Losmi

8/10/2019 Losmi

1/31

Computer Details - AM-IT-MV Generated on - Feb 18,2014 12:23:32 PM

Complete Summary, System details, Hardware and Software Details of a Computer is shown here.

Last Scan :Today 10:12:19 AM User Currently Logged on :mvujkovic

Summary Details

Computer Name : AM-IT-MV

Domain : PORTOMONTENEGRO

Primary Owner : Oliver

Asset Summary

Total Hardware 40

Total Software 112

Commercial Software 4

Non Commercial Software 0

Prohibited Software 0

OS Summary

Operating System Windows 7 Professional Edition (x64)

OS Version 6.1.7601

Registered To Oliver

Serial Number 00371-OEM-9045386-25749

OS CD Key 6VVY4-C4PH9-9YGWT-CVWX6-VBWC9

Hardware Summary

Device Manufacturer Apple Inc.

Device Model MacBookAir5,1

Device Type NoteBook

Disk Space Total= 139GB ; Free = 70GB ; Used = 69GB

Processor (1) Intel(R) Core(TM) i7-3667U CPU @ 2.00GHz

Memory 8099MB of RAM

Service Tag C02JN09FDRV9

Network Adapters

Adapter Name MAC Address IP Address Gateway DHCP Status DHCP Server

[00000009] Apple USB EthernetAdapter

80:49:71:10:F6:77 172.18.4.34,fe80::d071:387e:3fc

d:8d87

172.18.4.33 Disabled -

System Details

System Services (180)

Name Display Name Description Path Name Service Type Startup

Mode

Logon Name

McTaskManager McAfee TaskManager

Allows scheduling ofMcAfee scanning andupdating activities.

"C:\Program Files(x86)\McAfee\VirusScanEnterprise\VsTskMgr.exe"

Own Process Automatic LocalSystem

defragsvc Disk Defragmenter Provides DiskDefragmentationCapabilities.

C:\Windows\system32\svchost.exe -k defragsvc

Own Process Manual localSystem

hidserv Human InterfaceDevice Access Enables generic inputaccess to HumanInterface Devices (HID),which activates andmaintains the use ofpredefined hot buttons onkeyboards, remotecontrols, and othermultimedia devices. Ifthis service is stopped,hot buttons controlled bythis service will no longerfunction. If this service isdisabled, any servicesthat explicitly depend onit will fail to start.

C:\Windows\system32\svchost.exe -kLocalSystemNetworkRestricted

Share Process Manual LocalSystem

WatAdminSvc WindowsActivation

TechnologiesService

Performs Windows 7Validation.

C:\Windows\system32\Wat\WatAdminSvc.exe

Own Process Manual LocalSystem

8/10/2019 Losmi

2/31

Page2

swprv Microsoft SoftwareShadow CopyProvider

Manages software-basedvolume shadow copiestaken by the VolumeShadow Copy service. Ifthis service is stopped,software-based volumeshadow copies cannot bemanaged. If this serviceis disabled, any servicesthat explicitly depend onit will fail to start.

C:\Windows\System32\svchost.exe -k swprv


TrustedInstaller Windows ModulesInstaller

Enables installation,modification, andremoval of Windowsupdates and optionalcomponents. If thisservice is disabled, installor uninstall of Windowsupdates might fail for thiscomputer.

C:\Windows\servicing\TrustedInstaller.exe


Winmgmt WindowsManagementInstrumentation

Provides a commoninterface and objectmodel to accessmanagement informationabout operating system,devices, applications andservices. If this service isstopped, most Windows-based software will notfunction properly. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.

C:\Windows\system32\svchost.exe -k netsvcs

Share Process Automatic localSystem

ose Office SourceEngine

Saves installation filesused for updates andrepairs and is requiredfor the downloading ofSetup updates andWatson error reports.

"C:\Program Files(x86)\CommonFiles\MicrosoftShared\SourceEngine\OSE.EXE"


CryptSvc CryptographicServices

Provides fourmanagement services:Catalog DatabaseService, which confirmsthe signatures ofWindows files and allowsnew programs to beinstalled; Protected Root

Service, which adds andremoves Trusted RootCertification Authoritycertificates from thiscomputer; AutomaticRoot Certificate UpdateService, which retrievesroot certificates fromWindows Update andenable scenarios such asSSL; and Key Service,which helps enroll thiscomputer for certificates.If this service is stopped,these managementservices will not functionproperly. If this service isdisabled, any servicesthat explicitly depend on

it will fail to start.

C:\Windows\system32\svchost.exe -kNetworkService

Share Process Automatic NTAuthority\NetworkService

upnphost UPnP Device Host Allows UPnP devices tobe hosted on thiscomputer. If this serviceis stopped, any hostedUPnP devices will stopfunctioning and noadditional hosted devicescan be added. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.

C:\Windows\system32\svchost.exe -kLocalServiceAndNoImpersonation

Share Process Manual NTAUTHORITY\LocalService

Fax Fax Enables you to send andreceive faxes, utilizingfax resources availableon this computer or on

the network.

C:\Windows\system32\fxssvc.exe

Own Process Manual NTAUTHORITY\NetworkService

8/10/2019 Losmi

3/31

Page3

wuauserv Windows Update Enables the detection,download, andinstallation of updates forWindows and otherprograms. If this serviceis disabled, users of thiscomputer will not be ableto use Windows Updateor its automatic updatingfeature, and programswill not be able to use theWindows Update Agent(WUA) API.


Share Process Automatic LocalSystem

FDResPub FunctionDiscoveryResourcePublication

Publishes this computerand resources attachedto this computer so theycan be discovered overthe network. If thisservice is stopped,network resources will nolonger be published andthey will not bediscovered by othercomputers on thenetwork.



PerfHost PerformanceCounter DLL Host

Enables remote usersand 64-bit processes toquery performancecounters provided by 32-bit DLLs. If this service isstopped, only local usersand 32-bit processes willbe able to queryperformance countersprovided by 32-bit DLLs.

C:\Windows\SysWow64\perfhost.exe

Own Process Manual NTAUTHORITY\LocalService

Pml Driver HPZ12 Pml Driver HPZ12 -- C:\Windows\System32\svchost.exe -k HPZ12

Own Process Automatic NTAUTHORITY\LocalService

msiserver Windows Installer Adds, modifies, andremoves applicationsprovided as a WindowsInstaller (*.msi) package.If this service is disabled,any services thatexplicitly depend on it willfail to start.

C:\Windows\system32\msiexec.exe /V


NetMsmqActivator Net.Msmq ListenerAdapter

Receives activationrequests over the

net.msmq andmsmq.formatnameprotocols and passesthem to the WindowsProcess ActivationService.

"c:\Windows\Microsoft.NET\Framework64\v4.0.30

319\SMSvcHost.exe" -NetMsmqActivator

Share Process Disabled NTAUTHORITY\Netw

orkService

PNRPsvc Peer NameResolutionProtocol

Enables serverless peername resolution over theInternet using the PeerName ResolutionProtocol (PNRP). Ifdisabled, some peer-to-peer and collaborativeapplications, such asRemote Assistance, maynot function.

C:\Windows\System32\svchost.exe -kLocalServicePeerNet


PrlVssProvider PrlVssProvider VSS Parallels Backup

Provider

C:\Windows\system32\dll

host.exe/Processid:{FE5456B4-52A3-4C62-9B56-61E78F104C41}


COMSysApp COM+ SystemApplication

Manages theconfiguration andtracking of ComponentObject Model (COM)+-based components. If theservice is stopped, mostCOM+-basedcomponents will notfunction properly. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.

C:\Windows\system32\dllhost.exe

/Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}


8/10/2019 Losmi

4/31

Page4

UxSms Desktop WindowManager SessionManager

Provides DesktopWindow Manager startupand maintenanceservices

C:\Windows\System32\svchost.exe -kLocalSystemNetworkRestricted

Share Process Automatic localSystem

PeerDistSvc BranchCache This service cachesnetwork content frompeers on the localsubnet.

C:\Windows\System32\svchost.exe -k PeerDist

Share Process Manual NTAUTHORITY\NetworkService

ShellHWDetection Shell HardwareDetection

Provides notifications forAutoPlay hardwareevents.

C:\Windows\System32\svchost.exe -k netsvcs


TermService Remote DesktopServices

Allows users to connectinteractively to a remotecomputer. RemoteDesktop and RemoteDesktop Session HostServer depend on thisservice. To preventremote use of thiscomputer, clear thecheckboxes on theRemote tab of theSystem properties controlpanel item.

C:\Windows\System32\svchost.exe -kNetworkService

Share Process Manual NTAuthority\NetworkService

iphlpsvc IP Helper Provides tunnelconnectivity using IPv6transition technologies(6to4, ISATAP, PortProxy, and Teredo), andIP-HTTPS. If this serviceis stopped, the computerwill not have theenhanced connectivitybenefits that thesetechnologies offer.

