AutoStart, StartTime, EndTime, Duration AutoStart, 76102, 109845, 33743 Transition, ServiceName, Group, TotalTime, ContTime, LoadTime, InitTime, StartedAt, ContDoneAt, LoadDoneAt, EndedAt, Container Start, PlugPlay, PlugPlay, 145, 59, 61, 25, 76102, 76161, 76222, 76247, C:\Windows\system32\svchost.exe -k DcomLaunch Start, Power, PlugPlay, 124, 0, 74, 50, 76248, 76249, 76323, 76373, C:\Windows\system32\svchost.exe -k DcomLaunch Start, nvsvc, Video, 110, 107, 0, 3, 76395, 76502, 76502, 76505, C:\Windows\system32\nvvsvc.exe Start, DcomLaunch, COM Infrastructure, 32, 0, 26, 5, 76505, 76505, 76532, 76537, C:\Windows\system32\svchost.exe -k DcomLaunch Start, RpcEptMapper, COM Infrastructure, 25, 15, 3, 7, 76506, 76521, 76524, 76531, C:\Windows\system32\svchost.exe -k RPCSS Start, RpcSs, COM Infrastructure, 90, 0, 1, 88, 76537, 76537, 76538, 76627, C:\Windows\system32\svchost.exe -k RPCSS Start, eventlog, Event Log, 58, 32, 4, 21, 76627, 76659, 76664, 76685, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, AudioEndpointBuilder, AudioGroup, 769, 18, 286, 466, 76686, 76703, 76989, 77454, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, MMCSS, AudioGroup, 26, 19, 6, 1, 76704, 76723, 76729, 76730, C:\Windows\system32\svchost.exe -k netsvcs Start, AudioSrv, AudioGroup, 80, 1, 3, 76, 77455, 77455, 77459, 77535, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, gpsvc, ProfSvc_Group, 71, 14, 52, 6, 77535, 77549, 77600, 77606, C:\Windows\system32\svchost.exe -k GPSvcGroup Start, ProfSvc, ProfSvc_Group, 21, 0, 5, 17, 77550, 77550, 77554, 77571, C:\Windows\system32\svchost.exe -k netsvcs Start, Themes, ProfSvc_Group, 7, 0, 5, 1, 77550, 77550, 77555, 77557, C:\Windows\system32\svchost.exe -k netsvcs Start, EventSystem, ProfSvc_Group, 69, 15, 4, 50, 77557, 77572, 77576, 77625, C:\Windows\system32\svchost.exe -k LocalService Start, SENS, ProfSvc_Group, 5, 0, 2, 2, 77626, 77626, 77628, 77630, C:\Windows\system32\svchost.exe -k netsvcs Start, UxSms, UIGroup, 3, 0, 2, 1, 77630, 77630, 77633, 77634, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, SamSs, MS_WindowsLocalValidation, 1, 0, 0, 1, 77634, 77634, 77634, 77636, C:\Windows\system32\lsass.exe Start, lmhosts, TDI, 41, 1, 37, 3, 77655, 77655, 77693, 77695, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, nsi, TDI, 3, 0, 2, 1, 77656, 77656, 77658, 77659, C:\Windows\system32\svchost.exe -k LocalService Start, Dhcp, TDI, 67, 0, 51, 16, 77659, 77659, 77710, 77726, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, Dnscache, TDI, 86, 13, 52, 22, 77660, 77673, 77725, 77746, C:\Windows\system32\svchost.exe -k NetworkService Start, KeyIso, TDI, 5, 0, 0, 5, 77674, 77674, 77674, 77679, C:\Windows\system32\lsass.exe Start, EapHost, TDI, 30, 0, 2, 28, 77679, 77679, 77681, 77708, C:\Windows\system32\svchost.exe -k netsvcs Start, Wlansvc, TDI, 133, 0, 70, 63, 77708, 77708, 77778, 77841, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, ShellHWDetection, ShellSvcGroup, 16, 0, 12, 4, 77842, 77842, 77854, 77858, C:\Windows\system32\svchost.exe -k netsvcs Start, Schedule, SchedulerGroup, 269, 0, 55, 214, 77858, 77858, 77913, 78127, C:\Windows\system32\svchost.exe -k netsvcs Start, Spooler, SpoolerGroup, 157, 147, 0, 10, 78159, 78306, 78306, 78315, C:\Windows\System32\spoolsv.exe Start, BFE, NetworkProvider, 141, 17, 4, 121, 78315, 78332, 78336, 78457, C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork Start, MpsSvc, NetworkProvider, 521, 0, 446, 74, 78462, 78463, 78909, 78983, C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork Start, LanmanWorkstation, NetworkProvider, 37, 1, 13, 23, 78983, 78984, 78998, 79020, C:\Windows\system32\svchost.exe -k NetworkService