Startup List Results
Startup Entry
Startup Entry
| Name | Filename | Description | Status |
| dwm | dwm.exe | Identified as Trojan-Dropper.Win32.Agent.aajt. Note: Located in \%AppData%\Roaming\Google\ | X |
Active Setup List Results
Active Setup - Installed Component
Active Setup - Installed Component
| CLSID | Name | Filename | Description | Status |
| {REGLQF01-ZRYE-YNF1-GG4D-TORFYNWFGA0V} | (no name) | x8dwm.exe | Infostealer trojan, see this ThreatExpert Report | X |
| {VXL3SAL4-JNTJ-M54W-34H6-1823PFSLKJNH} | (no name) | dwm.exe | Infostealer trojan, see here | X |
| {E381NI18-1OVL-2KLL-C213-UF22Q1O6RQ3X} | (no name) | dwm.exe | Infostealer trojan, dropper detected by ESET's Nod32 antivirus as Win32/Injector.Autoit.BEE - also see here | X |