C:\Windows\System32\svchost.exe -k NetSvcs


gpsvc Group PolicyClient

The service isresponsible for applyingsettings configured byadministrators for thecomputer and usersthrough the Group Policycomponent. If the serviceis stopped or disabled,the settings will not beapplied and applicationsand components will notbe manageable throughGroup Policy. Any

components orapplications that dependon the Group Policycomponent might not befunctional if the service isstopped or disabled.

C:\Windows\system32\svchost.exe -kGPSvcGroup


UI0Detect InteractiveServices Detection

Enables user notificationof user input forinteractive services,which enables access todialogs created byinteractive services whenthey appear. If thisservice is stopped,notifications of newinteractive servicedialogs will no longerfunction and there might

not be access tointeractive servicedialogs. If this service isdisabled, bothnotifications of andaccess to new interactiveservice dialogs will nolonger function.

C:\Windows\system32\UI0Detect.exe


mfevtp McAfee ValidationTrust ProtectionService

Provides validation trustprotection services

"C:\Windows\system32\mfevtps.exe"


SDRSVC Windows Backup Provides WindowsBackup and Restorecapabilities.

C:\Windows\system32\svchost.exe -k SDRSVC


8/10/2019 Losmi

5/31

Page5

gupdate Google UpdateService (gupdate)

Keeps your Googlesoftware up to date. Ifthis service is disabled orstopped, your Googlesoftware will not be keptup to date, meaningsecurity vulnerabilitiesthat may arise cannot befixed and features maynot work. This serviceuninstalls itself whenthere is no Googlesoftware using it.

"C:\Program Files(x86)\Google\Update\GoogleUpdate.exe" /svc


IKEEXT IKE and AuthIPIPsec KeyingModules

The IKEEXT servicehosts the Internet KeyExchange (IKE) andAuthenticated InternetProtocol (AuthIP) keyingmodules. These keyingmodules are used forauthentication and keyexchange in InternetProtocol security (IPsec).Stopping or disabling theIKEEXT service willdisable IKE and AuthIPkey exchange with peercomputers. IPsec istypically configured touse IKE or AuthIP;therefore, stopping or

disabling the IKEEXTservice might result in anIPsec failure and mightcompromise the securityof the system. It isstrongly recommendedthat you have theIKEEXT service running.



ParallelsCoherenceService

ParallelsCoherenceService

-- C:\Program Files(x86)\Parallels\ParallelsTools\Services\coherence.exe


wbengine Block LevelBackup EngineService

The WBENGINE serviceis used by WindowsBackup to performbackup and recoveryoperations. If this serviceis stopped by a user, it

may cause the currentlyrunning backup orrecovery operation to fail.Disabling this servicemay disable backup andrecovery operationsusing Windows Backupon this computer.

"C:\Windows\system32\wbengine.exe"


WebClient WebClient Enables Windows-basedprograms to create,access, and modifyInternet-based files. Ifthis service is stopped,these functions will notbe available. If thisservice is disabled, anyservices that explicitlydepend on it will fail to

start.

C:\Windows\system32\svchost.exe -kLocalService


MMCSS Multimedia ClassScheduler

Enables relativeprioritization of workbased on system-widetask priorities. This isintended mainly formultimedia applications.If this service is stopped,individual tasks resort totheir default priority.



DCService.exe DCService.exe -- C:\ProgramData\DatacardService\DCService.exe


8/10/2019 Losmi

6/31

Page6

WwanSvc WWANAutoConfig

This service managesmobile broadband (GSM& CDMA) datacard/embedded moduleadapters andconnections by auto-configuring the networks.It is stronglyrecommended that thisservice be kept runningfor best user experienceof mobile broadbanddevices.

C:\Windows\system32\svchost.exe -kLocalServiceNoNetwork

Share Process Manual NTAuthority\LocalService

clr_optimization_v4.0.30319_32

Microsoft .NETFramework NGENv4.0.30319_X86

Microsoft .NETFramework NGEN

C:\Windows\Microsoft.NET\Framework\v4.0.30319

\mscorsvw.exe


fdPHost FunctionDiscovery ProviderHost

The FDPHOST servicehosts the FunctionDiscovery (FD) networkdiscovery providers.These FD providerssupply network discoveryservices for the SimpleServices DiscoveryProtocol (SSDP) andWeb Services Discovery (WS-D)protocol. Stopping ordisabling the FDPHOSTservice will disablenetwork discovery forthese protocols whenusing FD. When thisservice is unavailable,network services usingFD and relying on thesediscovery protocols willbe unable to find networkdevices or resources.



NlaSvc Network LocationAwareness

Collects and storesconfiguration informationfor the network andnotifies programs whenthis information ismodified. If this service isstopped, configurationinformation might beunavailable. If thisservice is disabled, any

services that explicitlydepend on it will fail tostart.


Share Process Automatic NTAUTHORITY\NetworkService




C:\Windows\Microsoft.NET\Framework\v2.0.50727

\mscorsvw.exe


PNRPAutoReg PNRP MachineName PublicationService

This service publishes amachine name using thePeer Name ResolutionProtocol. Configurationis managed via the netshcontext 'p2p pnrp peer'



nsi Network StoreInterface Service

This service deliversnetwork notifications (e.g.interfaceaddition/deleting etc) touser mode clients.

Stopping this service willcause loss of networkconnectivity. If thisservice is disabled, anyother services thatexplicitly depend on thisservice will fail to start.


Share Process Automatic NTAuthority\LocalService

hkmsvc Health Key andCertificateManagement

Provides X.509 certificateand key managementservices for the NetworkAccess Protection Agent(NAPAgent).Enforcementtechnologies that useX.509 certificates maynot function properlywithout this service


Share Process Manual localSystem

8/10/2019 Losmi

7/31

Page7

Parallels ToolsService

Parallels ToolsService

-- C:\Program Files(x86)\Parallels\ParallelsTools\Services\prl_tools_service.exe


EapHost ExtensibleAuthenticationProtocol

The ExtensibleAuthentication Protocol(EAP) service providesnetwork authentication insuch scenarios as 802.1xwired and wireless, VPN,and Network AccessProtection (NAP). EAPalso provides applicationprogramming interfaces(APIs) that are used bynetwork access clients,including wireless andVPN clients, during theauthentication process.If you disable thisservice, this computer isprevented fromaccessing networks thatrequire EAPauthentication.



RemoteAccess Routing andRemote Access

Offers routing services tobusinesses in local areaand wide area networkenvironments.


Share Process Disabled localSystem

WdiServiceHost Diagnostic Service

Host

The Diagnostic Service

Host is used by theDiagnostic Policy Serviceto host diagnostics thatneed to run in a LocalService context. If thisservice is stopped, anydiagnostics that dependon it will no longerfunction.

C:\Windows\System32\sv

chost.exe -kLocalService

Share Process Manual NT

AUTHORITY\LocalService

SensrSvc AdaptiveBrightness

Monitors ambient lightsensors to detectchanges in ambient lightand adjust the displaybrightness. If this serviceis stopped or disabled,the display brightness willnot adapt to lightingconditions.



SCardSvr Smart Card Manages access tosmart cards read by thiscomputer. If this serviceis stopped, this computerwill be unable to readsmart cards. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.



WPCSvc Parental Controls This service is a stub forWindows ParentalControl functionality thatexisted in Vista. It isprovided for backwardcompatibility only.

C:\Windows\system32\svchost.exe -kLocalServiceNetworkRestricted


TabletInputService Tablet PC Input

Service

Enables Tablet PC pen

and ink functionality


chost.exe -kLocalSystemNetworkRestricted


StorSvc Storage Service Enforces group policy forstorage devices



lltdsvc Link-LayerTopologyDiscovery Mapper

Creates a Network Map,consisting of PC anddevice topology(connectivity)information, andmetadata describingeach PC and device. Ifthis service is disabled,the Network Map will notfunction properly.

C:\Windows\System32\svchost.exe -kLocalService


8/10/2019 Losmi

8/31

Page8

cphs Intel(R) ContentProtection HECIService

Intel(R) ContentProtection HECI Service- enables communicationwith the ContentProtection FW

C:\Windows\SysWow64\IntelCpHeciSvc.exe


ProtectedStorage Protected Storage Provides protectedstorage for sensitivedata, such as passwords,to prevent access byunauthorized services,processes, or users.

C:\Windows\system32\lsass.exe


eventlog Windows Event

Log

This service manages

events and event logs. Itsupports logging events,querying events,subscribing to events,archiving event logs, andmanaging eventmetadata. It can displayevents in both XML andplain text format.Stopping this servicemay compromise securityand reliability of thesystem.


chost.exe -kLocalServiceNetworkRestricted

Share Process Automatic NT


HomeGroupProvider

HomeGroupProvider

Performs networkingtasks associated withconfiguration andmaintenance ofhomegroups. If this

service is stopped ordisabled, your computerwill be unable to detectother homegroups andyour homegroup mightnot work properly. It isrecommended that youkeep this service running.

