API tools faq
paste
Advertisement
Guest User

0OTV1XD4PQ7CWHLBM

a guest
Dec 13th, 2017
135
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 48.49 KB | None | 0 0
raw download clone embed print report
  1.  
  2. Sysinternals Autoruns v13.81 - Autostart program viewer
  3. Copyright (C) 2002-2017 Mark Russinovich
  4. Sysinternals - www.sysinternals.com
  5.  
  6. Time,Entry Location,Entry,Enabled,Category,Profile,Description,Signer,Company,Image Path,Version,Launch String
  7. 11/14/2017 6:35 PM,HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute,,,"Boot Execute",System-wide,,,,,,
  8. 11/20/2010 4:28 AM,"HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute","autocheck autochk *",enabled,"Boot Execute",System-wide,"Auto Check Utility","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\autochk.exe",6.1.7601.17514,"autocheck autochk *"
  9. 11/30/2017 12:42 AM,HKLM\System\CurrentControlSet\Control\ServiceControlManagerExtension,,,"Boot Execute",System-wide,,,,,,
  10. 7/13/2009 8:32 PM,"HKLM\System\CurrentControlSet\Control\ServiceControlManagerExtension","%systemroot%\system32\scext.dll",enabled,"Boot Execute",System-wide,"Service Control Manager Extension DLL for non-minwin","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\scext.dll",6.1.7600.16385,"%systemroot%\system32\scext.dll"
  11. 6/3/2017 8:36 PM,HKLM\Software\Microsoft\Office\Outlook\Addins,,,"Office Addins",System-wide,,,,,,
  12. 3/20/2012 6:35 AM,"HKLM\Software\Microsoft\Office\Outlook\Addins","CsrBtOutlookPlugin Class",enabled,"Office Addins",System-wide,"CSR Bluetooth Outlook Addin","(Verified) Cambridge Silicon Radio Ltd.","Cambridge Silicon Radio Limited","c:\program files\csr\csr harmony wireless software stack\csrbtoutlookaddin.dll",2.1.63.0,"HKCR\CLSID\{9B9A29DA-7CB3-406C-875C-5EE90074BAB8}"
  13. 3/20/2012 6:33 AM,"HKLM\Software\Microsoft\Office\Outlook\Addins","SyncAddin Class",enabled,"Office Addins",System-wide,"Outlook Sync Addin","(Verified) Cambridge Silicon Radio Ltd.","Cambridge Silicon Radio Limited","c:\program files\csr\csr harmony wireless software stack\csrbtoutlooksyncaddin.dll",2.1.63.0,"HKCR\CLSID\{6C6F0133-6112-4F5A-82CC-53F25B025BDC}"
  14. 5/4/2011 12:14 AM,"HKLM\Software\Microsoft\Office\Outlook\Addins","Windows_Search_OutlookToolbar",enabled,"Office Addins",System-wide,"Outlook MSSearch Connector","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\mssphtb.dll",7.0.7601.17610,"HKCR\CLSID\{F37AFD4F-E736-4980-8650-A486B1F2DF25}"
  15. 6/3/2017 8:37 PM,HKLM\Software\Wow6432Node\Microsoft\Office\Outlook\Addins,,,"Office Addins",System-wide,,,,,,
  16. 3/20/2012 4:31 AM,"HKLM\Software\Wow6432Node\Microsoft\Office\Outlook\Addins","CsrBtOutlookPlugin Class",enabled,"Office Addins",System-wide,"CSR Bluetooth Outlook Addin","(Verified) Cambridge Silicon Radio Ltd.","Cambridge Silicon Radio Limited","c:\program files (x86)\csr\csr harmony wireless software stack\csrbtoutlookaddin.dll",2.1.63.0,"HKCR\CLSID\{9B9A29DA-7CB3-406C-875C-5EE90074BAB8}"
  17. 3/20/2012 4:30 AM,"HKLM\Software\Wow6432Node\Microsoft\Office\Outlook\Addins","SyncAddin Class",enabled,"Office Addins",System-wide,"Outlook Sync Addin","(Verified) Cambridge Silicon Radio Ltd.","Cambridge Silicon Radio Limited","c:\program files (x86)\csr\csr harmony wireless software stack\csrbtoutlooksyncaddin.dll",2.1.63.0,"HKCR\CLSID\{6C6F0133-6112-4F5A-82CC-53F25B025BDC}"
  18. 5/3/2011 11:21 PM,"HKLM\Software\Wow6432Node\Microsoft\Office\Outlook\Addins","Windows_Search_OutlookToolbar",enabled,"Office Addins",System-wide,"Outlook MSSearch Connector","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\syswow64\mssphtb.dll",7.0.7601.17610,"HKCR\CLSID\{F37AFD4F-E736-4980-8650-A486B1F2DF25}"
  19. 9/10/2015 12:40 AM,HKLM\SOFTWARE\Classes\Htmlfile\Shell\Open\Command\(Default),,,"Hijacks",System-wide,,,,,,
  20. 4/22/2016 10:22 PM,"HKLM\SOFTWARE\Classes\Htmlfile\Shell\Open\Command\(Default)","C:\Program Files\Internet Explorer\iexplore.exe",enabled,"Hijacks",System-wide,"Internet Explorer","(Verified) Microsoft Corporation","Microsoft Corporation","c:\program files\internet explorer\iexplore.exe",11.0.9600.18315,""
  21. ,WMI Database Entries,,,"WMI",System-wide,,,,,,
  22. 10/11/2013 8:33 PM,"WMI Database Entries","BVTConsumer",enabled,"WMI",System-wide,"Microsoft � Console Based Script Host","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\cscript.exe",5.8.7601.18283,"cscript KernCap.vbs"