Start, AdobeARMservice, , 320, 265, 0, 55, 79021, 79286, 79286, 79340, "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" Start, btwdins, , 118, 104, 0, 14, 79287, 79391, 79391, 79405, C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe Start, DPS, , 374, 1, 36, 337, 79395, 79396, 79432, 79769, C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork Start, ekrn, , 13394, 131, 0, 13263, 79398, 79529, 79529, 92792, "C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe" Start, FDResPub, , 744, 15, 246, 484, 79539, 79554, 79799, 80283, C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation Start, IKEEXT, , 624, 0, 219, 404, 79555, 79555, 79775, 80179, C:\Windows\system32\svchost.exe -k netsvcs Start, MSSQL$SQLEXPRESS, , 29983, 5621, 0, 24362, 79557, 85179, 85179, 109541, "C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS Start, NlaSvc, , 745, 1, 716, 29, 85182, 85182, 85899, 85927, C:\Windows\system32\svchost.exe -k NetworkService Start, PcaSvc, , 815, 0, 812, 3, 85184, 85184, 85996, 85999, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, RichVideo, , 273, 83, 0, 190, 86011, 86093, 86093, 86284, "C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe" Start, SeaPort, , 1286, 1265, 0, 22, 86095, 87360, 87360, 87381, "C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE" Start, SkypeUpdate, , 75, 55, 0, 20, 87371, 87426, 87426, 87447, "C:\Program Files (x86)\Skype\Updater\Updater.exe" Stop, SkypeUpdate, , 1015, 0, 0, 1015, 207449, 207449, 207449, 208464, "C:\Program Files (x86)\Skype\Updater\Updater.exe" Start, SQLWriter, , 7775, 306, 0, 7469, 87427, 87733, 87733, 95202, "C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe" Start, stisvc, , 7350, 11, 2074, 5266, 87971, 87982, 90056, 95321, C:\Windows\system32\svchost.exe -k imgsvc Start, SysMain, , 6148, 3, 6145, 1, 87986, 87989, 94134, 94134, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, TeamViewer7, , 21100, 7908, 0, 13192, 87997, 95905, 95905, 109098, C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe Start, TrkWks, , 36, 0, 35, 1, 95906, 95906, 95941, 95942, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, Winmgmt, , 4105, 0, 4103, 1, 95907, 95907, 100010, 100012, C:\Windows\system32\svchost.exe -k netsvcs Start, wlidsvc, , 13203, 13144, 0, 59, 95907, 109051, 109051, 109111, "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" Start, iphlpsvc, , 78, 0, 70, 8, 109068, 109068, 109138, 109146, C:\Windows\system32\svchost.exe -k netsvcs Start, LanmanServer, , 734, 0, 32, 702, 109111, 109111, 109143, 109845, C:\Windows\system32\svchost.exe -k netsvcs Start, netprofm, , 22, 4, 4, 14, 110570, 110575, 110578, 110592, C:\Windows\system32\svchost.exe -k LocalService Start, TrustedInstaller, ProfSvc_Group, 23433, 27, 0, 23406, 110577, 110603, 110603, 134009, C:\Windows\servicing\TrustedInstaller.exe Start, WdiServiceHost, , 46, 1, 9, 36, 110608, 110609, 110618, 110653, C:\Windows\system32\svchost.exe -k LocalService Start, WPDBusEnum, , 814, 0, 31, 783, 110610, 110610, 110641, 111424, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, Browser, NetworkProvider, 11, 0, 7, 3, 110620, 110620, 110627, 110630, C:\Windows\system32\svchost.exe -k netsvcs Start, PolicyAgent, , 1243, 16, 301, 926, 110623, 110638, 110940, 111866, C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted Start, WdiSystemHost, , 748, 0, 2, 746, 110647, 110647, 110649, 111395, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, AeLookupSvc, , 56, 0, 54, 2, 111455, 111455, 111509, 111511, C:\Windows\system32\svchost.exe -k netsvcs Start, WinHttpAutoProxySvc, , 7, 2, 4, 1, 112405, 112407, 112411, 112411, C:\Windows\system32\svchost.exe -k LocalService