C:\Windows\System32\svchost.exe -kLocalServiceNetworkRestricted


SstpSvc Secure SocketTunneling ProtocolService

Provides support for theSecure Socket TunnelingProtocol (SSTP) toconnect to remotecomputers using VPN. Ifthis service is disabled,users will not be able touse SSTP to accessremote servers.



EventSystem COM+ Event

System

Supports System Event

Notification Service(SENS), which providesautomatic distribution ofevents to subscribingComponent Object Model(COM) components. Ifthe service is stopped,SENS will close and willnot be able to providelogon and logoffnotifications. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.

C:\Windows\system32\sv

chost.exe -kLocalService

Share Process Automatic NT


CertPropSvc CertificatePropagation

Copies user certificatesand root certificates fromsmart cards into the

current user's certificatestore, detects when asmart card is insertedinto a smart card reader,and, if needed, installsthe smart card Plug andPlay minidriver.



8/10/2019 Losmi

9/31

Page9

BDESVC BitLocker DriveEncryption Service

BDESVC hosts theBitLocker DriveEncryption service.BitLocker DriveEncryption providessecure startup for theoperating system, as wellas full volume encryptionfor OS, fixed orremovable volumes. Thisservice allows BitLockerto prompt users forvarious actions related to

their volumes whenmounted, and unlocksvolumes automaticallywithout user interaction.Additionally, it storesrecovery information toActive Directory, ifavailable, and, ifnecessary, ensures themost recent recoverycertificates are used.Stopping or disabling theservice would preventusers from leveragingthis functionality.



UNS Intel(R)Management andSecurity

Application UserNotificationService

Intel(R) Management andSecurity Application UserNotification Service -

Updates the WindowsEvent Log withnotifications of predefined events receivedfrom the local Intel(R)Management andSecurity ApplicationDevice.

"C:\Program Files(x86)\Intel\Intel(R)Management Engine

Components\UNS\UNS.exe"


NetTcpActivator Net.Tcp ListenerAdapter

Receives activationrequests over the net.tcpprotocol and passesthem to the WindowsProcess ActivationService.

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

Share Process Disabled NTAUTHORITY\LocalService

lmhosts TCP/IP NetBIOSHelper

Provides support for theNetBIOS over TCP/IP(NetBT) service andNetBIOS name resolution

for clients on thenetwork, thereforeenabling users to sharefiles, print, and log on tothe network. If thisservice is stopped, thesefunctions might beunavailable. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.


Share Process Automatic NTAUTHORITY\LocalService

WSearch Windows Search Provides contentindexing, propertycaching, and searchresults for files, e-mail,and other content.

C:\Windows\system32\SearchIndexer.exe

/Embedding


RasMan Remote AccessConnectionManager

Manages dial-up andvirtual private network(VPN) connections fromthis computer to theInternet or other remotenetworks. If this serviceis disabled, any servicesthat explicitly depend onit will fail to start.

C:\Windows\System32\svchost.exe -k netsvcs Share Process Manual localSystem

FontCache Windows FontCache Service

Optimizes performanceof applications bycaching commonly usedfont data. Applicationswill start this service if itis not already running. Itcan be disabled, thoughdoing so will degradeapplication performance.



8/10/2019 Losmi

10/31

Page10

MSDTC DistributedTransactionCoordinator

Coordinates transactionsthat span multipleresource managers, suchas databases, messagequeues, and file systems.If this service is stopped,these transactions willfail. If this service isdisabled, any servicesthat explicitly depend onit will fail to start.

C:\Windows\System32\msdtc.exe


THREADORDER Thread OrderingServer

Provides orderedexecution for a group ofthreads within a specificperiod of time.



VMUSBArbService

VMware USBArbitration Service

Arbitration andenumeration of USBdevices for virtualmachines

"C:\Program Files(x86)\CommonFiles\VMware\USB\vmware-usbarbitrator64.exe"


Dnscache DNS Client The DNS Client service(dnscache) cachesDomain Name System(DNS) names andregisters the fullcomputer name for thiscomputer. If the serviceis stopped, DNS nameswill continue to beresolved. However, theresults of DNS name

queries will not becached and thecomputer's name will notbe registered. If theservice is disabled, anyservices that explicitlydepend on it will fail tostart.



wscsvc Security Center The WSCSVC (WindowsSecurity Center) servicemonitors and reportssecurity health settingson the computer. Thehealth settings includefirewall (on/off), antivirus(on/off/out of date),antispyware (on/off/out ofdate), Windows Update

(automatically/manuallydownload and installupdates), User AccountControl (on/off), andInternet settings(recommended/notrecommended). Theservice provides COMAPIs for independentsoftware vendors toregister and record thestate of their products tothe Security Centerservice. The ActionCenter (AC) UI uses theservice to provide systrayalerts and a graphicalview of the securityhealth states in the AC

control panel. NetworkAccess Protection (NAP)uses the service to reportthe security health statesof clients to the NAPNetwork Policy Server tomake network quarantinedecisions. The servicealso has a public API thatallows externalconsumers toprogrammatically retrievethe aggregated securityhealth state of thesystem.



AdobeARMservice Adobe AcrobatUpdate Service

Adobe Acrobat Updaterkeeps your Adobesoftware up to date.

"C:\Program Files(x86)\CommonFiles\Adobe\ARM\1.0\ar

msvc.exe"


8/10/2019 Losmi

11/31

Page11

SkypeUpdate Skype Updater Enables the detection,download and installationof updates for Skype.

"C:\Program Files(x86)\Skype\Updater\Updater.exe"


sppsvc SoftwareProtection

Enables the download,installation andenforcement of digitallicenses for Windows andWindows applications. Ifthe service is disabled,the operating system andlicensed applicationsmay run in a notificationmode. It is stronglyrecommended that younot disable the SoftwareProtection service.

C:\Windows\system32\sppsvc.exe

Own Process Automatic NTAUTHORITY\NetworkService

NetTcpPortSharing

Net.Tcp PortSharing Service

Provides ability to shareTCP ports over thenet.tcp protocol.

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

Share Process Disabled NTAUTHORITY\LocalService

AeLookupSvc ApplicationExperience

Processes applicationcompatibility cacherequests for applicationsas they are launched



ALG Application LayerGateway Service

Provides support for 3rdparty protocol plug-ins forInternet ConnectionSharing

C:\Windows\System32\alg.exe


RpcSs Remote ProcedureCall (RPC)

The RPCSS service isthe Service Control

Manager for COM andDCOM servers. Itperforms objectactivations requests,object exporterresolutions anddistributed garbagecollection for COM andDCOM servers. If thisservice is stopped ordisabled, programs usingCOM or DCOM will notfunction properly. It isstrongly recommendedthat you have theRPCSS service running

C:\Windows\system32\svchost.exe -k rpcss

Share Process Automatic NTAUTHORITY\Netw

orkService

dot3svc Wired AutoConfig The Wired AutoConfig(DOT3SVC) service is

responsible forperforming IEEE 802.1Xauthentication onEthernet interfaces. Ifyour current wirednetwork deploymentenforces 802.1Xauthentication, theDOT3SVC serviceshould be configured torun for establishing Layer2 connectivity and/orproviding access tonetwork resources. Wirednetworks that do notenforce 802.1Xauthentication areunaffected by theDOT3SVC service.

C:\Windows\system32\svchost.exe -k

LocalSystemNetworkRestricted


VaultSvc CredentialManager

Provides secure storageand retrieval ofcredentials to users,applications and securityservice packages.



WdiSystemHost Diagnostic SystemHost

The Diagnostic SystemHost is used by theDiagnostic Policy Serviceto host diagnostics thatneed to run in a LocalSystem context. If thisservice is stopped, anydiagnostics that dependon it will no longerfunction.



8/10/2019 Losmi

12/31

Page12

SamSs Security AccountsManager

The startup of thisservice signals otherservices that the SecurityAccounts Manager(SAM) is ready to acceptrequests. Disabling thisservice will prevent otherservices in the systemfrom being notified whenthe SAM is ready, whichmay in turn cause thoseservices to fail to startcorrectly. This service

should not be disabled.



LanmanWorkstation

Workstation Creates and maintainsclient networkconnections to remoteservers using the SMBprotocol. If this service isstopped, theseconnections will beunavailable. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.



VSS Volume ShadowCopy

Manages andimplements VolumeShadow Copies used forbackup and otherpurposes. If this serviceis stopped, shadowcopies will be unavailablefor backup and thebackup may fail. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.

C:\Windows\system32\vssvc.exe


WerSvc Windows ErrorReporting Service

Allows errors to bereported when programsstop working orresponding and allowsexisting solutions to bedelivered. Also allowslogs to be generated fordiagnostic and repairservices. If this service isstopped, error reporting

might not work correctlyand results of diagnosticservices and repairsmight not be displayed.

