Computer Details - AM-IT-MV

Generated on - Feb 18,2014 12:23:32 PM

Complete Summary, System details, Hardware and Software Details of a Computer is shown here.
Last Scan :Today 10:12:19 AM

User Currently Logged on :mvujkovic

Summary Details
Computer Name
Domain
Primary Owner
Asset Summary
Total Hardware
Total Software
Commercial Software
Non Commercial Software
Prohibited Software

: AM-IT-MV
: PORTOMONTENEGRO
: Oliver

Hardware Summary
Device Manufacturer
Device Model
Device Type
Disk Space
Processor (1)
Memory
Service Tag
Network Adapters
Adapter Name
[00000009] Apple USB Ethernet
Adapter

OS Summary
Operating System
OS Version
Registered To
Serial Number
OS CD Key

40
112
4
0
0

Windows 7 Professional Edition (x64)

6.1.7601
Oliver
00371-OEM-9045386-25749
6VVY4-C4PH9-9YGWT-CVWX6-VBWC9

Apple Inc.
MacBookAir5,1
NoteBook
Total= 139GB ; Free = 70GB ; Used = 69GB
Intel(R) Core(TM) i7-3667U CPU @ 2.00GHz
8099MB of RAM
C02JN09FDRV9

MAC Address
80:49:71:10:F6:77

IP Address
Gateway
172.18.4.34,
172.18.4.33
fe80::d071:387e:3fc
d:8d87

DHCP Status
Disabled

DHCP Server
-

System Details
System Services (180)
Name

Display Name

Description

Path Name

McTaskManager

McAfee Task
Manager

Allows scheduling of
McAfee scanning and
updating activities.

defragsvc

Disk Defragmenter Provides Disk

Defragmentation
Capabilities.
Human Interface
Enables generic input
Device Access
access to Human
Interface Devices (HID),
which activates and
maintains the use of
predefined hot buttons on
keyboards, remote
controls, and other
multimedia devices. If
this service is stopped,
hot buttons controlled by
this service will no longer
function. If this service is
disabled, any services
that explicitly depend on
it will fail to start.
Windows
Performs Windows 7
Activation
Validation.
Technologies
Service

"C:\Program Files
Own Process
(x86)\McAfee\VirusScan
Enterprise\VsTskMgr.exe
"
C:\Windows\system32\sv Own Process
chost.exe -k defragsvc

hidserv

WatAdminSvc

Service Type

Startup
Mode
Automatic

Logon Name

Manual

localSystem

C:\Windows\system32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Manual

LocalSystem

C:\Windows\system32\W Own Process

at\WatAdminSvc.exe

Manual

LocalSystem

LocalSystem

swprv

TrustedInstaller

Winmgmt

ose

CryptSvc

upnphost

Fax

Microsoft Software Manages software-based

Shadow Copy
volume shadow copies
Provider
taken by the Volume
Shadow Copy service. If
this service is stopped,
software-based volume
shadow copies cannot be
managed. If this service
is disabled, any services
that explicitly depend on
it will fail to start.
Windows Modules Enables installation,
Installer
modification, and
removal of Windows
updates and optional
components. If this
service is disabled, install
or uninstall of Windows
updates might fail for this
computer.
Windows
Provides a common
Management
interface and object
Instrumentation
model to access
management information
about operating system,
devices, applications and
services. If this service is
stopped, most Windowsbased software will not
function properly. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
Office Source
Saves installation files
Engine
used for updates and
repairs and is required
for the downloading of
Setup updates and
Watson error reports.
Cryptographic
Provides four
Services
management services:
Catalog Database
Service, which confirms
the signatures of
Windows files and allows
new programs to be
installed; Protected Root
Service, which adds and
removes Trusted Root
Certification Authority
certificates from this
computer; Automatic
Root Certificate Update
Service, which retrieves
root certificates from
Windows Update and
enable scenarios such as
SSL; and Key Service,
which helps enroll this
computer for certificates.
If this service is stopped,
these management
services will not function
properly. If this service is
disabled, any services
that explicitly depend on
it will fail to start.
UPnP Device Host Allows UPnP devices to
be hosted on this
computer. If this service
is stopped, any hosted
UPnP devices will stop
functioning and no
additional hosted devices
can be added. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
Fax
Enables you to send and
receive faxes, utilizing
fax resources available
on this computer or on
the network.

C:\Windows\System32\sv Own Process

chost.exe -k swprv

Manual

LocalSystem

C:\Windows\servicing\Tru Own Process

stedInstaller.exe

Manual

localSystem

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Automatic

localSystem

"C:\Program Files
(x86)\Common
Files\Microsoft
Shared\Source
Engine\OSE.EXE"

Manual

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k
NetworkService

Automatic

NT
Authority\Network
Service

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceAndNoImper
sonation

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\fx Own Process

ssvc.exe

Manual

NT
AUTHORITY\Netw
orkService

Page2

Own Process

wuauserv

Windows Update

Enables the detection,

download, and
installation of updates for
Windows and other
programs. If this service
is disabled, users of this
computer will not be able
to use Windows Update
or its automatic updating
feature, and programs
will not be able to use the
Windows Update Agent
(WUA) API.
FDResPub
Function
Publishes this computer
Discovery
and resources attached
Resource
to this computer so they
Publication
can be discovered over
the network. If this
service is stopped,
network resources will no
longer be published and
they will not be
discovered by other
computers on the
network.
PerfHost
Performance
Enables remote users
Counter DLL Host and 64-bit processes to
query performance
counters provided by 32bit DLLs. If this service is
stopped, only local users
and 32-bit processes will
be able to query
performance counters
provided by 32-bit DLLs.
Pml Driver HPZ12 Pml Driver HPZ12 --

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Automatic

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceAndNoImper
sonation

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\SysWow64\ Own Process

perfhost.exe

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Own Process

chost.exe -k HPZ12

Automatic

msiserver

C:\Windows\system32\m Own Process

siexec.exe /V

Manual

NT
AUTHORITY\Loca
lService
LocalSystem

"c:\Windows\Microsoft.N Share Process

ET\Framework64\v4.0.30
319\SMSvcHost.exe" NetMsmqActivator

Disabled

NT
AUTHORITY\Netw
orkService

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServicePeerNet

Manual

NT
AUTHORITY\Loca
lService

Automatic

LocalSystem

Manual

LocalSystem

Adds, modifies, and

removes applications
provided as a Windows
Installer (*.msi) package.
If this service is disabled,
any services that
explicitly depend on it will
fail to start.
NetMsmqActivator Net.Msmq Listener Receives activation
Adapter
requests over the
net.msmq and
msmq.formatname
protocols and passes
them to the Windows
Process Activation
Service.
PNRPsvc
Peer Name
Enables serverless peer
Resolution
name resolution over the
Protocol
Internet using the Peer
Name Resolution
Protocol (PNRP). If
disabled, some peer-topeer and collaborative
applications, such as
Remote Assistance, may
not function.
PrlVssProvider
PrlVssProvider
VSS Parallels Backup
Provider

COMSysApp

Windows Installer

COM+ System
Application

C:\Windows\system32\dll Own Process

host.exe
/Processid:{FE5456B452A3-4C62-9B5661E78F104C41}
Manages the
C:\Windows\system32\dll Own Process
configuration and
host.exe
tracking of Component
/Processid:{02D4B3F1Object Model (COM)+FD88-11D1-960Dbased components. If the 00805FC79235}
service is stopped, most
COM+-based
components will not
function properly. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.

Page3

UxSms

Desktop Window
Manager Session
Manager

Provides Desktop
Window Manager startup
and maintenance
services
PeerDistSvc
BranchCache
This service caches
network content from
peers on the local
subnet.
ShellHWDetection Shell Hardware
Provides notifications for
Detection
AutoPlay hardware
events.
TermService
Remote Desktop Allows users to connect
Services
interactively to a remote
computer. Remote
Desktop and Remote
Desktop Session Host
Server depend on this
service. To prevent
remote use of this
computer, clear the
checkboxes on the
Remote tab of the
System properties control
panel item.
iphlpsvc
IP Helper
Provides tunnel
connectivity using IPv6
transition technologies
(6to4, ISATAP, Port
Proxy, and Teredo), and
IP-HTTPS. If this service
is stopped, the computer
will not have the
enhanced connectivity
benefits that these
technologies offer.
gpsvc
Group Policy
The service is
Client
responsible for applying
settings configured by
administrators for the
computer and users
through the Group Policy
component. If the service
is stopped or disabled,
the settings will not be
applied and applications
and components will not
be manageable through
Group Policy. Any
components or
applications that depend
on the Group Policy
component might not be
functional if the service is
stopped or disabled.
UI0Detect
Interactive
Enables user notification
Services Detection of user input for
interactive services,
which enables access to
dialogs created by
interactive services when
they appear. If this
service is stopped,
notifications of new
interactive service
dialogs will no longer
function and there might
not be access to
interactive service
dialogs. If this service is
disabled, both
notifications of and
access to new interactive
service dialogs will no
longer function.
mfevtp
McAfee Validation Provides validation trust
Trust Protection
protection services
Service
SDRSVC
Windows Backup Provides Windows
Backup and Restore
capabilities.

