Summary Operating System Windows 7 Home Premium 64-bit SP1 CPU Intel Pentium 4 630 Prescott 90nm Technology RAM 3.00GB Dual-Channel DDR2 @ 199MHz (5-3-3-9) Motherboard Hewlett-Packard 09F8h (XU1 PROCESSOR) 55 °C Graphics DELL 1708FP (1280x1024@60Hz) Intel 82945G Express Chipset Family (HP) Storage 232GB Seagate ST3250824AS ATA Device (SATA) 37 °C Optical Drives LITE-ON COMBO SOHC-4836K ATA Device Audio Realtek High Definition Audio Operating System Windows 7 Home Premium 64-bit SP1 Computer type: Low Profile Desktop Installation Date: 30/11/2014 23:31:31 Windows Security Center User Account Control (UAC) Enabled Notify level 2 - Default Firewall Enabled Windows Update AutoUpdate Notify prior to download Windows Defender Windows Defender Disabled Antivirus Antivirus Enabled Display Name Avast Antivirus Virus Signature Database Up to date .NET Frameworks installed v4.5 Full v4.5 Client v3.5 SP1 v3.0 SP2 v2.0 SP2 Internet Explorer Version 11.0.9600.18617 PowerShell Version 2.0 Environment Variables USERPROFILE C:\Users\Home SystemRoot C:\Windows User Variables TEMP C:\Users\Home\AppData\Local\Temp TMP C:\Users\Home\AppData\Local\Temp Machine Variables ComSpec C:\Windows\system32\cmd.exe FP_NO_HOST_CHECK NO NUMBER_OF_PROCESSORS 2 OS Windows_NT Path C:\Windows\system32 C:\Windows C:\Windows\System32\Wbem C:\Windows\System32\WindowsPowerShell\v1.0\ PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE AMD64 PROCESSOR_IDENTIFIER Intel64 Family 15 Model 4 Stepping 10, GenuineIntel PROCESSOR_LEVEL 15 PROCESSOR_REVISION 040a PSModulePath C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ TEMP C:\Windows\TEMP TMP C:\Windows\TEMP USERNAME SYSTEM windir C:\Windows windows_tracing_flags 3 windows_tracing_logfile C:\BVTBin\Tests\installpackage\csilogfile.log Power Profile Active power scheme Balanced Hibernation Enabled Turn Off Monitor after: (On AC Power) 10 min Turn Off Hard Disk after: (On AC Power) 20 min Suspend after: (On AC Power) 120 min Screen saver Disabled Uptime Current Session Current Time 08/04/2017 13:56:05 Current Uptime 1,056 sec (0 d, 00 h, 17 m, 36 s) Last Boot Time 08/04/2017 13:38:29 Services Running Adobe Acrobat Update Service Running Application Experience Running Application Information Running aswbIDSAgent Running Avast Antivirus Running Base Filtering Engine Running CNG Key Isolation Running COM+ Event System Running Computer Browser Running Cryptographic Services Running DCOM Server Process Launcher Running Desktop Window Manager Session Manager Running DHCP Client Running Diagnostic Policy Service Running Diagnostic Service Host Running Diagnostic System Host Running Diagnostics Tracking Service Running Distributed Link Tracking Client Running DNS Client Running Extensible Authentication Protocol Running Function Discovery Provider Host Running Function Discovery Resource Publication Running Group Policy Client Running HomeGroup Listener Running HomeGroup Provider Running Human Interface Device Access Running IKE and AuthIP IPsec Keying Modules Running IP Helper Running Malwarebytes Anti-Exploit Service Running MBAMScheduler Running MBAMService Running Multimedia Class Scheduler Running Network Connections Running Network List Service Running Network Location Awareness Running Network Store Interface Service Running Peer Name Resolution Protocol Running Peer Networking Grouping Running Peer Networking Identity Manager Running Plug and Play Running Power Running Print Spooler Running Program Compatibility Assistant Service Running Realtek Audio Service Running Remote Desktop Services Running Remote Procedure Call (RPC) Running RPC Endpoint Mapper Running Security Accounts Manager Running Security Center Running Server Running Shell Hardware Detection Running SSDP Discovery Running Superfetch Running System Event Notification Service Running Task Scheduler Running TCP/IP NetBIOS Helper Running Themes Running UPnP Device Host Running User Profile Service Running Windows Audio Running Windows Audio Endpoint Builder Running Windows Connect Now - Config Registrar Running Windows Event Log Running Windows Firewall Running Windows Font Cache Service Running Windows Image Acquisition (WIA) Running Windows Management Instrumentation Running Windows Media Player Network Sharing Service Running Windows Search Running Windows Update Running WinHTTP Web Proxy Auto-Discovery Service Running WLAN AutoConfig Running Workstation Running WWAN AutoConfig Stopped ActiveX Installer (AxInstSV) Stopped Adaptive Brightness Stopped Application Identity Stopped Application Layer Gateway Service Stopped ASP.NET State Service Stopped Background Intelligent Transfer Service Stopped BitLocker Drive Encryption Service Stopped Block Level Backup Engine Service Stopped Bluetooth Support Service Stopped Certificate Propagation Stopped COM+ System Application Stopped Credential Manager Stopped Disk Defragmenter Stopped Distributed Transaction Coordinator Stopped Encrypting File System (EFS) Stopped Fax Stopped Google Update Service (gupdate) Stopped Google Update Service (gupdatem) Stopped Health Key and Certificate Management Stopped Interactive Services Detection Stopped Internet Connection Sharing (ICS) Stopped Internet Explorer ETW Collector Service Stopped IPsec Policy Agent Stopped KtmRm for Distributed Transaction Coordinator Stopped Link-Layer Topology Discovery Mapper Stopped McAfee Security Scan Component Host