  23. 12/13/2017 7:26 PM,HKLM\System\CurrentControlSet\Services,,,"Services",System-wide,,,,,,
  24. 10/29/2015 12:46 PM,"HKLM\System\CurrentControlSet\Services","AeLookupSvc",enabled,"Services",System-wide,"Application Experience: Processes application compatibility cache requests for applications as they are launched","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\aelupsvc.dll",6.1.7601.19050,"%systemroot%\system32\svchost.exe -k netsvcs"
  25. 7/13/2009 7:08 PM,"HKLM\System\CurrentControlSet\Services","ALG",enabled,"Services",System-wide,"Application Layer Gateway Service: Provides support for 3rd party protocol plug-ins for Internet Connection Sharing","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\alg.exe",6.1.7600.16385,"%SystemRoot%\System32\alg.exe"
  26. 4/9/2016 1:59 AM,"HKLM\System\CurrentControlSet\Services","AppIDSvc",enabled,"Services",System-wide,"Application Identity: Determines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\appidsvc.dll",6.1.7601.23418,"%SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation"
  27. 6/25/2015 4:57 AM,"HKLM\System\CurrentControlSet\Services","Appinfo",enabled,"Services",System-wide,"Application Information: Facilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\appinfo.dll",6.1.7601.18906,"%SystemRoot%\system32\svchost.exe -k netsvcs"
  28. 7/13/2009 8:26 PM,"HKLM\System\CurrentControlSet\Services","AppMgmt",enabled,"Services",System-wide,"Application Management: Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\appmgmts.dll",6.1.7600.16385,"%SystemRoot%\system32\svchost.exe -k netsvcs"
  29. 2/2/2015 10:28 PM,"HKLM\System\CurrentControlSet\Services","AudioEndpointBuilder",enabled,"Services",System-wide,"Windows Audio Endpoint Builder: Manages audio devices for the Windows Audio service. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\audiosrv.dll",6.1.7601.18741,"%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted"
  30. 2/2/2015 10:28 PM,"HKLM\System\CurrentControlSet\Services","AudioSrv",enabled,"Services",System-wide,"Windows Audio: Manages audio for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\audiosrv.dll",6.1.7601.18741,"%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted"
  31. 11/20/2010 7:52 AM,"HKLM\System\CurrentControlSet\Services","AxInstSV",enabled,"Services",System-wide,"ActiveX Installer (AxInstSV): Provides User Account Control validation for the installation of ActiveX controls from the Internet and enables management of ActiveX control installation based on Group Policy settings. This service is started on demand and if disabled the installation of ActiveX controls will behave according to default browser settings.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\axinstsv.dll",6.1.7601.17514,"%SystemRoot%\system32\svchost.exe -k AxInstSVGroup"
  32. 7/13/2009 8:25 PM,"HKLM\System\CurrentControlSet\Services","BDESVC",enabled,"Services",System-wide,"BitLocker Drive Encryption Service: BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used. Stopping or disabling the service would prevent users from leveraging this functionality.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\bdesvc.dll",6.1.7600.16385,"%SystemRoot%\System32\svchost.exe -k netsvcs"
  33. 11/14/2017 7:13 AM,"HKLM\System\CurrentControlSet\Services","BEService",enabled,"Services",System-wide,"BattlEye Service: ","(Verified) BattlEye Innovations e.K.","","c:\program files (x86)\common files\battleye\beservice.exe",,"""C:\Program Files (x86)\Common Files\BattlEye\BEService.exe"""
  34. 11/20/2010 7:54 AM,"HKLM\System\CurrentControlSet\Services","BFE",enabled,"Services",System-wide,"Base Filtering Engine: The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\bfe.dll",6.1.7601.17514,"%systemroot%\system32\svchost.exe -k LocalServiceNoNetwork"
  35. 11/20/2010 8:13 AM,"HKLM\System\CurrentControlSet\Services","BITS",enabled,"Services",System-wide,"Background Intelligent Transfer Service: Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\qmgr.dll",7.5.7601.17514,"%SystemRoot%\System32\svchost.exe -k netsvcs"
  36. 7/4/2012 5:03 PM,"HKLM\System\CurrentControlSet\Services","Browser",enabled,"Services",System-wide,"Computer Browser: Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\browser.dll",6.1.7601.17887,"%SystemRoot%\System32\svchost.exe -k netsvcs"