C:\Windows\System32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted
C:\Windows\System32\sv Share Process
chost.exe -k PeerDist

Automatic

localSystem

Manual

NT
AUTHORITY\Netw
orkService

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Automatic

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
NetworkService

Manual

NT
Authority\Network
Service

C:\Windows\System32\sv Share Process

chost.exe -k NetSvcs

Automatic

LocalSystem

C:\Windows\system32\sv Own Process

chost.exe -k
GPSvcGroup

Automatic

LocalSystem

C:\Windows\system32\UI Own Process

0Detect.exe

Manual

LocalSystem

"C:\Windows\system32\m Own Process

fevtps.exe"

Automatic

LocalSystem

C:\Windows\system32\sv Own Process

chost.exe -k SDRSVC

Manual

localSystem

Page4

gupdate

Google Update
Service (gupdate)

IKEEXT

IKE and AuthIP

IPsec Keying
Modules

Parallels
Coherence
Service

Parallels
Coherence
Service

wbengine

Block Level
Backup Engine
Service

WebClient

WebClient

MMCSS

Multimedia Class
Scheduler

DCService.exe

DCService.exe

Keeps your Google

software up to date. If
this service is disabled or
stopped, your Google
software will not be kept
up to date, meaning
security vulnerabilities
that may arise cannot be
fixed and features may
not work. This service
uninstalls itself when
there is no Google
software using it.
The IKEEXT service
hosts the Internet Key
Exchange (IKE) and
Authenticated Internet
Protocol (AuthIP) keying
modules. These keying
modules are used for
authentication and key
exchange in Internet
Protocol security (IPsec).
Stopping or disabling the
IKEEXT service will
disable IKE and AuthIP
key exchange with peer
computers. IPsec is
typically configured to
use IKE or AuthIP;
therefore, stopping or
disabling the IKEEXT
service might result in an
IPsec failure and might
compromise the security
of the system. It is
strongly recommended
that you have the
IKEEXT service running.
--

"C:\Program Files
Own Process
(x86)\Google\Update\Go
ogleUpdate.exe" /svc

Automatic

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Automatic

LocalSystem

C:\Program Files
Own Process
(x86)\Parallels\Parallels
Tools\Services\coherenc
e.exe
The WBENGINE service "C:\Windows\system32\w Own Process
is used by Windows
bengine.exe"
Backup to perform
backup and recovery
operations. If this service
is stopped by a user, it
may cause the currently
running backup or
recovery operation to fail.
Disabling this service
may disable backup and
recovery operations
using Windows Backup
on this computer.
Enables Windows-based C:\Windows\system32\sv Share Process
programs to create,
chost.exe -k
access, and modify
LocalService
Internet-based files. If
this service is stopped,
these functions will not
be available. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
Enables relative
C:\Windows\system32\sv Share Process
prioritization of work
chost.exe -k netsvcs
based on system-wide
task priorities. This is
intended mainly for
multimedia applications.
If this service is stopped,
individual tasks resort to
their default priority.
-C:\ProgramData\Datacar Own Process
dService\DCService.exe

Automatic

LocalSystem

Manual

localSystem

Manual

NT
AUTHORITY\Loca
lService

Automatic

LocalSystem

Automatic

LocalSystem

Page5

WwanSvc

WWAN
AutoConfig

This service manages

mobile broadband (GSM
& CDMA) data
card/embedded module
adapters and
connections by autoconfiguring the networks.
It is strongly
recommended that this
service be kept running
for best user experience
of mobile broadband
devices.
clr_optimization_v Microsoft .NET
Microsoft .NET
4.0.30319_32
Framework NGEN Framework NGEN
v4.0.30319_X86
fdPHost
Function
The FDPHOST service
Discovery Provider hosts the Function
Host
Discovery (FD) network
discovery providers.
These FD providers
supply network discovery
services for the Simple
Services Discovery
Protocol (SSDP) and
Web Services
Discovery (WS-D)
protocol. Stopping or
disabling the FDPHOST
service will disable
network discovery for
these protocols when
using FD. When this
service is unavailable,
network services using
FD and relying on these
discovery protocols will
be unable to find network
devices or resources.
NlaSvc
Network Location Collects and stores
Awareness
configuration information
for the network and
notifies programs when
this information is
modified. If this service is
stopped, configuration
information might be
unavailable. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
clr_optimization_v Microsoft .NET
Microsoft .NET
2.0.50727_32
Framework NGEN Framework NGEN
v2.0.50727_X86
PNRPAutoReg
PNRP Machine
This service publishes a
Name Publication machine name using the
Service
Peer Name Resolution
Protocol. Configuration
is managed via the netsh
context 'p2p pnrp peer'
nsi
Network Store
This service delivers
Interface Service network notifications (e.g.
interface
addition/deleting etc) to
user mode clients.
Stopping this service will
cause loss of network
connectivity. If this
service is disabled, any
other services that
explicitly depend on this
service will fail to start.
hkmsvc
Health Key and
Provides X.509 certificate
Certificate
and key management
Management
services for the Network
Access Protection Agent
(NAPAgent).
Enforcement
technologies that use
X.509 certificates may
not function properly
without this service

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceNoNetwork

Manual

NT
Authority\LocalSer
vice

C:\Windows\Microsoft.NE Own Process

T\Framework\v4.0.30319
\mscorsvw.exe
C:\Windows\system32\sv Share Process
chost.exe -k
LocalService

Automatic

LocalSystem

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k
NetworkService

Automatic

NT
AUTHORITY\Netw
orkService

C:\Windows\Microsoft.NE Own Process

T\Framework\v2.0.50727
\mscorsvw.exe
C:\Windows\System32\sv Share Process
chost.exe -k
LocalServicePeerNet

Manual

LocalSystem

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalService

Automatic

NT
Authority\LocalSer
vice

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Manual

localSystem

Page6

Parallels Tools
Service

Parallels Tools
Service

EapHost

Extensible
Authentication
Protocol

--

C:\Program Files
Own Process
(x86)\Parallels\Parallels
Tools\Services\prl_tools_
service.exe
C:\Windows\System32\sv Share Process
chost.exe -k netsvcs

Automatic

LocalSystem

Manual

localSystem

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Disabled

localSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalService

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceAndNoImper
sonation

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceAndNoImper
sonation

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceNetworkRes
tricted

Manual

NT
Authority\LocalSer
vice

C:\Windows\System32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted
Storage Service
Enforces group policy for C:\Windows\System32\sv Share Process
storage devices
chost.exe -k
LocalSystemNetworkRes
tricted
Link-Layer
Creates a Network Map, C:\Windows\System32\sv Share Process
Topology
consisting of PC and
chost.exe -k
Discovery Mapper device topology
LocalService
(connectivity)
information, and
metadata describing
each PC and device. If
this service is disabled,
the Network Map will not
function properly.

Manual

LocalSystem

Manual

LocalSystem

Manual

NT
AUTHORITY\Loca
lService

The Extensible
Authentication Protocol
(EAP) service provides
network authentication in
such scenarios as 802.1x
wired and wireless, VPN,
and Network Access
Protection (NAP). EAP
also provides application
programming interfaces
(APIs) that are used by
network access clients,
including wireless and
VPN clients, during the
authentication process.
If you disable this
service, this computer is
prevented from
accessing networks that
require EAP
authentication.
RemoteAccess
Routing and
Offers routing services to
Remote Access
businesses in local area
and wide area network
environments.
WdiServiceHost
Diagnostic Service The Diagnostic Service
Host
Host is used by the
Diagnostic Policy Service
to host diagnostics that
need to run in a Local
Service context. If this
service is stopped, any
diagnostics that depend
on it will no longer
function.
SensrSvc
Adaptive
Monitors ambient light
Brightness
sensors to detect
changes in ambient light
and adjust the display
brightness. If this service
is stopped or disabled,
the display brightness will
not adapt to lighting
conditions.
SCardSvr
Smart Card
Manages access to
smart cards read by this
computer. If this service
is stopped, this computer
will be unable to read
smart cards. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
WPCSvc
Parental Controls This service is a stub for
Windows Parental
Control functionality that
existed in Vista. It is
provided for backward
compatibility only.
TabletInputService Tablet PC Input
Enables Tablet PC pen
Service
and ink functionality

StorSvc

lltdsvc

Page7

cphs

Intel(R) Content
Protection HECI
Service

Intel(R) Content
Protection HECI Service
- enables communication
with the Content
Protection FW
ProtectedStorage Protected Storage Provides protected
storage for sensitive
data, such as passwords,
to prevent access by
unauthorized services,
processes, or users.
eventlog
Windows Event
This service manages
Log
events and event logs. It
supports logging events,
querying events,
subscribing to events,
archiving event logs, and
managing event
metadata. It can display
events in both XML and
plain text format.
Stopping this service
may compromise security
and reliability of the
system.
HomeGroupProvid HomeGroup
Performs networking
er
Provider
tasks associated with
configuration and
maintenance of
homegroups. If this
service is stopped or
disabled, your computer
will be unable to detect
other homegroups and
your homegroup might
not work properly. It is
recommended that you
keep this service running.
SstpSvc
Secure Socket
Provides support for the
Tunneling Protocol Secure Socket Tunneling
Service
Protocol (SSTP) to
connect to remote
computers using VPN. If
this service is disabled,
users will not be able to
use SSTP to access
remote servers.
EventSystem
COM+ Event
Supports System Event
System
Notification Service
(SENS), which provides
automatic distribution of
events to subscribing
Component Object Model
(COM) components. If
the service is stopped,
SENS will close and will
not be able to provide
logon and logoff
notifications. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
CertPropSvc
Certificate
Copies user certificates
Propagation
and root certificates from
smart cards into the
current user's certificate
store, detects when a
smart card is inserted
into a smart card reader,
and, if needed, installs
the smart card Plug and
Play minidriver.

C:\Windows\SysWow64\I Own Process

ntelCpHeciSvc.exe

Manual

LocalSystem

C:\Windows\system32\ls Share Process

ass.exe

Manual

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServiceNetworkRes
tricted

Automatic

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServiceNetworkRes
tricted

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalService

Manual

NT
Authority\LocalSer
vice

C:\Windows\system32\sv Share Process

chost.exe -k
LocalService

Automatic

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Manual

LocalSystem

Page8

BDESVC

UNS

NetTcpActivator

lmhosts

WSearch

RasMan

FontCache

BitLocker Drive
BDESVC hosts the
Encryption Service BitLocker Drive
Encryption service.
BitLocker Drive
Encryption provides
secure startup for the
operating system, as well
as full volume encryption
for OS, fixed or
removable volumes. This
service allows BitLocker
to prompt users for
various actions related to
their volumes when
mounted, and unlocks
volumes automatically
without user interaction.
Additionally, it stores
recovery information to
Active Directory, if
available, and, if
necessary, ensures the
most recent recovery
certificates are used.
Stopping or disabling the
service would prevent
users from leveraging
this functionality.
Intel(R)
Intel(R) Management and
Management and Security Application User
Security
Notification Service Application User
Updates the Windows
Notification
Event Log with
Service
notifications of pre
defined events received
from the local Intel(R)
Management and
Security Application
Device.
Net.Tcp Listener
Receives activation
Adapter
requests over the net.tcp
protocol and passes
them to the Windows
Process Activation
Service.
TCP/IP NetBIOS Provides support for the
Helper
NetBIOS over TCP/IP
(NetBT) service and
NetBIOS name resolution
for clients on the
network, therefore
enabling users to share
files, print, and log on to
the network. If this
service is stopped, these
functions might be
unavailable. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
Windows Search Provides content
indexing, property
caching, and search
results for files, e-mail,
and other content.
Remote Access
Manages dial-up and
Connection
virtual private network
Manager
(VPN) connections from
this computer to the
Internet or other remote
networks. If this service
is disabled, any services
that explicitly depend on
it will fail to start.
Windows Font
Optimizes performance
Cache Service
of applications by
caching commonly used
font data. Applications
will start this service if it
is not already running. It
can be disabled, though
doing so will degrade
application performance.

