The Name of the Server

---------------------VishwasSK
Today's Date
-----------18-Oct-13
The file created at
------------------10:03 AM
The Time Zone of the Server
--------------------------The following registry value shows the Standard Chosen for Time zone
@VABEG:WIN:SHOWACLS@
FileName: config
Error: Cannot open file [C:\winnt\system32\config]
FileName: repair
Error: Cannot open file [C:\WINNT\repair]
FileName: boot.ini
Error: Cannot open file [C:\boot.ini]
FileName: ntdetect.com
Error: Cannot open file [C:\ntdetect.com]
FileName: ntldr
Error: Cannot open file [C:\ntldr]
@VAEND:WIN:SHOWACLS@
The server role
--------------The following details show the server role
@VABEG:WIN:NETACCOUNTS@
Force user logoff how long after time expires?:
Minimum password age (days):
Maximum password age (days):
Minimum password length:
Length of password history maintained:
Lockout threshold:
Lockout duration (minutes):
Lockout observation window (minutes):
Computer role:
The command completed successfully.
===================================================
SYSTEM DETAILS
===================================================
The Operating System of the Server
---------------------------------@VABEG:WIN:VER@

Never
0
Unlimited
8
None
Never
30
30
WORKSTATION

Microsoft Windows [Version 6.1.7601]

Network Configuration
--------------------@VABEG:WIN:IPCONFIG@
Windows IP Configuration
Host Name . . . . . . .
Primary Dns Suffix . .
Node Type . . . . . . .
IP Routing Enabled. . .
WINS Proxy Enabled. . .
System Quarantine State

.
.
.
.
.
.

.
.
.
.
.
.

.
.
.
.
.
.

.
.
.
.
.
.

.
.
.
.
.
.

:
:
:
:
:
:

VishwasSK
Hybrid
No
No
Not Restricted

Ethernet adapter Local Area Connection 4:

Media State . . . . . . . . . .
Connection-specific DNS Suffix
Description . . . . . . . . . .
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .

.
.
.
.
.
.

:
:
:
:
:
:

Media disconnected
TAP-Win32 Adapter V9
00-FF-CC-FB-1A-E7
Yes
Yes

Wireless LAN adapter Wireless Network Connection 2:

Media State . . . . . . . . . .
Connection-specific DNS Suffix
Description . . . . . . . . . .
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .

.
.
.
.
.
.

:
:
:
:
:
:

Media disconnected
Microsoft Virtual WiFi Miniport Adapter
EC-55-F9-C6-89-BA
Yes
Yes

Wireless LAN adapter Wireless Network Connection:

Media State . . . . . . . . . .
Connection-specific DNS Suffix
Description . . . . . . . . . .
Mini Card Adapter
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .

. : Media disconnected
. :
. : 1x1 11b/g/n Wireless LAN PCI Express Half
. : EC-55-F9-C6-89-BA
. : Yes
. : Yes

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix
Description . . . . . . . . . .
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .
IPv4 Address. . . . . . . . . .
Subnet Mask . . . . . . . . . .
Lease Obtained. . . . . . . . .
Lease Expires . . . . . . . . .
Default Gateway . . . . . . . .
DHCP Server . . . . . . . . . .
DNS Servers . . . . . . . . . .

.
.
.
.
.
.
.
.
.
.
.
.

:
:
:
:
:
:
:
:
:
:
:
:

Realtek PCIe GBE Family Controller

E8-9A-8F-8B-09-2F
Yes
Yes
10.225.14.30(Preferred)
255.255.255.0
Friday, October 18, 2013 8:17:13 AM
Saturday, October 26, 2013 9:36:16 AM
10.225.14.5
10.225.3.11
10.1.2.37
10.225.3.20

Primary WINS Server . . . . . . . : 10.1.2.37

Secondary WINS Server . . . . . . : 10.225.3.20
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet
1
Physical Address. . . . .
DHCP Enabled. . . . . . .
Autoconfiguration Enabled
Link-local IPv6 Address .
IPv4 Address. . . . . . .
Subnet Mask . . . . . . .
Lease Obtained. . . . . .
Lease Expires . . . . . .
Default Gateway . . . . .
DHCP Server . . . . . . .
DHCPv6 IAID . . . . . . .
DHCPv6 Client DUID. . . .
DNS Servers . . . . . . .

.
.
.
.
.
.
.
.
.
.
.
.
.

.
.
.
.
.
.
.
.
.
.
.
.
.

.
.
.
.
.
.
.
.
.
.
.
.
.

.
.
.
.
.
.
.
.
.
.
.
.
.

:
:
:
:
:
:
:
:
:
:
:
:
:

00-50-56-C0-00-01
Yes
Yes
fe80::ed13:b48f:8fb3:7f31%17(Preferred)
192.168.56.1(Preferred)
255.255.255.0
Friday, October 18, 2013 9:36:11 AM
Friday, October 18, 2013 10:21:11 AM

192.168.56.254
503337046
00-01-00-01-15-C5-F3-AB-E8-9A-8F-8B-09-2F
fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet
8
Physical Address. . . . .
DHCP Enabled. . . . . . .
Autoconfiguration Enabled
Link-local IPv6 Address .
IPv4 Address. . . . . . .
Subnet Mask . . . . . . .
Lease Obtained. . . . . .
Lease Expires . . . . . .
Default Gateway . . . . .
DHCP Server . . . . . . .
DHCPv6 IAID . . . . . . .
DHCPv6 Client DUID. . . .
DNS Servers . . . . . . .

.
.
.
.
.
.
.
.
.
.
.
.
.

.
.
.
.
.
.
.
.
.
.
.
.
.

.
.
.
.
.
.
.
.
.
.
.
.
.

.
.
.
.
.
.
.
.
.
.
.
.
.

:
:
:
:
:
:
:
:
:
:
:
:
:

00-50-56-C0-00-08
Yes
Yes
fe80::958c:9734:b163:40b5%18(Preferred)
192.168.91.1(Preferred)
255.255.255.0
Friday, October 18, 2013 9:36:11 AM
Friday, October 18, 2013 10:21:11 AM

192.168.91.254
520114262
00-01-00-01-15-C5-F3-AB-E8-9A-8F-8B-09-2F
fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
Primary WINS Server . . . . . . . : 192.168.91.2
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{566C4238-AD12-4259-8C5F-26F1332F540C}:
Media State . . . . . . . . . .
Connection-specific DNS Suffix
Description . . . . . . . . . .
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .

.
.
.
.
.
.

:
:
:
:
:
:

Media disconnected
Microsoft ISATAP Adapter
00-00-00-00-00-00-00-E0
No
Yes

Tunnel adapter isatap.{CCFB1AE7-11FE-4D94-8835-BC1674385E11}:

Media State . . . . . . . . . .
Connection-specific DNS Suffix
Description . . . . . . . . . .
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .

.
.
.
.
.
.

:
:
:
:
:
:

Media disconnected
Microsoft ISATAP Adapter #3
00-00-00-00-00-00-00-E0
No
Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Media State . . . . . . . . . .
Connection-specific DNS Suffix
Description . . . . . . . . . .
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .

.
.
.
.
.
.

:
:
:
:
:
:

Media disconnected
Teredo Tunneling Pseudo-Interface
00-00-00-00-00-00-00-E0
No
Yes

Tunnel adapter isatap.{BEA385DB-A0CE-480F-9930-1F5B393718F7}:

Media State . . . . . . . . . .
Connection-specific DNS Suffix
Description . . . . . . . . . .
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .

.
.
.
.
.
.

:
:
:
:
:
:

Media disconnected
Microsoft ISATAP Adapter #4
00-00-00-00-00-00-00-E0
No
Yes

Tunnel adapter isatap.{6EC3C0D2-677E-4948-A5F2-0C1C24958FB3}:

Media State . . . . . . . . . .
Connection-specific DNS Suffix
Description . . . . . . . . . .
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .

.
.
.
.
.
.

:
:
:
:
:
:

Media disconnected
Microsoft ISATAP Adapter #5
00-00-00-00-00-00-00-E0
No
Yes

Tunnel adapter isatap.{EAE0ADF2-0DFF-4F07-B88B-BA88A3FABF72}:

Media State . . . . . . . . . .
Connection-specific DNS Suffix
Description . . . . . . . . . .
Physical Address. . . . . . . .
DHCP Enabled. . . . . . . . . .
Autoconfiguration Enabled . . .

.
.
.
.
.
.

:
:
:
:
:
:

Media disconnected
Microsoft ISATAP Adapter #6
00-00-00-00-00-00-00-E0
No
Yes

Routing Table
------------@VABEG:WIN:ROUTEPRINT@
===========================================================================
Interface List
22...00 ff cc fb 1a e7 ......TAP-Win32 Adapter V9
19...ec 55 f9 c6 89 ba ......Microsoft Virtual WiFi Miniport Adapter
15...ec 55 f9 c6 89 ba ......1x1 11b/g/n Wireless LAN PCI Express Half Mini Car
d Adapter
11...e8 9a 8f 8b 09 2f ......Realtek PCIe GBE Family Controller
17...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1
18...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8
1...........................Software Loopback Interface 1
23...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
21...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3

16...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface

24...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
25...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
26...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #6
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination
Netmask
Gateway
Interface Metric
0.0.0.0
0.0.0.0
10.225.14.5
10.225.14.30
20
10.225.14.0
255.255.255.0
On-link
10.225.14.30
276
10.225.14.30 255.255.255.255
On-link
10.225.14.30
276
10.225.14.255 255.255.255.255
On-link
10.225.14.30
276
127.0.0.0
255.0.0.0
On-link
127.0.0.1
306
127.0.0.1 255.255.255.255
On-link
127.0.0.1
306
127.255.255.255 255.255.255.255
On-link
127.0.0.1
306
192.168.56.0
255.255.255.0
On-link
192.168.56.1
276
192.168.56.1 255.255.255.255
On-link
192.168.56.1
276
192.168.56.255 255.255.255.255
On-link
192.168.56.1
276
192.168.91.0
255.255.255.0
On-link
192.168.91.1
276
192.168.91.1 255.255.255.255
On-link
192.168.91.1
276
192.168.91.255 255.255.255.255
On-link
192.168.91.1
276
224.0.0.0
240.0.0.0
On-link
127.0.0.1
306
224.0.0.0
240.0.0.0
On-link
10.225.14.30
276
224.0.0.0
240.0.0.0
On-link
192.168.56.1
276
224.0.0.0
240.0.0.0
On-link
192.168.91.1
276
255.255.255.255 255.255.255.255
On-link
127.0.0.1
306
255.255.255.255 255.255.255.255
On-link
10.225.14.30
276
255.255.255.255 255.255.255.255
On-link
192.168.56.1
276
255.255.255.255 255.255.255.255
On-link
192.168.91.1
276
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination
Gateway
1
306 ::1/128
On-link
17
276 fe80::/64
On-link
18
276 fe80::/64
On-link
18
276 fe80::958c:9734:b163:40b5/128
On-link
17
276 fe80::ed13:b48f:8fb3:7f31/128
On-link
1
306 ff00::/8
On-link
17
276 ff00::/8
On-link
18
276 ff00::/8
On-link
===========================================================================
Persistent Routes:
None
IP Forwarding
------------TCPIP --- IPEnableRouter value is :
REG_DWORD

IPEnableRouter 0

If the ablove value is set to

1 then IP Forwarding is enabled
0 then IP Forwarding is disabled
=========================================================
SYSTEM VULNERABILITIES
=========================================================
Null Sessions
------------Lsa --- RestrictAnonymous value is :
REG_DWORD

RestrictAnonymous

The above value should be set to 1 to be safe.

If 0 = Unsafe
If 1 = Safe
8.3 File Name Generation
-----------------------To prevent such an attack 2 registry values need to be set.
I]
FileSystem --- Win31Filesystem value is :
REG_DWORD

Win31FileSystem 0

The above value should be 1 to be safe.

If 0 = Unsafe
If 1 = Safe
II]
FileSystem --- NtfsDisable8Dot3NameCreation value is :
REG_DWORD

NtfsDisable8Dot3NameCreation

The above value should be 1 to be safe.

If 0 = Unsafe
If 1 = Safe
====================================================================
SERVICES PACKS AND HOTFIXES - SPCheck
====================================================================
@VABEG:WIN:SPCHECK@
SPCheck v1.5 -- Tue Apr 20 20:23:24 1999
----------------------------------------------------

Machine Name: VishwasSK

Service Pack: No Service Pack
No hotfixes installed.
---------------------------------------------------Initial concept by: Jon McDonald ([email protected])
Programmed by: Gregg Branham ([email protected])
& Rick Osborne ([email protected])
Visit Altus at http://www.altusnet.com
@VAEND:WIN:SPCHECK@
====================================================================
SERVICES PACKS AND HOTFIXES - HFnetchk
====================================================================
@VABEG:WIN:HFNETCHK@
@VAEND:WIN:HFNETCHK@

Hotfixes Check through Registry

------------The system was unable to find the specified registry key.
==================================================================
IMPORTANT REGISTRY INFORMATION
==================================================================
Audit of backup and Restore
--------------------------Lsa --- FullPrivilegeAuditing value is :
REG_BINARY

fullprivilegeauditing

Data to follow:

00

Names of Named Pipes

-------------------LanManServer --- NullSessionPipes value is :
MULTI_SZ

NullSessionPipes

Remove names from the list to prevent null session access to them
SNMP Parameters
--------------SNMP --- Parameters value is :
Listing of [SYSTEM\CurrentControlSet\Services\SNMP\Parameters]

[ExtensionAgents]

SNMP -- PermittedManagers value is

The system was unable to find the specified registry key.

SNMP -- ValidCommunities value is

The system was unable to find the specified registry key.

Caching Of Logon Information

---------------------------The value for Cached log on count is :
REG_SZ

cachedlogonscount

10

The above registry value should be 0 to be safe

Automatic Logon Feature
----------------------Winlogon --- AutoAdminLogon value is :
The system was unable to find the specified registry key.
The above registry value should be 0 to be safe.
Log On Message for Users
-----------------------The following Registry key shows the logon message
REG_SZ

LegalNoticeCaption

Enforcing strong passwords

-------------------------The following registry key needs to be set. Make sure that the value of the regi
stry entry is not
replaced by the entry Passfilt, it should only be appended to the existing conte
nt.
MULTI_SZ
Notification Packages
gerprint Software\psqlpwd.dll;ACGina;

scecli;C:\Program Files\ThinkVantage Fin

Ensure that MIN password length is 6 in User Manager.

Checking Auto-creation of Administrative Shares

-----------------------------The following key shows if autoshare of drives is disabled .If key not present a
utoshare is enabled.Unsafe
The system was unable to find the specified registry key.
The following key shows shares for workstations
The system was unable to find the specified registry key.

