- 11/3/2008 9:03:38 PM 2.2.0.0 2.2.0.512 - 94 - 0 Standalone Interactive Stopped "C:\MY PROGRAMS\Security Programs\Ad-Aware 2008\aawservice.exe" Lavasoft Ad-Aware Service aawservice Non-System Service Val:0 Boot Start Ignore ShellSvcGroup LocalSystem RpcSS Ad-Aware service 0 Lavasoft Ad-Aware Service 7,1,0,12 Ad-Aware Copyright © 2008 aawservice.exe Ad-Aware Service 7,1,0,12 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Application Experience Lookup Service AeLookupSvc Non-System Service Val:0 Boot Start Normal LocalSystem Processes application compatibility lookup requests for applications as they are launched. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k LocalService Alerter Alerter Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService LanmanWorkstation Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 1248 Standalone Running C:\WINDOWS\System32\alg.exe Application Layer Gateway Service ALG Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall 0 Microsoft Corporation Application Layer Gateway Service 5.2.3790.1830 (srv03_sp1_rtm.050324-1447) ALG.exe © Microsoft Corporation. All rights reserved. ALG.exe Microsoft® Windows® Operating System 5.2.3790.1830 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k netsvcs Application Management AppMgmt Non-System Service Val:0 Boot Start Normal LocalSystem Processes installation, removal, and enumeration requests for Active Directory IntelliMirror group policy programs. If the service is disabled, users will be unable to install, remove, or enumerate any IntelliMirror programs. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_state.exe ASP.NET State Service aspnet_state Non-System Service Val:0 Boot Start Normal NT AUTHORITY\NetworkService Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 1008 Standalone Interactive Running "C:\MY PROGRAMS\Security Programs\Avast\aswUpdSv.exe" avast! iAVS4 Control Service aswUpdSv Non-System Service Val:0 Boot Start Normal ShellSvcGroup LocalSystem Provides automatic updating for the avast! antivirus. 0 ALWIL Software avast! Antivirus updating service 4, 8, 1227, 0 aswUpdSv.exe Copyright © 2008 ALWIL Software aswUpdSv.exe avast! Antivirus 4, 8, 0, 0 English - United States 1033 1252 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Windows Audio AudioSrv Non-System Service Val:0 Boot Start Normal AudioGroup LocalSystem PlugPlay Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 1056 Standalone Interactive Running "C:\MY PROGRAMS\Security Programs\Avast\ashServ.exe" avast! Antivirus avast! Antivirus Non-System Service Val:0 Boot Start Normal ShellSvcGroup LocalSystem aswMonFlt Manages and implements avast! antivirus services for this computer. This includes the resident protection, the virus chest and the scheduler. 0 ALWIL Software avast! antivirus service 4, 8, 1227, 0 aswServ Copyright © 2008 ALWIL Software aswServ.exe avast! Antivirus 4, 8, 0, 0 English - United States 1033 1200 - 2792 Standalone Interactive Running "C:\MY PROGRAMS\Security Programs\Avast\ashMaiSv.exe" /service avast! Mail Scanner avast! Mail Scanner Non-System Service Val:0 Boot Start Normal ShellSvcGroup LocalSystem avast! Antivirus Implements mail scanning for avast! antivirus. 0 ALWIL Software avast! e-Mail Scanner Service 4, 8, 1227, 0 AvMaiSrv Copyright © 2008 ALWIL Software AvMaiSrv.exe avast! Antivirus 4, 8, 0, 0 jul2008 Language Neutral 0 1200 - 2856 Standalone Interactive Running "C:\MY PROGRAMS\Security Programs\Avast\ashWebSv.exe" /service avast! Web Scanner avast! Web Scanner Non-System Service Val:0 Boot Start Normal ShellSvcGroup LocalSystem avast! Antivirus Implements web (HTTP) scanning for avast! antivirus. 0 ALWIL Software avast! Web Scanner 4, 8, 1229, 0 aswProxy Copyright © 2008 ALWIL Software ashWebSv.exe avast! Antivirus 4, 8, 0, 0 Language Neutral 0 1200 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Background Intelligent Transfer Service BITS Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k netsvcs Computer Browser Browser Non-System Service Val:0 Boot Start Normal LocalSystem LanmanWorkstation Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\cisvc.exe Indexing Service CiSvc Non-System Service Val:0 Boot Start Normal LocalSystem RPCSS Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. 0 Microsoft Corporation Content Index service 5.2.3790.1830 (srv03_sp1_rtm.050324-1447) cisvc.exe © Microsoft Corporation. All rights reserved. cisvc.exe Microsoft® Windows® Operating System 5.2.3790.1830 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\system32\clipsrv.exe ClipBook ClipSrv Non-System Service Val:0 Boot Start Normal LocalSystem NetDDE Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Windows Clipbook DDE Server 5.2.3790.0 (srv03_rtm.030324-2048) CLIPSRV.EXE © Microsoft Corporation. All rights reserved. CLIPSRV.EXE Microsoft® Windows® Operating System 5.2.3790.0 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe .NET Runtime Optimization Service v2.0.50727_X86 clr_optimization_v2.0.50727_32 Non-System Service Val:0 Boot Start Ignore LocalSystem Microsoft .NET Framework NGEN 0 Microsoft Corporation .NET Runtime Optimization Service 2.0.50727.1433 (REDBITS.050727-1400) mscorsvw.exe © Microsoft Corporation. All rights reserved. mscorsvw.exe Microsoft® .NET Framework 2.0.50727.1433 Flavor=Retail English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe .NET Runtime Optimization Service v2.0.50727_x64 clr_optimization_v2.0.50727_64 Non-System Service Val:0 Boot Start Ignore LocalSystem Microsoft .NET Framework NGEN 0 0 0 - 0 Standalone Stopped C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} COM+ System Application COMSysApp Non-System Service Val:0 Boot Start Normal LocalSystem rpcss Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Cryptographic Services CryptSvc Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 676 Shared Running C:\WINDOWS\system32\svchost.exe -k DcomLaunch DCOM Server Process Launcher DcomLaunch Non-System Service Val:0 Boot Start Normal Event Log LocalSystem Provides launch functionality for DCOM services. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 896 Shared Running C:\WINDOWS\system32\svchost.exe -k NetworkService DHCP Client Dhcp Non-System Service Val:0 Boot Start Normal TDI NT AUTHORITY\NetworkService Tcpip Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\System32\dmadmin.exe /com Logical Disk Manager Administrative Service dmadmin Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. 