[Services] Display Name Name State Start Mode Service Type Path Error Control Start Name Tag ID Adobe Acrobat Update Service AdobeARMservice Running Auto Own Process "c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe" Ignore LocalSystem 0 Application Experience AeLookupSvc Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Application Layer Gateway Service ALG Stopped Manual Own Process c:\windows\system32\alg.exe Normal NT AUTHORITY\LocalService 0 AMD External Events Utility AMD External Events Utility Running Auto Own Process c:\windows\system32\atiesrxx.exe Normal LocalSystem 0 Application Identity AppIDSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT Authority\LocalService 0 Application Information Appinfo Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Application Management AppMgmt Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 App Readiness AppReadiness Stopped Manual Share Process c:\windows\system32\svchost.exe -k appreadiness Normal LocalSystem 0 AppX Deployment Service (AppXSVC) AppXSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k wsappx Normal LocalSystem 0 Windows Audio Endpoint Builder AudioEndpointBuilder Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Windows Audio Audiosrv Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalService 0 ActiveX Installer (AxInstSV) AxInstSV Stopped Manual Share Process c:\windows\system32\svchost.exe -k axinstsvgroup Normal LocalSystem 0 BitLocker Drive Encryption Service BDESVC Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Base Filtering Engine BFE Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenonetwork Normal NT AUTHORITY\LocalService 0 Background Intelligent Transfer Service BITS Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Background Tasks Infrastructure Service BrokerInfrastructure Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch Normal LocalSystem 0 Computer Browser Browser Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Bluetooth Handsfree Service BthHFSrv Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Bluetooth Support Service bthserv Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Certificate Propagation CertPropSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Microsoft Office Click-to-Run Service ClickToRunSvc Running Auto Own Process "c:\program files\common files\microsoft shared\clicktorun\officeclicktorun.exe" /service Normal LocalSystem 0 COM+ System Application COMSysApp Stopped Manual Own Process c:\windows\system32\dllhost.exe /processid:{02d4b3f1-fd88-11d1-960d-00805fc79235} Normal LocalSystem 0 Intel(R) Content Protection HECI Service cphs Stopped Manual Own Process c:\windows\syswow64\intelcphecisvc.exe Normal LocalSystem 0 Cryptographic Services CryptSvc Running Auto Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT Authority\NetworkService 0 Offline Files CscService Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 DCOM Server Process Launcher DcomLaunch Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch Normal LocalSystem 0 Optimize drives defragsvc Stopped Manual Own Process c:\windows\system32\svchost.exe -k defragsvc Normal localSystem 0 Device Association Service DeviceAssociationService Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Device Install Service DeviceInstall Stopped Manual Share Process c:\windows\system32\svchost.exe -k dcomlaunch Normal LocalSystem 0 DHCP Client Dhcp Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT Authority\LocalService 0 Diagnostics Tracking Service DiagTrack Running Auto Own Process c:\windows\system32\svchost.exe -k utcsvc Normal LocalSystem 0 DisplayLinkManager DisplayLinkService Running Auto Own Process "c:\program files\displaylink core software\displaylinkmanager.exe" Normal LocalSystem 0 DNS Client Dnscache Running Auto Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 Wired AutoConfig dot3svc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal localSystem 0 Diagnostic Policy Service DPS Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenonetwork Normal NT AUTHORITY\LocalService 0 Device Setup Manager DsmSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Extensible Authentication Protocol Eaphost Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Encrypting File System (EFS) EFS Running Auto Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Energy Server Service WILLAMETTE ESRV_SVC_WILLAMETTE Stopped Manual Own Process "c:\program files\intel\sur\willamette\esrv\esrv_svc.exe" "--auto_start" "--start" "--address" "127.0.0.1" "--port" "49330" "--depend_on_key" "system\currentcontrolset\services\esrv_svc_willamette" "--depend_on_value" "run" "--time_in_ms" "--pause" "5000" "--library" "c:\program files\intel\sur\willamette\esrv\intel_modeler.dll" "--no_pl" "--watchdog" "10" "--watchdog_cpu_usage_limit" "50" "--end_on_error" "--kernel_priority_boost" "--shutdown_priority_boost" "--device_options" " time=no output=w output_folder='c:\programdata\intel\sur\willamette\inteldata' limit_output_by=time output_limit=3600000 output_buffer=1024 il='c:\program files\intel\sur\willamette\esrv\intel_process_input.dll','process_input_options.txt' il='c:\program files\intel\sur\willamette\esrv\intel_system_power_state_input.dll' il='c:\program files\intel\sur\willamette\esrv\intel_quality_and_reliability_input.dll' il='c:\program files\intel\sur\willamette\esrv\acpi_battery_input.dll' il='c:\program files\intel\sur\willamette\esrv\sema_thermal_input.dll' il='c:\program files\intel\sur\willamette\esrv\wifi_input.dll' il='c:\program files\intel\sur\willamette\esrv\devices_use_input.dll','service=yes' il='c:\program files\intel\sur\willamette\esrv\intel_disktrace_input.dll','pause=60000 working_dir=c:\programdata\intel\sur\willamette\inteldata override_existing_tracing=no limit_output_by_filesize_mb=10' os='c:\program files\intel\sur\willamette\esrv\os_counters.txt' " Normal LocalSystem 0 Windows Event Log EventLog Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalService 0 COM+ Event System EventSystem Running Auto Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Intel(R) PROSet/Wireless Event Log EvtEng Running Auto Own Process "c:\program files\intel\wifi\bin\evteng.exe" Normal LocalSystem 0 Fax Fax Stopped Manual Own Process c:\windows\system32\fxssvc.exe Normal NT AUTHORITY\NetworkService 0 Function Discovery Provider Host fdPHost Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Function Discovery Resource Publication FDResPub Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 File History Service fhsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Windows Font Cache Service FontCache Running Auto Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Windows Presentation Foundation Font Cache 3.0.0.0 FontCache3.0.0.0 Running Manual Own Process c:\windows\microsoft.net\framework64\v3.0\wpf\presentationfontcache.exe Normal NT Authority\LocalService 0 Group Policy Client gpsvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Google Update Service (gupdate) gupdate Stopped Auto Own Process "c:\program files (x86)\google\update\googleupdate.exe" /svc Normal LocalSystem 0 Google Update Service (gupdatem) gupdatem Stopped Manual Own Process "c:\program files (x86)\google\update\googleupdate.exe" /medsvc Normal LocalSystem 0 Human Interface Device Service hidserv Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Health Key and Certificate Management hkmsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 HomeGroup Provider HomeGroupProvider Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalService 0 Intel(R) Rapid Storage Technology IAStorDataMgrSvc Running Auto Own Process "c:\program files\intel\intel(r) rapid storage technology\iastordatamgrsvc.exe" Ignore LocalSystem 0 Internet Explorer ETW Collector Service IEEtwCollectorService Stopped Manual Own Process c:\windows\system32\ieetwcollector.exe /v Normal LocalSystem 0 Intel(R) HD Graphics Control Panel Service igfxCUIService1.0.0.0 Running Auto Own Process c:\windows\system32\igfxcuiservice.exe Normal LocalSystem 0 IKE and AuthIP IPsec Keying Modules IKEEXT Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Intel(R) Capability Licensing Service Interface Intel(R) Capability Licensing Service Interface Running