Windows 10: BthHFEnum & BTHMODEM Showing RED in Autoruns

Hi There,Recently opened autoruns to see if there are any broken/missing entires. Surprisingly enough i've come across 2 red services which are marked as not verified. I am very worried that I have been infected with malware. I also put them into virustotal and it does not seem to ring any alert bells. I was wondering if these are legit ones and if someone else is getting them showed up as red and not-verified aswell.BthHFEnum.sysBTHMODEM.sys

:)

 

BTHMODEM PROBLEM

Hi Jaspreet,

My unit is Inspiron 13 5310, and I already went to my device manufacturer's website and downloaded all available drivers and still has the same problem. Autoruns highlights the two with BTHMODEM in red and DBUtilDrv2 in yellow:

BTHMODEM Bluetooth Modem Communications Driver: Bluetooth Communications Driver (Not Verified) Microsoft Corporation C:\WINDOWS\System32\drivers\bthmodem.sys Sat May 7 13:19:01 2022

DBUtilDrv2 DBUtilDrv2 Service: File not found: C:\WINDOWS\System32\drivers\DBUtilDrv2.sys

 

How can I remove this virus remnant?

I was also going to suggest Autoruns.

Check to make sure it isn't attaching itself to explorer. It should be the 3rd thing listed in Autoruns, the listing for the Shell. It should just be Explorer.exe. If it is anything else, that might be your problem.

 

Windows 10 Autorun?

Hello,

As you are asking whether the security of disabling Autorun/Autoplay option from system settings is the same as disabling from the registry and will take affect in the same way. There is no need to worry about virus threats which usually attack from autorun/autoplay.
If you want to disable autorun/autoplay from registry, follow the steps provided below:

• Type regedit in the search box and press Enter.
• Navigate to the following location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
• In the right pane of the window create a new DWORD value "NoDriveTypeAutorun".
• Set the value based on the following requirements:
  • FF – To disable AutoRun on all drives
  • 20 – To disable AutoRun on CD-ROM drives
  • 4 – To disable AutoRun on removable drives
  • 8 – To disable AutoRun on fixed drives
  • 10 – To disable AutoRun on network drives
  • 40 – To disable AutoRun on RAM disks
  • 1 – To disable AutoRun on unknown drives
• If you want to disable AutoRun on a certain combination of drives, you’ll have to combine their values. For example, if you want to disable AutoRun on CD-ROM and removable drives, set the value of DWORD to 28.
• If you want to return AutoRun functionality, just delete the NoDriveTypeAutorun DWORD value.

Note: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore,
make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following
article number to view the article in the Microsoft Knowledge Base:

322756 (How to back up and restore the registry in Windows - Microsoft Support )

How to back up and restore the registry in Windows


Hope this helps. Keep us posted on the status for further assistance.