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Manual

localSystem

"C:\Program Files
Own Process
(x86)\Intel\Intel(R)
Management Engine
Components\UNS\UNS.e
xe"

Automatic

LocalSystem

c:\Windows\Microsoft.NE Share Process

T\Framework64\v4.0.303
19\SMSvcHost.exe

Disabled

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceNetworkRes
tricted

Automatic

NT
AUTHORITY\Loca
lService

C:\Windows\system32\S
earchIndexer.exe
/Embedding

Automatic

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Manual

localSystem

C:\Windows\system32\sv Share Process

chost.exe -k
LocalService

Automatic

NT
AUTHORITY\Loca
lService

Page9

Own Process

MSDTC

Distributed
Transaction
Coordinator

Coordinates transactions
that span multiple
resource managers, such
as databases, message
queues, and file systems.
If this service is stopped,
these transactions will
fail. If this service is
disabled, any services
that explicitly depend on
it will fail to start.
THREADORDER Thread Ordering
Provides ordered
Server
execution for a group of
threads within a specific
period of time.
VMUSBArbServic VMware USB
Arbitration and
e
Arbitration Service enumeration of USB
devices for virtual
machines
Dnscache
DNS Client
The DNS Client service
(dnscache) caches
Domain Name System
(DNS) names and
registers the full
computer name for this
computer. If the service
is stopped, DNS names
will continue to be
resolved. However, the
results of DNS name
queries will not be
cached and the
computer's name will not
be registered. If the
service is disabled, any
services that explicitly
depend on it will fail to
start.
wscsvc
Security Center
The WSCSVC (Windows
Security Center) service
monitors and reports
security health settings
on the computer. The
health settings include
firewall (on/off), antivirus
(on/off/out of date),
antispyware (on/off/out of
date), Windows Update
(automatically/manually
download and install
updates), User Account
Control (on/off), and
Internet settings
(recommended/not
recommended). The
service provides COM
APIs for independent
software vendors to
register and record the
state of their products to
the Security Center
service. The Action
Center (AC) UI uses the
service to provide systray
alerts and a graphical
view of the security
health states in the AC
control panel. Network
Access Protection (NAP)
uses the service to report
the security health states
of clients to the NAP
Network Policy Server to
make network quarantine
decisions. The service
also has a public API that
allows external
consumers to
programmatically retrieve
the aggregated security
health state of the
system.
AdobeARMservice Adobe Acrobat
Adobe Acrobat Updater
Update Service
keeps your Adobe
software up to date.

C:\Windows\System32\m Own Process

sdtc.exe

Manual

NT
AUTHORITY\Netw
orkService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalService

Manual

NT
AUTHORITY\Loca
lService

"C:\Program Files
Own Process
(x86)\Common
Files\VMware\USB\vmwa
re-usbarbitrator64.exe"
C:\Windows\system32\sv Share Process
chost.exe -k
NetworkService

Automatic

LocalSystem

Automatic

NT
AUTHORITY\Netw
orkService

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServiceNetworkRes
tricted

Automatic

NT
AUTHORITY\Loca
lService

"C:\Program Files
(x86)\Common
Files\Adobe\ARM\1.0\ar
msvc.exe"

Automatic

LocalSystem

Page10

Own Process

SkypeUpdate

Skype Updater

Enables the detection,

download and installation
of updates for Skype.
sppsvc
Software
Enables the download,
Protection
installation and
enforcement of digital
licenses for Windows and
Windows applications. If
the service is disabled,
the operating system and
licensed applications
may run in a notification
mode. It is strongly
recommended that you
not disable the Software
Protection service.
NetTcpPortSharin Net.Tcp Port
Provides ability to share
g
Sharing Service
TCP ports over the
net.tcp protocol.
AeLookupSvc
Application
Processes application
Experience
compatibility cache
requests for applications
as they are launched
ALG
Application Layer Provides support for 3rd
Gateway Service party protocol plug-ins for
Internet Connection
Sharing
RpcSs
Remote Procedure The RPCSS service is
Call (RPC)
the Service Control
Manager for COM and
DCOM servers. It
performs object
activations requests,
object exporter
resolutions and
distributed garbage
collection for COM and
DCOM servers. If this
service is stopped or
disabled, programs using
COM or DCOM will not
function properly. It is
strongly recommended
that you have the
RPCSS service running
dot3svc
Wired AutoConfig The Wired AutoConfig
(DOT3SVC) service is
responsible for
performing IEEE 802.1X
authentication on
Ethernet interfaces. If
your current wired
network deployment
enforces 802.1X
authentication, the
DOT3SVC service
should be configured to
run for establishing Layer
2 connectivity and/or
providing access to
network resources. Wired
networks that do not
enforce 802.1X
authentication are
unaffected by the
DOT3SVC service.
VaultSvc
Credential
Provides secure storage
Manager
and retrieval of
credentials to users,
applications and security
service packages.
WdiSystemHost
Diagnostic System The Diagnostic System
Host
Host is used by the
Diagnostic Policy Service
to host diagnostics that
need to run in a Local
System context. If this
service is stopped, any
diagnostics that depend
on it will no longer
function.

"C:\Program Files
Own Process
(x86)\Skype\Updater\Upd
ater.exe"
C:\Windows\system32\sp Own Process
psvc.exe

Automatic

LocalSystem

Automatic

NT
AUTHORITY\Netw
orkService

c:\Windows\Microsoft.NE Share Process

T\Framework64\v4.0.303
19\SMSvcHost.exe
C:\Windows\system32\sv Share Process
chost.exe -k netsvcs

Disabled

NT
AUTHORITY\Loca
lService
localSystem

C:\Windows\System32\al Own Process

g.exe

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k rpcss

Automatic

NT
AUTHORITY\Netw
orkService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Manual

localSystem

C:\Windows\system32\ls Share Process

ass.exe

Manual

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Manual

LocalSystem

Page11

Manual

SamSs

Security Accounts The startup of this

Manager
service signals other
services that the Security
Accounts Manager
(SAM) is ready to accept
requests. Disabling this
service will prevent other
services in the system
from being notified when
the SAM is ready, which
may in turn cause those
services to fail to start
correctly. This service
should not be disabled.
LanmanWorkstatio Workstation
Creates and maintains
n
client network
connections to remote
servers using the SMB
protocol. If this service is
stopped, these
connections will be
unavailable. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
VSS
Volume Shadow
Manages and
Copy
implements Volume
Shadow Copies used for
backup and other
purposes. If this service
is stopped, shadow
copies will be unavailable
for backup and the
backup may fail. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
WerSvc
Windows Error
Allows errors to be
Reporting Service reported when programs
stop working or
responding and allows
existing solutions to be
delivered. Also allows
logs to be generated for
diagnostic and repair
services. If this service is
stopped, error reporting
might not work correctly
and results of diagnostic
services and repairs
might not be displayed.
SSDPSRV
SSDP Discovery
Discovers networked
devices and services that
use the SSDP discovery
protocol, such as UPnP
devices. Also announces
SSDP devices and
services running on the
local computer. If this
service is stopped, SSDP
-based devices will not
be discovered. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
TeamViewer9
TeamViewer 9
TeamViewer Remote
Software

Mcx2Svc

Media Center
Extender Service

ehRecvr

Windows Media
Center Receiver
Service

C:\Windows\system32\ls Share Process

ass.exe

Automatic

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
NetworkService

Automatic

NT
AUTHORITY\Netw
orkService

C:\Windows\system32\vs Own Process

svc.exe

Manual

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
WerSvcGroup

Manual

localSystem

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceAndNoImper
sonation

Manual

NT
AUTHORITY\Loca
lService

Automatic

LocalSystem

Disabled

NT
Authority\LocalSer
vice

Manual

NT
AUTHORITY\netw
orkService

"C:\Program Files
Own Process
(x86)\TeamViewer\Versio
n9\TeamViewer_Service.
exe"
Allows Media Center
C:\Windows\system32\sv Share Process
Extenders to locate and chost.exe -k
connect to the computer. LocalServiceAndNoImper
sonation
Windows Media Center
C:\Windows\ehome\ehRe Own Process
Service for TV and FM
cvr.exe
broadcast reception

Page12

napagent

Network Access
Protection Agent

The Network Access

Protection (NAP) agent
service collects and
manages health
information for client
computers on a network.
Information collected by
NAP agent is used to
make sure that the client
computer has the
required software and
settings. If a client
computer is not
compliant with health
policy, it can be provided
with restricted network
access until its
configuration is updated.
Depending on the
configuration of health
policy, client computers
might be automatically
updated so that users
quickly regain full
network access without
having to manually
update their computer.
wmiApSrv
WMI Performance Provides performance
Adapter
library information from
Windows Management
Instrumentation (WMI)
providers to clients on
the network. This service
only runs when
Performance Data Helper
is activated.
vds
Virtual Disk
Provides management
services for disks,
volumes, file systems,
and storage arrays.
netprofm
Network List
Identifies the networks to
Service
which the computer has
connected, collects and
stores properties for
these networks, and
notifies applications
when these properties
change.
Spooler
Print Spooler
Loads files to memory for
later printing
FontCache3.0.0.0 Windows
Optimizes performance
Presentation
of Windows Presentation
Foundation Font
Foundation (WPF)
Cache 3.0.0.0
applications by caching
commonly used font
data. WPF applications
will start this service if it
is not already running. It
can be disabled, though
doing so will degrade the
performance of WPF
applications.
Power
Power
Manages power policy
and power policy
notification delivery.
SCPolicySvc
Smart Card
Allows the system to be
Removal Policy
configured to lock the
user desktop upon smart
card removal.
osppsvc
Office Software
Office Software
Protection
Protection Platform
Platform
Service (unlocalized
description)

stisvc

Windows Image
Acquisition (WIA)