Service Stopped Media Center Extender Service Stopped Microsoft .NET Framework NGEN v2.0.50727_X64 Stopped Microsoft .NET Framework NGEN v2.0.50727_X86 Stopped Microsoft .NET Framework NGEN v4.0.30319_X64 Stopped Microsoft .NET Framework NGEN v4.0.30319_X86 Stopped Microsoft iSCSI Initiator Service Stopped Microsoft Office Diagnostics Service Stopped Microsoft Software Shadow Copy Provider Stopped Net.Msmq Listener Adapter Stopped Net.Pipe Listener Adapter Stopped Net.Tcp Listener Adapter Stopped Net.Tcp Port Sharing Service Stopped Netlogon Stopped Network Access Protection Agent Stopped Office Source Engine Stopped Parental Controls Stopped Performance Counter DLL Host Stopped Performance Logs & Alerts Stopped PnP-X IP Bus Enumerator Stopped PNRP Machine Name Publication Service Stopped Portable Device Enumerator Service Stopped Problem Reports and Solutions Control Panel Support Stopped Protected Storage Stopped Quality Windows Audio Video Experience Stopped Remote Access Auto Connection Manager Stopped Remote Access Connection Manager Stopped Remote Desktop Configuration Stopped Remote Procedure Call (RPC) Locator Stopped Remote Registry Stopped Routing and Remote Access Stopped Secondary Logon Stopped Secure Socket Tunneling Protocol Service Stopped Smart Card Stopped Smart Card Removal Policy Stopped SNMP Trap Stopped Software Protection Stopped SPP Notification Service Stopped Tablet PC Input Service Stopped Telephony Stopped Thread Ordering Server Stopped TPM Base Services Stopped Virtual Disk Stopped Volume Shadow Copy Stopped WebClient Stopped Windows Activation Technologies Service Stopped Windows Backup Stopped Windows Biometric Service Stopped Windows CardSpace Stopped Windows Color System Stopped Windows Defender Stopped Windows Driver Foundation - User-mode Driver Framework Stopped Windows Error Reporting Service Stopped Windows Event Collector Stopped Windows Installer Stopped Windows Media Center Receiver Service Stopped Windows Media Center Scheduler Service Stopped Windows Modules Installer Stopped Windows Presentation Foundation Font Cache 3.0.0.0 Stopped Windows Remote Management (WS-Management) Stopped Windows Time Stopped Wired AutoConfig Stopped WMI Performance Adapter TimeZone TimeZone GMT Language English (United Kingdom) Location United Kingdom Format English (United Kingdom) Currency Ł Date Format dd/MM/yyyy Time Format HH:mm:ss Scheduler 08/04/2017 13:56; GoogleUpdateTaskMachineUA 08/04/2017 14:46; HPCustParticipation HP Deskjet 1510 series 08/04/2017 16:00; Adobe Acrobat Update Task 08/04/2017 16:47; SafeZone scheduled Autoupdate 1491407244 09/04/2017 09:56; GoogleUpdateTaskMachineCore 0715avUpdateInfo CCleanerSkipUAC HP AR Program Upload - 266169d4c15d42d98792b69faaad09be883dac1ca9ac47ffb31a810d10c5c602 HP AR Program Upload - baad65bec35348a59e75f47e0acd9b4411d2b698a054484f83cf61d4d95229a3 HP AR Program Upload - d77dc0b23f0d4a4b94de0fa08ed7689af165f4121cc840c688d280268f118f2f HP AR Program Upload - ed225ec28faa4de69aa38a7e71c12cf8fbd59866eac840578c7dc320e8048fd7 HP AR Program Upload - f35b06af1f374e60a3ad414eb5c3d41a032fd27133d3434f9bd8aff3d42a6c4f Tweaking.com - Windows Repair Tray Icon Hotfixes Installed 06/04/2017 Security Update for Windows 7 for x64-based Systems (KB3170455) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. 06/04/2017 Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB3163245) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. 06/04/2017 Windows Malicious Software Removal Tool x64 - March 2017 (KB890830) After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product. 06/04/2017 December, 2016 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 on Windows 7 and Windows Server 2008 R2 for x64 (KB3205402) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. 06/04/2017 March, 2017 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4012215) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. 06/04/2017 Security Update for Windows 7 for x64-based Systems (KB3161949) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. 06/04/2017 Security Update for Windows 7 for x64-based Systems (KB3159398) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Not Installed System Folders Application Data C:\ProgramData Cookies C:\Users\Home\AppData\Roaming\Microsoft\Windows\Cookies Desktop C:\Users\Home\Desktop Documents C:\Users\Public\Documents Fonts C:\Windows\Fonts Global Favorites C:\Users\Home\Favorites Internet History C:\Users\Home\AppData\Local\Microsoft\Windows\History Local Application Data C:\Users\Home\AppData\Local Music C:\Users\Public\Music Path for burning CD C:\Users\Home\AppData\Local\Microsoft\Windows\Burn\Burn Physical Desktop C:\Users\Home\Desktop Pictures C:\Users\Public\Pictures Program Files C:\Program Files Public Desktop C:\Users\Public\Desktop Start Menu C:\ProgramData\Microsoft\Windows\Start Menu Start Menu Programs C:\ProgramData\Microsoft\Windows\Start Menu\Programs Startup C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Templates C:\ProgramData\Microsoft\Windows\Templates Temporary Internet Files C:\Users\Home\AppData\Local\Microsoft\Windows\Temporary Internet Files User Favorites C:\Users\Home\Favorites Videos C:\Users\Public\Videos Windows Directory C:\Windows Windows/System C:\Windows\system32 Process List armsvc.exe Process ID 1728 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe Memory Usage 3.41 MB Peak