Summary Operating System Windows 10 Pro 64-bit CPU Intel Core 2 Duo E4600 @ 2.40GHz 36 °C Conroe 65nm Technology RAM 4.00GB Dual-Channel DDR2 @ 399MHz (6-6-6-18) Motherboard ASUSTeK Computer INC. P5KPL-VM (Socket 775) 27 °C Graphics Acer X203W (1680x1050@60Hz) 1024MB ATI AMD Radeon HD 5450 (MSI) 58 °C Storage 232GB Seagate ST3250410AS ATA Device (SATA) 38 °C 279GB Maxtor 3200 USB Device (USB) 14GB Kingston DataTraveler 2.0 USB Device (USB) 0B Generic USB SD Reader (USB) 0B Generic USB CF Reader (USB) 0B Generic USB SM Reader (USB) 0B Generic USB MS Reader (USB) Optical Drives No optical disk drives detected Audio Realtek High Definition Audio Operating System Windows 10 Pro 64-bit Computer type: Desktop Installation Date: 11/01/2018 09:59:59 Windows Security Center User Account Control (UAC) Enabled Notify level 2 - Default Firewall Enabled Windows Update AutoUpdate Download Automatically and Install at Set Scheduled time Schedule Frequency Every Day Schedule Time Windows Defender Windows Defender Disabled Antivirus Avast Antivirus Antivirus Enabled Virus Signature Database Up to date Windows Defender Antivirus Disabled Virus Signature Database Up to date .NET Frameworks installed v4.7 Full v4.7 Client v3.5 SP1 v3.0 SP2 v2.0 SP2 Internet Explorer Version 11.248.16299.0 PowerShell Version 5.1.16299.15 Java Java Runtime Environment Path C:\Program Files (x86)\Java\jre1.8.0_161\bin\java.exe Version 8.0 Update 161 Build 12 Java Runtime Environment Path C:\Program Files\Java\jre1.8.0_161\bin\java.exe Version 8.0 Update 161 Build 12 Environment Variables USERPROFILE C:\Users\Philip SystemRoot C:\WINDOWS User Variables MOZ_PLUGIN_PATH C:\Program Files\Tracker Software\PDF Viewer\Win32\ OneDrive C:\Users\Philip\OneDrive Path C:\Users\Philip\AppData\Local\Microsoft\WindowsApps TEMP C:\Users\Philip\AppData\Local\Temp TMP C:\Users\Philip\AppData\Local\Temp Machine Variables asl.log Destination=file ComSpec C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK NO NUMBER_OF_PROCESSORS 2 OS Windows_NT Path C:\ProgramData\Oracle\Java\javapath C:\Program Files (x86)\Common Files\ArcSoft\Bin C:\WINDOWS\system32 C:\WINDOWS C:\WINDOWS\System32\Wbem C:\WINDOWS\System32\WindowsPowerShell\v1.0\ C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static C:\Program Files (x86)\Calibre2\ C:\Program Files (x86)\Skype\Phone\ C:\Program Files (x86)\AMD\ATI.ACE\Core-Static PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE AMD64 PROCESSOR_IDENTIFIER Intel64 Family 6 Model 15 Stepping 13, GenuineIntel PROCESSOR_LEVEL 6 PROCESSOR_REVISION 0f0d PSModulePath C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\ TEMP C:\WINDOWS\TEMP TMP C:\WINDOWS\TEMP USERNAME SYSTEM windir C:\WINDOWS Power Profile Active power scheme High performance Hibernation Enabled Turn Off Monitor after: (On AC Power) 15 min Turn Off Hard Disk after: (On AC Power) Never Suspend after: (On AC Power) Never Screen saver Disabled Uptime Current Session Current Time 02/03/2018 15:08:10 Current Uptime 22,184 sec (0 d, 06 h, 09 m, 44 s) Last Boot Time 02/03/2018 08:58:26 Services Running AMD External Events Utility Running Apple Mobile Device Service Running Application Host Helper Service Running Application Information Running ArcSoft Connect Daemon Running aswbIDSAgent Running Avast Antivirus Running Avast Cleanup Premium Running Background Intelligent Transfer Service Running Background Tasks Infrastructure Service Running Base Filtering Engine Running Bonjour Service Running Canon Inkjet Printer/Scanner/Fax Extended Survey Program Running CNG Key Isolation Running COM+ Event System Running Computer Browser Running Connected Devices Platform Service Running Connected Devices Platform User Service_9a25fe Running Contact Data_9a25fe Running CoreMessaging Running Credential Manager Running Cryptographic Services Running Data Usage Running DbxSvc Running DCOM Server Process Launcher Running Device Association Service Running DHCP Client Running Diagnostic Policy Service Running Diagnostic Service Host Running DNS Client Running Downloaded Maps Manager Running Function Discovery Provider Host Running Function Discovery Resource Publication Running Geolocation Service Running GladFileMonSvc Running Group Policy Client Running HomeGroup Provider Running HP Support Solutions Framework Service Running Human Interface Device Service Running IKE and AuthIP IPsec Keying Modules Running Local Session Manager Running Malwarebytes Service Running Message Queuing Running Microsoft Account Sign-in Assistant Running Microsoft Office ClickToRun Service Running Microsoft Passport Running Microsoft Passport Container Running Net.Msmq Listener Adapter Running Net.Pipe Listener Adapter Running Net.Tcp Listener Adapter Running Net.Tcp Port Sharing Service Running Network Connected Devices Auto-Setup Running Network Connection Broker Running Network Connections Running Network List Service Running Network Location Awareness Running Network Store Interface Service Running Office Software Protection Platform Running Payments and NFC/SE Manager Running Peer Name Resolution Protocol Running Peer Networking Grouping Running Peer Networking Identity Manager Running Plug and Play Running Power Running Print Spooler Running Program Compatibility Assistant Service Running Remote Access Connection Manager Running Remote Procedure Call (RPC) Running RPC Endpoint Mapper Running Samsung Drive Manager Service Running Secunia PSI Agent Running Secunia Update Agent Running Secure Socket Tunneling Protocol Service Running Security Accounts Manager Running Security Center Running Server Running Shell Hardware Detection Running SSDP Discovery Running State Repository Service Running Storage Service Running Superfetch Running Sync Host_9a25fe Running System Event Notification Service Running System Events Broker Running Task Scheduler Running TCP/IP NetBIOS Helper Running TeamViewer 10 Running Themes Running TigerService Running Time Broker Running UPnP Device Host Running User Data Access_9a25fe Running User Data Storage_9a25fe Running User Manager Running User Profile Service Running Web Account Manager Running Windows Audio Running Windows Audio Endpoint Builder Running Windows Backup Running Windows Connect Now - Config Registrar Running Windows Connection Manager Running Windows Defender Firewall Running Windows Defender Security Center Service Running Windows Event Log Running Windows Font Cache Service Running Windows Image Acquisition (WIA) Running Windows License Manager Service Running Windows Management Instrumentation Running Windows Media Player Network Sharing Service Running Windows Process Activation Service Running Windows Push Notifications System Service Running Windows Push Notifications User Service_9a25fe Running Windows Search Running Windows Time Running WinHTTP Web Proxy Auto-Discovery Service Running WMI Performance Adapter Running Workstation Running World Wide Web Publishing Service Stopped ActiveX Installer (AxInstSV) Stopped Adobe Flash Player Update Service Stopped AllJoyn Router Service Stopped App Readiness Stopped Application Identity Stopped Application Layer Gateway Service Stopped Application Management Stopped AppX Deployment Service (AppXSVC) Stopped ASP.NET State Service Stopped AssignedAccessManager Service Stopped Auto Time Zone Updater Stopped BitLocker Drive Encryption Service Stopped Block Level Backup Engine Service Stopped Bluetooth Handsfree Service Stopped Bluetooth Support Service Stopped BranchCache Stopped Capability Access Manager Service Stopped Certificate Propagation Stopped Client License Service (ClipSVC) Stopped COM+ System Application Stopped Connected User Experiences and Telemetry Stopped Data Sharing Service Stopped Delivery Optimization Stopped Device Install Service Stopped Device Management Enrollment Service Stopped Device Setup Manager Stopped DevicesFlow_9a25fe Stopped DevQuery Background Discovery Broker Stopped Diagnostic Execution Service Stopped Diagnostic System Host Stopped Distributed Link Tracking Client Stopped Distributed Transaction Coordinator Stopped dmwappushsvc Stopped Dropbox Update Service (dbupdate) Stopped Dropbox Update Service (dbupdatem) Stopped Embedded Mode Stopped Encrypting File System (EFS) Stopped Enterprise App Management Service Stopped Extensible Authentication Protocol Stopped Fax Stopped File History Service Stopped Google Update Service (gupdate) Stopped Google Update Service (gupdatem) Stopped GraphicsPerfSvc Stopped HomeGroup Listener Stopped HV Host Service Stopped Hyper-V Data Exchange Service Stopped Hyper-V Guest Service Interface Stopped Hyper-V Guest Shutdown Service Stopped Hyper-V Heartbeat Service Stopped Hyper-V PowerShell Direct Service Stopped Hyper-V Remote Desktop Virtualization Service Stopped Hyper-V Time Synchronization Service Stopped Hyper-V Volume Shadow Copy Requestor Stopped Infrared monitor service Stopped Interactive Services Detection Stopped Internet Connection Sharing (ICS) Stopped IP Helper Stopped IP Translation Configuration Service Stopped iPod Service Stopped IPsec Policy Agent Stopped KtmRm for Distributed Transaction Coordinator Stopped Link-Layer Topology Discovery Mapper Stopped Local Profile Assistant Service Stopped MessagingService_9a25fe Stopped Microsoft Diagnostics Hub Standard Collector Service Stopped Microsoft App-V Client Stopped Microsoft iSCSI Initiator Service Stopped Microsoft SharePoint Workspace Audit Service Stopped Microsoft Software Shadow Copy Provider Stopped Microsoft Storage Spaces SMP Stopped Microsoft Windows SMS Router Service. Stopped Mozilla Maintenance Service Stopped Natural Authentication Stopped Netlogon Stopped Network Connectivity Assistant Stopped Network Setup Service Stopped Office 64 Source Engine Stopped Offline Files Stopped Optimize drives Stopped Performance Counter DLL Host Stopped Performance Logs & Alerts Stopped Phone Service Stopped PNRP Machine Name Publication Service Stopped Portable Device Enumerator Service Stopped Printer Extensions and Notifications Stopped PrintWorkflow_9a25fe Stopped Problem Reports and Solutions Control Panel Support Stopped Quality Windows Audio Video Experience Stopped Radio Management Service Stopped Remote Access Auto Connection Manager Stopped Remote Desktop Configuration Stopped Remote Desktop Services Stopped Remote Desktop Services UserMode Port Redirector Stopped Remote Packet Capture Protocol v.0 (experimental) Stopped Remote Procedure Call (RPC) Locator Stopped Remote Registry Stopped Retail Demo Service Stopped Routing and Remote Access Stopped Secondary Logon Stopped Sensor Data Service Stopped Sensor Monitoring Service Stopped Sensor Service Stopped Shared PC