  37. 7/13/2009 8:25 PM,"HKLM\System\CurrentControlSet\Services","bthserv",enabled,"Services",System-wide,"Bluetooth Support Service: The Bluetooth service supports discovery and association of remote Bluetooth devices. Stopping or disabling this service may cause already installed Bluetooth devices to fail to operate properly and prevent new devices from being discovered or associated.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\bthserv.dll",6.1.7600.16385,"%SystemRoot%\system32\svchost.exe -k bthsvcs"
  38. 3/20/2012 6:24 AM,"HKLM\System\CurrentControlSet\Services","BtSwitcherService",enabled,"Services",System-wide,"CSR Bluetooth Switcher Service: Allows a Bluetooth device to switch from boot mode to Bluetooth HCI mode.","(Verified) Cambridge Silicon Radio Ltd.","Cambridge Silicon Radio Limited","c:\program files\csr\csr harmony wireless software stack\btswitcherservice.exe",2.1.63.0,"""C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe"""
  39. 11/17/2014 4:01 PM,"HKLM\System\CurrentControlSet\Services","btwdins",enabled,"Services",System-wide,"Bluetooth Service: Handles installation and removal of Bluetooth devices.","(Verified) Broadcom Corporation","Broadcom Corporation.","c:\program files\asus\bluetooth software\btwdins.exe",6.5.1.6000,"""C:\Program Files\ASUS\Bluetooth Software\btwdins.exe"""
  40. 11/20/2010 7:55 AM,"HKLM\System\CurrentControlSet\Services","CertPropSvc",enabled,"Services",System-wide,"Certificate Propagation: Copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\certprop.dll",6.1.7601.17514,"%SystemRoot%\system32\svchost.exe -k netsvcs"
  41. 11/5/2015 9:21 PM,"HKLM\System\CurrentControlSet\Services","clr_optimization_v4.0.30319_32",enabled,"Services",System-wide,"Microsoft .NET Framework NGEN v4.0.30319_X86: Microsoft .NET Framework NGEN","(Verified) Microsoft Dynamic Code Publisher","Microsoft Corporation","c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe",4.6.1055.0,"C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe"
  42. 11/5/2015 9:31 PM,"HKLM\System\CurrentControlSet\Services","clr_optimization_v4.0.30319_64",enabled,"Services",System-wide,"Microsoft .NET Framework NGEN v4.0.30319_X64: Microsoft .NET Framework NGEN","(Verified) Microsoft Dynamic Code Publisher","Microsoft Corporation","c:\windows\microsoft.net\framework64\v4.0.30319\mscorsvw.exe",4.6.1055.0,"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe"
  43. 7/13/2009 6:59 PM,"HKLM\System\CurrentControlSet\Services","COMSysApp",enabled,"Services",System-wide,"COM System Application: Manages the configuration and tracking of Component Object Model (COM) -based components. If the service is stopped, most COM -based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\dllhost.exe",6.1.7600.16385,"%SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}"
  44. 4/27/2015 2:21 PM,"HKLM\System\CurrentControlSet\Services","CryptSvc",enabled,"Services",System-wide,"Cryptographic Services: Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\cryptsvc.dll",6.1.7601.18839,"%SystemRoot%\system32\svchost.exe -k NetworkService"
  45. 11/20/2010 8:00 AM,"HKLM\System\CurrentControlSet\Services","CscService",enabled,"Services",System-wide,"Offline Files: The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\cscsvc.dll",6.1.7601.17514,"%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted"
  46. 3/20/2012 6:23 AM,"HKLM\System\CurrentControlSet\Services","CSRBtAudioService",enabled,"Services",System-wide,"CSR Bluetooth Audio Service: CSR Bluetooth Audio Service","(Verified) Cambridge Silicon Radio Ltd.","Cambridge Silicon Radio Limited","c:\program files\csr\csr harmony wireless software stack\csrbtaudioservice.exe",2.1.63.0,"""C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe"""
  47. 3/20/2012 6:21 AM,"HKLM\System\CurrentControlSet\Services","CsrBtOBEXService",enabled,"Services",System-wide,"CSR OBEX Service: Bluetooth OBEX Profile Service","(Verified) Cambridge Silicon Radio Ltd.","Cambridge Silicon Radio Limited","c:\program files\csr\csr harmony wireless software stack\csrbtobexservice.exe",2.1.63.0,"""C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe"""