Checking Shutdown Without Logon

------------------------------The following registey key shows that the shutdown button without logon is disab
led
REG_SZ

ShutdownWithoutLogon

the above registry value should be set to 0 to be safe

Screen Saver Timeout Information

-------------------------------The value for Screen Saver Timeout is :
REG_SZ

ScreenSaveTimeOut

300

The above registry value should be 900 as per recommended guidelines

===============================================================================
INSTALLED SOFTWARE as shown in Add/Remove PROGRAMS
===============================================================================
Following is a list of Installed software ( add/remove programs )
@VABEG:WIN:REGQUERYUNINSTALL@
Listing of [SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
[25247A4F7CF60C197BFE96065E287DC132CADA3D]
[40464579C33E2E3592B26878E4B411CE2C6D47E6]
[466E9B20D871055D6D3CDA2CDD1D355E978A61AF]
[8461-7759-5462-8226]
[Ad-Aware Browsing Protection]
[AddressBook]
[Adobe Acrobat 8 Standard]
[Adobe AIR]
[Adobe Flash Player ActiveX]
[Adobe Flash Player Plugin]
[Cain & Abel v4.9.42]
[Connection Manager]

[DirectDrawEx]
[DXM_Runtime]
[EnablePS]
[Excel Password Recovery Master_is1]
[Fontcore]
[Google Chrome]
[HTML Help Workshop]
[Idea Net Setter]
[ideatoolAutoInstaller]
[IE40]
[IE4Data]
[IE5BAKEX]
[IEData]
[InstallShield Uninstall Information]
[InstallShield_{50F68032-B5B7-4513-9116-C978DBD8F27A}]
[InstallShield_{758C8301-2696-4855-AF45-534B1200980A}]
[InstallShield_{8D341F5E-7FA5-4A6A-8A6F-8DD22ABD3F71}]
[InstallShield_{A3BE3F1E-2472-4211-8735-E8239BE49D9F}]
[InstallShield_{F0BC0F9E-C4A8-485C-93ED-424DB9EA3F75}]
[InstallShield_{F2004B8D-7791-4B35-A3FA-D8CA8BB4DD81}]
[KB2674319]
[KB2793634]
[Lenovo Welcome_is1]
[LENOVO.RAPIDBOOT]
[LENOVO.SMIIF]
[LenovoAutoScrollUtility]
[Microsoft .NET Framework 4 Client Profile]
[Microsoft .NET Framework 4 Extended]
[Microsoft Forefront UAG endpoint components 3.1.0]
[Microsoft Help Viewer 1.1]
[Microsoft IntelliPoint 8.2]
[Microsoft SQL Server 11]
[Microsoft SQL Server SQLServer2012]
[Mobile VPN with SSL client_is1]
[MobileOptionPack]
[Mozilla Firefox 14.0.1 (x86 en-US)]
[MozillaMaintenanceService]
[MPlayer2]
[Net-SNMP]
[Nmap]
[OnScreenDisplay]
[Paros_is1]
[PC-Doctor for Windows]
[Power Management Driver]
[RealPlayer 15.0]
[SAPGUI710]
[SAP_JNet]
[SchedulingAgent]
[SpaceMonger]
[STANDARD]
[sTerm v1.7]
[SynTPDeinstKey]
[ThinkPad FullScreen Magnifier]
[Toolbar Cleaner]
[VISPRO]
[Websecurify Scanner_is1]
[WIC]
[WinLiveSuite]
[WinPcapInst]
[WinRAR archiver]

[Wireshark]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2106584]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2116602]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2123002]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2151757]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2201993]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2251084]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2251489]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2268081]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2275326]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2277993]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2293053]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2345133]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2385361]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2444922]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2450801]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2465236]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2483190]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2522140]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2522841]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2535320]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2547352]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2548139]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2549864]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2560935]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2581019]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2591016]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2635973]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2642376]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2645410]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2650605]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB2652302]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB888802]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB888803]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB982218]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB982218v2]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB982218v3]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB982218v4]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB983505]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB983571]
[{012D26C3-E12A-3BDA-8ECE-DF14E721A507}.KB983571v2]
[{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2162169]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2416472]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2468871]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2478063]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2487367]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2533523]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2544514]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2572063]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2599651]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2600211]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2600217]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2604121]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2639327]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2656351]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2682543]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2736428]

[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2742595]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2836939]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2836939v2]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2836939v3]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2858302]
[{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2858302v2]
[{0B0F231F-CE6A-483D-AA23-77B364F75917}]
[{0B2D57D5-8BFD-4554-A9B6-CC8CC0580F1D}]
[{0C485220-4029-48E7-9F27-965DA4A78D5E}]
[{124D51A1-F3C2-45AE-B812-D3CA71247093}]
[{13F59938-C595-479C-B479-F171AB9AF64F}]
[{147BCE03-C0F1-4C9F-8157-6A89B6D2D973}]
[{17504ED4-DB08-40A8-81C2-27D8C01581DA}]
[{17CBC505-D1AE-459D-B445-3D2000A85842}]
[{191A6F65-6878-398D-A272-EF011B80F371}]
[{196BB40D-1578-3D01-B289-BEFC77A11A1E}.KB2151757]
[{196BB40D-1578-3D01-B289-BEFC77A11A1E}.KB982573]
[{19A4A990-5343-4FF7-B3B5-6F046C091EDF}]
[{19BA08F7-C728-469C-8A35-BFBD3633BE08}]
[{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}]
[{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}]
[{200FEC62-3C34-4D60-9CE8-EC372E01C08F}]
[{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}]
[{24E92E7A-6848-4747-A3EA-3AAC0576BE52}]
[{25C64847-B900-48AD-A164-1B4F9B774650}]
[{26A24AE4-039D-4CA4-87B4-2F83216029FB}]
[{26A24AE4-039D-4CA4-87B4-2F83217021FB}]
[{26A24AE4-039D-4CA4-87B4-2F83217025FF}]
[{2819e172-81d5-4113-88bd-4605b02344e0}]
[{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}]
[{2902F983-B4C1-44BA-B85D-5C6D52E2C441}]
[{2B126817-FEBA-4ADE-84CF-5C807B797870}]
[{2E17AA0A-7B81-41C1-9629-0D3FCE779903}]
[{2EB88B38-A700-411C-B45E-33A5EB81B936}]
[{2F7DBBE6-8EBC-495C-9041-46A772F4E311}]
[{30CA21F2-901A-44DB-A43F-FC31CD0F2493}]
[{3318B54A-B5A8-49B1-8016-753DC6CAC63B}]
[{3336F667-9049-4D46-98B6-4C743EEBC5B1}]
[{34F4D9A4-42C2-4348-BEF4-E553C84549E7}]
[{38294D95-DB90-4D8C-824C-26856E5001A6}]
[{3C2220F5-90A5-45B5-9C68-10D727D07F71}]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2028562]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2160841]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2162169]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2183292]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2223286]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2260913]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2277657]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2297328]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2298853]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2315412]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2328540]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2328606]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2328751]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2328886]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2362055]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2384016]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2390372]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2390372v2]

[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2390624]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2402064]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2413613]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2443643]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2443752]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708v2]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2460988]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2461678]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2461678v2]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2467309]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468444]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2473228]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478063]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2484832]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2484841]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2494124]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2495758]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2497453]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2498911]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2504602]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2504603]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2505290]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2509818]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2509900]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2510798]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2514805]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2523525]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2527387]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2532942]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2534087]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2534614]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2538717]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2538927]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2540745]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2544514]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2545756]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2547783]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2548766]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2551782]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2553958]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2563373]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2564476]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2564823]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2565600]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2567467]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2569389]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2571181]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2572063]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2572078]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2576011]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2576045]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2580188]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2588096]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2592573]

[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2593745]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2599651]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600211]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2604121]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2605597]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2607656]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2618497]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2619298]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2624480]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2628838]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2629846]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2633010]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2633870]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2638450]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2639327]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2640103]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2640289]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2644426]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2645081]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2645084]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2645609]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2652319]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2652531]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656351]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656368]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656368v2]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656405]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2660677]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2669774]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2675468]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2686827]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2698021]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2702328]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2714396]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2729449]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2732797]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2733944]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2733944v2]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2736428]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2737019]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2742595]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2756195]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2783767]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2789642]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2803771]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2804576]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2828843]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2832407]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2835393]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939v2]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939v3]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2840628]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2840628v2]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2848797]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2851199]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2858302]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2858302v2]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2861188]

[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2862065]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2872041]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2872437]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2888303]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB982638]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB983182]
[{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB983571]
[{3FEAA5C5-63BE-4357-A249-F073F438295B}]
[{44D66AD9-AE19-4AFD-BE7E-A1B44C856697}]
[{459699C3-9430-4381-964B-4248D87B49F9}]
[{464B3406-A4D0-4914-910F-7CA4380DCC13}]
[{46A84694-59EC-48F0-964C-7E76E9F8A2ED}]
[{479016BF-5B8D-445F-BE15-A187F25D81C8}]
[{4A03706F-666A-4037-7777-5F2748764D10}]
[{4A63CE25-6D1A-40E5-B21A-B1A32EB8B59A}]
[{4B9E6EB0-0EED-4E74-9479-F982C3254F71}]
[{4FD1D41E-94FD-42C9-8966-055F187E7B99}]
[{4FDCAF14-93FA-4052-BBB5-E8616C48D7AC}]
[{502EE63C-9A62-4330-8F8B-1EAB51B7BB46}]
[{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}]
[{50F68032-B5B7-4513-9116-C978DBD8F27A}]
[{51C7AD07-C3F6-4635-8E8A-231306D810FE}]
[{52E225FC-FCB4-41F7-837B-6E37FB05BD7B}]
[{544ACD54-9FAA-4A60-A1E7-B2EC3AA75D24}]
[{54F84805-0116-467F-8713-899DFC472235}]
[{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}]
[{57BB52B7-6B7B-31F3-89F4-4EE8FE5CEF6D}]
[{57DD35E9-D9BB-4089-BB05-EF933C586CB3}]
[{5A03C202-08B4-3F1D-9A60-A4F53EF1B636}]
[{5C1F18D2-F6B7-4242-B803-B5A78648185D}]
[{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}]
[{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}.KB2455033]
[{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}.KB982517]
[{5E2652DF-743F-482B-A593-C95F431A5769}]
[{61AD15B2-50DB-4686-A739-14FE180D4429}]
[{623C2F4B-0C93-44D0-B216-6010AC2B82F7}]
[{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}]
[{65153EA5-8B6E-43B6-857B-C6E4FC25798A}]
[{6550E263-00D4-4916-B2C5-F254BFE848B9}]
[{65C93C70-4ED0-4D37-A179-64ABA9AE0641}]
[{6707C034-ED6B-4B6A-B21F-969B3606FBDE}]
[{682B3E4F-696A-42DE-A41C-4C07EA1678B4}]
[{6AA003BF-73E5-4911-ADB7-71DD5674DDD4}]
[{6E6E7725-C7BC-4C39-8B3F-14B67331A120}]
[{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}]
[{7299052b-02a4-4627-81f2-1818da5d550d}]
[{758C8301-2696-4855-AF45-534B1200980A}]
[{770657D0-A123-3C07-8E44-1C83EC895118}]
[{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}]
[{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}]
[{79155F2B-9895-49D7-8612-D92580E0DE5B}]
[{7D29ED63-84F9-4EC7-B49F-994A3A3195B2}]
[{80956555-A512-4190-9CAD-B000C36D6B6B}]
[{81BE0B17-563B-45D4-B198-5721E6C665CD}]
[{83C292B7-38A5-440B-A731-07070E81A64F}]
[{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}]
[{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}]
[{87131DB9-73D1-3FD7-9B25-0F12491F02A9}]
[{87D50333-E534-493A-8E98-0A49BC28F64B}]
[{8833FFB6-5B0C-4764-81AA-06DFEED9A476}]

[{88C6A6D9-324C-46E8-BA87-563D14021442}_is1]
[{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}]
[{8A9A1840-AE5C-4721-8F18-E629465A92DE}]
[{8C6D6116-B724-4810-8F2D-D047E6B7D68E}]
[{8D341F5E-7FA5-4A6A-8A6F-8DD22ABD3F71}]
[{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}]
[{8E537894-A559-4D60-B3CB-F4485E3D24E3}]
[{90120000-0012-0000-0000-0000000FF1CE}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{0C5823AA-7B6F-44E1-8D5B-8FD1FF
0E6438}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{0EF0D4FB-BB23-4515-AAEA-1240AC
2DA525}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{11C9B057-27FF-4BC1-82F6-DC4B15
E70A2E}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{293FB6BE-D3EB-4162-B522-F91080
40B9FE}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{2B3C041A-A7F2-4A24-968D-4BEB6A
123D15}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{2C57A81A-7534-4DEE-A450-7FBE86
F3200D}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{319FC809-3841-4739-A25F-FDBADF
073697}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{4CCE0378-386F-4DC2-9CC1-A3710C
77057D}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{686630EC-8033-4031-85C5-D8E5CD
62A958}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{6E107EB7-8B55-48BF-ACCB-199F86
A2CD93}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{6FAA03BD-2B51-4029-9AD9-64A3B8
E3C84C}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{79850906-6D2B-4061-8EAF-EAC841
73DEC5}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{7A0E1177-574A-4F26-AD24-B00369
9C35FA}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{81352C19-97CF-4365-8EAE-205BCC
9A2DC8}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{8907F32C-DF89-4C2F-AEDE-0DB4B6
5451C0}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{8F311D6C-D8DD-4C32-9457-1A129C
ABD1A5}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{A024FC7B-77DE-45DE-A058-1C049A
17BFB3}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{AEA16A27-0B97-4670-818F-A98D06
EC0A6F}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{B145DBBB-7778-4A5D-9D2B-DA6569
F02391}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{B7727B4D-5EA3-4C11-9D30-15E476
16DCAF}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{C444285D-5E4F-48A4-91DD-47AAAA
68E92D}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{CB68A5B0-3508-4193-AEB9-AF636D
AECE0F}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{D33B9EF5-3801-496A-A2D6-B7F4BE
972D75}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{E34960DB-2A93-45DB-A208-02650F
7AB09C}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{E949D8B9-24FD-4AB7-B427-FC42AA
8BB2D9}]
[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{E9A82945-BA29-4EE8-8F2A-2F4954
5E9CF2}]

[{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{EA575F57-C5D1-4B5A-B9F9-F16EEB
C6B58C}]
[{90120000-0016-0409-0000-0000000FF1CE}]
[{90120000-0016-0409-0000-0000000FF1CE}_STANDARD_{199DF7B6-169C-448C-B511-105410
1BE9C9}]
[{90120000-0016-0409-0000-0000000FF1CE}_STANDARD_{AAA19365-932B-49BD-8138-BE28CE
E9C4B4}]
[{90120000-0018-0409-0000-0000000FF1CE}]
[{90120000-0018-0409-0000-0000000FF1CE}_STANDARD_{397B1D4F-ED7B-4ACA-A637-43B670
843876}]
[{90120000-0018-0409-0000-0000000FF1CE}_STANDARD_{AAA19365-932B-49BD-8138-BE28CE
E9C4B4}]
[{90120000-001A-0409-0000-0000000FF1CE}]
[{90120000-001A-0409-0000-0000000FF1CE}_STANDARD_{0451F231-E3E3-4943-AB9F-58EB96
171784}]
[{90120000-001A-0409-0000-0000000FF1CE}_STANDARD_{AAA19365-932B-49BD-8138-BE28CE
E9C4B4}]
[{90120000-001A-0409-0000-0000000FF1CE}_STANDARD_{ED38F8A3-4F61-494E-8BCA-E3AC77
60C924}]
[{90120000-001B-0409-0000-0000000FF1CE}]
[{90120000-001B-0409-0000-0000000FF1CE}_STANDARD_{80E762AA-C921-4839-9D7D-DB62A7
2C0726}]
[{90120000-001B-0409-0000-0000000FF1CE}_STANDARD_{AAA19365-932B-49BD-8138-BE28CE
E9C4B4}]
[{90120000-001F-0409-0000-0000000FF1CE}]
[{90120000-001F-0409-0000-0000000FF1CE}_STANDARD_{1FF96026-A04A-4C3E-B50A-BB7022
654D0F}]
[{90120000-001F-040C-0000-0000000FF1CE}]
[{90120000-001F-040C-0000-0000000FF1CE}_STANDARD_{71F055E8-E2C6-4214-BB3D-BFE035
61B89E}]
[{90120000-001F-0C0A-0000-0000000FF1CE}]
[{90120000-001F-0C0A-0000-0000000FF1CE}_STANDARD_{2314F9A1-126F-45CC-8A5E-DFAF86
6F3FBC}]
[{90120000-002C-0409-0000-0000000FF1CE}]
[{90120000-0051-0000-0000-0000000FF1CE}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{293FB6BE-D3EB-4162-B522-F9108040
B9FE}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{6FAA03BD-2B51-4029-9AD9-64A3B8E3
C84C}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{79850906-6D2B-4061-8EAF-EAC84173
DEC5}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{8907F32C-DF89-4C2F-AEDE-0DB4B654
51C0}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{A024FC7B-77DE-45DE-A058-1C049A17
BFB3}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{B145DBBB-7778-4A5D-9D2B-DA6569F0
2391}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{B7727B4D-5EA3-4C11-9D30-15E47616
DCAF}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{BF5FA496-2BB3-4B97-BE5B-3A2AF71E
9DC2}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{C444285D-5E4F-48A4-91DD-47AAAA68
E92D}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{CB68A5B0-3508-4193-AEB9-AF636DAE
CE0F}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{CE144BF4-4950-4CDB-A5F7-CCE1888F
49CB}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{D33B9EF5-3801-496A-A2D6-B7F4BE97
2D75}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{E34960DB-2A93-45DB-A208-02650F7A

