Here's the log from startup tracker..
-- Registry -
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnc
No Items Foun
-- Registry -
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ru
CPQEASYACC C:\Program Files\Compaq\Easy Access Button Support\StartEAK.ex
WCOLOREAL "C:\Program Files\COMPAQ\Coloreal\coloreal.exe
Smapp Smtray.ex
WorksFUD
Microsoft Works Portfolio C:\Program Files\Microsoft Works\WksSb.exe /AllUser
srmclean C:\Cpqs\Scom\srmclean.ex
CMPDPSRV C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CMPDPSRV.EX
AdaptecDirectCD C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.ex
vnnxncac C:\WINDOWS\System32\vnnxncac.ex
stcloader C:\WINDOWS\System32\stcloader.ex
TVTMD C:\WINDOWS\TVTMD.ex
winactive C:\Program Files\Window Active\winactive.ex
RealTray C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYE
QuickTime Task "C:\Program Files\QuickTime\qttask.exe" -atboottim
updater C:\Program Files\Common files\Updater\wupdater.ex
WINSTA~1.EXE C:\WINDOWS\System\WINSTA~1.EXE -
P2P Networking C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTAR
-- Registry -
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnc
No Items Foun
-- Start Menu - Current User -
No Items Foun
-- Start Menu - All Users -
America Online 9.0 Tray Icon.ln
Microsoft Works Calendar Reminders.ln
updater.ln
-- Disabled Items -
No Items Foun
-- Registry - Shell Value - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -
Explorer.ex
-- Running Processes -
System Idle Process
System
smss.exe \SystemRoot\System32\smss.ex
csrss.exe
winlogon.exe winlogon.ex
services.exe C:\WINDOWS\system32\services.ex
lsass.exe C:\WINDOWS\system32\lsass.ex
svchost.exe C:\WINDOWS\system32\svchost -k rpcs
svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvc
svchost.exe
svchost.exe
spoolsv.exe C:\WINDOWS\system32\spoolsv.ex
PackethSvc.exe C:\WINDOWS\System32\PackethSvc.ex
alg.exe
acsd.exe C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.ex
pctspk.exe C:\WINDOWS\system32\pctspk.ex
scardsvr.exe
wanmpsvc.exe "C:\WINDOWS\wanmpsvc.exe
STARTEAK.exe "C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe"
CMpdpsrv.exe "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CMPDPSRV.EXE"
Directcd.exe "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
TVTMD.exe "C:\WINDOWS\TVTMD.exe"
realplay.exe "C:\Program Files\Real\RealPlayer\RealPlay.exe" SYSTEMBOOTHIDEPLAYE
qttask.exe "C:\Program Files\QuickTime\qttask.exe" -atboottim
wupdater.exe "C:\Program Files\Common files\Updater\wupdater.exe"
EAUSBKBD.exe "C:\Compaq\EAKDRV\EAUSBKBD.EXE
P2P Networking.exe "C:\WINDOWS\System32\P2P Networking\P2P Networking.exe" /AUTOSTAR
msmsgs.exe "C:\Program Files\Messenger\msmsgs.exe" /backgroun
aim.exe "C:\Program Files\AIM95\aim.exe" -cnetwait.od
WkCalRem.exe "C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe"
rundll32.exe "C:\WINDOWS\System32\RUNDLL32.exe" 2ndsrch.dll,Ru
waol.exe "C:\Program Files\America Online 9.0\waol.exe"
shellmon.exe "C:\Program Files\America Online 9.0\shellmon.exe
aolwbspd.exe -p11523 -S64 -G"C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\vph.ph" -c1 -H254
explorer.exe C:\WINDOWS\explorer.ex
CPQEADM.exe "C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
BttnServ.exe C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe -Embeddin
IEXPLORE.EXE "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
winamp.exe "C:\Program Files\Winamp\winamp.exe"
StartupTracker3.exe "C:\Documents and Settings\Meg Leyte-Vidal\Local Settings\Temp\Temporary Directory 1 for StartupTracker3[1].zip\StartupTracker3.exe"
wmiprvse.exe
-- Running Services --
Name: ALG
Description: Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Internet Connection Firewall
Startup Mode: Manual
Run from: C:\WINDOWS\System32\alg.exe
Name: AOL ACS
Description:
Startup Mode: Auto
Run from: C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
Name: AudioSrv
Description: Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: BITS
Description: Uses idle network bandwidth to transfer data.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: Browser
Description: Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: CryptSvc
Description: Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs
Name: Dhcp
Description: Manages network configuration by registering and updating IP addresses and DNS names.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: Dnscache
Description: Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k NetworkService
Name: ERSvc
Description: Allows error reporting for services and applictions running in non-standard environments.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: Eventlog
Description: Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\services.exe
Name: EventSystem
Description: Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: FastUserSwitchingCompatibility