  48. 3/22/2012 8:39 AM,"HKLM\System\CurrentControlSet\Services","CsrBtService",enabled,"Services",System-wide,"CSR Bluetooth Service: CSR Bluetooth Service","(Verified) Cambridge Silicon Radio Ltd.","Cambridge Silicon Radio Limited","c:\program files\csr\csr harmony wireless software stack\csrbtservice.exe",2.1.63.0,"""C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe"""
  49. 2/2/2016 1:57 PM,"HKLM\System\CurrentControlSet\Services","DcomLaunch",enabled,"Services",System-wide,"DCOM Server Process Launcher: The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\rpcss.dll",6.1.7601.19143,"%SystemRoot%\system32\svchost.exe -k DcomLaunch"
  50. 7/13/2009 8:26 PM,"HKLM\System\CurrentControlSet\Services","defragsvc",enabled,"Services",System-wide,"Disk Defragmenter: Provides Disk Defragmentation Capabilities.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\defragsvc.dll",6.1.7600.16385,"%SystemRoot%\system32\svchost.exe -k defragsvc"
  51. 11/20/2010 7:57 AM,"HKLM\System\CurrentControlSet\Services","Dhcp",enabled,"Services",System-wide,"DHCP Client: Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\dhcpcore.dll",6.1.7601.17514,"%SystemRoot%\system32\dhcpcore.dll"
  52. 7/16/2015 9:42 PM,"HKLM\System\CurrentControlSet\Services","DiagTrack",enabled,"Services",System-wide,"Diagnostics Tracking Service: The Diagnostics Tracking Service enables data collection about functional issues in Windows components.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\diagtrack.dll",10.0.10242.0,"%SystemRoot%\System32\svchost.exe -k utcsvc"
  53. 3/3/2011 1:11 AM,"HKLM\System\CurrentControlSet\Services","Dnscache",enabled,"Services",System-wide,"DNS Client: The DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer's name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\dnsrslvr.dll",6.1.7601.17570,"%SystemRoot%\system32\svchost.exe -k NetworkService"
  54. 11/20/2010 7:58 AM,"HKLM\System\CurrentControlSet\Services","dot3svc",enabled,"Services",System-wide,"Wired AutoConfig: The Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\dot3svc.dll",6.1.7601.17514,"%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted"
  55. 11/20/2010 7:58 AM,"HKLM\System\CurrentControlSet\Services","DPS",enabled,"Services",System-wide,"Diagnostic Policy Service: The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. If this service is stopped, diagnostics will no longer function.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\dps.dll",6.1.7601.17514,"%SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork"
  56. 7/13/2009 8:26 PM,"HKLM\System\CurrentControlSet\Services","EapHost",enabled,"Services",System-wide,"Extensible Authentication Protocol: The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP). EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process. If you disable this service, this computer is prevented from accessing networks that require EAP authentication.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\eapsvc.dll",6.1.7600.16385,"%SystemRoot%\System32\svchost.exe -k netsvcs"
  57. 4/9/2016 12:43 AM,"HKLM\System\CurrentControlSet\Services","EFS",enabled,"Services",System-wide,"Encrypting File System (EFS): Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\lsass.exe",6.1.7601.23418,"%SystemRoot%\System32\lsass.exe"
  58. 11/20/2010 6:19 AM,"HKLM\System\CurrentControlSet\Services","ehRecvr",enabled,"Services",System-wide,"Windows Media Center Receiver Service: Windows Media Center Service for TV and FM broadcast reception","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\ehome\ehrecvr.exe",6.1.7601.17514,"%systemroot%\ehome\ehRecvr.exe"
  59. 7/13/2009 7:24 PM,"HKLM\System\CurrentControlSet\Services","ehSched",enabled,"Services",System-wide,"Windows Media Center Scheduler Service: Starts and stops recording of TV programs within Windows Media Center","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\ehome\ehsched.exe",6.1.7600.16385,"%systemroot%\ehome\ehsched.exe"
  60. 11/20/2010 8:15 AM,"HKLM\System\CurrentControlSet\Services","eventlog",enabled,"Services",System-wide,"Windows Event Log: This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\wevtsvc.dll",6.1.7601.17514,"%SystemRoot%\System32\wevtsvc.dll"
  61. 7/13/2009 8:29 PM,"HKLM\System\CurrentControlSet\Services","EventSystem",enabled,"Services",System-wide,"COM Event System: Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\es.dll",2001.12.8530.16385,"%SystemRoot%\system32\svchost.exe -k LocalService"