B09C}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{E949D8B9-24FD-4AB7-B427-FC42AA8B
B2D9}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{E9A82945-BA29-4EE8-8F2A-2F49545E
9CF2}]
[{90120000-0051-0000-0000-0000000FF1CE}_VISPRO_{EA575F57-C5D1-4B5A-B9F9-F16EEBC6
B58C}]
[{90120000-0054-0409-0000-0000000FF1CE}]
[{90120000-0054-0409-0000-0000000FF1CE}_VISPRO_{7DA87C7E-E8A7-473E-ADFF-1B6BECCC
ADA7}]
[{90120000-0054-0409-0000-0000000FF1CE}_VISPRO_{D2C4ACC9-12F5-4E1C-81A8-5DC878AC
6278}]
[{90120000-006E-0409-0000-0000000FF1CE}]
[{90120000-006E-0409-0000-0000000FF1CE}_STANDARD_{98333358-268C-4164-B6D4-C96DF5
153727}]
[{90120000-006E-0409-0000-0000000FF1CE}_STANDARD_{AB365889-0395-4FAD-B702-CA5985
D53D42}]
[{90120000-006E-0409-0000-0000000FF1CE}_STANDARD_{CD11C6A2-FFC6-4271-8EAB-79C358
2F505C}]
[{90120000-0115-0409-0000-0000000FF1CE}]
[{90120000-0115-0409-0000-0000000FF1CE}_STANDARD_{98333358-268C-4164-B6D4-C96DF5
153727}]
[{90140000-2005-0000-0000-0000000FF1CE}]
[{9169C939-ED01-446A-BD0C-29873BAF4E48}]
[{91A29166-4E1B-4664-B70B-4C4A3B6B3372}]
[{91D5025C-139A-4977-82FD-9E2A8A32269A}]
[{92EA4134-10D1-418A-91E1-5A0453131A38}]
[{942E5031-2BD6-4C1B-918C-C8A1CBAE7B8C}]
[{95120000-00B9-0409-0000-0000000FF1CE}]
[{9A25302D-30C0-39D9-BD6F-21E6EC160475}]
[{9B646DA5-D671-4767-96D0-70808544E5DE}]
[{9BE518E6-ECC6-35A9-88E4-87755C07200F}]
[{9CCE40CE-A9E6-4916-8729-B008558EEF3F}]
[{9D318C86-AF4C-409F-A6AC-7183FF4CF424}]
[{9D3D2C60-A55F-4fed-B2B9-17311226DF01}]
[{9D56775A-93F3-44A3-8092-840E3826DE30}]
[{9DE3F260-B88E-42CE-90E7-73C78C37D95E}]
[{A0C91188-C88F-4E86-93E6-CD7C9A266649}]
[{A22D6300-7C1D-4AB2-8BE9-8BB66A0C3736}]
[{A3BE3F1E-2472-4211-8735-E8239BE49D9F}]
[{A47A9101-6EB5-4314-BDA1-297880FBB908}]
[{A638557B-1F13-40A0-9627-C892FBCA6960}]
[{A726AE06-AAA3-43D1-87E3-70F510314F04}]
[{A7BB9BBD-DFE4-4276-820A-7CD141FC09E6}]
[{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}]
[{A9CA25A2-4171-4289-B9D3-78A012A3A340}]
[{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}]
[{AAF454FC-82CA-4F29-AB31-6A109485E76E}]
[{AC76BA86-1033-0000-BA7E-000000000003}]
[{AC76BA86-7AD7-1033-7B44-AB0000000001}]
[{AD15759F-488D-442C-A8B4-C4FEEACFA939}]
[{AF08C71F-F822-4416-87A9-2BBF5A8A5F12}]
[{AF844339-2F8A-4593-81B3-9F4C54038C4E}]
[{B0261E53-B6F1-474A-864B-E7C3CBF468E0}]
[{B2CA6F37-1602-4823-81B5-0384B6888AA6}]
[{BB8AE808-F003-4C7F-B56B-8C80EEAFFE23}]
[{C11DA8F8-1733-453E-9083-2AE2454024CD}]
[{C1594429-8296-4652-BF54-9DBE4932A44C}]
[{C22613C2-C7A4-4761-A906-116ECD4E7477}]
[{C3A11907-930D-41AC-A135-CC3B12F92011}]

[{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}]
[{C66824E4-CBB3-4851-BB3F-E8CFD6350923}]
[{C6C9D5F7-630C-4125-8C4E-94AF77C1896E}]
[{CAFECAFE-0013-0001-0122-ABCDEFABCDEF}]
[{CB1177DD-0316-4C93-A5AE-BBF1E2B7F07E}]
[{CCE825DB-347A-4004-A186-5F4A6FDD8547}]
[{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}]
[{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}]
[{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}]
[{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}]
[{D0F44C37-A22B-4733-BBA7-86C9F4988725}]
[{D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5}]
[{D2F28E39-9813-41D3-8EC9-BAADA38C426D}]
[{D36B5D0D-0AB3-4B77-BAB5-538FE72227F9}]
[{D436F577-1695-4D2F-8B44-AC76C99E0002}]
[{D441BD04-E548-4F8E-97A4-1B66135BAAA8}]
[{D45240D3-B6B3-4FF9-B243-54ECE3E10066}]
[{D64B6984-242F-32BC-B008-752806E5FC44}]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2106584]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2116602]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2123002]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2151757]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2201993]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2251084]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2251489]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2268081]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2275326]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2277993]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2293053]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2345133]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2385361]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2444922]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2450801]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2465236]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2483190]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2522140]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2522841]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2535320]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2547352]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2548139]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2549864]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2560935]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2581019]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2591016]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2635973]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2642376]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2645410]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2650605]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB2652302]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB888802]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB888803]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB982218]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB982218v2]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB982218v3]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB982218v4]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB983505]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB983571]
[{D64B6984-242F-32BC-B008-752806E5FC44}.KB983571v2]
[{D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}]
[{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}]

[{DC487E40-046E-42A9-9C7C-5D2B1A7EB211}]
[{DDB824DA-C431-3A3E-B997-F4B5539838FC}]
[{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}]
[{DECDCB7C-58CC-4865-91AF-627F9798FE48}]
[{E09C4DB7-630C-4F06-A631-8EA7239923AF}]
[{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}]
[{E224B44B-B5EB-4af3-A80A-A255358E241A}_is1]
[{E2D09AC2-4153-4817-AAEB-24F92A8BCE88}]
[{E7654811-38F9-4225-9688-827FDA716582}]
[{EB4DF488-AAEF-406F-A341-CB2AAA315B90}]
[{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}]
[{F0BC0F9E-C4A8-485C-93ED-424DB9EA3F75}]
[{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}]
[{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757]
[{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173]
[{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860]
[{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655]
[{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743]
[{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063]
[{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573]
[{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}]
[{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}]
[{F2004B8D-7791-4B35-A3FA-D8CA8BB4DD81}]
[{F3BBC56F-2282-4464-952F-A89772181F30}]
[{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}]
[{F8A9085D-4C7A-41a9-8A77-C8998A96C421}]
[{FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}]
[{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}]
[{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}]
[{FEC535DD-0EB2-4709-87BD-1708C6364EB6}]

===============================================================================
PROGRAMS THAT RUN DURING START UP
===============================================================================
Following is a list of Programs that run during startup
@VABEG:WIN:REGQUERYRUN@
Listing of [Software\Microsoft\Windows\CurrentVersion\Run]
REG_SZ
RotateImage
C:\Program Files\Integrated Camera Driver\RCIMGD
IR.exe
REG_SZ
REG_SZ
TpShocks
TpShocks.exe
REG_SZ
RTHDVCPL
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
-s
REG_SZ
PWMTRV rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrM
grBkGndMonitor
REG_SZ
LENOVO.TPKNRRES C:\Program Files\Lenovo\Communications Utility\T
PKNRRES.exe
REG_SZ
ALCKRESI.EXE
C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE
REG_SZ
Lenovo Registration
C:\Program Files\Lenovo Registration\Len
ovoReg.exe /boot
REG_SZ
APSDaemon
"C:\Program Files\Common Files\Apple\Apple Appli
cation Support\APSDaemon.exe"
REG_SZ
Acrobat Assistant 8.0 "C:\Program Files\Adobe\Acrobat 8.0\Acro
bat\Acrotray.exe"

REG_SZ
IntelliPoint
"c:\Program Files\Microsoft IntelliPoint\ipoint.
exe"
REG_SZ
IgfxTray
C:\Windows\system32\igfxtray.exe
REG_SZ
HotKeysCmds
C:\Windows\system32\hkcmd.exe
REG_SZ
Persistence
C:\Windows\system32\igfxpers.exe
REG_SZ
AcWin7Hlpr
C:\Program Files\Lenovo\Access Connections\AcTBe
nabler.exe
REG_SZ
Ad-Aware Browsing Protection
"C:\ProgramData\Ad-Aware Browsin
g Protection\adawarebp.exe"
REG_SZ
Ad-Aware Antivirus
"C:\Program Files\Ad-Aware Antivirus\AdA
wareLauncher" --windows-run
REG_SZ
Communicator
"C:\Program Files\Microsoft Lync\communicator.ex
e" /fromrunkey
REG_SZ
Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\Ado
beARM.exe"
REG_SZ
McAfeeUpdaterUI "C:\Program Files\McAfee\Common Framework\udater
ui.exe" /StartedFromRunKey
REG_SZ
ShStatEXE
"C:\Program Files\McAfee\VirusScan Enterprise\SH
STAT.EXE" /STANDALONE
REG_SZ
SunJavaUpdateSched
"C:\Program Files\Common Files\Java\Java
Update\jusched.exe"

=============================================================
ACCOUNT AND AUDIT POLICY
=============================================================
@VABEG:WIN:DUMPSEC1@
18-Oct-13 10:03 AM - Somarsoft DumpSec (formerly DumpAcl) - \\VISHWASSK (local)
Policies
Account Policies
Min password len: 8 chars
Max password age: none
Min password age: 0 days
Password history: 0 passwords
Do not force logoff when logon hours expire
No account lockout
==>Not authorized to view remaining policy information
Replication
==>rc=1060 OpenService
System Path Components (in search order)
C:\Program Files\Seclore\FileSecure\Desktop Client
D:\oracleexe\app\oracle\product\10.2.0\server\bin

C:\Program Files\Common Files\Microsoft Shared\Windows Live

C:\Windows\system32
C:\Windows
C:\Windows\System32\Wbem
C:\Windows\System32\WindowsPowerShell\v1.0\
C:\Program Files\ThinkPad\Bluetooth Software\
C:\Program Files\Broadcom\WHL\
C:\Oraclient
C:\Program Files\Common Files\Lenovo
C:\Program Files\Common Files\Ulead Systems\MPEG
C:\Program Files\Windows Live\Shared
C:\SWTOOLS\ReadyApps
C:\Program Files\Lenovo\Access Connections\
D:\AuditInstall\snmpwalk\bin
D:\AuditInstall\SQL2012\110\Tools\Binn\
D:\AuditInstall\SQL2012\110\DTS\Binn\
D:\AuditInstall\SQL2012\110\Tools\Binn\ManagementStudio\
C:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters (se
e KB Q122702)
RestrictNullSessAccess=True
NullSessionShares
NullSessionPipes
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers (see KB Q1
55363)
==>rc=5 RegOpenKeyEx 2
@VAEND:WIN:DUMPSEC1@
============================================================
SERVICES SETTINGS
============================================================
@VABEG:WIN:NETSTART@
These Windows services are started:
AcPrfMgrSvc

AcSvc
Ad-Aware
Ad-Aware Service
Adobe Acrobat Update Service
Apple Mobile Device
Application Experience
Application Information
Background Intelligent Transfer Service
Base Filtering Engine
Bluetooth Service
Bonjour Service
CNG Key Isolation
COM+ Event System
Credential Manager
Cryptographic Services
DCOM Server Process Launcher
Desktop Window Manager Session Manager
DHCP Client
Diagnostic Policy Service
Diagnostic Service Host
Distributed Link Tracking Client
DNS Client
Encrypting File System (EFS)
Extensible Authentication Protocol
FLEXnet Licensing Service
FsUsbExService
Group Policy Client
IKE and AuthIP IPsec Keying Modules
Indexing Service
Intel(R) Management and Security Application Local Management Service
Intel(R) Management and Security Application User Notification Service
IP Helper
Lenovo Auto Scroll
Lenovo Camera Mute
Lenovo Doze Mode Service
Lenovo Hotkey Client Loader
Lenovo Keyboard Noise Reduction
Lenovo Microphone Mute
Lenovo PM Service
McAfee Engine Service
McAfee Framework Service
McAfee McShield
McAfee Task Manager
McAfee Validation Trust Protection Service
Microsoft Forefront UAG Quarantine Enforcement Client
Multimedia Class Scheduler
Network Access Protection Agent
Network Connections
Network List Service
Network Location Awareness
Network Store Interface Service
Offline Files
On Screen Display
Plug and Play
Power
Power Manager DBC Service
Print Spooler
Program Compatibility Assistant Service
Protected Storage
Protexis Licensing V2

RealNetworks Downloader Resolver Service

Realtek Audio Service
Remote Access Auto Connection Manager
Remote Access Connection Manager
Remote Procedure Call (RPC)
RPC Endpoint Mapper
Screen Reading Optimizer Service Program
Seagate Dashboard Service
Secure Socket Tunneling Protocol Service
Security Accounts Manager
Security Center
Shell Hardware Detection
SQL Full-text Filter Daemon Launcher (SQLEXPRESS)
SQL Server (SQLEXPRESS)
SQL Server VSS Writer
SSDP Discovery
Superfetch
System Event Notification Service
Task Scheduler
TCP/IP NetBIOS Helper
Telephony
Themes
Ulead Burning Helper
UPnP Device Host
User Profile Service
VMware Authorization Service
VMware DHCP Service
VMware Host Agent
VMware NAT Service
VMware Server Web Access
WatchGuard SSLVPN Service
WebClient
Windows Audio
Windows Audio Endpoint Builder
Windows Driver Foundation - User-mode Driver Framework
Windows Event Log
Windows Firewall
Windows Font Cache Service
Windows Image Acquisition (WIA)
Windows Live ID Sign-in Assistant
Windows Management Instrumentation
Windows Media Player Network Sharing Service
Windows Presentation Foundation Font Cache 3.0.0.0
Windows Search
Windows Update
WLAN AutoConfig
Workstation
WWAN AutoConfig
The command completed successfully.

