I have run tasklist /svc /fi "imagename eq svchost.exe" and this shows
Image Name PID Services
========================= ====== =============================================
svchost.exe 752 AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
lanmanserver, lanmanworkstation, Netman,
Nla, RasMan, Schedule, seclogon, SENS,
SharedAccess, ShellHWDetection, srservice,
TapiSrv, Themes, TrkWks, W32Time, winmgmt,
wscsvc, wuauserv, WZCSVC
If I end the process for this PID I then have to start the Windows Audio Service manually.
I have attached my OTL.txt file from an OTL Quick Scan.
Any ideas how to remove this rogue svchost?