  62. 11/20/2010 6:38 AM,"HKLM\System\CurrentControlSet\Services","Fax",enabled,"Services",System-wide,"Fax: Enables you to send and receive faxes, utilizing fax resources available on this computer or on the network.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\fxssvc.exe",6.1.7601.17514,"%systemroot%\system32\fxssvc.exe"
  63. 7/13/2009 8:27 PM,"HKLM\System\CurrentControlSet\Services","fdPHost",enabled,"Services",System-wide,"Function Discovery Provider Host: The FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services � Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\fdphost.dll",6.1.7600.16385,"%SystemRoot%\system32\svchost.exe -k LocalService"
  64. 7/13/2009 8:27 PM,"HKLM\System\CurrentControlSet\Services","FDResPub",enabled,"Services",System-wide,"Function Discovery Resource Publication: Publishes this computer and resources attached to this computer so they can be discovered over the network. If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\fdrespub.dll",6.1.7600.16385,"%SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation"
  65. 11/7/2015 2:39 AM,"HKLM\System\CurrentControlSet\Services","FontCache",enabled,"Services",System-wide,"Windows Font Cache Service: Optimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\fntcache.dll",6.2.9200.17568,"%SystemRoot%\system32\svchost.exe -k LocalService"
  66. 9/29/2010 2:36 AM,"HKLM\System\CurrentControlSet\Services","FontCache3.0.0.0",enabled,"Services",System-wide,"Windows Presentation Foundation Font Cache 3.0.0.0: Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.","(Verified) Microsoft Corporation","Microsoft Corporation","c:\windows\microsoft.net\framework64\v3.0\wpf\presentationfontcache.exe",3.0.6920.5011,"%systemroot%\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe"
  67. 11/13/2017 12:50 PM,"HKLM\System\CurrentControlSet\Services","GalaxyClientService",enabled,"Services",System-wide,"GalaxyClientService: GOG Galaxy component for handling priviliged tasks","(Verified) GOG Limited","GOG.com","c:\program files (x86)\gog galaxy\galaxyclientservice.exe",1.2.29.28,"""C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe"""
  68. 11/9/2017 5:15 AM,"HKLM\System\CurrentControlSet\Services","GalaxyCommunication",enabled,"Services",System-wide,"GalaxyCommunication: GalaxyCommunicationService","(Verified) GOG Limited","GOG.com","c:\programdata\gog.com\galaxy\redists\galaxycommunication.exe",1.2.23.38,"""C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe"""
  69. 11/12/2015 5:39 AM,"HKLM\System\CurrentControlSet\Services","GfExperienceService",enabled,"Services",System-wide,"NVIDIA GeForce Experience Service: NVIDIA GeForce Experience Service","(Verified) NVIDIA Corporation","NVIDIA Corporation","c:\program files\nvidia corporation\geforce experience service\gfexperienceservice.exe",2.7.4.10,"""C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"""
  70. 11/20/2010 8:00 AM,"HKLM\System\CurrentControlSet\Services","gpsvc",enabled,"Services",System-wide,"Group Policy Client: The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is stopped or disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is stopped or disabled.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\gpsvc.dll",6.1.7601.17514,"%windir%\system32\svchost.exe -k GPSvcGroup"
  71. 9/3/2015 8:32 PM,"HKLM\System\CurrentControlSet\Services","gupdate",enabled,"Services",System-wide,"Google Update Service (gupdate): Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it.","(Verified) Google Inc","Google Inc.","c:\program files (x86)\google\update\googleupdate.exe",1.3.28.15,"""C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"" /svc"
  72. 9/3/2015 8:32 PM,"HKLM\System\CurrentControlSet\Services","gupdatem",enabled,"Services",System-wide,"Google Update Service (gupdatem): Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it.","(Verified) Google Inc","Google Inc.","c:\program files (x86)\google\update\googleupdate.exe",1.3.28.15,"""C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"" /medsvc"
  73. 7/13/2009 8:27 PM,"HKLM\System\CurrentControlSet\Services","hidserv",enabled,"Services",System-wide,"Human Interface Device Access: Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\hidserv.dll",6.1.7600.16385,"%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted"