C:\Windows\System32\svchost.exe -kWerSvcGroup


SSDPSRV SSDP Discovery Discovers networkeddevices and services thatuse the SSDP discoveryprotocol, such as UPnPdevices. Also announcesSSDP devices andservices running on thelocal computer. If thisservice is stopped, SSDP-based devices will notbe discovered. If thisservice is disabled, anyservices that explicitlydepend on it will fail to

start.



TeamViewer9 TeamViewer 9 TeamViewer RemoteSoftware

"C:\Program Files(x86)\TeamViewer\Version9\TeamViewer_Service.exe"


Mcx2Svc Media CenterExtender Service

Allows Media CenterExtenders to locate andconnect to the computer.


Share Process Disabled NTAuthority\LocalService

ehRecvr Windows MediaCenter ReceiverService

Windows Media CenterService for TV and FMbroadcast reception

C:\Windows\ehome\ehRecvr.exe

Own Process Manual NTAUTHORITY\networkService

8/10/2019 Losmi

13/31

Page13

napagent Network AccessProtection Agent

The Network AccessProtection (NAP) agentservice collects andmanages healthinformation for clientcomputers on a network.Information collected byNAP agent is used tomake sure that the clientcomputer has therequired software andsettings. If a clientcomputer is not

compliant with healthpolicy, it can be providedwith restricted networkaccess until itsconfiguration is updated.Depending on theconfiguration of healthpolicy, client computersmight be automaticallyupdated so that usersquickly regain fullnetwork access withouthaving to manuallyupdate their computer.



wmiApSrv WMI PerformanceAdapter

Provides performancelibrary information fromWindows ManagementInstrumentation (WMI)

providers to clients onthe network. This serviceonly runs whenPerformance Data Helperis activated.

C:\Windows\system32\wbem\WmiApSrv.exe


vds Virtual Disk Provides managementservices for disks,volumes, file systems,and storage arrays.

C:\Windows\System32\vds.exe


netprofm Network ListService

Identifies the networks towhich the computer hasconnected, collects andstores properties forthese networks, andnotifies applicationswhen these propertieschange.

C:\Windows\System32\svchost.exe -kLocalService


Spooler Print Spooler Loads files to memory forlater printing C:\Windows\System32\spoolsv.exe Own Process Automatic LocalSystem

FontCache3.0.0.0 WindowsPresentationFoundation FontCache 3.0.0.0

Optimizes performanceof Windows PresentationFoundation (WPF)applications by cachingcommonly used fontdata. WPF applicationswill start this service if itis not already running. Itcan be disabled, thoughdoing so will degrade theperformance of WPFapplications.

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF

\PresentationFontCache.exe

Own Process Manual NTAuthority\LocalService

Power Power Manages power policyand power policynotification delivery.

C:\Windows\system32\svchost.exe -kDcomLaunch


SCPolicySvc Smart CardRemoval Policy Allows the system to beconfigured to lock theuser desktop upon smartcard removal.

C:\Windows\system32\svchost.exe -k netsvcs Share Process Manual LocalSystem

osppsvc Office SoftwareProtectionPlatform

Office SoftwareProtection PlatformService (unlocalizeddescription)

"C:\ProgramFiles\CommonFiles\MicrosoftShared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"


stisvc Windows ImageAcquisition (WIA)

Provides imageacquisition services forscanners and cameras

C:\Windows\system32\svchost.exe -k imgsvc

Own Process Automatic NTAuthority\LocalService

AppleOSSMgr Apple OS SwitchManager

Provides support forswitching between MacOS X and Windows

C:\Windows\system32\AppleOSSMgr.exe


8/10/2019 Losmi

14/31

Page14

QWAVE Quality WindowsAudio VideoExperience

Quality Windows AudioVideo Experience(qWave) is a networkingplatform for Audio Video(AV) streamingapplications on IP homenetworks. qWaveenhances AV streamingperformance andreliability by ensuringnetwork quality-of-service(QoS) for AVapplications. It provides

mechanisms foradmission control, runtime monitoring andenforcement, applicationfeedback, and trafficprioritization.



SessionEnv Remote DesktopConfiguration

Remote DesktopConfiguration service(RDCS) is responsible forall Remote DesktopServices and RemoteDesktop relatedconfiguration and sessionmaintenance activitiesthat require SYSTEMcontext. These includeper-session temporaryfolders, RD themes, and

RD certificates.



p2pimsvc Peer NetworkingIdentity Manager

Provides identity servicesfor the Peer NameResolution Protocol(PNRP) and Peer-to-Peer Grouping services.If disabled, the PeerName ResolutionProtocol (PNRP) andPeer-to-Peer Groupingservices may notfunction, and someapplications, such asHomeGroup and RemoteAssistance, may notfunction correctly.



NetPipeActivator Net.Pipe ListenerAdapter

Receives activationrequests over the

net.pipe protocol andpasses them to theWindows ProcessActivation Service.

c:\Windows\Microsoft.NET\Framework64\v4.0.303

19\SMSvcHost.exe

Share Process Disabled NTAUTHORITY\Loca

lService

SharedAccess InternetConnectionSharing (ICS)

Provides networkaddress translation,addressing, nameresolution and/orintrusion preventionservices for a home orsmall office network.



MSiSCSI Microsoft iSCSIInitiator Service

Manages Internet SCSI(iSCSI) sessions fromthis computer to remoteiSCSI target devices. Ifthis service is stopped,this computer will not be

able to login or accessiSCSI targets. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.



Browser Computer Browser Maintains an updated listof computers on thenetwork and supplies thislist to computersdesignated as browsers.If this service is stopped,this list will not beupdated or maintained. Ifthis service is disabled,any services thatexplicitly depend on it willfail to start.



8/10/2019 Losmi

15/31

Page15

McAfeeFramework McAfeeFrameworkService

Shared componentframework for McAfeeproducts

"C:\Program Files(x86)\McAfee\CommonFramework\FrameworkService.exe" /ServiceStart


WMPNetworkSvc Windows MediaPlayer NetworkSharing Service

Shares Windows MediaPlayer libraries to othernetworked players andmedia devices usingUniversal Plug and Play

"C:\ProgramFiles\Windows MediaPlayer\wmpnetwk.exe"


EFS Encrypting FileSystem (EFS)

Provides the core fileencryption technologyused to store encrypted

files on NTFS file systemvolumes. If this service isstopped or disabled,applications will beunable to accessencrypted files.

C:\Windows\System32\lsass.exe


wudfsvc Windows DriverFoundation - User-mode DriverFramework

Creates and managesuser-mode driverprocesses. This servicecannot be stopped.



UmRdpService Remote DesktopServicesUserMode PortRedirector

Allows the redirection ofPrinters/Drives/Ports forRDP connections






C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe


WinRM Windows RemoteManagement (WS-Management)

Windows RemoteManagement (WinRM)service implements theWS-Managementprotocol for remotemanagement. WS-Management is astandard web servicesprotocol used for remotesoftware and hardwaremanagement. TheWinRM service listens onthe network for WS-Management requestsand processes them. TheWinRM Service needs tobe configured with alistener using winrm.cmd

command line tool orthrough Group Policy inorder for it to listen overthe network. The WinRMservice provides accessto WMI data and enablesevent collection. Eventcollection andsubscription to eventsrequire that the service isrunning. WinRMmessages use HTTP andHTTPS as transports.The WinRM service doesnot depend on IIS but ispreconfigured to share aport with IIS on the samemachine. The WinRMservice reserves the

/wsman URL prefix. Toprevent conflicts with IIS,administrators shouldensure that any websiteshosted on IIS do not usethe /wsman URL prefix.



8/10/2019 Losmi

16/31

Page16

HomeGroupListener

HomeGroupListener

Makes local computerchanges associated withconfiguration andmaintenance of thehomegroup-joinedcomputer. If this serviceis stopped or disabled,your computer will notwork properly in ahomegroup and yourhomegroup might notwork properly. It isrecommended that you

keep this service running.



LMS Intel(R)Management andSecurityApplication LocalManagementService

Allows applications toaccess the local Intel(R)Management andSecurity Applicationusing its locally-availableselected networkinterfaces.

C:\Program Files(x86)\Intel\Intel(R)Management EngineComponents\LMS\LMS.exe


AudioSrv Windows Audio Manages audio forWindows-basedprograms. If this serviceis stopped, audio devicesand effects will notfunction properly. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart



ehSched Windows MediaCenter SchedulerService

Starts and stopsrecording of TV programswithin Windows MediaCenter

C:\Windows\ehome\ehsched.exe

Own Process Manual NTAUTHORITY\networkService

IPBusEnum PnP-X IP BusEnumerator

The PnP-X busenumerator servicemanages the virtualnetwork bus. It discoversnetwork connecteddevices using theSSDP/WS discoveryprotocols and gives thempresence in PnP. If thisservice is stopped ordisabled, presence ofNCD devices will not bemaintained in PnP. All

pnpx based scenarioswill stop functioning.



