Image Name PID Session Name Session# Mem Usage tus User Name CPU Time dow Title

========================= ======== ================ =========== ============ ============ ================================================== ============ ===================================================================== System Idle Process 0 Services 0 24 K nown NT AUTHORITY\SYSTEM 1:47:22 System nown smss.exe nown csrss.exe nown 4 Services N/A 324 Services NT AUTHORITY\SYSTEM 464 Services NT AUTHORITY\SYSTEM 0 0 0 1 0 0 0 0 0 0 1 0 0 0 0 1 0

Sta Win === === Unk N/A

1,652 K Unk 0:01:57 N/A 1,260 K Unk 0:00:00 N/A 4,836 K Unk 0:00:01 N/A 5,604 K Unk 0:00:00 N/A 10,856 K Run 0:00:25 N/A 11,240 K Unk 0:00:02 N/A 13,808 K Unk 0:00:03 N/A 5,380 K Unk 0:00:00 N/A 10,984 K Unk 0:00:13 N/A 9,696 K Unk 0:00:01 N/A 5,372 K Unk 0:00:00 N/A 8,456 K Unk 0:00:00 N/A 35,224 K Unk 0:00:10 N/A 155,136 K Unk 0:00:29 N/A 51,124 K Unk 0:01:32 N/A 19,260 K Unk 0:00:01 N/A 7,772 K Run 0:00:00 AMD

wininit.exe 544 Services nown NT AUTHORITY\SYSTEM csrss.exe ning 564 Console NT AUTHORITY\SYSTEM

services.exe 600 Services nown NT AUTHORITY\SYSTEM lsass.exe nown lsm.exe nown 616 Services NT AUTHORITY\SYSTEM 624 Services NT AUTHORITY\SYSTEM

svchost.exe 736 Services nown NT AUTHORITY\SYSTEM svchost.exe 824 Services nown NT AUTHORITY\NETWORK SERVICE atiesrxx.exe 876 Services nown NT AUTHORITY\SYSTEM winlogon.exe 936 Console nown NT AUTHORITY\SYSTEM svchost.exe 980 Services nown NT AUTHORITY\LOCAL SERVICE svchost.exe 116 Services nown NT AUTHORITY\SYSTEM svchost.exe 360 Services nown NT AUTHORITY\SYSTEM svchost.exe 1096 Services nown NT AUTHORITY\LOCAL SERVICE atieclxx.exe 1168 Console ning NT AUTHORITY\SYSTEM

EEU Client SbieSvc.exe 1184 Services nown NT AUTHORITY\SYSTEM svchost.exe 1324 Services nown NT AUTHORITY\NETWORK SERVICE AvastSvc.exe 1412 Services nown NT AUTHORITY\SYSTEM spoolsv.exe 1804 Services nown NT AUTHORITY\SYSTEM svchost.exe 1836 Services nown NT AUTHORITY\LOCAL SERVICE Fuel.Service.exe 1952 Services nown NT AUTHORITY\SYSTEM DUMeterSvc.exe 1996 Services nown NT AUTHORITY\SYSTEM svchost.exe 1060 Services nown NT AUTHORITY\LOCAL SERVICE MSCamS64.exe 1312 Services nown NT AUTHORITY\SYSTEM svchost.exe 2088 Services nown NT AUTHORITY\LOCAL SERVICE vmware-usbarbitrator64.ex 2128 Services nown NT AUTHORITY\SYSTEM vmnat.exe nown 2196 Services NT AUTHORITY\SYSTEM

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1

4,840 K Unk 0:00:00 N/A 32,776 K Unk 0:00:03 N/A 45,048 K Unk 0:02:10 N/A 14,096 K Unk 0:00:00 N/A 15,048 K Unk 0:00:02 N/A 8,876 K Unk 0:00:00 N/A 4,432 K Unk 0:00:14 N/A 18,780 K Unk 0:00:01 N/A 16,076 K Unk 0:00:00 N/A 6,584 K Unk 0:00:00 N/A 7,288 K Unk 0:00:00 N/A 5,088 K Unk 0:00:00 N/A 4,496 K Unk 0:00:00 N/A 8,568 K Unk 0:00:07 N/A 10,624 K Unk 0:00:03 N/A 14,168 K Unk 0:00:56 N/A 54,376 K Unk 0:00:04 N/A 8,748 K Run 0:00:00 MCI 7,816 K Run 0:00:00 Tas 46,764 K Run 0:00:53 DWM

vmnetdhcp.exe 2236 Services nown NT AUTHORITY\SYSTEM nmsrvc.exe nown 2272 Services NT AUTHORITY\SYSTEM

vmware-authd.exe 2384 Services nown NT AUTHORITY\SYSTEM WmiPrvSE.exe 2504 Services nown NT AUTHORITY\NETWORK SERVICE vmware-hostd.exe 2668 Services nown NT AUTHORITY\SYSTEM taskhost.exe ning Study-PC\sw23 command handling window taskeng.exe ning Study-PC\sw23 kEng - Task Scheduler Engine dwm.exe ning Study-PC\sw23 2904 Console 2448 Console Process 3040 Console