  74. 11/20/2010 8:05 AM,"HKLM\System\CurrentControlSet\Services","hkmsvc",enabled,"Services",System-wide,"Health Key and Certificate Management: Provides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this service","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\kmsvc.dll",6.1.7601.17514,"%SystemRoot%\System32\svchost.exe -k netsvcs"
  75. 11/20/2010 8:03 AM,"HKLM\System\CurrentControlSet\Services","HomeGroupListener",enabled,"Services",System-wide,"HomeGroup Listener: Makes local computer changes associated with configuration and maintenance of the homegroup-joined computer. If this service is stopped or disabled, your computer will not work properly in a homegroup and your homegroup might not work properly. It is recommended that you keep this service running.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\listsvc.dll",6.1.7601.17514,"%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted"
  76. 11/20/2010 8:12 AM,"HKLM\System\CurrentControlSet\Services","HomeGroupProvider",enabled,"Services",System-wide,"HomeGroup Provider: Performs networking tasks associated with configuration and maintenance of homegroups. If this service is stopped or disabled, your computer will be unable to detect other homegroups and your homegroup might not work properly. It is recommended that you keep this service running.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\provsvc.dll",6.1.7601.17514,"%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted"
  77. 6/27/2014 2:48 PM,"HKLM\System\CurrentControlSet\Services","idsvc",enabled,"Services",System-wide,"Windows CardSpace: Securely enables the creation, management, and disclosure of digital identities.","(Verified) Microsoft Corporation","Microsoft Corporation","c:\windows\microsoft.net\framework64\v3.0\windows communication foundation\infocard.exe",3.0.4506.5464,"""%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe"""
  78. 4/22/2016 11:47 PM,"HKLM\System\CurrentControlSet\Services","IEEtwCollectorService",enabled,"Services",System-wide,"Internet Explorer ETW Collector Service: ETW Collector Service for Internet Explorer. When running, this service collects real time ETW events and processes them.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\ieetwcollector.exe",11.0.9600.18315,"%SystemRoot%\system32\IEEtwCollector.exe /V"
  79. 10/11/2013 9:29 PM,"HKLM\System\CurrentControlSet\Services","IKEEXT",enabled,"Services",System-wide,"IKE and AuthIP IPsec Keying Modules: The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\ikeext.dll",6.1.7601.18283,"%systemroot%\system32\svchost.exe -k netsvcs"
  80. 7/13/2009 8:28 PM,"HKLM\System\CurrentControlSet\Services","IPBusEnum",enabled,"Services",System-wide,"PnP-X IP Bus Enumerator: The PnP-X bus enumerator service manages the virtual network bus. It discovers network connected devices using the SSDP/WS discovery protocols and gives them presence in PnP. If this service is stopped or disabled, presence of NCD devices will not be maintained in PnP. All pnpx based scenarios will stop functioning.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\ipbusenum.dll",6.1.7600.16385,"%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted"
  81. 10/3/2012 12:42 PM,"HKLM\System\CurrentControlSet\Services","iphlpsvc",enabled,"Services",System-wide,"IP Helper: Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\iphlpsvc.dll",6.1.7601.17964,"%SystemRoot%\System32\svchost.exe -k NetSvcs"
  82. 4/9/2016 12:43 AM,"HKLM\System\CurrentControlSet\Services","KeyIso",enabled,"Services",System-wide,"CNG Key Isolation: The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\lsass.exe",6.1.7601.23418,"%SystemRoot%\system32\lsass.exe"
  83. 7/13/2009 8:30 PM,"HKLM\System\CurrentControlSet\Services","KtmRm",enabled,"Services",System-wide,"KtmRm for Distributed Transaction Coordinator: Coordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\msdtckrm.dll",2001.12.8530.16385,"%SystemRoot%\System32\svchost.exe -k NetworkServiceAndNoImpersonation"
  84. 11/20/2010 8:15 AM,"HKLM\System\CurrentControlSet\Services","LanmanServer",enabled,"Services",System-wide,"Server: Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\srvsvc.dll",6.1.7601.17514,"%SystemRoot%\system32\svchost.exe -k netsvcs"