AppleOSSMgr

Apple OS Switch
Manager

Provides image
acquisition services for
scanners and cameras
Provides support for
switching between Mac
OS X and Windows

C:\Windows\System32\sv Share Process

chost.exe -k
NetworkService

Manual

NT
AUTHORITY\Netw
orkService

C:\Windows\system32\w Own Process

bem\WmiApSrv.exe

Manual

localSystem

C:\Windows\System32\v
ds.exe

Manual

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalService

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\s Own Process

poolsv.exe
C:\Windows\Microsoft.Ne Own Process
t\Framework64\v3.0\WPF
\PresentationFontCache.
exe

Automatic

LocalSystem

Manual

NT
Authority\LocalSer
vice

C:\Windows\system32\sv Share Process

chost.exe -k
DcomLaunch
C:\Windows\system32\sv Share Process
chost.exe -k netsvcs

Automatic

LocalSystem

Manual

LocalSystem

"C:\Program
Own Process
Files\Common
Files\Microsoft
Shared\OfficeSoftwarePr
otectionPlatform\OSPPS
VC.EXE"
C:\Windows\system32\sv Own Process
chost.exe -k imgsvc

Manual

NT
AUTHORITY\Netw
orkService

Automatic

C:\Windows\system32\A
ppleOSSMgr.exe

Automatic

NT
Authority\LocalSer
vice
LocalSystem

Page13

Own Process

Own Process

QWAVE

SessionEnv

p2pimsvc

NetPipeActivator

SharedAccess

MSiSCSI

Browser

Quality Windows
Audio Video
Experience

Quality Windows Audio

Video Experience
(qWave) is a networking
platform for Audio Video
(AV) streaming
applications on IP home
networks. qWave
enhances AV streaming
performance and
reliability by ensuring
network quality-of-service
(QoS) for AV
applications. It provides
mechanisms for
admission control, run
time monitoring and
enforcement, application
feedback, and traffic
prioritization.
Remote Desktop Remote Desktop
Configuration
Configuration service
(RDCS) is responsible for
all Remote Desktop
Services and Remote
Desktop related
configuration and session
maintenance activities
that require SYSTEM
context. These include
per-session temporary
folders, RD themes, and
RD certificates.
Peer Networking
Provides identity services
Identity Manager for the Peer Name
Resolution Protocol
(PNRP) and Peer-toPeer Grouping services.
If disabled, the Peer
Name Resolution
Protocol (PNRP) and
Peer-to-Peer Grouping
services may not
function, and some
applications, such as
HomeGroup and Remote
Assistance, may not
function correctly.
Net.Pipe Listener Receives activation
Adapter
requests over the
net.pipe protocol and
passes them to the
Windows Process
Activation Service.
Internet
Provides network
Connection
address translation,
Sharing (ICS)
addressing, name
resolution and/or
intrusion prevention
services for a home or
small office network.
Microsoft iSCSI
Manages Internet SCSI
Initiator Service
(iSCSI) sessions from
this computer to remote
iSCSI target devices. If
this service is stopped,
this computer will not be
able to login or access
iSCSI targets. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
Computer Browser Maintains an updated list
of computers on the
network and supplies this
list to computers
designated as browsers.
If this service is stopped,
this list will not be
updated or maintained. If
this service is disabled,
any services that
explicitly depend on it will
fail to start.

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceAndNoImper
sonation

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Manual

localSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServicePeerNet

Manual

NT
AUTHORITY\Loca
lService

c:\Windows\Microsoft.NE Share Process

T\Framework64\v4.0.303
19\SMSvcHost.exe

Disabled

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Manual

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Manual

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Manual

LocalSystem

Page14

McAfeeFramework McAfee
Framework
Service
WMPNetworkSvc

Windows Media
Player Network
Sharing Service

Shared component
framework for McAfee
products

Shares Windows Media

Player libraries to other
networked players and
media devices using
Universal Plug and Play
EFS
Encrypting File
Provides the core file
System (EFS)
encryption technology
used to store encrypted
files on NTFS file system
volumes. If this service is
stopped or disabled,
applications will be
unable to access
encrypted files.
wudfsvc
Windows Driver
Creates and manages
Foundation - User- user-mode driver
mode Driver
processes. This service
Framework
cannot be stopped.
UmRdpService
Remote Desktop Allows the redirection of
Services
Printers/Drives/Ports for
UserMode Port
RDP connections
Redirector
clr_optimization_v Microsoft .NET
Microsoft .NET
4.0.30319_64
Framework NGEN Framework NGEN
v4.0.30319_X64
WinRM
Windows Remote Windows Remote
Management (WS- Management (WinRM)
Management)
service implements the
WS-Management
protocol for remote
management. WSManagement is a
standard web services
protocol used for remote
software and hardware
management. The
WinRM service listens on
the network for WSManagement requests
and processes them. The
WinRM Service needs to
be configured with a
listener using winrm.cmd
command line tool or
through Group Policy in
order for it to listen over
the network. The WinRM
service provides access
to WMI data and enables
event collection. Event
collection and
subscription to events
require that the service is
running. WinRM
messages use HTTP and
HTTPS as transports.
The WinRM service does
not depend on IIS but is
preconfigured to share a
port with IIS on the same
machine. The WinRM
service reserves the
/wsman URL prefix. To
prevent conflicts with IIS,
administrators should
ensure that any websites
hosted on IIS do not use
the /wsman URL prefix.

"C:\Program Files
Own Process
(x86)\McAfee\Common
Framework\FrameworkS
ervice.exe" /ServiceStart
"C:\Program
Own Process
Files\Windows Media
Player\wmpnetwk.exe"

Automatic

LocalSystem

Manual

NT
AUTHORITY\Netw
orkService

C:\Windows\System32\ls Share Process

ass.exe

Manual

LocalSystem

C:\Windows\system32\sv
chost.exe -k
LocalSystemNetworkRes
tricted
C:\Windows\System32\sv
chost.exe -k
LocalSystemNetworkRes
tricted
C:\Windows\Microsoft.NE
T\Framework64\v4.0.303
19\mscorsvw.exe
C:\Windows\System32\sv
chost.exe -k
NetworkService

Share Process

Manual

LocalSystem

Share Process

Manual

localSystem

Own Process

Automatic

LocalSystem

Share Process

Manual

NT
AUTHORITY\Netw
orkService

Page15

HomeGroupListen HomeGroup
er
Listener

C:\Windows\System32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Manual

LocalSystem

LMS

C:\Program Files
Own Process
(x86)\Intel\Intel(R)
Management Engine
Components\LMS\LMS.e
xe

Automatic

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServiceNetworkRes
tricted

Automatic

NT
AUTHORITY\Loca
lService

C:\Windows\ehome\ehsc Own Process

hed.exe

Manual

NT
AUTHORITY\netw
orkService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Manual

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
NetworkService

Manual

NT
AUTHORITY\Netw
orkService

C:\Windows\system32\sv Share Process

chost.exe -k bthsvcs

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Manual

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Automatic

LocalSystem

AudioSrv

ehSched

IPBusEnum

TapiSrv

bthserv

BITS

SysMain

Makes local computer

changes associated with
configuration and
maintenance of the
homegroup-joined
computer. If this service
is stopped or disabled,
your computer will not
work properly in a
homegroup and your
homegroup might not
work properly. It is
recommended that you
keep this service running.
Intel(R)
Allows applications to
Management and access the local Intel(R)
Security
Management and
Application Local Security Application
Management
using its locally-available
Service
selected network
interfaces.
Windows Audio
Manages audio for
Windows-based
programs. If this service
is stopped, audio devices
and effects will not
function properly. If this
service is disabled, any
services that explicitly
depend on it will fail to
start
Windows Media
Starts and stops
Center Scheduler recording of TV programs
Service
within Windows Media
Center
PnP-X IP Bus
The PnP-X bus
Enumerator
enumerator service
manages the virtual
network bus. It discovers
network connected
devices using the
SSDP/WS discovery
protocols and gives them
presence in PnP. If this
service is stopped or
disabled, presence of
NCD devices will not be
maintained in PnP. All
pnpx based scenarios
will stop functioning.
Telephony
Provides Telephony API
(TAPI) support for
programs that control
telephony devices on the
local computer and,
through the LAN, on
servers that are also
running the service.
Bluetooth Support The Bluetooth service
Service
supports discovery and
association of remote
Bluetooth devices.
Stopping or disabling this
service may cause
already installed
Bluetooth devices to fail
to operate properly and
prevent new devices
from being discovered or
associated.
Background
Transfers files in the
Intelligent Transfer background using idle
Service
network bandwidth. If the
service is disabled, then
any applications that
depend on BITS, such as
Windows Update or MSN
Explorer, will be unable
to automatically
download programs and
other information.
Superfetch
Maintains and improves
system performance over
time.

Page16

Wlansvc

WLAN AutoConfig The WLANSVC service

provides the logic
required to configure,
discover, connect to, and
disconnect from a
wireless local area
network (WLAN) as
defined by IEEE 802.11
standards. It also
contains the logic to turn
your computer into a
software access point so
that other devices or
computers can connect
to your computer
wirelessly using a WLAN
adapter that can support
this. Stopping or
disabling the WLANSVC
service will make all
WLAN adapters on your
computer inaccessible
from the Windows
networking UI. It is
strongly recommended
that you have the
WLANSVC service
running if your computer
has a WLAN adapter.
KtmRm
KtmRm for
Coordinates transactions
Distributed
between the Distributed
Transaction
Transaction Coordinator
Coordinator
(MSDTC) and the Kernel
Transaction Manager
(KTM). If it is not needed,
it is recommended that
this service remain
stopped. If it is needed,
both MSDTC and KTM
will start this service
automatically. If this
service is disabled, any
MSDTC transaction
interacting with a Kernel
Resource Manager will
fail and any services that
explicitly depend on it will
fail to start.
AppIDSvc
Application Identity Determines and verifies
the identity of an
application. Disabling this
service will prevent
AppLocker from being
enforced.
seclogon
Secondary Logon Enables starting
processes under
alternate credentials. If
this service is stopped,
this type of logon access
will be unavailable. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
IEEtwCollectorSer Internet Explorer
ETW Collector Service
vice
ETW Collector
for Internet Explorer.
Service
When running, this
service collects real time
ETW events and
processes them.