Memory Usage 4.00 MB aswidsagenta.exe Process ID 3228 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe Memory Usage 32 MB Peak Memory Usage 38 MB audiodg.exe Process ID 5108 User LOCAL SERVICE Domain NT AUTHORITY Memory Usage 18 MB Peak Memory Usage 22 MB AvastSvc.exe Process ID 1400 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\AVAST Software\Avast\AvastSvc.exe Memory Usage 143 MB Peak Memory Usage 227 MB AvastUI.exe Process ID 3864 User Home Domain Home-PC Path C:\Program Files\AVAST Software\Avast\AvastUI.exe Memory Usage 30 MB Peak Memory Usage 32 MB CCleaner64.exe Process ID 3284 User Home Domain Home-PC Path C:\Program Files\CCleaner\CCleaner64.exe Memory Usage 1.13 MB Peak Memory Usage 16 MB chrome.exe Process ID 4744 User Home Domain Home-PC Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Memory Usage 33 MB Peak Memory Usage 33 MB chrome.exe Process ID 4020 User Home Domain Home-PC Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Memory Usage 118 MB Peak Memory Usage 123 MB chrome.exe Process ID 3756 User Home Domain Home-PC Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Memory Usage 109 MB Peak Memory Usage 154 MB chrome.exe Process ID 4472 User Home Domain Home-PC Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Memory Usage 17 MB Peak Memory Usage 17 MB chrome.exe Process ID 5116 User Home Domain Home-PC Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Memory Usage 127 MB Peak Memory Usage 173 MB chrome.exe Process ID 4496 User Home Domain Home-PC Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Memory Usage 9.39 MB Peak Memory Usage 9.41 MB chrome.exe Process ID 4304 User Home Domain Home-PC Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Memory Usage 8.10 MB Peak Memory Usage 8.15 MB chrome.exe Process ID 884 User Home Domain Home-PC Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Memory Usage 153 MB Peak Memory Usage 214 MB conhost.exe Process ID 2028 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\conhost.exe Memory Usage 2.28 MB Peak Memory Usage 2.75 MB csrss.exe Process ID 448 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\csrss.exe Memory Usage 3.79 MB Peak Memory Usage 8.27 MB csrss.exe Process ID 500 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\csrss.exe Memory Usage 16 MB Peak Memory Usage 23 MB dwm.exe Process ID 3108 User Home Domain Home-PC Path C:\Windows\system32\Dwm.exe Memory Usage 42 MB Peak Memory Usage 58 MB explorer.exe Process ID 3176 User Home Domain Home-PC Path C:\Windows\Explorer.EXE Memory Usage 65 MB Peak Memory Usage 72 MB hkcmd.exe Process ID 3184 User Home Domain Home-PC Path C:\Windows\System32\hkcmd.exe Memory Usage 4.71 MB Peak Memory Usage 6.10 MB hpwuschd2.exe Process ID 3444 User Home Domain Home-PC Path C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe Memory Usage 3.28 MB Peak Memory Usage 3.51 MB igfxpers.exe Process ID 3236 User Home Domain Home-PC Path C:\Windows\System32\igfxpers.exe Memory Usage 4.90 MB Peak Memory Usage 5.96 MB igfxsrvc.exe Process ID 3384 User Home Domain Home-PC Path C:\Windows\system32\igfxsrvc.exe Memory Usage 4.59 MB Peak Memory Usage 6.05 MB igfxtray.exe Process ID 4008 User Home Domain Home-PC Path C:\Windows\System32\igfxtray.exe Memory Usage 4.73 MB Peak Memory Usage 6.26 MB lsass.exe Process ID 584 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\lsass.exe Memory Usage 10 MB Peak Memory Usage 12 MB lsm.exe Process ID 596 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\lsm.exe Memory Usage 3.49 MB Peak Memory Usage 4.12 MB mbae-svc.exe Process ID 1996 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe Memory Usage 10 MB Peak Memory Usage 13 MB mbae.exe Process ID 3764 User Home Domain Home-PC Path C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe Memory Usage 6.81 MB Peak Memory Usage 11 MB mbae64.exe Process ID 1584 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Memory Usage 4.07 MB Peak Memory Usage 4.33 MB mbam.exe Process ID 4508 User Home Domain Home-PC Path C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe Memory Usage 58 MB Peak Memory Usage 239 MB mbamscheduler.exe Process ID 4188 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe Memory Usage 10 MB Peak Memory Usage 10 MB mbamservice.exe Process ID 2492 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe Memory Usage 328 MB Peak Memory Usage 341 MB RAVBg64.exe Process ID 1184 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe Memory Usage 7.02 MB Peak Memory Usage 11 MB RAVCpl64.exe Process ID 736 User Home Domain Home-PC Path C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe Memory Usage 7.39 MB Peak Memory Usage 11 MB RtkAudioService64.exe Process ID 1068 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe Memory Usage 3.88 MB Peak Memory Usage 5.07 MB rundll32.exe Process ID 3512 User Home Domain Home-PC Path C:\Windows\system32\RunDll32.exe Memory Usage 8.53 MB Peak Memory Usage 11 MB SearchFilterHost.exe Process ID 1612 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\SearchFilterHost.exe Memory Usage 8.59 MB Peak Memory Usage 8.62 MB SearchIndexer.exe Process ID 2988 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\SearchIndexer.exe Memory Usage 21 MB Peak Memory Usage 21 MB SearchProtocolHost.exe Process ID 2744 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\SearchProtocolHost.exe Memory Usage 12 MB Peak Memory Usage 12 MB