Auto Own Process "c:\program files\intel\icls client\heciserver.exe" Normal LocalSystem 0 Intel(R) Capability Licensing Service TCP IP Interface Intel(R) Capability Licensing Service TCP IP Interface Stopped Manual Own Process "c:\program files\intel\icls client\socketheciserver.exe" Ignore LocalSystem 0 IP Helper iphlpsvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Intel(R) Dynamic Application Loader Host Interface Service jhi_service Running Auto Own Process "c:\program files (x86)\intel\intel(r) management engine components\dal\jhi_service.exe" Normal LocalSystem 0 CNG Key Isolation KeyIso Stopped Manual Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 KtmRm for Distributed Transaction Coordinator KtmRm Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkserviceandnoimpersonation Normal NT AUTHORITY\NetworkService 0 Server LanmanServer Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Workstation LanmanWorkstation Running Auto Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 Windows Location Framework Service lfsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Link-Layer Topology Discovery Mapper lltdsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 TCP/IP NetBIOS Helper lmhosts Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalService 0 Intel(R) Management and Security Application Local Management Service LMS Start Pending Auto Own Process "c:\program files (x86)\intel\intel(r) management engine components\lms\lms.exe" Normal LocalSystem 0 LSM LSM Running Boot Kernel Driver Not Available Unknown Not Available Not Available Multimedia Class Scheduler MMCSS Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Motorola Device Manager Service Motorola Device Manager Running Auto Own Process c:\program files (x86)\motorola mobility\motorola device manager\motohelperservice.exe Normal LocalSystem 0 Windows Firewall MpsSvc Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenonetwork Normal NT Authority\LocalService 0 Distributed Transaction Coordinator MSDTC Stopped Manual Own Process c:\windows\system32\msdtc.exe Normal NT AUTHORITY\NetworkService 0 Microsoft iSCSI Initiator Service MSiSCSI Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Windows Installer msiserver Stopped Manual Own Process c:\windows\system32\msiexec.exe /v Normal LocalSystem 0 Microsoft Keyboard Filter MsKeyboardFilter Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Microsoft Online Services Sign-in Assistant msoidsvc Running Auto Own Process "c:\program files\common files\microsoft shared\microsoft online services\msoidsvc.exe" Normal LocalSystem 0 Wireless PAN DHCP Server MyWiFiDHCPDNS Stopped Manual Own Process "c:\program files\intel\wifi\bin\pandhcpdns.exe" Ignore LocalSystem 0 Network Access Protection Agent napagent Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 Network Connectivity Assistant NcaSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Network Connection Broker NcbService Running Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Network Connected Devices Auto-Setup NcdAutoSetup Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenonetwork Normal NT AUTHORITY\LocalService 0 Net Driver HPZ12 Net Driver HPZ12 Running Auto Own Process c:\windows\system32\svchost.exe -k hpz12 Normal NT AUTHORITY\LocalService 0 Netlogon Netlogon Stopped Manual Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Network Connections Netman Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Network List Service netprofm Running Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Net.Tcp Port Sharing Service NetTcpPortSharing Stopped Disabled Share Process c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe Normal NT AUTHORITY\LocalService 0 Network Location Awareness NlaSvc Running Auto Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 nProtect GameGuard Service npggsvc Stopped Manual Own Process c:\windows\system32\gamemon.des -service Normal LocalSystem 0 Network Store Interface Service nsi Running Auto Share Process c:\windows\system32\svchost.exe -k localservice Normal NT Authority\LocalService 0 Office 64 Source Engine