Results of analyzing your log


The HijackThis log analyzer beta 2 is a brand new service, so it is natural that it may have a few issues with entry descriptions and status. You can help us to improve the analyzer! If you have some information on unknown items, please share it with us and thousands of 2-Spyware.com visitors. We will carefully check your submission and approve it, if it is correct. You can also change status of entries that do not look identified correctly to you. Also feel free to post your description for existing items. We will review and add it to the analyzer's database. Thank you!

Files and registry entries considered to be safe
Legitimate items6658%
Not necessary items2522%
 9180%

File and registry entries that can be both dangerous or safe
Questionable items1211%
Unknown items109%
 2220%

Files and registry entries considered to be DANGEROUS. Fix immediately!
Dangerous items00%


Line: Status: Comments: Actions:
C:\WINDOWS\System32\smss.exe
More info about file smss.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\winlogon.exe
More info about file winlogon.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\services.exe
More info about file services.exe
Legitimate In most of cases it is legitimate system process, only sometimes can be used by malicious software Change status
C:\WINDOWS\system32\lsass.exe
More info about file lsass.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\System32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\spoolsv.exe
More info about file spoolsv.exe
Legitimate Process found in system process library Change status
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
More info about file acsd.exe
Legitimate Item found in 2-spyware.com library
File acsd.exe is an essential component of AOL 9.0 software, which is used to connect your computer...
Change status
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe Unknown No exact entries found Insert file into database
c:\program files\mcafee.com\agent\mcdetect.exe
More info about file mcdetect.exe
Legitimate Item found in 2-spyware.com library
Related to McAfee Antivirus program.
Change status
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
More info about file mcshield.exe
Legitimate Item found in 2-spyware.com library
Process mcshield.exe usually starts automatically on system's startup and stays in background. It...
Change status
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
More info about file mctskshd.exe
Legitimate Item found in 2-spyware.com library
This is a part of McAfee Antivirus software.
Change status
C:\WINDOWS\System32\nvsvc32.exe
More info about file nvsvc32.exe
Legitimate Item found in 2-spyware.com library
NVIDIA related software. nvsvc32.exe is an executable file that is responsible for launching...
Change status
C:\WINDOWS\System32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\wanmpsvc.exe
More info about file wanmpsvc.exe
Legitimate Item found in 2-spyware.com library
File wanmpsvc.exe is a standard component of AOL 7.0 software and its later versions. It runs...
Change status
C:\WINDOWS\system32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\fxssvc.exe
More info about file fxssvc.exe
Legitimate Item found in 2-spyware.com library
File fxssvc.exe stands for Microsoft Fax Service. It is a standard Windows component, designed to...
Change status
C:\WINDOWS\Explorer.EXE
More info about file explorer.exe
Legitimate Process found in system process library Change status
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
More info about file mcagent.exe
Legitimate Item found in 2-spyware.com library
Part of McAfee Anti-Virus. Located in "c:\Program Files\mcafee.com\agent\".
Change status
C:\Program Files\2Wire\2PortalMon.exe Unknown No exact entries found Insert file into database
C:\Program Files\iTunes\iTunesHelper.exe
More info about file ituneshelper.exe
Legitimate Item found in 2-spyware.com library
Related to Apple's iTunes for Windows. Located in "C:\Program Files\iTunes\".
Change status
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
More info about file mcvsshld.exe
Legitimate Item found in 2-spyware.com library
Vital component of McAfee antivirus software
Change status
C:\Program Files\iPod\bin\iPodService.exe
More info about file ipodservice.exe
Legitimate Item found in 2-spyware.com library
This is a legitimate component of iTunes music program. It offers wide range of music playing and...
Change status
C:\Program Files\McAfee.com\VSO\oasclnt.exe
More info about file oasclnt.exe
Legitimate Item found in 2-spyware.com library
The file is a part of McAfee Internet Security Suite.
Change status
C:\Program Files\Common Files\AOL\1161747631\ee\AOLSoftware.exe
More info about file aolsoftware.exe
Legitimate Item found in 2-spyware.com library
Related to legitimate America Online software
Change status
c:\progra~1\mcafee.com\vso\mcvsescn.exe
More info about file mcvsescn.exe
Legitimate Item found in 2-spyware.com library
Executable mcvsescn.exe is a part of McAfee VirusScan suite. It is required to perform background...
Change status
C:\WINDOWS\system32\WDBtnMgr.exe Unknown No exact entries found Insert file into database
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
More info about file avgas.exe
Legitimate Item found in 2-spyware.com library
Legitimate file, related to AVG anti-spyware.
Change status
C:\WINDOWS\system32\wuauclt.exe
More info about file wuauclt.exe
Legitimate Process found in system process library Change status
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
More info about file superantispyware.exe