TapiSrv Telephony Provides Telephony API(TAPI) support forprograms that controltelephony devices on thelocal computer and,through the LAN, onservers that are alsorunning the service.



bthserv Bluetooth SupportService

The Bluetooth servicesupports discovery andassociation of remoteBluetooth devices.Stopping or disabling thisservice may causealready installedBluetooth devices to fail

to operate properly andprevent new devicesfrom being discovered orassociated.

C:\Windows\system32\svchost.exe -k bthsvcs


BITS BackgroundIntelligent TransferService

Transfers files in thebackground using idlenetwork bandwidth. If theservice is disabled, thenany applications thatdepend on BITS, such asWindows Update or MSNExplorer, will be unableto automaticallydownload programs andother information.



SysMain Superfetch Maintains and improvessystem performance over

time.

C:\Windows\system32\svchost.exe -k

LocalSystemNetworkRestricted


8/10/2019 Losmi

17/31

Page17

Wlansvc WLAN AutoConfig The WLANSVC serviceprovides the logicrequired to configure,discover, connect to, anddisconnect from awireless local areanetwork (WLAN) asdefined by IEEE 802.11standards. It alsocontains the logic to turnyour computer into asoftware access point sothat other devices or

computers can connectto your computerwirelessly using a WLANadapter that can supportthis. Stopping ordisabling the WLANSVCservice will make allWLAN adapters on yourcomputer inaccessiblefrom the Windowsnetworking UI. It isstrongly recommendedthat you have theWLANSVC servicerunning if your computerhas a WLAN adapter.



KtmRm KtmRm forDistributed

TransactionCoordinator

Coordinates transactionsbetween the Distributed

Transaction Coordinator(MSDTC) and the KernelTransaction Manager(KTM). If it is not needed,it is recommended thatthis service remainstopped. If it is needed,both MSDTC and KTMwill start this serviceautomatically. If thisservice is disabled, anyMSDTC transactioninteracting with a KernelResource Manager willfail and any services thatexplicitly depend on it willfail to start.

C:\Windows\System32\svchost.exe -k

NetworkServiceAndNoImpersonation

Share Process Manual NTAUTHORITY\Netw

orkService

AppIDSvc Application Identi ty Determines and verifies

the identity of anapplication. Disabling thisservice will preventAppLocker from beingenforced.


chost.exe -kLocalServiceAndNoImpersonation

Share Process Manual NT

Authority\LocalService

seclogon Secondary Logon Enables startingprocesses underalternate credentials. Ifthis service is stopped,this type of logon accesswill be unavailable. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.



IEEtwCollectorService

Internet ExplorerETW CollectorService

ETW Collector Servicefor Internet Explorer.When running, this

service collects real timeETW events andprocesses them.

C:\Windows\system32\IEEtwCollector.exe /V


8/10/2019 Losmi

18/31

Page18

Wecsvc Windows EventCollector

This service managespersistent subscriptionsto events from remotesources that support WS-Management protocol.This includes WindowsVista event logs,hardware and IPMI-enabled event sources.The service storesforwarded events in alocal Event Log. If thisservice is stopped or

disabled eventsubscriptions cannot becreated and forwardedevents cannot beaccepted.



WcsPlugInService Windows ColorSystem

The WcsPlugInServiceservice hosts third-partyWindows Color Systemcolor device model andgamut map model plug-inmodules. These plug-inmodules are vendor-specific extensions to theWindows Color Systembaseline color device andgamut map models.Stopping or disabling theWcsPlugInService

service will disable thisextensibility feature, andthe Windows ColorSystem will use itsbaseline modelprocessing rather thanthe vendor's desiredprocessing. This mightresult in inaccurate colorrendering.

C:\Windows\system32\svchost.exe -k wcssvc


KeyIso CNG Key Isolation The CNG key isolationservice is hosted in theLSA process. Theservice provides keyprocess isolation toprivate keys andassociated cryptographicoperations as required by

the Common Criteria.The service stores anduses long-lived keys in asecure processcomplying with CommonCriteria requirements.



TrkWks Distributed LinkTracking Client

Maintains links betweenNTFS files within acomputer or acrosscomputers in a network.



AxInstSV ActiveX Installer(AxInstSV)

Provides User AccountControl validation for theinstallation of ActiveXcontrols from the Internetand enablesmanagement of ActiveXcontrol installation basedon Group Policy settings.

This service is started ondemand and if disabledthe installation of ActiveXcontrols will behaveaccording to defaultbrowser settings.

C:\Windows\system32\svchost.exe -kAxInstSVGroup


DPS Diagnostic PolicyService

The Diagnostic PolicyService enables problemdetection,troubleshooting andresolution for Windowscomponents. If thisservice is stopped,diagnostics will no longerfunction.

C:\Windows\System32\svchost.exe -kLocalServiceNoNetwork


McShield McAfee McShield McAfee OnAccessScanner

"C:\ProgramFiles\Common

Files\McAfee\SystemCore\\mcshield.exe"


8/10/2019 Losmi

19/31

Page19

prl_uprof Parallels UserProfile Service

-- C:\Windows\system32\svchost.exe -k netsvcs


PlugPlay Plug and Play Enables a computer torecognize and adapt tohardware changes withlittle or no user input.Stopping or disabling thisservice will result insystem instability.



sppuinotify SPP NotificationService

Provides SoftwareLicensing activation andnotification



DcomLaunch DCOM ServerProcess Launcher

The DCOMLAUNCHservice launches COMand DCOM servers inresponse to objectactivation requests. If thisservice is stopped ordisabled, programs usingCOM or DCOM will notfunction properly. It isstrongly recommendedthat you have theDCOMLAUNCH servicerunning.



wcncsvc Windows ConnectNow - ConfigRegistrar

WCNCSVC hosts theWindows Connect NowConfiguration which isMicrosoft'sImplementation of Wi-FiProtected Setup (WPS)protocol. This is used toconfigure Wireless LANsettings for an AccessPoint (AP) or a Wi-FiDevice. The service isstarted programmaticallyas needed.

C:\Windows\System32\svchost.exe -kLocalServiceAndNoImpersonation


TBS TPM BaseServices

Enables access to theTrusted Platform Module(TPM), which provideshardware-basedcryptographic services tosystem components andapplications. If thisservice is stopped ordisabled, applications willbe unable to use keys

protected by the TPM.

C:\Windows\System32\svchost.exe -kLocalServiceAndNoImpersonation


Appinfo ApplicationInformation

Facilitates the running ofinteractive applicationswith additionaladministrative privileges.If this service is stopped,users will be unable tolaunch applications withthe additionaladministrative privilegesthey may require toperform desired usertasks.



ProfSvc User ProfileService

This service isresponsible for loadingand unloading userprofiles. If this service is

stopped or disabled,users will no longer beable to successfullylogon or logoff,applications may haveproblems getting tousers' data, andcomponents registered toreceive profile eventnotifications will notreceive them.



8/10/2019 Losmi

20/31

8/10/2019 Losmi

21/31

Page21

WinHttpAutoProxySvc

WinHTTP WebProxy Auto-Discovery Service

WinHTTP implementsthe client HTTP stackand provides developerswith a Win32 API andCOM Automationcomponent for sendingHTTP requests andreceiving responses. Inaddition, WinHTTPprovides support for auto-discovering a proxyconfiguration via itsimplementation of the

Web Proxy Auto-Discovery (WPAD)protocol.



aspnet_state ASP.NET StateService

Provides support for out-of-process session statesfor ASP.NET. If thisservice is stopped, out-of-process requests will notbe processed. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe


p2psvc Peer NetworkingGrouping

Enables multi-partycommunication usingPeer-to-Peer Grouping.If disabled, someapplications, such asHomeGroup, may notfunction.



AudioEndpointBuilder

Windows AudioEndpoint Builder

Manages audio devicesfor the Windows Audioservice. If this service isstopped, audio devicesand effects will notfunction properly. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart



OpenVPNAccessClient

OpenVPN AccessClient

OpenVPN Access Client "C:\Program Files(x86)\OpenVPNTechnologies\OpenVPNClient\core\capiws.exe"


idsvc Windows

CardSpace

Securely enables the

creation, management,and disclosure of digitalidentities.

"C:\Windows\Microsoft.N

ET\Framework64\v3.0\Windows CommunicationFoundation\infocard.exe"


BFE Base FilteringEngine

The Base FilteringEngine (BFE) is a servicethat manages firewalland Internet Protocolsecurity (IPsec) policiesand implements usermode filtering. Stoppingor disabling the BFEservice will significantlyreduce the security of thesystem. It will also resultin unpredictable behaviorin IPsec managementand firewall applications.



AppleTimeSrv Apple TimeService Maintains time and datewhen switching betweenMac OS X and Windows

C:\Windows\system32\AppleTimeSrv.exe Own Process Automatic LocalSystem

Dhcp DHCP Client Registers and updates IPaddresses and DNSrecords for this computer.If this service is stopped,this computer will notreceive dynamic IPaddresses and DNSupdates. If this service isdisabled, any servicesthat explicitly depend onit will fail to start.



