HJT Logfile

Start Spybot at the top you will see mode make sure advanced mode is check.
Then on the left click tools > view report > place a check mark in the boxes shown.
In the body of the text right click > select all > and copy the report to your next post.

[external image: Posted Image]

Does this look like the right spybot report? Thanks for your help, btw. — Report generated: 2005-11-12 16:15 — — Spybot - Search & Destroy version: 1.4 (build: 20050523) — 2005-05-31 blindman.exe (1.0.0.1) 2005-05-31 SpybotSD.exe (1.4.0.3) 2005-05-31 TeaTimer.exe (1.4.0.2) 2005-11-12 unins000.exe (51.41.0.0) 2005-05-31 Update.exe (1.4.0.0) 2005-05-31 advcheck.dll (1.0.2.0) 2005-05-31 aports.dll (2.1.0.0) 2005-05-31 borlndmm.dll (7.0.4.453) 2005-05-31 delphimm.dll (7.0.4.453) 2005-05-31 SDHelper.dll (1.4.0.0) 2005-05-31 Tools.dll (2.0.0.2) 2005-05-31 UnzDll.dll (1.73.1.1) 2005-05-31 ZipDll.dll (1.73.2.0) 2005-11-11 Includes\Cookies.sbi (*) 2005-11-11 Includes\Dialer.sbi (*) 2005-11-11 Includes\Hijackers.sbi (*) 2005-11-11 Includes\Keyloggers.sbi (*) 2004-04-21 Includes\LSP.sbi (*) 2005-11-11 Includes\Malware.sbi (*) 2005-11-11 Includes\PUPS.sbi (*) 2005-11-11 Includes\Revision.sbi (*) 2005-11-11 Includes\Security.sbi (*) 2005-11-11 Includes\Spybots.sbi (*) 2005-02-17 Includes\Tracks.uti 2005-11-11 Includes\Trojans.sbi (*)

After placing the check marks in the boxes. Click viewreport a log should be made right click in the body of the report >chose select all right click againg and chose copy the paste the report in this thread.