0 0 0 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Logical Disk Manager dmserver Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 896 Shared Running C:\WINDOWS\system32\svchost.exe -k NetworkService DNS Client Dnscache Non-System Service Val:0 Boot Start Normal TDI NT AUTHORITY\NetworkService Tcpip Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\System32\svchost.exe -k WinErr Error Reporting Service ERSvc Non-System Service Val:0 Boot Start Ignore LocalSystem RpcSs Collects, stores, and reports unexpected application crashes to Microsoft. If this service is stopped, then Error Reporting will occur only for kernel faults and some types of user mode faults. If this service is disabled, any services that explicitly depend on it will not start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 480 Shared Running C:\WINDOWS\system32\services.exe Event Log Eventlog System Service Val:1 System Start Normal Event log LocalSystem Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. 0 0 0 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs COM+ Event System EventSystem Non-System Service Val:0 Boot Start Normal LocalSystem RPCSS Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Help and Support helpsvc Non-System Service Val:0 Boot Start Normal LocalSystem RPCSS Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs HID Input Service HidServ Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\System32\lsass.exe HTTP SSL HTTPFilter Non-System Service Val:0 Boot Start Normal LocalSystem HTTP This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 0 Shared Stopped C:\WINDOWS\SysWOW64\svchost.exe -k iasjet IAS Jet Database Access IASJet Non-System Service Val:0 Boot Start Normal LocalSystem RPCSS Configures Internet Authentication Service (IAS). If this service is stopped, remote network access that requires user authentication will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\system32\imapi.exe IMAPI CD-Burning COM Service ImapiService Non-System Service Val:0 Boot Start Normal LocalSystem Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Server lanmanserver Non-System Service Val:0 Boot Start Normal LocalSystem Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Workstation lanmanworkstation Non-System Service Val:0 Boot Start Normal NetworkProvider LocalSystem Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 960 Shared Running C:\WINDOWS\system32\svchost.exe -k LocalService TCP/IP NetBIOS Helper LmHosts Non-System Service Val:0 Boot Start Normal TDI NT AUTHORITY\LocalService NetBT Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k netsvcs Messenger Messenger Non-System Service Val:0 Boot Start Normal LocalSystem LanmanWorkstation Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped "C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe" Microsoft Office Groove Audit Service Microsoft Office Groove Audit Service Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService 0 Microsoft Corporation Groove Audit Service 12.0.4518.1014 GrooveAuditService © 2006 Microsoft Corporation. All rights reserved. GrooveAuditService.exe Groove Audit Service 4.2.0.2623 Language Neutral 0 1200 - 0 Standalone Interactive Stopped C:\WINDOWS\system32\mnmsrvc.exe NetMeeting Remote Desktop Sharing mnmsrvc Non-System Service Val:0 Boot Start Normal LocalSystem Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation NetMeeting Remote Desktop Sharing 5.2.3790.1830 mnmsrvc Copyright © Microsoft Corporation 1996-2001 Microsoft® is a registered trademark of Microsoft Corporation. Windows® is a registered trademark of Microsoft Corporation. mnmsrvc.dll Microsoft® Windows® Operating System 3.01 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\system32\msdtc.exe Distributed Transaction Coordinator MSDTC Non-System Service Val:0 Boot Start Normal MS Transactions NT AUTHORITY\NetworkService RPCSS Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 0 Shared Stopped C:\WINDOWS\system32\msiexec.exe /V Windows Installer MSIServer Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Windows® installer 3.1.4000.3959 msiexec © Microsoft Corporation. All rights reserved. msiexec.exe Windows Installer - Unicode 3.1.4000.3959 Language Neutral 0 1200 - 0 Shared Stopped C:\WINDOWS\system32\netdde.exe Network DDE NetDDE Non-System Service Val:0 Boot Start Normal NetDDEGroup LocalSystem NetDDEDSDM Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Network DDE - DDE Communication 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) NETDDE.EXE © Microsoft Corporation. All rights reserved. NETDDE.EXE Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\netdde.exe Network DDE DSDM NetDDEdsdm Non-System Service Val:0 Boot Start Normal LocalSystem Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Network DDE - DDE Communication 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) NETDDE.EXE © Microsoft Corporation. All rights reserved. NETDDE.EXE Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\lsass.exe Net Logon Netlogon Non-System Service Val:0 Boot Start Normal MS_WindowsRemoteValidation LocalSystem LanmanWorkstation Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Network Connections Netman Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. If this service is disabled, you will not be able to view local area network and remote connections and any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Network Location Awareness (NLA) Nla Non-System Service Val:0 Boot Start Normal LocalSystem Tcpip Collects and stores network configuration and location information, and notifies applications when this information changes. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\lsass.exe NT LM Security Support Provider NtLmSsp Non-System Service Val:0 Boot Start Normal LocalSystem Provides security to remote procedure call (RPC) programs that use transports other than named pipes. 0 0 0 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k netsvcs Removable Storage NtmsSvc Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Manages and catalogs removable media and operates automated removable media devices. If this service is stopped, programs that are dependent on Removable Storage, such as Backup and Remote Storage, will operate more slowly. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 1964 Standalone Running C:\WINDOWS\system32\nvsvc64.exe NVIDIA Display Driver Service NVSvc Non-System Service Val:0 Boot Start Normal LocalSystem Provides system and desktop level support to the NVIDIA display driver 0 0 0 - 0 Standalone Stopped "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" Microsoft Office Diagnostics Service odserv Non-System Service Val:0 Boot Start Normal LocalSystem Run portions of Microsoft Office Diagnostics. 0 Microsoft Corporation Microsoft Office Diagnostics 12.0.4518.1014 ODSERV © 2006 Microsoft Corporation. All rights reserved. ODServ.exe Office Diagnostics Service 12.0.4518.1014 Language Neutral 0 1252 - 0 Standalone Stopped "C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE" Office Source Engine ose Non-System Service Val:0 Boot Start Normal LocalSystem Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports. 