Results of analyzing your log


The HijackThis log analyzer beta 2 is a brand new service, so it is natural that it may have a few issues with entry descriptions and status. You can help us to improve the analyzer! If you have some information on unknown items, please share it with us and thousands of 2-Spyware.com visitors. We will carefully check your submission and approve it, if it is correct. You can also change status of entries that do not look identified correctly to you. Also feel free to post your description for existing items. We will review and add it to the analyzer's database. Thank you!

Files and registry entries considered to be safe
Legitimate items5341%
Not necessary items3426%
 8767%

File and registry entries that can be both dangerous or safe
Questionable items3728%
Unknown items54%
 4232%

Files and registry entries considered to be DANGEROUS. Fix immediately!
Dangerous items11%


Line: Status: Comments: Actions:
C:\WINDOWS\System32\smss.exe
More info about file smss.exe
Legitimate Change status
C:\WINDOWS\system32\winlogon.exe
More info about file winlogon.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\services.exe
More info about file services.exe
Legitimate In most of cases it is legitimate system process, only sometimes can be used by malicious software Change status
C:\WINDOWS\system32\lsass.exe
More info about file lsass.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\system32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\System32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\System32\wltrysvc.exe
More info about file wltrysvc.exe
Legitimate Item found in 2-spyware.com library
Installed alongside Broadcom wireless communication software. It is a tool that displays an icon in...
Change status
C:\WINDOWS\System32\bcmwltry.exe
More info about file bcmwltry.exe
Legitimate Item found in 2-spyware.com library
bcmwltry.exe is BroadCom's Wireless Network Tray Applet. It runs if you are on a wireless...
Change status
C:\WINDOWS\system32\spoolsv.exe
More info about file spoolsv.exe
Legitimate Process found in system process library Change status
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
More info about file aolacsd.exe
Legitimate Item found in 2-spyware.com library
This is a standard component of AOL 9.0 Internet connection software. File aolacsd.exe is required...
Change status
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
More info about file guard.exe
Legitimate Item found in 2-spyware.com library
AVG Anti-spyware Guard
Change status
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
More info about file avgamsvr.exe
Legitimate Item found in 2-spyware.com library
It is a part of the AVG Anti-Virus program made by Grisoft. It is also related to other Grisoft...
Change status
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
More info about file avgupsvc.exe
Legitimate Item found in 2-spyware.com library
It is a part of the AVG Anti-Virus program made by Grisoft. It is also related to other Grisoft...
Change status
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
More info about file avgemc.exe
Legitimate Item found in 2-spyware.com library
It is a part of the AVG Anti-Virus program made by Grisoft. It is also related to other Grisoft...
Change status
c:\program files\mcafee.com\agent\mcdetect.exe
More info about file mcdetect.exe
Legitimate Item found in 2-spyware.com library
Related to McAfee Antivirus program.
Change status
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
More info about file mctskshd.exe
Legitimate Item found in 2-spyware.com library
This is a part of McAfee Antivirus software.
Change status
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
More info about file mpfservice.exe
Legitimate Item found in 2-spyware.com library
mpfservice.exe is an application process related to McAfee Personal Firewall Service. It is crucial...
Change status
C:\WINDOWS\winself.exe Unknown No exact entries found Insert file into database
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
More info about file nicconfigsvc.exe
Legitimate Item found in 2-spyware.com library
Related to special power management software for network adapters on Dell computers.
Change status
C:\WINDOWS\system32\svchost.exe
More info about file svchost.exe
Legitimate Process found in system process library Change status
C:\WINDOWS\Explorer.EXE
More info about file explorer.exe
Legitimate Process found in system process library Change status
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
More info about file avgcc.exe
Legitimate Item found in 2-spyware.com library
It is a part of the AVG Anti-Virus program made by Grisoft. It is also related to other Grisoft...
Change status
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
More info about file avgas.exe
Legitimate Item found in 2-spyware.com library
avgas.exe is a process related to AVG anti-virus software. If you are using AVG anti-virus, this...
Change status
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
More info about file hijackthis.exe
Legitimate Item found in 2-spyware.com library
This is the main component of HijackThis security application, designed to perform system scans and...
Change status
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway Not necessary http://www.dell4me.com/myway is your Default Page URL.
If you do not like this fact, fix this item.
Change status
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html Not necessary http://bfc.myway.com/search/de_srchlft.html is your Search Bar.
If you do not like this fact, fix this item.
Change status
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie
/defaults/sp/sbcydsl/*http://www.yahoo.com
Not necessary http://red.clientapps.yahoo.com/customize/ie
/defaults/sp/sbcydsl/*http://www.yahoo.com is your Search Page.
If you do not like this fact, fix this item.
Change status
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75 Not necessary http://runonce.msn.com/?v=msgrv75 is your start page.
If you do not like this fact, fix this item.
Change status
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl Not necessary http://yahoo.sbc.com/dsl is your Default Page URL.