Legitimate Item found in 2-spyware.com library
SAS is one of the best as-programs
Change status
c:\program files\common files\aol\1161747631\ee\aim6.exe Unknown No exact entries found Insert file into database
C:\Program Files\Digital Line Detect\DLG.exe
More info about file dlg.exe
Legitimate Digital Line Detect. A part of BVRP Phone Tools software offering faxing, e-mailing, etc. Change status
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
More info about file hpohmr08.exe
Legitimate Item found in 2-spyware.com library
This file is a standard part of Hewlett-Packard software.
Change status
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
More info about file hpoevm08.exe
Legitimate Item found in 2-spyware.com library
File hpoevm08.exe is an essential component of HP Image Editor program, which comes with the...
Change status
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
More info about file hpotdd01.exe
Legitimate Item found in 2-spyware.com library
This file is a standard part of Hewlett-Packard software, which is used to manipulate digital...
Change status
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
More info about file hposts08.exe
Legitimate Item found in 2-spyware.com library
Executable hposts08.exe runs the legitimate and useful program, designed to monitor and provide...
Change status
C:\Program Files\HijackThis\HijackThis.exe
More info about file hijackthis.exe
Legitimate Item found in 2-spyware.com library
This is the main component of HijackThis security application, designed to perform system scans and...
Change status
C:\WINDOWS\System32\msiexec.exe
More info about file msiexec.exe
Legitimate Item found in 2-spyware.com library
This file is related to Microsoft Windows Installer - it is a system component, used to handle MSI...
Change status
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway Not necessary http://www.dell4me.com/myway is your Default Page URL.
If you do not like this fact, fix this item.
Change status
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ Not necessary http://www.yahoo.com/ is your start page.
If you do not like this fact, fix this item.
Change status
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank Not necessary about:blank is your Default Page URL.
If you do not like this fact, fix this item.
Change status
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank Not necessary about:blank is your Default Search URL.
If you do not like this fact, fix this item.
Change status
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Not necessary Fix this item because it points to nowhere Change status
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll Legitimate legitimate bho toolbar, related to SpyBot Search&Destroy Change status
O2 - BHO: msdn_lib.msdn_hlp - {7C2F2C76-1489-450D-B8FB-0B9692D788F9} - C:\WINDOWS\system32\msdn_lib.dll (file missing) Not necessary Fix this item, because it points to file that cannot be found Change status
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
More info about file mcvsshl.dll
Legitimate Application program item according to inner database
A BHO toolbar installed by the legitimate McAfee VirusScan antivirus.
Change status
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
More info about file mcagent.exe
Legitimate Application program item according to inner database
Part of McAfee Anti-Virus. Located in "c:\Program Files\mcafee.com\agent\".
Change status
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
More info about file mcupdate.exe
Legitimate An update utility used by the legitimate McAfee VirusScan antivirus. Change status
O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\2PortalMon.exe Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
More info about file ituneshelper.exe
Legitimate Application program item according to inner database
Related to Apple's iTunes for Windows. Located in "C:\Program Files\iTunes\".
Change status
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
More info about file mcvsshld.exe
Legitimate Application program item according to inner database
Vital component of McAfee antivirus software
Change status
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask Questionable questionable item according to our database Change status
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
More info about file oasclnt.exe
Legitimate Application program item according to inner database
The file is a part of McAfee Internet Security Suite.
Change status
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
More info about file realsched.exe
Legitimate Application program item according to inner database
Related to Real-One player. Located in "C:\Program Files\Common Files\Real\Update_OB\".
Change status
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1161747631\ee\AOLSoftware.exe
More info about file aolsoftware.exe
Legitimate Application program item according to inner database
Related to legitimate America Online software
Change status
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
More info about file iphsend.exe
Legitimate Application program item according to inner database
The file is related to AOL software.
Change status
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe Questionable questionable item according to our database Change status
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
More info about file msascui.exe
Legitimate Application program item according to inner database
The file is component of Microsoft Windows Defender application.
Change status
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