==================================================
SHARES
==================================================
@VABEG:WIN:DUMPSEC2@

==============================================================
PROCESS RUNNING
==============================================================
@VABEG:WIN:PSLIST@
PsList v1.12 - Process Information Lister
Copyright (C) 1999-2000 Mark Russinovich
Systems Internals - http://www.sysinternals.com
Process information for VISHWASSK:
Name
Idle
SYSTEM
smss
csrss
wininit
csrss
services
lsass
lsm
winlogon
svchost
ibmpmsvc
svchost
svchost
svchost
svchost
svchost
svchost
RtkAudioSer
RtHDVBg
WUDFHost
svchost
svchost
spoolsv
upeksvr
TPHKSVC
tphkload
AcPrfMgrSvc
AcSvc
AdAwareServ
WmiPrvSE
armsvc
AppleMobile
mDNSRespond
btwdins
CISVC
FsUsbExServ
CamMute
micmute
TPKNRSVC
lvvsst
EngineServe
FrameworkSe
VsTskMgr
mfevtps

Pid
0
4
420
600
656
664
712
728
736
816
880
968
1024
1116
1156
1196
1288
1340
1424
1492
1500
1588
1872
2020
128
1728
2124
2168
2216
2268
2312
2436
2464
2528
2564
2616
2660
2704
2772
2792
2828
2856
2888
2996
3028

Pri
0
8
11
13
13
13
9
9
8
13
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8

Thd
4
143
2
9
3
13
16
10
12
3
13
7
15
22
25
55
6
21
4
7
9
34
25
25
17
6
5
6
17
5
10
4
14
8
6
10
4
4
7
4
5
5
12
18
5

Hnd
0
2859
33
1268
79
856
428
1170
230
116
429
71
546
638
725
1715
133
485
100
187
203
739
421
516
289
199
177
152
344
127
498
67
253
173
117
190
78
99
213
55
170
85
192
156
180

Mem
24
1420
640
3580
2796
48476
15312
30528
3140
14108
18296
2520
29656
42692
107472
55360
12384
38628
3292
6452
4672
42076
36424
35412
13160
4368
4052
6432
10380
5568
14856
2344
6184
5584
4248
648
2604
3504
4684
2120
3672
13196
3564
616
3328

User Time
0:00:00.000
0:00:00.000
0:00:00.000
0:00:00.312
0:00:00.000
0:00:01.263
0:00:01.700
0:00:13.416
0:00:00.093
0:00:00.093
0:00:10.561
0:00:00.015
0:00:06.146
0:00:08.533
0:00:58.781
0:00:17.347
0:00:00.046
0:00:01.622
0:00:00.031
0:00:00.031
0:00:12.963
0:00:03.962
0:00:03.120
0:00:00.733
0:00:00.202
0:00:00.109
0:00:00.062
0:00:00.000
0:00:01.123
0:00:00.046
0:01:15.676
0:00:00.015
0:00:01.014
0:00:02.683
0:00:00.062
0:00:00.171
0:00:00.000
0:00:00.015
0:00:00.062
0:00:00.000
0:00:00.046
0:00:22.807
0:00:00.343
0:00:19.110
0:00:00.296

Kernel Time
5:30:35.761
0:02:10.385
0:00:00.062
0:00:01.513
0:00:00.093
0:00:15.366
0:00:04.071
0:00:15.490
0:00:00.156
0:00:00.249
0:00:26.582
0:00:00.015
0:00:03.978
0:00:08.424
0:00:14.960
0:00:21.153
0:00:00.109
0:00:02.574
0:00:00.000
0:00:00.109
0:00:01.825
0:00:14.367
0:00:02.230
0:00:00.998
0:00:00.358
0:00:00.078
0:00:00.015
0:00:00.156
0:00:01.497
0:00:00.031
0:00:30.357
0:00:00.000
0:00:00.748
0:00:10.264
0:00:00.093
0:00:00.733
0:00:00.000
0:00:00.062
0:00:00.062
0:00:00.000
0:00:00.093
0:00:00.624
0:00:01.170
0:00:00.577
0:00:00.998

Elapsed Time
0:00:00.000
1:46:19.739
1:46:19.505
1:46:12.969
1:46:10.301
1:46:10.301
1:46:10.207
1:46:10.161
1:46:10.161
1:46:09.817
1:46:09.521
1:46:09.240
1:46:09.178
1:46:09.053
1:46:09.022
1:46:09.006
1:46:08.897
1:46:08.881
1:46:08.491
1:46:08.148
1:46:07.805
1:46:07.025
1:46:05.551
1:46:04.991
1:46:04.521
1:46:03.819
1:46:03.749
1:46:03.649
1:46:03.569
1:46:03.519
1:46:02.879
1:46:02.089
1:46:02.079
1:46:01.999
1:46:01.989
1:46:01.929
1:46:01.889
1:46:01.859
1:46:01.769
1:46:01.749
1:46:01.739
1:46:01.719
1:46:01.599
1:45:59.713
1:45:59.697

naPrdMgr
sqlservr
PsiService_
rndlresolve
SeagateDash
dwm
explorer
sqlwriter
svchost
uagqecsvc
ULCDRSvr
vmware-auth
vmnat
tomcat6
conhost
wgsslvpnsrc
WLIDSVC
Mcshield
vmnetdhcp
WLIDSVCM
mfeann
conhost
vmware-host
taskhost
tpnumlk
TPOSDSVC
shtctky
TPONSCR
WmiPrvSE
igfxext
RCIMGDIR
TpShocks
RtHDVCpl
rundll32
TpKnrres
virtscrl
ALCKRESI
TPOSDSVC
taskeng
tpnumlkd
acrotray
SynTPEnh
ipoint
TpScrex
hkcmd
igfxpers
adawarebp
communicato
UdaterUI
shstat
jusched
googletalk
AdAware
wweb32
BTTray
SRORest
unsecapp
SCHTASK
FMAPP
dpupdchk

3180
3192
3536
3564
3592
3768
3800
3892
3912
3948
3984
4040
4092
1936
2488
2360
2508
1792
2404
3060
3264
3284
3248
3296
4108
4148
4176
4208
4276
4312
4428
4448
4472
4492
4512
4528
4540
4632
4696
4708
4768
4852
5036
5116
5208
5236
5292
5356
5376
5420
5468
5536
5560
5616
5636
5776
5800
5960
5284
620

8
8
8
8
8
13
8
8
8
8
8
8
8
8
8
8
8
13
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
13
8
10
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8

5
53
4
4
7
5
50
4
6
9
3
11
9
24
2
5
13
50
3
4
8
1
15
11
4
5
4
7
10
4
1
4
11
11
2
2
5
5
7
6
4
12
9
4
3
5
11
36
7
10
3
26
18
2
5
5
3
3
1
1

79
529
58
61
162
127
1486
80
113
120
31
294
126
563
30
69
401
430
43
59
168
30
584
321
173
159
176
185
613
75
48
79
251
400
40
69
80
154
122
175
179
549
247
182
84
152
274
1106
116
114
131
563
347
69
123
133
70
88
20
48

1760
17220
2124
2300
3592
49816
164376
3732
14360
4060
1328
6576
3796
25936
2088
2368
8344
62912
2604
1808
6916
1904
16800
17496
4736
5932
4520
5064
18128
3728
3096
3020
6072
32580
2764
3352
5916
5992
4148
4108
6632
2904
9748
4184
3956
6108
11284
24484
1872
1092
5196
23796
18624
4372
5836
532
3976
4564
1940
2684

0:00:00.234
0:01:22.945
0:00:00.000
0:00:00.000
0:00:00.140
0:01:06.815
0:03:57.293
0:00:00.031
0:00:00.015
0:00:02.886
0:00:00.000
0:00:07.909
0:00:00.046
0:00:01.497
0:00:00.015
0:00:00.000
0:00:00.031
0:06:33.684
0:00:00.031
0:00:00.000
0:00:00.483
0:00:00.000
0:00:11.871
0:00:03.900
0:00:00.015
0:00:00.078
0:00:00.031
0:00:00.046
0:00:19.702
0:00:00.015
0:00:00.000
0:00:00.015
0:00:00.046
0:00:00.936
0:00:00.015
0:00:01.653
0:00:00.655
0:00:00.140
0:00:00.031
0:00:00.109
0:00:00.436
0:00:22.432
0:00:04.914
0:00:00.124
0:00:00.031
0:00:00.078
0:00:02.137
0:00:07.363
0:00:00.436
0:00:00.124
0:00:00.031
0:00:01.591
0:00:05.803
0:00:00.296
0:00:00.187
0:00:00.031
0:00:00.015
0:00:00.015
0:00:00.015
0:00:00.000

0:00:00.031
0:00:55.910
0:00:00.000
0:00:00.000
0:00:00.140
0:00:18.267
0:05:27.586
0:00:00.015
0:00:00.046
0:01:11.464
0:00:00.000
0:01:20.714
0:00:00.000
0:00:02.449
0:00:00.031
0:00:00.031
0:00:00.171
0:03:48.213
0:00:00.202
0:00:00.000
0:00:03.728
0:00:00.000
0:00:05.382
0:00:05.990
0:00:00.078
0:00:00.062
0:00:00.031
0:00:00.421
0:00:15.147
0:00:00.015
0:00:00.015
0:00:00.031
0:00:00.171
0:00:07.472
0:00:00.358
0:00:04.196
0:00:02.870
0:00:00.062
0:00:00.078
0:00:00.249
0:00:00.374
0:00:38.126
0:00:10.920
0:00:00.156
0:00:00.093
0:00:00.109
0:00:06.692
0:00:04.836
0:00:00.140
0:00:00.156
0:00:00.171
0:00:04.867
0:00:08.018
0:00:00.982
0:00:00.639
0:00:00.187
0:00:00.031
0:00:00.078
0:00:00.234
0:00:00.015

1:45:58.667
1:45:58.621
1:45:53.395
1:45:53.379
1:45:53.379
1:45:46.047
1:45:45.626
1:45:43.473
1:45:43.442
1:45:43.379
1:45:43.348
1:45:43.255
1:45:42.397
1:45:42.287
1:45:42.225
1:45:42.225
1:45:42.194
1:45:42.163
1:45:42.147
1:45:41.851
1:45:40.197
1:45:40.181
1:45:40.150
1:45:37.795
1:45:33.520
1:45:33.442
1:45:33.411
1:45:33.317
1:45:33.146
1:45:32.787
1:45:31.820
1:45:31.789
1:45:31.711
1:45:31.679
1:45:31.617
1:45:31.586
1:45:31.586
1:45:31.430
1:45:31.367
1:45:31.321
1:45:31.258
1:45:30.962
1:45:29.776
1:45:29.074
1:45:28.279
1:45:28.076
1:45:27.561
1:45:26.828
1:45:26.781
1:45:26.656
1:45:26.576
1:45:26.269
1:45:26.089
1:45:25.489
1:45:24.979
1:45:21.442
1:45:21.411
1:45:19.492
1:45:17.417
1:45:16.965

SvcGuiHlpr
McTray
SynTPLpr
SearchIndex
SBAMSvc
SynTPHelper
fdlauncher
FNPLicensin
fdhost
conhost
DOZESVC
OUTLOOK
svchost
Presentatio
LMS
SROSVC
unsecapp
UNS
MCPLaunch
CIDAEMON
PWMDBSVC
audiodg
iexplore
iexplore
FlashUtil32
wmpnetwk
recordingma
SearchProto
SearchFilte
cmd
conhost
WmiPrvSE
notepad
pslist
dllhost

5856
5844
5836
7068
7184
7252
7368
7412
7760
7800
6220
2980
7632
4948
1724
7144
5164
4224
8108
1904
7676
6328
8512
4508
8720
10164
11228
3380
11172
492
12232
8756
12052
9992
11884

8
8
8
8
8
10
8
8
8
8
8
8
8
8
8
8
8
8
4
4
8
8
8
8
8
8
8

3 135 4412
1 44 3044
1 40
452
14 1142 52764
26 476 3796
1 19
516
3 74 2860
6 53 2280
9 134 2848
1 30 1888
7 48 1640
33 2710 105568
21 237 7192
6 150 5612
4 101 3576
7 93 4156
5 75 3540
14 156 4256
1 44
532
2 58
280
4 111 5432
6 147 19200
18 604 30736
40 1274 285220
4 137 7836
20 473 9668
5 118 7952
8 320 7188
6 112 5016
1 26 2880
2 58 5268
8 115 4816
1 61 6992
1 140 4392
7 93 4588

4
4
8
8
8
8
8
8

0:00:00.015
0:00:00.015
0:00:00.000
0:00:42.510
0:00:11.044
0:00:00.000
0:00:00.031
0:00:00.327
0:00:00.031
0:00:00.000
0:00:00.000
0:00:07.753
0:00:00.468
0:00:00.078
0:00:01.388
0:00:00.156
0:00:00.062
0:00:00.093
0:00:00.000
0:00:00.000
0:00:00.000
0:00:27.674
0:00:02.620
0:00:50.481
0:00:00.093
0:00:00.483
0:00:00.046
0:00:00.140
0:00:00.031
0:00:00.124
0:00:00.093
0:00:00.031
0:00:00.046
0:00:00.031
0:00:00.000

0:00:00.109
0:00:00.062
0:00:00.046
0:01:46.548
0:00:21.262
0:00:00.015
0:00:00.046
0:00:00.093
0:00:00.015
0:00:00.015
0:00:00.000
0:00:07.893
0:00:01.045
0:00:00.171
0:00:04.726
0:00:00.343
0:00:00.109
0:00:00.202
0:00:00.031
0:00:00.015
0:00:00.046
0:00:01.794
0:00:06.442
0:00:27.627
0:00:00.499
0:00:00.748
0:00:00.062
0:00:00.171
0:00:00.046
0:00:00.811
0:00:00.187
0:00:00.062
0:00:00.156
0:00:00.468
0:00:00.031

==============================================================
LIST OF OPEN PORTS
==============================================================
@VABEG:WIN:NETSTAT@
Active Connections
Proto
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP

Local Address
0.0.0.0:135
0.0.0.0:554
0.0.0.0:902
0.0.0.0:912
0.0.0.0:1025
0.0.0.0:1026
0.0.0.0:1027
0.0.0.0:1029
0.0.0.0:1072
0.0.0.0:2869
0.0.0.0:8009
0.0.0.0:8222

Foreign Address
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0

State
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING

1:45:08.057
1:45:07.043
1:45:05.966
1:44:21.646
1:44:18.963
1:44:16.950
1:44:12.504
1:44:11.646
1:44:09.915
1:44:08.604
1:42:58.092
1:42:56.298
1:42:20.275
1:42:20.075
1:42:04.035
1:42:00.099
1:41:59.996
1:40:29.199
1:40:28.134
1:38:17.240
0:27:06.610
0:27:03.860
0:26:13.246
0:26:13.056
0:25:47.669
0:20:55.677
0:14:39.337
0:01:02.605
0:01:02.578
0:00:44.652
0:00:44.564
0:00:42.999
0:00:33.584
0:00:01.014
0:00:00.856

TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
TCP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP
UDP

0.0.0.0:8308
0.0.0.0:8333
0.0.0.0:10243
10.225.14.30:139
10.225.14.30:5383
10.225.14.30:5740
127.0.0.1:1028
127.0.0.1:5354
127.0.0.1:5354
127.0.0.1:8005
127.0.0.1:8307
127.0.0.1:27015
192.168.56.1:139
192.168.91.1:139
[::]:135
[::]:554
[::]:1025
[::]:1026
[::]:1027
[::]:1029
[::]:1072
[::]:2869
[::]:8009
[::]:8308
[::]:10243
0.0.0.0:68
0.0.0.0:68
0.0.0.0:500
0.0.0.0:4500
0.0.0.0:5004
0.0.0.0:5005
0.0.0.0:5355
0.0.0.0:60257
0.0.0.0:60297
0.0.0.0:63696
10.225.14.30:137
10.225.14.30:138
10.225.14.30:1900
10.225.14.30:5353
127.0.0.1:1900
127.0.0.1:55255
127.0.0.1:57463
127.0.0.1:60120
127.0.0.1:60249
127.0.0.1:63694
127.0.0.1:63695
127.0.0.1:64455
192.168.56.1:137
192.168.56.1:138
192.168.56.1:1900
192.168.56.1:5353
192.168.91.1:137
192.168.91.1:138
192.168.91.1:1900
192.168.91.1:5353
[::]:500
[::]:4500
[::]:5004
[::]:5005
[::]:5355

0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
24.156.140.74:80
172.16.44.207:139
127.0.0.1:5354
0.0.0.0:0
127.0.0.1:1028
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
0.0.0.0:0
[::]:0
[::]:0
[::]:0
[::]:0
[::]:0
[::]:0
[::]:0
[::]:0
[::]:0
[::]:0
[::]:0
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*
*:*

LISTENING
LISTENING
LISTENING
LISTENING
ESTABLISHED
SYN_SENT
ESTABLISHED
LISTENING
ESTABLISHED
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING
LISTENING

UDP
UDP
UDP
UDP
UDP
UDP

[::]:63697
*:*
[::1]:1900
*:*
[::1]:5353
*:*
[::1]:57462
*:*
[fe80::958c:9734:b163:40b5%18]:1900 *:*
[fe80::ed13:b48f:8fb3:7f31%17]:1900 *:*

======================================================================
OPEN PORTS TO APPLICATION MAPPINGS
======================================================================
@VABEG:WIN:FPORT@
FPort v1.33 - TCP/IP Process to Port Mapper
Copyright 2000 by Foundstone, Inc.
http://www.foundstone.com
You must have administrator privileges to run fport - exiting...

