AutoStart, StartTime, EndTime, Duration AutoStart, 21468, 92576, 71108 Transition, ServiceName, Group, TotalTime, ContTime, LoadTime, InitTime, StartedAt, ContDoneAt, LoadDoneAt, EndedAt, Container Start, PlugPlay, PlugPlay, 421, 232, 73, 116, 21469, 21700, 21773, 21889, C:\Windows\system32\svchost.exe -k DcomLaunch Start, Power, PlugPlay, 253, 0, 121, 133, 21890, 21890, 22011, 22143, C:\Windows\system32\svchost.exe -k DcomLaunch Start, nvsvc, Video, 284, 280, 0, 4, 22208, 22488, 22488, 22492, C:\Windows\system32\nvvsvc.exe Start, DcomLaunch, COM Infrastructure, 175, 0, 169, 5, 22492, 22492, 22661, 22666, C:\Windows\system32\svchost.exe -k DcomLaunch Start, RpcEptMapper, COM Infrastructure, 298, 279, 11, 8, 22492, 22771, 22782, 22790, C:\Windows\system32\svchost.exe -k RPCSS Start, RpcSs, COM Infrastructure, 35, 0, 1, 34, 22790, 22790, 22791, 22825, C:\Windows\system32\svchost.exe -k RPCSS Start, eventlog, Event Log, 497, 421, 61, 15, 22825, 23246, 23307, 23322, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, AudioEndpointBuilder, AudioGroup, 1979, 16, 964, 999, 23322, 23339, 24303, 25302, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, MMCSS, AudioGroup, 554, 13, 541, 1, 23340, 23353, 23893, 23894, C:\Windows\system32\svchost.exe -k netsvcs Start, AudioSrv, AudioGroup, 134, 1, 4, 130, 25302, 25302, 25306, 25436, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, gpsvc, ProfSvc_Group, 1133, 16, 201, 916, 25436, 25452, 25654, 26569, C:\Windows\system32\svchost.exe -k GPSvcGroup Start, ProfSvc, ProfSvc_Group, 229, 0, 215, 15, 25453, 25453, 25667, 25682, C:\Windows\system32\svchost.exe -k netsvcs Start, Themes, ProfSvc_Group, 217, 0, 215, 1, 25454, 25454, 25669, 25670, C:\Windows\system32\svchost.exe -k netsvcs Start, EventSystem, ProfSvc_Group, 306, 13, 277, 17, 25670, 25683, 25960, 25977, C:\Windows\system32\svchost.exe -k LocalService Start, SENS, ProfSvc_Group, 589, 0, 586, 2, 25977, 25977, 26563, 26566, C:\Windows\system32\svchost.exe -k netsvcs Start, UxSms, UIGroup, 5, 0, 4, 1, 26569, 26569, 26573, 26574, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, SamSs, MS_WindowsLocalValidation, 1, 0, 0, 1, 26575, 26575, 26575, 26576, C:\Windows\system32\lsass.exe Start, lmhosts, TDI, 204, 1, 202, 2, 26715, 26715, 26917, 26919, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, nsi, TDI, 3, 0, 2, 1, 26716, 26716, 26718, 26719, C:\Windows\system32\svchost.exe -k LocalService Start, Dhcp, TDI, 485, 0, 249, 235, 26719, 26720, 26969, 27204, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, Dnscache, TDI, 446, 13, 104, 329, 26720, 26734, 26838, 27167, C:\Windows\system32\svchost.exe -k NetworkService Start, KeyIso, TDI, 4, 0, 0, 4, 26735, 26735, 26735, 26739, C:\Windows\system32\lsass.exe Start, EapHost, TDI, 519, 0, 99, 420, 26739, 26739, 26838, 27258, C:\Windows\system32\svchost.exe -k netsvcs Start, Wlansvc, TDI, 2559, 0, 1108, 1451, 27258, 27258, 28366, 29817, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, ShellHWDetection, ShellSvcGroup, 101, 0, 98, 3, 29818, 29818, 29916, 29919, C:\Windows\system32\svchost.exe -k netsvcs Start, Schedule, SchedulerGroup, 2311, 0, 979, 1333, 29919, 29919, 30898, 32230, C:\Windows\system32\svchost.exe -k netsvcs Start, Spooler, SpoolerGroup, 114, 103, 0, 10, 35246, 35349, 35349, 35360, C:\Windows\System32\spoolsv.exe Start, BFE, NetworkProvider, 4553, 14, 4077, 462, 35360, 35374, 39451, 39913, C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork Start, MpsSvc, NetworkProvider, 140, 1, 117, 22, 40505, 40507, 40624, 40646, C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork Start, LanmanWorkstation, NetworkProvider, 14, 1, 3, 11, 40705, 40706, 