[size=3][color=blue][b]~~~ Service Information report ~~~[/b][/color][/size]

Microsoft Windows XP Home Edition
Service Pack 3
5.1.2600

12/15/2009 11:27:22 PM


[color=red][b]~~~Running Processes~~~[/b][/color]

System Idle Process
PID: 0
Path: 
Parent PID: 0

System
PID: 4
Path: 
Parent PID: 0

smss.exe
PID: 596
Path: C:\WINDOWS\System32\smss.exe
Parent PID: 4

csrss.exe
PID: 652
Path: 
Parent PID: 596

winlogon.exe
PID: 676
Path: C:\WINDOWS\system32\winlogon.exe
Parent PID: 596

services.exe
PID: 720
Path: C:\WINDOWS\system32\services.exe
Parent PID: 676

lsass.exe
PID: 732
Path: C:\WINDOWS\system32\lsass.exe
Parent PID: 676

svchost.exe
PID: 884
Path: C:\WINDOWS\system32\svchost.exe
Parent PID: 720

svchost.exe
PID: 960
Path: 
Parent PID: 720

svchost.exe
PID: 1016
Path: C:\WINDOWS\System32\svchost.exe
Parent PID: 720

svchost.exe
PID: 1108
Path: 
Parent PID: 720

svchost.exe
PID: 1192
Path: 
Parent PID: 720

spoolsv.exe
PID: 1328
Path: C:\WINDOWS\system32\spoolsv.exe
Parent PID: 720

ccSetMgr.exe
PID: 1412
Path: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
Parent PID: 720

DefWatch.exe
PID: 1440
Path: C:\Program Files\Symantec AntiVirus\DefWatch.exe
Parent PID: 720

iviRegMgr.exe
PID: 1516
Path: C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
Parent PID: 720

jqs.exe
PID: 1564
Path: C:\Program Files\Java\jre6\bin\jqs.exe
Parent PID: 720

mdm.exe
PID: 1784
Path: C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
Parent PID: 720

SavRoam.exe
PID: 1836
Path: C:\Program Files\Symantec AntiVirus\SavRoam.exe
Parent PID: 720

svchost.exe
PID: 1900
Path: C:\WINDOWS\system32\svchost.exe
Parent PID: 720

ccEvtMgr.exe
PID: 1992
Path: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
Parent PID: 720

wuauclt.exe
PID: 860
Path: C:\WINDOWS\system32\wuauclt.exe
Parent PID: 1016

wscntfy.exe
PID: 1612
Path: C:\WINDOWS\system32\wscntfy.exe
Parent PID: 1016

taskmgr.exe
PID: 1976
Path: C:\WINDOWS\system32\taskmgr.exe
Parent PID: 676

driver_service_info.exe
PID: 548
Path: F:\GeeksToGo\driver_service_info.exe
Parent PID: 1976

cmd.exe
PID: 576
Path: C:\WINDOWS\system32\cmd.exe
Parent PID: 548

wmiprvse.exe
PID: 656
Path: 
Parent PID: 884

cscript.exe
PID: 1428
Path: C:\WINDOWS\system32\cscript.exe
Parent PID: 576

findstr.exe
PID: 1176
Path: C:\WINDOWS\system32\findstr.exe
Parent PID: 576


[color=red][b]~~~Running Services by PID~~~[/b][/color]

[b]PID: 1016[/b]
	Windows Audio
	Background Intelligent Transfer Service
	Computer Browser
	DHCP Client
	Error Reporting Service
	COM+ Event System
	Fast User Switching Compatibility
	Help and Support
	HID Input Service
	Server
	Workstation
	Task Scheduler
	Secondary Logon
	System Event Notification
	Shell Hardware Detection
	System Restore Service
	Telephony
	Themes
	Distributed Link Tracking Client
	Windows Time
	Windows Management Instrumentation
	Security Center
	Automatic Updates
	Wireless Zero Configuration
[b]PID: 1992[/b]
	Symantec Event Manager
[b]PID: 1412[/b]
	Symantec Settings Manager
[b]PID: 884[/b]
	DCOM Server Process Launcher
	Terminal Services
[b]PID: 1440[/b]
	Symantec AntiVirus Definition Watcher
[b]PID: 1108[/b]
	DNS Client
[b]PID: 720[/b]
	Event Log
	Plug and Play
[b]PID: 1516[/b]
	IviRegMgr
[b]PID: 1564[/b]
	Java Quick Starter
[b]PID: 1192[/b]
	TCP/IP NetBIOS Helper
[b]PID: 1784[/b]
	Machine Debug Manager
[b]PID: 732[/b]
	IPSEC Services
	Protected Storage
	Security Accounts Manager
[b]PID: 960[/b]
	Remote Procedure Call (RPC)
[b]PID: 1836[/b]
	SAVRoam
[b]PID: 1328[/b]
	Print Spooler
[b]PID: 1900[/b]
	Windows Image Acquisition (WIA)