Account Manager Stopped Skype Updater Stopped Smart Card Stopped Smart Card Device Enumeration Service Stopped Smart Card Removal Policy Stopped SNMP Trap Stopped Software Protection Stopped Spatial Data Service Stopped Spot Verifier Stopped Still Image Acquisition Events Stopped Storage Tiers Management Stopped Telephony Stopped Tile Data model server Stopped Touch Keyboard and Handwriting Panel Service Stopped Update Orchestrator Service Stopped User Experience Virtualization Service Stopped Virtual Disk Stopped Volume Shadow Copy Stopped W3C Logging Service Stopped WalletService Stopped WarpJITSvc Stopped WebClient Stopped Wi-Fi Direct Services Connection Manager Service Stopped Windows Biometric Service Stopped Windows Camera Frame Server Stopped Windows Defender Advanced Threat Protection Service Stopped Windows Defender Antivirus Network Inspection Service Stopped Windows Defender Antivirus Service Stopped Windows Encryption Provider Host Service Stopped Windows Error Reporting Service Stopped Windows Event Collector Stopped Windows Insider Service Stopped Windows Installer Stopped Windows Mobile Hotspot Service Stopped Windows Modules Installer Stopped Windows Perception Service Stopped Windows Presentation Foundation Font Cache 3.0.0.0 Stopped Windows PushToInstall Service Stopped Windows Remote Management (WS-Management) Stopped Windows Store Install Service Stopped Windows Update Stopped Wired AutoConfig Stopped WLAN AutoConfig Stopped Work Folders Stopped WWAN AutoConfig Stopped Xbox Accessory Management Service Stopped Xbox Game Monitoring Stopped Xbox Live Auth Manager Stopped Xbox Live Game Save Stopped Xbox Live Networking Service TimeZone TimeZone GMT +1:00 Hours Language English (United Kingdom) Location United Kingdom Format English (United Kingdom) Currency Ł Date Format dd/MM/yyyy Time Format HH:mm:ss Scheduler 02/03/2018 15:21; Adobe Flash Player Updater 02/03/2018 15:46; DropboxUpdateTaskMachineUA 02/03/2018 16:01; GoogleUpdateTaskMachineUA 02/03/2018 20:28; SafeZone scheduled Autoupdate 1458723738 02/03/2018 20:46; DropboxUpdateTaskMachineCore 02/03/2018 22:01; GoogleUpdateTaskMachineCore 03/03/2018 14:12; OneDrive Standalone Update Task-S-1-5-21-1729900609-2719036050-2851517930-1000 01/04/2018 11:56; Driver Easy Scheduled Scan Hotfixes Installed 26/02/2018 Feature update to Windows 10, version 1709 Install the latest update for Windows 10: the Windows 10 Fall Creators Update. 26/02/2018 2018-02 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4074588) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. 15/02/2018 Update for Microsoft PowerPoint 2010 (KB4011187) 64-Bit Edition Microsoft has released an update for Microsoft PowerPoint 2010 64-Bit Edition. This update provides the latest fixes to Microsoft PowerPoint 2010 64-Bit Edition. Additionally, this update contains stability and performance improvements. 15/02/2018 Windows Malicious Software Removal Tool x64 - February 2018 (KB890830) After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product. 15/02/2018 Security Update for Microsoft Office 2010 (KB4011707) 64-Bit Edition A security vulnerability exists in Microsoft Office 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. 15/02/2018 Security Update for Microsoft Office 2010 (KB3114874) 64-Bit Edition A security vulnerability exists in Microsoft Office 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. 15/02/2018 Security Update for Microsoft Outlook 2010 (KB4011711) 64-Bit Edition A security vulnerability exists in Microsoft Outlook 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. 15/02/2018 2018-02 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4074588) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. 07/02/2018 2018-02 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4074595) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. 01/02/2018 SAMSUNG Electronics Co., Ltd. - Modem - 5/15/2017 12:00:00 AM - 2.12.5.0 SAMSUNG Electronics Co., Ltd. Modem driver update released in May 2017 01/02/2018 SAMSUNG Electronics Co., Ltd. - Other hardware - SAMSUNG Mobile MTP Device SAMSUNG Electronics Co., Ltd. Other hardware software update released in February, 2012 01/02/2018 2018-01 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4058258) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. 01/02/2018 SAMSUNG Electronics Co., Ltd. - USB - 5/15/2017 12:00:00 AM - 2.12.5.0 SAMSUNG Electronics Co., Ltd. USB driver update released in May 2017 30/01/2018 Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.261.499.0) Install this update to revise the definition files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed. 30/01/2018 Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.261.499.0) Install this update to revise the definition files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed. 30/01/2018 Feature update to Windows 10, version 1709 Install the latest update for Windows 10: the Windows 10 Fall Creators Update. 30/01/2018 2018-01 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4056892) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. 29/01/2018 French LanguagePack - Windows 10 Version 1709 for x64-based Systems - (KB4046355) [fr-FR_LP] After you install this language pack, you can make it the display language.Swipe in from the right edge of the screen (if you're using a mouse, point to the upper-right corner of the screen and move the mouse pointer down) and tap or click "Search." Enter "language", tap or click "language" and then tap or click "Add a language to this device." Select the installedlanguage pack, then tap or click "Move up" until it's at the top of the list. Sign out and then sign back in to finish. 11/01/2018 Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - January 2018 (KB890830) After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product. 11/01/2018 2018-01 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4056887) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. 11/01/2018 Security Update for Microsoft Word 2010 (KB4011659) 64-Bit Edition A security vulnerability exists in Microsoft Word 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. 11/01/2018 Security Update for Microsoft Outlook 2010 (KB4011273) 64-Bit Edition A security vulnerability exists in Microsoft Outlook 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. 11/01/2018 Security Update for Microsoft Office 2010 (KB4011611) 64-Bit Edition A security vulnerability exists in Microsoft Office 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. 11/01/2018 Security Update for Microsoft Excel 2010 (KB4011660) 64-Bit Edition A security vulnerability exists in Microsoft Excel 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. 11/01/2018 Security Update for Microsoft Office 2010 (KB4011610) 64-Bit Edition A security vulnerability exists in Microsoft Office 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. 11/01/2018 2018-01 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4056892) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. 11/01/2018 Feature update to Windows 10, version 1709 Install the latest update for Windows 10: the Windows 10 Fall Creators Update. Not Installed System Folders Application Data C:\ProgramData Cookies C:\Users\Philip\AppData\Local\Microsoft\Windows\INetCookies Desktop D:\Desktop Documents C:\Users\Public\Documents Fonts C:\WINDOWS\Fonts Global Favorites D:\Favorites Internet History C:\Users\Philip\AppData\Local\Microsoft\Windows\History Local Application Data C:\Users\Philip\AppData\Local Music C:\Users\Public\Music Path for burning CD C:\Users\Philip\AppData\Local\Microsoft\Windows\Burn\Burn Physical Desktop D:\Desktop Pictures C:\Users\Public\Pictures Program Files C:\Program Files Public Desktop C:\Users\Public\Desktop Start Menu C:\ProgramData\Microsoft\Windows\Start Menu Start Menu Programs C:\ProgramData\Microsoft\Windows\Start Menu\Programs Startup C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Templates C:\ProgramData\Microsoft\Windows\Templates Temporary Internet Files C:\Users\Philip\AppData\Local\Microsoft\Windows\INetCache User Favorites D:\Favorites Videos C:\Users\Public\Videos Windows Directory C:\WINDOWS Windows/System C:\WINDOWS\system32 Process List ABRTMon.exe Process ID 11660 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Clarus\Samsung Drive Manager\ABRTMon.exe Memory Usage 4.08 MB Peak Memory Usage 8.29 MB ACService.exe Process ID 3208 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe Memory Usage 5.23 MB Peak Memory Usage 7.29 MB AppleMobileDeviceService.exe Process ID 3220 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe Memory Usage 8.02 MB Peak Memory Usage 13 MB ApplicationFrameHost.exe Process ID 1652 User Philip Domain PHILIP-PC Path C:\Windows\System32\ApplicationFrameHost.exe Memory Usage 29 MB Peak Memory Usage 33 MB aswidsagenta.exe Process ID 5400 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe Memory Usage 36 MB Peak Memory Usage 42 MB atieclxx.exe Process ID 444 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\atieclxx.exe Memory Usage 8.75 MB Peak Memory Usage 10 MB atiesrxx.exe Process ID 10600 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\atiesrxx.exe Memory Usage 4.71 MB Peak Memory Usage 6.24 MB audiodg.exe Process ID 5696 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\audiodg.exe Memory Usage 12 MB Peak Memory Usage 13 MB AvastSvc.exe Process ID 2472 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\AVAST Software\Avast\AvastSvc.exe Memory Usage 186 MB Peak Memory Usage 354 MB AvastUI.exe Process ID 12252 User Philip Domain PHILIP-PC Path C:\Program Files\AVAST Software\Avast\AvastUI.exe Memory Usage 35 MB Peak Memory Usage 41 MB backgroundTaskHost.exe Process ID 10472 User Philip Domain PHILIP-PC Path C:\Windows\System32\backgroundTaskHost.exe Memory Usage 21 MB Peak Memory Usage 47 MB CCC.exe Process ID 10212 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe Memory Usage 27 MB Peak Memory Usage 134 MB CompatTelRunner.exe Process ID 5932 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\CompatTelRunner.exe Memory Usage 6.16 MB Peak Memory Usage 6.16 MB conhost.exe Process ID 1568 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\conhost.exe Memory Usage 7.52 MB Peak Memory Usage 7.52 MB conhost.exe Process ID 3952 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\conhost.exe Memory Usage 4.90 MB Peak Memory Usage 6.05 MB csrss.exe Process ID 568 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\csrss.exe Memory Usage 4.84 MB Peak Memory Usage 5.42 MB csrss.exe Process ID 10592 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\csrss.exe