More info about file avgas.exe
Legitimate Application program item according to inner database
Legitimate file, related to AVG anti-spyware.
Change status
O4 - HKLM\..\Run: [SBCSTray] C:\Program Files\Sunbelt Software\CounterSpy\SBCSTray.exe Unknown No exact entries found Insert file into database
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
More info about file superantispyware.exe
Legitimate System item according to inner database
SAS is one of the best as-programs
Change status
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
More info about file aollaunch.exe
Legitimate Application program item according to inner database
The file is related to AOL software.
Change status
O4 - Global Startup: Digital Line Detect.lnk = ? Not necessary Fix this item because it points to nowhere Change status
O4 - Global Startup: hp psc 1000 series.lnk = ? Not necessary Fix this item because it points to nowhere Change status
O4 - Global Startup: hpoddt01.exe.lnk = ? Not necessary Fix this item because it points to nowhere Change status
O4 - Global Startup: WD Backup Monitor.lnk = ? Not necessary Fix this item because it points to nowhere Change status
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll Not necessary This item represents extra button in your IE toolbar without name and points to file 'C:\WINDOWS\system32\msjava.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll Not necessary This item represents extra menu item in your Tools menu in IE with a name 'Sun Java Console' and points to file 'C:\WINDOWS\system32\msjava.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePokerMaster\EmpirePoker\RunEPoker.exe Not necessary This item represents extra button in your IE toolbar with a name 'EmpirePoker' and points to file 'C:\Program Files\EmpirePokerMaster\EmpirePoker\RunEPoker.exe'. If you do not want it to be there, fix this item. Change status
O9 - Extra ''Tools'' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePokerMaster\EmpirePoker\RunEPoker.exe Not necessary This item represents extra menu item in your Tools menu in IE with a name 'EmpirePoker' and points to file 'C:\Program Files\EmpirePokerMaster\EmpirePoker\RunEPoker.exe'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) Not necessary Fix this item because it points to a file that cannot be found Change status
O9 - Extra ''Tools'' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) Not necessary Fix this item because it points to a file that cannot be found Change status
O9 - Extra button: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program Files\UltimateBet\UltimateBet.exe Not necessary This item represents extra button in your IE toolbar with a name 'UltimateBet' and points to file 'C:\Program Files\UltimateBet\UltimateBet.exe'. If you do not want it to be there, fix this item. Change status
O9 - Extra ''Tools'' menuitem: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program Files\UltimateBet\UltimateBet.exe Not necessary This item represents extra menu item in your Tools menu in IE with a name 'UltimateBet' and points to file 'C:\Program Files\UltimateBet\UltimateBet.exe'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: The Gaming Club Poker - {A18AC347-2CA3-4e5d-AB86-33BFC7EEB931} - C:\Program Files\gamingclubMPP\MPPoker.exe Not necessary This item represents extra button in your IE toolbar with a name 'The Gaming Club Poker' and points to file 'C:\Program Files\gamingclubMPP\MPPoker.exe'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe Legitimate Legitimate extra button in your browser - related to AOL Instant Messenger. Change status
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe Not necessary This item represents extra button in your IE toolbar with a name 'PartyPoker.com' and points to file 'C:\Program Files\PartyGaming\PartyPoker\RunApp.exe'. If you do not want it to be there, fix this item. Change status
O9 - Extra ''Tools'' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe Not necessary This item represents extra menu item in your Tools menu in IE with a name 'PartyPoker.com' and points to file 'C:\Program Files\PartyGaming\PartyPoker\RunApp.exe'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll Not necessary This item represents extra button in your IE toolbar with a name 'Real.com' and points to file 'C:\WINDOWS\System32\Shdocvw.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe (file missing) Not necessary Fix this item because it points to a file that cannot be found Change status
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Legitimate Legitimate extra button in your browser - related to windows messenger. Change status
O9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Legitimate Legitimate extra tools menu item - related to Windows Messenger. Change status
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU) Not necessary Fix this item because it points to a file that cannot be found Change status
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll Legitimate This item represents a plugin added to Internet Explorer to work with '.spop' files. Seems to be safe, unless you know that it is malicious. Change status
O15 - Trusted Zone: *.musicmatch.com Questionable Do you want URL pattern "*.musicmatch.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.musicmatch.com (HKLM) Questionable Do you want URL pattern "*.musicmatch.com " to be in your trusted zone of IE? If not, fix this item. Change status
O16 - DPF: YExplorer1_8US.CAB - http://photos.groups.yahoo.com/ocx/us/yexplorer1_8us.cab Questionable Are you using an ActiveX object with no name located in 'http://photos.groups.yahoo.com/ocx/us/yexplorer1_8us.cab'? If not, fix this item. Change status