[color=red][b]~~~Running Services Configuration~~~[/b][/color]

PID: 1016
Service: AudioSrv
Displayed: Windows Audio
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: BITS
Displayed: Background Intelligent Transfer Service
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: Browser
Displayed: Computer Browser
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1992
Service: ccEvtMgr
Displayed: Symantec Event Manager
Image: "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
Start Mode: [b]Auto[/b]

PID: 1412
Service: ccSetMgr
Displayed: Symantec Settings Manager
Image: "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
Start Mode: [b]Auto[/b]

PID: 884
Service: DcomLaunch
Displayed: DCOM Server Process Launcher
Image: C:\WINDOWS\system32\svchost -k DcomLaunch
Start Mode: [b]Auto[/b]

PID: 1440
Service: DefWatch
Displayed: Symantec AntiVirus Definition Watcher
Image: "C:\Program Files\Symantec AntiVirus\DefWatch.exe"
Start Mode: [b]Auto[/b]

PID: 1016
Service: Dhcp
Displayed: DHCP Client
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1108
Service: Dnscache
Displayed: DNS Client
Image: C:\WINDOWS\system32\svchost.exe -k NetworkService
Start Mode: [b]Auto[/b]

PID: 1016
Service: ERSvc
Displayed: Error Reporting Service
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 720
Service: Eventlog
Displayed: Event Log
Image: C:\WINDOWS\system32\services.exe
Start Mode: [b]Auto[/b]

PID: 1016
Service: EventSystem
Displayed: COM+ Event System
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

PID: 1016
Service: FastUserSwitchingCompatibility
Displayed: Fast User Switching Compatibility
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

PID: 1016
Service: helpsvc
Displayed: Help and Support
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: HidServ
Displayed: HID Input Service
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1516
Service: IviRegMgr
Displayed: IviRegMgr
Image: "C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
Start Mode: [b]Auto[/b]

PID: 1564
Service: JavaQuickStarterService
Displayed: Java Quick Starter
Image: "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
Start Mode: [b]Auto[/b]

PID: 1016
Service: LanmanServer
Displayed: Server
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: lanmanworkstation
Displayed: Workstation
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1192
Service: LmHosts
Displayed: TCP/IP NetBIOS Helper
Image: C:\WINDOWS\system32\svchost.exe -k LocalService
Start Mode: [b]Auto[/b]

PID: 1784
Service: MDM
Displayed: Machine Debug Manager
Image: "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
Start Mode: [b]Auto[/b]

PID: 720
Service: PlugPlay
Displayed: Plug and Play
Image: C:\WINDOWS\system32\services.exe
Start Mode: [b]Auto[/b]

PID: 732
Service: PolicyAgent
Displayed: IPSEC Services
Image: C:\WINDOWS\system32\lsass.exe
Start Mode: [b]Auto[/b]

PID: 732
Service: ProtectedStorage
Displayed: Protected Storage
Image: C:\WINDOWS\system32\lsass.exe
Start Mode: [b]Auto[/b]

PID: 960
Service: RpcSs
Displayed: Remote Procedure Call (RPC)
Image: C:\WINDOWS\system32\svchost -k rpcss
Start Mode: [b]Auto[/b]

PID: 732
Service: SamSs
Displayed: Security Accounts Manager
Image: C:\WINDOWS\system32\lsass.exe
Start Mode: [b]Auto[/b]

PID: 1836
Service: SavRoam
Displayed: SAVRoam
Image: "C:\Program Files\Symantec AntiVirus\SavRoam.exe"
Start Mode: [b]Auto[/b]