Memory Usage 5.29 MB Peak Memory Usage 19 MB dasHost.exe Process ID 2344 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\dasHost.exe Memory Usage 15 MB Peak Memory Usage 17 MB DbxSvc.exe Process ID 3244 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\DbxSvc.exe Memory Usage 4.78 MB Peak Memory Usage 6.49 MB dllhost.exe Process ID 7180 User Philip Domain PHILIP-PC Path C:\Windows\System32\dllhost.exe Memory Usage 2.89 MB Peak Memory Usage 11 MB dllhost.exe Process ID 8128 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\dllhost.exe Memory Usage 8.79 MB Peak Memory Usage 10 MB DriverUpdater.exe Process ID 6024 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Auslogics\Driver Updater\DriverUpdater.exe Memory Usage 6.91 MB Peak Memory Usage 51 MB Dropbox.exe Process ID 9928 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Dropbox\Client\Dropbox.exe Memory Usage 3.91 MB Peak Memory Usage 11 MB Dropbox.exe Process ID 7692 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Dropbox\Client\Dropbox.exe Memory Usage 2.85 MB Peak Memory Usage 8.32 MB Dropbox.exe Process ID 10448 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Dropbox\Client\Dropbox.exe Memory Usage 99 MB Peak Memory Usage 176 MB dwm.exe Process ID 2460 User DWM-2 Domain Window Manager Path C:\Windows\System32\dwm.exe Memory Usage 38 MB Peak Memory Usage 62 MB explorer.exe Process ID 12256 User Philip Domain PHILIP-PC Path C:\Windows\explorer.exe Memory Usage 82 MB Peak Memory Usage 116 MB firefox.exe Process ID 1260 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Mozilla Firefox\firefox.exe Memory Usage 190 MB Peak Memory Usage 339 MB firefox.exe Process ID 6072 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Mozilla Firefox\firefox.exe Memory Usage 146 MB Peak Memory Usage 299 MB firefox.exe Process ID 188 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Mozilla Firefox\firefox.exe Memory Usage 166 MB Peak Memory Usage 384 MB firefox.exe Process ID 3672 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Mozilla Firefox\firefox.exe Memory Usage 522 MB Peak Memory Usage 920 MB firefox.exe Process ID 4716 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Mozilla Firefox\firefox.exe Memory Usage 416 MB Peak Memory Usage 533 MB firefox.exe Process ID 8496 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Mozilla Firefox\firefox.exe Memory Usage 279 MB Peak Memory Usage 389 MB firefox.exe Process ID 8508 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Mozilla Firefox\firefox.exe Memory Usage 37 MB Peak Memory Usage 54 MB fontdrvhost.exe Process ID 436 User UMFD-2 Domain Font Driver Host Path C:\Windows\System32\fontdrvhost.exe Memory Usage 9.17 MB Peak Memory Usage 33 MB fontdrvhost.exe Process ID 888 User UMFD-0 Domain Font Driver Host Path C:\Windows\System32\fontdrvhost.exe Memory Usage 2.73 MB Peak Memory Usage 4.59 MB GladFileMonSvc.exe Process ID 3268 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladFileMonSvc.exe Memory Usage 5.93 MB Peak Memory Usage 9.62 MB GoogleCrashHandler.exe Process ID 6756 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe Memory Usage 40 KB Peak Memory Usage 6.77 MB GoogleCrashHandler64.exe Process ID 5444 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe Memory Usage 8.00 KB Peak Memory Usage 6.16 MB HPSupportSolutionsFrameworkService.exe Process ID 9940 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe Memory Usage 21 MB Peak Memory Usage 47 MB ijplmsvc.exe Process ID 3300 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe Memory Usage 5.35 MB Peak Memory Usage 6.27 MB ipoint.exe Process ID 11244 User Philip Domain PHILIP-PC Path C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe Memory Usage 2.45 MB Peak Memory Usage 15 MB itype.exe Process ID 7348 User Philip Domain PHILIP-PC Path C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe Memory Usage 2.33 MB Peak Memory Usage 15 MB lsass.exe Process ID 764 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\lsass.exe Memory Usage 16 MB Peak Memory Usage 17 MB Main.exe Process ID 8888 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Auslogics\BoostSpeed\Main.exe Memory Usage 13 MB Peak Memory Usage 869 MB Maps.exe Process ID 4712 User Philip Domain PHILIP-PC Path C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1711.10477.0_x64__8wekyb3d8bbwe\Maps.exe Memory Usage 70 MB Peak Memory Usage 146 MB MBAMService.exe Process ID 3356 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe Memory Usage 23 MB Peak Memory Usage 47 MB mbamtray.exe Process ID 7644 User Philip Domain PHILIP-PC Path C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe Memory Usage 18 MB Peak Memory Usage 31 MB mDNSResponder.exe Process ID 3228 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\Bonjour\mDNSResponder.exe Memory Usage 5.81 MB Peak Memory Usage 6.50 MB Memory Compression Process ID 1836 User SYSTEM Domain NT AUTHORITY Memory Usage 44 MB Peak Memory Usage 240 MB Microsoft.Photos.exe Process ID 10716 User Philip Domain PHILIP-PC Path C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18021.12420.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe Memory Usage 67 MB Peak Memory Usage 403 MB MOM.exe Process ID 9452 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe Memory Usage 5.99 MB Peak Memory Usage 34 MB mqsvc.exe Process ID 3416 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\System32\mqsvc.exe Memory Usage 9.91 MB Peak Memory Usage 13 MB MSASCuiL.exe Process ID 10000 User Philip Domain PHILIP-PC Path C:\Program Files\Windows Defender\MSASCuiL.exe Memory Usage 8.75 MB Peak Memory Usage 9.59 MB officeclicktorun.exe Process ID 3236 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe Memory Usage 23 MB Peak Memory Usage 28 MB OSPPSVC.EXE Process ID 3536 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE Memory Usage 12 MB Peak Memory Usage 13 MB PrintIsolationHost.exe Process ID 10292 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\PrintIsolationHost.exe Memory Usage 8.13 MB Peak Memory Usage 8.13 MB psi_tray.exe Process ID 8668 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\Secunia\PSI\psi_tray.exe Memory Usage 6.34 MB Peak Memory Usage 7.31 MB psia.exe Process ID 9004 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Secunia\PSI\psia.exe Memory Usage 23 MB Peak Memory Usage 28 MB RuntimeBroker.exe Process ID 11148 User Philip Domain PHILIP-PC Path C:\Windows\System32\RuntimeBroker.exe Memory Usage 24 MB Peak Memory Usage 29 MB RuntimeBroker.exe Process ID 7308 User Philip Domain PHILIP-PC Path C:\Windows\System32\RuntimeBroker.exe Memory Usage 25 MB Peak Memory Usage 31 MB RuntimeBroker.exe Process ID 6844 User Philip Domain PHILIP-PC Path C:\Windows\System32\RuntimeBroker.exe Memory Usage 7.54 MB Peak Memory Usage 15 MB RuntimeBroker.exe Process ID 10268 User Philip Domain PHILIP-PC Path C:\Windows\System32\RuntimeBroker.exe Memory Usage 26 MB Peak Memory Usage 28 MB RuntimeBroker.exe Process ID 2552 User Philip Domain PHILIP-PC Path C:\Windows\System32\RuntimeBroker.exe Memory Usage 9.47 MB Peak Memory Usage 41 MB RuntimeBroker.exe Process ID 4440 User Philip Domain PHILIP-PC Path C:\Windows\System32\RuntimeBroker.exe Memory Usage 18 MB Peak Memory Usage 21 MB SearchFilterHost.exe Process ID 392 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\SearchFilterHost.exe Memory Usage 11 MB Peak Memory Usage 12 MB SearchIndexer.exe Process ID 4064 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\SearchIndexer.exe Memory Usage 37 MB Peak Memory Usage 50 MB SearchProtocolHost.exe Process ID 7380 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\SearchProtocolHost.exe Memory Usage 17 MB Peak Memory Usage 18 MB SearchUI.exe Process ID 11620 User Philip Domain PHILIP-PC Path C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Memory Usage 22 MB Peak Memory Usage 165 MB SecurityHealthService.exe Process ID 3484 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\SecurityHealthService.exe Memory Usage 14 MB Peak Memory Usage 16 MB services.exe Process ID 724 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\services.exe Memory Usage 8.76 MB Peak Memory Usage 11 MB SettingSyncHost.exe Process ID 7124 User Philip Domain PHILIP-PC Path C:\Windows\System32\SettingSyncHost.exe Memory Usage 3.15 MB Peak Memory Usage 22 MB ShellExperienceHost.exe Process ID 6384 User Philip Domain PHILIP-PC Path C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Memory Usage 60 MB Peak Memory Usage 114 MB sihost.exe Process ID 5052 User Philip Domain PHILIP-PC Path C:\Windows\System32\sihost.exe Memory Usage 22 MB Peak Memory Usage 25 MB SkypeHost.exe Process ID 7372 User Philip Domain PHILIP-PC Path C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1807.264.0_x64__kzf8qxf38zg5c\SkypeHost.exe Memory Usage 19 MB Peak Memory Usage 24 MB smartscreen.exe Process ID 8296 User Philip Domain PHILIP-PC Path C:\Windows\System32\smartscreen.exe Memory Usage 33 MB Peak Memory Usage 33 MB smss.exe Process ID 384 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\smss.exe Memory Usage 980 KB Peak Memory Usage 1.23 MB SMSvcHost.exe Process ID 2224 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe Memory Usage 13 MB Peak Memory Usage 16 MB SMSvcHost.exe Process ID 3444 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe Memory Usage 15 MB Peak Memory Usage 23 MB Speccy64.exe Process ID 7068 User Philip Domain PHILIP-PC Path C:\Program Files\Speccy\Speccy64.exe Memory Usage 40 MB Peak Memory Usage 40 MB splwow64.exe Process ID 2188 User Philip Domain PHILIP-PC Path C:\Windows\splwow64.exe Memory Usage 8.65 MB Peak Memory Usage 16 MB spoolsv.exe Process ID 2780 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\spoolsv.exe Memory Usage 16 MB Peak Memory Usage 20 MB sua.exe Process ID 9984 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Secunia\PSI\sua.exe Memory Usage 4.43 MB Peak Memory Usage 4.80 MB svchost.exe Process ID 1244 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5.41 MB Peak Memory Usage 10 MB svchost.exe Process ID 1292 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 11 MB Peak Memory Usage 21 MB svchost.exe Process ID 1408 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.54 MB Peak Memory Usage 9.09 MB svchost.exe Process ID 1516 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5.07 MB Peak Memory Usage 8.20 MB svchost.exe Process ID 1656 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.84 MB Peak Memory Usage 7.43 MB svchost.exe Process ID 1724 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 9.86 MB Peak Memory Usage 11 MB svchost.exe Process ID 1752 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 