  85. 11/20/2010 8:16 AM,"HKLM\System\CurrentControlSet\Services","LanmanWorkstation",enabled,"Services",System-wide,"Workstation: Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\wkssvc.dll",6.1.7601.17514,"%SystemRoot%\System32\svchost.exe -k NetworkService"
  86. 7/13/2009 8:28 PM,"HKLM\System\CurrentControlSet\Services","lltdsvc",enabled,"Services",System-wide,"Link-Layer Topology Discovery Mapper: Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device. If this service is disabled, the Network Map will not function properly.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\lltdsvc.dll",6.1.7600.16385,"%SystemRoot%\System32\svchost.exe -k LocalService"
  87. 7/13/2009 8:28 PM,"HKLM\System\CurrentControlSet\Services","lmhosts",enabled,"Services",System-wide,"TCP/IP NetBIOS Helper: Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\lmhsvc.dll",6.1.7600.16385,"%SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted"
  88. 4/5/2017 5:40 PM,"HKLM\System\CurrentControlSet\Services","LogiRegistryService",enabled,"Services",System-wide,"Logitech Gaming Registry Service: Logitech Surround Sound Service","(Verified) Logitech Inc","Logitech Inc.","c:\program files\logitech gaming software\drivers\aposervice\logiregistryservice.exe",8.92.67.0,"""C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe"""
  89. 7/13/2009 8:29 PM,"HKLM\System\CurrentControlSet\Services","MMCSS",enabled,"Services",System-wide,"Multimedia Class Scheduler: Enables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications. If this service is stopped, individual tasks resort to their default priority.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\mmcss.dll",6.1.7600.16385,"%SystemRoot%\system32\svchost.exe -k netsvcs"
  90. 12/8/2016 7:49 PM,"HKLM\System\CurrentControlSet\Services","MozillaMaintenance",enabled,"Services",System-wide,"Mozilla Maintenance Service: The Mozilla Maintenance Service ensures that you have the latest and most secure version of Mozilla Firefox on your computer. Keeping Firefox up to date is very important for your online security, and Mozilla strongly recommends that you keep this service enabled.","(Verified) Mozilla Corporation","Mozilla Foundation","c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe",50.1.0.6186,"""C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"""
  91. 11/20/2010 8:05 AM,"HKLM\System\CurrentControlSet\Services","MpsSvc",enabled,"Services",System-wide,"Windows Firewall: Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\mpssvc.dll",6.1.7601.17514,"%SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork"
  92. 7/13/2009 6:59 PM,"HKLM\System\CurrentControlSet\Services","MSDTC",enabled,"Services",System-wide,"Distributed Transaction Coordinator: Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\msdtc.exe",2001.12.8530.16385,"%SystemRoot%\System32\msdtc.exe"
  93. 7/13/2009 8:29 PM,"HKLM\System\CurrentControlSet\Services","MSiSCSI",enabled,"Services",System-wide,"Microsoft iSCSI Initiator Service: Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\iscsiexe.dll",6.1.7600.16385,"%systemroot%\system32\svchost.exe -k netsvcs"
  94. 6/15/2015 3:51 PM,"HKLM\System\CurrentControlSet\Services","msiserver",enabled,"Services",System-wide,"Windows Installer: Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\msiexec.exe",5.0.7601.18896,"%systemroot%\system32\msiexec.exe /V"
  95. 11/20/2010 8:12 AM,"HKLM\System\CurrentControlSet\Services","napagent",enabled,"Services",System-wide,"Network Access Protection Agent: The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\qagentrt.dll",6.1.7601.17514,"%SystemRoot%\System32\svchost.exe -k NetworkService"
  96. 4/9/2016 12:43 AM,"HKLM\System\CurrentControlSet\Services","Netlogon",enabled,"Services",System-wide,"Netlogon: Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\lsass.exe",6.1.7601.23418,"%systemroot%\system32\lsass.exe"
  97. 7/13/2009 8:30 PM,"HKLM\System\CurrentControlSet\Services","Netman",enabled,"Services",System-wide,"Network Connections: Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\netman.dll",6.1.7600.16385,"%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted"
  98. 7/13/2009 8:30 PM,"HKLM\System\CurrentControlSet\Services","netprofm",enabled,"Services",System-wide,"Network List Service: Identifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\netprofm.dll",6.1.7600.16385,"%SystemRoot%\System32\svchost.exe -k LocalService"
