud.sys (manual start) LDDM Graphics Subsystem: \SystemRoot\System32\drivers\dxgkrnl.sys (manual start) @%systemroot%\system32\eapsvc.dll,-1: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Broadcom NetXtreme II 10 GigE VBD: \SystemRoot\system32\drivers\evbda.sys (manual start) @%SystemRoot%\system32\efssvc.dll,-100: %SystemRoot%\System32\lsass.exe (autostart) @%SystemRoot%\ehome\ehrecvr.exe,-101: %systemroot%\ehome\ehRecvr.exe (manual start) @%SystemRoot%\ehome\ehsched.exe,-101: %systemroot%\ehome\ehsched.exe (manual start) elxstor: \SystemRoot\system32\drivers\elxstor.sys (manual start) Microsoft Hardware Error Device Driver: \SystemRoot\system32\drivers\errdev.sys (manual start) ELAN PS/2 Port Input Device: system32\DRIVERS\ETD.sys (manual start) @%SystemRoot%\system32\wevtsvc.dll,-200: %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted (autostart) @comres.dll,-2450: %SystemRoot%\system32\svchost.exe -k LocalService (autostart) Intel(R) PROSet/Wireless Event Log: C:\Program Files\Intel\WiFi\bin\EvtEng.exe (autostart) @%systemroot%\system32\fxsresm.dll,-118: %systemroot%\system32\fxssvc.exe (manual start) Floppy Disk Controller Driver: \SystemRoot\system32\drivers\fdc.sys (manual start) @%systemroot%\system32\fdPHost.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) @%systemroot%\system32\fdrespub.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation (manual start) @%SystemRoot%\system32\drivers\fileinfo.sys,-100: system32\drivers\fileinfo.sys (system) @%SystemRoot%\system32\drivers\filetrace.sys,-10001: system32\drivers\filetrace.sys (manual start) Floppy Disk Driver: \SystemRoot\system32\drivers\flpydisk.sys (manual start) @%SystemRoot%\system32\drivers\fltmgr.sys,-10001: system32\drivers\fltmgr.sys (system) @%systemroot%\system32\FntCache.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation (autostart) @%SystemRoot%\system32\PresentationHost.exe,-3309: %systemroot%\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (manual start) @%SystemRoot%\system32\drivers\fsdepends.sys,-10001: System32\drivers\FsDepends.sys (manual start) @%SystemRoot%\system32\drivers\fvevol.sys,-100: System32\DRIVERS\fvevol.sys (system) Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms: \SystemRoot\system32\drivers\gagp30kx.sys (manual start) GameConsoleService: "C:\Program Files (x86)\WildGames\Game Console - WildGames\GameConsoleService.exe" (manual start) @gpapi.dll,-112: %systemroot%\system32\svchost.exe -k netsvcs (autostart) Hauppauge Consumer Infrared Receiver: \SystemRoot\system32\drivers\hcw85cir.sys (manual start) Microsoft 1.1 UAA Function Driver for High Definition Audio Service: system32\drivers\HdAudio.sys (manual start) Microsoft UAA Bus Driver for High Definition Audio: system32\DRIVERS\HDAudBus.sys (manual start) HID UPS Battery Driver: \SystemRoot\system32\drivers\HidBatt.sys (manual start) Microsoft Bluetooth HID Miniport: \SystemRoot\system32\drivers\hidbth.sys (manual start) Microsoft Infrared HID Driver: \SystemRoot\system32\drivers\hidir.sys (manual start) @%SystemRoot%\System32\hidserv.dll,-101: %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted (manual start) Microsoft HID Class Driver: system32\DRIVERS\hidusb.sys (manual start) @%SystemRoot%\system32\kmsvc.dll,-6: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) @%SystemRoot%\System32\ListSvc.dll,-100: %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted (manual start) @%SystemRoot%\System32\provsvc.dll,-100: %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted (manual start) HpSAMD: \SystemRoot\system32\drivers\HpSAMD.sys (manual start) @%SystemRoot%\system32\drivers\http.sys,-1: system32\drivers\HTTP.sys (manual start) @%systemroot%\system32\drivers\hwpolicy.sys,-101: System32\drivers\hwpolicy.sys (system) i8042 Keyboard and PS/2 