76 MB Peak Memory Usage 101 MB svchost.exe Process ID 1760 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.39 MB Peak Memory Usage 7.88 MB svchost.exe Process ID 1768 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5.16 MB Peak Memory Usage 5.85 MB svchost.exe Process ID 1776 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.64 MB Peak Memory Usage 7.73 MB svchost.exe Process ID 1880 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 8.22 MB Peak Memory Usage 9.35 MB svchost.exe Process ID 1932 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.47 MB Peak Memory Usage 8.48 MB svchost.exe Process ID 1940 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.78 MB Peak Memory Usage 11 MB svchost.exe Process ID 1948 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 8.16 MB Peak Memory Usage 8.58 MB svchost.exe Process ID 1240 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.72 MB Peak Memory Usage 7.18 MB svchost.exe Process ID 2104 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 13 MB Peak Memory Usage 14 MB svchost.exe Process ID 2112 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 4.14 MB Peak Memory Usage 9.20 MB svchost.exe Process ID 2132 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.97 MB Peak Memory Usage 13 MB svchost.exe Process ID 6272 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 12 MB Peak Memory Usage 13 MB svchost.exe Process ID 7776 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 16 MB Peak Memory Usage 17 MB svchost.exe Process ID 2880 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.95 MB Peak Memory Usage 14 MB svchost.exe Process ID 6608 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 17 MB Peak Memory Usage 19 MB svchost.exe Process ID 8640 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 4.91 MB Peak Memory Usage 6.82 MB svchost.exe Process ID 1664 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 12 MB Peak Memory Usage 14 MB svchost.exe Process ID 10308 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 11 MB Peak Memory Usage 12 MB svchost.exe Process ID 9864 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.15 MB Peak Memory Usage 10 MB svchost.exe Process ID 5452 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 8.70 MB Peak Memory Usage 11 MB svchost.exe Process ID 12064 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 12 MB Peak Memory Usage 14 MB svchost.exe Process ID 5432 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 8.87 MB Peak Memory Usage 9.68 MB svchost.exe Process ID 4104 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.39 MB Peak Memory Usage 8.91 MB svchost.exe Process ID 4556 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.58 MB Peak Memory Usage 7.18 MB svchost.exe Process ID 4268 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 4.68 MB Peak Memory Usage 5.49 MB svchost.exe Process ID 12112 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 4.35 MB Peak Memory Usage 6.83 MB svchost.exe Process ID 3936 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 8.59 MB Peak Memory Usage 8.64 MB svchost.exe Process ID 2820 User Philip Domain PHILIP-PC Path C:\Windows\System32\svchost.exe Memory Usage 10 MB Peak Memory Usage 23 MB svchost.exe Process ID 8532 User Philip Domain PHILIP-PC Path C:\Windows\System32\svchost.exe Memory Usage 35 MB Peak Memory Usage 38 MB svchost.exe Process ID 3636 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 11 MB Peak Memory Usage 13 MB svchost.exe Process ID 3604 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 18 MB Peak Memory Usage 20 MB svchost.exe Process ID 9748 User Philip Domain PHILIP-PC Path C:\Windows\System32\svchost.exe Memory Usage 28 MB Peak Memory Usage 40 MB svchost.exe Process ID 3112 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.37 MB Peak Memory Usage 7.51 MB svchost.exe Process ID 8112 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.32 MB Peak Memory Usage 7.72 MB svchost.exe Process ID 3528 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.39 MB Peak Memory Usage 8.01 MB svchost.exe Process ID 3472 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5.57 MB Peak Memory Usage 6.60 MB svchost.exe Process ID 2376 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 12 MB Peak Memory Usage 21 MB svchost.exe Process ID 904 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 3.38 MB Peak Memory Usage 3.91 MB svchost.exe Process ID 3408 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.73 MB Peak Memory Usage 11 MB svchost.exe Process ID 8728 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 19 MB Peak Memory Usage 22 MB svchost.exe Process ID 3340 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5.94 MB Peak Memory Usage 7.54 MB svchost.exe Process ID 3260 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 30 MB Peak Memory Usage 63 MB svchost.exe Process ID 3252 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 12 MB Peak Memory Usage 12 MB svchost.exe Process ID 964 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 24 MB Peak Memory Usage 25 MB svchost.exe Process ID 12060 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 13 MB Peak Memory Usage 15 MB svchost.exe Process ID 3200 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.77 MB Peak Memory Usage 11 MB svchost.exe Process ID 2936 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.26 MB Peak Memory Usage 7.78 MB svchost.exe Process ID 2920 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5.93 MB Peak Memory Usage 6.54 MB svchost.exe Process ID 2232 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 9.60 MB Peak Memory Usage 11 MB svchost.exe Process ID 3052 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.28 MB Peak Memory Usage 8.09 MB svchost.exe Process ID 3000 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5.24 MB Peak Memory Usage 7.18 MB svchost.exe Process ID 1004 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 14 MB Peak Memory Usage 16 MB svchost.exe Process ID 2480 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 12 MB Peak Memory Usage 13 MB svchost.exe Process ID 324 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.65 MB Peak Memory Usage 7.36 MB svchost.exe Process ID 1056 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 11 MB Peak Memory Usage 11 MB svchost.exe Process ID 2360 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 27 MB Peak Memory Usage 118 MB svchost.exe Process ID 800 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 21 MB Peak Memory Usage 27 MB svchost.exe Process ID 1064 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 8.97 MB Peak Memory Usage 9.74 MB svchost.exe Process ID 980 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 15 MB Peak Memory Usage 15 MB svchost.exe Process ID 10048 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 6.85 MB Peak Memory Usage 6.85 MB svchost.exe Process ID 1088 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 18 MB Peak Memory Usage 24 MB svchost.exe Process ID 2332 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 8.06 MB Peak Memory Usage 9.08 MB svchost.exe Process ID 1184 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 13 MB Peak Memory Usage 16 MB svchost.exe Process ID 1200 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 2.73 MB Peak Memory Usage 6.06 MB svchost.exe Process ID 2320 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5.34 MB Peak Memory Usage 6.11 MB svchost.exe Process ID 1220 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 7.19 MB Peak Memory Usage 11 MB svchost.exe Process ID 2300 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 15 MB Peak Memory Usage 16 MB svchost.exe Process ID 2272 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 16 MB Peak Memory Usage 17 MB svchost.exe Process ID 2216 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 9.98 MB Peak Memory Usage 13 MB System Process ID 4 Memory Usage 1.58 MB Peak Memory Usage 4.89 MB System Idle Process Process ID 0 SZDrvSvc.exe Process ID 3540 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe Memory Usage 5.61 MB Peak Memory Usage 6.70 MB taskhostw.exe Process ID 10060 User Philip Domain PHILIP-PC Path C:\Windows\System32\taskhostw.exe Memory Usage 18 MB Peak Memory Usage 23 MB TeamViewer.exe Process ID 1468 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\TeamViewer\TeamViewer.exe Memory Usage 27 MB Peak Memory Usage 47 MB TeamViewer_Service.exe Process ID 3556 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe Memory Usage 15 MB Peak Memory Usage 30 MB TigerService.exe Process ID 3572 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Tiger At Work\TigerVPN\TigerService.exe Memory Usage 15 MB Peak Memory Usage 22 MB TuneupSvc.exe Process ID 3276 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupSvc.exe Memory Usage 16 MB Peak Memory Usage 71 MB TuneupUI.exe Process ID 8732 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupUI.exe Memory Usage 12 MB Peak Memory Usage 15 MB tv_w32.exe Process ID 11528 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\TeamViewer\tv_w32.exe Memory Usage 6.48 MB Peak Memory Usage 7.49 MB tv_x64.exe Process ID 11544 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\TeamViewer\tv_x64.exe Memory Usage 5.98 MB Peak Memory Usage 7.17 MB UPSmart2000R.exe Process ID 7316 User Philip Domain PHILIP-PC Path C:\Program Files (x86)\UPSmart2000R\UPSmart2000R.exe Memory Usage 10 MB Peak Memory Usage 35 MB wininit.exe Process ID 660 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\wininit.exe Memory Usage 5.42 MB Peak Memory Usage 6.69 MB winlogon.exe Process ID 8136 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\winlogon.exe Memory Usage 7.95 MB Peak Memory Usage 22 MB WINWORD.EXE Process ID 1492 User Philip Domain PHILIP-PC Path C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Memory Usage 43 MB Peak Memory Usage 113 MB WmiApSrv.exe Process ID 5720 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\wbem\WmiApSrv.exe Memory Usage 7.92 MB Peak Memory Usage 7.92 MB WmiPrvSE.exe Process ID 11484 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\System32\wbem\WmiPrvSE.exe Memory Usage 25 MB Peak Memory Usage 26 MB WmiPrvSE.exe Process ID 10640 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\wbem\WmiPrvSE.exe Memory Usage 23 MB Peak Memory Usage 24 MB wmpnetwk.exe Process ID 8696 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Program Files\Windows Media Player\wmpnetwk.exe Memory Usage 1.91 MB Peak Memory Usage 27 MB WOSVSSSvr.exe Process ID 3916 User SYSTEM Domain NT AUTHORITY Path C:\Program Files (x86)\Nuance\Nuance Cloud