WinDefend WindowsDefender

Protection againstspyware and potentiallyunwanted software

C:\Windows\System32\svchost.exe -k secsvcs


8/10/2019 Losmi

22/31

Page22

RpcLocator Remote ProcedureCall (RPC) Locator

In Windows 2003 andearlier versions ofWindows, the RemoteProcedure Call (RPC)Locator service managesthe RPC name servicedatabase. In WindowsVista and later versionsof Windows, this servicedoes not provide anyfunctionality and ispresent for applicationcompatibility.

C:\Windows\system32\locator.exe


Themes Themes Provides user experiencetheme management.



Schedule Task Scheduler Enables a user toconfigure and scheduleautomated tasks on thiscomputer. The servicealso hosts multipleWindows system-criticaltasks. If this service isstopped or disabled,these tasks will not berun at their scheduledtimes. If this service isdisabled, any servicesthat explicitly depend onit will fail to start.



LanmanServer Server Supports file, print, and

named-pipe sharing overthe network for thiscomputer. If this serviceis stopped, thesefunctions will beunavailable. If thisservice is disabled, anyservices that explicitlydepend on it will fail tostart.


chost.exe -k netsvcs


ManageEngineDesktop Central -Agent

ManageEngineDesktop Central 8- Agent

ManageEngine DesktopCentral 8 - Agent

"C:\Program Files(x86)\DesktopCentral_Agent\bin\dcagentservice.exe"


MpsSvc Windows Firewall Windows Firewall helpsprotect your computer bypreventing unauthorizedusers from gaining

access to your computerthrough the Internet or anetwork.



Netlogon Netlogon Maintains a securechannel between thiscomputer and the domaincontroller forauthenticating users andservices. If this service isstopped, the computermay not authenticateusers and services andthe domain controllercannot register DNSrecords. If this service isdisabled, any servicesthat explicitly depend onit will fail to start.



AppMgmt ApplicationManagement

Processes installation,removal, andenumeration requests forsoftware deployedthrough Group Policy. Ifthe service is disabled,users will be unable toinstall, remove, orenumerate softwaredeployed through GroupPolicy. If this service isdisabled, any servicesthat explicitly depend onit will fail to start.



8/10/2019 Losmi

23/31

Page23

SNMPTRAP SNMP Trap Receives trap messagesgenerated by local orremote Simple NetworkManagement Protocol(SNMP) agents andforwards the messagesto SNMP managementprograms running on thiscomputer. If this serviceis stopped, SNMP-basedprograms on thiscomputer will not receiveSNMP trap messages. If

this service is disabled,any services thatexplicitly depend on it willfail to start.

C:\Windows\System32\snmptrap.exe


CscService Offline Files The Offline Files serviceperforms maintenanceactivities on the OfflineFiles cache, responds touser logon and logoffevents, implements theinternals of the publicAPI, and dispatchesinteresting events tothose interested in OfflineFiles activities andchanges in cache state.






C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe


WbioSrvc WindowsBiometric Service

The Windows biometricservice gives clientapplications the ability tocapture, compare,manipulate, and storebiometric data withoutgaining direct access toany biometric hardwareor samples. The serviceis hosted in a privilegedSVCHOST process.

C:\Windows\system32\svchost.exe -kWbioSvcGroup


RemoteRegistry Remote Registry Enables remote users tomodify registry settingson this computer. If thisservice is stopped, theregistry can be modified

only by users on thiscomputer. If this serviceis disabled, any servicesthat explicitly depend onit will fail to start.

C:\Windows\system32\svchost.exe -k regsvc


pla Performance Logs& Alerts

Performance Logs andAlerts Collectsperformance data fromlocal or remotecomputers based onpreconfigured scheduleparameters, then writesthe data to a log ortriggers an alert. If thisservice is stopped,performance informationwill not be collected. Ifthis service is disabled,

any services thatexplicitly depend on it willfail to start.

C:\Windows\System32\svchost.exe -kLocalServiceNoNetwork


RasAuto Remote AccessAuto ConnectionManager

Creates a connection toa remote networkwhenever a programreferences a remote DNSor NetBIOS name oraddress.



RpcEptMapper RPC EndpointMapper

Resolves RPC interfacesidentifiers to transportendpoints. If this serviceis stopped or disabled,programs using RemoteProcedure Call (RPC)services will not functionproperly.

C:\Windows\system32\svchost.exe -k RPCSS


8/10/2019 Losmi

24/31

Page24

gupdatem Google UpdateService(gupdatem)

Keeps your Googlesoftware up to date. Ifthis service is disabled orstopped, your Googlesoftware will not be keptup to date, meaningsecurity vulnerabilitiesthat may arise cannot befixed and features maynot work. This serviceuninstalls itself whenthere is no Googlesoftware using it.

"C:\Program Files(x86)\Google\Update\GoogleUpdate.exe" /medsvc


SENS System EventNotificationService

Monitors system eventsand notifies subscribersto COM+ Event Systemof these events.



System Groups (15)

Name Description SID Statu

s

Members

Users Users are prevented frommaking accidental orintentional system-widechanges and can run mostapplications

S-1-5-32-545 OK AM-IT-MV\kristina

Administrators Administrators havecomplete and unrestrictedaccess to thecomputer/domain

S-1-5-32-544 OK AM-IT-MV\Administrator

Guests Guests have the sameaccess as members of theUsers group by default,except for the Guestaccount which is furtherrestricted

S-1-5-32-546 OK AM-IT-MV\Guest

Event Log Readers Members of this group canread event logs from localmachine

S-1-5-32-573 OK --

Performance MonitorUsers

Members of this group canaccess performancecounter data locally andremotely

S-1-5-32-558 OK --

Distributed COM Users Members are allowed tolaunch, activate and use

Distributed COM objectson this machine.

S-1-5-32-562 OK --

Backup Operators Backup Operators canoverride securityrestrictions for the solepurpose of backing up orrestoring files

S-1-5-32-551 OK --

Power Users Power Users are includedfor backwardscompatibility and possesslimited administrativepowers

S-1-5-32-547 OK --

Remote Desktop Users Members in this group aregranted the right to logonremotely

S-1-5-32-555 OK --

Performance Log Users Members of this groupmay schedule logging ofperformance counters,enable trace providers,and collect event tracesboth locally and via remoteaccess to this computer

S-1-5-32-559 OK --

Network ConfigurationOperators

Members in this group canhave some administrativeprivileges to manageconfiguration of networkingfeatures

S-1-5-32-556 OK --

NetWrix Account HelpDesk

Users allowed to accessAccount Lockout Examiner

S-1-5-21-2126545675-4123377081-3578998040-1006

OK --

IIS_IUSRS Built-in group used byInternet InformationServices.

S-1-5-32-568 OK --

Replicator Supports file replication ina domain S-1-5-32-552 OK --

8/10/2019 Losmi

25/31

Page25

Cryptographic Operators Members are authorized toperform cryptographicoperations.

S-1-5-32-569 OK --

System Users (5)

Name Account

Type

Caption Description Domain Full Name SID SID

Type

Status Is

Disa

bled

Is

Local

Acc

Is

Lock

ed

Out

Is

Pwd

Chan

geab

le

Does

Pwd

Expir

e

Is

Pwd

Requ

ired

mvujkovic Normal

Account

PORTOM

ONTENEGRO\mvujkovic

Network

Administrator

PORTOMO

NTENEGRO

Milos

Vujkovic

S-1-5-21-

2257599252-3630139807-129485844-1350

User Degrade

d

No No Yes Yes Yes Yes

Guest NormalAccount

AM-IT-MV\Guest

Built-inaccount forguest accessto thecomputer/domain

AM-IT-MV -- S-1-5-21-2126545675-4123377081-3578998040-501

User Degraded

Yes Yes No No No No

Administrator

NormalAccount

AM-IT-MV\Administrator

Built-inaccount foradministeringthecomputer/domain

AM-IT-MV -- S-1-5-21-2126545675-4123377081-3578998040-500

User OK No Yes No Yes No Yes

mjovanovi

c

Normal

Account

PORTOM

ONTENEGRO\mjovanovic

Application

developer

PORTOMO

NTENEGRO

Milovan

Jovanovic

S-1-5-21-

2257599252-3630139807-129485844-1516

User OK No No No Yes Yes Yes

kristina NormalAccount

AM-IT-MV\kristina

-- AM-IT-MV kristina S-1-5-21-2126545675-4123377081-3578998040-1005

User OK No Yes No Yes Yes Yes

System Shares (1)

Shareprint

Share Name print$

Share Type Disk Drive

Path C:\Windows\system32\spool\drivers

User Limit Maximum

Description Printer Drivers

Share Permissions --

Hardware Details

Bios (1)

Default System BIOS

Manufacturer Hewlett-Packard

Device Status OK

Description --

Version APPLE - 0SMBios Version MBA51.88Z.00EF.B02.1211271028

Release Date Nov 27,2012 01:00:00 AM

Year of Installation 2012

Processor (1)

Intel(R) Core(TM) i7-3667U CPU @ 2.00GHz

Manufacturer GenuineIntel

Device Status OK

Description Intel64 Family 6 Model 58 Stepping 9

Processor Speed"; 2001 MHz

Stepping -

Family Other

8/10/2019 Losmi

26/31

Page26

Socket Designation U2E1

Voltage -

Version

Logical Disk (1)

APPLE SSD SM256E ATA Device

Manufacturer (Standard disk drives)

Device Status OK

Description Disk drive

Serial Number S0YCNYAC801265

Logical Disk Partitions :2

Volume

Serial

Number

Name File System Media Type Disk Usage

6075F5E0 D: NTFS Fixed harddisk media

Total : 83GB; Used : 15GB; Free : 68GB

926B2C3B C: NTFS Fixed harddisk media

Total : 56GB; Used : 54GB; Free : 2GB

Keyboard (1)

Unknown keyboard

Manufacturer Unknown

Device Status OK

Description HID Keyboard Device

Unknown keyboard


Device Status OK

Description USB Input Device

Sound Device (1)

Cirrus Logic CS4206B (AB 85)

Manufacturer Cirrus Logic, Inc.