Here's the rest of the report - wouldn't all fit in first window. Service (registry key): MountMgr Start: 0 Type: 1 Error Control: 1 Service (registry key): mraid35x Start: 4 Type: 1 Error Control: 1 Service (registry key): MRxDAV Display name: WebDav Client Redirector Description: WebDav Client Redirector Image path: System32\DRIVERS\mrxdav.sys Image size: 172672 Image MD5: D30CBA20CC355D3648B9FED5BB55A9D5 Start: 3 Type: 2 Error Control: 1 Service (registry key): MRxSmb Display name: MRXSMB Description: MRXSMB Image path: System32\DRIVERS\mrxsmb.sys Image size: 391936 Image MD5: 852F6FCA866E68B3A4A78C2E86EFB874 Start: 1 Type: 2 Error Control: 1 Service (registry key): MSDTC Display name: Distributed Transaction Coordinator Description: Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: C:\WINDOWS\System32\msdtc.exe Image size: 6144 Image MD5: 073D2F5B53580583FEB704084CBA39CE Start: 3 Type: 16 Error Control: 1 Depends On services: RPCSS,SamSS Service (registry key): Msfs Start: 1 Type: 2 Error Control: 1 Service (registry key): MSIServer Display name: Windows Installer Description: Installs, repairs and removes software according to instructions contained in .MSI files. Object name: LocalSystem Image path: C:\WINDOWS\System32\msiexec.exe /V Image size: 63488 Image MD5: E7A49533944654EDD82D26338DF0FD05 Start: 3 Type: 288 Error Control: 1 Depends On services: RpcSs Service (registry key): MSKSSRV Display name: Microsoft Streaming Service Proxy Image path: system32\drivers\MSKSSRV.sys Image size: 6400 Image MD5: 73FF6DDEAC27839583FE6A2573EE60CA Start: 3 Type: 1 Error Control: 1 Service (registry key): MSPCLOCK Display name: Microsoft Streaming Clock Proxy Image path: system32\drivers\MSPCLOCK.sys Image size: 5120 Image MD5: BD8A0DCF208C27E20416BF9E8AED9CF9 Start: 3 Type: 1 Error Control: 1 Service (registry key): MSPQM Display name: Microsoft Streaming Quality Manager Proxy Image path: system32\drivers\MSPQM.sys Image size: 4608 Image MD5: F6A726B8832DB1F88326B8BE98B11981 Start: 3 Type: 1 Error Control: 1 Service (registry key): ms_mpu401 Display name: Microsoft MPU-401 MIDI UART Driver Image path: system32\drivers\msmpu401.sys Image size: 2944 Image MD5: CA3E22598F411199ADC2DFEE76CD0AE0 Start: 3 Type: 1 Error Control: 1 Service (registry key): Mup Display name: Mup Start: 0 Type: 2 Error Control: 1 Service (registry key): MxlW2k Display name: MxlW2k Start: 3 Type: 1 Error Control: 1 Service (registry key): NDIS Display name: NDIS System Driver Start: 0 Type: 1 Error Control: 1 Service (registry key): NdisTapi Display name: Remote Access NDIS TAPI Driver Description: Remote Access NDIS TAPI Driver Image path: System32\DRIVERS\ndistapi.sys Image size: 9600 Image MD5: 08D43BBDACDF23F34D79E44ED35C1B4C Start: 3 Type: 1 Error Control: 1 Service (registry key): Ndisuio Display name: NDIS Usermode I/O Protocol Description: NDIS Usermode I/O Protocol Image path: System32\DRIVERS\ndisuio.sys Image size: 12160 Image MD5: DA77857D9F9BC724D779DF64DA15164B Start: 3 Type: 1 Error Control: 1 Service (registry key): NdisWan Display name: Remote Access NDIS WAN Driver Description: Remote Access NDIS WAN Driver Image path: System32\DRIVERS\ndiswan.sys Image size: 88320 Image MD5: DF101384699C87C70E9BD71DDF0E8509 Start: 3 Type: 1 Error Control: 1 Service (registry key): NDProxy Start: 3 Type: 1 Error Control: 1 Service (registry key): NetBIOS Display name: NetBIOS Interface Description: NetBIOS Interface Image path: System32\DRIVERS\netbios.sys Image size: 33152 Image MD5: 9F880D46EF6DCC865B8EF5C5A4956E3B Start: 1 Type: 2 Error Control: 1 Service (registry key): NetBT Display name: NetBT Description: NetBios over Tcpip Image path: System32\DRIVERS\netbt.sys Image size: 150272 Image MD5: 58A5116194BC0AD86A6BBDBDFA5E1240 Start: 1 Type: 1 Error Control: 1 Depends On services: Tcpip Service (registry key): NetDDE Display name: Network DDE Description: Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\system32\netdde.exe Image size: 105984 Image MD5: 8A45EC36DF58BF90816A14E9F21075DC Start: 3 Type: 32 Error Control: 1 Depends On services: NetDDEDSDM Service (registry key): NetDDEdsdm Display name: Network DDE DSDM Description: Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\system32\netdde.exe Image size: 105984 Image MD5: 8A45EC36DF58BF90816A14E9F21075DC Start: 3 Type: 32 Error Control: 1 Service (registry key): Netlogon Display name: Net Logon Description: Supports pass-through authentication of account logon events for computers in a domain. Object name: LocalSystem Image path: %SystemRoot%\System32\lsass.exe Image size: 11776 Image MD5: 8A590EA109B5E0C7629E022F8A6B17C5 Start: 3 Type: 32 Error Control: 1 Depends On services: LanmanWorkstation Service (registry key): Netman Display name: Network Connections Description: Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 3 Type: 288 Error Control: 1 Depends On services: RpcSs Service (registry key): NIC1394 Display name: 1394 Net Driver Image path: System32\DRIVERS\nic1394.sys Image size: 56960 Image MD5: 807E924D54EC8B3203430CA4D4C08314 Start: 3 Type: 1 Error Control: 1 Service (registry key): Nla Display name: Network Location Awareness (NLA) Description: Collects and stores network configuration and location information, and notifies applications when this information changes. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 3 Type: 32 Error Control: 1 Depends On services: Tcpip,Afd Service (registry key): Npfs Start: 1 Type: 2 Error Control: 1 Service (registry key): Ntfs Start: 4 Type: 2 Error Control: 1 Service (registry key): NtLmSsp Display name: NT LM Security Support Provider Description: Provides security to remote procedure call (RPC) programs that use transports other than named pipes. Object name: LocalSystem Image path: %SystemRoot%\System32\lsass.exe Image size: 11776 Image MD5: 8A590EA109B5E0C7629E022F8A6B17C5 Start: 3 Type: 32 Error Control: 1 Service (registry key): NtmsSvc Display name: Removable Storage Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 3 Type: 32 Error Control: 1 Depends On services: RpcSs Service (registry key): Null Start: 1 Type: 1 Error Control: 1 Service (registry key): nv Image path: System32\DRIVERS\nv4_mini.sys Image size: 909501 Image MD5: AE292465AA6A7DBA375A5AFA949DA83A Start: 3 Type: 1 Error Control: 0 Service (registry key): nv4 Image path: System32\DRIVERS\nv4.sys Image size: 731648 Image MD5: 4D31783965B0B7CED7DB3F4EE14CF260 Start: 3 Type: 1 Error Control: 0 Service (registry key): NVSvc Display name: NVIDIA Driver Helper Service Object name: LocalSystem Image path: %SystemRoot%\System32\nvsvc32.exe Image size: 61440 Image MD5: 2B8FBD3E1E364871E06CD29C1424DDAD Start: 2 Type: 16 Error Control: 1 Service (registry key): nv_agp Display name: NVIDIA nForce AGP Bus Filter Image path: System32\DRIVERS\nv_agp.sys Image size: 13502 Image MD5: 97E6E7DC388AC4D0052EDC375B0E1A0C Start: 0 Type: 1 Error Control: 1 Service (registry key): NwlnkFlt Display name: IPX Traffic Filter Driver Description: IPX Traffic Filter Driver Image path: System32\DRIVERS\nwlnkflt.sys Image size: 12416 Image MD5: B305F3FAD35083837EF46A0BBCE2FC57 Start: 3 Type: 1 Error Control: 1 Depends On services: NwlnkFwd Service (registry key): NwlnkFwd Display name: IPX Traffic Forwarder Driver Description: IPX Traffic Forwarder Driver Image path: System32\DRIVERS\nwlnkfwd.sys Image size: 32512 Image MD5: C99B3415198D1AAB7227F2C88FD664B9 Start: 3 Type: 1 Error Control: 1 Service (registry key): ohci1394 Display name: OHCI Compliant IEEE 1394 Host Controller Image path: System32\DRIVERS\ohci1394.sys Image size: 55424 Image MD5: D72273FEFCC1FB32F214E344667C243F Start: 0 Type: 1 Error Control: 1 Service (registry key): PalmUSBD Image path: system32\drivers\PalmUSBD.sys Image size: 16509 Image MD5: 803CF09C795290825607505D37819135 Start: 3 Type: 1 Error Control: 1 Service (registry key): Parport Display name: Parallel port driver Image path: System32\DRIVERS\parport.sys Image size: 76160 Image MD5: 1424FFBF560627B07CCE5082FA837F5C Start: 3 Type: 1 Error Control: 1 Service (registry key): PartMgr Start: 0 Type: 1 Error Control: 1 Service (registry key): ParVdm Start: 2 Type: 1 Error Control: 0 Depends On services: Parport Depends On group: "Parallel arbitrator" Service (registry key): PCI Display name: PCI Bus Driver Image path: System32\DRIVERS\pci.sys Image size: 62464 Image MD5: 1F96EECDF5D1E3385AC44C6A457B381F Start: 0 Type: 1 Error Control: 3 Service (registry key): PCIDump Start: 1 Type: 1 Error Control: 0 Service (registry key): PCIIde Image path: System32\DRIVERS\pciide.sys Image size: 3328 Image MD5: CCF5F451BB1A5A2A522A76E670000FF0 Start: 0 Type: 1 Error Control: 1 Service (registry key): Pcmcia Start: 4 Type: 1 Error Control: 1 Service (registry key): PDCOMP Start: 3 Type: 1 Error Control: 0 Service (registry key): PDFRAME Start: 3 Type: 1 Error Control: 0 Service (registry key): PDRELI Start: 3 Type: 1 Error Control: 0 Service (registry key): PDRFRAME Start: 3 Type: 1 Error Control: 0 Service (registry key): perc2 Start: 4 Type: 1 Error Control: 1 Service (registry key): perc2hib Start: 4 Type: 1 Error Control: 1 Service (registry key): PerfDisk Start: 0 Type: 0 Error Control: 0 Service (registry key): PerfNet Start: 0 Type: 0 Error Control: 0 Service (registry key): PerfOS Start: 0 Type: 0 Error Control: 0 Service (registry key): PerfProc Start: 0 Type: 0 Error Control: 0 Service (registry key): pfc Display name: Padus ASPI Shell Image path: system32\drivers\pfc.sys Image size: 13780 Image MD5: C4AA89518E8A2934EAF503C9587FF157 Start: 3 Type: 1 Error Control: 1 Service (registry key): PlugPlay Display name: Plug and Play Description: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. Object name: LocalSystem Image path: %SystemRoot%\system32\services.exe Image size: 101376 Image MD5: E3DF4A0252D287C44606EE55355E1623 Start: 2 Type: 32 Error Control: 1 Service (registry key): Pml Driver HPZ12 Display name: Pml Driver HPZ12 Object name: LocalSystem Image path: C:\WINDOWS\System32\HPZipm12.exe Image size: 65536 Image MD5: 364E30F27BE1E6DED83E81C4DE93E808 Start: 3 Type: 16 Error Control: 1 Service (registry key): PolicyAgent Display name: IPSEC Services Description: Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. Object name: LocalSystem Image path: %SystemRoot%\System32\lsass.exe Image size: 11776 Image MD5: 8A590EA109B5E0C7629E022F8A6B17C5 Start: 2 Type: 32 Error Control: 1 Depends On services: RPCSS,Tcpip,IPSec Service (registry key): PptpMiniport Display name: WAN Miniport (PPTP) Description: WAN Miniport (PPTP) Image path: System32\DRIVERS\raspptp.sys Image size: 46208 Image MD5: E0A8E63E75333AB0D742F9DBFB1688BA Start: 3 Type: 1 Error Control: 1 Service (registry key): Processor Display name: Processor Driver Image path: System32\DRIVERS\processr.sys Image size: 30592 Image MD5: 72F923F0A0FDFBE3252579CA1D1D8948 Start: 1 Type: 1 Error Control: 1 Service (registry key): prodrv06 Display name: StarForce Protection Environment Driver v6 Image path: \SystemRoot\System32\drivers\prodrv06.sys Start: 1 Type: 1 Error Control: 1 Service (registry key): prohlp02 Display name: StarForce Protection Helper Driver v2 Image path: System32\drivers\prohlp02.sys Image size: 65504 Image MD5: C5F47B7EC2EC906847D5F80BA779A5BD Start: 0 Type: 1 Error Control: 1 Service (registry key): prosync1 Display name: StarForce Protection Synchronization Driver v1 Image path: System32\drivers\prosync1.sys Image size: 6944 Image MD5: F3471E7971EE62420451D958DA635064 Start: 0 Type: 1 Error Control: 1 Service (registry key): ProtectedStorage Display name: Protected Storage Description: Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. Object name: LocalSystem Image path: %SystemRoot%\system32\lsass.exe Image size: 11776 Image MD5: 8A590EA109B5E0C7629E022F8A6B17C5 Start: 2 Type: 288 Error Control: 1 Depends On services: RpcSs Service (registry key): Ps2 Display name: PS2 Image path: System32\DRIVERS\PS2.sys Image size: 14112 Image MD5: BFFDB363485501A38F0BCA83AEC810DB Start: 3 Type: 1 Error Control: 1 Service (registry key): PSched Display name: QoS Packet Scheduler Description: QoS Packet Scheduler Image path: System32\DRIVERS\psched.sys Image size: 65920 Image MD5: 7FD061B0B0833D5106244B0CF2A1E68C Start: 3 Type: 1 Error Control: 1 Depends On services: Gpc Service (registry key): Ptilink Display name: Direct Parallel Link Driver Description: Direct Parallel Link Driver Image path: System32\DRIVERS\ptilink.sys Image size: 17792 Image MD5: 