|
its a service.. or was.
the Type setting of 0x20 means it rides inside an SVCHOST.
but then you can see its marked as part of the filter driver group, and has keys in the non pnp device class
My guess is you regcleaned away any chance we have of figuring out what it is.
I will note that its 99% a norton contraption, since SYMxxxx stuff always is, see SYMEVENT, SYMNDIS, etc..
What from norton looks like: pirtsph
|