0 Microsoft Corporation Office Source Engine 12.0.4518.1014 ose © 2006 Microsoft Corporation. All rights reserved. ose.exe Office Source Engine 12.0.4518.1014 Language Neutral 0 1252 - 480 Shared Running C:\WINDOWS\system32\services.exe Plug and Play PlugPlay System Service Val:1 System Start Normal PlugPlay LocalSystem Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. 0 0 0 - 492 Shared Running C:\WINDOWS\system32\lsass.exe IPSEC Services PolicyAgent System Service Val:1 System Start Normal LocalSystem RPCSS Provides end-to-end security between clients and servers on TCP/IP networks. If this service is stopped, TCP/IP security between clients and servers on the network will be impaired. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 492 Shared Interactive Running C:\WINDOWS\system32\lsass.exe Protected Storage ProtectedStorage System Service Val:1 System Start Normal LocalSystem RpcSs Protects storage of sensitive information, such as private keys, and prevents access by unauthorized services, processes, or users. If this service is stopped, protected storage will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k netsvcs Remote Access Auto Connection Manager RasAuto Non-System Service Val:0 Boot Start Normal LocalSystem RasMan Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k netsvcs Remote Access Connection Manager RasMan Non-System Service Val:0 Boot Start Normal LocalSystem Tapisrv Creates a network connection. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\system32\sessmgr.exe Remote Desktop Help Session Manager RDSessMgr Non-System Service Val:0 Boot Start Normal LocalSystem RPCSS Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. 0 0 0 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k netsvcs Routing and Remote Access RemoteAccess Non-System Service Val:0 Boot Start Normal LocalSystem RpcSS Offers routing services to businesses in local area and wide area network environments. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k LocalService Remote Registry RemoteRegistry Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService RPCSS Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\system32\locator.exe Remote Procedure Call (RPC) Locator RpcLocator Non-System Service Val:0 Boot Start Normal NT AUTHORITY\NetworkService LanmanWorkstation Enables remote procedure call (RPC) clients using the RpcNs* family of APIs to locate RPC servers. If this service is stopped or disabled, RPC clients using RpcNs* APIs may be unable to locate servers or fail to start. RpcNs* APIs are not used internally in Windows. 0 Microsoft Corporation Rpc Locator 5.2.3790.0 (srv03_rtm.030324-2048) locator.exe © Microsoft Corporation. All rights reserved. locator.exe Microsoft® Windows® Operating System 5.2.3790.0 English - United States 1033 1200 - 772 Shared Running C:\WINDOWS\system32\svchost.exe -k rpcss Remote Procedure Call (RPC) RpcSs Non-System Service Val:0 Boot Start Normal COM Infrastructure NT AUTHORITY\NetworkService Serves as the endpoint mapper and COM Service Control Manager. If this service is stopped or disabled, programs using COM or Remote Procedure Call (RPC) services will not function properly. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 492 Shared Running C:\WINDOWS\system32\lsass.exe Security Accounts Manager SamSs System Service Val:1 System Start Normal MS_WindowsLocalValidation LocalSystem RPCSS The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled. 0 0 0 - 0 Shared Stopped C:\WINDOWS\System32\SCardSvr.exe Smart Card SCardSvr Non-System Service Val:0 Boot Start Ignore SmartCardGroup NT AUTHORITY\LocalService PlugPlay Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Smart Card Resource Management Server 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) SCardSvr.exe © Microsoft Corporation. All rights reserved. SCardSvr.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Task Scheduler Schedule Non-System Service Val:0 Boot Start Normal SchedulerGroup LocalSystem RpcSs Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Secondary Logon seclogon Non-System Service Val:0 Boot Start Ignore LocalSystem Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs System Event Notification SENS Non-System Service Val:0 Boot Start Normal Network LocalSystem EventSystem Monitors system events and notifies subscribers to COM+ Event System of these events. If this service is stopped, COM+ Event System subscribers will not receive system event notifications. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Windows Firewall/Internet Connection Sharing (ICS) SharedAccess Non-System Service Val:0 Boot Start Normal LocalSystem Netman Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Shell Hardware Detection ShellHWDetection Non-System Service Val:0 Boot Start Ignore ShellSvcGroup LocalSystem RpcSs Provides notifications for AutoPlay hardware events. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 1572 Standalone Interactive Running C:\WINDOWS\system32\spoolsv.exe Print Spooler Spooler Non-System Service Val:0 Boot Start Normal SpoolerGroup LocalSystem RPCSS Manages all local and network print queues and controls all printing jobs. If this service is stopped, printing on the local machine will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs System Restore Service srservice Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 960 Shared Running C:\WINDOWS\system32\svchost.exe -k LocalService SSDP Discovery Service SSDPSRV Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService HTTP Enables discovery of UPnP devices on your home network. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 2004 Shared Running C:\WINDOWS\system32\svchost.exe -k imgsvc Windows Image Acquisition (WIA) stisvc Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService RpcSs Provides image acquisition services for scanners and cameras. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\System32\svchost.exe -k swprv Microsoft Software Shadow Copy Provider swprv Non-System Service Val:0 Boot Start Normal LocalSystem RPCSS Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\system32\smlogsvc.exe Performance Logs and Alerts SysmonLog Non-System Service Val:0 Boot Start Normal NT Authority\NetworkService Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Performance Logs and Alerts Service 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) SMLOGSVC.EXE © Microsoft Corporation. All rights reserved. SMLOGSVC.EXE Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\System32\svchost.exe -k netsvcs Telephony TapiSrv Non-System Service Val:0 Boot Start Normal LocalSystem PlugPlay Provides Telephony API (TAPI) support for clients using programs that control telephony devices and IP-based voice connections. If this service is stopped, the function of all dependent programs will be impaired. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Terminal Services TermService Non-System Service Val:0 Boot Start Normal LocalSystem RPCSS Allows users to connect interactively to a remote computer. Remote Desktop, Fast User Switching, Remote Assistance, and Terminal Server depend on this service - stopping or disabling this service may make your computer unreliable. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Themes Themes Non-System Service Val:0 Boot Start Normal UIGroup LocalSystem Provides user experience theme management. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\system32\tlntsvr.exe Telnet TlntSvr Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService RPCSS Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Distributed Link Tracking Client TrkWks Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Enables client programs to track linked files that are moved within an NTFS volume, to another NTFS volume on the same computer, or to an NTFS volume on another computer. If this service is stopped, the links on this computer will not be maintained or tracked. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\system32\wdfmgr.exe Windows User Mode Driver Framework UMWdf Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService RpcSs Enables Windows user mode drivers. 0 Microsoft Corporation Windows User Mode Driver Manager 5.2.3790.1830 (srv03_sp1_rtm.050324-1447) WdfMgr © Microsoft Corporation. All rights reserved. WdfMgr.exe Microsoft® Windows® Operating System 5.2.3790.1830 English - United States 1033 1200 - 960 Shared Running C:\WINDOWS\system32\svchost.exe -k LocalService Universal Plug and Play Device Host upnphost Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService SSDPSRV Provides support to host Universal Plug and Play devices. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\System32\ups.exe Uninterruptible Power Supply UPS Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService Manages an uninterruptible power supply (UPS) connected to the computer. 0 Microsoft Corporation UPS Service 5.2.3790.0 (srv03_rtm.030324-2048) ups.exe © Microsoft Corporation. All rights reserved. ups.exe Microsoft® Windows® Operating System 5.2.3790.0 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\System32\vds.exe Virtual Disk Service vds Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Provides software volume and hardware volume management service. 0 0 0 - 0 Standalone Stopped C:\WINDOWS\System32\vssvc.exe Volume Shadow Copy VSS Non-System Service Val:0 Boot Start Normal LocalSystem RPCSS Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. 0 0 0 - 960 Shared Running C:\WINDOWS\System32\svchost.exe -k LocalService Windows Time W32Time Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 960 Shared Running C:\WINDOWS\system32\svchost.exe -k LocalService WebClient WebClient Non-System Service Val:0 Boot Start Normal NetworkProvider NT AUTHORITY\LocalService MRxDAV Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\system32\svchost.exe -k LocalService WinHTTP Web Proxy Auto-Discovery Service WinHttpAutoProxySvc Non-System Service Val:0 Boot Start Normal NT AUTHORITY\LocalService Dhcp Implements the Web Proxy Auto-Discovery (WPAD) protocol for Windows HTTP Services (WinHTTP). WPAD is a protocol to enable an HTTP client to automatically discover a proxy configuration. If this service is stopped or disabled, the WPAD protocol will be executed within the HTTP client's process instead of an external service process; there would be no loss of functionality as a result. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Windows Management Instrumentation winmgmt Non-System Service Val:0 Boot Start Ignore LocalSystem RPCSS Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\System32\svchost.exe -k netsvcs Portable Media Serial Number Service WmdmPmSN Non-System Service Val:0 Boot Start Normal LocalSystem Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\System32\svchost.exe -k netsvcs Windows Management Instrumentation Driver Extensions Wmi Non-System Service Val:0 Boot Start Normal LocalSystem Monitors all drivers and event trace providers that are configured to publish Windows Management Instrumentation (WMI) or event trace information. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Standalone Stopped C:\WINDOWS\system32\wbem\wmiapsrv.exe WMI Performance Adapter WmiApSrv Non-System Service Val:0 Boot Start Normal LocalSystem RPCSS Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated. 0 0 0 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Security Center wscsvc Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Monitors system security settings and configurations. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\system32\svchost.exe -k netsvcs Automatic Updates wuauserv Non-System Service Val:0 Boot Start Normal LocalSystem Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 836 Shared Running C:\WINDOWS\System32\svchost.exe -k netsvcs Wireless Configuration WZCSVC Non-System Service Val:0 Boot Start Normal TDI LocalSystem RpcSs Enables automatic configuration for IEEE 802.11 adapters. If this service is stopped, automatic configuration will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 Shared Stopped C:\WINDOWS\System32\svchost.exe -k netsvcs Network Provisioning Service xmlprov Non-System Service Val:0 Boot Start Normal LocalSystem RpcSs Manages XML configuration files on a domain basis for automatic network provisioning. 0 Microsoft Corporation Generic Host Process for Win32 Services 5.2.3790.3959 (srv03_sp2_rtm.070216-1710) svchost.exe © Microsoft Corporation. All rights reserved. svchost.exe Microsoft® Windows® Operating System 5.2.3790.3959 English - United States 1033 1200 - 0 - 166 - 0 Kernel Driver Stopped Abiosdsk Abiosdsk Non-System Service Val:0 Boot Start Ignore Primary disk 3 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ACPI.sys Microsoft ACPI Driver ACPI Non-System Service Val:0 Boot Start Normal Boot Bus Extender 1 Unknown 0 0 - 0 Kernel Driver Stopped ACPIEC ACPIEC Non-System Service Val:0 Boot Start Normal Boot Bus Extender 5 Unknown 0 0 - 0 Kernel Driver Stopped adpu160m adpu160m Non-System Service Val:0 Boot Start Normal SCSI miniport 60 Unknown 0 0 - 0 Kernel Driver Stopped adpu320 adpu320 Non-System Service Val:0 Boot Start Normal SCSI miniport 60 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\drivers\aec.sys Microsoft Kernel Acoustic Echo Canceller aec Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\System32\drivers\afd.sys AFD AFD Non-System Service Val:0 Boot Start Normal TDI AFD Networking Support Environment 0 Unknown 0 0 - 0 Kernel Driver Stopped aic78u2 aic78u2 Non-System Service Val:0 Boot Start Normal SCSI miniport 52 Unknown 0 0 - 0 Kernel Driver Stopped aic78xx aic78xx Non-System Service Val:0 Boot Start Normal SCSI miniport 30 Unknown 0 0 - 0 Kernel Driver Stopped AliIde AliIde Non-System Service Val:0 Boot Start Normal System Bus Extender 4 Unknown 0 0 - 0 Kernel Driver Stopped AmdIde AmdIde Non-System Service Val:0 Boot Start Normal System Bus Extender 4 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\AmdK8.sys AMD Processor Driver AmdK8 Non-System Service Val:0 Boot Start Normal Extended Base 7 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\AmdLLD64.sys AMD Low Level Device Driver AmdLLD64 Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Stopped arc arc Non-System Service Val:0 Boot Start Normal SCSI miniport 30 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\arp1394.sys 1394 ARP Client Protocol Arp1394 Non-System Service Val:0 Boot Start Normal NDIS Tcpip 1394 ARP Client Protocol 12 Unknown 0 0 - 0 Kernel Driver Running SysWow64\drivers\AsIO.sys AsIO AsIO Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 File system Driver Running C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys aswFsBlk aswFsBlk Non-System Service Val:0 Boot Start Normal FSFilter Activity Monitor FltMgr avast! mini-filter driver (aswFsBlk) 4 Unknown 0 0 - 0 File system Driver Running aswMonFlt aswMonFlt Non-System Service Val:0 Boot Start Normal FSFilter Anti-Virus FltMgr avast! mini-filter driver (aswMonFlt) 4 Unknown 0 0 - 0 Kernel Driver Running aswRdr aswRdr Non-System Service Val:0 Boot Start Normal PNP_TDI tcpip 0 Unknown 0 0 - 0 Kernel Driver Running avast! Self Protection aswSP Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running avast! Network Shield Support aswTdi Non-System Service Val:0 Boot Start Normal PNP_TDI tcpip 8 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\asyncmac.sys RAS Asynchronous Media Driver AsyncMac Non-System Service Val:0 Boot Start Normal RAS Asynchronous Media Driver 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\atapi.sys Standard IDE/ESDI Hard Disk Controller atapi Non-System Service Val:0 Boot Start Normal SCSI miniport 25 Unknown 0 0 - 0 Kernel Driver Stopped Atdisk Atdisk Non-System Service Val:0 Boot Start Ignore Primary disk 1 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\atmarpc.sys ATM ARP Client Protocol Atmarpc Non-System Service Val:0 Boot Start Normal NDIS Tcpip ATM ARP Client Protocol 13 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\audstub.sys Audio Stub Driver audstub Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running Beep Beep Non-System Service Val:0 Boot Start Normal Base 2 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\CdaC15BA.sys CdaC15BA CdaC15BA Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\CdaD10BA.sys CdaD10BA CdaD10BA Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 File system Driver Running Cdfs Cdfs Non-System Service Val:0 Boot Start Normal File system +SCSI CDROM Class 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\cdrom.sys CD-ROM Driver Cdrom Non-System Service Val:0 Boot Start Normal SCSI CDROM Class +SCSI miniport 2 Unknown 0 0 - 0 Kernel Driver Stopped Changer Changer Non-System Service Val:0 Boot Start Ignore Filter 5 Unknown 0 0 - 0 Kernel Driver Stopped CmdIde CmdIde Non-System Service Val:0 Boot Start Normal System Bus Extender 4 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\crcdisk.sys CRC Disk Filter Driver crcdisk Non-System Service Val:0 Boot Start Normal Pnp Filter 4 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\disk.sys Disk Driver Disk Non-System Service Val:0 Boot Start Normal SCSI Class +SCSI miniport 2 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\drivers\dmboot.sys dmboot dmboot Non-System Service Val:0 Boot Start Normal Filter 11 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\System32\drivers\dmio.sys Logical Disk Manager Driver dmio Non-System Service Val:0 Boot Start Normal System Bus Extender 13 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\System32\drivers\dmload.sys dmload dmload Non-System Service Val:0 Boot Start Normal System Bus Extender 12 Unknown 0 0 - 0 Kernel Driver Stopped dpti2o dpti2o Non-System Service Val:0 Boot Start Normal SCSI miniport 60 Unknown 0 0 - 0 File system Driver Running Fastfat Fastfat Non-System Service Val:0 Boot Start Normal Boot file system 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\fdc.sys Floppy Disk Controller Driver Fdc Non-System Service Val:0 Boot Start Normal System Bus Extender 5 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\fet5a64b.sys VIA Rhine-Family Fast Ethernet Adapter Driver Service FET5A64B Non-System Service Val:0 Boot Start Normal NDIS 15 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\fet5a64.sys VIA Rhine Family Fast Ethernet Adapter Driver Service FETNDISB Non-System Service Val:0 Boot Start Normal NDIS 10 Unknown 0 0 - 0 Kernel Driver Running Fips Fips Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\flpydisk.sys Floppy Disk Driver Flpydisk Non-System Service Val:0 Boot Start Normal Primary disk 2 Unknown 0 0 - 0 File system Driver Running C:\WINDOWS\system32\DRIVERS\fltMgr.sys FltMgr FltMgr Non-System Service Val:0 Boot Start Normal FSFilter Infrastructure File System Filter Manager Driver 4 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ftdisk.sys Volume Manager Driver Ftdisk Non-System Service Val:0 Boot Start Normal System Bus Extender 9 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\gagp30kx.sys Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms gagp30kx Non-System Service Val:0 Boot Start Normal PnP Filter 2 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\msgpc.sys Generic Packet Classifier Gpc Non-System Service Val:0 Boot Start Normal PNP_TDI Generic Packet Classifier 3 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\HDAudBus.sys Microsoft UAA Bus Driver for High Definition Audio HDAudBus Non-System Service Val:0 Boot Start Normal Extended Base 5 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\hidusb.sys Microsoft HID Class Driver hidusb Non-System Service Val:0 Boot Start Ignore extended base 6 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\Drivers\HTTP.sys HTTP HTTP Non-System Service Val:0 Boot Start Normal This service implements the hypertext transfer protocol (HTTP). If this service is disabled, any services that explicitly depend on it will fail to start. 