=============================================================
USER INFORMATION
=============================================================
18-Oct-13 10:03 AM - Somarsoft DumpSec (formerly DumpAcl) - \\VISHWASSK (local)
UserName
FullName
AccountType Comment
HomeDrive HomeDir Profile LogonScript Workstations PswdCanB
eChanged PswdLastSetTime
PswdRequired PswdExpires PswdExpiresTime AcctDisable
d AcctLockedOut AcctExpiresTime LastLogonTime
LastLogonServer LogonHours Ra
sDialin RasCallback RasCallbackNumber
__vmware_user__ __vmware_user__ User

VMware User
Yes

No

18-Oct-13 8:17 AM Yes

Yes
Never
Never
18-Oct-13 8:17 AM VISHWASSK

No
All

Administrator
User
Built-in account for administering t
he computer/domain
Yes
28-Nov-11 10:32 AM Yes
No
Never
Yes
No
Never
28-Nov-11 10:32 AM VISHWASSK
All
Guest
the computer/domain
Never
No
Never
test1

test1

User
No
Never

Built-in account for guest access to

No
No
?Unknown
Yes
VISHWASSK
All

User
Yes

No

06-Sep-13 4:25 AM Yes

Yes
Never
Never
21-Sep-13 8:56 AM VISHWASSK

VishAdmin

VishAdmin

No
All

User
Yes

No

08-Dec-11 7:37 PM No
No
Never
Never
18-Oct-13 10:00 AM VISHWASSK

No
All

Vishwas

Vishwas S K

User
Yes

No

21-Dec-12 7:56 PM Yes

Yes
Never
Never
18-Oct-13 9:36 AM VISHWASSK

No
All

@VAEND:WIN:DUMPSECUSER@
===============================================================
GROUP INFORMATION
===============================================================
18-Oct-13 10:03 AM - Somarsoft DumpSec (formerly DumpAcl) - \\VISHWASSK (local)
Group
Comment
GroupType GroupMember
MemberType
__vmware__

VMware User Group

Local

__ User
Administrators
ted access to the computer/domain

Administrators have complete and unrestric

Local

User
Administrators
ted access to the computer/domain

VISHWASSK\__vmware_user

VISHWASSK\Administrator

Administrators have complete and unrestric

Local
VISHWASSK\VishAdmin
User
Backup Operators
Backup Operators can override security res
trictions for the sole purpose of backing up or restoring files
Local
Cryptographic Operators
aphic operations.

Members are authorized to perform cryptogr

Local

Distributed COM Users

Members are allowed to launch, activate an
d use Distributed COM objects on this machine.
Local
Event Log Readers
from local machine

Members of this group can read event logs

Local

Guests
Guests have the same access as members of
the Users group by default, except for the Guest account which is further restri
cted
Local
VISHWASSK\Guest
User
HelpLibraryUpdaters
Local
User
IIS_IUSRS
n Services.

VISHWASSK\Vishwas

Built-in group used by Internet Informatio

Local

Network Configuration Operators

Members in this group can have some admini

strative privileges to manage configuration of networking features

Local
ORA_DBA

Oracle DBA Group

Local
VISHWASSK\VishAdmin
User
Performance Log Users
Members of this group may schedule logging
of performance counters, enable trace providers, and collect event traces both
locally and via remote access to this computer Local
Performance Monitor Users
Members of this group can access performan
ce counter data locally and remotely
Local
Power Users
Power Users are included for backwards com
patibility and possess limited administrative powers
Local
Remote Desktop Users
t to logon remotely

Members in this group are granted the righ

Local

Replicator

Supports file replication in a domain

Local

SQLServer2005SQLBrowserUser$VISHWASSK Members in the group have the required acc

ess and privileges to be assigned as the log on account for the associated insta
nce of SQL Server Browser.
Local
Users
Users are prevented from making accidental
or intentional system-wide changes and can run most applications
Local
VISHWASSK\test1
User
Users
Users are prevented from making accidental
or intentional system-wide changes and can run most applications
Local
VISHWASSK\Vishwas
User
@VAEND:WIN:DUMPSECGROUP@
=============================================================
USER RIGHTS
=============================================================
18-Oct-13 10:03 AM - Somarsoft DumpSec (formerly DumpAcl) - \\VISHWASSK (local)
User Right
Account Description
==>Not authorized to view remaining policy information
@VAEND:WIN:DUMPSEC2@
===============================================================
EVENT LOG SETTINGS
===============================================================
Application Event Log Maxsize

----------------------------The following registry string shows the Max Size of Application Event Log
REG_DWORD

MaxSize 20971520

Security Event Log Max Size

--------------------------The following registry string shows the Max Size of Security Event Log
Access is denied.

System Event Log Max Size

------------------------The following registry string shows the Max Size of System Event Log
REG_DWORD

MaxSize 20971520

Microsoft (R) Windows Script Host Version 5.8

Copyright (C) Microsoft Corporation. All rights reserved.
18-Oct-13 10:03:21 AM. Error Code: -2147221020 --- Couldn't get the first node!

Microsoft (R) Windows Script Host Version 5.8

Copyright (C) Microsoft Corporation. All rights reserved.
18-Oct-13 10:03:21 AM. Error Code: -2147221020 --- Couldn't get the first node!

Microsoft (R) Windows Script Host Version 5.8

Copyright (C) Microsoft Corporation. All rights reserved.
18-Oct-13 10:03:21 AM. Error Code: -2147221020 --- Couldn't get the first node!

Microsoft (R) Windows Script Host Version 5.8

Copyright (C) Microsoft Corporation. All rights reserved.
18-Oct-13 10:03:21 AM. Error Code: -2147221020 --- Couldn't get the first node!

Microsoft (R) Windows Script Host Version 5.8

Copyright (C) Microsoft Corporation. All rights reserved.
***************************************************
IIS Configurations

***************************************************
@VABEG:WIN:IISINFO@
IIS not installed on this Machine
@VAEND:WIN:IISINFO@
********************************************************************************
********************
********************************************************************************
********************
FTP SITES
=========
@VABEG:WIN:FTPINFO@
FTP SITE NAME
=============
End
SERVER BINDINGS
===============
End
FTP ANONYMOUS ACCESS PERMISSIONS
================================
No //Anonymous Access not allowed
End
FTP SITE LOGGING
================
No //Logging is DISABLED
End
FTP PERMISS
===========
RW:Disabled //Both Read and Write permission are DISABLED
R:Enabled //Only Read permission is ENABLED
W:Enabled //Only Write permission is ENABLED
RW:Enabled //Both Read and Write permission are ENABLED
End
@VAEND:WIN:FTPINFO@
********************************************************************************
********************
********************************************************************************
********************

Microsoft (R) Windows Script Host Version 5.8

Copyright (C) Microsoft Corporation. All rights reserved.
***************************************************
OS Type and Specifications
***************************************************
@VABEG:WIN:TYPESPEC@
Caption: Microsoft Windows 7 Professional
BuildNumber: 7601
CSDVersion: Service Pack 1
CSName: VISHWASSK
SerialNumber: 55041-OEM-8992671-00437
ServicePackMajorVersion: 1
SystemDirectory: C:\Windows\system32
Version: 6.1.7601
WindowsDirectory: C:\Windows
@VAEND:WIN:TYPESPEC@
***************************************************
Disk Specifications
***************************************************
@VABEG:WIN:DISKSPEC@
Caption: C:
DeviceID: C:
Description: Local Fixed Disk
Name: C:
FileSystem: NTFS
Size: 122967552000
FreeSpace: 62616698880
Caption: D:
DeviceID: D:
Description: Local Fixed Disk
Name: D:
FileSystem: NTFS
Size: 115343355904
FreeSpace: 25859358720
Caption: Q:
DeviceID: Q:
Description: Local Fixed Disk
Name: Q:
FileSystem: NTFS
Size: 10485755904
FreeSpace: 2898731008
@VAEND:WIN:DISKSPEC@
***************************************************
Memory Configuration
***************************************************
@VABEG:WIN:MEMCONF@
@VAEND:WIN:MEMCONF@

***************************************************
Page File Settings
***************************************************
Caption: c:\ 'pagefile.sys'
Description: 'pagefile.sys' @ c:\
InitialSize: 2000
MaximumSize: 4000
Name: c:\pagefile.sys
Caption: d:\ 'pagefile.sys'
Description: 'pagefile.sys' @ d:\
InitialSize: 2000
MaximumSize: 4000
Name: d:\pagefile.sys
***************************************************
Time Zone Settings
***************************************************
Caption: (UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi
***************************************************
Network Protocols
***************************************************
@VABEG:WIN:NETPROTOCOLS@
Caption: SSL
Description: SSL Application Tunneling over [MSAFD Tcpip [TCP/IP]]
Name: SSL Application Tunneling over [MSAFD Tcpip [TCP/IP]]
Caption: SSL
Description: SSL Application Tunneling over [MSAFD Tcpip [UDP/IP]]
Name: SSL Application Tunneling over [MSAFD Tcpip [UDP/IP]]
Caption: Tcpip
Description: @%SystemRoot%\system32\tcpipcfg.dll,-50003
Name: MSAFD Tcpip [TCP/IP]
Caption: Tcpip
Description: @%SystemRoot%\system32\tcpipcfg.dll,-50003
Name: MSAFD Tcpip [UDP/IP]
Caption: Tcpip
Description: @%SystemRoot%\system32\tcpipcfg.dll,-50003
Name: MSAFD Tcpip [TCP/IPv6]
Caption: Tcpip
Description: @%SystemRoot%\system32\tcpipcfg.dll,-50003
Name: MSAFD Tcpip [UDP/IPv6]
Caption: RSVP
Description: RSVP TCPv6 Service Provider

Name: RSVP TCPv6 Service Provider

Caption: RSVP
Description: RSVP TCP Service Provider
Name: RSVP TCP Service Provider
Caption: RSVP
Description: RSVP UDPv6 Service Provider
Name: RSVP UDPv6 Service Provider
Caption: RSVP
Description: RSVP UDP Service Provider
Name: RSVP UDP Service Provider
Caption: RfComm
Description: Bluetooth Device (RFCOMM Protocol TDI)
Name: MSAFD RfComm [Bluetooth]
Caption: VMCI
Description: VMware vmci
Name: VMCI sockets DGRAM
Caption: VMCI
Description: VMware vmci
Name: VMCI sockets STREAM
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CCFB1AE7-11FE-4D94-8835-BC1674385E11}]
SEQPACKET 11
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CCFB1AE7-11FE-4D94-8835-BC1674385E11}]
DATAGRAM 11
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{59B20E9F-FA13-48AD-825C-31E4ADE4D845}]
SEQPACKET 17
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{59B20E9F-FA13-48AD-825C-31E4ADE4D845}]
DATAGRAM 17
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{566C4238-AD12-4259-8C5F-26F1332F540C}]

SEQPACKET 18
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{566C4238-AD12-4259-8C5F-26F1332F540C}]
DATAGRAM 18
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{26A5E757-4042-4194-8CFB-FF1A433E0415}]
SEQPACKET 7
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{26A5E757-4042-4194-8CFB-FF1A433E0415}]
DATAGRAM 7
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E1CDE23C-9EC7-49C4-811D-F6928343C7B4}]
SEQPACKET 4
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E1CDE23C-9EC7-49C4-811D-F6928343C7B4}]
DATAGRAM 4
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BEA385DB-A0CE-480F-9930-1F5B393718F7}]
SEQPACKET 1
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BEA385DB-A0CE-480F-9930-1F5B393718F7}]
DATAGRAM 1
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6EC3C0D2-677E-4948-A5F2-0C1C24958FB3}]
SEQPACKET 12
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6EC3C0D2-677E-4948-A5F2-0C1C24958FB3}]
DATAGRAM 12
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{EAE0ADF2-0DFF-4F07-B88B-BA88A3FABF72}]

SEQPACKET 14
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip_{EAE0ADF2-0DFF-4F07-B88B-BA88A3FABF72}]
DATAGRAM 14
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F17AB11C-FCFB-465B-A9C0-CA6DBA400F0B}
] SEQPACKET 23
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F17AB11C-FCFB-465B-A9C0-CA6DBA400F0B}
] DATAGRAM 23
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{935D792A-A481-46B3-A7FC-E18D662C4A02}
] SEQPACKET 6
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{935D792A-A481-46B3-A7FC-E18D662C4A02}
] DATAGRAM 6
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{FD876FE8-DDDB-47E6-B4C3-9A7D15870928}
] SEQPACKET 22
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{FD876FE8-DDDB-47E6-B4C3-9A7D15870928}
] DATAGRAM 22
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7785D5F9-1F65-46AF-9B34-94348C5989F3}
] SEQPACKET 21
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7785D5F9-1F65-46AF-9B34-94348C5989F3}
] DATAGRAM 21
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{81A0239A-666E-47AA-8E85-7847367DB467}

] SEQPACKET 16
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{81A0239A-666E-47AA-8E85-7847367DB467}
] DATAGRAM 16
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{59CAF3B0-A6DE-4E99-8B13-216FD099FE57}
] SEQPACKET 0
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{59CAF3B0-A6DE-4E99-8B13-216FD099FE57}
] DATAGRAM 0
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{CCFB1AE7-11FE-4D94-8835-BC1674385E11}
] SEQPACKET 20
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{CCFB1AE7-11FE-4D94-8835-BC1674385E11}
] DATAGRAM 20
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1322D71E-1724-4CD4-9735-1B5F73C8019A}
] SEQPACKET 9
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1322D71E-1724-4CD4-9735-1B5F73C8019A}
] DATAGRAM 9
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{566C4238-AD12-4259-8C5F-26F1332F540C}
] SEQPACKET 19
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{566C4238-AD12-4259-8C5F-26F1332F540C}
] DATAGRAM 19
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{EAE0ADF2-0DFF-4F07-B88B-BA88A3FABF72}

] SEQPACKET 15
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{EAE0ADF2-0DFF-4F07-B88B-BA88A3FABF72}
] DATAGRAM 15
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{6EC3C0D2-677E-4948-A5F2-0C1C24958FB3}
] SEQPACKET 13
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{6EC3C0D2-677E-4948-A5F2-0C1C24958FB3}
] DATAGRAM 13
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{CA36A704-7ADA-44D5-BE01-8A01F9914AC4}
] SEQPACKET 10
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{CA36A704-7ADA-44D5-BE01-8A01F9914AC4}
] DATAGRAM 10
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{26A5E757-4042-4194-8CFB-FF1A433E0415}
] SEQPACKET 8
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{26A5E757-4042-4194-8CFB-FF1A433E0415}
] DATAGRAM 8
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{E1CDE23C-9EC7-49C4-811D-F6928343C7B4}
] SEQPACKET 5
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{E1CDE23C-9EC7-49C4-811D-F6928343C7B4}
] DATAGRAM 5
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F3E46131-9A9B-42F8-A790-89C3DF104416}