services.exe Process ID 536 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\services.exe Memory Usage 7.52 MB Peak Memory Usage 14 MB smss.exe Process ID 312 User SYSTEM Domain NT AUTHORITY Path \SystemRoot\System32\smss.exe Memory Usage 908 KB Peak Memory Usage 1.20 MB Speccy64.exe Process ID 3676 User Home Domain Home-PC Path C:\Program Files\Speccy\Speccy64.exe Memory Usage 25 MB Peak Memory Usage 25 MB splwow64.exe Process ID 2976 User Home Domain Home-PC Path C:\Windows\splwow64.exe Memory Usage 5.88 MB Peak Memory Usage 6.13 MB spoolsv.exe Process ID 1484 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\spoolsv.exe Memory Usage 8.51 MB Peak Memory Usage 12 MB SpotifyWebHelper.exe Process ID 2480 User Home Domain Home-PC Path C:\Users\Home\AppData\Roaming\Spotify\SpotifyWebHelper.exe Memory Usage 4.59 MB Peak Memory Usage 5.88 MB SSScheduler.exe Process ID 3208 User Home Domain Home-PC Path C:\Program Files\McAfee Security Scan\3.11.523\SSScheduler.exe Memory Usage 3.15 MB Peak Memory Usage 3.68 MB svchost.exe Process ID 2832 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 4.42 MB Peak Memory Usage 5.46 MB svchost.exe Process ID 1944 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 15 MB Peak Memory Usage 15 MB svchost.exe Process ID 1756 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5.09 MB Peak Memory Usage 6.79 MB svchost.exe Process ID 3760 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 13 MB Peak Memory Usage 15 MB svchost.exe Process ID 1352 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 14 MB Peak Memory Usage 83 MB svchost.exe Process ID 1220 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 13 MB Peak Memory Usage 16 MB svchost.exe Process ID 724 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 4.67 MB Peak Memory Usage 5.56 MB svchost.exe Process ID 1020 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 30 MB Peak Memory Usage 36 MB svchost.exe Process ID 708 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 7.70 MB Peak Memory Usage 8.82 MB svchost.exe Process ID 988 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 15 MB Peak Memory Usage 17 MB svchost.exe Process ID 800 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 7.28 MB Peak Memory Usage 7.54 MB svchost.exe Process ID 864 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 18 MB Peak Memory Usage 20 MB svchost.exe Process ID 940 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 109 MB Peak Memory Usage 127 MB System Process ID 4 Memory Usage 1.90 MB Peak Memory Usage 11 MB System Idle Process Process ID 0 taskeng.exe Process ID 1412 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\taskeng.exe Memory Usage 5.24 MB Peak Memory Usage 5.86 MB taskeng.exe Process ID 3368 User Home Domain Home-PC Path C:\Windows\system32\taskeng.exe Memory Usage 4.98 MB Peak Memory Usage 5.67 MB taskeng.exe Process ID 4464 User Home Domain Home-PC Path C:\Windows\system32\taskeng.exe Memory Usage 5.85 MB Peak Memory Usage 5.95 MB taskhost.exe Process ID 2928 User Home Domain Home-PC Path C:\Windows\system32\taskhost.exe Memory Usage 11 MB Peak Memory Usage 11 MB wininit.exe Process ID 488 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\wininit.exe Memory Usage 3.60 MB Peak Memory Usage 4.43 MB winlogon.exe Process ID 576 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\winlogon.exe Memory Usage 5.29 MB Peak Memory Usage 8.23 MB WINWORD.EXE Process ID 4984 User Home Domain Home-PC Path C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE Memory Usage 71 MB Peak Memory Usage 81 MB WmiPrvSE.exe Process ID 4108 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\system32\wbem\wmiprvse.exe Memory Usage 12 MB Peak Memory Usage 13 MB WmiPrvSE.exe Process ID 1788 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\wbem\wmiprvse.exe Memory Usage 6.13 MB Peak Memory Usage 6.13 MB wmpnetwk.exe Process ID 2912 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Program Files\Windows Media Player\wmpnetwk.exe Memory Usage 6.30 MB Peak Memory Usage 29 MB WR_Tray_Icon.exe Process ID 3892 User Home Domain Home-PC Path C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe Memory Usage 528 KB Peak Memory Usage 6.84 MB wuauclt.exe Process ID 1148 User Home Domain Home-PC Path C:\Windows\system32\wuauclt.exe Memory Usage 6.51 MB Peak Memory Usage 6.66 MB Security Options Accounts: Administrator account status Disabled Accounts: Guest account status Disabled Accounts: Limit local account use of blank passwords to console logon only Enabled Accounts: Rename administrator account Administrator Accounts: Rename guest account Guest Audit: Audit the access of global system objects Disabled Audit: Audit the use of Backup and Restore privilege Disabled Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings Not Defined Audit: Shut down system immediately if unable to log security audits Disabled DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax Not Defined DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax Not Defined Devices: Allow undock without having to log on Enabled Devices: Allowed to format and eject removable media Not Defined Devices: Prevent users from installing printer drivers Disabled Devices: Restrict CD-ROM access to locally logged-on user only Not Defined Devices: Restrict floppy access to locally logged-on user only Not Defined Domain controller: Allow