0 Unknown 0 0 - 0 Kernel Driver Stopped i2omgmt i2omgmt Non-System Service Val:0 Boot Start Normal SCSI Class 45 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\i8042prt.sys i8042 Keyboard and PS/2 Mouse Port Driver i8042prt Non-System Service Val:0 Boot Start Normal Keyboard Port 4 Unknown 0 0 - 0 Kernel Driver Stopped iirsp iirsp Non-System Service Val:0 Boot Start Normal SCSI miniport 45 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\imapi.sys CD-Burning Filter Driver imapi Non-System Service Val:0 Boot Start Normal Pnp Filter 6 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\drivers\RTKHDA64.SYS Service for Realtek HD Audio (WDM) IntcAzAudAddService Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Stopped IntelIde IntelIde Non-System Service Val:0 Boot Start Normal System Bus Extender 4 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys IPv6 Windows Firewall Driver Ip6Fw Non-System Service Val:0 Boot Start Normal Provides intrusion prevention service for a home or small office network. 0 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys IP Traffic Filter Driver IpFilterDriver Non-System Service Val:0 Boot Start Normal Tcpip IP Traffic Filter Driver 0 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\ipinip.sys IP in IP Tunnel Driver IpInIp Non-System Service Val:0 Boot Start Normal Tcpip IP in IP Tunnel Driver 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ipnat.sys IP Network Address Translator IpNat Non-System Service Val:0 Boot Start Normal Tcpip IP Network Address Translator 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ipsec.sys IPSEC driver IPSec Non-System Service Val:0 Boot Start Normal PNP_TDI IPSEC driver 5 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\irenum.sys IR Enumerator Service IRENUM Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\isapnp.sys PnP ISA/EISA Bus Driver isapnp Non-System Service Val:0 Boot Start Critical Boot Bus Extender 3 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\kbdclass.sys Keyboard Class Driver Kbdclass Non-System Service Val:0 Boot Start Normal Keyboard Class 1 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\kbdhid.sys Keyboard HID Driver kbdhid Non-System Service Val:0 Boot Start Ignore Keyboard Port 5 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\drivers\kmixer.sys Microsoft Kernel Wave Audio Mixer kmixer Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running KSecDD KSecDD Non-System Service Val:0 Boot Start Normal Base 1 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\drivers\ksthunk.sys Kernel Streaming WOW64 Thunk Service ksthunk Non-System Service Val:0 Boot Start Normal PNP Filter 1 Unknown 0 0 - 0 Kernel Driver Running mnmdd mnmdd Non-System Service Val:0 Boot Start Ignore Video Save 0 Unknown 0 0 - 0 Kernel Driver Stopped Modem Modem Non-System Service Val:0 Boot Start Ignore Extended base 4 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\mouclass.sys Mouse Class Driver Mouclass Non-System Service Val:0 Boot Start Normal Pointer Class 1 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\mouhid.sys Mouse HID Driver mouhid Non-System Service Val:0 Boot Start Ignore Pointer Port 4 Unknown 0 0 - 0 Kernel Driver Running Mount Point Manager MountMgr Non-System Service Val:0 Boot Start Normal System Bus Extender 8 Unknown 0 0 - 0 Kernel Driver Stopped mraid35x mraid35x Non-System Service Val:0 Boot Start Normal SCSI miniport 43 Unknown 0 0 - 0 File system Driver Running C:\WINDOWS\system32\DRIVERS\mrxdav.sys WebDav Client Redirector MRxDAV Non-System Service Val:0 Boot Start Normal WebDav Client Redirector 0 Unknown 0 0 - 0 File system Driver Running C:\WINDOWS\system32\DRIVERS\mrxsmb.sys MRxSmb MRxSmb Non-System Service Val:0 Boot Start Normal Network MRXSMB 5 Unknown 0 0 - 0 File system Driver Running Msfs Msfs Non-System Service Val:0 Boot Start Normal File system 0 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\drivers\MSKSSRV.sys Microsoft Streaming Service Proxy MSKSSRV Non-System Service Val:0 Boot Start Normal Extended Base 10 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\drivers\MSPCLOCK.sys Microsoft Streaming Clock Proxy MSPCLOCK Non-System Service Val:0 Boot Start Normal Extended Base 8 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\drivers\MSPQM.sys Microsoft Streaming Quality Manager Proxy MSPQM Non-System Service Val:0 Boot Start Normal Extended Base 9 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\mssmbios.sys Microsoft System Management BIOS Driver mssmbios Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ASACPI.sys ATK0110 ACPI UTILITY MTsensor Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 File system Driver Running Mup Mup Non-System Service Val:0 Boot Start Normal Network 2 Unknown 0 0 - 0 Kernel Driver Running NDIS System Driver NDIS Non-System Service Val:0 Boot Start Normal NDIS Wrapper 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ndistapi.sys Remote Access NDIS TAPI Driver NdisTapi Non-System Service Val:0 Boot Start Normal Remote Access NDIS TAPI Driver 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ndisuio.sys NDIS Usermode I/O Protocol Ndisuio Non-System Service Val:0 Boot Start Normal NDIS NDIS Usermode I/O Protocol 14 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ndiswan.sys Remote Access NDIS WAN Driver NdisWan Non-System Service Val:0 Boot Start Normal Remote Access NDIS WAN Driver 0 Unknown 0 0 - 0 Kernel Driver Running NDIS Proxy NDProxy Non-System Service Val:0 Boot Start Normal PNP_TDI 0 Unknown 0 0 - 0 File system Driver Running C:\WINDOWS\system32\DRIVERS\netbios.sys NetBIOS Interface NetBIOS Non-System Service Val:0 Boot Start Normal NetBIOSGroup NetBIOS Interface 1 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\netbt.sys NetBios over Tcpip NetBT Non-System Service Val:0 Boot Start Normal PNP_TDI Tcpip NetBios over Tcpip 6 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\nic1394.sys 1394 Net Driver NIC1394 Non-System Service Val:0 Boot Start Normal NDIS 11 Unknown 0 0 - 0 File system Driver Running Npfs Npfs Non-System Service Val:0 Boot Start Normal File system 0 Unknown 0 0 - 0 File system Driver Running Ntfs Ntfs Non-System Service Val:0 Boot Start Normal File system 0 Unknown 0 0 - 0 Kernel Driver Running Null Null Non-System Service Val:0 Boot Start Normal Base 1 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\nv4_mini.sys nv nv Non-System Service Val:0 Boot Start Ignore Video 2 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ohci1394.sys AGERE OHCI Compliant IEEE 1394 Host Controller ohci1394 Non-System Service Val:0 Boot Start Normal Boot Bus Extender 6 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\parport.sys Parallel port driver Parport Non-System Service Val:0 Boot Start Normal Parallel arbitrator 1 Unknown 0 0 - 0 Kernel Driver Running Partition Manager PartMgr Non-System Service Val:0 Boot Start Normal System Bus Extender 6 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\pci.sys PCI Bus Driver PCI Non-System Service Val:0 Boot Start Critical Boot Bus Extender 2 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\pciide.sys