Notification Window explorer.exe ning Study-PC\sw23

3240 Console

1 0 1 1 1 1 1 1 1 1 1 1 0 1 1 1 1 1 1 1

74,616 K Run 0:01:02 N/A 6,572 K Unk 0:00:00 N/A 64,356 K Run 0:02:42 Lan 12,720 K Run 0:00:03 N/A 12,344 K Run 0:00:00 Rea 19,132 K Run 0:00:00 N/A 19,780 K Run 0:00:06 IDM 13,736 K Run 0:00:00 KHA 6,472 K Run 0:00:00 IDM 22,428 K Run 0:00:15 Tix 13,892 K Run 0:00:00 Sti 13,068 K Run 0:00:00 San 18,168 K Unk 0:00:08 N/A 13,016 K Run 0:00:01 {Ne 29,320 K Run 0:00:02 N/A 3,796 K Run 0:00:00 CAv 6,992 K Run 0:00:01 KMa 5,412 K Run 0:00:00 vmw 4,932 K Not 0:00:00 Ole 4,880 K Run 0:00:00 .NE

svchost.exe 3256 Services nown NT AUTHORITY\NETWORK SERVICE LanOptimizer.exe 3288 Console ning Study-PC\sw23 Optimizer - Bandwidth control utility DUMeter.exe 3704 Console ning Study-PC\sw23 RAVCpl64.exe ning Study-PC\sw23 ltek HD Audio CPL for Vista SetPoint.exe ning Study-PC\sw23 3852 Console 3880 Console

IDMan.exe 3948 Console ning Study-PC\sw23 drop target. Drop web-links for downloading here KHALMNPR.exe 3332 Console ning Study-PC\sw23 LHIDC_MainWindow IEMonitor.exe 3660 Console ning Study-PC\sw23 agent for click monitoring in IE-based browsers tixati.exe 3992 Console ning Study-PC\sw23 ati v1.74 StikyNot.exe 3996 Console ning Study-PC\sw23 cky Notes SbieCtrl.exe 3396 Console ning Study-PC\sw23 dboxieControlBorderWindow SearchIndexer.exe 4252 Services nown NT AUTHORITY\SYSTEM nmctxth.exe 4328 Console ning Study-PC\sw23 tworkMagicUserContext9D8F61C7-BFA2-459b-9243-426A1D514B03} nmapp.exe 4344 Console ning Study-PC\sw23 AvastUI.exe ning Study-PC\sw23 astTrayIcon Kmaestro.exe ning Study-PC\sw23 estro vmware-tray.exe ning Study-PC\sw23 are-tray Main UI Window jusched.exe Responding Study-PC\sw23 MainThreadWndName MOM.exe ning Study-PC\sw23 4368 Console 4428 Console 4464 Console 4556 Console 4704 Console

T-BroadcastEventWindow.2.0.0.0.33c0d9d.0 CCC.exe 5108 Console ning Study-PC\sw23 wmpnetwk.exe 4108 Services nown NT AUTHORITY\NETWORK SERVICE svchost.exe 4416 Services nown NT AUTHORITY\LOCAL SERVICE PresentationFontCache.exe 5900 Services nown NT AUTHORITY\LOCAL SERVICE svchost.exe 4796 Services nown NT AUTHORITY\SYSTEM WUDFHost.exe 4492 Services nown NT AUTHORITY\LOCAL SERVICE

1 0 0 0 0 0

20,864 K Run 0:00:14 N/A 12,012 K Unk 0:00:01 N/A 15,668 K Unk 0:00:02 N/A 19,172 K Unk 0:00:00 N/A 31,484 K Unk 0:00:36 N/A 7,004 K Unk 0:00:00 N/A 596,600 K Run 0:02:51 Obt 17,184 K Unk 0:00:57 N/A 47,844 K Not 0:01:34 Ole 20,512 K Unk 0:00:05 N/A 226,556 K Run 0:01:37 Dum 13,332 K Run 0:08:42 Reg 12,868 K Run 0:00:01 Win 4,776 K Unk 0:00:00 N/A 52,004 K Run 0:00:02 Jav 4,500 K Unk 0:00:00 N/A 3,984 K Run 0:00:00 Adm 6,660 K Run 0:00:00 Ole 10,028 K Unk 0:00:00 N/A 8,336 K Unk 0:00:00 N/A

opera.exe 3196 Console 1 ning Study-PC\sw23 aining a Process List : League of Legends Player Support - Opera rads_user_kernel.exe 5456 Console 1 nown Study-PC\sw23 LoLLauncher.exe 752 Console Responding Study-PC\sw23 MainThreadWndName audiodg.exe 5596 Services nown NT AUTHORITY\LOCAL SERVICE LolClient.exe ning Study-PC\sw23 my Mp3DoctorPro.EXE ning Study-PC\sw23 ister taskmgr.exe ning Study-PC\sw23 dows Task Manager jp2launcher.exe nown Study-PC\sw23 java.exe ning Study-PC\sw23 a Sys Tray conhost.exe nown Study-PC\sw23 2308 Console 5612 Console 2012 Console 3188 Console 4288 Console 972 Console 1 0 1 1 1 1 1 1 1 1 0 1

cmd.exe 4884 Console ning Study-PC\sw23 inistrator: C:\Windows\system32\cmd.exe - tasklist /v conhost.exe 1192 Console ning Study-PC\sw23 MainThreadWndName MpCmdRun.exe 2036 Services nown NT AUTHORITY\NETWORK SERVICE tasklist.exe nown Study-PC\sw23 3152 Console