server operators to schedule tasks Not Defined Domain controller: LDAP server signing requirements Not Defined Domain controller: Refuse machine account password changes Not Defined Domain member: Digitally encrypt or sign secure channel data (always) Enabled Domain member: Digitally encrypt secure channel data (when possible) Enabled Domain member: Digitally sign secure channel data (when possible) Enabled Domain member: Disable machine account password changes Disabled Domain member: Maximum machine account password age 30 days Domain member: Require strong (Windows 2000 or later) session key Enabled Interactive logon: Display user information when the session is locked Not Defined Interactive logon: Do not display last user name Disabled Interactive logon: Do not require CTRL+ALT+DEL Not Defined Interactive logon: Message text for users attempting to log on Interactive logon: Message title for users attempting to log on Interactive logon: Number of previous logons to cache (in case domain controller is not available) 10 logons Interactive logon: Prompt user to change password before expiration 5 days Interactive logon: Require Domain Controller authentication to unlock workstation Disabled Interactive logon: Require smart card Disabled Interactive logon: Smart card removal behavior No Action Microsoft network client: Digitally sign communications (always) Disabled Microsoft network client: Digitally sign communications (if server agrees) Enabled Microsoft network client: Send unencrypted password to third-party SMB servers Disabled Microsoft network server: Amount of idle time required before suspending session 15 minutes Microsoft network server: Digitally sign communications (always) Disabled Microsoft network server: Digitally sign communications (if client agrees) Disabled Microsoft network server: Disconnect clients when logon hours expire Enabled Microsoft network server: Server SPN target name validation level Not Defined Network access: Allow anonymous SID/Name translation Disabled Network access: Do not allow anonymous enumeration of SAM accounts Enabled Network access: Do not allow anonymous enumeration of SAM accounts and shares Disabled Network access: Do not allow storage of passwords and credentials for network authentication Disabled Network access: Let Everyone permissions apply to anonymous users Disabled Network access: Named Pipes that can be accessed anonymously Network access: Remotely accessible registry paths System\CurrentControlSet\Control\ProductOptions,System\CurrentControlSet\Control\Server Applications,Software\Microsoft\Windows NT\CurrentVersion Network access: Remotely accessible registry paths and sub-paths System\CurrentControlSet\Control\Print\Printers,System\CurrentControlSet\Services\Eventlog,Software\Microsoft\OLAP Server,Software\Microsoft\Windows NT\CurrentVersion\Print,Software\Microsoft\Windows NT\CurrentVersion\Windows,System\CurrentControlSet\Control\ContentIndex,System\CurrentControlSet\Control\Terminal Server,System\CurrentControlSet\Control\Terminal Server\UserConfig,System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration,Software\Microsoft\Windows NT\CurrentVersion\Perflib,System\CurrentControlSet\Services\SysmonLog Network access: Restrict anonymous access to Named Pipes and Shares Enabled Network access: Shares that can be accessed anonymously Not Defined Network access: Sharing and security model for local accounts Classic - local users authenticate as themselves Network security: Allow Local System to use computer identity for NTLM Not Defined Network security: Allow LocalSystem NULL session fallback Not Defined Network Security: Allow PKU2U authentication requests to this computer to use online identities Not Defined Network security: Configure encryption types allowed for Kerberos Not Defined Network security: Do not store LAN Manager hash value on next password change Enabled Network security: Force logoff when logon hours expire Disabled Network security: LAN Manager authentication level Not Defined Network security: LDAP client signing requirements Negotiate signing Network security: Minimum session security for NTLM SSP based (including secure RPC) clients Require 128-bit encryption Network security: Minimum session security for NTLM SSP based (including secure RPC) servers Require 128-bit encryption Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication Not Defined Network security: Restrict NTLM: Add server exceptions in this domain Not Defined Network security: Restrict NTLM: Audit Incoming NTLM Traffic Not Defined Network security: Restrict NTLM: Audit NTLM authentication in this domain Not Defined Network security: Restrict NTLM: Incoming NTLM traffic Not Defined Network security: Restrict NTLM: NTLM authentication in this domain Not Defined Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers Not Defined Recovery console: Allow automatic administrative logon Enabled Recovery console: Allow floppy copy and access to all drives and all folders Enabled Shutdown: Allow system to be shut down without having to log on Enabled Shutdown: Clear virtual memory pagefile Disabled System cryptography: Force strong key protection for user keys stored on the computer Not Defined System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing Disabled System objects: Require case insensitivity for non-Windows subsystems Enabled