Connector\WOSVSSSvr.exe Memory Usage 3.66 MB Peak Memory Usage 4.81 MB WUDFHost.exe Process ID 1532 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\WUDFHost.exe Memory Usage 6.66 MB Peak Memory Usage 8.52 MB Security Options Accounts: Administrator account status Disabled Accounts: Block Microsoft accounts Not Defined Accounts: Guest account status Enabled Accounts: Limit local account use of blank passwords to console logon only Enabled Accounts: Rename administrator account Administrator Accounts: Rename guest account Guest Audit: Audit the access of global system objects Disabled Audit: Audit the use of Backup and Restore privilege Disabled Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings Not Defined Audit: Shut down system immediately if unable to log security audits Disabled DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax Not Defined DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax Not Defined Devices: Allow undock without having to log on Enabled Devices: Allowed to format and eject removable media Not Defined Devices: Prevent users from installing printer drivers Disabled Devices: Restrict CD-ROM access to locally logged-on user only Not Defined Devices: Restrict floppy access to locally logged-on user only Not Defined Domain controller: Allow server operators to schedule tasks Not Defined Domain controller: LDAP server signing requirements Not Defined Domain controller: Refuse machine account password changes Not Defined Domain member: Digitally encrypt or sign secure channel data (always) Enabled Domain member: Digitally encrypt secure channel data (when possible) Enabled Domain member: Digitally sign secure channel data (when possible) Enabled Domain member: Disable machine account password changes Disabled Domain member: Maximum machine account password age 30 days Domain member: Require strong (Windows 2000 or later) session key Enabled Interactive logon: Display user information when the session is locked Not Defined Interactive logon: Do not require CTRL+ALT+DEL Not Defined Interactive logon: Don't display last signed-in Disabled Interactive logon: Don't display username at sign-in Not Defined Interactive logon: Machine account lockout threshold Not Defined Interactive logon: Machine inactivity limit Not Defined Interactive logon: Message text for users attempting to log on Interactive logon: Message title for users attempting to log on Interactive logon: Number of previous logons to cache (in case domain controller is not available) 10 logons Interactive logon: Prompt user to change password before expiration 5 days Interactive logon: Require Domain Controller authentication to unlock workstation Disabled Interactive logon: Require Windows Hello for Business or smart card Disabled Interactive logon: Smart card removal behavior No Action Microsoft network client: Digitally sign communications (always) Disabled Microsoft network client: Digitally sign communications (if server agrees) Enabled Microsoft network client: Send unencrypted password to third-party SMB servers Disabled Microsoft network server: Amount of idle time required before suspending session Not Defined Microsoft network server: Attempt S4U2Self to obtain claim information Not Defined Microsoft network server: Digitally sign communications (always) Disabled Microsoft network server: Digitally sign communications (if client agrees) Disabled Microsoft network server: Disconnect clients when logon hours expire Enabled Microsoft network server: Server SPN target name validation level Not Defined Network access: Allow anonymous SID/Name translation Disabled Network access: Do not allow anonymous enumeration of SAM accounts Enabled Network access: Do not allow anonymous enumeration of SAM accounts and shares Enabled Network access: Do not allow storage of passwords and credentials for network authentication Disabled Network access: Let Everyone permissions apply to anonymous users Disabled Network access: Named Pipes that can be accessed anonymously Network access: Remotely accessible registry paths System\CurrentControlSet\Control\ProductOptions,System\CurrentControlSet\Control\Server Applications,Software\Microsoft\Windows NT\CurrentVersion Network access: Remotely accessible registry paths and sub-paths System\CurrentControlSet\Control\Print\Printers,System\CurrentControlSet\Services\Eventlog,Software\Microsoft\OLAP Server,Software\Microsoft\Windows NT\CurrentVersion\Print,Software\Microsoft\Windows NT\CurrentVersion\Windows,System\CurrentControlSet\Control\ContentIndex,System\CurrentControlSet\Control\Terminal Server,System\CurrentControlSet\Control\Terminal Server\UserConfig,System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration,Software\Microsoft\Windows NT\CurrentVersion\Perflib,System\CurrentControlSet\Services\SysmonLog Network access: Restrict anonymous access to Named Pipes and Shares Enabled Network access: Restrict clients allowed to make remote calls to SAM Network access: Shares that can be accessed anonymously Not Defined Network access: Sharing and security model for local accounts Classic - local users authenticate as themselves Network security: Allow Local System to use computer identity for NTLM Not Defined Network security: Allow LocalSystem NULL session fallback Not Defined Network security: Allow PKU2U authentication requests to this computer to use online identities. Not Defined Network security: Configure encryption types allowed for Kerberos Not Defined Network security: Do not store LAN Manager hash value on next password change Enabled Network security: Force logoff when logon hours expire Disabled Network security: LAN Manager authentication level Not Defined Network security: LDAP client signing requirements Negotiate signing Network security: Minimum session security for NTLM SSP based (including secure RPC) clients Require 128-bit encryption Network security: Minimum session security for NTLM SSP based (including secure RPC) servers Require 128-bit encryption Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication Not Defined Network security: Restrict NTLM: Add server exceptions in this domain Not Defined Network security: Restrict NTLM: Audit Incoming NTLM Traffic Not Defined Network security: Restrict NTLM: Audit NTLM authentication in this domain Not Defined Network security: Restrict NTLM: Incoming NTLM traffic Not Defined Network security: Restrict NTLM: NTLM authentication in this domain Not Defined Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers Not Defined Recovery console: Allow automatic administrative logon Not Defined Recovery console: Allow floppy copy and access to all drives and all folders Not Defined Shutdown: Allow system to be shut down without having to log on Enabled Shutdown: Clear virtual memory pagefile Disabled System cryptography: Force strong key protection for user keys stored on the computer Not Defined System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing Disabled System objects: Require case insensitivity for non-Windows subsystems Enabled System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links) Enabled System settings: Optional subsystems Posix System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies Disabled User Account Control: Admin Approval Mode for the Built-in Administrator account Not Defined User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop Disabled User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Prompt for consent for non-Windows binaries User Account Control: Behavior of the elevation prompt for standard users Prompt for credentials User Account Control: Detect application installations and prompt for elevation Enabled User Account Control: Only elevate executables that are signed and validated Disabled User Account Control: Only elevate UIAccess applications that are installed in secure locations Enabled User Account Control: Run all administrators in Admin Approval Mode Enabled User Account Control: Switch to the secure desktop when prompting for elevation Enabled User Account Control: Virtualize file and registry write failures to per-user locations Enabled Device Tree ACPI x64-based PC Microsoft ACPI-Compliant System ACPI Fixed Feature Button ACPI Power Button Intel Core2 Duo CPU E4600 @ 2.40GHz Intel Core2 Duo CPU E4600 @ 2.40GHz System board PCI Express Root Complex Intel G33/G31/P35/P31 Express Chipset Processor to I/O Controller - 29C0 Intel N10/ICH7 Family PCI Express Root Port - 27D0 Intel N10/ICH7 Family SMBus Controller - 27DA Motherboard resources PCI-to-PCI Bridge System board Intel(R) G33/G31/P35/P31 Express Chipset PCI Express Root Port - 29C1 AMD Radeon HD 5450 Acer LCD Monitor X203W High Definition Audio Bus AMD High Definition Audio Device High Definition Audio Controller Realtek High Definition Audio Realtek Digital Output (Realtek High Definition Audio) Intel(R) N10/ICH7 Family PCI Express Root Port - 27D2 Atheros L1 Gigabit Ethernet 10/100/1000Base-T Controller Intel(R) N10/ICH7 Family USB Universal Host Controller - 27C8 USB Root Hub Intel(R) N10/ICH7 Family USB Universal Host Controller - 27C9 USB Root Hub USB Input Device HID-compliant vendor-defined device Intel(R) N10/ICH7 Family USB Universal Host Controller - 27CA USB Root Hub Intel(R) N10/ICH7 Family USB Universal Host Controller - 27CB USB Root Hub Intel(R) N10/ICH7 Family USB2 Enhanced Host Controller - 27CC USB Root Hub USB Mass Storage Device Maxtor 3200 USB Device Generic USB Hub Logitech USB Camera (QuickCam E3500) Logitech QuickCam E3500 Logitech Mic (QuickCam E3500) Microphone (Logitech Mic (QuickCam E3500)) USB Mass Storage Device Kingston DataTraveler 2.0 USB Device Alcor Micro USB 2.0 Card Reader Generic USB CF Reader Generic USB MS Reader Generic USB SD Reader Generic USB SM Reader Generic USB Hub USB Composite Device Sennheiser USB headset Microphone (3- Sennheiser USB headset) Speakers (3- Sennheiser USB headset) USB Input Device HID-compliant consumer control device Microsoft Hardware USB Mouse Microsoft USB Wheel Mouse Optical (Mouse and Keyboard Center) Intel(R) ICH7 Family LPC Interface Controller - 27B8 ATK0110 ACPI UTILITY Communications Port (COM1) Direct memory access controller FUJITSU OASYS ??????? ????? Type(???) High precision event timer Legacy device Microsoft PS/2 Mouse Motherboard resources Motherboard resources Motherboard resources Motherboard resources Numeric data processor Programmable interrupt controller System CMOS/real time clock System speaker System timer Standard floppy disk controller Floppy disk drive ECP Printer Port (LPT1) Printer Port Logical Interface Intel(R) ICH7 Family Ultra ATA Storage Controllers - 27DF ATA Channel 0 