Results of analyzing your log


The HijackThis log analyzer beta 2 is a brand new service, so it is natural that it may have a few issues with entry descriptions and status. You can help us to improve the analyzer! If you have some information on unknown items, please share it with us and thousands of 2-Spyware.com visitors. We will carefully check your submission and approve it, if it is correct. You can also change status of entries that do not look identified correctly to you. Also feel free to post your description for existing items. We will review and add it to the analyzer's database. Thank you!

Files and registry entries considered to be safe
Legitimate items6352%
Not necessary items1714%
 8066%

File and registry entries that can be both dangerous or safe
Questionable items65%
Unknown items3529%
 4134%

Files and registry entries considered to be DANGEROUS. Fix immediately!
Dangerous items00%


Line: Status: Comments: Actions:
C:\WINDOWS\System32\smss.exe
More info about file smss.exe
Legitimate Change status
C:\WINDOWS\system32\csrss.exe
More info about file csrss.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\winlogon.exe
More info about file winlogon.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\services.exe
More info about file services.exe
Legitimate In most of cases it is legitimate system process, only sometimes can be used by malicious software Change status
C:\WINDOWS\system32\lsass.exe
More info about file lsass.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\ibmpmsvc.exe
More info about file ibmpmsvc.exe
Legitimate Item found in 2-spyware.com library
ibmpmsvc.exe belongs to IBM Power Management application.
Change status
C:\WINDOWS\system32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\System32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
More info about file btwdins.exe
Legitimate Item found in 2-spyware.com library
btwdins.exe is used when bluetooth device is installed.
Change status
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
More info about file s24evmon.exe
Legitimate Item found in 2-spyware.com library
Related to special software required by Intel wireless hardware. It allows to configure and...
Change status
C:\WINDOWS\system32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\Lavasoft\Ad-Aware\aawservice.exe
More info about file aawservice.exe
Legitimate Item found in 2-spyware.com library
Change status
C:\WINDOWS\system32\spoolsv.exe
More info about file spoolsv.exe
Legitimate Process found in system process library Change status
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe Unknown No exact entries found Insert file into database
C:\Cisco Systems\VPN Client\cvpnd.exe
More info about file cvpnd.exe
Legitimate Item found in 2-spyware.com library
cvpnd.exe is a background task used by several applications and published by Cisco Systems. The...
Change status
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
More info about file evteng.exe
Legitimate Item found in 2-spyware.com library
EvtEng.exe is an application process related to Intel EvtEng Module. It provides additional support...
Change status
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe Unknown No exact entries found Insert file into database
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
More info about file ntrtscan.exe
Legitimate Item found in 2-spyware.com library
ntrtscan.exe is a part of the Trend Micro Antivirus
Change status
C:\WINDOWS\system32\nvsvc32.exe
More info about file nvsvc32.exe
Legitimate Item found in 2-spyware.com library
NVIDIA related software. nvsvc32.exe is an executable file that is responsible for launching...
Change status
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
More info about file regsrvc.exe
Legitimate Item found in 2-spyware.com library
regsrvc.exe is an essential part of Intel wireless hardware drivers. Do not terminate or delete it...
Change status
C:\Spyware Doctor\sdhelp.exe
More info about file sdhelp.exe
Legitimate Item found in 2-spyware.com library
sdhelp.exe is part of Spyware Doctor, a popular legitimate anti-spyware program.
Change status
C:\Program Files\Sophos\AutoUpdate\ALsvc.exe Unknown No exact entries found Insert file into database
C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe Unknown No exact entries found Insert file into database
C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
More info about file tmlisten.exe
Legitimate Item found in 2-spyware.com library
This is an essential part of OfficeScan antivirus software, which is based on server and client...
Change status
C:\WINDOWS\System32\TPHDEXLG.exe Unknown No exact entries found Insert file into database
C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe Unknown No exact entries found Insert file into database
C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe Unknown No exact entries found Insert file into database
C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
More info about file rrservice.exe
Legitimate Item found in 2-spyware.com library
rrservice.exe is part of the IBM ThinkVantage Rescue and Recovery application.
Change status
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
More info about file tvtsched.exe
Legitimate Item found in 2-spyware.com library
tvtsched.exe is a legitimate application process related to IBM ThinkVantage Scheduler. It should...
Change status
C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe
More info about file iuservice.exe
Legitimate Item found in 2-spyware.com library
iuservice.exe is a process for the Rescue and Recovery tool for Lenovo computers. It is an...
Change status
C:\PROGRA~1\AVG\AVG8\avgam.exe Unknown No exact entries found Insert file into database
C:\WINDOWS\system32\wdfmgr.exe
More info about file wdfmgr.exe
Legitimate Item found in 2-spyware.com library
A part of Microsoft Windows Media Player 10. It is used to eliminate software compatibility...
Change status
C:\PROGRA~1\AVG\AVG8\avgrsx.exe Unknown No exact entries found Insert file into database
C:\PROGRA~1\AVG\AVG8\avgnsx.exe Unknown No exact entries found Insert file into database
C:\WINDOWS\TEMP\IC3FA3.EXE Unknown No exact entries found Insert file into database
C:\WINDOWS\System32\alg.exe
More info about file alg.exe
Legitimate Process found in system process library Change status
C:\Program Files\Trend Micro\OfficeScan Client\CNTAoSMgr.exe Unknown No exact entries found Insert file into database
C:\WINDOWS\System32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\Explorer.EXE
More info about file explorer.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\rundll32.exe
More info about file rundll32.exe
Legitimate Process found in system process library Change status
C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
More info about file pccntmon.exe
