Inactive Recently i had ZeroAccess attack me

[fox_news]

Windows update is not fixed. still looks like a folder icon too

 

[Broni]

Please answer questions from my previous reply.

 

[Broni]

Please answer questions from my previous reply.

 

[fox_news]

Stage 4 and every once in a while the CMD screen would have red text showing the status and it said stuff like 112341234 files done, 112341234 files modified, 802 files failed

 

[Broni]

It looks like we have to run repair installation: http://www.sevenforums.com/tutorials/3413-repair-install.html

 

[fox_news]

Ok I'm going to have to do this later. I don't have time this week

 

[Broni]

OK.

 

[fox_news]

Also just as a heads up. I was doing work and I noticed that my windows explorer is like leaking its memory or something. if I open it up and close it, every 5min or so it starts adding more ram usage and after awhile it gets REALLY high.

 

[Broni]

It looks like we have to run repair installation: http://www.sevenforums.com/tutorials/3413-repair-install.html

 

[fox_news]

Umm I don't have my product key.

 

[Broni]

Illegal Windows copy?

 

[fox_news]

No. I got it put together in a factory and then I asked them to throw on a few programs. the box that my computer came in didn't contain any product key, nor is it on the bottom of my laptop

 

[Broni]

If your copy is legal you can use Magical Jelly Bean Keyfinder: http://www.magicaljellybean.com/keyfinder/ to find product key.

 

[Broni]

Still with me?

 

[fox_news]

Yes sorry. have not had much time.

 

[Broni]

Let me know...

 

[fox_news]

Ok I ran the iso and when the window opened and when I hit install now, the window closes and then reopens and nothing happens

 

[Broni]

I'm not sure what you mean by running iso.
Instructions in my link are very clear and detailed.

 

[fox_news]

Sorry I mean after I extracted the iso I ran the setup.exe and thats where the window problem happend

 

[Broni]

Try right click on setup.exe and click "Run as administrator".

 

[fox_news]

It says WinSetup.dll is corrupt

 

[Broni]

Bad download?
That's all I can think of.

 

[fox_news]

So I did everything how it said in the windows repair guide you sent me and everything was working fine, even my windows update works, but my windowsexplorer.exe is leaking memory.

 

[Broni]

Download Process Explorer: http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
Unzip ProcessExplorer.zip, and double click on procexp.exe to run the program.
Click on View > Select Colunms.
In addition to already pre-selected options, make sure, the Command Line is selected, and press OK.
Go File>Save As, and save the report as Procexp.txt.
Attach the file to your next reply.

 

[fox_news]