Mouse Port Driver: system32\DRIVERS\i8042prt.sys (manual start) Intel AHCI Controller: system32\DRIVERS\iaStor.sys (system) Intel RAID Controller Windows 7: \SystemRoot\system32\drivers\iaStorV.sys (manual start) iBtFltCoex: system32\DRIVERS\iBtFltCoex.sys (manual start) @%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193: "%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe" (manual start) igfx: system32\DRIVERS\igdkmd64.sys (manual start) iirsp: \SystemRoot\system32\drivers\iirsp.sys (manual start) @%SystemRoot%\system32\ikeext.dll,-501: %systemroot%\system32\svchost.exe -k netsvcs (manual start) Intel WiDi Audio Device: system32\drivers\intelaud.sys (manual start) Service for Realtek HD Audio (WDM): system32\drivers\RTKVHD64.sys (manual start) Intel(R) Display Audio: system32\DRIVERS\IntcDAud.sys (manual start) intelide: \SystemRoot\system32\drivers\intelide.sys (manual start) Intel Processor Driver: system32\DRIVERS\intelppm.sys (manual start) @%systemroot%\system32\IPBusEnum.dll,-102: %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted (manual start) @%systemroot%\system32\rascfg.dll,-32013: system32\DRIVERS\ipfltdrv.sys (manual start) @%SystemRoot%\system32\iphlpsvc.dll,-500: %SystemRoot%\System32\svchost.exe -k NetSvcs (autostart) IPMIDRV: \SystemRoot\system32\drivers\IPMIDrv.sys (manual start) IP Network Address Translator: System32\drivers\ipnat.sys (manual start) @%SystemRoot%\system32\drivers\irenum.sys,-100: system32\drivers\irenum.sys (manual start) isapnp: \SystemRoot\system32\drivers\isapnp.sys (manual start) iScsiPort Driver: \SystemRoot\system32\drivers\msiscsi.sys (manual start) IWD Bus Enumerator: system32\DRIVERS\iwdbus.sys (manual start) Keyboard Class Driver: system32\DRIVERS\kbdclass.sys (manual start) Keyboard HID Driver: \SystemRoot\system32\drivers\kbdhid.sys (manual start) @keyiso.dll,-100: %SystemRoot%\system32\lsass.exe (manual start) : System32\Drivers\ksecdd.sys (system) : System32\Drivers\ksecpkg.sys (system) Kernel Streaming Thunks: \SystemRoot\system32\drivers\ksthunk.sys (manual start) @comres.dll,-2946: %SystemRoot%\System32\svchost.exe -k NetworkServiceAndNoImpersonation (manual start) @%systemroot%\system32\srvsvc.dll,-100: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) @%systemroot%\system32\wkssvc.dll,-100: %SystemRoot%\System32\svchost.exe -k NetworkService (autostart) Link-Layer Topology Discovery Mapper I/O Driver: system32\DRIVERS\lltdio.sys (autostart) @%SystemRoot%\system32\lltdres.dll,-1: %SystemRoot%\System32\svchost.exe -k LocalService (manual start) @%SystemRoot%\system32\lmhsvc.dll,-101: %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted (autostart) Intel(R) Management and Security Application Local Management Service: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (autostart) LSI_FC: \SystemRoot\system32\drivers\lsi_fc.sys (manual start) LSI_SAS: \SystemRoot\system32\drivers\lsi_sas.sys (manual start) LSI_SAS2: \SystemRoot\system32\drivers\lsi_sas2.sys (manual start) LSI_SCSI: \SystemRoot\system32\drivers\lsi_scsi.sys (manual start) @%systemroot%\system32\drivers\luafv.sys,-100: \SystemRoot\system32\drivers\luafv.sys (autostart) @%SystemRoot%\ehome\ehres.dll,-15501: %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation (disabled) megasas: \SystemRoot\system32\drivers\megasas.sys (manual start) MegaSR: \SystemRoot\system32\drivers\MegaSR.sys (manual start) Intel(R) Management Engine Interface: system32\DRIVERS\HECIx64.sys (manual start) Microsoft Office Groove Audit Service: "C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe" (manual start) @%systemroot%\system32\mmcss.dll,-100: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) : system32\drivers\modem.sys (manual start) Microsoft Monitor Class Function Driver Service: system32\DRIVERS\monitor.sys (manual start) Mouse Class Driver: system32\DRIVERS\mouclass.sys (manual start) Mouse HID Driver: system32\DRIVERS\mouhid.sys (manual start) @%SystemRoot%\system32\drivers\mountmgr.sys,-100: System32\drivers\mountmgr.sys (system) mpio: \SystemRoot\system32\drivers\mpio.sys (manual start) @%SystemRoot%\system32\FirewallAPI.dll,-23092: System32\drivers\mpsdrv.sys (manual start) @%SystemRoot%\system32\FirewallAPI.dll,-23090: %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork (autostart) @%systemroot%\system32\webclnt.dll,-104: \SystemRoot\system32\drivers\mrxdav.sys (manual start) @%systemroot%\system32\wkssvc.dll,-1002: system32\DRIVERS\mrxsmb.sys (manual start) @%systemroot%\system32\wkssvc.dll,-1004: system32\DRIVERS\mrxsmb10.sys (manual start) @%systemroot%\system32\wkssvc.dll,-1006: system32\DRIVERS\mrxsmb20.sys (manual start) msahci: system32\drivers\msahci.sys (system) msdsm: \SystemRoot\system32\drivers\msdsm.sys (manual start) @comres.dll,-2797: %SystemRoot%\System32\msdtc.exe (manual start) @%SystemRoot%\system32\drivers\mshidkmdf.sys,-100: \SystemRoot\System32\drivers\mshidkmdf.sys (manual start) msisadrv: system32\drivers\msisadrv.sys (system) @%SystemRoot%\system32\iscsidsc.dll,-5000: %systemroot%\system32\svchost.exe -k netsvcs (manual start) @%SystemRoot%\system32\msimsg.dll,-27: %systemroot%\system32\msiexec.exe /V (manual start) Microsoft Streaming Service Proxy: system32\drivers\MSKSSRV.sys (manual start) Microsoft Streaming Clock Proxy: system32\drivers\MSPCLOCK.sys (manual start) Microsoft Streaming Quality Manager Proxy: system32\drivers\MSPQM.sys (manual start) Microsoft System Management BIOS Driver: system32\DRIVERS\mssmbios.sys (system) Microsoft Streaming Tee/Sink-to-Sink Converter: system32\drivers\MSTEE.sys (manual start) Microsoft Input Configuration Driver: \SystemRoot\system32\drivers\MTConfig.sys (manual start) @%systemroot%\system32\drivers\mup.sys,-101: System32\Drivers\mup.sys (system) Wireless PAN DHCP Server: C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (manual start) @%SystemRoot%\system32\qagentrt.dll,-6: %SystemRoot%\System32\svchost.exe -k NetworkService (manual start) NativeWiFi Filter: system32\DRIVERS\nwifi.sys (manual start) @%SystemRoot%\system32\drivers\ndis.sys,-200: system32\drivers\ndis.sys (system) NDIS Capture LightWeight Filter: system32\DRIVERS\ndiscap.sys (manual start) @%systemroot%\system32\rascfg.dll,-32001: system32\DRIVERS\ndistapi.sys (manual start) NDIS Usermode I/O Protocol: system32\DRIVERS\ndisuio.sys (manual start) @%systemroot%\system32\rascfg.dll,-32002: system32\DRIVERS\ndiswan.sys (manual start) NetBIOS Interface: system32\DRIVERS\netbios.sys (system) @%SystemRoot%\system32\drivers\netbt.sys,-2: System32\DRIVERS\netbt.sys (system) @%SystemRoot%\System32\netlogon.dll,-102: %systemroot%\system32\lsass.exe (manual start) @%SystemRoot%\system32\netman.dll,-109: %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted (manual start) @%SystemRoot%\system32\netprofm.dll,-202: %SystemRoot%\System32\svchost.exe -k LocalService (manual start) @%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8201: "%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe" (disabled) ___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit: system32\DRIVERS\NETwNs64.sys (manual start) nfrd960: \SystemRoot\system32\drivers\nfrd960.sys (manual start) @%SystemRoot%\System32\nlasvc.dll,-1: %SystemRoot%\System32\svchost.exe -k NetworkService (autostart) Norton Online Backup: "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE (autostart) NetGroup Packet Filter Driver: system32\drivers\npf.sys (autostart) @%SystemRoot%\system32\nsisvc.dll,-200: %systemroot%\system32\svchost.exe -k LocalService (autostart) @%SystemRoot%\system32\drivers\nsiproxy.sys,-2: system32\drivers\nsiproxy.sys (system) nvlddmkm: system32\DRIVERS\nvlddmkm.sys (manual start) nvpciflt: system32\DRIVERS\nvpciflt.sys (system) nvraid: \SystemRoot\system32\drivers\nvraid.sys (manual start) nvstor: \SystemRoot\system32\drivers\nvstor.sys (manual start) NVIDIA Driver Helper Service: %SystemRoot%\system32\nvvsvc.exe (autostart) NVIDIA Update Service Daemon: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (autostart) NVIDIA nForce AGP Bus Filter: \SystemRoot\system32\drivers\nv_agp.sys (manual start) Microsoft Office Diagnostics Service: "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" (manual start) 1394 OHCI Compliant Host Controller (Legacy): \SystemRoot\system32\drivers\ohci1394.sys (manual start) Office Source Engine: "C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE" (manual start) Office Software Protection Platform: "C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE" (manual start) @%SystemRoot%\system32\pnrpsvc.dll,-8004: %SystemRoot%\System32\svchost.exe -k LocalServicePeerNet (manual start) @%SystemRoot%\system32\p2psvc.dll,-8006: %SystemRoot%\System32\svchost.exe -k LocalServicePeerNet (manual start) Parallel port driver: \SystemRoot\system32\drivers\parport.sys (manual start) @%SystemRoot%\system32\drivers\partmgr.sys,-100: System32\drivers\partmgr.sys (system) @%SystemRoot%\system32\pcasvc.dll,-1: %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted (autostart) PCI Bus Driver: system32\drivers\pci.sys (system) pciide: \SystemRoot\system32\drivers\pciide.sys (manual start) pcmcia: \SystemRoot\system32\drivers\pcmcia.sys (manual start) Performance Counters for Windows Driver: System32\drivers\pcw.sys (system) PEAUTH: system32\drivers\peauth.sys (autostart) @%systemroot%\sysWow64\perfhost.exe,-2: %SystemRoot%\SysWow64\perfhost.exe (manual start) @%systemroot%\system32\pla.dll,-500: %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork (manual start) @%SystemRoot%\system32\umpnpmgr.dll,-100: %SystemRoot%\system32\svchost.exe -k DcomLaunch (autostart) @%SystemRoot%\system32\pnrpauto.dll,-8002: %SystemRoot%\System32\svchost.exe -k LocalServicePeerNet (manual start) @%SystemRoot%\system32\pnrpsvc.dll,-8000: %SystemRoot%\System32\svchost.exe -k LocalServicePeerNet (manual start) @%SystemRoot%\System32\polstore.dll,-5010: %SystemRoot%\system32\svchost.exe -k NetworkServiceNetworkRestricted (manual start) @%SystemRoot%\system32\umpo.dll,-100: %SystemRoot%\system32\svchost.exe -k DcomLaunch (autostart) @%systemroot%\system32\rascfg.dll,-32006: system32\DRIVERS\raspptp.sys (manual start) Processor Driver: \SystemRoot\system32\drivers\processr.sys (manual start) @%systemroot%\system32\profsvc.dll,-300: %systemroot%\system32\svchost.exe -k netsvcs (autostart) @%systemroot%\system32\psbase.dll,-300: %SystemRoot%\system32\lsass.exe (manual start) @%SystemRoot%\System32\drivers\pacer.sys,-101: system32\DRIVERS\pacer.sys (system) PSI: system32\DRIVERS\psi_mf.sys (manual start) ql2300: \SystemRoot\system32\drivers\ql2300.sys (manual start) ql40xx: \SystemRoot\system32\drivers\ql40xx.sys (manual start) @%SystemRoot%\system32\qwave.dll,-1: %windir%\system32\svchost.exe -k LocalServiceAndNoImpersonation (manual start) @%SystemRoot%\system32\drivers\qwavedrv.sys,-1: \SystemRoot\system32\drivers\qwavedrv.sys (manual start) Remote Access Auto Connection Driver: System32\DRIVERS\rasacd.sys (manual start) WAN Miniport (IKEv2): system32\DRIVERS\AgileVpn.sys (manual start) @%Systemroot%\system32\rasauto.dll,-200: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) @%systemroot%\system32\rascfg.dll,-32005: system32\DRIVERS\rasl2tp.sys (manual start) @%Systemroot%\system32\rasmans.dll,-200: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) @%systemroot%\system32\rascfg.dll,-32007: system32\DRIVERS\raspppoe.sys (manual