If you do not like this fact, fix this item.
Change status
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie
/defaults/su/sbcydsl/*http://www.yahoo.com
Not necessary http://red.clientapps.yahoo.com/customize/ie
/defaults/su/sbcydsl/*http://www.yahoo.com is your Default Search URL.
If you do not like this fact, fix this item.
Change status
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults
/sb/sbcydsl/*http://www.yahoo.com/search/ie.html
Not necessary http://red.clientapps.yahoo.com/customize/ie/defaults
/sb/sbcydsl/*http://www.yahoo.com/search/ie.html is your Search Bar.
If you do not like this fact, fix this item.
Change status
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie
/defaults/sp/sbcydsl/*http://www.yahoo.com
Not necessary http://red.clientapps.yahoo.com/customize/ie
/defaults/sp/sbcydsl/*http://www.yahoo.com is your Search Page.
If you do not like this fact, fix this item.
Change status
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl Not necessary http://yahoo.sbc.com/dsl is your start page.
If you do not like this fact, fix this item.
Change status
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie
/defaults/su/sbcydsl/*http://www.yahoo.com
Not necessary http://red.clientapps.yahoo.com/customize/ie
/defaults/su/sbcydsl/*http://www.yahoo.com is your default SearchURL.
If you do not like this fact, fix this item.
Change status
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll (file missing) Questionable If you do not recognize this path "C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll (file missing)", then fix this item Change status
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\common\Companion\Installs\cpn\yt.dll Questionable If you do not recognize this entry name "Yahoo! Toolbar" and this path "C:\Program Files\Yahoo!\common\Companion\Installs\cpn\yt.dll", then fix this item Change status
O2 - BHO: (no name) - {00000250-0320-4dd4-be4f-7566d2314352} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\common\Companion\Installs\cpn\yt.dll
More info about file yt.dll
Legitimate Application program item according to inner database
Yahoo! Toolbar
Change status
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
More info about file acroiehelper.dll
Legitimate Application program item according to inner database
File related to Adobe Acrobat Reader program.
Change status
O2 - BHO: (no name) - {13197ace-6851-45c3-a7ff-c281324d5489} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: (no name) - {15651c7c-e812-44a2-a9ac-b467a2233e7d} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll (file missing) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: (no name) - {4e1075f4-eec4-4a86-add7-cd5f52858c31} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: (no name) - {4e7bd74f-2b8d-469e-92c6-ce7eb590a94d} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: X1IEHook Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files\NetZero\qsacc\x1IEBHO.dll Legitimate legitimate bho toolbar, related to NetZero toolbar Change status
O2 - BHO: (no name) - {5929cd6e-2062-44a4-b2c5-2c7e78fbab38} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll
More info about file yiesrvc.dll
Legitimate Application program item according to inner database
The file is related to Yahoo! software.
Change status
O2 - BHO: (no name) - {5dafd089-24b1-4c5e-bd42-8ca72550717b} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: (no name) - {5fa6752a-c4a0-4222-88c2-928ae5ab4966} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: (no name) - {622cc208-b014-4fe0-801b-874a5e5e403a} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: BatBHO - {63F7460B-C831-4142-A4AA-5EC303EC4343} - C:\Program Files\Bat\Bat.dll Unknown No exact entries found Insert file into database
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\common\YIeTagBm.dll Legitimate legitimate bho toolbar, related to SBC Yahoo! Browser related Change status
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: StFlex IE Helper - {8334A30C-49E5-489a-B63D-5B927C1EF46E} - C:\Program Files\QdrDrive\QdrDrive15.dll Unknown No exact entries found Insert file into database
O2 - BHO: (no name) - {8674aea0-9d3d-11d9-99dc-00600f9a01f1} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
More info about file windowslivelogin.dll
Legitimate Application program item according to inner database
The file belongs to Microsoft Windows Live application.
Change status
O2 - BHO: (no name) - {965a592f-8efa-4250-8630-7960230792f1} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: (no name) - {9c5b2f29-1f46-4639-a6b4-828942301d3e} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: WhIeHelperObj Class - {c900b400-cdfe-11d3-976a-00e02913a9e0} - C:\Program Files\webHancer\programs\whiehlpr.dll (file missing) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: (no name) - {cf021f40-3e14-23a5-cba2-717765728274} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll Legitimate legitimate bho toolbar, related to SBC Yahoo! Browser Change status
O2 - BHO: (no name) - {fc3a74e5-f281-4f10-ae1e-733078684f3c} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: (no name) - {ffff0001-0002-101a-a3c9-08002b2f49fb} - (no file) Not necessary Fix this item, because it points to file that cannot be found Change status
O3 - Toolbar: ZeroBar - {F5735C15-1FB2-41FE-BA12-242757E69DDE} - C:\Program Files\NetZero\toolbar.dll
More info about file toolbar.dll
Dangerous Spyware related item according to inner database
toolbar.dll is a library file that contains malicious code, which implements main parasite...
Change status
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\common\Companion\Installs\cpn\yt.dll
More info about file yt.dll
Legitimate Application program item according to inner database
Yahoo! Toolbar
Change status
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
More info about file mcupdate.exe
Legitimate An update utility used by the legitimate McAfee VirusScan antivirus. Change status
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
More info about file avgcc.exe
Legitimate System item according to inner database
It is a part of the AVG Anti-Virus program made by Grisoft. It is also related to other Grisoft...