ProcessCPUPrivate BytesWorking SetPIDDescriptionCompany NameCommand Line
svchost.exe< 0.01203,668 K213,104 K1352Host Process for Windows ServicesMicrosoft CorporationC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
explorer.exe< 0.01130,096 K153,004 K5900Windows ExplorerMicrosoft CorporationC:\Windows\Explorer.EXE
chrome.exe0.02123,164 K129,328 K4332Google ChromeGoogle Inc."C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
Dropbox.exe93,816 K104,584 K8612DropboxDropbox, Inc."C:\Users\Seth\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
chrome.exe100,628 K102,192 K8400Google ChromeGoogle Inc."C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4332.0.1281837810\1934987304" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,20 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.2843 --ignored=" --type=renderer " /prefetch:822062411
SearchIndexer.exe< 0.0182,748 K91,780 K4164Microsoft Windows Search IndexerMicrosoft CorporationC:\Windows\system32\SearchIndexer.exe /Embedding
chrome.exe85,172 K91,508 K9672Google ChromeGoogle Inc."C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding2 channel:stable/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_25/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="4332.3.2062969529\854139547" /prefetch:673131151
chrome.exe< 0.0168,080 K81,348 K2880Google ChromeGoogle Inc."C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding2 channel:stable/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_25/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="4332.1.1508682776\2135562064" /prefetch:673131151
svchost.exe< 0.0150,796 K64,176 K1380Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k netsvcs
chrome.exe0.1546,292 K56,656 K10896Google ChromeGoogle Inc."C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding2 channel:stable/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_25/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="4332.5.1005699028\1839021312" /prefetch:673131151
procexp64.exe0.4832,124 K51,364 K8224Sysinternals Process ExplorerSysinternals - www.sysinternals.com"C:\Users\Seth\Desktop\procexp.exe"
upeksvr.exe38,132 K45,464 K4588
chrome.exe33,340 K43,672 K8216Google ChromeGoogle Inc."C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding2 channel:stable/OmniboxStopTimer/UseStopTimer/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group5/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_10/UMA-Uniformity-Trial-1-Percent/group_25/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="4332.10.616591029\158880602" /prefetch:673131151
csrss.exe0.114,648 K39,612 K948
pcee4.exe45,392 K39,460 K9060Dolby Profile SelectorDolby Laboratories Inc."C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
ismagent.exe< 0.0125,980 K38,664 K8488Intel Services ManagerIntel Corporation"C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
dwm.exe0.0732,836 K38,520 K6532Desktop Window ManagerMicrosoft Corporation"C:\Windows\system32\Dwm.exe"
WmiPrvSE.exe19,580 K30,356 K7416
Steam.exe0.12168,040 K28,360 K7880Steam Client Bootstrapper (buildbot_winslave04_steam_steam_rel_client_win32@winslave04)Valve Corporation"C:\Program Files (x86)\Steam\Steam.exe" -silent
nvtray.exe0.0221,280 K28,044 K5132NVIDIA SettingsNVIDIA Corporation"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
svchost.exe< 0.0133,940 K27,320 K1320Host Process for Windows ServicesMicrosoft CorporationC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
PrivacyIconClient.exe0.0281,100 K26,808 K7280Intel(R) Management and Security StatusIntel Corporation"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" -startup
svchost.exe< 0.0117,496 K25,348 K1668Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k LocalService
svchost.exe< 0.019,840 K25,228 K2608Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
AcSvc.exe0.0115,956 K25,120 K3440ThinkVantage Access Connections Main ServiceLenovoC:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
nvxdsync.exe13,544 K24,120 K4428
IAStorIcon.exe< 0.0125,456 K23,636 K1760IAStorIconIntel Corporation"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
sidebar.exe10,780 K23,156 K7904Windows Desktop GadgetsMicrosoft Corporation"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
svchost.exe< 0.0121,852 K22,904 K2000Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k NetworkService
PMB.exe< 0.0121,516 K22,716 K1228Pando Media Booster"C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe"
IAStorDataMgrSvc.exe< 0.0123,348 K22,380 K3972IAStorDataSvcIntel Corporation"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
svchost.exe< 0.0118,716 K22,192 K1592Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
audiodg.exe19,184 K21,884 K1656
LogonUI.exe12,384 K21,688 K4360
chrome.exe0.0117,204 K20,644 K8284Google ChromeGoogle Inc."C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4332.9.1230331724\342591349" --lang=en-US --ignored=" --type=renderer " /prefetch:-632637702
wlanext.exe< 0.0110,868 K19,560 K1388
spoolsv.exe< 0.0112,296 K19,500 K1880Spooler SubSystem AppMicrosoft CorporationC:\Windows\System32\spoolsv.exe
BTTray.exe10,668 K19,120 K8604Bluetooth Tray ApplicationBroadcom Corporation."C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe"