PID: 1016
Service: Schedule
Displayed: Task Scheduler
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: seclogon
Displayed: Secondary Logon
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: SENS
Displayed: System Event Notification
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: ShellHWDetection
Displayed: Shell Hardware Detection
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1328
Service: Spooler
Displayed: Print Spooler
Image: C:\WINDOWS\system32\spoolsv.exe
Start Mode: [b]Auto[/b]

PID: 1016
Service: srservice
Displayed: System Restore Service
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: TapiSrv
Displayed: Telephony
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

PID: 884
Service: TermService
Displayed: Terminal Services
Image: C:\WINDOWS\System32\svchost -k DComLaunch
Start Mode: [b]Manual[/b]

PID: 1016
Service: Themes
Displayed: Themes
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: TrkWks
Displayed: Distributed Link Tracking Client
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: W32Time
Displayed: Windows Time
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: winmgmt
Displayed: Windows Management Instrumentation
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: wscsvc
Displayed: Security Center
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: wuauserv
Displayed: Automatic Updates
Image: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

PID: 1016
Service: WZCSVC
Displayed: Wireless Zero Configuration
Image: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]


[color=red][b]~~~Inactive Services Configuration~~~[/b][/color]

Service: Alerter
Displayed: Alerter
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Start Mode: [b]Disabled[/b]

Service: ALG
Displayed: Application Layer Gateway Service
Path: C:\WINDOWS\System32\alg.exe
Start Mode: [b]Manual[/b]

Service: AppMgmt
Displayed: Application Management
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: aspnet_state
Displayed: ASP.NET State Service
Path: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
Start Mode: [b]Manual[/b]

Service: btwdins
Displayed: Bluetooth Service
Path: C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
Start Mode: [b]Auto[/b]

Service: CiSvc
Displayed: Indexing Service
Path: C:\WINDOWS\system32\cisvc.exe
Start Mode: [b]Manual[/b]

Service: ClipSrv
Displayed: ClipBook
Path: C:\WINDOWS\system32\clipsrv.exe
Start Mode: [b]Manual[/b]

Service: clr_optimization_v2.0.50727_32
Displayed: .NET Runtime Optimization Service v2.0.50727_X86
Path: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Start Mode: [b]Manual[/b]

Service: COMSysApp
Displayed: COM+ System Application
Path: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Start Mode: [b]Manual[/b]

Service: CryptSvc
Displayed: CryptSvc
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

Service: dmadmin
Displayed: Logical Disk Manager Administrative Service
Path: C:\WINDOWS\System32\dmadmin.exe /com
Start Mode: [b]Manual[/b]

Service: dmserver
Displayed: Logical Disk Manager
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: Dot3svc
Displayed: Wired AutoConfig
Path: C:\WINDOWS\System32\svchost.exe -k dot3svc
Start Mode: [b]Manual[/b]

Service: EapHost
Displayed: Extensible Authentication Protocol Service
Path: C:\WINDOWS\System32\svchost.exe -k eapsvcs
Start Mode: [b]Manual[/b]

Service: fastnetsrv
Displayed: fastnetsrv  Service
Path: C:\WINDOWS\system32\FastNetSrv.exe
Start Mode: [b]Auto[/b]

Service: FontCache3.0.0.0
Displayed: Windows Presentation Foundation Font Cache 3.0.0.0
Path: C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
Start Mode: [b]Manual[/b]

Service: fsssvc
Displayed: Windows Live Family Safety
Path: "C:\Program Files\Windows Live\Family Safety\fsssvc.exe"
Start Mode: [b]Manual[/b]

Service: hkmsvc
Displayed: Health Key and Certificate Management Service
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: HTTPFilter
Displayed: HTTP SSL
Path: C:\WINDOWS\System32\svchost.exe -k HTTPFilter
Start Mode: [b]Manual[/b]

Service: idsvc
Displayed: Windows CardSpace
Path: "C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"
Start Mode: [b]Manual[/b]

Service: ImapiService
Displayed: IMAPI CD-Burning COM Service
Path: C:\WINDOWS\system32\imapi.exe
Start Mode: [b]Manual[/b]

Service: LiveUpdate
Displayed: LiveUpdate
Path: "C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"
Start Mode: [b]Manual[/b]

Service: Messenger
Displayed: Messenger
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Disabled[/b]