System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links) Enabled System settings: Optional subsystems Posix System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies Disabled User Account Control: Admin Approval Mode for the Built-in Administrator account Disabled User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop Disabled User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Prompt for consent for non-Windows binaries User Account Control: Behavior of the elevation prompt for standard users Prompt for credentials User Account Control: Detect application installations and prompt for elevation Enabled User Account Control: Only elevate executables that are signed and validated Disabled User Account Control: Only elevate UIAccess applications that are installed in secure locations Enabled User Account Control: Run all administrators in Admin Approval Mode Enabled User Account Control: Switch to the secure desktop when prompting for elevation Enabled User Account Control: Virtualize file and registry write failures to per-user locations Enabled Device Tree ACPI x64-based PC Microsoft ACPI-Compliant System ACPI Fixed Feature Button ACPI Power Button Intel Pentium 4 CPU 3.00GHz Intel Pentium 4 CPU 3.00GHz Microsoft Windows Management Interface for ACPI System board PCI bus Intel 82801 PCI Bridge - 244E Intel 82801G (ICH7 Family) PCI Express Root Port - 27D0 Intel 945G/GZ/GC/P/PL Processor to I/O Controller - 2770 Motherboard resources Motherboard resources Intel(R) 82945G Express Chipset Family Dell 1708FP(Analog) High Definition Audio Controller Realtek High Definition Audio Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D2 Broadcom NetXtreme Gigabit Ethernet Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C8 USB Root Hub USB Input Device HID-compliant mouse USB Composite Device USB Input Device HID Keyboard Device USB Input Device HID-compliant consumer control device HID-compliant device Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C9 USB Root Hub Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CA USB Root Hub Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CB USB Root Hub Intel(R) 82801G (ICH7 Family) USB2 Enhanced Host Controller - 27CC USB Root Hub Intel(R) 82801GB/GR (ICH7 Family) LPC Interface Controller - 27B8 Advanced programmable interrupt controller Direct memory access controller Numeric data processor Programmable interrupt controller PS/2 Compatible Mouse Standard floppy disk controller Standard PS/2 Keyboard System CMOS/real time clock System speaker System timer ECP Printer Port (LPT1) Printer Port Logical Interface Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF ATA Channel 1 ATA Channel 0 LITE-ON COMBO SOHC-4836K ATA Device Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0 ATA Channel 1 ATA Channel 0 ST3250824AS ATA Device CPU Intel Pentium 4 630 Cores 1 Threads 2 Name Intel Pentium 4 630 Code Name Prescott Package Socket 775 LGA Technology 90nm Specification Intel Pentium 4 CPU 3.00GHz Family F Extended Family F Model 4 Extended Model 4 Stepping A Revision R0 Instructions MMX, SSE, SSE2, SSE3, Intel 64, NX Virtualization Not supported Hyperthreading Not supported Fan Speed 1760 RPM Bus Speed 199.2 MHz Rated Bus Speed 796.7 MHz Stock Core Speed 3000 MHz Stock Bus Speed 200 MHz Caches L1 Data Cache Size 16 KBytes L1 trace cache 12 Kµops L2 Unified Cache Size 2048 KBytes Cores Core 0 Core Speed 2987.5 MHz Multiplier x 15.0 Bus Speed 199.2 MHz Rated Bus Speed 796.7 MHz Threads APIC ID: 0, 1 RAM Memory slots Total memory slots 1 Used memory slots 4 Free memory slots -3 Memory Type DDR2 Size 3072 MBytes Channels # Dual DRAM Frequency 199.2 MHz CAS# Latency (CL) 5 clocks RAS# to CAS# Delay (tRCD) 3 clocks RAS# Precharge (tRP) 3 clocks Cycle Time (tRAS) 9 clocks Bank Cycle Time (tRC) 12 clocks Physical Memory Memory Usage 66 % Total Physical 2.99 GB Available Physical MB Total Virtual 5.98 GB Available Virtual 3.80 GB SPD Number Of SPD Modules 4 Slot #1 Type DDR2 Size 512 MBytes Manufacturer Samsung Max Bandwidth PC2-4300 (266 MHz) Part Number M3 78T6553CZ3-CD5 Serial Number 36165400 Week/year 39 / 06 Timing table JEDEC #1 Frequency 200.0 MHz CAS# Latency 3.0 RAS# To CAS# 3 RAS# Precharge 3 tRAS 8 tRC 11 Voltage 1.800 V JEDEC #2 Frequency 266.7 MHz CAS# Latency 4.0 RAS# To CAS# 4 RAS# Precharge 4 tRAS 11 tRC 15 Voltage 1.800 V JEDEC #3 Frequency 266.7 MHz CAS# Latency 5.0 RAS# To CAS# 4 RAS# Precharge 4 tRAS 11 tRC 15 Voltage 1.800 V Slot #2 Type DDR2 Size 1024 MBytes Manufacturer Unknown Max Bandwidth PC2-5300 (333 MHz) Week/year 16 / 11 Timing table JEDEC #1 Frequency 333.3 MHz CAS# Latency 5.0 RAS# To CAS# 5 RAS# Precharge 5 tRAS 15 tRC 20 Voltage 1.800 V Slot #3 Type DDR2 Size 512 MBytes Manufacturer Samsung Max Bandwidth PC2-4300 (266 MHz) Part Number M3 78T6553CZ3-CD5 Serial Number 36165396 Week/year 39 / 06 Timing table JEDEC #1 Frequency 200.0 MHz CAS# Latency 3.0 RAS# To CAS# 3 RAS# Precharge 3 tRAS 8 tRC 11 Voltage 1.800 V JEDEC #2 Frequency 266.7 MHz CAS# Latency 4.0 RAS# To CAS# 4 RAS# Precharge 4 tRAS 11 tRC 15 Voltage 1.800 V JEDEC #3 Frequency 266.7 MHz CAS# Latency 5.0 RAS# To CAS# 4 RAS# Precharge 4 tRAS 11 tRC 15 Voltage 1.800 V Slot #4 Type DDR2 Size 1024 MBytes Manufacturer Unknown Max Bandwidth PC2-5300 (333 MHz) Week/year 16 / 11 Timing table JEDEC #1 Frequency 333.3 MHz CAS# Latency 5.0 RAS# To CAS# 5 RAS# Precharge 5 tRAS 15 