C:\Windows\system32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Automatic

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
NetworkServiceAndNoIm
personation

Manual

NT
AUTHORITY\Netw
orkService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalServiceAndNoImper
sonation

Manual

NT
Authority\LocalSer
vice

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Manual

LocalSystem

C:\Windows\system32\IE Own Process

EtwCollector.exe /V

Manual

LocalSystem

Page17

Wecsvc

Windows Event
Collector

This service manages

persistent subscriptions
to events from remote
sources that support WSManagement protocol.
This includes Windows
Vista event logs,
hardware and IPMIenabled event sources.
The service stores
forwarded events in a
local Event Log. If this
service is stopped or
disabled event
subscriptions cannot be
created and forwarded
events cannot be
accepted.
WcsPlugInService Windows Color
The WcsPlugInService
System
service hosts third-party
Windows Color System
color device model and
gamut map model plug-in
modules. These plug-in
modules are vendorspecific extensions to the
Windows Color System
baseline color device and
gamut map models.
Stopping or disabling the
WcsPlugInService
service will disable this
extensibility feature, and
the Windows Color
System will use its
baseline model
processing rather than
the vendor's desired
processing. This might
result in inaccurate color
rendering.
KeyIso
CNG Key Isolation The CNG key isolation
service is hosted in the
LSA process. The
service provides key
process isolation to
private keys and
associated cryptographic
operations as required by
the Common Criteria.
The service stores and
uses long-lived keys in a
secure process
complying with Common
Criteria requirements.
TrkWks
Distributed Link
Maintains links between
Tracking Client
NTFS files within a
computer or across
computers in a network.
AxInstSV
ActiveX Installer
Provides User Account
(AxInstSV)
Control validation for the
installation of ActiveX
controls from the Internet
and enables
management of ActiveX
control installation based
on Group Policy settings.
This service is started on
demand and if disabled
the installation of ActiveX
controls will behave
according to default
browser settings.
DPS
Diagnostic Policy The Diagnostic Policy
Service
Service enables problem
detection,
troubleshooting and
resolution for Windows
components. If this
service is stopped,
diagnostics will no longer
function.
McShield
McAfee McShield McAfee OnAccess
Scanner

C:\Windows\system32\sv Share Process

chost.exe -k
NetworkService

Manual

NT
AUTHORITY\Netw
orkService

C:\Windows\system32\sv Share Process

chost.exe -k wcssvc

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\ls Share Process

ass.exe

Manual

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted
C:\Windows\system32\sv Share Process
chost.exe -k
AxInstSVGroup

Automatic

LocalSystem

Manual

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServiceNoNetwork

Automatic

NT
AUTHORITY\Loca
lService

"C:\Program
Own Process
Files\Common
Files\McAfee\SystemCor
e\\mcshield.exe"

Automatic

LocalSystem

Page18

prl_uprof
PlugPlay

sppuinotify

DcomLaunch

wcncsvc

TBS

Appinfo

ProfSvc

Parallels User
Profile Service
Plug and Play

--

Enables a computer to
recognize and adapt to
hardware changes with
little or no user input.
Stopping or disabling this
service will result in
system instability.
SPP Notification
Provides Software
Service
Licensing activation and
notification
DCOM Server
The DCOMLAUNCH
Process Launcher service launches COM
and DCOM servers in
response to object
activation requests. If this
service is stopped or
disabled, programs using
COM or DCOM will not
function properly. It is
strongly recommended
that you have the
DCOMLAUNCH service
running.
Windows Connect WCNCSVC hosts the
Now - Config
Windows Connect Now
Registrar
Configuration which is
Microsoft's
Implementation of Wi-Fi
Protected Setup (WPS)
protocol. This is used to
configure Wireless LAN
settings for an Access
Point (AP) or a Wi-Fi
Device. The service is
started programmatically
as needed.
TPM Base
Enables access to the
Services
Trusted Platform Module
(TPM), which provides
hardware-based
cryptographic services to
system components and
applications. If this
service is stopped or
disabled, applications will
be unable to use keys
protected by the TPM.
Application
Facilitates the running of
Information
interactive applications
with additional
administrative privileges.
If this service is stopped,
users will be unable to
launch applications with
the additional
administrative privileges
they may require to
perform desired user
tasks.
User Profile
This service is
Service
responsible for loading
and unloading user
profiles. If this service is
stopped or disabled,
users will no longer be
able to successfully
logon or logoff,
applications may have
problems getting to
users' data, and
components registered to
receive profile event
notifications will not
receive them.

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs
C:\Windows\system32\sv Share Process
chost.exe -k
DcomLaunch

Automatic

LocalSystem

Automatic

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k
LocalService
C:\Windows\system32\sv Share Process
chost.exe -k
DcomLaunch

Manual

NT
AUTHORITY\Loca
lService
LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServiceAndNoImper
sonation

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServiceAndNoImper
sonation

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Manual

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Automatic

LocalSystem

Page19

Automatic

W32Time

PcaSvc

wercplsupport

PolicyAgent

WPDBusEnum

Netman

ManageEngine
Desktop Central Remote Control

Windows Time

Maintains date and time

synchronization on all
clients and servers in the
network. If this service is
stopped, date and time
synchronization will be
unavailable. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
Program
This service provides
Compatibility
support for the Program
Assistant Service Compatibility Assistant
(PCA). PCA monitors
programs installed and
run by the user and
detects known
compatibility problems. If
this service is stopped,
PCA will not function
properly.
Problem Reports This service provides
and Solutions
support for viewing,
Control Panel
sending and deletion of
Support
system-level problem
reports for the Problem
Reports and Solutions
control panel.
IPsec Policy Agent Internet Protocol security
(IPsec) supports network
-level peer
authentication, data
origin authentication,
data integrity, data
confidentiality
(encryption), and replay
protection. This service
enforces IPsec policies
created through the IP
Security Policies snap-in
or the command-line tool
"netsh ipsec". If you stop
this service, you may
experience network
connectivity issues if your
policy requires that
connections use IPsec.
Also,remote
management of Windows
Firewall is not available
when this service is
stopped.
Portable Device
Enforces group policy for
Enumerator
removable mass-storage
Service
devices. Enables
applications such as
Windows Media Player
and Image Import Wizard
to transfer and
synchronize content
using removable massstorage devices.
Network
Manages objects in the
Connections
Network and Dial-Up
Connections folder, in
which you can view both
local area network and
remote connections.
ManageEngine
ManageEngine Desktop
Desktop Central 8 Central 8 - Remote
- Remote Control Control

C:\Windows\system32\sv Share Process

chost.exe -k
LocalService

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\system32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Automatic

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Manual

localSystem

C:\Windows\system32\sv Share Process

chost.exe -k
NetworkServiceNetwork
Restricted

Manual

NT
Authority\Network
Service

C:\Windows\system32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Manual

LocalSystem

C:\Windows\System32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Manual

LocalSystem

"C:\Program Files
Own Process
(x86)\DesktopCentral_Ag
ent\bin\dcrdservice.exe"

Manual

LocalSystem

Page20

WinHttpAutoProxy WinHTTP Web

WinHTTP implements
Svc
Proxy Autothe client HTTP stack
Discovery Service and provides developers
with a Win32 API and
COM Automation
component for sending
HTTP requests and
receiving responses. In
addition, WinHTTP
provides support for auto
-discovering a proxy
configuration via its
implementation of the
Web Proxy AutoDiscovery (WPAD)
protocol.
aspnet_state
ASP.NET State
Provides support for outService
of-process session states
for ASP.NET. If this
service is stopped, out-of
-process requests will not
be processed. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
p2psvc
Peer Networking
Enables multi-party
Grouping
communication using
Peer-to-Peer Grouping.
If disabled, some
applications, such as
HomeGroup, may not
function.
AudioEndpointBuil Windows Audio
Manages audio devices
der
Endpoint Builder
for the Windows Audio
service. If this service is
stopped, audio devices
and effects will not
function properly. If this
service is disabled, any
services that explicitly
depend on it will fail to
start
OpenVPNAccess OpenVPN Access OpenVPN Access Client
Client
Client

idsvc

Windows
CardSpace

BFE

Base Filtering
Engine

AppleTimeSrv

Apple Time
Service

Dhcp

DHCP Client

WinDefend

Windows
Defender

C:\Windows\system32\sv Share Process

chost.exe -k
LocalService

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\Microsoft.NE Own Process

T\Framework64\v4.0.303
19\aspnet_state.exe

Manual

NT
AUTHORITY\Netw
orkService

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServicePeerNet

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Automatic

LocalSystem

"C:\Program Files
Own Process
(x86)\OpenVPN
Technologies\OpenVPN
Client\core\capiws.exe"
Securely enables the
"C:\Windows\Microsoft.N Share Process
creation, management,
ET\Framework64\v3.0\Wi
and disclosure of digital ndows Communication
identities.
Foundation\infocard.exe"
The Base Filtering
C:\Windows\system32\sv Share Process
Engine (BFE) is a service chost.exe -k
that manages firewall
LocalServiceNoNetwork
and Internet Protocol
security (IPsec) policies
and implements user
mode filtering. Stopping
or disabling the BFE
service will significantly
reduce the security of the
system. It will also result
in unpredictable behavior
in IPsec management
and firewall applications.
Maintains time and date C:\Windows\system32\A Own Process
when switching between ppleTimeSrv.exe
Mac OS X and Windows
Registers and updates IP C:\Windows\system32\sv Share Process
addresses and DNS
chost.exe -k
records for this computer. LocalServiceNetworkRes
If this service is stopped, tricted
this computer will not
receive dynamic IP
addresses and DNS
updates. If this service is
disabled, any services
that explicitly depend on
it will fail to start.
Protection against
C:\Windows\System32\sv Share Process
spyware and potentially chost.exe -k secsvcs
unwanted software

Automatic

LocalSystem

Manual

LocalSystem

Automatic

NT
AUTHORITY\Loca
lService

Automatic

LocalSystem

Automatic

NT
Authority\LocalSer
vice

Manual

LocalSystem

Page21

RpcLocator

ManageEngine
Desktop Central Agent

Remote Procedure In Windows 2003 and

Call (RPC) Locator earlier versions of
Windows, the Remote
Procedure Call (RPC)
Locator service manages
the RPC name service
database. In Windows
Vista and later versions
of Windows, this service
does not provide any
functionality and is
present for application
compatibility.
Themes
Provides user experience
theme management.
Task Scheduler
Enables a user to
configure and schedule
automated tasks on this
computer. The service
also hosts multiple
Windows system-critical
tasks. If this service is
stopped or disabled,
these tasks will not be
run at their scheduled
times. If this service is
disabled, any services
that explicitly depend on
it will fail to start.
Server
Supports file, print, and
named-pipe sharing over
the network for this
computer. If this service
is stopped, these
functions will be
unavailable. If this
service is disabled, any
services that explicitly
depend on it will fail to
start.
ManageEngine
ManageEngine Desktop
Desktop Central 8 Central 8 - Agent
- Agent