Legitimate Item found in 2-spyware.com library
Related to anti-virus products from Trend Micro.
Change status
C:\PROGRA~1\AVG\AVG8\avgtray.exe Unknown No exact entries found Insert file into database
C:\WINDOWS\system32\ctfmon.exe
More info about file ctfmon.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\wuauclt.exe
More info about file wuauclt.exe
Legitimate Process found in system process library Change status
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
More info about file reader_sl.exe
Legitimate Item found in 2-spyware.com library
reader_sl.exe is Related to Adobe Acrobat Reader.
Change status
C:\Program Files\Sophos\AutoUpdate\ALMon.exe Unknown No exact entries found Insert file into database
C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
More info about file bttray.exe
Legitimate Item found in 2-spyware.com library
The file is related to Widcomm‘s bluetooth software.
Change status
C:\WINDOWS\system32\wscntfy.exe
More info about file wscntfy.exe
Legitimate Process found in system process library Change status
C:\PROGRA~1\ThinkPad\BLUETO~1\BTSTAC~1.EXE Unknown No exact entries found Insert file into database
C:\WINDOWS\system32\wbem\wmiprvse.exe Legitimate Process found in system process library Change status
C:\Documents and Settings\Carlos Correa\Desktop\HijackThis_61608.exe Unknown No exact entries found Insert file into database
C:\SPYWAR~1\swdoctor.exe
More info about file swdoctor.exe
Legitimate Item found in 2-spyware.com library
Main component of Spyware Doctor, a popular anti-spyware program.
Change status
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR Not necessary http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR is your Search Bar.
If you do not like this fact, fix this item.
Change status
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR Not necessary http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR is your Search Page.
If you do not like this fact, fix this item.
Change status
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo.live.com Not necessary http://lenovo.live.com is your Default Page URL.
If you do not like this fact, fix this item.
Change status
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 Not necessary http://go.microsoft.com/fwlink/?LinkId=54896 is your Default Search URL.
If you do not like this fact, fix this item.
Change status
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 Not necessary http://go.microsoft.com/fwlink/?LinkId=54896 is your Search Page.
If you do not like this fact, fix this item.
Change status
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 Not necessary http://go.microsoft.com/fwlink/?LinkId=69157 is your start page.
If you do not like this fact, fix this item.
Change status
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR Not necessary http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR is your default SearchURL.
If you do not like this fact, fix this item.
Change status
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
More info about file avgssie.dll
Legitimate Application program item according to inner database
Related to AVG Antivirus 8.0
Change status
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\SPYWAR~1\tools\iesdsg.dll Legitimate legitimate bho toolbar, related to PCTools Spyware Doctor Change status
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
More info about file ssv.dll
Legitimate System item according to inner database
Related to Java Virtual Machine software, which is legitimate.
Change status
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\SPYWAR~1\tools\iesdpb.dll Legitimate legitimate bho toolbar, related to PCTools Spyware Doctor Change status
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll Unknown No exact entries found Insert file into database
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll Unknown No exact entries found Insert file into database
O2 - BHO: ThinkVantage Password Manager - {F040E541-A427-4CF7-85D8-75E3E0F476C5} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll Unknown No exact entries found Insert file into database
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll Unknown No exact entries found Insert file into database
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
More info about file pccntmon.exe
Legitimate Application program item according to inner database
Related to anti-virus products from Trend Micro.
Change status
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
More info about file nvcpl.dll
Legitimate System item according to inner database
Related to nVidia cards. NvCpl.dll is located in "C:\WINDOWS\SYSTEM\" on Windows 95/98/ME,...
Change status
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe Unknown No exact entries found Insert file into database
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
More info about file ctfmon.exe
Legitimate Application program item according to inner database
When you run a Microsoft Office XP or Microsoft Office 2003 program, the file Ctfmon.exe (Ctfmon)...
Change status
O4 - HKUS\S-1-5-18\..\Run: [Spyware Doctor] (User ''SYSTEM'') Questionable Application program item according to inner database
When you run a Microsoft Office XP or Microsoft Office 2003 program, the file Ctfmon.exe (Ctfmon)...
Change status
O4 - HKUS\.DEFAULT\..\Run: [Spyware Doctor] (User ''Default user'') Questionable Application program item according to inner database
When you run a Microsoft Office XP or Microsoft Office 2003 program, the file Ctfmon.exe (Ctfmon)...
Change status
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
More info about file reader_sl.exe
Legitimate Application program item according to inner database
reader_sl.exe is Related to Adobe Acrobat Reader.
Change status
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe Unknown No exact entries found Insert file into database
O4 - Global Startup: AutoUpdate Monitor.lnk = C:\Program Files\Sophos\AutoUpdate\ALMon.exe Unknown No exact entries found Insert file into database
O4 - Global Startup: Bluetooth.lnk = ? Not necessary Fix this item because it points to nowhere Change status
O4 - Global Startup: VPN Client.lnk = ? Not necessary Fix this item because it points to nowhere Change status