] SEQPACKET 3
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{F3E46131-9A9B-42F8-A790-89C3DF104416}
] DATAGRAM 3
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{BEA385DB-A0CE-480F-9930-1F5B393718F7}
] SEQPACKET 2
Caption: NetBIOS
Description: NetBIOS Interface
Name: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{BEA385DB-A0CE-480F-9930-1F5B393718F7}
] DATAGRAM 2
@VAEND:WIN:NETPROTOCOLS@
***************************************************
Services Running
***************************************************
@VABEG:WIN:SERVICES@
Caption: AcPrfMgrSvc
Description:
Name: AcPrfMgrSvc
Caption: AcSvc
Description:
Name: AcSvc
Caption: Ad-Aware Service
Description: Ad-Aware Service
Name: Ad-Aware Service
Caption: Adobe Acrobat Update Service
Description: Adobe Acrobat Updater keeps your Adobe software up to date.
Name: AdobeARMservice
Caption: Adobe Flash Player Update Service
Description: This service keeps your Adobe Flash Player installation up to date
with the latest enhancements and security fixes.
Name: AdobeFlashPlayerUpdateSvc
Caption: Application Experience
Description: Processes application compatibility cache requests for applications
as they are launched
Name: AeLookupSvc
Caption: Application Layer Gateway Service
Description: Provides support for 3rd party protocol plug-ins for Internet Conne

ction Sharing
Name: ALG
Caption: Application Identity
Description: Determines and verifies the identity of an application. Disabling t
his service will prevent AppLocker from being enforced.
Name: AppIDSvc
Caption: Application Information
Description: Facilitates the running of interactive applications with additional
administrative privileges. If this service is stopped, users will be unable to
launch applications with the additional administrative privileges they may requ
ire to perform desired user tasks.
Name: Appinfo
Caption: Apple Mobile Device
Description: Provides the interface to Apple mobile devices.
Name: Apple Mobile Device
Caption: Application Management
Description: Processes installation, removal, and enumeration requests for softw
are deployed through Group Policy. If the service is disabled, users will be una
ble to install, remove, or enumerate software deployed through Group Policy. If
this service is disabled, any services that explicitly depend on it will fail to
start.
Name: AppMgmt
Caption: ASP.NET State Service
Description: Provides support for out-of-process session states for ASP.NET. If
this service is stopped, out-of-process requests will not be processed. If this
service is disabled, any services that explicitly depend on it will fail to star
t.
Name: aspnet_state
Caption: Windows Audio Endpoint Builder
Description: Manages audio devices for the Windows Audio service. If this servi
ce is stopped, audio devices and effects will not function properly. If this se
rvice is disabled, any services that explicitly depend on it will fail to start
Name: AudioEndpointBuilder
Caption: Windows Audio
Description: Manages audio for Windows-based programs. If this service is stopp
ed, audio devices and effects will not function properly. If this service is di
sabled, any services that explicitly depend on it will fail to start
Name: Audiosrv
Caption: ActiveX Installer (AxInstSV)
Description: Provides User Account Control validation for the installation of Ac
tiveX controls from the Internet and enables management of ActiveX control insta
llation based on Group Policy settings. This service is started on demand and if
disabled the installation of ActiveX controls will behave according to default
browser settings.

Name: AxInstSV
Caption: BitLocker Drive Encryption Service
Description: BDESVC hosts the BitLocker Drive Encryption service. BitLocker Driv
e Encryption provides secure startup for the operating system, as well as full v
olume encryption for OS, fixed or removable volumes. This service allows BitLock
er to prompt users for various actions related to their volumes when mounted, an
d unlocks volumes automatically without user interaction. Additionally, it store
s recovery information to Active Directory, if available, and, if necessary, ens
ures the most recent recovery certificates are used. Stopping or disabling the
service would prevent users from leveraging this functionality.
Name: BDESVC
Caption: Base Filtering Engine
Description: The Base Filtering Engine (BFE) is a service that manages firewall
and Internet Protocol security (IPsec) policies and implements user mode filteri
ng. Stopping or disabling the BFE service will significantly reduce the security
of the system. It will also result in unpredictable behavior in IPsec managemen
t and firewall applications.
Name: BFE
Caption: Background Intelligent Transfer Service
Description: Transfers files in the background using idle network bandwidth. If
the service is disabled, then any applications that depend on BITS, such as Wind
ows Update or MSN Explorer, will be unable to automatically download programs an
d other information.
Name: BITS
Caption: Bonjour Service
Description: Enables hardware devices and software services to automatically con
figure themselves on the network and advertise their presence.
Name: Bonjour Service
Caption: Computer Browser
Description: Maintains an updated list of computers on the network and supplies
this list to computers designated as browsers. If this service is stopped, this
list will not be updated or maintained. If this service is disabled, any service
s that explicitly depend on it will fail to start.
Name: Browser
Caption: Bluetooth Support Service
Description: The Bluetooth service supports discovery and association of remote
Bluetooth devices. Stopping or disabling this service may cause already install
ed Bluetooth devices to fail to operate properly and prevent new devices from be
ing discovered or associated.
Name: bthserv
Caption: Bluetooth Service
Description: Handles installation and removal of Bluetooth devices.
Name: btwdins
Caption: Certificate Propagation

Description: Copies user certificates and root certificates from smart cards int
o the current user's certificate store, detects when a smart card is inserted in
to a smart card reader, and, if needed, installs the smart card Plug and Play mi
nidriver.
Name: CertPropSvc
Caption: Indexing Service
Description: Indexes contents and properties of files on local and remote comput
ers; provides rapid access to files through flexible querying language.
Name: CISVC
Caption: Microsoft .NET Framework NGEN v2.0.50727_X86
Description: Microsoft .NET Framework NGEN
Name: clr_optimization_v2.0.50727_32
Caption: Microsoft .NET Framework NGEN v4.0.30319_X86
Description: Microsoft .NET Framework NGEN
Name: clr_optimization_v4.0.30319_32
Caption: COM+ System Application
Description: Manages the configuration and tracking of Component Object Model (C
OM)+-based components. If the service is stopped, most COM+-based components wil
l not function properly. If this service is disabled, any services that explicit
ly depend on it will fail to start.
Name: COMSysApp
Caption: Cryptographic Services
Description: Provides four management services: Catalog Database Service, which
confirms the signatures of Windows files and allows new programs to be installed
; Protected Root Service, which adds and removes Trusted Root Certification Auth
ority certificates from this computer; Automatic Root Certificate Update Service
, which retrieves root certificates from Windows Update and enable scenarios suc
h as SSL; and Key Service, which helps enroll this computer for certificates. If
this service is stopped, these management services will not function properly.
If this service is disabled, any services that explicitly depend on it will fail
to start.
Name: CryptSvc
Caption: Offline Files
Description: The Offline Files service performs maintenance activities on the Of
fline Files cache, responds to user logon and logoff events, implements the inte
rnals of the public API, and dispatches interesting events to those interested i
n Offline Files activities and changes in cache state.
Name: CscService
Caption: DCOM Server Process Launcher
Description: The DCOMLAUNCH service launches COM and DCOM servers in response to
object activation requests. If this service is stopped or disabled, programs us
ing COM or DCOM will not function properly. It is strongly recommended that you
have the DCOMLAUNCH service running.
Name: DcomLaunch

Caption: Disk Defragmenter

Description: Provides Disk Defragmentation Capabilities.
Name: defragsvc
Caption: DHCP Client
Description: Registers and updates IP addresses and DNS records for this compute
r. If this service is stopped, this computer will not receive dynamic IP address
es and DNS updates. If this service is disabled, any services that explicitly de
pend on it will fail to start.
Name: Dhcp
Caption: Microsoft Forefront UAG Endpoint Component Manager
Description: Manages Forefront UAG endpoint components.
Name: DMService
Caption: DNS Client
Description: The DNS Client service (dnscache) caches Domain Name System (DNS) n
ames and registers the full computer name for this computer. If the service is s
topped, DNS names will continue to be resolved. However, the results of DNS name
queries will not be cached and the computer's name will not be registered. If t
he service is disabled, any services that explicitly depend on it will fail to s
tart.
Name: Dnscache
Caption: Wired AutoConfig
Description: The Wired AutoConfig (DOT3SVC) service is responsible for performin
g IEEE 802.1X authentication on Ethernet interfaces. If your current wired netwo
rk deployment enforces 802.1X authentication, the DOT3SVC service should be conf
igured to run for establishing Layer 2 connectivity and/or providing access to n
etwork resources. Wired networks that do not enforce 802.1X authentication are u
naffected by the DOT3SVC service.
Name: dot3svc
Caption: Lenovo Doze Mode Service
Description:
Name: DozeSvc
Caption: Diagnostic Policy Service
Description: The Diagnostic Policy Service enables problem detection, troublesho
oting and resolution for Windows components. If this service is stopped, diagno
stics will no longer function.
Name: DPS
Caption: Extensible Authentication Protocol
Description: The Extensible Authentication Protocol (EAP) service provides netwo
rk authentication in such scenarios as 802.1x wired and wireless, VPN, and Netwo
rk Access Protection (NAP). EAP also provides application programming interface
s (APIs) that are used by network access clients, including wireless and VPN cli
ents, during the authentication process. If you disable this service, this comp
uter is prevented from accessing networks that require EAP authentication.
Name: EapHost

Caption: Encrypting File System (EFS)

Description: Provides the core file encryption technology used to store encrypte
d files on NTFS file system volumes. If this service is stopped or disabled, app
lications will be unable to access encrypted files.
Name: EFS
Caption: Windows Media Center Receiver Service
Description: Windows Media Center Service for TV and FM broadcast reception
Name: ehRecvr
Caption: Windows Media Center Scheduler Service
Description: Starts and stops recording of TV programs within Windows Media Cent
er
Name: ehSched
Caption: Windows Event Log
Description: This service manages events and event logs. It supports logging eve
nts, querying events, subscribing to events, archiving event logs, and managing
event metadata. It can display events in both XML and plain text format. Stoppin
g this service may compromise security and reliability of the system.
Name: eventlog
Caption: COM+ Event System
Description: Supports System Event Notification Service (SENS),
utomatic distribution of events to subscribing Component Object
onents. If the service is stopped, SENS will close and will not
de logon and logoff notifications. If this service is disabled,
t explicitly depend on it will fail to start.
Name: EventSystem

which provides a
Model (COM) comp
be able to provi
any services tha

Caption: Fax
Description: Enables you to send and receive faxes, utilizing fax resources avai
lable on this computer or on the network.
Name: Fax
Caption: Function Discovery Provider Host
Description: The FDPHOST service hosts the Function Discovery (FD) network disco
very providers. These FD providers supply network discovery services for the Sim
ple Services Discovery Protocol (SSDP) and Web Services - Discovery (WS-D) proto
col. Stopping or disabling the FDPHOST service will disable network discovery fo
r these protocols when using FD. When this service is unavailable, network servi
ces using FD and relying on these discovery protocols will be unable to find net
work devices or resources.
Name: fdPHost
Caption: Function Discovery Resource Publication
Description: Publishes this computer and resources attached to this computer so
they can be discovered over the network. If this service is stopped, network re
sources will no longer be published and they will not be discovered by other com
puters on the network.
Name: FDResPub

Caption: FLEXnet Licensing Service

Description: This service performs licensing functions on behalf of FLEXnet enab
led products.
Name: FLEXnet Licensing Service
Caption: Windows Font Cache Service
Description: Optimizes performance of applications by caching commonly used font
data. Applications will start this service if it is not already running. It can
be disabled, though doing so will degrade application performance.
Name: FontCache
Caption: Windows Presentation Foundation Font Cache 3.0.0.0
Description: Optimizes performance of Windows Presentation Foundation (WPF) appl
ications by caching commonly used font data. WPF applications will start this se
rvice if it is not already running. It can be disabled, though doing so will deg
rade the performance of WPF applications.
Name: FontCache3.0.0.0
Caption: FsUsbExService
Description:
Name: FsUsbExService
Caption: Group Policy Client
Description: The service is responsible for applying settings configured by admi
nistrators for the computer and users through the Group Policy component. If the
service is stopped or disabled, the settings will not be applied and applicatio
ns and components will not be manageable through Group Policy. Any components or
applications that depend on the Group Policy component might not be functional
if the service is stopped or disabled.
Name: gpsvc
Caption: Human Interface Device Access
Description: Enables generic input access to Human Interface Devices (HID), whic
h activates and maintains the use of predefined hot buttons on keyboards, remote
controls, and other multimedia devices. If this service is stopped, hot buttons
controlled by this service will no longer function. If this service is disabled
, any services that explicitly depend on it will fail to start.
Name: hidserv
Caption: Health Key and Certificate Management
Description: Provides X.509 certificate and key management services for the Netw
ork Access Protection Agent (NAPAgent). Enforcement technologies that use X.509
certificates may not function properly without this service
Name: hkmsvc
Caption: HomeGroup Provider
Description: Performs networking tasks associated with configuration and mainten
ance of homegroups. If this service is stopped or disabled, your computer will b
e unable to detect other homegroups and your homegroup might not work properly.
It is recommended that you keep this service running.
Name: HomeGroupProvider

Caption: HyperW7 Service

Description:
Name: HyperW7Svc
Caption: Lenovo PM Service
Description:
Name: IBMPMSVC
Caption: InstallDriver Table Manager
Description: Provides support for the Running Object Table for InstallShield Dri
vers
Name: IDriverT
Caption: Windows CardSpace
Description: Securely enables the creation, management, and disclosure of digita
l identities.
Name: idsvc
Caption: IKE and AuthIP IPsec Keying Modules
Description: The IKEEXT service hosts the Internet Key Exchange (IKE) and Authen
ticated Internet Protocol (AuthIP) keying modules. These keying modules are used
for authentication and key exchange in Internet Protocol security (IPsec). Stop
ping or disabling the IKEEXT service will disable IKE and AuthIP key exchange wi
th peer computers. IPsec is typically configured to use IKE or AuthIP; therefore
, stopping or disabling the IKEEXT service might result in an IPsec failure and
might compromise the security of the system. It is strongly recommended that you
have the IKEEXT service running.
Name: IKEEXT
Caption: PnP-X IP Bus Enumerator
Description: The PnP-X bus enumerator service manages the virtual network bus. I
t discovers network connected devices using the SSDP/WS discovery protocols and
gives them presence in PnP. If this service is stopped or disabled, presence of
NCD devices will not be maintained in PnP. All pnpx based scenarios will stop fu
nctioning.
Name: IPBusEnum
Caption: IP Helper
Description: Provides tunnel connectivity using IPv6 transition technologies (6t
o4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, t
he computer will not have the enhanced connectivity benefits that these technolo
gies offer.
Name: iphlpsvc
Caption: iPod Service
Description: iPod hardware management services
Name: iPod Service
Caption: CNG Key Isolation
Description: The CNG key isolation service is hosted in the LSA process. The ser
vice provides key process isolation to private keys and associated cryptographic
operations as required by the Common Criteria. The service stores and uses long

-lived keys in a secure process complying with Common Criteria requirements.

