Process PID CPU Description Company Name User Name Window Title Session Path Command Line Version Comment Window Status DEP Verified Signer Page Faults Private Bytes Private Delta Bytes Virtual Size Peak Private Bytes Working Set Peak Working Set USER Objects GDI Objects PF Delta Private Bytes History WS Private WS Shareable WS Shared Min Working Set Max Working Set Priority Handles CPU Time Start Time Threads I/O Reads I/O Read Bytes I/O Writes I/O Write Bytes I/O Other I/O Other Bytes Context Switches CSwitch Delta I/O Delta Reads I/O Delta Read Bytes I/O Delta Writes I/O Delta Write Bytes I/O Delta Other I/O Delta Other Bytes I/O Delta Total Bytes I/O History CPU History wuauclt.exe 3648 Automatic Updates Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\wuauclt.exe "C:\WINDOWS\system32\wuauclt.exe" /RunStoreAsComServer Local\[3f8]SUSDS79202df4c4e3854497e433692e91b7fe 5.4.3790.5512 DEP 1 711 6 352 K 68 880 K 6 368 K 6 460 K 6 472 K 1 4 2 052 K 4 408 K 4 036 K 200 K 1 380 K 8 172 0:00:00.125 05:54:36 27.3.2010 ã. 7 88 633 914 32 125 294 2 004 109 284 643 wscntfy.exe 2588 Windows Security Center Notification App Microsoft Corporation VVV-9EC9B114DD5\me 0 C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wscntfy.exe 5.1.2600.5512 506 460 K 26 256 K 460 K 1 980 K 1 980 K 6 14 308 K 1 672 K 1 592 K 200 K 1 380 K 8 37 0:00:00.046 05:53:58 27.3.2010 ã. 1 1 7 572 0 0 155 92 418 80 winlogon.exe 620 Windows NT Logon Application Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\winlogon.exe winlogon.exe 5.1.2600.5512 DEP 6 090 6 364 K 52 512 K 6 684 K 3 312 K 10 528 K 11 38 1 460 K 1 852 K 1 584 K 200 K 1 380 K 13 526 0:00:01.078 05:52:24 27.3.2010 ã. 24 264 2 997 840 106 9 983 3 112 99 878 1 950 tlntsvr.exe 1892 Telnet Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\tlntsvr.exe C:\WINDOWS\system32\tlntsvr.exe 5.1.2600.5512 DEP 990 1 116 K 32 592 K 1 132 K 3 696 K 3 708 K 0 4 832 K 2 864 K 2 776 K 200 K 1 380 K 8 104 0:00:00.140 05:53:44 27.3.2010 ã. 4 109 444 232 4 156 625 4 712 114 tcpsvcs.exe 1500 TCP/IP Services Application Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\tcpsvcs.exe C:\WINDOWS\system32\tcpsvcs.exe 5.1.2600.0 DEP 848 1 140 K 29 396 K 1 160 K 3 244 K 3 260 K 0 4 828 K 2 416 K 2 356 K 200 K 1 380 K 8 131 0:00:00.078 05:53:43 27.3.2010 ã. 3 15 56 220 4 156 580 115 610 219 taskmgr.exe 3844 Windows TaskManager Microsoft Corporation VVV-9EC9B114DD5\me Windows Task Manager 0 C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\system32\taskmgr.exe 5.1.2600.5512 Running DEP 1 411 1 176 K 32 356 K 1 176 K 1 216 K 4 320 K 123 113 444 K 772 K 708 K 200 K 1 380 K 13 76 0:00:00.937 05:54:44 27.3.2010 ã. 3 9 31 380 8 576 407 258 446 9 366 24 