MpsSvc

Windows Firewall

Netlogon

Netlogon

AppMgmt

Application
Management

Themes
Schedule

LanmanServer

C:\Windows\system32\lo Own Process

cator.exe

Manual

NT
AUTHORITY\Netw
orkService

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs
C:\Windows\system32\sv Share Process
chost.exe -k netsvcs

Automatic

LocalSystem

Automatic

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Automatic

LocalSystem

"C:\Program Files
Own Process
(x86)\DesktopCentral_Ag
ent\bin\dcagentservice.ex
e"
Windows Firewall helps C:\Windows\system32\sv Share Process
protect your computer by chost.exe -k
preventing unauthorized LocalServiceNoNetwork
users from gaining
access to your computer
through the Internet or a
network.
Maintains a secure
C:\Windows\system32\ls Share Process
channel between this
ass.exe
computer and the domain
controller for
authenticating users and
services. If this service is
stopped, the computer
may not authenticate
users and services and
the domain controller
cannot register DNS
records. If this service is
disabled, any services
that explicitly depend on
it will fail to start.
Processes installation,
C:\Windows\system32\sv Share Process
removal, and
chost.exe -k netsvcs
enumeration requests for
software deployed
through Group Policy. If
the service is disabled,
users will be unable to
install, remove, or
enumerate software
deployed through Group
Policy. If this service is
disabled, any services
that explicitly depend on
it will fail to start.

Automatic

LocalSystem

Automatic

NT
Authority\LocalSer
vice

Automatic

LocalSystem

Manual

LocalSystem

Page22

SNMPTRAP

SNMP Trap

Receives trap messages

generated by local or
remote Simple Network
Management Protocol
(SNMP) agents and
forwards the messages
to SNMP management
programs running on this
computer. If this service
is stopped, SNMP-based
programs on this
computer will not receive
SNMP trap messages. If
this service is disabled,
any services that
explicitly depend on it will
fail to start.
CscService
Offline Files
The Offline Files service
performs maintenance
activities on the Offline
Files cache, responds to
user logon and logoff
events, implements the
internals of the public
API, and dispatches
interesting events to
those interested in Offline
Files activities and
changes in cache state.
clr_optimization_v Microsoft .NET
Microsoft .NET
2.0.50727_64
Framework NGEN Framework NGEN
v2.0.50727_X64
WbioSrvc
Windows
The Windows biometric
Biometric Service service gives client
applications the ability to
capture, compare,
manipulate, and store
biometric data without
gaining direct access to
any biometric hardware
or samples. The service
is hosted in a privileged
SVCHOST process.
RemoteRegistry
Remote Registry Enables remote users to
modify registry settings
on this computer. If this
service is stopped, the
registry can be modified
only by users on this
computer. If this service
is disabled, any services
that explicitly depend on
it will fail to start.
pla
Performance Logs Performance Logs and
& Alerts
Alerts Collects
performance data from
local or remote
computers based on
preconfigured schedule
parameters, then writes
the data to a log or
triggers an alert. If this
service is stopped,
performance information
will not be collected. If
this service is disabled,
any services that
explicitly depend on it will
fail to start.
RasAuto
Remote Access
Creates a connection to
Auto Connection
a remote network
Manager
whenever a program
references a remote DNS
or NetBIOS name or
address.
RpcEptMapper
RPC Endpoint
Resolves RPC interfaces
Mapper
identifiers to transport
endpoints. If this service
is stopped or disabled,
programs using Remote
Procedure Call (RPC)
services will not function
properly.

C:\Windows\System32\s
nmptrap.exe

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k
LocalSystemNetworkRes
tricted

Automatic

LocalSystem

C:\Windows\Microsoft.NE Own Process

T\Framework64\v2.0.507
27\mscorsvw.exe
C:\Windows\system32\sv Share Process
chost.exe -k
WbioSvcGroup

Manual

LocalSystem

Manual

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k regsvc

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k
LocalServiceNoNetwork

Manual

NT
AUTHORITY\Loca
lService

C:\Windows\System32\sv Share Process

chost.exe -k netsvcs

Manual

localSystem

C:\Windows\system32\sv Share Process

chost.exe -k RPCSS

Automatic

NT
AUTHORITY\Netw
orkService

Page23

Own Process

gupdatem

Google Update
Service
(gupdatem)

SENS

System Event
Notification
Service

Keeps your Google

software up to date. If
this service is disabled or
stopped, your Google
software will not be kept
up to date, meaning
security vulnerabilities
that may arise cannot be
fixed and features may
not work. This service
uninstalls itself when
there is no Google
software using it.
Monitors system events
and notifies subscribers
to COM+ Event System
of these events.

"C:\Program Files
Own Process
(x86)\Google\Update\Go
ogleUpdate.exe" /medsvc

Manual

LocalSystem

C:\Windows\system32\sv Share Process

chost.exe -k netsvcs

Automatic

LocalSystem

System Groups (15)

Name

Description

SID

Users

Users are prevented from

making accidental or
intentional system-wide
changes and can run most
applications
Administrators have
complete and unrestricted
access to the
computer/domain
Guests have the same
access as members of the
Users group by default,
except for the Guest
account which is further
restricted
Members of this group can
read event logs from local
machine
Members of this group can
access performance
counter data locally and
remotely
Members are allowed to
launch, activate and use
Distributed COM objects
on this machine.
Backup Operators can
override security
restrictions for the sole
purpose of backing up or
restoring files
Power Users are included
for backwards
compatibility and possess
limited administrative
powers
Members in this group are
granted the right to logon
remotely
Members of this group
may schedule logging of
performance counters,
enable trace providers,
and collect event traces
both locally and via remote
access to this computer
Members in this group can
have some administrative
privileges to manage
configuration of networking
features
Users allowed to access
Account Lockout Examiner

S-1-5-32-545

Statu Members
s
OK
AM-IT-MV\kristina

S-1-5-32-544

OK

AM-IT-MV\Administrator

S-1-5-32-546

OK

AM-IT-MV\Guest

S-1-5-32-573

OK

--

S-1-5-32-558

OK

--

S-1-5-32-562

OK

--

S-1-5-32-551

OK

--

S-1-5-32-547

OK

--

S-1-5-32-555

OK

--

S-1-5-32-559

OK

--

S-1-5-32-556

OK

--

S-1-5-21-2126545675OK
4123377081-35789980401006
S-1-5-32-568
OK

--

S-1-5-32-552

--

Administrators

Guests

Event Log Readers

Performance Monitor
Users

Distributed COM Users

Backup Operators

Power Users

Remote Desktop Users

Performance Log Users

Network Configuration
Operators

NetWrix Account Help

Desk
IIS_IUSRS

Replicator

Built-in group used by

Internet Information
Services.
Supports file replication in
a domain

Page24

OK

--

Cryptographic Operators

Members are authorized to S-1-5-32-569

perform cryptographic
operations.

OK

--

System Users (5)

Name

Account
Type

Caption

Description

Domain

Full Name

mvujkovic Normal
Account

PORTOM Network
ONTENE Administrator
GRO\mvuj
kovic

PORTOMO Milos
NTENEGR Vujkovic
O

Guest

Normal
Account

AM-IT-MV

--

Administr
ator

Normal
Account

AM-ITBuilt-in
MV\Guest account for
guest access
to the
computer/dom
ain
AM-ITBuilt-in
MV\Admin account for
istrator
administering
the
computer/dom
ain
PORTOM Application
ONTENE developer
GRO\mjov
anovic

AM-IT-MV

--

AM-IT-MV\kristin
a

AM-IT-MV

mjovanovi Normal
c
Account

kristina

Normal
Account

PORTOMO Milovan
NTENEGR Jovanovic
O

kristina

SID

SID Status
Type

S-1-5-21225759925236301398071294858441350
S-1-5-21212654567541233770813578998040501

User Degrade No
d

No

User Degrade Yes

d

S-1-5-21212654567541233770813578998040500

User OK

S-1-5-21225759925236301398071294858441516
S-1-5-212126545675412337708135789980401005

System Shares (1)

Shareprint$
Share Name
Share Type
Path
User Limit
Description
Share Permissions

print$
Disk Drive
C:\Windows\system32\spool\drivers
Maximum
Printer Drivers
--

Hardware Details
Bios (1)
Default System BIOS
Manufacturer
Device Status
Description
Version
SMBios Version
Release Date
Year of Installation

Hewlett-Packard
OK
-APPLE - 0
MBA51.88Z.00EF.B02.1211271028
Nov 27,2012 01:00:00 AM
2012

Processor (1)
Intel(R) Core(TM) i7-3667U CPU @ 2.00GHz
Manufacturer
Device Status
Description
Processor Speed";
Stepping
Family

GenuineIntel
OK
Intel64 Family 6 Model 58 Stepping 9
2001 MHz
Other

Page25

Is
Is
Is
Disa Local Lock
bled Acc ed
Out

Does
Pwd
Expir
e

Is
Pwd
Requ
ired

Yes

Is
Pwd
Chan
geab
le
Yes

Yes

Yes

Yes

No

No

No

No

No

Yes

No

Yes

No

Yes

User OK

No

No

No

Yes

Yes

Yes

User OK

No

Yes

No

Yes

Yes

Yes

Socket Designation
Voltage
Version

U2E1
-

Logical Disk (1)

APPLE SSD SM256E ATA Device
Manufacturer
Device Status
Description
Serial Number
Logical Disk Partitions :2
Volume
Name
Serial
Number
6075F5E0
D:
926B2C3B

C:

(Standard disk drives)

OK
Disk drive
S0YCNYAC801265

File System

Media Type

Disk Usage

NTFS

Fixed hard
disk media
Fixed hard
disk media

Total : 83GB; Used : 15GB; Free : 68GB

NTFS

Total : 56GB; Used : 54GB; Free : 2GB

Keyboard (1)
Unknown keyboard
Manufacturer
Device Status
Description

Unknown
OK
HID Keyboard Device

Unknown keyboard
Manufacturer
Device Status
Description

Unknown
OK
USB Input Device

Sound Device (1)

Cirrus Logic CS4206B (AB 85)
Manufacturer
Device Status
Description

Cirrus Logic, Inc.