rundll32.exe8,708 K18,508 K9312Windows host process (Rundll32)Microsoft Corporation"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
ZeroConfigService.exe< 0.019,224 K18,176 K3384Intel® PROSet/Wireless Zero Configure ServiceIntel® Corporation"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
nvvsvc.exe< 0.019,032 K17,836 K4436
EvtEng.exe< 0.0110,124 K17,776 K2520Intel(R) PROSet/Wireless Event Log ServiceIntel(R) CorporationC:\Program Files\Intel\WiFi\bin\EvtEng.exe
vcamsvc.exe< 0.0120,952 K17,724 K2916ThinkVantage Virtual Camera ControllerLenovo Group LimitedC:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
lsass.exe8,384 K17,476 K172Local Security Authority ProcessMicrosoft CorporationC:\Windows\system32\lsass.exe
BTStackServer.exe< 0.0122,904 K17,004 K7328Bluetooth Stack COM ServerBroadcom Corporation."C:\Program Files\ThinkPad\Bluetooth Software\BtStackServer.exe" -Embedding
SynTPEnh.exe< 0.0112,992 K16,308 K7896Synaptics TouchPad EnhancementsSynaptics Incorporated"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
UNS.exe< 0.017,544 K15,888 K3896User Notification ServiceIntel Corporation"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
svchost.exe< 0.0112,828 K15,788 K8772Host Process for Windows ServicesMicrosoft CorporationC:\Windows\System32\svchost.exe -k LocalServicePeerNet
RAVCpl64.exe11,792 K14,204 K7560Realtek HD Audio ManagerRealtek Semiconductor"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
RAVBg64.exe16,352 K13,484 K7572HD Audio Background ProcessRealtek Semiconductor"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
igfxpers.exe6,748 K12,988 K7596persistence ModuleIntel Corporation"C:\Windows\System32\igfxpers.exe"
WmiPrvSE.exe6,528 K12,920 K3888
sppsvc.exe9,476 K12,784 K2396Microsoft Software Protection Platform ServiceMicrosoft CorporationC:\Windows\system32\sppsvc.exe
svchost.exe0.046,816 K12,704 K548Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k DcomLaunch
services.exe8,668 K12,704 K188
AcDeskBandHlpr.exe< 0.015,468 K12,196 K6624Access Connections Deskband Helper ModuleLenovo"C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe" -Embedding
svchost.exe< 0.017,668 K12,096 K1188Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k RPCSS
iTunesHelper.exe< 0.014,508 K12,084 K8572iTunesHelperApple Inc."C:\Program Files (x86)\iTunes\iTunesHelper.exe"
SteamService.exe0.038,936 K12,000 K10488Steam Client Service (buildbot_winslave04_steam_steam_rel_client_win32@winslave04)Valve CorporationC:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
DiscSoftBusService.exe5,632 K11,808 K1660Disc soft bus serviceDisc Soft Ltd"C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe"
tphkload.exe10,012 K11,660 K3600ThinkPad Message Client LoaderLenovo Group LimitedC:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
SearchFilterHost.exe7,108 K11,012 K7344
System0.04320 K10,844 K4
AcPrfMgrSvc.exe5,096 K10,820 K2188ThinkVantage Access Connections Profile Manager ServiceLenovoC:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
tpnumlkd.exe5,848 K10,404 K6120
virtscrl.exe0.015,400 K10,256 K6416
AppleMobileDeviceService.exe0.013,828 K10,048 K2384MobileDeviceServiceApple Inc."C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
SearchProtocolHost.exe< 0.018,012 K10,016 K5536
SvcGuiHlpr.exe4,608 K9,368 K7376
taskhost.exe4,860 K9,364 K6320Host Process for Windows TasksMicrosoft Corporation"taskhost.exe"
taskeng.exe5,012 K9,236 K7584Task Scheduler EngineMicrosoft Corporationtaskeng.exe {0ED30F3D-232A-414E-9D99-485BD8643550}
nvvsvc.exe4,376 K9,232 K1112NVIDIA Driver Helper Service, Version 311.00NVIDIA Corporation"C:\Windows\system32\nvvsvc.exe"
RegSrvc.exe3,896 K9,228 K3088Intel(R) PROSet/Wireless Registry ServiceIntel(R) CorporationC:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
taskeng.exe5,092 K9,060 K5816
TpKnrres.exe0.017,772 K8,948 K7828Communications Utility launcherLenovo Group Limited"C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe"
dllhost.exe4,100 K8,932 K9696
hkcmd.exe4,484 K8,792 K7588hkcmd ModuleIntel Corporation"C:\Windows\System32\hkcmd.exe"
GobiQDLService.exe< 0.013,912 K8,700 K2632GobiQDLServiceSierra Wireless, Inc.C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe
SynTPLpr.exe5,364 K8,692 K8092TouchPad Driver Helper ApplicationSynaptics Incorporated"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
WUDFHost.exe3,612 K8,664 K1800
winlogon.exe4,380 K8,500 K1004
btwdins.exe4,052 K8,416 K2456Bluetooth Support ServerBroadcom Corporation.C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
TpShocks.exe< 0.015,128 K8,400 K7860ThinkVantage Active Protection SystemLenovo."C:\Windows\System32\TpShocks.exe"
iPodService.exe< 0.013,928 K8,384 K9524iPodService Module (64-bit)Apple Inc."C:\Program Files\iPod\bin\iPodService.exe"
mDNSResponder.exe4,592 K8,092 K2420Bonjour ServiceApple Inc."C:\Program Files\Bonjour\mDNSResponder.exe"
VSSVC.exe3,248 K7,912 K12116
sqlwriter.exe3,308 K7,808 K3240SQL Server VSS Writer - 64 BitMicrosoft Corporation"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
lvvsst.exe4,036 K7,776 K3012Auto Scroll Start ServiceLenovo Group LimitedC:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
RCIMGDIR.exe4,360 K7,516 K9224RCIMGDIRRicoh co.,Ltd."C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe"