System Idle Process 0 94.12 NT AUTHORITY\SYSTEM 0 0 K 0 K 0 K 16 K 0 K 0 0 0 K 0 K 0 K 0 K 0 K 0 0 0:04:42.968 n/a 1 0 0 0 0 0 0 43 259 67 System 4 NT AUTHORITY\SYSTEM 0 DEP 10 530 0 K 1 872 K 0 K 224 K 6 844 K 0 0 40 K 184 K 184 K 0 K 1 380 K 8 2 943 0:00:08.015 n/a 67 45 808 1 723 507 379 2 792 566 1 456 288 520 22 254 37 svchost.exe 884 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost -k DcomLaunch 5.1.2600.5512 DEP 1 288 3 004 K 61 572 K 23 284 K 4 628 K 4 676 K 0 4 1 288 K 3 340 K 3 044 K 200 K 1 380 K 8 203 0:00:00.140 05:52:31 27.3.2010 ã. 20 116 444 694 11 596 1 268 105 598 5 526 15 3 280 B 280 B svchost.exe 948 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE 0 C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost -k rpcss 5.1.2600.5512 DEP 1 204 1 784 K 36 176 K 1 976 K 4 224 K 4 280 K 0 4 1 212 K 3 012 K 2 916 K 200 K 1 380 K 8 280 0:00:00.218 05:52:31 27.3.2010 ã. 11 111 444 364 6 300 473 14 446 1 303 svchost.exe 1016 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs 5.1.2600.5512 DEP 16 693 16 984 K 128 852 K 20 696 K 25 416 K 28 980 K 10 10 10 772 K 14 644 K 6 720 K 200 K 1 380 K 8 1 821 0:00:01.718 05:52:31 27.3.2010 ã. 91 1 347 4 184 970 427 915 077 11 841 412 468 10 269 1 svchost.exe 1180 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0 C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService 5.1.2600.5512 DEP 1 103 1 620 K 37 108 K 1 644 K 4 192 K 4 200 K 0 4 1 088 K 3 104 K 2 832 K 200 K 1 380 K 8 200 0:00:00.078 05:52:32 27.3.2010 ã. 15 8 27 914 7 180 377 11 638 232 spoolsv.exe 1352 Spooler SubSystem App Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\spoolsv.exe 5.1.2600.5512 DEP 1 766 3 372 K 43 468 K 3 412 K 5 092 K 5 100 K 0 4 1 452 K 3 640 K 3 228 K 200 K 1 380 K 8 188 0:00:00.125 05:52:35 27.3.2010 ã. 16 113 444 540 8 472 780 41 598 399 snmp.exe 1616 SNMP Service Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\snmp.exe C:\WINDOWS\System32\snmp.exe 5.1.2600.5512 1 132 1 476 K 22 488 K 2 352 K 3 820 K 4 284 K 0 4 1 232 K 2 588 K 2 248 K 200 K 1 380 K 8 200 0:00:00.156 05:53:44 27.3.2010 ã. 6 16 146 762 10 588 692 522 550 660 smss.exe 536 Windows NT Session Manager Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\smss.exe \SystemRoot\System32\smss.exe 5.1.2600.5512 DEP 212 164 K 3 796 K 1 704 K 372 K 460 K 0 0 128 K 244 K 200 K 200 K 1 380 K 11 19 0:00:00.015 05:52:15 27.3.2010 ã. 3 9 4 122 4 4 158 34 294 363 services.exe 664 2.94 Services and Controller app Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\services.exe 5.1.2600.5512 DEP 2 450 1 772 K 21 820 K 2 296 K 3 608 K 3 824 K 0 4 1 292 K 2 316 K 1 736 K 200 K 1 380 K 9 283 0:00:02.687 05:52:26 27.3.2010 ã. 17 187 11 984 259 422 