O16 - DPF: {360E40AA-EE8B-4101-BA67-0CAD3F7A48DD} (Nyoko Downloader Class) - http://www.gamingclubpoker.com/download_helper/Nyoko.cab Questionable Are you using an ActiveX object with a name 'Nyoko Downloader Class' located in 'http://www.gamingclubpoker.com/download_helper/Nyoko.cab'? If not, fix this item. Change status
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqaio/downloads/sysinfo.cab Questionable Are you using an ActiveX object with no name located in 'http://ipgweb.cce.hp.com/rdqaio/downloads/sysinfo.cab'? If not, fix this item. Change status
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab Legitimate Legitimate ActiveX item from site http://download.mcafee.com/ Change status
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab Questionable Are you using an ActiveX object with a name 'BDSCANONLINE Control' located in 'http://download.bitdefender.com/resources/scan8/oscan8.cab'? If not, fix this item. Change status
O16 - DPF: {6C275925-A1ED-4DD2-9CEE-9823F5FDAA10} (F5 Networks SSLTunnel) - https://lbxdirect.mechbank.com/vdesk/terminal
/urTermProxy.cab#version=2003,12,9,2
Questionable Are you using an ActiveX object with a name 'F5 Networks SSLTunnel' located in 'https://lbxdirect.mechbank.com/vdesk/terminal
/urTermProxy.cab#version=2003,12,9,2'? If not, fix this item.
Change status
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,19/mcgdmgr.cab Legitimate Legitimate ActiveX item from site http://download.mcafee.com/ Change status
O16 - DPF: {E0FF21FA-B857-45C5-8621-F120A0C17FF2} (F5 Networks Host Control) - https://lbxdirect.mechbank.com/vdesk/terminal/urxhost.cab Questionable Are you using an ActiveX object with a name 'F5 Networks Host Control' located in 'https://lbxdirect.mechbank.com/vdesk/terminal/urxhost.cab'? If not, fix this item. Change status
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://mvnet.xlontech.net/qm/fox/06071909/qsp2ie06071909.cab Questionable Are you using an ActiveX object with a name 'Quantum Streaming IE Player Class' located in 'http://mvnet.xlontech.net/qm/fox/06071909/qsp2ie06071909.cab'? If not, fix this item. Change status
O16 - DPF: {EF6E7E56-9229-4C73-AAD0-15316405DB95} (Easy Photo Uploader) - http://www.perfectpairofaces.com/~site/UploadBox/UploadBox_live.cab Questionable Are you using an ActiveX object with a name 'Easy Photo Uploader' located in 'http://www.perfectpairofaces.com/~site/UploadBox/UploadBox_live.cab'? If not, fix this item. Change status
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL Unknown No exact entries found Change status
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll Legitimate windows check Change status
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
More info about file acsd.exe
Legitimate Item found in 2-spyware.com database.
File acsd.exe is an essential component of AOL 9.0 software, which is used to connect your computer...
Change status
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe Unknown No exact entries found Insert file into database
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe Unknown No exact entries found Insert file into database
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe Legitimate Related to Macrovision Corporation. Change status
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
More info about file ipodservice.exe
Legitimate Item found in 2-spyware.com database.
This is a legitimate component of iTunes music program. It offers wide range of music playing and...
Change status
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
More info about file mcdetect.exe
Legitimate Item found in 2-spyware.com database.
Related to McAfee Antivirus...
Change status
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
More info about file mcshield.exe
Legitimate Item found in 2-spyware.com database.
Process mcshield.exe usually starts automatically on system's startup and stays in background. It...
Change status
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
More info about file mctskshd.exe
Legitimate Item found in 2-spyware.com database.
This is a part of McAfee Antivirus...
Change status
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe Legitimate McAfee Antivirus updater Change status
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe Legitimate Intel NCS NetService Change status
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
More info about file nvsvc32.exe
Legitimate Item found in 2-spyware.com database.
NVIDIA related software. nvsvc32.exe is an executable file that is responsible for launching...
Change status
O23 - Service: PostgreSQL Database Server 8.0 (pgsql-8.0) - Unknown owner - C:\Program Files\PostgreSQL\8.0\bin\pg_ctl.exe" runservice -N "pgsql-8.0" -D "C:\Program Files\PostgreSQL\8.0\data\ (file missing) Not necessary Fix this item because it points to a file that does not exist Change status
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
More info about file hpzipm12.exe
Legitimate Item found in 2-spyware.com database.
This is a standard component of Hewlett-Packard device drivers. The presence of this file means,...
Change status
O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe Unknown No exact entries found Insert file into database
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
More info about file wanmpsvc.exe
Legitimate Item found in 2-spyware.com database.
File wanmpsvc.exe is a standard component of AOL 7.0 software and its later versions. It runs...
Change status


Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

Recommended software:
Malwarebytes Anti Malware
(91/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t have many features. One such...
SpyHunter
(89/100)
SpyHunter is a quite simple, but yet highly effective spyware remover with an easy-to-use interface. This program is an excellent choice for users, who are not computer savvy, but...
Spyware Doctor
(87/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and easy-to-manage...
STOPzilla
(86/100)
STOPzilla is a powerful anti-spyware program that detects, blocks, and removes malicious software allowing users to surf the Web not worrying about spyware, Trojan horses, and viruses....
XoftSpySE Anti Spyware
(84/100)
XoftSpySE, an anti-spyware program made by ParetoLogic, Inc., is a simple, but effective on-demand scanner with the typical set of functions but very easy to install and use. Trial version...

Latest Spyware news:
Carl A Someone signature loved by spammers
State of Utah Reveals Why 780k People Records Were Stolen
The iPhone And iPad Are Targets For Hackers
Malicious tweets spread rogue AV infecting Android users
Be aware about malware spread via hotel Wi-Fi connections
SecureCloud Key Management Systems Released by Trend Micro
Microsoft and Adobe Releases Critical Security Updates. Update Now!
Internet Apocalypsis Upcoming - Prepare for DNSChanger Servers Closure
Hacks Through Compromised Websites Increases Rapidly, Says Symantec
Facebook judged for its privacy controls

Subscribe to news

Encyclopedia of parasites:
ErrorSmart 24/05/12
Windows Safety Maint... 24/05/12
Windows Multi Contro... 23/05/12
System Protection Tools 23/05/12
Redirect 22/05/12
Windows Secure Kit 2012 22/05/12
WeatherBug 21/05/12
Dugenpal 21/05/12
Komodola 21/05/12
SpyGraphica 20/05/12
Windows Private Shield 20/05/12
WinMaximizer 19/05/12
Windows Pro Safety R... 18/05/12
Stekct 18/05/12
Linfo 18/05/12
Wiarp 18/05/12
Farfli 18/05/12
Happili redirect 18/05/12
Vasport 17/05/12
SeekService.com 17/05/12

Library of files:
mrt.exe 23/05/12
taskeng.exe 23/05/12
mplayer.exe 14/04/12
ccApp.exe 20/03/12
guest.js 06/03/12
BCU.exe 20/02/12
pbupdate.exe 20/02/12
dumprep.exe 20/02/12
arp.exe 12/02/12
hero remote control.... 08/02/12

Archive of files
Archive of startup entries