  99. 12/5/2014 11:14 PM,"HKLM\System\CurrentControlSet\Services","NlaSvc",enabled,"Services",System-wide,"Network Location Awareness: Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\nlasvc.dll",6.1.7601.18685,"%SystemRoot%\System32\svchost.exe -k NetworkService"
  100. 7/13/2009 8:32 PM,"HKLM\System\CurrentControlSet\Services","nsi",enabled,"Services",System-wide,"Network Store Interface Service: This service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\nsisvc.dll",6.1.7600.16385,"%systemroot%\system32\svchost.exe -k LocalService"
  101. 7/30/2015 6:27 PM,"HKLM\System\CurrentControlSet\Services","NvNetworkService",enabled,"Services",System-wide,"NVIDIA Network Service: NVIDIA Network Service","(Verified) NVIDIA Corporation","NVIDIA Corporation","c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe",2.4.13.69,"""C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"""
  102. 11/5/2015 8:19 AM,"HKLM\System\CurrentControlSet\Services","NvStreamNetworkSvc",enabled,"Services",System-wide,"NVIDIA Streamer Network Service: Network Service for SHIELD Streaming","(Verified) NVIDIA Corporation","NVIDIA Corporation","c:\program files\nvidia corporation\nvstreamsrv\nvstreamnetworkservice.exe",4.1.2014.398,"""C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"""
  103. 11/5/2015 8:19 AM,"HKLM\System\CurrentControlSet\Services","NvStreamSvc",enabled,"Services",System-wide,"NVIDIA Streamer Service: Service for SHIELD Streaming","(Verified) NVIDIA Corporation","NVIDIA Corporation","c:\program files\nvidia corporation\nvstreamsrv\nvstreamservice.exe",4.1.2014.398,"""C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"""
  104. 11/24/2015 1:34 PM,"HKLM\System\CurrentControlSet\Services","nvsvc",enabled,"Services",System-wide,"NVIDIA Display Driver Service: Provides system and desktop level support to the NVIDIA display driver","(Verified) NVIDIA Corporation","NVIDIA Corporation","c:\windows\system32\nvvsvc.exe",8.17.13.5906,"""C:\Windows\system32\nvvsvc.exe"""
  105. 7/13/2009 8:33 PM,"HKLM\System\CurrentControlSet\Services","p2pimsvc",enabled,"Services",System-wide,"Peer Networking Identity Manager: Provides identity services for the Peer Name Resolution Protocol (PNRP) and Peer-to-Peer Grouping services. If disabled, the Peer Name Resolution Protocol (PNRP) and Peer-to-Peer Grouping services may not function, and some applications, such as HomeGroup and Remote Assistance, may not function correctly.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\pnrpsvc.dll",6.1.7600.16385,"%SystemRoot%\System32\svchost.exe -k LocalServicePeerNet"
  106. 7/13/2009 8:32 PM,"HKLM\System\CurrentControlSet\Services","p2psvc",enabled,"Services",System-wide,"Peer Networking Grouping: Enables multi-party communication using Peer-to-Peer Grouping. If disabled, some applications, such as HomeGroup, may not function.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\p2psvc.dll",6.1.7600.16385,"%SystemRoot%\System32\svchost.exe -k LocalServicePeerNet"
  107. 2/2/2015 10:29 PM,"HKLM\System\CurrentControlSet\Services","PcaSvc",enabled,"Services",System-wide,"Program Compatibility Assistant Service: This service provides support for the Program Compatibility Assistant (PCA). PCA monitors programs installed and run by the user and detects known compatibility problems. If this service is stopped, PCA will not function properly.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\pcasvc.dll",6.1.7601.18741,"%systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted"
  108. 7/13/2009 8:32 PM,"HKLM\System\CurrentControlSet\Services","PeerDistSvc",enabled,"Services",System-wide,"BranchCache: This service caches network content from peers on the local subnet.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\system32\peerdistsvc.dll",6.1.7600.16385,"%SystemRoot%\System32\svchost.exe -k PeerDist"
  109. 7/13/2009 6:11 PM,"HKLM\System\CurrentControlSet\Services","PerfHost",enabled,"Services",System-wide,"Performance Counter DLL Host: Enables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.","(Verified) Microsoft Windows","Microsoft Corporation","c:\windows\syswow64\perfhost.exe",6.1.7600.16385,"%SystemRoot%\SysWow64\perfhost.exe"
  110. 11/20/2010 8:13 AM,"HKLM\System\CurrentControlSet\Services","pla",enabled,"Services",System-wide,"Performance Logs
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!