853 1 788 40 548 5 344 5 rundll32.exe 1680 Run a DLL as an App Microsoft Corporation VVV-9EC9B114DD5\me 0 C:\WINDOWS\system32\rundll32.exe "C:\WINDOWS\system32\RunDll32.exe" cmicnfg.cpl,CMICtrlWnd 5.1.2600.5512 DEP 930 2 244 K 36 596 K 2 244 K 3 572 K 3 572 K 6 15 828 K 2 744 K 2 548 K 200 K 1 380 K 8 90 0:00:00.140 05:52:41 27.3.2010 ã. 1 4 29 492 2 144 170 2 576 134 procexp.exe 3796 2.94 Sysinternals Process Explorer Sysinternals - www.sysinternals.com VVV-9EC9B114DD5\me Process Explorer - Sysinternals: www.sysinternals.com [VVV-9EC9B114DD5\me] 0 G:\procexp.exe "G:\procexp.exe" 11.33.0.0 Running 45 686 7 872 K 65 480 K 7 892 K 11 564 K 11 624 K 163 249 142 5 280 K 6 284 K 5 040 K 200 K 1 380 K 13 239 0:00:04.203 05:54:40 27.3.2010 ã. 6 257 328 852 18 13 720 5 384 1 117 026 278 358 660 osk.exe 3280 On-Screen Keyboard Microsoft Corporation VVV-9EC9B114DD5\me On-Screen Keyboard 0 C:\WINDOWS\system32\osk.exe "C:\WINDOWS\system32\OSK.exe" 5.1.2600.5512 Running DEP 1 074 868 K 30 628 K 868 K 1 020 K 3 164 K 134 28 280 K 740 K 716 K 200 K 1 380 K 8 52 0:00:00.093 05:54:29 27.3.2010 ã. 2 1 13 974 0 0 308 94 032 609 nvsvc32.exe 824 NVIDIA Driver Helper Service, Version 162.18 NVIDIA Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\nvsvc32.exe 6.14.11.6218 3 134 2 432 K 35 072 K 8 872 K 3 832 K 5 064 K 1 8 1 124 K 2 708 K 2 540 K 200 K 1 380 K 8 120 0:00:00.109 05:52:29 27.3.2010 ã. 3 9 726 10 560 506 6 592 456 nvPDsvc.exe 1260 NVIDIA Performance Driver Service NT AUTHORITY\SYSTEM 0 C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe "C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe" 2.0.0.6 978 556 K 21 684 K 660 K 2 000 K 2 064 K 0 4 436 K 1 564 K 1 360 K 200 K 1 380 K 8 33 0:00:00.046 05:53:43 27.3.2010 ã. 3 3 9 380 2 12 187 92 290 112 msswchx.exe 3292 msswchx Microsoft Corporation VVV-9EC9B114DD5\me 0 C:\WINDOWS\system32\msswchx.exe MSSWCHX.EXE SWCH 5.1.2600.0 DEP 811 1 972 K 33 060 K 1 984 K 3 124 K 3 132 K 3 8 656 K 2 468 K 2 328 K 200 K 1 380 K 8 71 0:00:00.125 05:54:29 27.3.2010 ã. 1 5 14 728 2 144 11 123 137 448 10 921 33 34 136 B 136 B mqtgsvc.exe 2128 Windows NT MSMQ Trigger Service Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\mqtgsvc.exe C:\WINDOWS\system32\mqtgsvc.exe 5.1.0.1110 DEP 966 1 328 K 34 648 K 1 328 K 3 744 K 3 744 K 0 4 1 024 K 2 720 K 2 376 K 200 K 1 380 K 8 117 0:00:00.031 05:53:51 27.3.2010 ã. 10 7 43 786 5 228 344 94 404 133 mqsvc.exe 1832 Message Queuing Service Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\mqsvc.exe C:\WINDOWS\system32\mqsvc.exe 5.1.0.1110 DEP 1 814 2 032 K 41 592 K 2 048 K 6 004 K 6 016 K 2 6 1 560 K 4 444 K 3 404 K 200 K 1 380 K 8 225 0:00:00.218 05:53:45 27.3.2010 ã. 26 238 544 681 15 420 2 