Service: Microsoft Office Groove Audit Service
Displayed: Microsoft Office Groove Audit Service
Path: "C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe"
Start Mode: [b]Manual[/b]

Service: mnmsrvc
Displayed: NetMeeting Remote Desktop Sharing
Path: C:\WINDOWS\system32\mnmsrvc.exe
Start Mode: [b]Manual[/b]

Service: MSDTC
Displayed: Distributed Transaction Coordinator
Path: C:\WINDOWS\system32\msdtc.exe
Start Mode: [b]Manual[/b]

Service: MSIServer
Displayed: Windows Installer
Path: C:\WINDOWS\system32\msiexec.exe /V
Start Mode: [b]Manual[/b]

Service: napagent
Displayed: Network Access Protection Agent
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: NetDDE
Displayed: Network DDE
Path: C:\WINDOWS\system32\netdde.exe
Start Mode: [b]Disabled[/b]

Service: NetDDEdsdm
Displayed: Network DDE DSDM
Path: C:\WINDOWS\system32\netdde.exe
Start Mode: [b]Disabled[/b]

Service: Netlogon
Displayed: Net Logon
Path: C:\WINDOWS\system32\lsass.exe
Start Mode: [b]Manual[/b]

Service: Netman
Displayed: Network Connections
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: NetTcpPortSharing
Displayed: Net.Tcp Port Sharing Service
Path: "C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"
Start Mode: [b]Disabled[/b]

Service: Nla
Displayed: Network Location Awareness (NLA)
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: NtLmSsp
Displayed: NT LM Security Support Provider
Path: C:\WINDOWS\system32\lsass.exe
Start Mode: [b]Manual[/b]

Service: NtmsSvc
Displayed: Removable Storage
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: odserv
Displayed: Microsoft Office Diagnostics Service
Path: "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE"
Start Mode: [b]Manual[/b]

Service: ose
Displayed: Office Source Engine
Path: "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
Start Mode: [b]Manual[/b]

Service: RasAuto
Displayed: Remote Access Auto Connection Manager
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: RasMan
Displayed: Remote Access Connection Manager
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: RDSessMgr
Displayed: Remote Desktop Help Session Manager
Path: C:\WINDOWS\system32\sessmgr.exe
Start Mode: [b]Manual[/b]

Service: RemoteAccess
Displayed: Routing and Remote Access
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Start Mode: [b]Disabled[/b]

Service: RpcLocator
Displayed: Remote Procedure Call (RPC) Locator
Path: C:\WINDOWS\system32\locator.exe
Start Mode: [b]Manual[/b]

Service: RSVP
Displayed: QoS RSVP
Path: C:\WINDOWS\system32\rsvp.exe
Start Mode: [b]Manual[/b]

Service: SCardSvr
Displayed: Smart Card
Path: C:\WINDOWS\System32\SCardSvr.exe
Start Mode: [b]Manual[/b]

Service: SeaPort
Displayed: SeaPort
Path: "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
Start Mode: [b]Auto[/b]

Service: SharedAccess
Displayed: Windows Firewall/Internet Connection Sharing (ICS)
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Auto[/b]

Service: SNDSrvc
Displayed: Symantec Network Drivers Service
Path: "C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"
Start Mode: [b]Manual[/b]

Service: SPBBCSvc
Displayed: Symantec SPBBCSvc
Path: "C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"
Start Mode: [b]Manual[/b]

Service: SSDPSRV
Displayed: SSDP Discovery Service
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Start Mode: [b]Manual[/b]

Service: stisvc
Displayed: Windows Image Acquisition (WIA)
Path: C:\WINDOWS\system32\svchost.exe -k imgsvc
Start Mode: [b]Auto[/b]

Service: SwPrv
Displayed: MS Software Shadow Copy Provider
Path: C:\WINDOWS\system32\dllhost.exe /Processid:{91260DAB-496B-4D3E-9A23-9E15DEE1A314}
Start Mode: [b]Manual[/b]

Service: Symantec AntiVirus
Displayed: Symantec AntiVirus
Path: "C:\Program Files\Symantec AntiVirus\Rtvscan.exe"
Start Mode: [b]Auto[/b]

Service: SysmonLog
Displayed: Performance Logs and Alerts
Path: C:\WINDOWS\system32\smlogsvc.exe
Start Mode: [b]Manual[/b]