O9 - Extra button: (no name) - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll Not necessary This item represents extra button in your IE toolbar without name and points to file 'C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra ''Tools'' menuitem: ThinkVantage Password Manager... - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll Not necessary This item represents extra menu item in your Tools menu in IE with a name 'ThinkVantage Password Manager...' and points to file 'C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll Not necessary This item represents extra button in your IE toolbar without name and points to file 'C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll Not necessary This item represents extra menu item in your Tools menu in IE with a name 'Sun Java Console' and points to file 'C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\SPYWAR~1\tools\iesdpb.dll Not necessary This item represents extra button in your IE toolbar with a name 'Spyware Doctor' and points to file 'C:\SPYWAR~1\tools\iesdpb.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL Not necessary This item represents extra button in your IE toolbar with a name 'Research' and points to file 'C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Legitimate Legitimate extra button in your browser - related to windows messenger. Change status
O9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Legitimate Legitimate extra tools menu item - related to Windows Messenger. Change status
O15 - Trusted Zone: http://*.adobe.com Questionable Do you want URL pattern "http://*.adobe.com" to be in your trusted zone of IE? If not, fix this item. Change status
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://vnc.webex.com/client/wbs26-vzbprodins/webex/ieatgpc.cab Questionable Are you using an ActiveX object with a name 'GpcContainer Class' located in 'https://vnc.webex.com/client/wbs26-vzbprodins/webex/ieatgpc.cab'? If not, fix this item. Change status
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll Questionable It may be a trace of dangerous protocol hijacker or a legitimate item. Make some research about the name "linkscanner" and file "C:\Program Files\AVG\AVG8\avgpp.dll". Change status
O18 - Filter hijack: text/html - {8e1a4a21-53f5-4341-901d-4f5157f3b646} - C:\WINDOWS\system32\mst120.dll Questionable It may be a trace of dangerous protocol hijacker or a legitimate item. Make some research about the name "text/html" and file "C:\WINDOWS\system32\mst120.dll". Change status
O20 - AppInit_DLLs: avgrsstx.dll Unknown No exact entries found Change status
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll Unknown No exact entries found Change status
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll Unknown No exact entries found Change status
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Lavasoft\Ad-Aware\aawservice.exe
More info about file aawservice.exe
Legitimate Item found in 2-spyware.com database.
...
Change status
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe Unknown No exact entries found Insert file into database
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
More info about file btwdins.exe
Legitimate Item found in 2-spyware.com database.
btwdins.exe is used when bluetooth device is...
Change status
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Cisco Systems\VPN Client\cvpnd.exe
More info about file cvpnd.exe
Legitimate Item found in 2-spyware.com database.
cvpnd.exe is a background task used by several applications and published by Cisco Systems. The...
Change status
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
More info about file evteng.exe
Legitimate Item found in 2-spyware.com database.
EvtEng.exe is an application process related to Intel EvtEng Module. It provides additional support...
Change status
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
More info about file googleupdaterservice.exe
Legitimate Item found in 2-spyware.com database.
Service for Google...
Change status
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
More info about file ibmpmsvc.exe
Legitimate Item found in 2-spyware.com database.
ibmpmsvc.exe belongs to IBM Power Management...
Change status
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe Unknown No exact entries found Insert file into database
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
More info about file ntrtscan.exe
Legitimate Item found in 2-spyware.com database.
ntrtscan.exe is a part of the Trend Micro Antivirus...
Change status
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
More info about file nvsvc32.exe
Legitimate Item found in 2-spyware.com database.
NVIDIA related software. nvsvc32.exe is an executable file that is responsible for launching...
Change status
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
More info about file regsrvc.exe
Legitimate Item found in 2-spyware.com database.
regsrvc.exe is an essential part of Intel wireless hardware drivers. Do not terminate or delete it...
Change status
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
More info about file s24evmon.exe
Legitimate Item found in 2-spyware.com database.
Related to special software required by Intel wireless hardware. It allows to configure and...
Change status
O23 - Service: PC Tools Spyware Doctor (SDhelper) - Unknown owner - C:\Spyware Doctor\sdhelp.exe
More info about file sdhelp.exe
Legitimate Item found in 2-spyware.com database.
sdhelp.exe is part of Spyware Doctor, a popular legitimate anti-spyware...
Change status
O23 - Service: Sophos AutoUpdate Service - Sophos Plc - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe Unknown No exact entries found Insert file into database
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe Unknown No exact entries found Insert file into database
O23 - Service: OfficeScan NT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
More info about file tmlisten.exe
Legitimate Item found in 2-spyware.com database.
This is an essential part of OfficeScan antivirus software, which is based on server and client...
Change status
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe Unknown No exact entries found Insert file into database
O23 - Service: TSS Core Service (TSSCoreService) - IBM - C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe Unknown No exact entries found Insert file into database
O23 - Service: TVT Backup Protection Service - Unknown owner - C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe Unknown No exact entries found Insert file into database
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe
More info about file rrservice.exe
Legitimate Item found in 2-spyware.com database.
rrservice.exe is part of the IBM ThinkVantage Rescue and Recovery application....
Change status
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
More info about file tvtsched.exe
Legitimate Item found in 2-spyware.com database.
tvtsched.exe is a legitimate application process related to IBM ThinkVantage Scheduler. It should...
Change status
O23 - Service: tvtnetwk - Unknown owner - C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe
More info about file iuservice.exe
Legitimate Item found in 2-spyware.com database.
iuservice.exe is a process for the Rescue and Recovery tool for Lenovo computers. It is an...
Change status


Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

Recommended software:
Malwarebytes Anti Malware
(91/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t have many features. One such...
SpyHunter
(89/100)
SpyHunter is a quite simple, but yet highly effective spyware remover with an easy-to-use interface. This program is an excellent choice for users, who are not computer savvy, but...
Spyware Doctor
(87/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and easy-to-manage...
STOPzilla
(86/100)
STOPzilla is a powerful anti-spyware program that detects, blocks, and removes malicious software allowing users to surf the Web not worrying about spyware, Trojan horses, and viruses....
XoftSpySE Anti Spyware
(84/100)
XoftSpySE, an anti-spyware program made by ParetoLogic, Inc., is a simple, but effective on-demand scanner with the typical set of functions but very easy to install and use. Trial version...

Latest Spyware news:
Carl A Someone signature loved by spammers
State of Utah Reveals Why 780k People Records Were Stolen
The iPhone And iPad Are Targets For Hackers
Malicious tweets spread rogue AV infecting Android users
Be aware about malware spread via hotel Wi-Fi connections
SecureCloud Key Management Systems Released by Trend Micro
Microsoft and Adobe Releases Critical Security Updates. Update Now!
Internet Apocalypsis Upcoming - Prepare for DNSChanger Servers Closure
Hacks Through Compromised Websites Increases Rapidly, Says Symantec
Facebook judged for its privacy controls

Subscribe to news

Encyclopedia of parasites:
ErrorSmart 24/05/12
Windows Safety Maint... 24/05/12
Windows Multi Contro... 23/05/12
System Protection Tools 23/05/12
Redirect 22/05/12
Windows Secure Kit 2012 22/05/12
WeatherBug 21/05/12
Dugenpal 21/05/12
Komodola 21/05/12
SpyGraphica 20/05/12
Windows Private Shield 20/05/12
WinMaximizer 19/05/12
Windows Pro Safety R... 18/05/12
Stekct 18/05/12
Linfo 18/05/12
Wiarp 18/05/12
Farfli 18/05/12
Happili redirect 18/05/12
Vasport 17/05/12
SeekService.com 17/05/12

Library of files:
mrt.exe 23/05/12
taskeng.exe 23/05/12
mplayer.exe 14/04/12
ccApp.exe 20/03/12
guest.js 06/03/12
BCU.exe 20/02/12
pbupdate.exe 20/02/12
dumprep.exe 20/02/12
arp.exe 12/02/12
hero remote control.... 08/02/12

Archive of files
Archive of startup entries