595 34 186 2 714 lsass.exe 676 LSA Shell (Export Version) Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\lsass.exe 5.1.2600.5512 DEP 2 097 4 060 K 43 144 K 4 204 K 964 K 6 544 K 0 4 592 K 372 K 292 K 200 K 1 380 K 9 398 0:00:00.500 05:52:26 27.3.2010 ã. 25 2 969 875 572 2 575 230 556 6 952 86 134 4 167 4 3 224 B 3 280 B 6 44 B 548 B Interrupts n/a Hardware Interrupts 0 0 0 K 0 K 0 K 0 K 0 K 0 0 0 K 0 K 0 K 0 K 0 K 0 0 0:00:03.531 n/a 0 0 0 0 0 0 0 209 905 384 inetinfo.exe 1048 Internet Information Services Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe 5.1.2600.5512 2 704 5 976 K 73 432 K 6 104 K 10 112 K 10 220 K 1 4 4 024 K 6 088 K 3 960 K 200 K 1 380 K 8 519 0:00:00.593 05:53:43 27.3.2010 ã. 34 122 703 777 17 444 074 1 585 155 278 1 585 1 GoogleCrashHandler.exe 1848 Google Installer Google Inc. VVV-9EC9B114DD5\me 0 C:\Documents and Settings\me\Local Settings\Application Data\Google\Update\1.2.183.23\GoogleCrashHandler.exe "C:\Documents and Settings\me\Local Settings\Application Data\Google\Update\1.2.183.23\GoogleCrashHandler.exe" /crashhandler 1.2.183.23 771 1 780 K 34 312 K 1 780 K 500 K 2 616 K 0 4 228 K 272 K 228 K 200 K 1 380 K 8 44 0:00:00.031 05:52:44 27.3.2010 ã. 5 1 68 1 72 136 2 768 55 explorer.exe 1436 Windows Explorer Microsoft Corporation VVV-9EC9B114DD5\me Connect Broadband Connection 0 C:\WINDOWS\explorer.exe C:\WINDOWS\Explorer.EXE 6.0.2900.5512 Running DEP 7 121 10 004 K 73 436 K 10 144 K 16 836 K 16 892 K 126 242 2 7 292 K 9 544 K 6 980 K 200 K 1 380 K 8 390 0:00:01.953 05:52:35 27.3.2010 ã. 15 498 3 353 154 17 18 100 11 409 826 270 11 661 10 DPCs n/a Deferred Procedure Calls 0 0 0 K 0 K 0 K 0 K 0 K 0 0 0 K 0 K 0 K 0 K 0 K 0 0 0:00:00.625 n/a 0 0 0 0 0 0 0 44 023 59 ctfmon.exe 1780 CTF Loader Microsoft Corporation VVV-9EC9B114DD5\me 0 C:\WINDOWS\system32\ctfmon.exe "C:\WINDOWS\system32\ctfmon.exe" 5.1.2600.5512 DEP 827 776 K 29 740 K 812 K 2 912 K 2 980 K 9 25 516 K 2 396 K 2 340 K 200 K 1 380 K 8 69 0:00:00.015 05:52:42 27.3.2010 ã. 1 0 0 0 0 104 384 191 1 csrss.exe 596 Client Server Runtime Process Microsoft Corporation NT AUTHORITY\SYSTEM 0 C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 5.1.2600.5512 DEP 5 111 1 524 K 24 668 K 6 460 K 3 232 K 6 960 K 85 102 1 208 K 2 024 K 1 052 K 200 K 1 380 K 13 484 0:00:01.718 05:52:23 27.3.2010 ã. 11 3 933 567 282 0 0 9 644 90 539 48 166 144 19 456 B 456 B alg.exe 3036 Application Layer Gateway Service Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0 C:\WINDOWS\system32\alg.exe C:\WINDOWS\System32\alg.exe 5.1.2600.5512 DEP 874 1 076 K 32 672 K 1 088 K 3 364 K 3 372 K 0 4 808 K 2 556 K 2 496 K 200 K 1 380 K 8 101 0:00:00.015 05:54:28 27.3.2010 ã. 6 6 43 360 4 156 336 94 180 159