ATA Channel 1 Intel(R) N10/ICH7 Family Serial ATA Storage Controller - 27C0 ATA Channel 1 ATA Channel 0 ST3250410AS ATA Device CPU Intel Core 2 Duo E4600 Cores 2 Threads 2 Name Intel Core 2 Duo E4600 Code Name Conroe Package Socket 775 LGA Technology 65nm Specification Intel Core2 Duo CPU E4600 @ 2.40GHz Family 6 Extended Family 6 Model F Extended Model F Stepping D Revision M0 Instructions MMX, SSE, SSE2, SSE3, SSSE3, Intel 64, NX Virtualization Not supported Hyperthreading Not supported Fan Speed 1864 RPM Rated Bus Speed 800.0 MHz Stock Core Speed 2400 MHz Stock Bus Speed 200 MHz Average Temperature 36 °C Caches L1 Data Cache Size 2 x 32 KBytes L1 Instructions Cache Size 2 x 32 KBytes L2 Unified Cache Size 2048 KBytes Cores Core 0 Core Speed 2399.9 MHz Multiplier x 12.0 Bus Speed 200.0 MHz Rated Bus Speed 800.0 MHz Temperature 36 °C Threads APIC ID: 0 Core 1 Core Speed 2399.9 MHz Multiplier x 12.0 Bus Speed 200.0 MHz Rated Bus Speed 800.0 MHz Temperature 36 °C Threads APIC ID: 1 RAM Memory slots Total memory slots 2 Used memory slots 2 Free memory slots 0 Memory Type DDR2 Size 4096 MBytes Channels # Dual DRAM Frequency 400.0 MHz CAS# Latency (CL) 6 clocks RAS# to CAS# Delay (tRCD) 6 clocks RAS# Precharge (tRP) 6 clocks Cycle Time (tRAS) 18 clocks Command Rate (CR) 2T Physical Memory Memory Usage 84 % Total Physical 4.00 GB Available Physical 638 MB Total Virtual 7.62 GB Available Virtual 2.55 GB SPD Number Of SPD Modules 2 Slot #1 Type DDR2 Size 2048 MBytes Manufacturer Kingston Max Bandwidth PC2-6400 (400 MHz) Part Number Serial Number 453905284 Week/year 01 / 11 Timing table JEDEC #1 Frequency 266.7 MHz CAS# Latency 4.0 RAS# To CAS# 4 RAS# Precharge 4 tRAS 12 tRC 16 Voltage 1.800 V JEDEC #2 Frequency 333.3 MHz CAS# Latency 5.0 RAS# To CAS# 5 RAS# Precharge 5 tRAS 15 tRC 20 Voltage 1.800 V JEDEC #3 Frequency 400.0 MHz CAS# Latency 6.0 RAS# To CAS# 6 RAS# Precharge 6 tRAS 18 tRC 24 Voltage 1.800 V Slot #2 Type DDR2 Size 2048 MBytes Manufacturer Kingston Max Bandwidth PC2-6400 (400 MHz) Part Number Serial Number 1226131539 Week/year 02 / 11 Timing table JEDEC #1 Frequency 266.7 MHz CAS# Latency 4.0 RAS# To CAS# 4 RAS# Precharge 4 tRAS 12 tRC 16 Voltage 1.800 V JEDEC #2 Frequency 333.3 MHz CAS# Latency 5.0 RAS# To CAS# 5 RAS# Precharge 5 tRAS 15 tRC 20 Voltage 1.800 V JEDEC #3 Frequency 400.0 MHz CAS# Latency 6.0 RAS# To CAS# 6 RAS# Precharge 6 tRAS 18 tRC 24 Voltage 1.800 V Motherboard Manufacturer ASUSTeK Computer INC. Model P5KPL-VM (Socket 775) Version x.xx Chipset Vendor Intel Chipset Model P35/G33/G31 Chipset Revision A2 Southbridge Vendor Intel Southbridge Model 82801GB (ICH7/R) Southbridge Revision A1 System Temperature 27 °C BIOS Brand American Megatrends Inc. Version 0802 Date 26/03/2008 Voltage CPU CORE 1.256 V MEMORY CONTROLLER 1.904 V +3.3V 3.280 V +5V 4.920 V +12V 9.591 V VIN5 1.608 V VIN6 1.368 V PCI Data Slot PCI-E Slot Type PCI-E Slot Usage Available Data lanes x16 Slot Designation PCIEX16 Characteristics 3.3V, Shared, PME Slot Number 0 Slot PCI Slot Type PCI Slot Usage Available Bus Width 32 bit Slot Designation PCI_1 Characteristics 3.3V, Shared, PME Slot Number 1 Slot PCI Slot Type PCI Slot Usage Available Bus Width 32 bit Slot Designation PCI_2 Characteristics 3.3V, Shared, PME Slot Number 2 Slot PCI-E Slot Type PCI-E Slot Usage Available Data lanes x1 Slot Designation PCIEX1_1 Characteristics 3.3V, Shared, PME Slot Number 3 Graphics Monitor Name Acer X203W on AMD Radeon HD 5450 Current Resolution 1680x1050 pixels Work Resolution 1680x1010 pixels State Enabled, Primary, Output devices support Monitor Width 1680 Monitor Height 1050 Monitor BPP 32 bits per pixel Monitor Frequency 60 Hz Device \\.\DISPLAY1\Monitor0 ATI AMD Radeon HD 5450 Manufacturer ATI Model AMD Radeon HD 5450 GPU Cedar Device ID 1002-68F9 Subvendor MSI (1462) Current Performance Level Level 0 Current GPU Clock 400 MHz Current Memory Clock 667 MHz Current Shader Clock 667 MHz Voltage 1.000 V Die Size 59 mm˛ Release Date Feb 4, 2010 DirectX Support 11.0 DirectX Shader Model 5.0 OpenGL Support 4.2 GPU Clock 400.0 MHz Temperature 58 °C Core Voltage 1.000 V Driver version 15.201.1151.1008 BIOS Version 113-AD02000-X01 ROPs 4 Shaders 80 unified Memory Type DDR3 Memory 1024 MB Bus Width 32x2 (64 bit) Pixel Fillrate 1.6 GPixels/s Bandwidth 10.7 GB/s Noise Level Quiet Max Power Draw 20 Watts Count of performance levels : 3 Level 1 - "Perf Level 0" GPU Clock 400 MHz Shader Clock 667 MHz Level 2 - "Perf Level 1" GPU Clock 400 MHz Shader Clock 667 MHz Level 3 - "Perf Level 2" GPU Clock 400 MHz Shader Clock 667 MHz Storage Hard drives ST3250410AS ATA Device Manufacturer Seagate Form Factor 3.5" Heads 16 Cylinders 30,401 Tracks 7,752,255 Sectors 488,392,065 SATA type SATA-II 3.0Gb/s Device type Fixed ATA Standard ATA/ATAPI-7 Serial Number 9RY2P22X Firmware Version Number 3.AAC LBA Size 48-bit LBA Power On Count 13523 times Power On Time 1892.0 days Features S.M.A.R.T., NCQ Max. Transfer Mode SATA II 3.0Gb/s Used Transfer Mode SATA II 3.0Gb/s Interface SATA Capacity 232 GB Real size 250,059,350,016 bytes RAID Type None S.M.A.R.T Status Good Temperature 38 °C Temperature Range OK (less than 50 °C) S.M.A.R.T attributes 01 Attribute name Read Error Rate Real value 0 Current 120 Worst 86 Threshold 6 Raw Value 0000000000 Status Good 03 Attribute name Spin-Up Time Real value 0 ms Current 99 Worst 97 Threshold 0 Raw Value 0000000000 Status Good 04 Attribute name Start/Stop Count Real value 13,554 Current 87 Worst 87 Threshold 20 Raw Value 00000034F2 Status Good 05 Attribute name Reallocated Sectors Count Real value 0 Current 100 Worst 100 Threshold 36 Raw Value 0000000000 Status Good 07 Attribute name Seek Error Rate Real value 0 Current 87 Worst 60 Threshold 30 Raw Value 0024D228C0 Status Good 09 Attribute name Power-On Hours (POH) Real value 1892d 1h Current 49 Worst 49 Threshold 0 Raw Value 000000B161 Status Good 0A Attribute name Spin Retry Count Real value 0 Current 100 Worst 100 Threshold 97 Raw Value 0000000000 Status Good 0C Attribute name Device Power Cycle Count Real value 13,523 Current 87 Worst 87 Threshold 20 Raw Value 00000034D3 Status Good BB Attribute name Reported Uncorrectable Errors Real value 6 Current 94 Worst 94 Threshold 0 Raw Value 0000000006 Status Good BD Attribute name High Fly Writes (WDC) Real value 2 Current 98 Worst 98 Threshold 0 Raw Value 0000000002 Status Good BE Attribute name Airflow Temperature Real value 38 °C Current 62 Worst 35 Threshold 45 Raw Value 0026110026 Status Good C2 Attribute name Temperature Real value 38 °C Current 38 Worst 65 Threshold 0 Raw Value 0000000026 Status Good C3 Attribute name Hardware ECC Recovered Real value 0 Current 68 Worst 53 Threshold 0 Raw Value 0006AADB0A Status Good C5 Attribute name Current Pending Sector Count Real value 0 Current 100 Worst 100 Threshold 0 Raw Value 0000000000 Status Good C6 Attribute name Uncorrectable Sector Count Real value 0 Current 100 Worst 100 Threshold 0 Raw Value 0000000000 Status Good C7 Attribute name UltraDMA CRC Error Count Real value 0 Current 200 Worst 200 Threshold 0 Raw Value 0000000000 Status Good C8 Attribute name Write Error Rate / Multi-Zone Error Rate Real value 0 Current 100 Worst 253 Threshold 0 Raw Value 0000000000 Status Good CA Attribute name Data Address Mark errors Real value 0 Current 100 Worst 253 Threshold 0 Raw Value 0000000000 Status Good Partition 0 Partition ID Disk #0, Partition #0 File System NTFS Volume Serial Number 4E36C3B8 Size 99 MB Used Space 36.1 MB (36%) Free Space 63 MB (64%) Partition 1 Partition ID Disk #0, Partition #1 Disk Letter C: File System NTFS Volume Serial Number 08390AE5 Size 96 GB Used Space 81 GB (84%) Free Space 15 GB (16%) Partition 2 Partition ID Disk #0, Partition #2 File System NTFS Volume Serial Number 9E78515B Size 856 MB Used Space 389 MB (45%) Free Space 467 MB (55%) Partition 3 Partition ID Disk #0, Partition #3 Disk Letter D: File System NTFS Volume Serial Number 487875C7 Size 135 GB Used Space 56 GB (42%) Free Space 78 GB (58%) Maxtor 3200 USB Device Manufacturer Maxtor Interface USB Capacity 279 GB Real size 300,090,728,448 bytes RAID Type None S.M.A.R.T S.M.A.R.T not supported Partition 0 Partition ID Disk #1, Partition #0 Disk Letter F: File System NTFS Volume Serial Number E79ABF54 Size 279 GB Used Space 7.42 GB (2%) Free Space 272 GB (98%) Kingston DataTraveler 2.0 USB Device Interface USB Capacity 14.9 GB Real size 15,999,172,608 bytes RAID Type None S.M.A.R.T S.M.A.R.T not supported Partition 0 Partition ID Disk #2, Partition #0 Disk Letter H: File System FAT32 Volume Serial Number 859E8DEF Size 14.9 GB Used Space 8.08 GB (54%) Free Space 6.81 GB (46%) Generic USB SD Reader Interface USB Capacity 0 B Real size 0 bytes RAID Type None S.M.A.R.T S.M.A.R.T not supported Generic USB CF Reader Interface USB Capacity 0 B Real size 0 bytes RAID Type None S.M.A.R.T S.M.A.R.T not supported Generic USB SM Reader Interface USB Capacity 0 B Real size 0 bytes RAID Type None S.M.A.R.T S.M.A.R.T not supported Generic USB MS Reader Interface USB Capacity 0 B Real size 0 bytes RAID Type None S.M.A.R.T S.M.A.R.T not supported Optical Drives No optical disk drives detected Audio Sound Cards AMD High Definition Audio Device USB Audio Device Realtek High Definition Audio Logitech Mic (QuickCam E3500) Playback Devices Realtek Digital Output (Realtek High Definition Audio) Speakers (3- Sennheiser USB headset) (default) Recording Devices Microphone (3- Sennheiser USB headset) (default) Microphone (Logitech Mic (QuickCam E3500)) Speaker Configuration Speaker type Stereo Speaker Configuration Speaker type Stereo Speaker Configuration Speaker type Stereo Peripherals FUJITSU OASYS ??????? ????? Type(???) Device Kind Keyboard Device Name FUJITSU OASYS ??????? ????? Type(???) Vendor PNP Location Intel ICH7 Family LPC Interface Controller - 27B8 Driver Date 3-7-2016 Version 5.0.3.0 File C:\WINDOWS\system32\DRIVERS\f5dnkcls.sys File C:\WINDOWS\system32\f5dnoya.dll File C:\WINDOWS\system32\f5dnjis.dll File C:\WINDOWS\system32\f5dnchex.dll Microsoft USB Wheel Mouse Optical (Mouse and Keyboard Center) Device Kind Mouse Device Name Microsoft USB Wheel Mouse Optical (Mouse and Keyboard Center) Vendor Microsoft Location Microsoft Hardware USB Mouse Driver Date 12-12-2013 Version 9.5.172.0 File C:\WINDOWS\system32\DRIVERS\point64.sys File C:\WINDOWS\system32\DRIVERS\mouhid.sys File C:\WINDOWS\system32\DRIVERS\mouclass.sys File C:\WINDOWS\system32\WdfCoInstaller01011.dll Microsoft PS/2 Mouse Device Kind Mouse Device Name Microsoft PS/2 Mouse Vendor PNP Location Intel ICH7 Family LPC Interface Controller - 27B8 Driver Date 6-21-2006 Version 10.0.16299.15 File C:\WINDOWS\system32\DRIVERS\mouclass.sys