start) @%systemroot%\system32\sstpsvc.dll,-202: system32\DRIVERS\rassstp.sys (manual start) @%systemroot%\system32\wkssvc.dll,-1000: system32\DRIVERS\rdbss.sys (system) Remote Desktop Device Redirector Bus Driver: \SystemRoot\system32\drivers\rdpbus.sys (manual start) @%systemroot%\system32\DRIVERS\RDPCDD.sys,-100: System32\DRIVERS\RDPCDD.sys (system) @%systemroot%\system32\drivers\RDPENCDD.sys,-101: system32\drivers\rdpencdd.sys (system) @%systemroot%\system32\drivers\RdpRefMp.sys,-101: system32\drivers\rdprefmp.sys (system) ReadyBoost: System32\drivers\rdyboost.sys (system) Intel(R) PROSet/Wireless Registry Service: C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (autostart) @%Systemroot%\system32\mprdim.dll,-200: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled) @regsvc.dll,-1: %SystemRoot%\system32\svchost.exe -k regsvc (manual start) Bluetooth Device (RFCOMM Protocol TDI): system32\DRIVERS\rfcomm.sys (manual start) Cyberlink RichVideo Service(CRVS): "C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe" (autostart) Remote Packet Capture Protocol v.0 (experimental): "%ProgramFiles(x86)%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles(x86)%\WinPcap\rpcapd.ini" (manual start) @%windir%\system32\RpcEpMap.dll,-1001: %SystemRoot%\system32\svchost.exe -k RPCSS (autostart) @%systemroot%\system32\Locator.exe,-2: %SystemRoot%\system32\locator.exe (manual start) @oleres.dll,-5010: %SystemRoot%\system32\svchost.exe -k rpcss (autostart) Link-Layer Topology Discovery Responder: system32\DRIVERS\rspndr.sys (autostart) Realtek 8167 NT Driver: system32\DRIVERS\Rt64win7.sys (manual start) rtport: \??\C:\windows\SysWOW64\drivers\rtport.sys (manual start) Trend Micro RUBotted Service: C:\Program Files (x86)\Trend Micro\RUBotted\RUBotSrv.exe (autostart) SAMSUNG Kernel Driver For Windows 7: \??\C:\windows\system32\Drivers\SABI.sys (system) @%SystemRoot%\system32\samsrv.dll,-1: %SystemRoot%\system32\lsass.exe (autostart) sbp2port: \SystemRoot\system32\drivers\sbp2port.sys (manual start) @%SystemRoot%\System32\SCardSvr.dll,-1: %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation (manual start) @%SystemRoot%\System32\drivers\scfilter.sys,-11: System32\DRIVERS\scfilter.sys (manual start) @%SystemRoot%\system32\schedsvc.dll,-100: %systemroot%\system32\svchost.exe -k netsvcs (autostart) @%SystemRoot%\System32\certprop.dll,-13: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) @%SystemRoot%\system32\sdrsvc.dll,-107: %SystemRoot%\system32\svchost.exe -k SDRSVC (manual start) @%SystemRoot%\system32\seclogon.dll,-7001: %windir%\system32\svchost.exe -k netsvcs (manual start) Secunia PSI Agent: "C:\Program Files (x86)\Secunia\PSI\PSIA.exe" --start-service (autostart) Secunia Update Agent: "C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service (autostart) @%SystemRoot%\system32\Sens.dll,-200: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) @%SystemRoot%\System32\sensrsvc.dll,-1000: %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation (manual start) Serenum Filter Driver: \SystemRoot\system32\drivers\serenum.sys (manual start) Serial: \SystemRoot\system32\drivers\serial.sys (manual start) Serial Mouse Driver: \SystemRoot\system32\drivers\sermouse.sys (manual start) @%SystemRoot%\System32\SessEnv.dll,-1026: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) SFF Storage Class Driver: \SystemRoot\system32\drivers\sffdisk.sys (manual start) SFF Storage Protocol Driver for MMC: \SystemRoot\system32\drivers\sffp_mmc.sys (manual start) SFF Storage Protocol Driver for SDBus: \SystemRoot\system32\drivers\sffp_sd.sys (manual start) High-Capacity Floppy Disk Drive: \SystemRoot\system32\drivers\sfloppy.sys (manual start) Sftfs: system32\DRIVERS\Sftfslh.sys (manual start) Application Virtualization Client: "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe" (autostart) Sftplay: system32\DRIVERS\Sftplaylh.sys (manual start) Sftredir: system32\DRIVERS\Sftredirlh.sys (manual start) Sftvol: system32\DRIVERS\Sftvollh.sys (manual start) Application Virtualization Service Agent: "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe" (manual start) SGDrv: system32\DRIVERS\SGdrv64.sys (autostart) @%SystemRoot%\system32\ipnathlp.dll,-106: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) @%SystemRoot%\System32\shsvcs.dll,-12288: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) SiSRaid2: \SystemRoot\system32\drivers\SiSRaid2.sys (manual start) SiSRaid4: \SystemRoot\system32\drivers\sisraid4.sys (manual start) @%SystemRoot%\system32\tcpipcfg.dll,-50005: system32\DRIVERS\smb.sys (manual start) @%SystemRoot%\system32\snmptrap.exe,-3: %SystemRoot%\System32\snmptrap.exe (manual start) @%systemroot%\system32\spoolsv.exe,-1: %SystemRoot%\System32\spoolsv.exe (autostart) @%SystemRoot%\system32\sppsvc.exe,-101: %SystemRoot%\system32\sppsvc.exe (autostart) @%SystemRoot%\system32\sppuinotify.dll,-103: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) @%systemroot%\system32\srvsvc.dll,-102: System32\DRIVERS\srv.sys (manual start) @%systemroot%\system32\srvsvc.dll,-104: System32\DRIVERS\srv2.sys (manual start) : System32\DRIVERS\srvnet.sys (manual start) @%systemroot%\system32\ssdpsrv.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation (manual start) @%SystemRoot%\system32\sstpsvc.dll,-200: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) stexstor: \SystemRoot\system32\drivers\stexstor.sys (manual start) @%SystemRoot%\system32\wiaservc.dll,-9: %SystemRoot%\system32\svchost.exe -k imgsvc (manual start) Software Bus Driver: system32\DRIVERS\swenum.sys (manual start) @%SystemRoot%\System32\swprv.dll,-103: %SystemRoot%\System32\svchost.exe -k swprv (manual start) @%SystemRoot%\system32\sysmain.dll,-1000: %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted (autostart) @%SystemRoot%\system32\TabSvc.dll,-100: %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted (manual start) @%SystemRoot%\system32\tapisrv.dll,-10100: %SystemRoot%\System32\svchost.exe -k NetworkService (manual start) @%SystemRoot%\system32\tbssvc.dll,-100: %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation (manual start) @%SystemRoot%\system32\tcpipcfg.dll,-50003: System32\drivers\tcpip.sys (system) Microsoft IPv6 Protocol Driver: system32\DRIVERS\tcpip.sys (manual start) TCP/IP Registry Compatibility: System32\drivers\tcpipreg.sys (autostart) TDPIPE: system32\drivers\tdpipe.sys (manual start) TDTCP: system32\drivers\tdtcp.sys (manual start) @%SystemRoot%\system32\tcpipcfg.dll,-50004: system32\DRIVERS\tdx.sys (system) TeamViewer 6: C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (autostart) Terminal Device Driver: system32\DRIVERS\termdd.sys (system) @%SystemRoot%\System32\termsrv.dll,-268: %SystemRoot%\System32\svchost.exe -k NetworkService (manual start) @%SystemRoot%\System32\themeservice.dll,-8192: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) @%systemroot%\system32\mmcss.dll,-102: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) tmactmon: system32\DRIVERS\tmactmon.sys (system) tmcomm: system32\DRIVERS\tmcomm.sys (system) tmevtmgr: system32\DRIVERS\tmevtmgr.sys (system) Trend Micro TDI Driver: system32\DRIVERS\tmtdi.sys (system) @%SystemRoot%\system32\trkwks.dll,-1: %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted (autostart) @%SystemRoot%\servicing\TrustedInstaller.exe,-100: %SystemRoot%\servicing\TrustedInstaller.exe (manual start) @%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101: System32\DRIVERS\tssecsrv.sys (manual start) : system32\drivers\tsusbflt.sys (manual start) Remote Desktop Generic USB Device: \SystemRoot\system32\drivers\TsUsbGD.sys (manual