PCIIde PCIIde Non-System Service Val:0 Boot Start Normal System Bus Extender 3 Unknown 0 0 - 0 Kernel Driver Stopped Pcmcia Pcmcia Non-System Service Val:0 Boot Start Normal System Bus Extender 1 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\Drivers\pcouffin.sys VSO Software pcouffin pcouffin Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Stopped PDCOMP PDCOMP Non-System Service Val:0 Boot Start Ignore 0 Unknown 0 0 - 0 Kernel Driver Stopped PDFRAME PDFRAME Non-System Service Val:0 Boot Start Ignore 0 Unknown 0 0 - 0 Kernel Driver Stopped PDRELI PDRELI Non-System Service Val:0 Boot Start Ignore 0 Unknown 0 0 - 0 Kernel Driver Stopped PDRFRAME PDRFRAME Non-System Service Val:0 Boot Start Ignore 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\raspptp.sys WAN Miniport (PPTP) PptpMiniport Non-System Service Val:0 Boot Start Normal WAN Miniport (PPTP) 0 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\processr.sys Processor Driver Processor Non-System Service Val:0 Boot Start Normal Extended Base 3 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\psched.sys QoS Packet Scheduler PSched Non-System Service Val:0 Boot Start Normal PNP_TDI Gpc QoS Packet Scheduler 7 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ptilink.sys Direct Parallel Link Driver Ptilink Non-System Service Val:0 Boot Start Normal Direct Parallel Link Driver 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\rasacd.sys Remote Access Auto Connection Driver RasAcd Non-System Service Val:0 Boot Start Normal Streams Drivers Remote Access Auto Connection Driver 1 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\rasl2tp.sys WAN Miniport (L2TP) Rasl2tp Non-System Service Val:0 Boot Start Normal WAN Miniport (L2TP) 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\raspppoe.sys Remote Access PPPOE Driver RasPppoe Non-System Service Val:0 Boot Start Normal Remote Access PPPOE Driver 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\raspti.sys Direct Parallel Raspti Non-System Service Val:0 Boot Start Normal Direct Parallel 0 Unknown 0 0 - 0 File system Driver Running C:\WINDOWS\system32\DRIVERS\rdbss.sys Rdbss Rdbss Non-System Service Val:0 Boot Start Normal Network Rdbss 4 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\RDPCDD.sys RDPCDD RDPCDD Non-System Service Val:0 Boot Start Ignore Video Save 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\rdpdr.sys Terminal Server Device Redirector Driver rdpdr Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Stopped RDPWD RDPWD Non-System Service Val:0 Boot Start Ignore 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\redbook.sys Digital CD Audio Playback Filter Driver redbook Non-System Service Val:0 Boot Start Normal Pnp Filter 5 Unknown 0 0 - 0 Kernel Driver Stopped C:\MY PROGRAMS\Security Programs\SUPERAntiSpyware\SASDIFSV.SYS SASDIFSV SASDIFSV Non-System Service Val:0 Boot Start Normal 0 SUPERAdBlocker.com and SUPERAntiSpyware.com SASDIFSV.SYS 1, 0, 0, 1010 SASDIFSV.SYS © Copyright 2006-2008 by SUPERAdBlocker.com and SUPERAntiSpyware.com SASDIFSV.SYS SUPERAntiSpyware 1, 0, 0, 1010 00011079 Native 4.00 English - United States 1033 1200 - 0 Kernel Driver Stopped C:\MY PROGRAMS\Security Programs\SUPERAntiSpyware\SASENUM.SYS SASENUM SASENUM Non-System Service Val:0 Boot Start Normal 0 SuperAdBlocker, Inc. SuperAntiSpyware 1, 0, 0, 1002 SASENUM.SYS © Copyright 2004-2006 SASENUM.SYS SuperAntiSpyware 1, 0, 0, 1002 SuperAntiSpyware 00005450 Native 4.00 English - United States 1033 1200 - 0 Kernel Driver Stopped C:\MY PROGRAMS\Security Programs\SUPERAntiSpyware\SASKUTIL.sys SASKUTIL SASKUTIL Non-System Service Val:0 Boot Start Normal 0 SUPERAdBlocker.com and SUPERAntiSpyware.com SASKUTIL.SYS 1, 0, 0, 1062 SASKUTIL.SYS © Copyright 2006-2008 by SUPERAdBlocker.com and SUPERAntiSpyware.com SASKUTIL.SYS SUPERAntiSpyware 1, 0, 0, 1062 00011C05 Native 4.00 English - United States 1033 1200 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\sbp2port.sys SBP-2 Transport/Protocol Bus Driver sbp2port Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\secdrv.sys Security Driver Secdrv Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\serenum.sys Serenum Filter Driver serenum Non-System Service Val:0 Boot Start Normal PNP Filter 3 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\serial.sys Serial port driver Serial Non-System Service Val:0 Boot Start Ignore Extended base 1 Unknown 0 0 - 0 Kernel Driver Stopped Sfloppy Sfloppy Non-System Service Val:0 Boot Start Ignore Primary disk +SCSI miniport 4 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\Si3124r5.sys SiI-3124 SoftRaid 5 Controller Si3124r5 Non-System Service Val:0 Boot Start Normal Scsi miniport 33 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys SATALink driver accelerator SiFilter Non-System Service Val:0 Boot Start Ignore Filter 7 Unknown 0 0 - 0 Kernel Driver Stopped Simbad Simbad Non-System Service Val:0 Boot Start Normal Filter 1 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\drivers\splitter.sys Microsoft Kernel Audio Splitter splitter Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\System32\Drivers\sptd.sys sptd sptd Non-System Service Val:0 Boot Start Normal Boot Bus Extender 7 Unknown 0 0 - 0 File system Driver Running C:\WINDOWS\system32\DRIVERS\sr.sys System Restore Filter Driver sr Non-System Service Val:0 Boot Start Normal FSFilter System Recovery 4 Unknown 0 0 - 0 File system Driver Running C:\WINDOWS\system32\DRIVERS\srv.sys Srv Srv Non-System Service Val:0 Boot Start Normal Network Srv 6 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\swenum.sys Software Bus Driver swenum Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\drivers\swmidi.sys Microsoft Kernel GS Wavetable Synthesizer swmidi Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Stopped symc8xx symc8xx Non-System Service Val:0 Boot Start Normal SCSI miniport 54 Unknown 0 0 - 0 Kernel Driver Stopped symmpi symmpi Non-System Service Val:0 Boot Start Normal SCSI miniport 0 Unknown 0 0 - 0 Kernel Driver Stopped sym_hi sym_hi Non-System Service Val:0 Boot Start Normal SCSI miniport 55 Unknown 0 0 - 0 Kernel Driver Stopped sym_u3 sym_u3 Non-System Service Val:0 Boot Start Normal SCSI miniport 55 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\drivers\sysaudio.sys Microsoft Kernel System Audio Device sysaudio Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\tcpip.sys TCP/IP Protocol Driver Tcpip Non-System Service Val:0 Boot Start Normal PNP_TDI IPSec TCP/IP Protocol Driver 4 Unknown 0 0 - 0 Kernel Driver Stopped TDPIPE TDPIPE Non-System Service Val:0 Boot Start Ignore 0 Unknown 0 0 - 0 Kernel Driver Stopped TDTCP TDTCP Non-System Service Val:0 Boot Start Ignore 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\termdd.sys Terminal Device