micmute.exe7,020 K7,404 K3492Microphone Mute Controll Service for ThinkPadLenovo Group LimitedC:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
igfxext.exe3,444 K7,340 K7216igfxext ModuleIntel CorporationC:\Windows\system32\igfxext.exe -Embedding
procexp.exe3,176 K7,320 K8468Sysinternals Process ExplorerSysinternals - www.sysinternals.com"C:\Users\Seth\Desktop\procexp.exe"
WUDFHost.exe3,088 K7,280 K4444
Bluetooth Headset Helper.exe2,656 K7,220 K10900Bluetooth Headset HelperBroadcom Corporation."C:\Program Files\ThinkPad\Bluetooth Software\Bluetooth Headset Helper.exe"
TPONSCR.exe< 0.012,856 K7,168 K6028On screen display drawerLenovo Group LimitedC:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay
APAgent.exe3,000 K7,056 K8928AirPort Base Station AgentApple Inc."C:\Program Files (x86)\AirPort\APAgent.exe"
svchost.exe3,448 K7,048 K2948Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
SCHTASK.EXE< 0.013,380 K7,000 K9824Power Manager Power AgendaLenovo Group LimitedC:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
TPHKSVC.exe2,828 K6,960 K3268On screen display Fn+Fx handlerLenovo Group LimitedC:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
SynTPHelper.exe4,244 K6,876 K7844
HeciServer.exe3,012 K6,764 K2672Intel(R) Capability Licensing Service InterfaceIntel(R) Corporation"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
unsecapp.exe3,052 K6,720 K3824
WebUpdateSvc4.exe< 0.012,644 K6,696 K3304Software Update Wizard Service (V4.x)Data Perceptions / PowerProgrammerC:\Windows\SysWOW64\WebUpdateSvc4.exe
WUDFHost.exe3,972 K6,640 K1940
nvSCPAPISvr.exe3,156 K6,340 K1144Stereo Vision Control Panel API ServerNVIDIA Corporation"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
LMS.exe< 0.013,824 K6,340 K4264Local Manageability ServiceIntel CorporationC:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
VIPAppService.exe< 0.013,128 K6,312 K1624Symantec VIPAppService Symantec Corporation"C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe"
ccsvchst.exe2,188 K6,296 K2744Symantec Service FrameworkSymantec Corporation"C:\Program Files (x86)\Norton Security Suite\Engine\20.4.0.40\ccSvcHst.exe" /s "N360" /m "C:\Program Files (x86)\Norton Security Suite\Engine\20.4.0.40\diMaster.dll" /prefetch:1
csrss.exe< 0.013,980 K6,120 K740
svchost.exe2,712 K6,108 K12248Host Process for Windows ServicesMicrosoft CorporationC:\Windows\System32\svchost.exe -k swprv
Jhi_service.exe2,312 K6,020 K2720Intel(R) Dynamic Application Loader Host InterfaceIntel CorporationC:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
CamMute.exe2,092 K5,920 K2804Camera Mute Control Service for ThinkPadLenovo Group LimitedC:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
wmpnetwk.exe< 0.0116,016 K5,880 K9800Windows Media Player Network Sharing ServiceMicrosoft Corporation"C:\Program Files\Windows Media Player\wmpnetwk.exe"
svchost.exe2,768 K5,828 K4004Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k bthsvcs
iusb3mon.exe< 0.012,172 K5,732 K9276Intel(R) USB 3.0 MonitorIntel Corporation"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
wininit.exe2,212 K5,372 K956
svchost.exe2,604 K5,372 K10548Host Process for Windows ServicesMicrosoft CorporationC:\Windows\system32\svchost.exe -k SDRSVC
lsm.exe3,496 K5,268 K200
FBService.exe< 0.012,020 K5,240 K2564RapidBoot HDD Accelerator ServiceLenovoC:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
rundll32.exe2,960 K5,228 K6584
jusched.exe< 0.011,800 K4,980 K9232Java(TM) Update SchedulerOracle Corporation"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
rundll32.exe1,684 K4,892 K9632Windows host process (Rundll32)Microsoft Corporation"C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\ThinkPad\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
svchost.exe2,400 K4,832 K2372Host Process for Windows ServicesMicrosoft CorporationC:\Windows\System32\svchost.exe -k HPZ12
svchost.exe2,296 K4,756 K2924Host Process for Windows ServicesMicrosoft CorporationC:\Windows\System32\svchost.exe -k HPZ12
armsvc.exe< 0.011,600 K4,300 K2312Adobe Acrobat Update ServiceAdobe Systems Incorporated"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
ibmpmsvc.exe2,160 K3,996 K1072ThinkPad Power Management ServiceLenovo.C:\Windows\system32\ibmpmsvc.exe
rundll32.exe1,356 K3,920 K9288Windows host process (Rundll32)Microsoft Corporation"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
TPKNRSVC.exe1,444 K3,684 K2856Microphone volume control serviceLenovo Group LimitedC:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
sqlservr.exe< 0.01172,812 K3,552 K1648SQL Server Windows NT - 64 BitMicrosoft Corporation"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
conhost.exe1,588 K3,536 K1436
NLSSRV32.EXE1,200 K3,076 K1156This service enables products that use the Nalpeiron Licensing System Nalpeiron Ltd.C:\Windows\SysWOW64\NLSSRV32.EXE
smss.exe732 K1,388 K480
PhotoshopElementsFileAgent.exe< 0.013,220 K1,072 K5004Adobe Photoshop Elements 10.0 (component)Adobe Systems IncorporatedC:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
MCPLaunch.exe< 0.011,600 K840 K2408Message Center Plus SchedulerLenovo"C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe" /start
System Idle Process98.620 K24 K0
Interrupts0.180 K0 Kn/aHardware Interrupts and DPCs