start) Microsoft Tunnel Miniport Adapter Driver: system32\DRIVERS\tunnel.sys (manual start) Microsoft AGPv3.5 Filter: \SystemRoot\system32\drivers\uagp35.sys (manual start) udfs: system32\DRIVERS\udfs.sys (disabled) @%SystemRoot%\system32\ui0detect.exe,-101: %SystemRoot%\system32\UI0Detect.exe (manual start) Uli AGP Bus Filter: \SystemRoot\system32\drivers\uliagpkx.sys (manual start) UMBus Enumerator Driver: system32\DRIVERS\umbus.sys (manual start) Microsoft UMPass Driver: \SystemRoot\system32\drivers\umpass.sys (manual start) Intel(R) Management and Security Application User Notification Service: "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" (autostart) @%systemroot%\system32\upnphost.dll,-213: %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation (manual start) Microsoft USB Generic Parent Driver: system32\DRIVERS\usbccgp.sys (manual start) eHome Infrared Receiver (USBCIR): \SystemRoot\system32\drivers\usbcir.sys (manual start) Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: \SystemRoot\system32\drivers\usbehci.sys (manual start) Microsoft USB Standard Hub Driver: system32\DRIVERS\usbhub.sys (manual start) Microsoft USB Open Host Controller Miniport Driver: \SystemRoot\system32\drivers\usbohci.sys (manual start) Microsoft USB PRINTER Class: \SystemRoot\system32\drivers\usbprint.sys (manual start) USB Mass Storage Driver: system32\DRIVERS\USBSTOR.SYS (manual start) Microsoft USB Universal Host Controller Miniport Driver: \SystemRoot\system32\drivers\usbuhci.sys (manual start) USB Video Device (WDM): System32\Drivers\usbvideo.sys (manual start) @%SystemRoot%\system32\dwm.exe,-2000: %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted (autostart) @%SystemRoot%\system32\vaultsvc.dll,-1003: %SystemRoot%\system32\lsass.exe (manual start) Microsoft Virtual Drive Enumerator Driver: system32\drivers\vdrvroot.sys (system) @%SystemRoot%\system32\vds.exe,-100: %SystemRoot%\System32\vds.exe (manual start) vga: system32\DRIVERS\vgapnp.sys (manual start) : \SystemRoot\System32\drivers\vga.sys (system) vhdmp: \SystemRoot\system32\drivers\vhdmp.sys (manual start) viaide: \SystemRoot\system32\drivers\viaide.sys (manual start) Volume Manager Driver: system32\drivers\volmgr.sys (system) @%SystemRoot%\system32\drivers\volmgrx.sys,-100: System32\drivers\volmgrx.sys (system) Storage volumes: system32\drivers\volsnap.sys (system) vsmraid: \SystemRoot\system32\drivers\vsmraid.sys (manual start) @%systemroot%\system32\vssvc.exe,-102: %systemroot%\system32\vssvc.exe (manual start) Virtual WiFi Bus Driver: system32\DRIVERS\vwifibus.sys (manual start) Virtual WiFi Filter Driver: system32\DRIVERS\vwififlt.sys (system) Microsoft Virtual WiFi Miniport Service: system32\DRIVERS\vwifimp.sys (manual start) @%SystemRoot%\system32\w32time.dll,-200: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) Wacom Serial Pen HID Driver: \SystemRoot\system32\drivers\wacompen.sys (manual start) @%systemroot%\system32\rascfg.dll,-32011: system32\DRIVERS\wanarp.sys (manual start) @%systemroot%\system32\rascfg.dll,-32012: system32\DRIVERS\wanarp.sys (system) @%SystemRoot%\system32\Wat\WatUX.exe,-601: %SystemRoot%\system32\Wat\WatAdminSvc.exe (manual start) @%systemroot%\system32\wbengine.exe,-104: "%systemroot%\system32\wbengine.exe" (manual start) @%systemroot%\system32\wbiosrvc.dll,-100: %SystemRoot%\system32\svchost.exe -k WbioSvcGroup (manual start) @%SystemRoot%\system32\wcncsvc.dll,-3: %SystemRoot%\System32\svchost.exe -k LocalServiceAndNoImpersonation (manual start) @%SystemRoot%\system32\WcsPlugInService.dll,-200: %SystemRoot%\system32\svchost.exe -k wcssvc (manual start) Wd: \SystemRoot\system32\drivers\wd.sys (manual start) Kernel Mode Driver Frameworks service: system32\drivers\Wdf01000.sys (system) @%systemroot%\system32\wdi.dll,-502: %SystemRoot%\System32\svchost.exe -k LocalService (manual start) @%systemroot%\system32\wdi.dll,-500: %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted (manual start) Intel WiDi KMD: system32\DRIVERS\WDKMD.sys (manual start) @%systemroot%\system32\webclnt.