File C:\WINDOWS\system32\DRIVERS\i8042prt.sys Logitech QuickCam E3500 Device Kind Camera/scanner Device Name Logitech QuickCam E3500 Vendor Logitech Comment Logitech QuickCam E3500 Location 0000.001d.0007.004.006.000.000.000.000 Driver Date 10-7-2009 Version 12.10.1110.0 File C:\Program Files\Common Files\logishrd\WUApp64.exe File C:\WINDOWS\system32\drivers\lvuvc64.sys File C:\WINDOWS\system32\drivers\LVAFT.cfg File C:\WINDOWS\system32\lvcod64.dll File C:\WINDOWS\syswow64\lvcodec2.dll File C:\WINDOWS\system32\LVUI64.dll File C:\WINDOWS\system32\LVUIRC64.dll File C:\WINDOWS\syswow64\LVUI2.dll File C:\WINDOWS\syswow64\LVUI2RC.dll File C:\WINDOWS\system32\lvco12101110.dll File C:\WINDOWS\system32\lvcoin64.ini USB Audio Device Device Kind Audio device Device Name USB Audio Device Vendor Ambicom Comment Sennheiser USB headset Location 0000.001d.0007.007.002.000.000.000.000 Driver Date 9-28-2017 Version 10.0.16299.15 File C:\WINDOWS\system32\drivers\USBAUDIO.sys File C:\WINDOWS\system32\DRIVERS\drmk.sys File C:\WINDOWS\system32\DRIVERS\portcls.sys File C:\WINDOWS\system32\WMALFXGFXDSP.dll File C:\WINDOWS\system32\SysFxUI.dll Logitech Mic (QuickCam E3500) Device Kind Audio device Device Name Logitech Mic (QuickCam E3500) Vendor Logitech Location 0000.001d.0007.004.006.000.000.000.000 Driver Date 10-7-2009 Version 12.10.1110.0 File C:\Program Files\Common Files\logishrd\WUApp64.exe File C:\WINDOWS\system32\drivers\lvrs64.sys File C:\WINDOWS\system32\drivers\USBAUDIO.sys File C:\WINDOWS\system32\DRIVERS\drmk.sys File C:\WINDOWS\system32\DRIVERS\portcls.sys File C:\WINDOWS\system32\WMALFXGFXDSP.dll File C:\WINDOWS\system32\SysFxUI.dll File C:\WINDOWS\system32\lvco12101110.dll File C:\WINDOWS\system32\lvcoin64.ini File C:\WINDOWS\system32\Repository.reg DataTraveler 2.0 Device Kind Portable Device Device Name DataTraveler 2.0 Vendor Kingston Comment PHIL'S DATA Location Volume Driver Date 6-21-2006 Version 10.0.16299.15 File C:\WINDOWS\system32\DRIVERS\WUDFRd.sys 3200 Device Kind Portable Device Device Name 3200 Vendor Maxtor Comment Maxtor Location Volume Driver Date 6-21-2006 Version 10.0.16299.15 File C:\WINDOWS\system32\DRIVERS\WUDFRd.sys Printers Canon MG5500 series Printer WS Printer Port WSD-26afb863-0fd2-4a3d-a0c3-624f0c27737b.0063 Print Processor Canon MG5500 series Print Processor Availability Always Priority 1 Duplex None Print Quality 4294967293 dpi Color Status Unknown Driver Driver Name Canon MG5500 series Printer (v12.09) Driver Path C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNMDRBU.DLL Fax Printer Port SHRFAX: Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 200 * 200 dpi Monochrome Status Unknown Driver Driver Name Microsoft Shared Fax Driver (v4.00) Driver Path C:\WINDOWS\system32\spool\DRIVERS\x64\3\FXSDRV.DLL Microsoft Print to PDF Printer Port PORTPROMPT: Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 600 * 600 dpi Color Status Unknown Driver Driver Name Microsoft Print To PDF (v6.03) Driver Path C:\WINDOWS\System32\DriverStore\FileRepository\ntprint.inf_amd64_ab738c05d09b470b\Amd64\mxdwdrv.dll Microsoft XPS Document Writer Printer Port PORTPROMPT: Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 600 * 600 dpi Color Status Unknown Driver Driver Name Microsoft XPS Document Writer v4 (v6.03) Driver Path C:\WINDOWS\System32\DriverStore\FileRepository\ntprint.inf_amd64_ab738c05d09b470b\Amd64\mxdwdrv.dll PDF-XChange 4.0 Lite Printer Port PDF-XChange4 Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 300 * 300 dpi Color Status Unknown Driver Driver Name PDF-XChange 4.0 Lite (v4.00) Driver Path C:\WINDOWS\system32\spool\DRIVERS\x64\3\PXC40l.DLL Samsung ML-1660 Series (USB001) (Default Printer) Share Name Samsung ML-1660 Series (USB001) Printer Port USB001 Print Processor us013PC Availability Always Priority 1 Duplex None Print Quality 600 dpi Status Unknown Driver Driver Name Samsung Universal Print Driver 3 (v4.00) Driver Path C:\WINDOWS\system32\spool\DRIVERS\x64\3\us013.dll Send To OneNote 2010 Printer Port nul: Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 600 * 600 dpi Color Status Unknown Driver Driver Name Send To Microsoft OneNote 2010 Driver (v6.03) Driver Path C:\WINDOWS\system32\spool\DRIVERS\x64\3\mxdwdrv.dll Send To OneNote 2013 Printer Port nul: Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 600 * 600 dpi Color Status Unknown Driver Driver Name Send to Microsoft OneNote 15 Driver (v6.03) Driver Path C:\WINDOWS\System32\DriverStore\FileRepository\ntprint.inf_amd64_ab738c05d09b470b\Amd64\mxdwdrv.dll Network You are connected to the internet Connected through Atheros L1 Gigabit Ethernet 10/100/1000Base-T Controller IP Address 192.168.0.108 Subnet mask 255.255.255.0 Gateway server 192.168.0.1 Preferred DNS server 192.168.0.1 DHCP Enabled DHCP server 192.168.0.1 External IP Address 178.236.117.139 Adapter Type Ethernet NetBIOS over TCP/IP Enabled via DHCP NETBIOS Node Type Hybrid node Link Speed 2.1 KBps Computer Name NetBIOS Name PHILIP-PC DNS Name Philip-PC Membership Part of workgroup Workgroup WORKGROUP Remote Desktop Disabled Console State Active Domain PHILIP-PC WinInet Info LAN Connection Local system uses a local area network to connect to the Internet Local system has RAS to connect to the Internet Wi-Fi Info Wi-Fi not enabled WinHTTPInfo WinHTTPSessionProxyType No proxy Session Proxy Session Proxy Bypass Connect Retries 5 Connect Timeout (ms) 60,000 HTTP Version HTTP 1.1 Max Connects Per 1.0 Servers INFINITE Max Connects Per Servers INFINITE Max HTTP automatic redirects 10 Max HTTP status continue 10 Send Timeout (ms) 30,000 IEProxy Auto Detect No IEProxy Auto Config IEProxy IEProxy Bypass Default Proxy Config Access Type No proxy Default Config Proxy Default Config Proxy Bypass Sharing and Discovery Network Discovery Enabled File and Printer Sharing Enabled File and printer sharing service Enabled Simple File Sharing Enabled Administrative Shares Enabled Network access: Sharing and security model for local accounts Classic - local users authenticate as themselves Adapters List Enabled Atheros L1 Gigabit Ethernet 10/100/1000Base-T Controller Connection Name Ethernet 2 NetBIOS over TCPIP Yes DHCP enabled Yes MAC Address 00-1F-C6-B3-3D-1E IP Address 192.168.0.108 Subnet mask 255.255.255.0 Gateway server 192.168.0.1 DHCP 192.168.0.1 DNS Server 192.168.0.1 TAP-Windows Adapter V9 Connection Name Ethernet DHCP enabled Yes MAC Address 00-FF-CA-CF-69-54 Network Shares Users C:\Users Documents D:\Documents Pictures D:\Pictures Music D:\Music Videos D:\Videos F F:\ 3 Asociacion de Vecinos D:\Documents\3 Asociacion de Vecinos 2 Walking Group D:\Documents\2 Walking Group Samsung ML-1660 Series (USB001) Samsung ML-1660 Series (USB001),LocalsplOnly Current TCP Connections AppleMobileDeviceService.exe (3220) Local 127.0.0.1:1542 ESTABLISHED Remote 127.0.0.1:5354 (Querying... ) Local 127.0.0.1:1543 ESTABLISHED Remote 127.0.0.1:5354 (Querying... ) Local 127.0.0.1:27015 LISTEN AvastSvc.exe (2472) Local 127.0.0.1:27275 LISTEN Local 127.0.0.1:12110 LISTEN Local 192.168.0.108:2368 ESTABLISHED Remote 77.234.43.23:80 (Querying... ) (HTTP) Local 127.0.0.1:12465 LISTEN Local 127.0.0.1:12025 LISTEN Local 127.0.0.1:12119 LISTEN Local 127.0.0.1:12143 LISTEN Local 127.0.0.1:12563 LISTEN Local 127.0.0.1:12993 LISTEN Local 127.0.0.1:12995 LISTEN Local 192.168.0.108:6370 CLOSE-WAIT Remote 77.234.45.53:443 (Querying... ) (HTTPS) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (10448) Local 0.0.0.0:17500 LISTEN Local 127.0.0.1:843 LISTEN Local 127.0.0.1:2420 ESTABLISHED Remote 127.0.0.1:2419 (Querying... ) Local 127.0.0.1:2434 ESTABLISHED Remote 127.0.0.1:2435 (Querying... ) Local 127.0.0.1:2435 ESTABLISHED Remote 127.0.0.1:2434 (Querying... ) Local 127.0.0.1:3767 ESTABLISHED Remote 127.0.0.1:3768 (Querying... ) Local 127.0.0.1:3768 ESTABLISHED Remote 127.0.0.1:3767 (Querying... ) Local 127.0.0.1:17600 LISTEN Local 192.168.0.108:6522 ESTABLISHED Remote 162.125.18.133:443 (Querying... ) (HTTPS) Local 192.168.0.108:6697 ESTABLISHED Remote 162.125.18.133:443 (Querying... ) (HTTPS) Local 192.168.0.108:6708 CLOSE-WAIT Remote 52.0.152.198:443 (Querying... ) (HTTPS) Local 192.168.0.108:7567 CLOSE-WAIT Remote 162.125.68.3:443 (Querying... ) (HTTPS) Local 192.168.0.108:7568 CLOSE-WAIT Remote 162.125.68.4:443 (Querying... ) (HTTPS) Local 192.168.0.108:2473 CLOSE-WAIT Remote 162.125.68.5:443 (Querying... ) (HTTPS) Local 192.168.0.108:7570 CLOSE-WAIT Remote 162.125.68.3:443 (Querying... ) (HTTPS) Local 192.168.0.108:2396 CLOSE-WAIT Remote 162.125.68.3:443 (Querying... ) (HTTPS) Local 192.168.0.108:7595 ESTABLISHED Remote 162.125.34.6:443 (Querying... ) (HTTPS) Local 127.0.0.1:2419 ESTABLISHED Remote 127.0.0.1:2420 (Querying... ) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (1260) Local 127.0.0.1:2544 ESTABLISHED Remote 127.0.0.1:2545 (Querying... ) Local 127.0.0.1:2545 ESTABLISHED Remote 127.0.0.1:2544 (Querying... ) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (188) Local 127.0.0.1:2547 ESTABLISHED Remote 127.0.0.1:2548 (Querying... ) Local 127.0.0.1:2548 ESTABLISHED Remote 127.0.0.1:2547 (Querying... ) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (3672) Local 127.0.0.1:2671 ESTABLISHED Remote 127.0.0.1:2672 (Querying... ) Local 127.0.0.1:2672 ESTABLISHED Remote 127.0.0.1:2671 (Querying... ) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (4716) Local 127.0.0.1:3142 ESTABLISHED Remote 127.0.0.1:3143 (Querying... ) Local 127.0.0.1:3143 ESTABLISHED Remote 127.0.0.1:3142 (Querying... ) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (6072) Local 127.0.0.1:2542 ESTABLISHED Remote 127.0.0.1:2543 (Querying... ) Local 127.0.0.1:2543 ESTABLISHED Remote 127.0.0.1:2542 (Querying... ) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (8496) Local 192.168.0.108:6901 ESTABLISHED Remote 151.101.132.134:443 (Querying... ) (HTTPS) Local 192.168.0.108:7487 ESTABLISHED Remote 216.58.214.166:443 (Querying... ) (HTTPS) Local 192.168.0.108:7493 ESTABLISHED Remote 54.154.100.171:443 (Querying... ) (HTTPS) Local 192.168.0.108:7511 ESTABLISHED Remote 54.154.100.171:443 (Querying... ) (HTTPS) Local 192.168.0.108:7513 ESTABLISHED Remote 8.248.241.247:443 (Querying... ) (HTTPS) Local 192.168.0.108:7559 ESTABLISHED Remote 216.58.211.194:443 (Querying... ) (HTTPS) Local 127.0.0.1:2540 ESTABLISHED Remote 127.0.0.1:2541 (Querying... ) Local 127.0.0.1:2541 ESTABLISHED Remote 127.0.0.1:2540 (Querying... ) Local 192.168.0.108:7564 ESTABLISHED Remote 199.96.57.6:443 (Querying... ) (HTTPS) Local 192.168.0.108:4173 ESTABLISHED Remote 13.107.42.11:443 (Querying... ) (HTTPS) Local 192.168.0.108:7075 ESTABLISHED Remote 151.101.134.2:443 (Querying... ) (HTTPS) Local 