Service: upnphost
Displayed: Universal Plug and Play Device Host
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Start Mode: [b]Manual[/b]

Service: UPS
Displayed: Uninterruptible Power Supply
Path: C:\WINDOWS\System32\ups.exe
Start Mode: [b]Manual[/b]

Service: VSS
Displayed: Volume Shadow Copy
Path: C:\WINDOWS\System32\vssvc.exe
Start Mode: [b]Manual[/b]

Service: WebClient
Displayed: WebClient
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Start Mode: [b]Auto[/b]

Service: WmdmPmSN
Displayed: Portable Media Serial Number Service
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]

Service: WmiApSrv
Displayed: WMI Performance Adapter
Path: C:\WINDOWS\system32\wbem\wmiapsrv.exe
Start Mode: [b]Manual[/b]

Service: WMPNetworkSvc
Displayed: Windows Media Player Network Sharing Service
Path: "C:\Program Files\Windows Media Player\WMPNetwk.exe"
Start Mode: [b]Manual[/b]

Service: WudfSvc
Displayed: Windows Driver Foundation - User-mode Driver Framework
Path: C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
Start Mode: [b]Manual[/b]

Service: xmlprov
Displayed: Network Provisioning Service
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Start Mode: [b]Manual[/b]


[color=red][b]~~~ svchost Export ~~~[/b][/color]

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost
    [b]HTTPFilter[/b]	REG_MULTI_SZ
HTTPFilter
    [b]LocalService[/b]	REG_MULTI_SZ
Alerter
WebClient
LmHosts
RemoteRegistry
upnphost
SSDPSRV
    [b]NetworkService[/b]	REG_MULTI_SZ
DnsCache
    [b]netsvcs[/b]	REG_MULTI_SZ
6to4
AppMgmt
AudioSrv
Browser
CryptSvc
DMServer
DHCP
ERSvc
EventSystem
FastUserSwitchingCompatibility
HidServ
Ias
Iprip
Irmon
LanmanServer
LanmanWorkstation
Messenger
Netman
Nla
Ntmssvc
NWCWorkstation
Nwsapagent
Rasauto
Rasman
Remoteaccess
Schedule
Seclogon
SENS
Sharedaccess
SRService
Tapisrv
Themes
TrkWks
W32Time
WZCSVC
Wmi
WmdmPmSp
winmgmt
wscsvc
xmlprov
napagent
hkmsvc
BITS
wuauserv
ShellHWDetection
helpsvc
WmdmPmSN
    [b]DcomLaunch[/b]	REG_MULTI_SZ
DcomLaunch
TermService
    [b]rpcss[/b]	REG_MULTI_SZ
RpcSs
    eapsvcs	REG_MULTI_SZ
eaphost
    dot3svc	REG_MULTI_SZ
dot3svc
    [b]imgsvc[/b]	REG_MULTI_SZ
StiSvc
    [b]termsvcs[/b]	REG_MULTI_SZ
TermService
    WudfServiceGroup	REG_MULTI_SZ
WUDFSvc
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\DComLaunch
    CoInitializeSecurityParam	REG_DWORD	0x1
    DefaultRpcStackSize	REG_DWORD	0x8
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\dot3svc
    AuthenticationCapabilities	REG_DWORD	0x3020
    CoInitializeSecurityParam	REG_DWORD	0x1
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\eapsvcs
    AuthenticationCapabilities	REG_DWORD	0x3020
    CoInitializeSecurityParam	REG_DWORD	0x1
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\HTTPFilter
    CoInitializeSecurityParam	REG_DWORD	0x1
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\LocalService
    CoInitializeSecurityParam	REG_DWORD	0x1
    AuthenticationCapabilities	REG_DWORD	0x2000
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\netsvcs
    CoInitializeSecurityParam	REG_DWORD	0x1
    AuthenticationCapabilities	REG_DWORD	0x3020
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\PCHealth
    CoInitializeSecurityParam	REG_DWORD	0x2
    AuthenticationCapabilities	REG_DWORD	0x40
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\termsvcs
    CoInitializeSecurityParam	REG_DWORD	0x1
    DefaultRpcStackSize	REG_DWORD	0x8

[b]~~~End of Report~~~[/b]