ose64 Stopped Manual Own Process "c:\program files\common files\microsoft shared\source engine\ose.exe" Normal LocalSystem 0 Peer Networking Identity Manager p2pimsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalService 0 Peer Networking Grouping p2psvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalService 0 Program Compatibility Assistant Service PcaSvc Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 BranchCache PeerDistSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k peerdist Normal NT AUTHORITY\NetworkService 0 Performance Counter DLL Host PerfHost Stopped Manual Own Process c:\windows\syswow64\perfhost.exe Normal NT AUTHORITY\LocalService 0 Performance Logs & Alerts pla Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenonetwork Normal NT AUTHORITY\LocalService 0 Plug and Play PlugPlay Running Manual Share Process c:\windows\system32\svchost.exe -k dcomlaunch Normal LocalSystem 0 Pml Driver HPZ12 Pml Driver HPZ12 Running Auto Own Process c:\windows\system32\svchost.exe -k hpz12 Normal NT AUTHORITY\LocalService 0 PNRP Machine Name Publication Service PNRPAutoReg Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalService 0 Peer Name Resolution Protocol PNRPsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalService 0 IPsec Policy Agent PolicyAgent Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkservicenetworkrestricted Normal NT Authority\NetworkService 0 Power Power Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch Normal LocalSystem 0 Printer Extensions and Notifications PrintNotify Stopped Manual Share Process c:\windows\system32\svchost.exe -k print Normal LocalSystem 0 User Profile Service ProfSvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 PST Service PST Service Running Auto Own Process c:\program files (x86)\motorola\motforwarddaemon\forwarddaemon.exe Normal LocalSystem 0 Quality Windows Audio Video Experience QWAVE Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Remote Access Auto Connection Manager RasAuto Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Remote Access Connection Manager RasMan Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Intel(R) PROSet/Wireless Registry Service RegSrvc Running Auto Own Process "c:\program files\common files\intel\wirelesscommon\regsrvc.exe" Normal LocalSystem 0 Routing and Remote Access RemoteAccess Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Remote Registry RemoteRegistry Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 RPC Endpoint Mapper RpcEptMapper Running Auto Share Process c:\windows\system32\svchost.exe -k rpcss Normal NT AUTHORITY\NetworkService 0 Remote Procedure Call (RPC) Locator RpcLocator Stopped Manual Own Process c:\windows\system32\locator.exe Normal NT AUTHORITY\NetworkService 0 Remote Procedure Call (RPC) RpcSs Running Auto Share Process c:\windows\system32\svchost.exe -k rpcss Normal NT AUTHORITY\NetworkService 0 Security Accounts Manager SamSs Running Auto Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Smart Card SCardSvr Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Smart Card Device Enumeration Service ScDeviceEnum Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Task Scheduler Schedule Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Smart Card Removal Policy SCPolicySvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Secondary Logon seclogon Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 System Event Notification Service SENS Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Sensor Monitoring Service SensrSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Remote Desktop Configuration SessionEnv Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Internet Connection Sharing (ICS) SharedAccess Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Shell Hardware Detection ShellHWDetection Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Ignore LocalSystem 0 Skype Updater SkypeUpdate Stopped Auto Own Process "c:\program files (x86)\skype\updater\updater.exe" Ignore LocalSystem 0 Microsoft Storage Spaces SMP smphost Stopped Manual Own Process c:\windows\system32\svchost.exe -k smphost Normal NT AUTHORITY\NetworkService 0 SNMP Trap SNMPTRAP Stopped Manual Own Process c:\windows\system32\snmptrap.exe Normal NT AUTHORITY\LocalService 0 Print Spooler Spooler Running Auto Own Process c:\windows\system32\spoolsv.exe Normal LocalSystem 0 Software Protection sppsvc Stopped Auto Own Process c:\windows\system32\sppsvc.exe Normal NT AUTHORITY\NetworkService 0 SSDP Discovery SSDPSRV Running Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Secure Socket Tunneling Protocol Service SstpSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT Authority\LocalService 0 Steam Client Service Steam Client Service Stopped Manual Own Process "c:\program files (x86)\common files\steam\steamservice.exe" /runasservice Normal LocalSystem 0 Windows Image Acquisition (WIA) stisvc Running Auto Own Process c:\windows\system32\svchost.exe -k imgsvc Normal NT Authority\LocalService 0 Storage Service StorSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Spot Verifier svsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Microsoft Software Shadow Copy Provider swprv Running Manual Own Process c:\windows\system32\svchost.exe -k swprv Normal LocalSystem 0 Superfetch SysMain Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Ignore LocalSystem 0 System Events Broker SystemEventsBroker Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch Normal LocalSystem 0 Intel(R) System Usage Report Service SystemUsageReportSvc_WILLAMETTE SystemUsageReportSvc_WILLAMETTE Running Auto Own Process "c:\program files (x86)\intel driver update utility\sur\sursvc.exe" Normal LocalSystem 0 Touch Keyboard and Handwriting Panel Service TabletInputService Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Telephony TapiSrv Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 Remote Desktop Services TermService Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT Authority\NetworkService 0 Themes Themes Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Thread Ordering Server THREADORDER Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Time Broker TimeBroker Running Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Distributed Link Tracking Client TrkWks Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Windows Modules Installer TrustedInstaller Stopped Manual Own Process c:\windows\servicing\trustedinstaller.exe Normal localSystem 0 Interactive Services Detection UI0Detect Stopped Manual Own Process c:\windows\system32\ui0detect.exe Normal LocalSystem 0 Remote Desktop Services UserMode Port Redirector UmRdpService Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal localSystem 0 UPnP Device Host upnphost Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 User Energy Server Service WILLAMETTE USER_ESRV_SVC_WILLAMETTE Stopped Manual Own Process "c:\program files\intel\sur\willamette\esrv\esrv_svc.exe" "--run_as_user_process" Normal LocalSystem 0 Credential Manager VaultSvc Stopped Manual Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Virtual Disk vds Stopped Manual Own Process c:\windows\system32\vds.exe Normal LocalSystem 0 Hyper-V Guest Service Interface vmicguestinterface Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Hyper-V Heartbeat Service vmicheartbeat Stopped Manual Share Process c:\windows\system32\svchost.exe -k icservice Normal LocalSystem 0 Hyper-V Data Exchange Service vmickvpexchange Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Hyper-V Remote Desktop Virtualization Service vmicrdv Stopped Manual Share Process c:\windows\system32\svchost.exe -k icservice Normal LocalSystem 0 Hyper-V Guest Shutdown Service vmicshutdown Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Hyper-V Time Synchronization Service vmictimesync Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalService 0 Hyper-V Volume Shadow Copy Requestor vmicvss Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Volume Shadow Copy VSS Running Manual Own Process c:\windows\system32\vssvc.exe Normal LocalSystem 0 Windows Time W32Time Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Block Level Backup Engine Service wbengine Running Manual Own Process "c:\windows\system32\wbengine.exe" Normal localSystem 0 Windows Biometric Service WbioSrvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k wbiosvcgroup Normal LocalSystem 0 Windows Connection Manager Wcmsvc Running Auto Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT Authority\LocalService 0 Windows Connect Now - Config Registrar wcncsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Windows Color System WcsPlugInService Stopped Manual Share Process c:\windows\system32\svchost.exe -k wcssvc Normal NT AUTHORITY\LocalService 0 Diagnostic Service Host WdiServiceHost Running Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Diagnostic System Host WdiSystemHost Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Windows Defender Network Inspection Service WdNisSvc Running Manual Own Process "c:\program files\windows defender\nissrv.exe" Normal NT AUTHORITY\LocalService 0 WebClient WebClient Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Windows Event Collector Wecsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 Windows Encryption Provider Host Service WEPHOSTSVC Stopped Manual Share Process c:\windows\system32\svchost.exe -k wephostsvcgroup Normal NT AUTHORITY\LocalService 0 Problem Reports and Solutions Control Panel Support wercplsupport Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Windows Error Reporting Service WerSvc Stopped Manual Own Process c:\windows\system32\svchost.exe -k wersvcgroup Ignore localSystem 0 Still Image Acquisition Events WiaRpc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Windows Defender Service WinDefend Running Auto Own Process "c:\program files\windows defender\msmpeng.exe" Normal LocalSystem 0 WinHTTP Web Proxy Auto-Discovery Service WinHttpAutoProxySvc Running Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Windows Management Instrumentation Winmgmt Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Ignore localSystem 0 Windows Remote Management (WS-Management) WinRM Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 WLAN AutoConfig WlanSvc Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Microsoft Account Sign-in Assistant wlidsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 WMI Performance Adapter wmiApSrv Stopped Manual Own Process c:\windows\system32\wbem\wmiapsrv.exe Normal localSystem 0 Windows Media Player Network Sharing Service WMPNetworkSvc Stopped Manual Own Process "c:\program files\windows media player\wmpnetwk.exe" Normal NT AUTHORITY\NetworkService 0 Work Folders workfolderssvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Family Safety WPCSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT Authority\LocalService 0 Portable Device Enumerator Service WPDBusEnum Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Security Center wscsvc Stopped Auto Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalService 0 Windows Search WSearch Start Pending Auto Own Process c:\windows\system32\searchindexer.exe /embedding Normal LocalSystem 0 Windows Store Service (WSService) WSService Stopped Manual Share Process c:\windows\system32\svchost.exe -k wsappx Normal LocalSystem 0 Windows Update wuauserv Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Windows Driver Foundation - User-mode Driver Framework wudfsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 WWAN AutoConfig WwanSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenonetwork Normal NT Authority\LocalService 0 Intel(R) PROSet/Wireless Zero Configuration Service ZeroConfigService Running Auto Own Process "c:\program files\intel\wifi\bin\zeroconfigservice.exe" Normal LocalSystem 0 [Program Groups] Group Name Name User Name Start Menu Default:Start Menu Default Start Menu\Programs Default:Start Menu\Programs Default Start Menu\Programs\Accessibility Default:Start Menu\Programs\Accessibility Default Start Menu\Programs\Accessories Default:Start Menu\Programs\Accessories Default Start Menu\Programs\Maintenance Default:Start Menu\Programs\Maintenance Default Start Menu\Programs\System Tools Default:Start Menu\Programs\System Tools Default Start Menu Public:Start Menu Public Start Menu\Programs Public:Start