tRC 20 Voltage 1.800 V Motherboard Manufacturer Hewlett-Packard Model 09F8h (XU1 PROCESSOR) Chipset Vendor Intel Chipset Model i945P/PL/G/GZ Chipset Revision A2 Southbridge Vendor Intel Southbridge Model 82801GB (ICH7/R) Southbridge Revision A1 System Temperature 55 °C BIOS Brand Hewlett-Packard Version 786D1 v01.03 Date 18/05/2005 PCI Data Slot PCI Slot Type PCI Slot Usage Available Bus Width 32 bit Slot Designation PCI1 Characteristics 5V, 3.3V, PME, SMBus Slot Number 0 Slot PCI Slot Type PCI Slot Usage Available Bus Width 32 bit Slot Designation PCI2 Characteristics 5V, 3.3V, PME, SMBus Slot Number 1 Slot PCI-E Slot Type PCI-E Slot Usage Available Data lanes x1 Slot Designation PCI EXPRESS x1 SLOT/PCIEx1 Characteristics 3.3V, PME, SMBus Slot Number 2 Slot PCI-E Slot Type PCI-E Slot Usage Available Data lanes x16 Slot Designation PCI EXPRESS x16 SLOT/PCIEx16 Characteristics 3.3V, PME, SMBus Slot Number 3 Graphics Monitor Name DELL 1708FP on Intel 82945G Express Chipset Family Current Resolution 1280x1024 pixels Work Resolution 1280x984 pixels State Enabled, Primary, Output devices support Monitor Width 1280 Monitor Height 1024 Monitor BPP 32 bits per pixel Monitor Frequency 60 Hz Device \\.\DISPLAY1\Monitor0 Intel 82945G Express Chipset Family Manufacturer Intel Model 82945G Express Chipset Family Device ID 8086-2772 Revision 3 Subvendor HP (103C) Current Performance Level Level 0 Driver version 8.15.10.1930 Count of performance levels : 1 Level 1 - "Perf Level 0" Storage Hard drives ST3250824AS ATA Device Manufacturer Seagate Form Factor 3.5" Heads 16 Cylinders 30,394 Tracks 7,750,470 Sectors 488,279,610 SATA type SATA-II 3.0Gb/s Device type Fixed ATA Standard ATA/ATAPI-7 Serial Number 5ND4DXFY Firmware Version Number 3.ADH LBA Size 48-bit LBA Power On Count 1830 times Power On Time 266.1 days Features S.M.A.R.T., AAM, NCQ Max. Transfer Mode SATA II 3.0Gb/s Used Transfer Mode SATA II 3.0Gb/s Interface SATA Capacity 232 GB Real size 250,000,000,000 bytes RAID Type None S.M.A.R.T Status Good Temperature 37 °C Temperature Range OK (less than 50 °C) S.M.A.R.T attributes 01 Attribute name Read Error Rate Real value 0 Current 113 Worst 97 Threshold 6 Raw Value 0000000000 Status Good 03 Attribute name Spin-Up Time Real value 0 ms Current 98 Worst 98 Threshold 0 Raw Value 0000000000 Status Good 04 Attribute name Start/Stop Count Real value 1,799 Current 99 Worst 99 Threshold 20 Raw Value 0000000707 Status Good 05 Attribute name Reallocated Sectors Count Real value 0 Current 100 Worst 100 Threshold 36 Raw Value 0000000000 Status Good 07 Attribute name Seek Error Rate Real value 0 Current 84 Worst 60 Threshold 30 Raw Value 00123726C1 Status Good 09 Attribute name Power-On Hours (POH) Real value 266d 3h Current 93 Worst 93 Threshold 0 Raw Value 00000018F3 Status Good 0A Attribute name Spin Retry Count Real value 0 Current 100 Worst 100 Threshold 97 Raw Value 0000000000 Status Good 0C Attribute name Device Power Cycle Count Real value 1,830 Current 99 Worst 99 Threshold 20 Raw Value 0000000726 Status Good BB Attribute name Reported Uncorrectable Errors Real value 0 Current 100 Worst 100 Threshold 0 Raw Value 0000000000 Status Good BD Attribute name High Fly Writes (WDC) Real value 0 Current 100 Worst 100 Threshold 0 Raw Value 0000000000 Status Good BE Attribute name Airflow Temperature Real value 37 °C Current 63 Worst 52 Threshold 45 Raw Value 00251B0025 Status Good C2 Attribute name Temperature Real value 37 °C Current 37 Worst 48 Threshold 0 Raw Value 0000000025 Status Good C3 Attribute name Hardware ECC Recovered Real value 0 Current 70 Worst 55 Threshold 0 Raw Value 000B63849B Status Good C5 Attribute name Current Pending Sector Count Real value 0 Current 100 Worst 100 Threshold 0 Raw Value 0000000000 Status Good C6 Attribute name Uncorrectable Sector Count Real value 0 Current 100 Worst 100 Threshold 0 Raw Value 0000000000 Status Good C7 Attribute name UltraDMA CRC Error Count Real value 0 Current 200 Worst 200 Threshold 0 Raw Value 0000000000 Status Good C8 Attribute name Write Error Rate / Multi-Zone Error Rate Real value 0 Current 100 Worst 253 Threshold 0 Raw Value 0000000000 Status Good CA Attribute name Data Address Mark errors Real value 0 Current 100 Worst 253 Threshold 0 Raw Value 0000000000 Status Good Partition 0 Partition ID Disk #0, Partition #0 Disk Letter C: File System NTFS Volume Serial Number 9C8A17EB Size 78 GB Used Space 46 GB (59%) Free Space 31.3 GB (41%) Partition 1 Partition ID Disk #0, Partition #1 Disk Letter D: File System NTFS Volume Serial Number F8CB9386 Size 154 GB Used Space 104 MB (0%) Free Space 154 GB (100%) Optical Drives LITE-ON COMBO SOHC-4836K ATA Device Media Type DVD Reader Name LITE-ON COMBO SOHC-4836K ATA Device Availability Running/Full Power Capabilities Random Access, Supports Writing, Supports Removable Media Read capabilities CD-R, CD-RW, CD-ROM, DVD-ROM, DVD-R, DVD+R, DVD+RW, DVD-R DL, DVD+R DL Write capabilities CD-R, CD-RW Config Manager Error Code Device is working properly Config Manager User Config FALSE Drive E: Media Loaded FALSE SCSI Bus 0 SCSI Logical Unit 0 SCSI Port 0 SCSI Target Id 0 Status OK Audio Sound Card Realtek High Definition Audio Playback Device Speakers (Realtek High Definition Audio) Recording Devices Aux (Realtek High Definition Audio) Microphone (Realtek High Definition Audio) (default) Speaker Configuration Speaker type Stereo Peripherals