Start, CryptSvc, , 52, 1, 50, 2, 112438, 112439, 112489, 112490, C:\Windows\system32\svchost.exe -k NetworkService Start, wudfsvc, PlugPlay, 14209, 0, 1968, 12241, 114201, 114201, 116169, 128410, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, Netman, , 231, 0, 185, 46, 128460, 128460, 128645, 128691, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, WerSvc, , 152, 9, 137, 5, 130902, 130912, 131049, 131054, C:\Windows\System32\svchost.exe -k WerSvcGroup Stop, WerSvc, , 2, 0, 0, 2, 251064, 251064, 251064, 251066, C:\Windows\System32\svchost.exe -k WerSvcGroup Start, WSearch, , 22998, 7152, 0, 15846, 135748, 142900, 142900, 158747, C:\Windows\system32\SearchIndexer.exe /Embedding Start, WMPNetworkSvc, , 783, 768, 0, 16, 142902, 143670, 143670, 143685, "C:\Program Files\Windows Media Player\wmpnetwk.exe" Start, SSDPSRV, , 236, 0, 51, 184, 148920, 148921, 148972, 149156, C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation Start, upnphost, , 39, 1, 36, 2, 156173, 156174, 156210, 156212, C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation Start, fdPHost, , 269, 0, 202, 66, 161643, 161644, 161845, 161912, C:\Windows\system32\svchost.exe -k LocalService Start, HomeGroupProvider, , 43, 1, 1, 42, 161912, 161912, 161914, 161955, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, HomeGroupListener, , 299, 0, 298, 2, 165392, 165392, 165690, 165692, C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Start, FontCache, , 2653, 1, 608, 2044, 165634, 165634, 166242, 168286, C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation Start, p2pimsvc, , 4634, 4623, 2, 8, 166896, 171519, 171522, 171530, C:\Windows\System32\svchost.exe -k LocalServicePeerNet Start, PNRPsvc, , 2134, 1, 1, 2132, 171530, 171531, 171531, 173664, C:\Windows\System32\svchost.exe -k LocalServicePeerNet Start, p2psvc, , 49, 1, 36, 12, 173664, 173665, 173701, 173713, C:\Windows\System32\svchost.exe -k LocalServicePeerNet Start, wuauserv, , 2481, 0, 291, 2190, 173666, 173666, 173956, 176146, C:\Windows\system32\svchost.exe -k netsvcs Start, BITS, , 593, 0, 592, 2, 178037, 178037, 178629, 178631, C:\Windows\system32\svchost.exe -k netsvcs Start, clr_optimization_v4.0.30319_32, , 260, 258, 0, 2, 229849, 230108, 230108, 230109, C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe Stop, clr_optimization_v4.0.30319_32, , 0, 0, 0, 0, 230849, 230849, 230849, 230849, Start, clr_optimization_v4.0.30319_64, , 743, 738, 0, 6, 230110, 230847, 230847, 230853, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe Stop, clr_optimization_v4.0.30319_64, , 0, 0, 0, 0, 230853, 230853, 230853, 230853, Start, gupdate, , 733, 731, 0, 2, 230972, 231704, 231704, 231705, "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc Stop, gupdate, , 7, 0, 0, 7, 231730, 231730, 231730, 231737, "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc Start, LMS, , 266, 162, 0, 104, 231815, 231977, 231977, 232081, C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe Start, NOBU, , 12365, 566, 0, 11799, 232095, 232661, 232661, 244460, "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE Start, nvUpdatusService, , 7535, 1490, 0, 6045, 244513, 246002, 246002, 252047, C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe Start, sppsvc, , 559, 329, 0, 230, 252110, 252438, 252438, 252668, C:\Windows\system32\sppsvc.exe Start, WinDefend, , 1218, 161, 635, 422, 252687, 252847, 253483, 253905, C:\Windows\System32\svchost.exe -k secsvcs Start, wscsvc, , 23, 1, 22, 0, 253966, 253966, 253989, 253989, C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Start, UNS, , 2459, 317, 0, 2142, 254091, 254407, 254407, 256550, "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"