Menu\Programs Public Start Menu\Programs\Accessibility Public:Start Menu\Programs\Accessibility Public Start Menu\Programs\Accessories Public:Start Menu\Programs\Accessories Public Start Menu\Programs\Accessories\System Tools Public:Start Menu\Programs\Accessories\System Tools Public Start Menu\Programs\Accessories\Tablet PC Public:Start Menu\Programs\Accessories\Tablet PC Public Start Menu\Programs\Administrative Tools Public:Start Menu\Programs\Administrative Tools Public Start Menu\Programs\AMD Catalyst Control Center Public:Start Menu\Programs\AMD Catalyst Control Center Public Start Menu\Programs\Battle.net Public:Start Menu\Programs\Battle.net Public Start Menu\Programs\DAEMON Tools Lite Public:Start Menu\Programs\DAEMON Tools Lite Public Start Menu\Programs\Diablo III Public:Start Menu\Programs\Diablo III Public Start Menu\Programs\Games Public:Start Menu\Programs\Games Public Start Menu\Programs\Hearthstone Public:Start Menu\Programs\Hearthstone Public Start Menu\Programs\Heroes of the Storm Public:Start Menu\Programs\Heroes of the Storm Public Start Menu\Programs\Image-Line Public:Start Menu\Programs\Image-Line Public Start Menu\Programs\Intel Public:Start Menu\Programs\Intel Public Start Menu\Programs\Intel\Intel(R) Management Engine Components Public:Start Menu\Programs\Intel\Intel(R) Management Engine Components Public Start Menu\Programs\Intel Driver Update Utility Public:Start Menu\Programs\Intel Driver Update Utility Public Start Menu\Programs\Java Public:Start Menu\Programs\Java Public Start Menu\Programs\Maintenance Public:Start Menu\Programs\Maintenance Public Start Menu\Programs\Malwarebytes Anti-Malware Public:Start Menu\Programs\Malwarebytes Anti-Malware Public Start Menu\Programs\Malwarebytes Anti-Malware\Tools Public:Start Menu\Programs\Malwarebytes Anti-Malware\Tools Public Start Menu\Programs\Microsoft Office 2013 Public:Start Menu\Programs\Microsoft Office 2013 Public Start Menu\Programs\Microsoft Office 2013\Office 2013 Tools Public:Start Menu\Programs\Microsoft Office 2013\Office 2013 Tools Public Start Menu\Programs\Microsoft Office 2016 Tools Public:Start Menu\Programs\Microsoft Office 2016 Tools Public Start Menu\Programs\Microsoft Silverlight Public:Start Menu\Programs\Microsoft Silverlight Public Start Menu\Programs\Motorola Device Manager Public:Start Menu\Programs\Motorola Device Manager Public Start Menu\Programs\NCSOFT Public:Start Menu\Programs\NCSOFT Public Start Menu\Programs\NCWest Public:Start Menu\Programs\NCWest Public Start Menu\Programs\NCWest\NCLauncher Public:Start Menu\Programs\NCWest\NCLauncher Public Start Menu\Programs\Overwatch Public:Start Menu\Programs\Overwatch Public Start Menu\Programs\Skype Public:Start Menu\Programs\Skype Public Start Menu\Programs\StarCraft II Public:Start Menu\Programs\StarCraft II Public Start Menu\Programs\StartUp Public:Start Menu\Programs\StartUp Public Start Menu\Programs\Steam Public:Start Menu\Programs\Steam Public Start Menu\Programs\System Tools Public:Start Menu\Programs\System Tools Public Start Menu\Programs\Tablet PC Public:Start Menu\Programs\Tablet PC Public Start Menu\Programs\TeamSpeak 3 Client Public:Start Menu\Programs\TeamSpeak 3 Client Public Start Menu\Programs\World of Warcraft Public:Start Menu\Programs\World of Warcraft Public Start Menu HOME-PC\James:Start Menu HOME-PC\James Start Menu\Programs HOME-PC\James:Start Menu\Programs HOME-PC\James Start Menu\Programs\Accessibility HOME-PC\James:Start Menu\Programs\Accessibility HOME-PC\James Start Menu\Programs\Accessories Ajilon-PC\James:Start Menu\Programs\Accessories Ajilon-PC\James Start Menu\Programs\Administrative Tools Ajilon-PC\James:Start Menu\Programs\Administrative Tools Ajilon-PC\James Start Menu\Programs\Amazon Ajilon-PC\James:Start Menu\Programs\Amazon Ajilon-PC\James Start Menu\Programs\Amazon\Amazon Kindle Ajilon-PC\James:Start Menu\Programs\Amazon\Amazon Kindle Ajilon-PC\James Start Menu\Programs\Dell Ajilon-PC\James:Start Menu\Programs\Dell Ajilon-PC\James Start Menu\Programs\Image-Line Ajilon-PC\James:Start Menu\Programs\Image-Line Ajilon-PC\James Start Menu\Programs\Innkeeper