Device Status OK

Description --

Intel(R) Display Audio

Manufacturer Intel(R) Corporation

Device Status OK

Description --

Video Controller (1)

Intel(R) HD Graphics 4000


Device Status OK

Description --

Adapter Compatibility Intel Corporation

Adapter RAM -2080374784BytesHorizontal Resolution 1920

Vertical Resolution 1080

Driver Version 9.17.10.2932

Install Date --

Pointing Device (3)

Hardware Name Manufacturer Description Device Interface Pointing Type Device Status Handeness No of Buttons

Apple MultitouchMouse

Apple Inc. -- Unknown Unknown OK Unknown 0

HID-compliantmouse

Microsoft -- Unknown Unknown OK Unknown 0

USB Input

Device

(Standard

system devices)

-- Unknown Unknown OK Unknown 0

8/10/2019 Losmi

27/31

Page27

POTS Modem (1)

Hardware

Name

Manufacturer Description Attached To Model Device Status Maximum

Baud Rate to

Phone

Maximum

Baud Rate to

Port

Device Type

HUAWEIMobileConnect - 3GModem

Unknown -- COM4 HUAWEIMobileConnect - 3GModem

Unknown 0 115200 ExternalModem

CDROM Drive (1)

ELBY CLONEDRIVE SCSI CdRom Device

Manufacturer ELBY CLONEDRIVE SCSI CdRom Device

Device Status OK

Description CD-ROM Drive

USB Controller (1)

Hardware Name Manufacturer Device Status Description

HUAWEI Mobile Connect - BusEnumerate Device

HUAWEI Technologies CO.,LTD OK --

Intel(R) 7 Series/C216 ChipsetFamily USB Enhanced HostController - 1E26

Intel OK --

Intel(R) 7 Series/C216 ChipsetFamily USB Enhanced Host

Controller - 1E2D

Intel OK --

Intel(R) USB 3.0 eXtensible HostController

Intel(R) Corporation OK --

Synology Virtual USB Hub Synology Inc OK --

USB Hub (1)

Hardware Name Manufacturer Device Status Description

Generic USB Hub Unknown OK --




Intel(R) USB 3.0 Root Hub Unknown OK --

USB 2.0 Hub Unknown OK --

USB Composite Device Unknown OK --



USB Root Hub Unknown OK --

USB Root Hub Unknown OK --

Desktop Monitor (2)

Hardware

Name

Manufacturer Description Screen Width Monitor Type Horizontal

Pixels/Inch

Device

Status

Screen

Height

Vertical

Pixels/Inch

Serial

Number

Color LCD APP -- 768 Color LCD 0 OK 1024 0 --

VA2342SERIES

VSC -- 768 VA2342SERIES

0 OK 1024 0 T8L133701508

Network Adapter (1)

[00000009] Apple USB Ethernet Adapter

Manufacturer Apple Inc.

Device Status Unknown

Description --

MAC Address 80:49:71:10:F6:77

IP Address 172.18.4.34, fe80::d071:387e:3fcd:8d87

DNSDomain -

DNSHostName AM-IT-MV

DNSServer Search Order 172.18.1.50, 172.18.1.151

DHCPEnabled false

DHCPLeaseObtained --

DHCPLeaseExpires --

DHCPServer -

8/10/2019 Losmi

28/31

Page28

DefaultIPGateway 172.18.4.33

IPSubnet 255.255.255.224, 64

Printer (7)

Hardware Name Manufacturer Device Status Port Name Default Printer Description Printer Type

BizHub 751 Unknown - 172.18.2.187 No -- Local Printer

bizhub C360 Unknown - 172.18.2.181 No -- Local Printer

Fax Unknown Unknown SHRFAX: No -- Local Printer

Generic 36C-6SeriesPCL (Copy1)

Unknown Degraded LPT1: No -- Local Printer

IT Unknown Unknown 172.18.4.62 No -- Local Printer

Microsoft XPSDocument Writer

Unknown Unknown XPSPort: No -- Local Printer

Send To OneNote2010

Unknown Unknown nul: No -- Local Printer

Battery (1)

bq20z4512BYDKRRAR123456789ABCDE


Device Status OK

Description Internal Battery

Physical Memory (2)

Physical Memory

Total Available RAM 8GB

Location System board or motherboard

No. of Slots Available 2

Slots Used Slot Memory Type Available Memory Speed Bank Label

DIMM0 Unknown 4GB 1600ns BANK 1

DIMM0 Unknown 4GB 1600ns BANK 0

Software Name Version Manufacturer Install Date Frequency of

Use

Compliant

Status

Access Type

BS.Player FREE 2.66.1075 AB Team, d.o.o. -- Not known Not Available Not Assigned

Google Chrome 32.0.1700.107 Google Inc. Dec 11, 2012 Not known Not Available Not Assigned

Malwarebytes Anti-Malware version1.75.0.1300

1.75.0.1300 MalwarebytesCorporation

Jan 17, 2014 Not known Not Available Not Assigned

Nmap 6.40 - Unknown -- Not known Not Available Not Assigned

Microsoft Office Home andBusiness 2010

14.0.7015.1000 MicrosoftCorporation

-- Not known Not Available Not Assigned

Microsoft Visio Premium 2010 14.0.7015.1000 MicrosoftCorporation


T-Mobile Internet Manager 11.301.05.64.55 HUAWEITechnologiesCO.,LTD


TeamViewer 9 9.0.25942 TeamViewer -- Not known Not Available Not Assigned

Tftpd64 Standalone Edition(remove only)

- Unknown -- Not known Not Available Not Assigned

TreeSize Free V2.6 2.6 JAM Software Sep 12, 2013 Not known Not Available Not Assigned

Ubiquiti UniFi (remove only) - Unknown -- Not known Not Available Not Assigned

VirtualCloneDrive 5.4.7.0 Elaborate Bytes -- Not known Not Available Not Assigned

VLC media player 2.0.8 2.0.8 VideoLAN -- Not known Not Available Not Assigned

WinPcap 4.1.2 4.1.0.2001 CACE Technologies -- Not known Not Available Not Assigned

WinSCP 5.1.7 5.1.7 Martin Prikryl Sep 26, 2013 Not known Not Available Not Assigned

Intel(R) USB 3.0 eXtensible HostController Driver

1.0.0.199 Intel Corporation -- Not known Not Available Not Assigned

Java(TM) 6 Update 29 6.0.290 Oracle Dec 06, 2013 Not known Not Available Not Assigned

Sid Meier's Civilization 4 - Beyondthe Sword

3.19 Firaxis Games Nov 25, 2013 Not known Not Available Not Assigned

Sid Meier's Civilization 4 - Warlords 2.13 Firaxis Games Nov 25, 2013 Not known Not Available Not Assigned

8/10/2019 Losmi

29/31

Page29

Java Auto Updater 2.0.6.1 Sun Microsystems,Inc.

Dec 06, 2013 Not known Not Available Not Assigned

Google Earth 7.1.2.2041 Google Jan 11, 2014 Not known Not Available Not Assigned

Skype 6.11 6.11.102 Skype TechnologiesS.A.