Name: KeyIso
Caption: KtmRm for Distributed Transaction Coordinator
Description: Coordinates transactions between the Distributed Transaction Coordi
nator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it
is recommended that this service remain stopped. If it is needed, both MSDTC and
KTM will start this service automatically. If this service is disabled, any MSD
TC transaction interacting with a Kernel Resource Manager will fail and any serv
ices that explicitly depend on it will fail to start.
Name: KtmRm
Caption: Server
Description: Supports file, print, and named-pipe sharing over the network for t
his computer. If this service is stopped, these functions will be unavailable. I
f this service is disabled, any services that explicitly depend on it will fail
to start.
Name: LanmanServer
Caption: Workstation
Description: Creates and maintains client network connections to remote servers
using the SMB protocol. If this service is stopped, these connections will be un
available. If this service is disabled, any services that explicitly depend on i
t will fail to start.
Name: LanmanWorkstation
Caption: Lenovo Camera Mute
Description:
Name: LENOVO.CAMMUTE
Caption: Lenovo Microphone Mute
Description:
Name: LENOVO.MICMUTE
Caption: Lenovo Keyboard Noise Reduction
Description:
Name: LENOVO.TPKNRSVC
Caption: Lenovo Auto Scroll
Description:
Name: Lenovo.VIRTSCRLSVC
Caption: Link-Layer Topology Discovery Mapper
Description: Creates a Network Map, consisting of PC and device topology (connec
tivity) information, and metadata describing each PC and device. If this servic
e is disabled, the Network Map will not function properly.
Name: lltdsvc
Caption: TCP/IP NetBIOS Helper
Description: Provides support for the NetBIOS over TCP/IP (NetBT) service and Ne
tBIOS name resolution for clients on the network, therefore enabling users to sh

are files, print, and log on to the network. If this service is stopped, these f
unctions might be unavailable. If this service is disabled, any services that ex
plicitly depend on it will fail to start.
Name: lmhosts
Caption: Intel(R) Management and Security Application Local Management Service
Description: Allows applications to access the local Intel(R) Management and Sec
urity Application using its locally-available selected network interfaces.
Name: LMS
Caption: logger
Description:
Name: logger
Caption: McAfee Engine Service
Description: McAfee Engine Service
Name: McAfeeEngineService
Caption: McAfee Framework Service
Description: Shared component framework for McAfee products
Name: McAfeeFramework
Caption: McAfee McShield
Description: Provides McAfee On-Access scanning protection of your computer syst
em.
Name: McShield
Caption: McAfee Task Manager
Description: Allows scheduling of McAfee scanning and updating activities.
Name: McTaskManager
Caption: Media Center Extender Service
Description: Allows Media Center Extenders to locate and connect to the computer
.
Name: Mcx2Svc
Caption: McAfee Validation Trust Protection Service
Description: Provides validation trust protection services
Name: mfevtp
Caption: Multimedia Class Scheduler
Description: Enables relative prioritization of work based on system-wide task p
riorities. This is intended mainly for multimedia applications. If this service
is stopped, individual tasks resort to their default priority.
Name: MMCSS
Caption: Mozilla Maintenance Service
Description: The Mozilla Maintenance Service ensures that you have the latest an
d most secure version of Mozilla Firefox on your computer. Keeping Firefox up to
date is very important for your online security, and Mozilla strongly recommend

s that you keep this service enabled.

Name: MozillaMaintenance
Caption: Windows Firewall
Description: Windows Firewall helps protect your computer by preventing unauthor
ized users from gaining access to your computer through the Internet or a networ
k.
Name: MpsSvc
Caption: Distributed Transaction Coordinator
Description: Coordinates transactions that span multiple resource managers, such
as databases, message queues, and file systems. If this service is stopped, the
se transactions will fail. If this service is disabled, any services that explic
itly depend on it will fail to start.
Name: MSDTC
Caption: Microsoft iSCSI Initiator Service
Description: Manages Internet SCSI (iSCSI) sessions from this computer to remote
iSCSI target devices. If this service is stopped, this computer will not be abl
e to login or access iSCSI targets. If this service is disabled, any services th
at explicitly depend on it will fail to start.
Name: MSiSCSI
Caption: Windows Installer
Description: Adds, modifies, and removes applications provided as a Windows Inst
aller (*.msi) package. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name: msiserver
Caption: SQL Server (SQLEXPRESS)
Description: Provides storage, processing and controlled access of data, and rap
id transaction processing.
Name: MSSQL$SQLEXPRESS
Caption: SQL Full-text Filter Daemon Launcher (SQLEXPRESS)
Description: Service to launch full-text filter daemon process which will perfor
m document filtering and word breaking for SQL Server full-text search. Disablin
g this service will make full-text search features of SQL Server unavailable.
Name: MSSQLFDLauncher$SQLEXPRESS
Caption: Network Access Protection Agent
Description: The Network Access Protection (NAP) agent service collects and mana
ges health information for client computers on a network. Information collected
by NAP agent is used to make sure that the client computer has the required soft
ware and settings. If a client computer is not compliant with health policy, it
can be provided with restricted network access until its configuration is update
d. Depending on the configuration of health policy, client computers might be au
tomatically updated so that users quickly regain full network access without hav
ing to manually update their computer.
Name: napagent
Caption: Net Driver HPZ12

Description:
Name: Net Driver HPZ12
Caption: Netlogon
Description: Maintains a secure channel between this computer and the domain con
troller for authenticating users and services. If this service is stopped, the c
omputer may not authenticate users and services and the domain controller cannot
register DNS records. If this service is disabled, any services that explicitly
depend on it will fail to start.
Name: Netlogon
Caption: Network Connections
Description: Manages objects in the Network and Dial-Up Connections folder, in w
hich you can view both local area network and remote connections.
Name: Netman
Caption: Net.Msmq Listener Adapter
Description: Receives activation requests over the net.msmq and msmq.formatname
protocols and passes them to the Windows Process Activation Service.
Name: NetMsmqActivator
Caption: Net.Pipe Listener Adapter
Description: Receives activation requests over the net.pipe protocol and passes
them to the Windows Process Activation Service.
Name: NetPipeActivator
Caption: Network List Service
Description: Identifies the networks to which the computer has connected, collec
ts and stores properties for these networks, and notifies applications when thes
e properties change.
Name: netprofm
Caption: Net.Tcp Listener Adapter
Description: Receives activation requests over the net.tcp protocol and passes t
hem to the Windows Process Activation Service.
Name: NetTcpActivator
Caption: Net.Tcp Port Sharing Service
Description: Provides ability to share TCP ports over the net.tcp protocol.
Name: NetTcpPortSharing
Caption: Network Location Awareness
Description: Collects and stores configuration information for the network and n
otifies programs when this information is modified. If this service is stopped,
configuration information might be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.
Name: NlaSvc
Caption: Network Store Interface Service
Description: This service delivers network notifications (e.g. interface additio
n/deleting etc) to user mode clients. Stopping this service will cause loss of n

etwork connectivity. If this service is disabled, any other services that explic
itly depend on this service will fail to start.
Name: nsi
Caption: Microsoft Office Diagnostics Service
Description: Run portions of Microsoft Office Diagnostics.
Name: odserv
Caption: OracleJobSchedulerXE
Description:
Name: OracleJobSchedulerXE
Caption: OracleMTSRecoveryService
Description:
Name: OracleMTSRecoveryService
Caption: OracleServiceXE
Description:
Name: OracleServiceXE
Caption: OracleXEClrAgent
Description:
Name: OracleXEClrAgent
Caption: OracleXETNSListener
Description:
Name: OracleXETNSListener
Caption: Office Source Engine
Description: Saves installation files used for updates and repairs and is requir
ed for the downloading of Setup updates and Watson error reports.
Name: ose
Caption: Peer Networking Identity Manager
Description: Provides identity services for the Peer Name Resolution Protocol (P
NRP) and Peer-to-Peer Grouping services. If disabled, the Peer Name Resolution
Protocol (PNRP) and Peer-to-Peer Grouping services may not function, and some ap
plications, such as HomeGroup and Remote Assistance, may not function correctly.
Name: p2pimsvc
Caption: Peer Networking Grouping
Description: Enables multi-party communication using Peer-to-Peer Grouping. If
disabled, some applications, such as HomeGroup, may not function.
Name: p2psvc
Caption: Program Compatibility Assistant Service
Description: This service provides support for the Program Compatibility Assista
nt (PCA). PCA monitors programs installed and run by the user and detects known
compatibility problems. If this service is stopped, PCA will not function prope
rly.

Name: PcaSvc
Caption: BranchCache
Description: This service caches network content from peers on the local subnet.
Name: PeerDistSvc
Caption: Performance Logs & Alerts
Description: Performance Logs and Alerts Collects performance
remote computers based on preconfigured schedule parameters,
ta to a log or triggers an alert. If this service is stopped,
ation will not be collected. If this service is disabled, any
icitly depend on it will fail to start.
Name: pla

data from local or

then writes the da
performance inform
services that expl

Caption: Plug and Play

Description: Enables a computer to recognize and adapt to hardware changes with
little or no user input. Stopping or disabling this service will result in syste
m instability.
Name: PlugPlay
Caption: Pml Driver HPZ12
Description:
Name: Pml Driver HPZ12
Caption: PNRP Machine Name Publication Service
Description: This service publishes a machine name using the Peer Name Resolutio
n Protocol. Configuration is managed via the netsh context 'p2p pnrp peer'
Name: PNRPAutoReg
Caption: Peer Name Resolution Protocol
Description: Enables serverless peer name resolution over the Internet using the
Peer Name Resolution Protocol (PNRP). If disabled, some peer-to-peer and collab
orative applications, such as Remote Assistance, may not function.
Name: PNRPsvc
Caption: IPsec Policy Agent
Description: Internet Protocol security (IPsec) supports network-level peer auth
entication, data origin authentication, data integrity, data confidentiality (en
cryption), and replay protection. This service enforces IPsec policies created
through the IP Security Policies snap-in or the command-line tool "netsh ipsec".
If you stop this service, you may experience network connectivity issues if yo
ur policy requires that connections use IPsec. Also,remote management of Window
s Firewall is not available when this service is stopped.
Name: PolicyAgent
Caption: Power
Description: Manages power policy and power policy notification delivery.
Name: Power
Caption: Power Manager DBC Service
Description:

Name: Power Manager DBC Service

Caption: User Profile Service
Description: This service is responsible for loading and unloading user profiles
. If this service is stopped or disabled, users will no longer be able to succes
sfully logon or logoff, applications may have problems getting to users' data, a
nd components registered to receive profile event notifications will not receive
them.
Name: ProfSvc
Caption: Protected Storage
Description: Provides protected storage for sensitive data, such as passwords, t
o prevent access by unauthorized services, processes, or users.
Name: ProtectedStorage
Caption: Protexis Licensing V2
Description: This service provides Protexis licensing functionalty.
Name: PSI_SVC_2
Caption: Cisco EnergyWise Enabler
Description:
Name: PwmEWSvc
Caption: Quality Windows Audio Video Experience
Description: Quality Windows Audio Video Experience (qWave) is a networking plat
form for Audio Video (AV) streaming applications on IP home networks. qWave enha
nces AV streaming performance and reliability by ensuring network quality-of-ser
vice (QoS) for AV applications. It provides mechanisms for admission control, ru
n time monitoring and enforcement, application feedback, and traffic prioritizat
ion.
Name: QWAVE
Caption: Remote Access Auto Connection Manager
Description: Creates a connection to a remote network whenever a program referen
ces a remote DNS or NetBIOS name or address.
Name: RasAuto
Caption: Remote Access Connection Manager
Description: Manages dial-up and virtual private network (VPN) connections from
this computer to the Internet or other remote networks. If this service is disab
led, any services that explicitly depend on it will fail to start.
Name: RasMan
Caption: RealNetworks Downloader Resolver Service
Description: Manage different Downloader versions in RealNetworks' products.
Name: RealNetworks Downloader Resolver Service
Caption: Routing and Remote Access
Description: Offers routing services to businesses in local area and wide area n
etwork environments.
Name: RemoteAccess

Caption: Remote Registry

Description: Enables remote users to modify registry settings on this computer.
If this service is stopped, the registry can be modified only by users on this c
omputer. If this service is disabled, any services that explicitly depend on it
will fail to start.
Name: RemoteRegistry
Caption: SQL Server Reporting Services (SQLEXPRESS)
Description: Manages, executes, renders, schedules and delivers reports.
Name: ReportServer$SQLEXPRESS
Caption: Remote Packet Capture Protocol v.0 (experimental)
Description: Allows to capture traffic on this machine from a remote machine.
Name: rpcapd
Caption: RPC Endpoint Mapper
Description: Resolves RPC interfaces identifiers to transport endpoints. If this
service is stopped or disabled, programs using Remote Procedure Call (RPC) serv
ices will not function properly.
Name: RpcEptMapper
Caption: Remote Procedure Call (RPC) Locator
Description: In Windows 2003 and earlier versions of Windows, the Remote Procedu
re Call (RPC) Locator service manages the RPC name service database. In Windows
Vista and later versions of Windows, this service does not provide any functiona
lity and is present for application compatibility.
Name: RpcLocator
Caption: Remote Procedure Call (RPC)
Description: The RPCSS service is the Service Control Manager for COM and DCOM s
ervers. It performs object activations requests, object exporter resolutions and
distributed garbage collection for COM and DCOM servers. If this service is sto
pped or disabled, programs using COM or DCOM will not function properly. It is s
trongly recommended that you have the RPCSS service running
Name: RpcSs
Caption: Realtek Audio Service
Description: To check external HDMI device availability, HDMI device audio capab
ility and update HDMI device capability into audio control panel
Name: RtkAudioService
Caption: Security Accounts Manager
Description: The startup of this service signals other services that the Securit
y Accounts Manager (SAM) is ready to accept requests. Disabling this service wi
ll prevent other services in the system from being notified when the SAM is read
y, which may in turn cause those services to fail to start correctly. This servi
ce should not be disabled.
Name: SamSs
Caption: Ad-Aware

Description: Manages your antispyware and antivirus application

Name: SBAMSvc
Caption: Smart Card
Description: Manages access to smart cards read by this computer. If this servic
e is stopped, this computer will be unable to read smart cards. If this service
is disabled, any services that explicitly depend on it will fail to start.
Name: SCardSvr
Caption: Task Scheduler
Description: Enables a user to configure and schedule automated tasks on this co
mputer. The service also hosts multiple Windows system-critical tasks. If this s
ervice is stopped or disabled, these tasks will not be run at their scheduled ti
mes. If this service is disabled, any services that explicitly depend on it will
fail to start.
Name: Schedule
Caption: Smart Card Removal Policy
Description: Allows the system to be configured to lock the user desktop upon sm
art card removal.
Name: SCPolicySvc
Caption: Windows Backup
Description: Provides Windows Backup and Restore capabilities.
Name: SDRSVC
Caption: Seagate Dashboard Service
Description: Dashboard for Memeo applications
Name: SeagateDashboardService
Caption: Secondary Logon
Description: Enables starting processes under alternate credentials. If this ser
vice is stopped, this type of logon access will be unavailable. If this service
is disabled, any services that explicitly depend on it will fail to start.
Name: seclogon
Caption: System Event Notification Service
Description: Monitors system events and notifies subscribers to COM+ Event Syste
m of these events.
Name: SENS
Caption: Adaptive Brightness
Description: Monitors ambient light sensors to detect changes in ambient light a
nd adjust the display brightness. If this service is stopped or disabled, the d
isplay brightness will not adapt to lighting conditions.
Name: SensrSvc
Caption: Remote Desktop Configuration
Description: Remote Desktop Configuration service (RDCS) is responsible for all
Remote Desktop Services and Remote Desktop related configuration and session mai
ntenance activities that require SYSTEM context. These include per-session tempo

rary folders, RD themes, and RD certificates.