OK
--

Intel(R) Display Audio

Manufacturer
Device Status
Description

Intel(R) Corporation
OK
--

Video Controller (1)

Intel(R) HD Graphics 4000
Manufacturer
Device Status
Description
Adapter Compatibility
Adapter RAM
Horizontal Resolution
Vertical Resolution
Driver Version
Install Date

Unknown
OK
-Intel Corporation
-2080374784Bytes
1920
1080
9.17.10.2932
--

Pointing Device (3)

Hardware Name
Apple Multitouch
Mouse
HID-compliant
mouse
USB Input
Device

Manufacturer
Apple Inc.

Description
--

Device Interface Pointing Type

Unknown
Unknown

Device Status
OK

Handeness
Unknown

No of Buttons
0

Microsoft

--

Unknown

Unknown

OK

Unknown

(Standard
system devices)

--

Unknown

Unknown

OK

Unknown

Page26

POTS Modem (1)

Hardware
Name

Manufacturer

Description

Attached To

Model

Device Status

HUAWEI
Mobile
Connect - 3G
Modem

Unknown

--

COM4

HUAWEI
Mobile
Connect - 3G
Modem

Unknown

Maximum
Baud Rate to
Phone
0

Maximum
Baud Rate to
Port
115200

Device Type

External
Modem

CDROM Drive (1)

ELBY CLONEDRIVE SCSI CdRom Device
Manufacturer
Device Status
Description

ELBY CLONEDRIVE SCSI CdRom Device

OK
CD-ROM Drive

USB Controller (1)

Hardware Name
HUAWEI Mobile Connect - Bus
Enumerate Device
Intel(R) 7 Series/C216 Chipset
Family USB Enhanced Host
Controller - 1E26
Intel(R) 7 Series/C216 Chipset
Family USB Enhanced Host
Controller - 1E2D
Intel(R) USB 3.0 eXtensible Host
Controller
Synology Virtual USB Hub

Manufacturer
HUAWEI Technologies CO.,LTD

Device Status
OK

Description
--

Intel

OK

--

Intel

OK

--

Intel(R) Corporation

OK

--

Synology Inc

OK

--

Manufacturer
Unknown
Unknown
Unknown
Unknown
Unknown
Unknown
Unknown
Unknown
Unknown
Unknown
Unknown

Device Status
OK
OK
OK
OK
OK
OK
OK
OK
OK
OK
OK

Description
------------

USB Hub (1)

Hardware Name
Generic USB Hub
Generic USB Hub
Generic USB Hub
Generic USB Hub
Intel(R) USB 3.0 Root Hub
USB 2.0 Hub
USB Composite Device
USB Composite Device
USB Composite Device
USB Root Hub
USB Root Hub
Desktop Monitor (2)
Hardware
Name
Color LCD
VA2342
SERIES

Manufacturer Description
APP
VSC

---

Screen Width Monitor Type Horizontal

Pixels/Inch
768
Color LCD
0
768
VA2342
0
SERIES

Device
Status
OK
OK

Network Adapter (1)

[00000009] Apple USB Ethernet Adapter
Manufacturer
Device Status
Description
MAC Address
IP Address
DNSDomain
DNSHostName
DNSServer Search Order
DHCPEnabled
DHCPLeaseObtained
DHCPLeaseExpires
DHCPServer

Apple Inc.
Unknown
-80:49:71:10:F6:77
172.18.4.34, fe80::d071:387e:3fcd:8d87
AM-IT-MV
172.18.1.50, 172.18.1.151
false
---

Page27

Screen
Height
1024
1024

Vertical
Pixels/Inch
0
0

Serial
Number
-T8L1337015
08

DefaultIPGateway
IPSubnet

172.18.4.33
255.255.255.224, 64

Printer (7)
Hardware Name
BizHub 751
bizhub C360
Fax
Generic 36C6SeriesPCL (Copy
1)
IT
Microsoft XPS
Document Writer
Send To OneNote
2010

Manufacturer
Unknown
Unknown
Unknown
Unknown

Device Status
Unknown
Degraded

Port Name
172.18.2.187
172.18.2.181
SHRFAX:
LPT1:

Default Printer
No
No
No
No

Description
-----

Printer Type
Local Printer
Local Printer
Local Printer
Local Printer

Unknown
Unknown

Unknown
Unknown

172.18.4.62
XPSPort:

No
No

---

Local Printer
Local Printer

Unknown

Unknown

nul:

No

--

Local Printer

Battery (1)
bq20z4512BYDKRRAR123456789ABCDE
Manufacturer
Device Status
Description

Unknown
OK
Internal Battery

Physical Memory (2)

Physical Memory
Total Available RAM
Location
No. of Slots Available
Slots Used

8GB
System board or motherboard
2
Slot
Memory Type
DIMM0
Unknown
DIMM0
Unknown

Available Memory Speed

4GB
1600ns
4GB
1600ns

Software Name

Version

Manufacturer

Install Date

BS.Player FREE
Google Chrome
Malwarebytes Anti-Malware version
1.75.0.1300
Nmap 6.40
Microsoft Office Home and
Business 2010
Microsoft Visio Premium 2010

2.66.1075
32.0.1700.107
1.75.0.1300

T-Mobile Internet Manager

11.301.05.64.55

TeamViewer 9
Tftpd64 Standalone Edition
(remove only)
TreeSize Free V2.6
Ubiquiti UniFi (remove only)
VirtualCloneDrive
VLC media player 2.0.8
WinPcap 4.1.2
WinSCP 5.1.7
Intel(R) USB 3.0 eXtensible Host
Controller Driver
Java(TM) 6 Update 29
Sid Meier's Civilization 4 - Beyond
the Sword
Sid Meier's Civilization 4 - Warlords

9.0.25942
-

AB Team, d.o.o.
Google Inc.
Malwarebytes
Corporation
Unknown
Microsoft
Corporation
Microsoft
Corporation
HUAWEI
Technologies
CO.,LTD
TeamViewer
Unknown

2.6
5.4.7.0
2.0.8
4.1.0.2001
5.1.7
1.0.0.199

Bank Label
BANK 1
BANK 0

-Dec 11, 2012

Jan 17, 2014

Frequency of
Use
Not known
Not known
Not known

Compliant
Status
Not Available
Not Available
Not Available

---

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

--

Not known

Not Available Not Assigned

--

Not known

Not Available Not Assigned

---

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

JAM Software
Unknown
Elaborate Bytes
VideoLAN
CACE Technologies
Martin Prikryl
Intel Corporation

Sep 12, 2013

----Sep 26, 2013
--

Not known
Not known
Not known
Not known
Not known
Not known
Not known

Not Available
Not Available
Not Available
Not Available
Not Available
Not Available
Not Available

6.0.290
3.19

Oracle
Firaxis Games

Dec 06, 2013

Nov 25, 2013

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

2.13

Firaxis Games

Nov 25, 2013

Not known

Not Available Not Assigned

14.0.7015.1000
14.0.7015.1000

Page28

Access Type
Not Assigned
Not Assigned
Not Assigned

Not Assigned
Not Assigned
Not Assigned
Not Assigned
Not Assigned
Not Assigned
Not Assigned

Java Auto Updater

2.0.6.1

Sun Microsystems,
Inc.
Google
Skype Technologies
S.A.
Intel Corporation

Dec 06, 2013

Not known

Not Available Not Assigned

Google Earth
Skype 6.11

7.1.2.2041
6.11.102

Jan 11, 2014

Dec 12, 2013

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

Intel(R) Management Engine

Components
Microsoft Office Access MUI
(English) 2010
Microsoft Office Excel MUI
(English) 2010
Microsoft Office PowerPoint MUI
(English) 2010
Microsoft Office Publisher MUI
(English) 2010
Microsoft Office Outlook MUI
(English) 2010
Microsoft Office Word MUI
(English) 2010
Microsoft Office Proof (English)
2010
Microsoft Office Proof (French)
2010
Microsoft Office Proof (Spanish)
2010
Microsoft Office Proofing (English)
2010
Microsoft Office Single Image 2010

8.0.0.1351

--

Not known

Not Available Not Assigned

Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Google Inc.
Adobe Systems
Incorporated
Firaxis Games
Microsoft
Corporation
Intel Corporation
Realtek
Semiconductor
Corp.
Intel Corporation
Microsoft
Corporation
Apple Inc.

Sep 12, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Dec 12, 2013

Not known

Not Available Not Assigned

Dec 12, 2013

Not known

Not Available Not Assigned

Dec 12, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Dec 12, 2013

Not known

Not Available Not Assigned

Jan 31, 2014

Not known

Not Available Not Assigned

Jan 31, 2014

Not known

Not Available Not Assigned

Nov 13, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Feb 16, 2014

Jan 21, 2014

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

Nov 25, 2013

Oct 24, 2013

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

-Dec 05, 2012

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

---

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

--

Not known

Not Available Not Assigned

03/26/2010
9.13.41.0

Intel

--

Not known

Not Available Not Assigned

02/10/2012
1.0.0.235

Broadcom
Corporation

--

Not known

Not Available Not Assigned

06/27/2007 2.0.0.1

Apple Inc.