192.168.0.108:3848 ESTABLISHED Remote 66.111.4.148:443 (Querying... ) (HTTPS) Local 192.168.0.108:2557 ESTABLISHED Remote 34.211.238.217:443 (Querying... ) (HTTPS) Local 192.168.0.108:7591 ESTABLISHED Remote 52.208.108.236:443 (Querying... ) (HTTPS) Local 192.168.0.108:7446 ESTABLISHED Remote 216.58.201.202:443 (Querying... ) (HTTPS) Local 192.168.0.108:6833 ESTABLISHED Remote 216.58.214.164:443 (Querying... ) (HTTPS) Local 192.168.0.108:4229 ESTABLISHED Remote 13.69.12.197:443 (Querying... ) (HTTPS) Local 192.168.0.108:6853 ESTABLISHED Remote 216.58.211.205:443 (Querying... ) (HTTPS) Local 192.168.0.108:6860 ESTABLISHED Remote 31.13.83.36:443 (Querying... ) (HTTPS) Local 192.168.0.108:6869 ESTABLISHED Remote 216.58.201.202:443 (Querying... ) (HTTPS) Local 192.168.0.108:6877 ESTABLISHED Remote 23.39.89.22:443 (Querying... ) (HTTPS) Local 192.168.0.108:6887 ESTABLISHED Remote 104.19.193.102:443 (Querying... ) (HTTPS) Local 192.168.0.108:6899 ESTABLISHED Remote 92.122.188.128:80 (Querying... ) (HTTP) Local 192.168.0.108:6900 ESTABLISHED Remote 151.101.132.134:443 (Querying... ) (HTTPS) Local 192.168.0.108:6914 ESTABLISHED Remote 216.58.211.198:443 (Querying... ) (HTTPS) Local 192.168.0.108:6922 ESTABLISHED Remote 216.58.211.200:443 (Querying... ) (HTTPS) Local 192.168.0.108:6924 ESTABLISHED Remote 2.20.90.139:443 (Querying... ) (HTTPS) Local 192.168.0.108:6930 ESTABLISHED Remote 104.244.42.72:443 (Querying... ) (HTTPS) Local 192.168.0.108:6935 ESTABLISHED Remote 216.58.201.130:443 (Querying... ) (HTTPS) Local 192.168.0.108:6936 ESTABLISHED Remote 216.58.201.130:443 (Querying... ) (HTTPS) Local 192.168.0.108:6937 ESTABLISHED Remote 104.18.63.27:443 (Querying... ) (HTTPS) Local 192.168.0.108:6939 ESTABLISHED Remote 185.29.135.190:443 (Querying... ) (HTTPS) Local 192.168.0.108:6940 ESTABLISHED Remote 216.58.214.162:443 (Querying... ) (HTTPS) Local 192.168.0.108:6943 ESTABLISHED Remote 161.170.232.53:443 (Querying... ) (HTTPS) Local 192.168.0.108:6946 ESTABLISHED Remote 2.20.89.125:443 (Querying... ) (HTTPS) Local 192.168.0.108:6967 ESTABLISHED Remote 62.67.193.85:443 (Querying... ) (HTTPS) Local 192.168.0.108:6971 ESTABLISHED Remote 198.47.127.27:443 (Querying... ) (HTTPS) Local 192.168.0.108:6972 ESTABLISHED Remote 35.190.74.53:443 (Querying... ) (HTTPS) Local 192.168.0.108:6974 ESTABLISHED Remote 151.101.128.134:443 (Querying... ) (HTTPS) Local 192.168.0.108:6976 ESTABLISHED Remote 216.58.201.136:443 (Querying... ) (HTTPS) Local 192.168.0.108:6985 ESTABLISHED Remote 92.123.73.43:80 (Querying... ) (HTTP) Local 192.168.0.108:6994 ESTABLISHED Remote 151.101.134.49:443 (Querying... ) (HTTPS) Local 192.168.0.108:6997 ESTABLISHED Remote 204.11.109.67:443 (Querying... ) (HTTPS) Local 192.168.0.108:7007 ESTABLISHED Remote 77.238.185.35:443 (Querying... ) (HTTPS) Local 192.168.0.108:7009 ESTABLISHED Remote 151.101.132.166:443 (Querying... ) (HTTPS) Local 192.168.0.108:7013 ESTABLISHED Remote 104.24.247.16:443 (Querying... ) (HTTPS) Local 192.168.0.108:7043 ESTABLISHED Remote 23.39.94.149:443 (Querying... ) (HTTPS) Local 192.168.0.108:7044 ESTABLISHED Remote 216.58.214.174:443 (Querying... ) (HTTPS) Local 192.168.0.108:7052 ESTABLISHED Remote 216.58.211.193:443 (Querying... ) (HTTPS) Local 192.168.0.108:7056 ESTABLISHED Remote 37.157.2.238:443 (Querying... ) (HTTPS) Local 192.168.0.108:7063 ESTABLISHED Remote 52.4.13.247:443 (Querying... ) (HTTPS) Local 192.168.0.108:7540 ESTABLISHED Remote 2.20.89.232:443 (Querying... ) (HTTPS) Local 192.168.0.108:7077 ESTABLISHED Remote 62.67.193.43:443 (Querying... ) (HTTPS) Local 192.168.0.108:7081 ESTABLISHED Remote 2.20.90.139:443 (Querying... ) (HTTPS) Local 192.168.0.108:7082 ESTABLISHED Remote 2.20.90.139:443 (Querying... ) (HTTPS) Local 192.168.0.108:7083 ESTABLISHED Remote 2.20.90.139:443 (Querying... ) (HTTPS) Local 192.168.0.108:7084 ESTABLISHED Remote 2.20.90.139:443 (Querying... ) (HTTPS) Local 192.168.0.108:7085 ESTABLISHED Remote 2.20.90.139:443 (Querying... ) (HTTPS) Local 192.168.0.108:7086 ESTABLISHED Remote 2.20.90.139:443 (Querying... ) (HTTPS) Local 192.168.0.108:4221 ESTABLISHED Remote 65.52.108.76:443 (Querying... ) (HTTPS) Local 192.168.0.108:7098 ESTABLISHED Remote 2.20.89.53:443 (Querying... ) (HTTPS) Local 192.168.0.108:7103 ESTABLISHED Remote 173.223.23.52:443 (Querying... ) (HTTPS) Local 192.168.0.108:7104 ESTABLISHED Remote 23.39.69.205:443 (Querying... ) (HTTPS) Local 192.168.0.108:7107 ESTABLISHED Remote 2.20.89.242:443 (Querying... ) (HTTPS) Local 192.168.0.108:7112 ESTABLISHED Remote 52.71.186.145:443 (Querying... ) (HTTPS) Local 192.168.0.108:7114 ESTABLISHED Remote 185.94.180.126:443 (Querying... ) (HTTPS) Local 192.168.0.108:7130 ESTABLISHED Remote 23.60.215.207:80 (Querying... ) (HTTP) Local 192.168.0.108:7136 ESTABLISHED Remote 62.67.193.90:443 (Querying... ) (HTTPS) Local 192.168.0.108:7143 ESTABLISHED Remote 62.67.193.85:443 (Querying... ) (HTTPS) Local 192.168.0.108:7144 ESTABLISHED Remote 151.101.132.64:443 (Querying... ) (HTTPS) Local 192.168.0.108:7145 ESTABLISHED Remote 62.67.193.85:443 (Querying... ) (HTTPS) Local 192.168.0.108:7146 ESTABLISHED Remote 151.101.132.134:443 (Querying... ) (HTTPS) Local 192.168.0.108:7147 ESTABLISHED Remote 107.178.254.65:443 (Querying... ) (HTTPS) Local 192.168.0.108:7151 ESTABLISHED Remote 54.89.9.171:443 (Querying... ) (HTTPS) Local 192.168.0.108:7155 ESTABLISHED Remote 23.39.69.205:443 (Querying... ) (HTTPS) Local 192.168.0.108:7220 ESTABLISHED Remote 23.39.64.65:443 (Querying... ) (HTTPS) Local 192.168.0.108:7271 ESTABLISHED Remote 2.20.89.124:443 (Querying... ) (HTTPS) Local 192.168.0.108:7298 ESTABLISHED Remote 2.20.89.33:443 (Querying... ) (HTTPS) Local 192.168.0.108:7299 ESTABLISHED Remote 2.20.89.232:443 (Querying... ) (HTTPS) Local 192.168.0.108:7307 ESTABLISHED Remote 149.174.28.143:443 (Querying... ) (HTTPS) Local 192.168.0.108:7359 ESTABLISHED Remote 52.94.217.170:443 (Querying... ) (HTTPS) Local 192.168.0.108:7362 ESTABLISHED Remote 216.58.211.206:80 (Querying... ) (HTTP) Local 192.168.0.108:7445 ESTABLISHED Remote 216.58.211.195:443 (Querying... ) (HTTPS) Local 192.168.0.108:7097 ESTABLISHED Remote 2.20.89.53:443 (Querying... ) (HTTPS) Local 192.168.0.108:7463 ESTABLISHED Remote 149.174.28.143:443 (Querying... ) (HTTPS) Local 192.168.0.108:7464 ESTABLISHED Remote 35.186.202.217:443 (Querying... ) (HTTPS) Local 192.168.0.108:7465 ESTABLISHED Remote 68.232.34.200:443 (Querying... ) (HTTPS) Local 192.168.0.108:7466 ESTABLISHED Remote 185.86.137.32:443 (Querying... ) (HTTPS) Local 192.168.0.108:7483 ESTABLISHED Remote 2.20.89.232:443 (Querying... ) (HTTPS) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (1468) Local 127.0.0.1:2344 ESTABLISHED Remote 127.0.0.1:5939 (Querying... ) C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1711.10477.0_x64__8wekyb3d8bbwe\Maps.exe (4712) Local 192.168.0.108:4563 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4564 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4565 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4566 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4567 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4569 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4570 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4571 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4572 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4573 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4574 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4575 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4576 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4581 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4582 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4543 CLOSE-WAIT Remote 2.20.89.3:443 (Querying... ) (HTTPS) Local 192.168.0.108:4542 CLOSE-WAIT Remote 2.20.89.3:443 (Querying... ) (HTTPS) Local 192.168.0.108:4555 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4557 CLOSE-WAIT Remote 93.184.220.29:80 (Querying... ) (HTTP) Local 192.168.0.108:4558 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4559 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4560 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4561 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) Local 192.168.0.108:4562 CLOSE-WAIT Remote 2.20.89.12:443 (Querying... ) (HTTPS) C:\Windows\System32\smartscreen.exe (8296) Local 192.168.0.108:7577 ESTABLISHED Remote 23.37.171.27:80 (Querying... ) (HTTP) lsass.exe (764) Local 0.0.0.0:1544 LISTEN mDNSResponder.exe (3228) Local 127.0.0.1:5354 LISTEN Local 127.0.0.1:5354 ESTABLISHED Remote 127.0.0.1:1542 (Querying... ) Local 127.0.0.1:5354 ESTABLISHED Remote 127.0.0.1:1543 (Querying... ) mqsvc.exe (3416) Local 0.0.0.0:2107 LISTEN Local 0.0.0.0:2105 LISTEN Local 0.0.0.0:2103 LISTEN Local 0.0.0.0:1801 LISTEN Local 0.0.0.0:1609 LISTEN services.exe (724) Local 0.0.0.0:1571 LISTEN spoolsv.exe (2780) Local 0.0.0.0:1539 LISTEN svchost.exe (1004) Local 0.0.0.0:135 (DCE) LISTEN svchost.exe (1184) Local 0.0.0.0:1537 LISTEN svchost.exe (1292) Local 0.0.0.0:1538 LISTEN svchost.exe (3604) Local 192.168.0.108:5962 ESTABLISHED Remote 40.77.229.38:443 (Querying... ) (HTTPS) svchost.exe (800) Local 192.168.0.108:7587 ESTABLISHED Remote 2.20.89.183:443 (Querying... ) (HTTPS) Local 192.168.0.108:7590 ESTABLISHED Remote 2.20.89.3:443 (Querying... ) (HTTPS) Local 192.168.0.108:7589 ESTABLISHED Remote 2.20.89.3:443 (Querying... ) (HTTPS) Local 192.168.0.108:7588 ESTABLISHED Remote 2.20.89.12:443 (Querying... ) (HTTPS) System Process Local 192.168.0.108:6835 TIME-WAIT Remote 66.102.1.154:443 (Querying... ) (HTTPS) Local 192.168.0.108:7598 TIME-WAIT Remote 5.45.58.178:80 (Querying... ) (HTTP) Local 192.168.0.108:7593 TIME-WAIT Remote 5.45.59.253:80 (Querying... ) (HTTP) Local 127.0.0.1:27275 TIME-WAIT Remote 127.0.0.1:7592 (Querying... ) Local 127.0.0.1:27275 TIME-WAIT Remote 127.0.0.1:7597 (Querying... ) Local 127.0.0.1:27275 TIME-WAIT Remote 127.0.0.1:7596 (Querying... ) System Process Local 0.0.0.0:80 (HTTP) LISTEN Local 0.0.0.0:10243 LISTEN Local 0.0.0.0:445 (Windows shares) LISTEN Local 0.0.0.0:44449 LISTEN Local 192.168.0.108:139 (NetBIOS session service) LISTEN Local 0.0.0.0:2869 LISTEN Local 0.0.0.0:5357 LISTEN TeamViewer_Service.exe (3556) Local 192.168.0.108:2324 ESTABLISHED Remote 37.252.224.4:5938 (Querying... ) Local 127.0.0.1:5939 LISTEN Local 127.0.0.1:5939 ESTABLISHED Remote 127.0.0.1:2344 (Querying... ) TuneupSvc.exe (3276) Local 192.168.0.108:3121 CLOSE-WAIT Remote 5.45.58.148:80 (Querying... ) (HTTP) wininit.exe (660) Local 0.0.0.0:1536 LISTEN wmpnetwk.exe (8696) Local 0.0.0.0:554 LISTEN WOSVSSSvr.exe (3916) Local 127.0.0.1:12765 LISTEN Generated with Speccy v1.31.732