80D317BD1C3DBC5D4FE7B1678C60CADD Start: 3 Type: 1 Error Control: 1 Service (registry key): PxHelp20 Image path: System32\DRIVERS\PxHelp20.sys Image size: 16288 Image MD5: 79E924E9126BC541D6E1C76E9B077BB7 Start: 0 Type: 1 Error Control: 1 Service (registry key): ql1080 Start: 4 Type: 1 Error Control: 1 Service (registry key): Ql10wnt Start: 4 Type: 1 Error Control: 1 Service (registry key): ql12160 Start: 4 Type: 1 Error Control: 1 Service (registry key): ql1240 Start: 4 Type: 1 Error Control: 1 Service (registry key): ql1280 Start: 4 Type: 1 Error Control: 1 Service (registry key): RasAcd Display name: Remote Access Auto Connection Driver Description: Remote Access Auto Connection Driver Image path: System32\DRIVERS\rasacd.sys Image size: 8832 Image MD5: FE0D99D6F31E4FAD8159F690D68DED9C Start: 1 Type: 1 Error Control: 1 Service (registry key): RasAuto Display name: Remote Access Auto Connection Manager Description: Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 4 Type: 32 Error Control: 1 Depends On services: RasMan,Tapisrv Service (registry key): Rasl2tp Display name: WAN Miniport (L2TP) Description: WAN Miniport (L2TP) Image path: System32\DRIVERS\rasl2tp.sys Image size: 48640 Image MD5: 01BD60CDE35D8B60F46EBDF5358D7127 Start: 3 Type: 1 Error Control: 1 Service (registry key): RasMan Display name: Remote Access Connection Manager Description: Creates a network connection. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 3 Type: 32 Error Control: 1 Depends On services: Tapisrv Service (registry key): RasPppoe Display name: Remote Access PPPOE Driver Description: Remote Access PPPOE Driver Image path: System32\DRIVERS\raspppoe.sys Image size: 38912 Image MD5: 888335B3BE346119CF7B4EFF3A3FCA7C Start: 3 Type: 1 Error Control: 1 Service (registry key): Raspti Display name: Direct Parallel Description: Direct Parallel Image path: System32\DRIVERS\raspti.sys Image size: 16512 Image MD5: FDBB1D60066FCFBB7452FD8F9829B242 Start: 3 Type: 1 Error Control: 1 Service (registry key): Rdbss Display name: Rdbss Description: Rdbss Image path: System32\DRIVERS\rdbss.sys Image size: 163840 Image MD5: DE300831C74CFF09091E954A1844BDBF Start: 1 Type: 2 Error Control: 1 Service (registry key): RDPCDD Image path: System32\DRIVERS\RDPCDD.sys Image size: 4224 Image MD5: 4912D5B403614CE99C28420F75353332 Start: 1 Type: 1 Error Control: 0 Service (registry key): RDPDD Start: 0 Type: 0 Error Control: 0 Service (registry key): RDPNP Start: 0 Type: 0 Error Control: 0 Service (registry key): RDPWD Start: 3 Type: 1 Error Control: 0 Service (registry key): RDSessMgr Display name: Remote Desktop Help Session Manager Description: Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. Object name: LocalSystem Image path: C:\WINDOWS\system32\sessmgr.exe Image size: 130048 Image MD5: E6E3C190B143A6190C73F049EC39C37C Start: 3 Type: 16 Error Control: 1 Depends On services: RPCSS Service (registry key): redbook Display name: Digital CD Audio Playback Filter Driver Image path: System32\DRIVERS\redbook.sys Image size: 55808 Image MD5: DD2183A5092FEEE8961A1E19ABD1A0FC Start: 1 Type: 1 Error Control: 1 Service (registry key): RemoteAccess Display name: Routing and Remote Access Description: Offers routing services to businesses in local area and wide area network environments. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 4 Type: 32 Error Control: 1 Depends On services: RpcSS Depends On group: NetBIOSGroup Service (registry key): Retrospect Client Display name: Retrospect Client Object name: LocalSystem Image path: C:\Program Files\Dantz\Client\Remotsvc.exe Image size: 53248 Image MD5: 1B7D36A5943103204DE5706612470EC6 Start: 2 Type: 272 Error Control: 1 Depends On services: Tcpip Service (registry key): RpcLocator Display name: Remote Procedure Call (RPC) Locator Description: Manages the RPC name service database. Object name: NT AUTHORITY\NetworkService Image path: %SystemRoot%\System32\locator.exe Image size: 68608 Image MD5: 0ACFB0D8214501358FE501CF73425C52 Start: 3 Type: 16 Error Control: 1 Depends On services: LanmanWorkstation Service (registry key): RpcSs Display name: Remote Procedure Call (RPC) Description: Provides the endpoint mapper and other miscellaneous RPC services. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost -k rpcss Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Service (registry key): RSVP Display name: QoS RSVP Description: Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets. Object name: LocalSystem Image path: %SystemRoot%\System32\rsvp.exe Image size: 132608 Image MD5: 471B3F9741D762ABE75E9DEEA4787E47 Start: 3 Type: 16 Error Control: 1 Depends On services: TcpIp,Afd,RpcSs Service (registry key): rtl8139 Display name: Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver Image path: System32\DRIVERS\RTL8139.SYS Image size: 23070 Image MD5: 7A0DB9FC3DC3C620AEA30EA2A6557CAC Start: 3 Type: 1 Error Control: 1 Service (registry key): SamSs Display name: Security Accounts Manager Description: Stores security information for local user accounts. Object name: LocalSystem Image path: %SystemRoot%\system32\lsass.exe Image size: 11776 Image MD5: 8A590EA109B5E0C7629E022F8A6B17C5 Start: 2 Type: 32 Error Control: 1 Depends On services: RPCSS Service (registry key): sbp2port Display name: SBP-2 Transport/Protocol Bus Driver Image path: System32\DRIVERS\sbp2port.sys Image size: 37504 Image MD5: 0D3830C0D64A2A9EC4238A758850AE39 Start: 0 Type: 1 Error Control: 1 Service (registry key): SCardDrv Display name: Smart Card Helper Description: Enables support for legacy non-plug and play smart-card readers used by this computer. If this service is stopped, this computer will not support legacy reader. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: NT AUTHORITY\LocalService Image path: %SystemRoot%\System32\SCardSvr.exe Image size: 93184 Image MD5: A885D4EDE9852D81981B32FB0F134703 Start: 3 Type: 32 Error Control: 0 Depends On group: "Smart Card Reader" Service (registry key): SCardSvr Display name: Smart Card Description: Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: NT AUTHORITY\LocalService Image path: %SystemRoot%\System32\SCardSvr.exe Image size: 93184 Image MD5: A885D4EDE9852D81981B32FB0F134703 Start: 3 Type: 32 Error Control: 0 Depends On services: PlugPlay Service (registry key): Schedule Display name: Task Scheduler Description: Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 288 Error Control: 1 Depends On services: RpcSs Service (registry key): SDhelper Display name: PC Tools Spyware Doctor Object name: LocalSystem Image path: C:\Program Files\Spyware Doctor\sdhelp.exe Image size: 700928 Image MD5: 1CE67C541CE77C0A23C0C5F8695103F0 Start: 2 Type: 16 Error Control: 1 Service (registry key): Secdrv Display name: Secdrv Description: SafeDisc driver Image path: System32\DRIVERS\secdrv.sys Image size: 27440 Image MD5: D26E26EA516450AF9D072635C60387F4 Start: 3 Type: 1 Error Control: 1 Service (registry key): seclogon Display name: Secondary Logon Description: Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 288 Error Control: 0 Service (registry key): SENS Display name: System Event Notification Description: Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Depends On services: EventSystem Service (registry key): Serenum Display name: Serenum Filter Driver Image path: System32\DRIVERS\serenum.sys Image size: 14976 Image MD5: 65A7C4D86C153C82E33A552C217ABB29 Start: 3 Type: 1 Error Control: 1 Service (registry key): Serial Display name: Serial port driver Image path: System32\DRIVERS\serial.sys Image size: 62464 Image MD5: 1A315877D2EFCC2D0FF892D6BDB845B5 Start: 1 Type: 1 Error Control: 0 Service (registry key): sfhlp01 Display name: StarForce Protection Helper Driver Image path: System32\drivers\sfhlp01.sys Image size: 4832 Image MD5: 462AEE0EA0481EA8BD45CAC876A4CCC4 Start: 0 Type: 1 Error Control: 1 Service (registry key): Sfloppy Start: 1 Type: 1 Error Control: 0 Depends On group: "SCSI miniport" Service (registry key): SharedAccess Display name: Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) Description: Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 3 Type: 32 Error Control: 1 Depends On services: Netman,NLA,RasMan,ALG Service (registry key): ShellHWDetection Display name: Shell Hardware Detection Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 0 Depends On services: RpcSs Service (registry key): Simbad Start: 4 Type: 1 Error Control: 1 Service (registry key): SiS315 Image path: System32\DRIVERS\sisgrp.sys Image size: 187520 Image MD5: 47F18B4DF6097F30C54F51EA075D1017 Start: 3 Type: 1 Error Control: 0 Service (registry key): SISAGP Display name: SiS AGP Filter Image path: System32\DRIVERS\SISAGP.sys Image size: 27136 Image MD5: C729EB60DD40948E5EB3FB53DC9CAD44 Start: 0 Type: 1 Error Control: 1 Service (registry key): smwdm Image path: system32\drivers\smwdm.sys Image size: 459944 Image MD5: AAC8C0F579705A4EED71CDB6954481C7 Start: 3 Type: 1 Error Control: 1 Service (registry key): Sparrow Start: 4 Type: 1 Error Control: 1 Service (registry key): splitter Display name: Microsoft Kernel Audio Splitter Image path: system32\drivers\splitter.sys Image size: 5632 Image MD5: 2C55620B197ED2BA93126B76396BFF6E Start: 3 Type: 1 Error Control: 1 Service (registry key): Spooler Display name: Print Spooler Description: Loads files to memory for later printing. Object name: LocalSystem Image path: %SystemRoot%\system32\spoolsv.exe Image size: 51200 Image MD5: 9B4155BA58192D4073082B8FC5D42612 Start: 2 Type: 272 Error Control: 1 Depends On services: RPCSS Service (registry key): sr Display name: System Restore Filter Driver Image path: System32\DRIVERS\sr.sys Image size: 70400 Image MD5: F899A5D353DCBBA12EACB379E7ABFEEE Start: 0 Type: 2 Error Control: 1 Service (registry key): srservice Display name: System Restore Service Description: Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Depends On services: RpcSs Service (registry key): Srv Display name: Srv Description: Srv Image path: System32\DRIVERS\srv.sys Image size: 322304 Image MD5: 9484B95298DD39700438E037CF829056 Start: 3 Type: 2 Error Control: 1 Service (registry key): sscdbhk5 Image path: system32\drivers\sscdbhk5.sys Image size: 5589 Image MD5: 4264EBE2EDB3CAE56D6EA734B0E0AC8E Start: 1 Type: 2 Error Control: 0 Service (registry key): SSDPSRV Display name: SSDP Discovery Service Description: Enables discovery of UPnP devices on your home network. Object name: NT AUTHORITY\LocalService Image path: %SystemRoot%\System32\svchost.exe -k LocalService Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 3 Type: 32 Error Control: 1 Service (registry key): ssrtln Image path: system32\drivers\ssrtln.sys Image size: 22963 Image MD5: FDF219E0B6A5CBBA34424AC361030AED Start: 1 Type: 2 Error Control: 0 Service (registry key): StillCam Display name: Still Serial Digital Camera Driver Image path: System32\DRIVERS\serscan.sys Image size: 6784 Image MD5: A9573045BAA16EAB9B1085205B82F1ED Start: 3 Type: 1 Error Control: 1 Service (registry key): stisvc Display name: Windows Image Acquisition (WIA) Description: Provides image acquisition services for scanners and cameras. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k imgsvc Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Depends On services: RpcSs Service (registry key): swenum Display name: Software Bus Driver Image path: System32\DRIVERS\swenum.sys Image size: 3840 Image MD5: 064740C5C02DE46723C4B8200EE876DF Start: 3 Type: 1 Error Control: 1 Service (registry key): swmidi Display name: Microsoft Kernel GS Wavetable Synthesizer Image path: system32\drivers\swmidi.sys Image size: 54272 Image MD5: 94ABC808FC4B6D7D2BBF42B85E25BB4D Start: 3 Type: 1 Error Control: 1 Service (registry key): SwPrv Display name: MS Software Shadow Copy Provider Description: Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: C:\WINDOWS\System32\dllhost.exe /Processid:{470A45D0-6505-4C7F-99D9-F58D88878BB6} Image size: 4608 Image MD5: 6AE95FAF782E6F6AC6E4B3ACBF3D1573 Start: 3 Type: 16 Error Control: 0 Depends On services: rpcss Service (registry key): symc810 Start: 4 Type: 1 Error Control: 1 Service (registry key): symc8xx Start: 4 Type: 1 Error Control: 1 Service (registry key): SymEvent Image path: \??