Change status
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
More info about file avgas.exe
Legitimate Application program item according to inner database
avgas.exe is a process related to AVG anti-virus software. If you are using AVG anti-virus, this...
Change status
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ''LOCAL SERVICE'') Questionable Application program item according to inner database
avgas.exe is a process related to AVG anti-virus software. If you are using AVG anti-virus, this...
Change status
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ''NETWORK SERVICE'') Questionable Application program item according to inner database
avgas.exe is a process related to AVG anti-virus software. If you are using AVG anti-virus, this...
Change status
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ''SYSTEM'') Questionable Application program item according to inner database
avgas.exe is a process related to AVG anti-virus software. If you are using AVG anti-virus, this...
Change status
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User ''Default user'') Questionable Application program item according to inner database
avgas.exe is a process related to AVG anti-virus software. If you are using AVG anti-virus, this...
Change status
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll Not necessary This item represents extra button in your IE toolbar without name and points to file 'C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll Not necessary This item represents extra menu item in your Tools menu in IE with a name 'Sun Java Console' and points to file 'C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: SBC Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll Not necessary This item represents extra button in your IE toolbar with a name 'SBC Yahoo! Services' and points to file 'C:\Program Files\Yahoo!\common\yiesrvc.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL Not necessary This item represents extra button in your IE toolbar with a name 'Research' and points to file 'C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll Not necessary This item represents extra button in your IE toolbar with a name 'Real.com' and points to file 'C:\WINDOWS\system32\Shdocvw.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Legitimate Legitimate extra button in your browser - related to windows messenger. Change status
O9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Legitimate Legitimate extra tools menu item - related to Windows Messenger. Change status
O10 - Broken Internet access because of LSP provider ''c:\program files\webhancer\programs\webhdll.dll'' missing Questionable This item represents actions of so-called Layered Service Provider. It can be legitimate item or spyware. Be careful fixing it, because you can lose your internet connection. Find more information in Google or use a program called LSPFix. Change status
O15 - Trusted Zone: *.amaena.com Questionable Do you want URL pattern "*.amaena.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.drivecleaner.com Questionable Do you want URL pattern "*.drivecleaner.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.errorprotector.com Questionable Do you want URL pattern "*.errorprotector.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.errorsafe.com Questionable Do you want URL pattern "*.errorsafe.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.imageservr.com Questionable Do you want URL pattern "*.imageservr.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.imagesrvr.com Questionable Do you want URL pattern "*.imagesrvr.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.systemdoctor.com Questionable Do you want URL pattern "*.systemdoctor.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.winantispyware.com Questionable Do you want URL pattern "*.winantispyware.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.winantivirus.com Questionable Do you want URL pattern "*.winantivirus.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.winfixer.com Questionable Do you want URL pattern "*.winfixer.com" to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.amaena.com (HKLM) Questionable Do you want URL pattern "*.amaena.com " to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.drivecleaner.com (HKLM) Questionable Do you want URL pattern "*.drivecleaner.com " to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.errorprotector.com (HKLM) Questionable Do you want URL pattern "*.errorprotector.com " to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.errorsafe.com (HKLM) Questionable Do you want URL pattern "*.errorsafe.com " to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.imageservr.com (HKLM) Questionable Do you want URL pattern "*.imageservr.com " to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.imagesrvr.com (HKLM) Questionable Do you want URL pattern "*.imagesrvr.com " to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.systemdoctor.com (HKLM) Questionable Do you want URL pattern "*.systemdoctor.com " to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.winantispyware.com (HKLM) Questionable Do you want URL pattern "*.winantispyware.com " to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.winantivirus.com (HKLM) Questionable Do you want URL pattern "*.winantivirus.com " to be in your trusted zone of IE? If not, fix this item. Change status
O15 - Trusted Zone: *.winfixer.com (HKLM) Questionable Do you want URL pattern "*.winfixer.com " to be in your trusted zone of IE? If not, fix this item. Change status
O16 - DPF: {10093E98-C073-4C75-8D0E-FB5CD3A71D33} (ZoneUpwords Object) - http://messenger.zone.msn.com/binary/Upwords.cab31267.cab Questionable Are you using an ActiveX object with a name 'ZoneUpwords Object' located in 'http://messenger.zone.msn.com/binary/Upwords.cab31267.cab'? If not, fix this item. Change status
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab Questionable Are you using an ActiveX object with a name 'MessengerStatsClient Class' located in 'http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab'? If not, fix this item. Change status