40709, 40720, C:\Windows\system32\svchost.exe -k NetworkService Start, AdobeARMservice, , 1792, 1787, 0, 5, 40720, 42507, 42507, 42511, "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" Start, btwdins, , 93, 88, 0, 5, 42508, 42596, 42596, 42601, C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe Start, DPS, , 100, 1, 23, 77, 42708, 42708, 42731, 42808, C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork Start, ekrn, , 47620, 1571, 0, 46049, 42709, 44280, 44280, 90329, "C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe" Start, FDResPub, , 12037, 14, 6, 12017, 45019, 45033, 45039, 57056, C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation Start, IKEEXT, , 1265, 0, 1186, 79, 45034, 45034, 46220, 46299, C:\Windows\system32\svchost.exe -k netsvcs Start, MSSQL$SQLEXPRESS, , 35521, 24406, 0, 11115, 45035, 69441, 69441, 80556, "C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS Start, NlaSvc, , 229, 1, 20, 208, 69442, 69443, 69463, 69672, C:\Windows\system32\svchost.exe -k NetworkService Start, PcaSvc, , 112, 0, 110, 2, 69444, 69444, 69554, 69556, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, RichVideo, , 130, 93, 0, 37, 69659, 69752, 69752, 69789, "C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe" Start, SeaPort, , 876, 859, 0, 17, 69754, 70613, 70613, 70630, "C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE" Start, SkypeUpdate, , 56, 39, 0, 17, 70624, 70663, 70663, 70679, "C:\Program Files (x86)\Skype\Updater\Updater.exe" Stop, SkypeUpdate, , 1015, 0, 0, 1015, 190693, 190693, 190693, 191708, "C:\Program Files (x86)\Skype\Updater\Updater.exe" Start, SQLWriter, , 1358, 378, 0, 980, 70664, 71041, 71041, 72022, "C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe" Start, stisvc, , 849, 6, 302, 541, 71246, 71253, 71554, 72095, C:\Windows\system32\svchost.exe -k imgsvc Start, SysMain, , 536, 0, 535, 0, 71254, 71254, 71789, 71789, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, TeamViewer7, , 7033, 1421, 0, 5612, 71258, 72680, 72680, 78292, C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe Start, TrkWks, , 4, 0, 3, 1, 72681, 72681, 72684, 72685, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, Winmgmt, , 9322, 0, 9320, 1, 72682, 72682, 82002, 82004, C:\Windows\system32\svchost.exe -k netsvcs Start, wlidsvc, , 8126, 8113, 0, 13, 72683, 80796, 80796, 80809, "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" Start, iphlpsvc, , 9395, 0, 9243, 153, 82004, 82004, 91247, 91399, C:\Windows\system32\svchost.exe -k netsvcs Start, LanmanServer, , 10571, 0, 9284, 1287, 82005, 82005, 91289, 92576, C:\Windows\system32\svchost.exe -k netsvcs Start, WinHttpAutoProxySvc, , 97, 32, 8, 57, 92960, 92992, 93000, 93057, C:\Windows\system32\svchost.exe -k LocalService Start, netprofm, , 58, 1, 4, 53, 92996, 92998, 93001, 93055, C:\Windows\system32\svchost.exe -k LocalService Start, AdobeFlashPlayerUpdateSvc, , 192, 181, 0, 11, 93002, 93183, 93183, 93194, C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Stop, AdobeFlashPlayerUpdateSvc, , 0, 0, 0, 0, 93208, 93208, 93208, 93208, Start, WdiServiceHost, , 38, 10, 19, 8, 93193, 93203, 93222, 93230, C:\Windows\system32\svchost.exe -k LocalService Start, TrustedInstaller, ProfSvc_Group, 7664, 670, 0, 6994, 93208, 93878, 93878, 100872, C:\Windows\servicing\TrustedInstaller.exe Start, FontCache, , 4137, 1, 207, 3929, 93879, 93880, 94087, 98017, C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation Start, Netman, , 115, 0, 42, 73, 93882, 93882, 93923, 93997, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, WSearch, , 23898, 11637, 0, 12261, 93883, 105520, 105520, 117781, C:\Windows\system32\SearchIndexer.exe /Embedding Start, WPDBusEnum, , 290, 0, 13, 276, 105522, 105522, 105536, 105812, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Stop, WPDBusEnum, , 2, 0, 0, 2, 225838, 225838, 225838, 225840, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, WdiSystemHost, , 285, 0, 12, 272, 105524, 105524, 105537, 105809, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, CryptSvc, , 312, 2, 305, 5, 105525, 105528, 105832, 105837, C:\Windows\system32\svchost.exe -k NetworkService Start, AeLookupSvc, , 22, 0, 14, 8, 105534, 105534, 105548, 105556, C:\Windows\system32\svchost.exe -k netsvcs Start, Browser, NetworkProvider, 18, 0, 15, 3, 105543, 105543, 105558, 105561, C:\Windows\system32\svchost.exe -k netsvcs Start, PolicyAgent, , 1197, 256, 572, 368, 105558, 105815, 106387, 106755, C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted Start, WMPNetworkSvc, , 6052, 5090, 0, 963, 105832, 110921, 110921, 111884, "C:\Program Files\Windows Media Player\wmpnetwk.exe" Start, fdPHost, , 36, 1, 3, 32, 118824, 118825, 118828, 118860, C:\Windows\system32\svchost.exe -k LocalService Start, HomeGroupProvider, , 9, 1, 2, 6, 118860, 118860, 118862, 118869, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, HomeGroupListener, , 47, 0, 36, 11, 119074, 119074, 119110, 119120, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, p2pimsvc, , 1447, 1437, 2, 8, 119194, 120631, 120633, 120641, C:\Windows\System32\svchost.exe -k LocalServicePeerNet Start, PNRPsvc, , 446, 1, 1, 444, 120641, 120641, 120642, 121086, C:\Windows\System32\svchost.exe -k LocalServicePeerNet Start, p2psvc, , 27, 1, 19, 7, 121087, 121087, 121107, 121114, C:\Windows\System32\svchost.exe -k LocalServicePeerNet Start, SSDPSRV, , 236, 1, 58, 177, 134546, 134547, 134604, 134782, C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation Start, upnphost, , 26, 1, 23, 2, 140451, 140452, 140474, 140477, C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation Start, BITS, , 500, 0, 499, 1, 212579, 212579, 213077, 213078, C:\Windows\system32\svchost.exe -k netsvcs Start, clr_optimization_v4.0.30319_32, , 183, 181, 0, 2, 213202, 213384, 213384, 213385, C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe Stop, clr_optimization_v4.0.30319_32, , 0, 0, 0, 0, 213386, 213386, 213386, 213386, Start, clr_optimization_v4.0.30319_64, , 315, 314, 0, 1, 213499, 213812, 213812, 213813, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe Stop, clr_optimization_v4.0.30319_64, , 0, 0, 0, 0, 213814, 213814, 213814, 213814, Start, gupdate, , 299, 297, 0, 2, 213936, 214233, 214233, 214234, "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc Stop, gupdate, , 1, 0, 0, 1, 214272, 214272, 214272, 214273, "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc Start, LMS, , 297, 179, 0, 118, 214357, 214535, 214535, 214653, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe Start, NOBU, , 1224, 394, 0, 830, 214778, 215172, 215172, 216002, "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE Start, nvUpdatusService, , 1763, 899, 0, 864, 216041, 216940, 216940, 217804, C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe Start, sppsvc, , 430, 165, 0, 265, 217929, 218094, 218094, 218359, C:\Windows\system32\sppsvc.exe Start, WinDefend, , 966, 148, 499, 318, 218459, 218607, 219107, 219425, C:\Windows\System32\svchost.exe -k secsvcs Start, wscsvc, , 125, 1, 124, 0, 219473, 219474, 219598, 219599, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, wuauserv, , 3439, 0, 722, 2717, 219723, 219723, 220445, 223162, C:\Windows\system32\svchost.exe -k netsvcs Start, UNS, , 5199, 639, 0, 4560, 223217, 223856, 223856, 228416, "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"