\C:\Program Files\Symantec\SYMEVENT.SYS Image size: 82136 Image MD5: 05D9613EFE7809E384C10DA26958DFA4 Start: 3 Type: 1 Error Control: 1 Service (registry key): SymWSC Display name: SymWMI Service Description: Symantec WMI Service Object name: LocalSystem Image path: C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe Image size: 316544 Image MD5: 67C5AF84809468061121FBCBECB19285 Start: 2 Type: 16 Error Control: 0 Depends On services: winmgmt Service (registry key): sym_hi Start: 4 Type: 1 Error Control: 1 Service (registry key): sym_u3 Start: 4 Type: 1 Error Control: 1 Service (registry key): sysaudio Display name: Microsoft Kernel System Audio Device Image path: system32\drivers\sysaudio.sys Image size: 57472 Image MD5: D0459F71807CCE71FE26A52F2EDEBAD9 Start: 3 Type: 1 Error Control: 1 Service (registry key): SysmonLog Display name: Performance Logs and Alerts Description: Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: NT Authority\NetworkService Image path: %SystemRoot%\system32\smlogsvc.exe Image size: 86016 Image MD5: BB5F528DC9BA1F233730223385F3EFC2 Start: 3 Type: 16 Error Control: 1 Service (registry key): TapiSrv Display name: Telephony Description: Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 3 Type: 32 Error Control: 1 Depends On services: PlugPlay,RpcSs Service (registry key): Tcpip Display name: TCP/IP Protocol Driver Description: TCP/IP Protocol Driver Image path: System32\DRIVERS\tcpip.sys Image size: 327168 Image MD5: E7774698BB0D14B0710A9A31E209F9B6 Start: 1 Type: 1 Error Control: 1 Depends On services: IPSec Service (registry key): TDPIPE Start: 3 Type: 1 Error Control: 0 Service (registry key): TDTCP Start: 3 Type: 1 Error Control: 0 Service (registry key): TermDD Display name: Terminal Device Driver Image path: System32\DRIVERS\termdd.sys Image size: 37896 Image MD5: 68B71EB2E79F60640B4B3A1A714317E5 Start: 1 Type: 1 Error Control: 1 Service (registry key): TermService Display name: Terminal Services Description: Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 3 Type: 32 Error Control: 1 Depends On services: RPCSS Service (registry key): tfsnboio Image path: system32\dla\tfsnboio.sys Image size: 23607 Image MD5: 7F975769AB303C2432B31BA55E4569C7 Start: 2 Type: 2 Error Control: 0 Service (registry key): tfsncofs Image path: system32\dla\tfsncofs.sys Image size: 34743 Image MD5: 986E35F51ED3A824C69F5BD10A793098 Start: 2 Type: 2 Error Control: 0 Service (registry key): tfsndrct Image path: system32\dla\tfsndrct.sys Image size: 4119 Image MD5: 012C7884B9D06D05A8143241A3D56D06 Start: 2 Type: 2 Error Control: 0 Service (registry key): tfsndres Image path: system32\dla\tfsndres.sys Image size: 2203 Image MD5: 42CA2C29A2ECD36B406C0E1D4DB4ED23 Start: 2 Type: 2 Error Control: 0 Service (registry key): tfsnifs Image path: system32\dla\tfsnifs.sys Image size: 52758 Image MD5: 4B1267F6AA34EC2FD7A9AE9ECB292494 Start: 2 Type: 2 Error Control: 0 Service (registry key): tfsnopio Image path: system32\dla\tfsnopio.sys Image size: 13847 Image MD5: 90CFD937019CF62C7E9C656C01E0E6AD Start: 2 Type: 2 Error Control: 0 Service (registry key): tfsnpool Image path: system32\dla\tfsnpool.sys Image size: 6327 Image MD5: 4474CB19867EA64AFF26D36BF35C5BC9 Start: 2 Type: 2 Error Control: 0 Service (registry key): tfsnudf Image path: system32\dla\tfsnudf.sys Image size: 88758 Image MD5: 1CB0DF2775BE778819E8B53CD71250C5 Start: 2 Type: 2 Error Control: 0 Service (registry key): tfsnudfa Image path: system32\dla\tfsnudfa.sys Image size: 94679 Image MD5: E091F8B100E2F2F05D24BD4E1A86996B Start: 2 Type: 2 Error Control: 0 Service (registry key): Themes Display name: Themes Description: Provides user experience theme management. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Service (registry key): TNBRLDS Display name: Tenebril antispyware satellite Description: Removes advanced spyware infections Object name: LocalSystem Image path: C:\Program Files\SpyCatcher\DeleteSvc.exe Image size: 126976 Image MD5: 7F1832115C44D44F7226929F055A36AA Start: 2 Type: 16 Error Control: 0 Service (registry key): TosIde Start: 4 Type: 1 Error Control: 1 Service (registry key): trid3d Image path: System32\DRIVERS\trid3dm.sys Image size: 144860 Image MD5: 77B27EE02E30B653CAFE68BD01E952D1 Start: 3 Type: 1 Error Control: 0 Service (registry key): TrkWks Display name: Distributed Link Tracking Client Description: Maintains links between NTFS files within a computer or across computers in a network domain. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Depends On services: RpcSs Service (registry key): TSDDD Start: 0 Type: 0 Error Control: 0 Service (registry key): Udfs Start: 4 Type: 2 Error Control: 1 Service (registry key): ultra Start: 4 Type: 1 Error Control: 1 Service (registry key): Update Display name: Microcode Update Driver Image path: System32\DRIVERS\update.sys Image size: 137088 Image MD5: 164CFAE1D766905F56C432ACFC54F28C Start: 3 Type: 1 Error Control: 1 Service (registry key): uploadmgr Display name: Upload Manager Description: Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Depends On services: RPCSS Service (registry key): upnphost Display name: Universal Plug and Play Device Host Description: Provides support to host Universal Plug and Play devices. Object name: NT AUTHORITY\LocalService Image path: %SystemRoot%\System32\svchost.exe -k LocalService Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 3 Type: 32 Error Control: 1 Depends On services: SSDPSRV Service (registry key): UPS Display name: Uninterruptible Power Supply Description: Manages an uninterruptible power supply (UPS) connected to the computer. Object name: NT AUTHORITY\LocalService Image path: %SystemRoot%\System32\ups.exe Image size: 16384 Image MD5: 3F324808E5C57399430E0C70AD565145 Start: 3 Type: 16 Error Control: 1 Service (registry key): usb Start: 0 Type: 0 Error Control: 0 Service (registry key): usbccgp Display name: Microsoft USB Generic Parent Driver Image path: System32\DRIVERS\usbccgp.sys Image size: 24960 Image MD5: 7F3366DE16A0E9390DA0ED32AB58D05D Start: 3 Type: 1 Error Control: 1 Service (registry key): usbehci Display name: Microsoft USB 2.0 Enhanced Host Controller Miniport Driver Image path: System32\DRIVERS\usbehci.sys Image size: 19072 Image MD5: CDAA3EF29EABAE9AE825BAF2B8E36735 Start: 3 Type: 1 Error Control: 1 Service (registry key): usbhub Display name: Microsoft USB Standard Hub Driver Image path: System32\DRIVERS\usbhub.sys Image size: 51584 Image MD5: 6191C287442495D5F04AC300A4B15504 Start: 3 Type: 1 Error Control: 1 Service (registry