Standard PS/2 Keyboard Device Kind Keyboard Device Name Standard PS/2 Keyboard Vendor (Standard keyboards) Location plugged into keyboard port Driver Date 6-21-2006 Version 6.1.7601.17514 File C:\Windows\system32\DRIVERS\i8042prt.sys File C:\Windows\system32\DRIVERS\kbdclass.sys HID Keyboard Device Device Kind Keyboard Device Name HID Keyboard Device Vendor Primax Electronics Location USB Input Device Driver Date 6-21-2006 Version 6.1.7601.17514 File C:\Windows\system32\DRIVERS\kbdhid.sys File C:\Windows\system32\DRIVERS\kbdclass.sys PS/2 Compatible Mouse Device Kind Mouse Device Name PS/2 Compatible Mouse Vendor Microsoft Location plugged into PS/2 mouse port Driver Date 6-21-2006 Version 6.1.7600.16385 File C:\Windows\system32\DRIVERS\i8042prt.sys File C:\Windows\system32\DRIVERS\mouclass.sys HID-compliant mouse Device Kind Mouse Device Name HID-compliant mouse Vendor Primax Electronics Location USB Input Device Driver Date 6-21-2006 Version 6.1.7600.16385 File C:\Windows\system32\DRIVERS\mouhid.sys File C:\Windows\system32\DRIVERS\mouclass.sys Printers Fax Printer Port SHRFAX: Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 200 * 200 dpi Monochrome Status Unknown Driver Driver Name Microsoft Shared Fax Driver (v4.00) Driver Path C:\Windows\system32\spool\DRIVERS\x64\3\FXSDRV.DLL HP Deskjet 1510 series (Default Printer) Printer Port USB001 Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 600 * 300 dpi Color Status Unknown Driver Driver Name HP Deskjet 1510 series (v6.00) Driver Path C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdrv.dll Microsoft XPS Document Writer Printer Port XPSPort: Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 600 * 600 dpi Color Status Unknown Driver Driver Name Microsoft XPS Document Writer (v6.00) Driver Path C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdrv.dll Network You are connected to the internet External IP Address 92.19.160.140 Adapter Type Ethernet NetBIOS over TCP/IP Unknown NETBIOS Node Type Hybrid node Link Speed 0 Bps Computer Name NetBIOS Name HOME-PC DNS Name Home-PC Membership Part of workgroup Workgroup WORKGROUP Remote Desktop Disabled Console State Active Domain Home-PC WinInet Info LAN Connection Local system uses a local area network to connect to the Internet Local system has RAS to connect to the Internet Wi-Fi Info Wi-Fi not enabled WinHTTPInfo WinHTTPSessionProxyType No proxy Session Proxy Session Proxy Bypass Connect Retries 5 Connect Timeout (ms) 60,000 HTTP Version HTTP 1.1 Max Connects Per 1.0 Servers INFINITE Max Connects Per Servers INFINITE Max HTTP automatic redirects 10 Max HTTP status continue 10 Send Timeout (ms) 30,000 IEProxy Auto Detect No IEProxy Auto Config IEProxy IEProxy Bypass Default Proxy Config Access Type No proxy Default Config Proxy Default Config Proxy Bypass Sharing and Discovery Network Discovery Enabled File and Printer Sharing Enabled File and printer sharing service Enabled Simple File Sharing Enabled Administrative Shares Enabled Network access: Sharing and security model for local accounts Classic - local users authenticate as themselves Adapters List Network Shares Users C:\Users Current TCP Connections AvastSvc.exe (1400) Local 0.0.0.0:27275 LISTEN Local 127.0.0.1:27275 LISTEN Local 127.0.0.1:12465 LISTEN Local 127.0.0.1:12143 LISTEN Local 127.0.0.1:12119 LISTEN Local 192.168.1.243:49164 ESTABLISHED Remote 77.234.43.23:80 (Querying... ) (HTTP) Local 127.0.0.1:12993 LISTEN Local 127.0.0.1:12110 LISTEN Local 127.0.0.1:12025 LISTEN Local 192.168.1.243:49427 ESTABLISHED Remote 77.234.44.239:80 (Querying... ) (HTTP) Local 127.0.0.1:12995 LISTEN Local 127.0.0.1:12563 LISTEN C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (884) Local 192.168.1.243:49428 ESTABLISHED Remote 151.101.16.64:80 (Querying... ) (HTTP) Local 192.168.1.243:49429 ESTABLISHED Remote 151.101.16.64:80 (Querying... ) (HTTP) Local 192.168.1.243:49214 ESTABLISHED Remote 74.125.133.188:5228 (Querying... ) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (4508) Local 192.168.1.243:49418 CLOSE-WAIT Remote 54.235.133.151:443 (Querying... ) (HTTPS) Local 192.168.1.243:49419 CLOSE-WAIT Remote 54.235.133.151:443 (Querying... ) (HTTPS) Local 192.168.1.243:49420 CLOSE-WAIT Remote 54.235.133.151:443 (Querying... ) (HTTPS) C:\Users\Home\AppData\Roaming\Spotify\SpotifyWebHelper.exe (2480) Local 127.0.0.1:4370 LISTEN Local 127.0.0.1:4380 LISTEN lsass.exe (584) Local 0.0.0.0:49155 LISTEN mbamservice.exe (2492) Local 127.0.0.1:43227 LISTEN services.exe (536) Local 0.0.0.0:49178 LISTEN svchost.exe (1020) Local 0.0.0.0:49154 LISTEN svchost.exe (800) Local 0.0.0.0:135 (DCE) LISTEN svchost.exe (864) Local 0.0.0.0:49153 LISTEN System Process Local 192.168.1.243:49422 TIME-WAIT Remote 77.234.43.89:80 (Querying... ) (HTTP) Local 192.168.1.243:2869 TIME-WAIT Remote 192.168.1.1:49033 (Querying... ) Local 192.168.1.243:2869 TIME-WAIT Remote 192.168.1.1:49032 (Querying... ) Local 192.168.1.243:49426 TIME-WAIT Remote 5.45.58.176:80 (Querying... ) (HTTP) Local 192.168.1.243:49423 TIME-WAIT Remote 5.45.58.175:80 (Querying... ) (HTTP) System Process Local 0.0.0.0:445 (Windows shares) LISTEN Local 0.0.0.0:2869 LISTEN Local 0.0.0.0:5357 LISTEN Local 0.0.0.0:10243 LISTEN Local 192.168.1.243:139 (NetBIOS session service) LISTEN wininit.exe (488) Local 0.0.0.0:49152 LISTEN wmpnetwk.exe (2912) Local 0.0.0.0:554 LISTEN Generated with Speccy v1.30.730