Name: SessionEnv
Caption: Internet Connection Sharing (ICS)
Description: Provides network address translation, addressing, name resolution a
nd/or intrusion prevention services for a home or small office network.
Name: SharedAccess
Caption: Shell Hardware Detection
Description: Provides notifications for AutoPlay hardware events.
Name: ShellHWDetection
Caption: SNMP Trap
Description: Receives trap messages generated by local or remote Simple Network
Management Protocol (SNMP) agents and forwards the messages to SNMP management p
rograms running on this computer. If this service is stopped, SNMP-based program
s on this computer will not receive SNMP trap messages. If this service is disab
led, any services that explicitly depend on it will fail to start.
Name: SNMPTRAP
Caption: Print Spooler
Description: Loads files to memory for later printing
Name: Spooler
Caption: Software Protection
Description: Enables the download, installation and enforcement of digital licen
ses for Windows and Windows applications. If the service is disabled, the operat
ing system and licensed applications may run in a notification mode. It is stron
gly recommended that you not disable the Software Protection service.
Name: sppsvc
Caption: SPP Notification Service
Description: Provides Software Licensing activation and notification
Name: sppuinotify
Caption: SQL Server Agent (SQLEXPRESS)
Description: Executes jobs, monitors SQL Server, fires alerts, and allows automa
tion of some administrative tasks.
Name: SQLAgent$SQLEXPRESS
Caption: SQL Server Browser
Description: Provides SQL Server connection information to client computers.
Name: SQLBrowser
Caption: SQL Server VSS Writer
Description: Provides the interface to backup/restore Microsoft SQL server throu
gh the Windows VSS infrastructure.
Name: SQLWriter
Caption: Screen Reading Optimizer Service Program

Description:
Name: SROSVC
Caption: SSDP Discovery
Description: Discovers networked devices and services that use the SSDP discover
y protocol, such as UPnP devices. Also announces SSDP devices and services runni
ng on the local computer. If this service is stopped, SSDP-based devices will no
t be discovered. If this service is disabled, any services that explicitly depen
d on it will fail to start.
Name: SSDPSRV
Caption: Secure Socket Tunneling Protocol Service
Description: Provides support for the Secure Socket Tunneling Protocol (SSTP) to
connect to remote computers using VPN. If this service is disabled, users will
not be able to use SSTP to access remote servers.
Name: SstpSvc
Caption: Windows Image Acquisition (WIA)
Description: Provides image acquisition services for scanners and cameras
Name: StiSvc
Caption: Storage Service
Description: Enforces group policy for storage devices
Name: StorSvc
Caption: System Update
Description: Lenovo System Update
Name: SUService
Caption: Microsoft Software Shadow Copy Provider
Description: Manages software-based volume shadow copies taken by the Volume Sha
dow Copy service. If this service is stopped, software-based volume shadow copie
s cannot be managed. If this service is disabled, any services that explicitly d
epend on it will fail to start.
Name: swprv
Caption: Superfetch
Description: Maintains and improves system performance over time.
Name: SysMain
Caption: Tablet PC Input Service
Description: Enables Tablet PC pen and ink functionality
Name: TabletInputService
Caption: Telephony
Description: Provides Telephony API (TAPI) support for programs that control tel
ephony devices on the local computer and, through the LAN, on servers that are a
lso running the service.
Name: TapiSrv

Caption: TPM Base Services

Description: Enables access to the Trusted Platform Module (TPM), which provides
hardware-based cryptographic services to system components and applications. I
f this service is stopped or disabled, applications will be unable to use keys p
rotected by the TPM.
Name: TBS
Caption: Remote Desktop Services
Description: Allows users to connect interactively to a remote computer. Remote
Desktop and Remote Desktop Session Host Server depend on this service. To preve
nt remote use of this computer, clear the checkboxes on the Remote tab of the Sy
stem properties control panel item.
Name: TermService
Caption: Themes
Description: Provides user experience theme management.
Name: Themes
Caption: Thread Ordering Server
Description: Provides ordered execution for a group of threads within a specific
period of time.
Name: THREADORDER
Caption: ThinkPad HDD APS Logging Service
Description:
Name: TPHDEXLGSVC
Caption: Lenovo Hotkey Client Loader
Description:
Name: TPHKLOAD
Caption: On Screen Display
Description:
Name: TPHKSVC
Caption: Distributed Link Tracking Client
Description: Maintains links between NTFS files within a computer or across comp
uters in a network.
Name: TrkWks
Caption: Windows Modules Installer
Description: Enables installation, modification, and removal of Windows updates
and optional components. If this service is disabled, install or uninstall of Wi
ndows updates might fail for this computer.
Name: TrustedInstaller
Caption: Microsoft Forefront UAG Quarantine Enforcement Client
Description: Reports client health status.
Name: uagqecsvc

Caption: Interactive Services Detection

Description: Enables user notification of user input for interactive services, w
hich enables access to dialogs created by interactive services when they appear.
If this service is stopped, notifications of new interactive service dialogs wi
ll no longer function and there might not be access to interactive service dialo
gs. If this service is disabled, both notifications of and access to new interac
tive service dialogs will no longer function.
Name: UI0Detect
Caption: Ulead Burning Helper
Description:
Name: UleadBurningHelper
Caption: Remote Desktop Services UserMode Port Redirector
Description: Allows the redirection of Printers/Drives/Ports for RDP connections
Name: UmRdpService
Caption: Intel(R) Management and Security Application User Notification Service
Description: Intel(R) Management and Security Application User Notification Serv
ice - Updates the Windows Event Log with notifications of pre defined events rec
eived from the local Intel(R) Management and Security Application Device.
Name: UNS
Caption: UPnP Device Host
Description: Allows UPnP devices to be hosted on this computer. If this service
is stopped, any hosted UPnP devices will stop functioning and no additional host
ed devices can be added. If this service is disabled, any services that explicit
ly depend on it will fail to start.
Name: upnphost
Caption: Desktop Window Manager Session Manager
Description: Provides Desktop Window Manager startup and maintenance services
Name: UxSms
Caption: Credential Manager
Description: Provides secure storage and retrieval of credentials to users, appl
ications and security service packages.
Name: VaultSvc
Caption: Virtual Disk
Description: Provides management services for disks, volumes, file systems, and
storage arrays.
Name: vds
Caption: VMware Authorization Service
Description: Authorization and authentication service for starting and accessing
virtual machines
Name: VMAuthdService
Caption: VMware DHCP Service
Description: DHCP service for virtual networks

Name: VMnetDHCP
Caption: VMware NAT Service
Description: Network address translation for virtual networks
Name: VMware NAT Service
Caption: VMware Host Agent
Description: Provides remote command and administrative control over this VMware
Server host
Name: VMwareHostd
Caption: VMware Server Web Access
Description: Allows configuration of various parts of your virtual infrastructur
e through a browser-based UI.
Name: VMwareServerWebAccess
Caption: VMware VSS Writer
Description: VMware VSS Writer Service
Name: vmwriter
Caption: Volume Shadow Copy
Description: Manages and implements Volume Shadow Copies used for backup and oth
er purposes. If this service is stopped, shadow copies will be unavailable for b
ackup and the backup may fail. If this service is disabled, any services that ex
plicitly depend on it will fail to start.
Name: VSS
Caption: Windows Time
Description: Maintains date and time synchronization on all clients and servers
in the network. If this service is stopped, date and time synchronization will b
e unavailable. If this service is disabled, any services that explicitly depend
on it will fail to start.
Name: W32Time
Caption: Windows Activation Technologies Service
Description: Performs Windows 7 Validation.
Name: WatAdminSvc
Caption: Block Level Backup Engine Service
Description: The WBENGINE service is used by Windows Backup to perform backup an
d recovery operations. If this service is stopped by a user, it may cause the cu
rrently running backup or recovery operation to fail. Disabling this service may
disable backup and recovery operations using Windows Backup on this computer.
Name: wbengine
Caption: Windows Biometric Service
Description: The Windows biometric service gives client applications the ability
to capture, compare, manipulate, and store biometric data without gaining direc
t access to any biometric hardware or samples. The service is hosted in a privil
eged SVCHOST process.
Name: WbioSrvc

Caption: Windows Connect Now - Config Registrar

Description: WCNCSVC hosts the Windows Connect Now Configuration which is Micros
oft's Implementation of Wi-Fi Protected Setup (WPS) protocol. This is used to co
nfigure Wireless LAN settings for an Access Point (AP) or a Wi-Fi Device. The se
rvice is started programmatically as needed.
Name: wcncsvc
Caption: Windows Color System
Description: The WcsPlugInService service hosts third-party Windows Color System
color device model and gamut map model plug-in modules. These plug-in modules a
re vendor-specific extensions to the Windows Color System baseline color device
and gamut map models. Stopping or disabling the WcsPlugInService service will di
sable this extensibility feature, and the Windows Color System will use its base
line model processing rather than the vendor's desired processing. This might re
sult in inaccurate color rendering.
Name: WcsPlugInService
Caption: Diagnostic Service Host
Description: The Diagnostic Service Host is used by the Diagnostic Policy Servic
e to host diagnostics that need to run in a Local Service context. If this serv
ice is stopped, any diagnostics that depend on it will no longer function.
Name: WdiServiceHost
Caption: Diagnostic System Host
Description: The Diagnostic System Host is used by the Diagnostic Policy Service
to host diagnostics that need to run in a Local System context. If this servic
e is stopped, any diagnostics that depend on it will no longer function.
Name: WdiSystemHost
Caption: WebClient
Description: Enables Windows-based programs to create, access, and modify Intern
et-based files. If this service is stopped, these functions will not be availabl
e. If this service is disabled, any services that explicitly depend on it will f
ail to start.
Name: WebClient
Caption: Windows Event Collector
Description: This service manages persistent subscriptions to events from remote
sources that support WS-Management protocol. This includes Windows Vista event
logs, hardware and IPMI-enabled event sources. The service stores forwarded even
ts in a local Event Log. If this service is stopped or disabled event subscripti
ons cannot be created and forwarded events cannot be accepted.
Name: Wecsvc
Caption: Problem Reports and Solutions Control Panel Support
Description: This service provides support for viewing, sending and deletion of
system-level problem reports for the Problem Reports and Solutions control panel
.
Name: wercplsupport
Caption: Windows Error Reporting Service

Description: Allows errors to be reported when programs stop working or respondi

ng and allows existing solutions to be delivered. Also allows logs to be generat
ed for diagnostic and repair services. If this service is stopped, error reporti
ng might not work correctly and results of diagnostic services and repairs might
not be displayed.
Name: WerSvc
Caption: WatchGuard SSLVPN Service
Description:
Name: wgsslvpnsrc
Caption: Windows Defender
Description: Protection against spyware and potentially unwanted software
Name: WinDefend
Caption: WinHTTP Web Proxy Auto-Discovery Service
Description: WinHTTP implements the client HTTP stack and provides developers wi
th a Win32 API and COM Automation component for sending HTTP requests and receiv
ing responses. In addition, WinHTTP provides support for auto-discovering a prox
y configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) pr
otocol.
Name: WinHttpAutoProxySvc
Caption: Windows Management Instrumentation
Description: Provides a common interface and object model to access management i
nformation about operating system, devices, applications and services. If this s
ervice is stopped, most Windows-based software will not function properly. If th
is service is disabled, any services that explicitly depend on it will fail to s
tart.
Name: Winmgmt
Caption: Windows Remote Management (WS-Management)
Description: Windows Remote Management (WinRM) service implements the WS-Managem
ent protocol for remote management. WS-Management is a standard web services pro
tocol used for remote software and hardware management. The WinRM service listen
s on the network for WS-Management requests and processes them. The WinRM Servic
e needs to be configured with a listener using winrm.cmd command line tool or th
rough Group Policy in order for it to listen over the network. The WinRM service
provides access to WMI data and enables event collection. Event collection and
subscription to events require that the service is running. WinRM messages use H
TTP and HTTPS as transports. The WinRM service does not depend on IIS but is pre
configured to share a port with IIS on the same machine. The WinRM service rese
rves the /wsman URL prefix. To prevent conflicts with IIS, administrators should
ensure that any websites hosted on IIS do not use the /wsman URL prefix.
Name: WinRM
Caption: WLAN AutoConfig
Description: The WLANSVC service provides the logic required to configure, disco
ver, connect to, and disconnect from a wireless local area network (WLAN) as def
ined by IEEE 802.11 standards. It also contains the logic to turn your computer
into a software access point so that other devices or computers can connect to y
our computer wirelessly using a WLAN adapter that can support this. Stopping or
disabling the WLANSVC service will make all WLAN adapters on your computer inacc
essible from the Windows networking UI. It is strongly recommended that you have

the WLANSVC service running if your computer has a WLAN adapter.

Name: Wlansvc
Caption: Windows Live Mesh remote connections service
Description: Lets you connect over the Internet to this computer and work on it
as if you were sitting in front it - you can run the programs on it and browse a
ll the files and folders on it.
Name: wlcrasvc
Caption: Windows Live ID Sign-in Assistant
Description: Enables Windows Live ID authentication.
Name: wlidsvc
Caption: WMI Performance Adapter
Description: Provides performance library information from Windows Management In
strumentation (WMI) providers to clients on the network. This service only runs
when Performance Data Helper is activated.
Name: wmiApSrv
Caption: Windows Media Player Network Sharing Service
Description: Shares Windows Media Player libraries to other networked players an
d media devices using Universal Plug and Play
Name: WMPNetworkSvc
Caption: Parental Controls
Description: This service is a stub for Windows Parental Control functionality t
hat existed in Vista. It is provided for backward compatibility only.
Name: WPCSvc
Caption: Portable Device Enumerator Service
Description: Enforces group policy for removable mass-storage devices. Enables a
pplications such as Windows Media Player and Image Import Wizard to transfer and
synchronize content using removable mass-storage devices.
Name: WPDBusEnum
Caption: Security Center
Description: The WSCSVC (Windows Security Center) service monitors and reports s
ecurity health settings on the computer. The health settings include firewall (
on/off), antivirus (on/off/out of date), antispyware (on/off/out of date), Windo
ws Update (automatically/manually download and install updates), User Account Co
ntrol (on/off), and Internet settings (recommended/not recommended). The service
provides COM APIs for independent software vendors to register and record the s
tate of their products to the Security Center service. The Action Center (AC) U
I uses the service to provide systray alerts and a graphical view of the securit
y health states in the AC control panel. Network Access Protection (NAP) uses t
he service to report the security health states of clients to the NAP Network Po
licy Server to make network quarantine decisions. The service also has a public
API that allows external consumers to programmatically retrieve the aggregated
security health state of the system.
Name: wscsvc
Caption: Windows Search

Description: Provides content indexing, property caching, and search results for
files, e-mail, and other content.
Name: WSearch
Caption: Windows Update
Description: Enables the detection, download, and installation of updates for Wi
ndows and other programs. If this service is disabled, users of this computer wi
ll not be able to use Windows Update or its automatic updating feature, and prog
rams will not be able to use the Windows Update Agent (WUA) API.
Name: wuauserv
Caption: Windows Driver Foundation - User-mode Driver Framework
Description: Creates and manages user-mode driver processes. This service cannot
be stopped.
Name: wudfsvc
Caption: WWAN AutoConfig
Description: This service manages mobile broadband (GSM & CDMA) data card/embedd
ed module adapters and connections by auto-configuring the networks. It is stron
gly recommended that this service be kept running for best user experience of mo
bile broadband devices.
Name: WwanSvc
@VAEND:WIN:SERVICES@
System Information from Psinfo Utility from Sysinternals
-------------------------------------------------------@VABEG:WIN:PSINFO@
PsInfo 1.34 - local and remote system information viewer
Copyright (C) 2001-2002 Mark Russinovich
Sysinternals - www.sysinternals.com
System information
Querying
informationforfor\\VISHWASSK:
VISHWASSK...
Uptime:
0 days, 1 hour, 40 minutes, 22 seconds
Kernel version:
Windows 7 Professional, Multiprocessor Free
Product type:
Professional
Product version:
6.1
Service pack:
1
Kernel build number:
7601
Registered organization:
Registered owner:
Admin
Install date:
01-Jan-01, 5:30:00 AM
Activation status:
Error reading status
IE version:
9.0000
System root:
C:\Windows
Processors:
4
Processor speed:
2.0 GHz
Processor type:
Intel Pentium Pro/II/III
Physical memory:
2912 MB
Volume Type
Format
Label
Size
Free
C: Fixed
NTFS
Windows7_OS
114.5 GB
58.3 GB
D: Fixed
NTFS
New Volume
107.4 GB
24.1 GB
Q: Fixed
NTFS
Lenovo_Recovery
9.8 GB
2.7 GB
@VAEND:WIN:PSINFO@

Free
51%
22%
28%