key): usbohci Display name: Microsoft USB Open Host Controller Miniport Driver Image path: System32\DRIVERS\usbohci.sys Image size: 15616 Image MD5: BA6B6215621255F0CD231F08B7D5D8CB Start: 3 Type: 1 Error Control: 1 Service (registry key): usbprint Display name: Microsoft USB PRINTER Class Image path: System32\DRIVERS\usbprint.sys Image size: 24832 Image MD5: 3768DF6B52CD1A25828157379800E14F Start: 3 Type: 1 Error Control: 1 Service (registry key): usbscan Display name: USB Scanner Driver Image path: System32\DRIVERS\usbscan.sys Image size: 13824 Image MD5: 96F74BD303006971DE644BCA1A7ED858 Start: 3 Type: 1 Error Control: 1 Service (registry key): USBSTOR Display name: USB Mass Storage Driver Image path: System32\DRIVERS\USBSTOR.SYS Image size: 21760 Image MD5: 694F2B90124EB086C38C18DA97A13E48 Start: 3 Type: 1 Error Control: 1 Service (registry key): usbuhci Display name: Microsoft USB Universal Host Controller Miniport Driver Image path: System32\DRIVERS\usbuhci.sys Image size: 18944 Image MD5: B8F6119FD7DF389D823BA27A3023E150 Start: 3 Type: 1 Error Control: 1 Service (registry key): VgaSave Image path: \SystemRoot\System32\drivers\vga.sys Start: 1 Type: 1 Error Control: 0 Service (registry key): viaagp Display name: VIA AGP Bus Filter Image path: System32\DRIVERS\viaagp.sys Image size: 27392 Image MD5: CDB62AAA807C1A0A3A8449F83267E628 Start: 0 Type: 1 Error Control: 1 Service (registry key): ViaIde Image path: System32\DRIVERS\viaide.sys Image size: 4352 Image MD5: 1C0CBB4E50D37059CE41CD134F6B5AB7 Start: 0 Type: 1 Error Control: 1 Service (registry key): VolSnap Start: 0 Type: 1 Error Control: 1 Service (registry key): VSS Display name: Volume Shadow Copy Description: Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\vssvc.exe Image size: 275456 Image MD5: F422CECCF4B02790F80176CF3F4759C0 Start: 3 Type: 16 Error Control: 1 Depends On services: RPCSS Service (registry key): VXD Start: 0 Type: 0 Error Control: 0 Service (registry key): W32Time Display name: Windows Time Description: Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Service (registry key): W3SVC Start: 0 Type: 0 Error Control: 0 Service (registry key): Wanarp Display name: Remote Access IP ARP Driver Description: Remote Access IP ARP Driver Image path: System32\DRIVERS\wanarp.sys Image size: 33280 Image MD5: 484AF08F15D1306FF2E8B64FE62A160C Start: 3 Type: 1 Error Control: 1 Service (registry key): wanatw Display name: WAN Miniport (ATW) Image path: System32\DRIVERS\wanatw4.sys Image size: 33588 Image MD5: 0A716C08CB13C3A8F4F51E882DBF7416 Start: 3 Type: 1 Error Control: 1 Service (registry key): WANMiniportService Display name: WAN Miniport (ATW) Service Object name: LocalSystem Image path: "C:\WINDOWS\wanmpsvc.exe" Image size: 65536 Image MD5: EB9A99AB5D17B1727034FF191E6448D7 Start: 2 Type: 16 Error Control: 0 Service (registry key): WDICA Start: 3 Type: 1 Error Control: 0 Service (registry key): wdmaud Display name: Microsoft WINMM WDM Audio Compatibility Driver Image path: system32\drivers\wdmaud.sys Image size: 79616 Image MD5: 1106767A0647BF3BE4535C91F74FE7DA Start: 3 Type: 1 Error Control: 1 Service (registry key): WebClient Display name: WebClient Description: Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: NT AUTHORITY\LocalService Image path: %SystemRoot%\System32\svchost.exe -k LocalService Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Depends On services: MRxDAV Service (registry key): WebPost Start: 0 Type: 0 Error Control: 0 Service (registry key): winmgmt Display name: Windows Management Instrumentation Description: Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Object name: LocalSystem Image path: %systemroot%\system32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 0 Depends On services: RPCSS,Eventlog Service (registry key): Winsock Start: 3 Type: 4 Error Control: 1 Service (registry key): WinSock2 Start: 0 Type: 0 Error Control: 0 Service (registry key): WinTrust Start: 0 Type: 0 Error Control: 0 Service (registry key): WmdmPmSp Display name: Portable Media Serial Number Description: Retrieves the serial number of any portable music player connected to your computer Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Service (registry key): WmiApRpl Start: 0 Type: 0 Error Control: 0 Service (registry key): WmiApSrv Display name: WMI Performance Adapter Description: Provides performance library information from WMI HiPerf providers. Object name: LocalSystem Image path: C:\WINDOWS\System32\wbem\wmiapsrv.exe Image size: 117248 Image MD5: B7891998B0F21C8D1A928C0578B0368B Start: 3 Type: 16 Error Control: 1 Depends On services: RPCSS Service (registry key): WS2IFSL Display name: Windows Socket 2.0 Non-IFS Service Provider Support Environment Image path: \SystemRoot\System32\drivers\ws2ifsl.sys Start: 4 Type: 1 Error Control: 1 Service (registry key): wuauserv Display name: Automatic Updates Description: Enables the download and installation of critical Windows updates. If the service is disabled, the operating system can be manually updated at the Windows Update Web site. Object name: LocalSystem Image path: %SystemRoot%\system32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Service (registry key): WZCSVC Display name: Wireless Zero Configuration Description: Provides automatic configuration for the 802.11 adapters Object name: LocalSystem Image path: %SystemRoot%\System32\svchost.exe -k netsvcs Image size: 12800 Image MD5: 0F7D9C87B0CE1FA520473119752C6F79 Start: 2 Type: 32 Error Control: 1 Depends On services: RpcSs,Ndisuio Service (registry key): {46711EF7-B4E9-448E-90ED-462CC432ECC5} Start: 0 Type: 0 Error Control: 0 Service (registry key): {6080A529-897E-4629-A488-ABA0C29B635E} Display name: Intel® Graphics Platform (SoftBIOS) Driver Image path: system32\drivers\ialmsbw.sys Image size: 87648 Image MD5: 231F08744F697B9732CCE7F5020819BB Start: 3 Type: 1 Error Control: 1 Service (registry key): {8C50E5FE-FB53-4E04-AFD5-73EC52EF67D0} Start: 0 Type: 0 Error Control: 0 Service (registry key): {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} Display name: Intel® Graphics Chipset (KCH) Driver Image path: system32\drivers\ialmkchw.sys Image size: 69472 Image MD5: 54419FC58E342205ADAB380E3F4975E7 Start: 3 Type: 1 Error Control: 1