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll Questionable Are you using an ActiveX object with a name 'YInstStarter Class' located in 'C:\Program Files\Yahoo!\common\yinsthelper.dll'? If not, fix this item. Change status
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab Questionable Are you using an ActiveX object with a name 'Snapfish Activia' located in 'http://www.costcophotocenter.com/CostcoActivia.cab'? If not, fix this item. Change status
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab Questionable Are you using an ActiveX object with a name 'MSN Photo Upload Tool' located in 'http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab'? If not, fix this item. Change status
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab Questionable Are you using an ActiveX object with a name 'MessengerStatsClient Class' located in 'http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab'? If not, fix this item. Change status
O16 - DPF: {90051A81-3018-4826-8B38-DD60B6B53F9C} (Snapfish File Upload ActiveX Control) - http://www.costcophotocenter.com/CostcoUpload.cab Questionable Are you using an ActiveX object with a name 'Snapfish File Upload ActiveX Control' located in 'http://www.costcophotocenter.com/CostcoUpload.cab'? If not, fix this item. Change status
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx Questionable Are you using an ActiveX object with a name 'Get_ActiveX Control' located in 'https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx'? If not, fix this item. Change status
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab Questionable Are you using an ActiveX object with a name 'ZoneIntro Class' located in 'http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab'? If not, fix this item. Change status
O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab Questionable Are you using an ActiveX object with a name 'PhotosCtrl Class' located in 'http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab'? If not, fix this item. Change status
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
More info about file aolacsd.exe
Legitimate Item found in 2-spyware.com database.
This is a standard component of AOL 9.0 Internet connection software. File aolacsd.exe is required...
Change status
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
More info about file guard.exe
Legitimate Item found in 2-spyware.com database.
AVG Anti-spyware...
Change status
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
More info about file avgamsvr.exe
Legitimate Item found in 2-spyware.com database.
It is a part of the AVG Anti-Virus program made by Grisoft. It is also related to other Grisoft...
Change status
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
More info about file avgupsvc.exe
Legitimate Item found in 2-spyware.com database.
It is a part of the AVG Anti-Virus program made by Grisoft. It is also related to other Grisoft...
Change status
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
More info about file avgemc.exe
Legitimate Item found in 2-spyware.com database.
It is a part of the AVG Anti-Virus program made by Grisoft. It is also related to other Grisoft...
Change status
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\ISafe.exe
More info about file isafe.exe
Legitimate Item found in 2-spyware.com database.
This file is related to eTrust Antivirus. This program protects your computer from various viruses,...
Change status
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Kroll Ontrack\VPN Client\cvpnd.exe
More info about file cvpnd.exe
Legitimate Item found in 2-spyware.com database.
cvpnd.exe is a background task used by several applications and published by Cisco Systems. The...
Change status
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe Unknown No exact entries found Insert file into database
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
More info about file ipodservice.exe
Legitimate Item found in 2-spyware.com database.
This is a legitimate component of iTunes music program. It offers wide range of music playing and...
Change status
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
More info about file mcdetect.exe
Legitimate Item found in 2-spyware.com database.
Related to McAfee Antivirus...
Change status
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
More info about file mctskshd.exe
Legitimate Item found in 2-spyware.com database.
This is a part of McAfee Antivirus...
Change status
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
More info about file mcupdmgr.exe
Legitimate Item found in 2-spyware.com database.
mcupdmgr.exe is the main process of McAfee SecurityCenter Update Manager. It is not recommended to...
Change status
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
More info about file mpfservice.exe
Legitimate Item found in 2-spyware.com database.
mpfservice.exe is an application process related to McAfee Personal Firewall Service. It is crucial...
Change status
O23 - Service: MSSysInterv (MSSysInterv1) - Unknown owner - C:\WINDOWS\winself.exe Unknown No exact entries found Insert file into database
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
More info about file netsvc.exe
Legitimate Item found in 2-spyware.com database.
netsvc.exe is a parasitic process related to the Trojan.W32.Mytob worm. This security threat grants...
Change status
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
More info about file nicconfigsvc.exe
Legitimate Item found in 2-spyware.com database.
Related to special power management software for network adapters on Dell...
Change status
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
More info about file vetmsg.exe
Legitimate Item found in 2-spyware.com database.
A vital component of Computer Associates eTrust EZ...
Change status
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
More info about file wltrysvc.exe
Legitimate Item found in 2-spyware.com database.
Installed alongside Broadcom wireless communication software. It is a tool that displays an icon in...
Change status
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE Legitimate Related to Yahoo Change status


Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

Recommended software:
Malwarebytes Anti Malware
(91/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t have many features. One such...
SpyHunter
(89/100)
SpyHunter is a quite simple, but yet highly effective spyware remover with an easy-to-use interface. This program is an excellent choice for users, who are not computer savvy, but...
Spyware Doctor
(87/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and easy-to-manage...
STOPzilla
(86/100)
STOPzilla is a powerful anti-spyware program that detects, blocks, and removes malicious software allowing users to surf the Web not worrying about spyware, Trojan horses, and viruses....
XoftSpySE Anti Spyware
(84/100)
XoftSpySE, an anti-spyware program made by ParetoLogic, Inc., is a simple, but effective on-demand scanner with the typical set of functions but very easy to install and use. Trial version...

Latest Spyware news:
Carl A Someone signature loved by spammers
State of Utah Reveals Why 780k People Records Were Stolen
The iPhone And iPad Are Targets For Hackers
Malicious tweets spread rogue AV infecting Android users
Be aware about malware spread via hotel Wi-Fi connections
SecureCloud Key Management Systems Released by Trend Micro
Microsoft and Adobe Releases Critical Security Updates. Update Now!
Internet Apocalypsis Upcoming - Prepare for DNSChanger Servers Closure
Hacks Through Compromised Websites Increases Rapidly, Says Symantec
Facebook judged for its privacy controls

Subscribe to news

Encyclopedia of parasites:
ErrorSmart 24/05/12
Windows Safety Maint... 24/05/12
Windows Multi Contro... 23/05/12
System Protection Tools 23/05/12
Redirect 22/05/12
Windows Secure Kit 2012 22/05/12
WeatherBug 21/05/12
Dugenpal 21/05/12
Komodola 21/05/12
SpyGraphica 20/05/12
Windows Private Shield 20/05/12
WinMaximizer 19/05/12
Windows Pro Safety R... 18/05/12
Stekct 18/05/12
Linfo 18/05/12
Wiarp 18/05/12
Farfli 18/05/12
Happili redirect 18/05/12
Vasport 17/05/12
SeekService.com 17/05/12

Library of files:
mrt.exe 23/05/12
taskeng.exe 23/05/12
mplayer.exe 14/04/12
ccApp.exe 20/03/12
guest.js 06/03/12
BCU.exe 20/02/12
pbupdate.exe 20/02/12
dumprep.exe 20/02/12
arp.exe 12/02/12
hero remote control.... 08/02/12

Archive of files
Archive of startup entries