Driver TermDD Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Stopped TosIde TosIde Non-System Service Val:0 Boot Start Normal System Bus Extender 4 Unknown 0 0 - 0 File system Driver Stopped Udfs Udfs Non-System Service Val:0 Boot Start Normal File system 0 Unknown 0 0 - 0 Kernel Driver Stopped ultra ultra Non-System Service Val:0 Boot Start Normal SCSI miniport 59 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\update.sys Microcode Update Driver Update Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\usbccgp.sys Microsoft USB Generic Parent Driver usbccgp Non-System Service Val:0 Boot Start Normal Base 18 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\usbehci.sys Microsoft USB 2.0 Enhanced Host Controller Miniport Driver usbehci Non-System Service Val:0 Boot Start Normal Base 15 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\usbhub.sys Microsoft USB Standard Hub Driver usbhub Non-System Service Val:0 Boot Start Normal Base 17 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS USB Mass Storage Driver USBSTOR Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\usbuhci.sys Microsoft USB Universal Host Controller Miniport Driver usbuhci Non-System Service Val:0 Boot Start Normal Base 16 Unknown 0 0 - 0 Kernel Driver Stopped C:\WINDOWS\system32\DRIVERS\vgapnp.sys vga vga Non-System Service Val:0 Boot Start Ignore Video 1 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\System32\drivers\vga.sys VGA Display Controller. VgaSave Non-System Service Val:0 Boot Start Ignore Video Save Controls the VGA display adapter to provide basic display capabilities. 1 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\viaide.sys ViaIde ViaIde Non-System Service Val:0 Boot Start Normal System Bus Extender 4 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ViBusX64.sys ViBusX64 ViBusX64 Non-System Service Val:0 Boot Start Normal System Bus Extender 15 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\videX64.sys videX64 videX64 Non-System Service Val:0 Boot Start Normal System Bus Extender 7 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\ViPrtX64.sys VIA SATA IDE Device Driver ViPrtX64 Non-System Service Val:0 Boot Start Normal SCSI Miniport 34 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\volsnap.sys Storage volumes VolSnap Non-System Service Val:0 Boot Start Normal System Bus Extender 2 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\DRIVERS\wanarp.sys Remote Access IP ARP Driver Wanarp Non-System Service Val:0 Boot Start Normal Remote Access IP ARP Driver 0 Unknown 0 0 - 0 Kernel Driver Stopped WDICA WDICA Non-System Service Val:0 Boot Start Ignore 0 Unknown 0 0 - 0 Kernel Driver Running C:\WINDOWS\system32\drivers\wdmaud.sys Microsoft WINMM WDM Audio Compatibility Driver wdmaud Non-System Service Val:0 Boot Start Normal 0 Unknown 0 0 - 0 - 39 - LISTENING 0.0.0.0 denise 135 rpc 0 0 772 TCP 9:03:31 PM - LISTENING 0.0.0.0 denise 445 smb 0 0 4 TCP 9:03:31 PM - LISTENING 0.0.0.0 denise 1025 1025 0 0 492 TCP 9:03:31 PM - LISTENING 127.0.0.1 denise 1030 1030 0 0 1248 TCP 9:03:31 PM - LISTENING 127.0.0.1 denise 12025 12025 0 0 2792 TCP 9:03:31 PM - LISTENING 127.0.0.1 denise 12080 12080 0 0 2856 TCP 9:03:31 PM - TIME_WAIT 127.0.0.1 denise 12080 12080 127.0.0.1 denise 1952 1952 0 TCP 9:03:31 PM - TIME_WAIT 127.0.0.1 denise 12080 12080 127.0.0.1 denise 1954 1954 0 TCP 9:03:31 PM - TIME_WAIT 127.0.0.1 denise 12080 12080 127.0.0.1 denise 1959 1959 0 TCP 9:03:31 PM - TIME_WAIT 127.0.0.1 denise 12080 12080 127.0.0.1 denise 1962 1962 0 TCP 9:03:31 PM - TIME_WAIT 127.0.0.1 denise 12080 12080 127.0.0.1 denise 1965 1965 0 TCP 9:03:31 PM - TIME_WAIT 127.0.0.1 denise 12080 12080 127.0.0.1 denise 1985 1985 0 TCP 9:03:31 PM - TIME_WAIT 127.0.0.1 denise 12080 12080 127.0.0.1 denise 1997 1997 0 TCP 9:03:31 PM - LISTENING 127.0.0.1 denise 12110 12110 0 0 2792 TCP 9:03:31 PM - LISTENING 127.0.0.1 denise 12119 12119 0 0 2792 TCP 9:03:31 PM - LISTENING 127.0.0.1 denise 12143 12143 0 0 2792 TCP 9:03:31 PM - LISTENING 192.168.0.3 denise.chn.comcast.net 139 netbios-ssn 0 0 4 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1976 1976 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1978 1978 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1979 1979 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1981 1981 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1982 1982 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1983 1983 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1984 1984 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1987 1987 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1988 1988 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1990 1990 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1992 1992 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1994 1994 67.228.244.251 geek15.geekstogo.com 80 http 0 TCP 9:03:31 PM - TIME_WAIT 192.168.0.3 denise.chn.comcast.net 1996 1996 72.14.247.127 ag-in-f127.google.com 80 http 0 TCP 9:03:31 PM - UDP 0.0.0.0 denise 445 smb 0 4 UDP 9:03:31 PM - UDP 0.0.0.0 denise 500 Isakmp 0 492 UDP 9:03:31 PM - UDP 0.0.0.0 denise 4500 4500 0 492 UDP 9:03:31 PM - UDP 127.0.0.1 denise 123 ntp 0 960 UDP 9:03:31 PM - UDP 127.0.0.1 denise 1900 1900 0 960 UDP 9:03:31 PM - UDP 192.168.0.3 denise.chn.comcast.net 123 ntp 0 960 UDP 9:03:31 PM - UDP 192.168.0.3 denise.chn.comcast.net 137 netbios-ns 0 4 UDP 9:03:31 PM - UDP 192.168.0.3 denise.chn.comcast.net 138 netbios-dgm 0 4 UDP 9:03:31 PM - UDP 192.168.0.3 denise.chn.comcast.net 1900 1900 0 960 UDP 9:03:31 PM - 6 - Registry ctfmon.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\ ctfmon.exe Current TRUE FALSE FALSE - Registry BandwidthMeterPro C:\MY PROGRAMS\Computer Programs\Bandwidth Meter Pro\BWMeterPro.exe C:\MY PROGRAMS\Computer Programs\Bandwidth Meter Pro\ BWMeterPro.exe Current TRUE FALSE FALSE - Registry avast! "C:\MY PROGRAMS\Security Programs\Avast\ashDisp.exe" C:\MY PROGRAMS\Security Programs\Avast\ ashDisp.exe All TRUE FALSE FALSE - Registry amd_dc_opt C:\Program Files (x86)\AMD Dual-Core Optimizer\amd_dc_opt.exe C:\Program Files (x86)\AMD Dual-Core Optimizer\ amd_dc_opt.exe All TRUE FALSE FALSE - Registry GrooveMonitor "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" C:\Program Files (x86)\Microsoft Office\Office12\ GrooveMonitor.exe All FALSE FALSE FALSE - Startup folder Webshots.lnk C:\MY PROGRAMS\Computer Programs\Webshots\Launcher.exe C:\MY PROGRAMS\Computer Programs\Webshots\ Launcher.exe All TRUE FALSE FALSE - Administrator DENISE DENISE Denise Windows XP x64 Professional SP2 3790 2 AMD Athlon™ 64 X2 Dual Core Processor 4200+ AMD AuthenticAMD 2195 Family 15 Model 3 Stepping 2 2096260 KB RAM 4062088 KB RAM C:\WINDOWS C:\WINDOWS\system32 AT/AT COMPATIBLE United States English Eastern Standard Time (UTC - 5h)