I would like to see the file C:\WINDOWS\aryx.exe
You can upload it here

Close all programs leaving only HijackThis running. Place a check against each of the following,

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
O4 - Startup: Scheduler.lnk = C:\Program Files\SpyCatcher\Scheduler daemon.exe
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/MTSInstall…od/install.html
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/200726425348ab…ip/RdxIE601.cab

Click on Fix Checked when finished and exit HijackThis.
Post back a fresh HijackThis log and we will take another look.

Missing the bottom part of the log please repost it.

Close all programs leaving only HijackThis running. Place a check against each of the following,

O4 - HKLM\..\Run: [aryx] C:\WINDOWS\aryx.exe
O4 - Startup: PowerReg Scheduler.exe

Click on Fix Checked when finished and exit HijackThis.


Download Pocket Killbox and unzip it; save it to your Desktop.

Run it, and click the radio button that says Delete a file on reboot. paste
C:\WINDOWS\aryx.exe
the full path of file to delete box and click the red circle with a white cross in it.

The program will ask you if you want to reboot; answer Yes.

Let the system reboot.
post another log.

Can you download and run Rootkit revealer.

http://www.sysinternals.com/Utilities/RootkitRevealer.html

And post the results here.

Ran Rootkit Revealer - but can't figure out how to copy results, so I'm gonna tell you what it says: C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\GFK117WT\Search[1].:| Note that the last symbol above is actually shorter and bolder, but I wasn't sure how to reproduce it. As for the "desription" part - it says "hidden from windows API" For D: and J: is simply said - "error mounting volume

For some reason your windows has not updated.
Please try this link


Then go to windows update

Then click Review your Update History. See if any failed?