Intel(R) Management EngineComponents

8.0.0.1351 Intel Corporation -- Not known Not Available Not Assigned

Microsoft Office Access MUI(English) 2010


Sep 12, 2013 Not known Not Available Not Assigned

Microsoft Office Excel MUI(English) 2010



Microsoft Office PowerPoint MUI(English) 2010



Microsoft Office Publisher MUI(English) 2010



Microsoft Office Outlook MUI(English) 2010



Microsoft Office Word MUI(English) 2010



Microsoft Office Proof (English)2010



Microsoft Office Proof (French)2010



Microsoft Office Proof (Spanish)2010



Microsoft Office Proofing (English)2010 14.0.7015.1000 MicrosoftCorporation Sep 12, 2013 Not known Not Available Not Assigned

Microsoft Office Single Image 2010 14.0.7015.1000 MicrosoftCorporation


Microsoft Office Visio MUI (English)2010



Microsoft Office Visio 2010 14.0.7015.1000 MicrosoftCorporation


Microsoft Office Shared MUI(English) 2010


Nov 13, 2013 Not known Not Available Not Assigned

Microsoft Office OneNote MUI(English) 2010



Microsoft Office Shared SetupMetadata MUI (English) 2010



Microsoft Office Access Setup

Metadata MUI (English) 2010

14.0.7015.1000 Microsoft

Corporation


Google Update Helper 1.3.22.5 Google Inc. Feb 16, 2014 Not known Not Available Not Assigned

Adobe Reader XI (11.0.06) 11.0.06 Adobe SystemsIncorporated


Sid Meier's Civilization 4 1.74 Firaxis Games Nov 25, 2013 Not known Not Available Not Assigned

Microsoft Visual C++ 2010 x86Redistributable - 10.0.40219

10.0.40219 MicrosoftCorporation

Oct 24, 2013 Not known Not Available Not Assigned

Intel(R) Processor Graphics 9.17.10.2932 Intel Corporation -- Not known Not Available Not Assigned

Realtek High Definition AudioDriver

6.0.1.5936 RealtekSemiconductorCorp.


Intel(R) OpenCL CPU Runtime - Intel Corporation -- Not known Not Available Not Assigned

Windows Internet Explorer 9 9.11.9600.16428 MicrosoftCorporation


Windows Driver Package - AppleInc. Apple Broadcom Bluetooth(11/28/2011 4.0.3.0)

11/28/2011 4.0.3.0 Apple Inc. -- Not known Not Available Not Assigned

Windows Driver Package - Intel(e1express) Net (03/26/20109.13.41.0)

03/26/20109.13.41.0

Intel -- Not known Not Available Not Assigned

Windows Driver Package -Broadcom Corporation (bScsiSDa)SDHost (02/10/2012 1.0.0.235)

02/10/20121.0.0.235

BroadcomCorporation


Windows Driver Package - AppleInc. Apple Bluetooth Enabler(06/27/2007 2.0.0.1)


Windows Driver Package -Broadcom (BCM43XX) Net(04/05/2012 5.106.198.19)

04/05/20125.106.198.19

Broadcom -- Not known Not Available Not Assigned

Windows Driver Package - Intel

(e1qexpress) Net (12/04/200911.4.7.0)

12/04/2009 11.4.7.0 Intel -- Not known Not Available Not Assigned

8/10/2019 Losmi

30/31

Page30

Windows Driver Package - Intel(e1kexpress) Net (04/12/201011.6.92.0)

04/12/201011.6.92.0


Windows Driver Package - AppleInc. Apple Built-in iSight(10/25/2007 2.0.1.0)


Windows Driver Package - AppleInc. Apple Trackpad Enabler(07/13/2009 3.0.0.1)


Windows Driver Package - AppleInc. Apple System Device(10/07/2011 4.0.1.0)


Windows Driver Package - AppleInc. Apple Trackpad (07/13/20093.0.0.1)


Windows Driver Package -Broadcom (b57nd60a) Net(02/10/2012 15.2.0.5)

02/10/2012 15.2.0.5 Broadcom -- Not known Not Available Not Assigned

Windows Driver Package - AppleInc. Apple Multitouch Mouse(01/27/2012 4.0.2.0)


Windows Driver Package - AppleInc. Apple Keyboard (01/27/20124.0.2.0)


Windows Driver Package - AppleInc. Apple Wireless Trackpad(01/17/2011 3.2.0.0)


Windows Driver Package - Intel(e1yexpress) Net (04/07/201010.1.9.0)


CCleaner 4.08 Piriform -- Not known Not Available Not Assigned

Windows Driver Package - Marvell(yukonx64) Net (12/06/200710.51.1.3)

12/06/200710.51.1.3

Marvell -- Not known Not Available Not Assigned

Windows Driver Package - AppleInc. Apple Multitouch (01/27/20124.0.2.0)


Windows Driver Package - AppleInc. Apple Wireless Mouse(06/01/2011 4.0.0.1)


Windows Driver Package - AppleInc. (AppleUSBEthernet) Net(02/01/2008 3.10.3.10)

02/01/20083.10.3.10

Apple Inc. -- Not known Not Available Not Assigned

Windows Driver Package - AppleInc. Apple IR Receiver (02/21/20082.0.4.0)


Windows Driver Package - AppleInc. Apple ODD (05/17/20103.1.0.0)


Autodesk DWG TrueView 2014 19.1.18.0 Autodesk -- Not known Not Available Not Assigned

Windows Driver Package - AppleInc. Apple Display (01/23/20093.0.0.0)


Windows Driver Package - IntelSystem (07/20/2007 1.2.76.0)


Windows Driver Package - AppleInc. Apple Bluetooth (03/01/20103.0.0.5)


Windows Driver Package - AtherosCommunications Inc. (athr) Net(11/13/2010 9.2.0.113)

11/13/20109.2.0.113 AtherosCommunicationsInc.


Windows Driver Package - Intel(e1rexpress) Net (01/07/201011.4.16.0)

01/07/201011.4.16.0


Windows Driver Package -Broadcom (B57ports) Net(06/16/2009 1.0.0.1)

06/16/2009 1.0.0.1 Broadcom -- Not known Not Available Not Assigned

Windows Driver Package - CirrusLogic, Inc. (CirrusFilter) MEDIA(01/30/2012 6.6001.1.36)

01/30/20126.6001.1.36

Cirrus Logic, Inc. -- Not known Not Available Not Assigned

Microsoft Visual J# 2.0Redistributable Package - SE (x64)

- MicrosoftCorporation


WinRAR 5.00 (64-bit) 5.00.0 win.rar GmbH -- Not known Not Available Not Assigned

Microsoft Visual C++ 2010 x64

Redistributable - 10.0.40219

10.0.40219 Microsoft

Corporation


8/10/2019 Losmi

31/31

Milestone XProtect Smart Client7.0b (64-bit)

7.0.2.369 Milestone SystemsA/S


Microsoft Visual C++ 2008Redistributable - x649.0.30729.4148



DWG TrueView 2014 19.1.18.0 Autodesk Oct 23, 2013 Not known Not Available Not Assigned




VanDyke Software SecureCRT 7.1 7.1.1 VanDyke Software,Inc.


Parallels Tools 8.0.18345 Parallels SoftwareInternational Inc


Microsoft .NET Framework 4.5.1 4.5.50938 MicrosoftCorporation


Microsoft Silverlight 5.1.20913.0 MicrosoftCorporation


Microsoft Office Office 64-bitComponents 2010



Microsoft Office Shared 64-bit MUI(English) 2010



Microsoft Office Shared 64-bitSetup Metadata MUI (English)2010



Boot Camp Services 4.0.4326 Apple Inc. Dec 05, 2012 Not known Not Available Not Assigned

Windows 7 Professional Edition(x64)

- MicrosoftCorporation


ManageEngine Desktop Central 8 -Agent

8.2.50.W ZohoCorp Feb 18, 2014 Not known Not Available Not Assigned

K-Lite Codec Pack 10.0.0 Full 10.0.0 Unknown Sep 12, 2013 Not known Not Available Not Assigned

PuTTY version 0.63 0.63 Simon Tatham Sep 12, 2013 Not known Not Available Not Assigned

OpenVPN Client 1.5.6 OpenVPNTechnologies


VMware vSphere Client 5.1 5.1.0.3045 VMware, Inc. Sep 12, 2013 Not known Not Available Not Assigned




Defraggler 2.15 Piriform -- Not known Not Available Not Assigned

Google Talk (remove only) - Unknown -- Not known Not Available Not Assigned

Microsoft Visual C++ 2005

Redistributable

8.0.61001 Microsoft

Corporation


calibre 1.2.0 Kovid Goyal Sep 12, 2013 Not known Not Available Not Assigned

Microsoft Visual C++ 2008Redistributable - x86 9.0.30729.17

9.0.30729 MicrosoftCorporation


Windows 7 Professional Edition - MicrosoftCorporation





McAfee VirusScan Enterprise 8.8.02004 McAfee, Inc. Sep 13, 2013 Not known Not Available Not Assigned

McAfee Agent 4.6.0.2292 McAfee, Inc. Sep 12, 2013 Not known Not Available Not Assigned

NetSetMan 3.5.3 3.5.3 Ilja Herlein Sep 12, 2013 Not known Not Available Not Assigned

Tera Term 4.79 - Unknown Sep 12, 2013 Not known Not Available Not Assigned

Hi

Losmi

Documents

Transcript of Losmi