--

Not known

Not Available Not Assigned

04/05/2012
5.106.198.19

Broadcom

--

Not known

Not Available Not Assigned

--

Not known

Not Available Not Assigned

14.0.7015.1000
14.0.7015.1000
14.0.7015.1000
14.0.7015.1000
14.0.7015.1000
14.0.7015.1000
14.0.7015.1000
14.0.7015.1000
14.0.7015.1000
14.0.7015.1000
14.0.7015.1000

Microsoft Office Visio MUI (English) 14.0.7015.1000

2010
Microsoft Office Visio 2010
14.0.7015.1000
Microsoft Office Shared MUI
(English) 2010
Microsoft Office OneNote MUI
(English) 2010
Microsoft Office Shared Setup
Metadata MUI (English) 2010
Microsoft Office Access Setup
Metadata MUI (English) 2010
Google Update Helper
Adobe Reader XI (11.0.06)

14.0.7015.1000

Sid Meier's Civilization 4

Microsoft Visual C++ 2010 x86
Redistributable - 10.0.40219
Intel(R) Processor Graphics
Realtek High Definition Audio
Driver

1.74
10.0.40219

Intel(R) OpenCL CPU Runtime

Windows Internet Explorer 9

9.11.9600.16428

Windows Driver Package - Apple

Inc. Apple Broadcom Bluetooth
(11/28/2011 4.0.3.0)
Windows Driver Package - Intel
(e1express) Net (03/26/2010
9.13.41.0)
Windows Driver Package Broadcom Corporation (bScsiSDa)
SDHost (02/10/2012 1.0.0.235)
Windows Driver Package - Apple
Inc. Apple Bluetooth Enabler
(06/27/2007 2.0.0.1)
Windows Driver Package Broadcom (BCM43XX) Net
(04/05/2012 5.106.198.19)
Windows Driver Package - Intel
(e1qexpress) Net (12/04/2009
11.4.7.0)

11/28/2011 4.0.3.0

14.0.7015.1000
14.0.7015.1000
14.0.7015.1000
1.3.22.5
11.0.06

9.17.10.2932
6.0.1.5936

12/04/2009 11.4.7.0 Intel

Page29

Windows Driver Package - Intel

(e1kexpress) Net (04/12/2010
11.6.92.0)
Windows Driver Package - Apple
Inc. Apple Built-in iSight
(10/25/2007 2.0.1.0)
Windows Driver Package - Apple
Inc. Apple Trackpad Enabler
(07/13/2009 3.0.0.1)
Windows Driver Package - Apple
Inc. Apple System Device
(10/07/2011 4.0.1.0)
Windows Driver Package - Apple
Inc. Apple Trackpad (07/13/2009
3.0.0.1)
Windows Driver Package Broadcom (b57nd60a) Net
(02/10/2012 15.2.0.5)
Windows Driver Package - Apple
Inc. Apple Multitouch Mouse
(01/27/2012 4.0.2.0)
Windows Driver Package - Apple
Inc. Apple Keyboard (01/27/2012
4.0.2.0)
Windows Driver Package - Apple
Inc. Apple Wireless Trackpad
(01/17/2011 3.2.0.0)
Windows Driver Package - Intel
(e1yexpress) Net (04/07/2010
10.1.9.0)
CCleaner
Windows Driver Package - Marvell
(yukonx64) Net (12/06/2007
10.51.1.3)
Windows Driver Package - Apple
Inc. Apple Multitouch (01/27/2012
4.0.2.0)
Windows Driver Package - Apple
Inc. Apple Wireless Mouse
(06/01/2011 4.0.0.1)
Windows Driver Package - Apple
Inc. (AppleUSBEthernet) Net
(02/01/2008 3.10.3.10)
Windows Driver Package - Apple
Inc. Apple IR Receiver (02/21/2008
2.0.4.0)
Windows Driver Package - Apple
Inc. Apple ODD (05/17/2010
3.1.0.0)
Autodesk DWG TrueView 2014
Windows Driver Package - Apple
Inc. Apple Display (01/23/2009
3.0.0.0)
Windows Driver Package - Intel
System (07/20/2007 1.2.76.0)
Windows Driver Package - Apple
Inc. Apple Bluetooth (03/01/2010
3.0.0.5)
Windows Driver Package - Atheros
Communications Inc. (athr) Net
(11/13/2010 9.2.0.113)
Windows Driver Package - Intel
(e1rexpress) Net (01/07/2010
11.4.16.0)
Windows Driver Package Broadcom (B57ports) Net
(06/16/2009 1.0.0.1)
Windows Driver Package - Cirrus
Logic, Inc. (CirrusFilter) MEDIA
(01/30/2012 6.6001.1.36)
Microsoft Visual J# 2.0
Redistributable Package - SE (x64)
WinRAR 5.00 (64-bit)
Microsoft Visual C++ 2010 x64
Redistributable - 10.0.40219

04/12/2010
11.6.92.0

Intel

--

Not known

Not Available Not Assigned

10/25/2007 2.0.1.0

Apple Inc.

--

Not known

Not Available Not Assigned

07/13/2009 3.0.0.1

Apple Inc.

--

Not known

Not Available Not Assigned

10/07/2011 4.0.1.0

Apple Inc.

--

Not known

Not Available Not Assigned

07/13/2009 3.0.0.1

Apple Inc.

--

Not known

Not Available Not Assigned

02/10/2012 15.2.0.5 Broadcom

--

Not known

Not Available Not Assigned

01/27/2012 4.0.2.0

Apple Inc.

--

Not known

Not Available Not Assigned

01/27/2012 4.0.2.0

Apple Inc.

--

Not known

Not Available Not Assigned

01/17/2011 3.2.0.0

Apple Inc.

--

Not known

Not Available Not Assigned

04/07/2010 10.1.9.0 Intel

--

Not known

Not Available Not Assigned

4.08
12/06/2007
10.51.1.3

Piriform
Marvell

---

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

01/27/2012 4.0.2.0

Apple Inc.

--

Not known

Not Available Not Assigned

06/01/2011 4.0.0.1

Apple Inc.

--

Not known

Not Available Not Assigned

02/01/2008
3.10.3.10

Apple Inc.

--

Not known

Not Available Not Assigned

02/21/2008 2.0.4.0

Apple Inc.

--

Not known

Not Available Not Assigned

05/17/2010 3.1.0.0

Apple Inc.

--

Not known

Not Available Not Assigned

19.1.18.0
01/23/2009 3.0.0.0

Autodesk
Apple Inc.

---

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

07/20/2007 1.2.76.0 Intel

--

Not known

Not Available Not Assigned

03/01/2010 3.0.0.5

Apple Inc.

--

Not known

Not Available Not Assigned

11/13/2010
9.2.0.113

Atheros
Communications
Inc.
Intel

--

Not known

Not Available Not Assigned

--

Not known

Not Available Not Assigned

06/16/2009 1.0.0.1

Broadcom

--

Not known

Not Available Not Assigned

01/30/2012
6.6001.1.36

Cirrus Logic, Inc.

--

Not known

Not Available Not Assigned

Microsoft
Corporation
win.rar GmbH
Microsoft
Corporation

--

Not known

Not Available Not Assigned

-Oct 24, 2013

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

01/07/2010
11.4.16.0

5.00.0
10.0.40219

Page30

Milestone XProtect Smart Client

7.0b (64-bit)
Microsoft Visual C++ 2008
Redistributable - x64
9.0.30729.4148
DWG TrueView 2014
Microsoft Visual C++ 2008
Redistributable - x64
9.0.30729.6161
VanDyke Software SecureCRT 7.1

7.0.2.369

Milestone Systems
A/S
Microsoft
Corporation

--

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

19.1.18.0
9.0.30729.6161

Autodesk
Microsoft
Corporation

Oct 23, 2013

Sep 16, 2013

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

7.1.1

VanDyke Software,
Inc.
Parallels Software
International Inc
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation

Dec 16, 2013

Not known

Not Available Not Assigned

Parallels Tools

8.0.18345

Dec 05, 2012

Not known

Not Available Not Assigned

Microsoft .NET Framework 4.5.1

4.5.50938

Nov 28, 2013

Not known

Not Available Not Assigned

Microsoft Silverlight

5.1.20913.0

Oct 09, 2013

Not known

Not Available Not Assigned

Microsoft Office Office 64-bit

Components 2010
Microsoft Office Shared 64-bit MUI
(English) 2010
Microsoft Office Shared 64-bit
Setup Metadata MUI (English)
2010
Boot Camp Services
Windows 7 Professional Edition
(x64)
ManageEngine Desktop Central 8 Agent
K-Lite Codec Pack 10.0.0 Full
PuTTY version 0.63
OpenVPN Client

14.0.7015.1000

Nov 13, 2013

Not known

Not Available Not Assigned

Dec 18, 2013

Not known

Not Available Not Assigned

Sep 12, 2013

Not known

Not Available Not Assigned

Apple Inc.
Microsoft
Corporation
ZohoCorp

Dec 05, 2012

--

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

Feb 18, 2014

Not known

Not Available Not Assigned

Unknown
Simon Tatham
OpenVPN
Technologies
VMware, Inc.
Microsoft
Corporation

Sep 12, 2013

Sep 12, 2013
Sep 16, 2013

Not known
Not known
Not known

Not Available Not Assigned

Not Available Not Assigned
Not Available Not Assigned

VMware vSphere Client 5.1

Microsoft Visual C++ 2008
Redistributable - x86
9.0.30729.4148
Defraggler
Google Talk (remove only)
Microsoft Visual C++ 2005
Redistributable
calibre
Microsoft Visual C++ 2008
Redistributable - x86 9.0.30729.17
Windows 7 Professional Edition

5.1.0.3045
9.0.30729.4148

Sep 12, 2013

Sep 12, 2013

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

Piriform
Unknown
Microsoft
Corporation
Kovid Goyal
Microsoft
Corporation
Microsoft
Corporation
Microsoft
Corporation

--Nov 28, 2013

Not known
Not known
Not known

Not Available Not Assigned

Not Available Not Assigned
Not Available Not Assigned

Sep 12, 2013

Oct 01, 2013

Not known
Not known

Not Available Not Assigned

Not Available Not Assigned

--

Not known

Not Available Not Assigned

Microsoft Visual C++ 2008

Redistributable - x86
9.0.30729.6161
McAfee VirusScan Enterprise
McAfee Agent
NetSetMan 3.5.3
Tera Term 4.79

9.0.30729.6161

Sep 16, 2013

Not known

Not Available Not Assigned

McAfee, Inc.
McAfee, Inc.
Ilja Herlein
Unknown

Sep 13, 2013

Sep 12, 2013
Sep 12, 2013
Sep 12, 2013

Not known
Not known
Not known
Not known

Not Available
Not Available
Not Available
Not Available

9.0.30729.4148

14.0.7015.1000
14.0.7015.1000

4.0.4326
8.2.50.W
10.0.0
0.63
1.5.6

2.15
8.0.61001
1.2.0
9.0.30729
-

8.8.02004
4.6.0.2292
3.5.3
-

History Details
No changes detected onToday 10:22:13 AM
No changes detected onToday 10:12:07 AM
(C) Copyright 2005-2013,ZOHO Corp.

Page31

Not Assigned
Not Assigned
Not Assigned
Not Assigned