Description: Provides management for applications that require assistance in a multiple user environment.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: helpsvc
Description: Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: HidServ
Description: Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: lanmanserve
Description: Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start
Startup Mode: Aut
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: lanmanworkstatio
Description: Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start
Startup Mode: Aut
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: LmHost
Description: Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution
Startup Mode: Aut
Run from: C:\WINDOWS\System32\svchost.exe -k LocalServic
Name: Messenge
Description: Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start
Startup Mode: Aut
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: Netma
Description: Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections
Startup Mode: Manua
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: Nl
Description: Collects and stores network configuration and location information, and notifies applications when this information changes
Startup Mode: Manua
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: PackethSv
Description:
Startup Mode: Aut
Run from: C:\WINDOWS\System32\PackethSvc.ex
Name: Pctsp
Description:
Startup Mode: Aut
Run from: C:\WINDOWS\system32\pctspk.ex
Name: PlugPla
Description: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability
Startup Mode: Aut
Run from: C:\WINDOWS\system32\services.ex
Name: PolicyAgen
Description: Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver
Startup Mode: Aut
Run from: C:\WINDOWS\System32\lsass.ex
Name: ProtectedStorag
Description: Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users
Startup Mode: Aut
Run from: C:\WINDOWS\system32\lsass.ex
Name: RasAut
Description: Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address
Startup Mode: Aut
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: RasMa
Description: Creates a network connection
Startup Mode: Manua
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: RemoteAcces
Description: Offers routing services to businesses in local area and wide area network environments
Startup Mode: Aut
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: RpcS
Description: Provides the endpoint mapper and other miscellaneous RPC services
Startup Mode: Aut
Run from: C:\WINDOWS\system32\svchost -k rpcs
Name: SamS
Description: Stores security information for local user accounts
Startup Mode: Aut
Run from: C:\WINDOWS\system32\lsass.ex
Name: SCardSv
Description: Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start
Startup Mode: Aut
Run from: C:\WINDOWS\System32\SCardSvr.ex
Name: Schedul
Description: Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start
Startup Mode: Aut
Run from: C:\WINDOWS\System32\svchost.exe -k netsvc
Name: seclogon
Description: Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: SENS
Description: Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs
Name: SharedAccess
Description: Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: ShellHWDetection
Description:
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: Spooler
Description: Loads files to memory for later printing.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\spoolsv.exe
Name: srservice
Description: Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: SSDPSRV
Description: Enables discovery of UPnP devices on your home network.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k LocalService
Name: TapiSrv
Description: Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: TermService
Description: Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: Themes
Description: Provides user experience theme management.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: TrkWks
Description: Maintains links between NTFS files within a computer or across computers in a network domain.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs
Name: uploadmgr
Description: Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: W32Time
Description: Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: WANMiniportService
Description:
Startup Mode: Auto
Run from: "C:\WINDOWS\wanmpsvc.exe"
Name: WebClient
Description: Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k LocalService
Name: winmgmt
Description: Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs
Name: WmdmPmSp
Description: Retrieves the serial number of any portable music player connected to your computer
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
Name: WZCSVC
Description: Provides automatic configuration for the 802.11 adapters
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs