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) @%SystemRoot%\system32\wecsvc.dll,-200: %SystemRoot%\system32\svchost.exe -k NetworkService (manual start) @%SystemRoot%\System32\wercplsupport.dll,-101: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) @%SystemRoot%\System32\wersvc.dll,-100: %SystemRoot%\System32\svchost.exe -k WerSvcGroup (manual start) WFP Lightweight Filter: system32\DRIVERS\wfplwf.sys (system) WIMMount: system32\drivers\wimmount.sys (manual start) @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103: %SystemRoot%\System32\svchost.exe -k secsvcs (manual start) @%SystemRoot%\system32\winhttp.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) @%Systemroot%\system32\wbem\wmisvc.dll,-205: %systemroot%\system32\svchost.exe -k netsvcs (autostart) @%Systemroot%\system32\wsmsvc.dll,-101: %SystemRoot%\System32\svchost.exe -k NetworkService (manual start) @%SystemRoot%\System32\wlansvc.dll,-257: %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted (autostart) Windows Live Mesh remote connections service: "C:\Program Files\Windows Live\Mesh\wlcrasvc.exe" (disabled) Windows Live ID Sign-in Assistant: "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" (autostart) Microsoft Windows Management Interface for ACPI: \SystemRoot\system32\drivers\wmiacpi.sys (manual start) @%Systemroot%\system32\wbem\wmiapsrv.exe,-110: %systemroot%\system32\wbem\WmiApSrv.exe (manual start) @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101: "%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe" (manual start) @%SystemRoot%\system32\wpcsvc.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted (manual start) @%SystemRoot%\system32\wpdbusenum.dll,-100: %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted (manual start) @%systemroot%\System32\drivers\ws2ifsl.sys,-1000: \SystemRoot\system32\drivers\ws2ifsl.sys (disabled) @%SystemRoot%\System32\wscsvc.dll,-200: %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted (autostart) @%systemroot%\system32\SearchIndexer.exe,-103: %systemroot%\system32\SearchIndexer.exe /Embedding (autostart) @%systemroot%\system32\wuaueng.dll,-105: %systemroot%\system32\svchost.exe -k netsvcs (autostart) User Mode Driver Frameworks Platform Driver: system32\drivers\WudfPf.sys (manual start) WUDFRd: system32\DRIVERS\WUDFRd.sys (manual start) @%SystemRoot%\system32\wudfsvc.dll,-1000: %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted (autostart) @%SystemRoot%\System32\wwansvc.dll,-257: %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork (manual start) -------------------------------------------------- Enumerating Windows NT logon/logoff scripts: *No scripts set to run* Windows NT checkdisk command: BootExecute = autocheck autochk * Windows NT 'Wininit.ini': PendingFileRenameOperations: *Registry value not found* -------------------------------------------------- Enumerating ShellServiceObjectDelayLoad items: WebCheck: *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *Registry key not found* -------------------------------------------------- End of report, 56,296 bytes Report generated in 0.109 seconds Command line options: /verbose - to add additional info on each section /complete - to include empty sections and unsuspicious data /full - to include several rarely-important sections /force9x - to include Win9x-only startups even if running on WinNT /forcent - to include WinNT-only startups even if running on Win9x /forceall - to include all Win9x and WinNT startups, regardless of platform /history - to list version history only