Ajilon-PC\James:Start Menu\Programs\Innkeeper Ajilon-PC\James Start Menu\Programs\Maintenance Ajilon-PC\James:Start Menu\Programs\Maintenance Ajilon-PC\James Start Menu\Programs\SharePoint Online Management Shell Ajilon-PC\James:Start Menu\Programs\SharePoint Online Management Shell Ajilon-PC\James Start Menu\Programs\Startup Ajilon-PC\James:Start Menu\Programs\Startup Ajilon-PC\James Start Menu\Programs\Supportworks Client 7.4.0 Ajilon-PC\James:Start Menu\Programs\Supportworks Client 7.4.0 Ajilon-PC\James Start Menu\Programs\System Tools Ajilon-PC\James:Start Menu\Programs\System Tools Ajilon-PC\James [Startup Programs] Program Command User Name Location OneDrive for Business onedrive for business.lnk Ajilon-PC\James Startup Send to OneNote send to onenote.lnk Ajilon-PC\James Startup DAEMON Tools Lite "c:\program files (x86)\daemon tools lite\dtlite.exe" -autorun Ajilon-PC\James Startup Spotify Web Helper "c:\users\ajilon\appdata\roaming\spotify\spotifywebhelper.exe" Ajilon-PC\James Startup Spotify "c:\users\ajilon\appdata\roaming\spotify\spotify.exe" -autostart -minimized Ajilon-PC\James Startup Innkeeper c:\users\ajilon\appdata\local\innkeeper\update.exe --processstart innkeeper.exe --process-start-args="-startup" Ajilon-PC\James Startup RESTART_STICKY_NOTES c:\windows\system32\stikynot.exe Ajilon-PC\James Startup CCleaner Monitoring "c:\program files\ccleaner\ccleaner64.exe" /monitor Ajilon-PC\James Startup IAStorIcon "c:\program files\intel\intel(r) rapid storage technology\iastoriconlaunch.exe" "c:\program files\intel\intel(r) rapid storage technology\iastoricon.exe" 60 Public HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [OLE Registration] Object Local Server Microsoft Graph Chart c:\program files\microsoft office\root\office16\graph.exe Microsoft Excel 95 Worksheet Not Available Microsoft Excel Chart Not Available Microsoft Excel 97-2003 Worksheet c:\progra~1\micros~1\office15\excel.exe Microsoft Excel Chart c:\progra~1\micros~1\office15\excel.exe Microsoft Excel Worksheet c:\progra~1\micros~1\office15\excel.exe Microsoft Excel Macro-Enabled Worksheet c:\progra~1\micros~1\office15\excel.exe Microsoft Excel Binary Worksheet c:\progra~1\micros~1\office15\excel.exe Microsoft Word 6.0 - 7.0 Document Not Available Microsoft Word 6.0 - 7.0 Picture Not Available Microsoft Word 97 - 2003 Document c:\progra~1\micros~1\office15\winword.exe VISIO 2 Drawing Not Available VISIO 3 Drawing Not Available VISIO 4 Drawing Not Available VISIO 5 Drawing Not Available Microsoft Visio 2000/2002 Drawing Not Available Microsoft Visio 2003-2010 Drawing c:\progra~1\micros~1\office15\visio.exe Microsoft Visio Drawing c:\progra~1\micros~1\office15\visio.exe Microsoft Visio Macro-Enabled Drawing c:\progra~1\micros~1\office15\visio.exe Microsoft Equation 3.0 c:\program files\common files\microsoft shared\equation\eqnedt32.exe Microsoft Excel Chart Not Available Microsoft Excel 4.0 Macro Not Available Microsoft PowerPoint Slide c:\progra~1\micros~1\office15\powerpnt.exe Microsoft Word Macro-Enabled Document c:\progra~1\micros~1\office15\winword.exe OpenDocument Text c:\progra~1\micros~1\office15\winword.exe Microsoft PowerPoint Macro-Enabled Slide c:\progra~1\micros~1\office15\powerpnt.exe Microsoft PowerPoint 97-2003 Presentation c:\progra~1\micros~1\office15\powerpnt.exe Microsoft PowerPoint 97-2003 Slide c:\progra~1\micros~1\office15\powerpnt.exe WordPad Document "%programfiles%\windows nt\accessories\wordpad.exe" Microsoft Word Macro-Enabled Template c:\progra~1\micros~1\office15\winword.exe Microsoft Word Template c:\progra~1\micros~1\office15\winword.exe OpenDocument Presentation c:\progra~1\micros~1\office15\powerpnt.exe Microsoft PowerPoint Presentation c:\progra~1\micros~1\office15\powerpnt.exe Paintbrush Picture %systemroot%\system32\mspaint.exe Microsoft PowerPoint Macro-Enabled Presentation c:\progra~1\micros~1\office15\powerpnt.exe OpenDocument Spreadsheet c:\progra~1\micros~1\office15\excel.exe Drawing Not Available Package Not Available Microsoft Word Document c:\progra~1\micros~1\office15\winword.exe Microsoft PenInputPanel Control Not Available