System Information report written at: 12/06/13 18:30:46 System Name: SPUMANTE [System Summary] Item Value OS Name

Microsoft Windows 7 Professional Version 6.1.7601 Service Pack 1 Build 7601 Other OS Description Not Available OS Manufacturer Microsoft Corporation System Name SPUMANTE System Manufacturer LENOVO System Model 2465B15 System Type x64-based PC Processor Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, 2501 Mhz, 2 Core(s), 4 Logical Processor(s) BIOS Version/Date LENOVO G3ET65WW(2.04), 9/25/2012 SMBIOS Version 2.7 Windows Directory C:\windows System Directory C:\windows\system32 Boot Device \Device\HarddiskVolume1 Locale United States Hardware Abstraction Layer Version = "6.1.7601.17514" User Name SPUMANTE\shashidhar Time Zone India Standard Time Installed Physical Memory (RAM) 8.00 GB Total Physical Memory 7.58 GB Available Physical Memory 3.55 GB Total Virtual Memory 15.2 GB Available Virtual Memory 11.1 GB Page File Space 7.58 GB Page File C:\pagefile.sys [Hardware Resources]

[Conflicts/Sharing] Resource Device I/O Port 0x00000000-0x0000001F Direct memory access controller I/O Port 0x00000000-0x0000001F PCI bus I/O Port 0x00000070-0x00000077 System CMOS/real time clock I/O Port 0x00000070-0x00000077 Motherboard resources Memory Address 0xFF000000-0xFFFFFFFF Memory Address 0xFF000000-0xFFFFFFFF Memory Address 0xF1D00000-0xF1DFFFFF I Express Root Port 2 - 1E12 Memory Address 0xF1D00000-0xF1DFFFFF Intel(R) 82802 Firmware Hub Device Motherboard resources Intel(R) 7 Series/C216 Chipset Family PC Intel(R) Centrino(R) Advanced-N 6205

IRQ 16 Intel(R) Management Engine Interface IRQ 16 Intel(R) 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E2 D IRQ 16 Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 1 - 1E10 Memory Address 0xA0000-0xBFFFF Intel(R) HD Graphics 3000 Memory Address 0xA0000-0xBFFFF PCI bus

IRQ 19 Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 4 - 1E16 IRQ 19 Intel(R) 7 Series Chipset Family SATA AHCI Controller Memory Address 0xF1400000-0xF1403FFF Memory Address 0xF1400000-0xF1403FFF I Express Root Port 4 - 1E16 Realtek PCIe GBE Family Controller Intel(R) 7 Series/C216 Chipset Family PC

I/O Port 0x0000FFFF-0x0000FFFF Motherboard resources I/O Port 0x0000FFFF-0x0000FFFF Motherboard resources [DMA] Resource Channel 4 Device Status Direct memory access controller OK

[Forced Hardware] Device PNP Device ID [I/O] Resource Device 0x00000062-0x00000062 0x00000066-0x00000066 0x00002000-0x00002FFF ort 3 - 1E14 OK 0x0000DF00-0x0000DFFF 0x0000D000-0x0000DFFF ort 4 - 1E16 OK 0x00000454-0x00000457 0x00000020-0x00000021 0x00000024-0x00000025 0x00000028-0x00000029 0x0000002C-0x0000002D 0x00000030-0x00000031 0x00000034-0x00000035 0x00000038-0x00000039 0x0000003C-0x0000003D 0x000000A0-0x000000A1 0x000000A4-0x000000A5 0x000000A8-0x000000A9 0x000000AC-0x000000AD 0x000000B0-0x000000B1 0x000000B4-0x000000B5 0x000000B8-0x000000B9 0x000000BC-0x000000BD 0x000004D0-0x000004D1 0x0000EFA0-0x0000EFBF ler - 1E22 OK 0x00000040-0x00000043 0x00000050-0x00000053 0x00004000-0x0000403F 0x000003B0-0x000003BB 0x000003C0-0x000003DF 0x00000000-0x0000001F 0x00000000-0x0000001F 0x00000081-0x00000091 0x00000093-0x0000009F 0x000000C0-0x000000DF Status Microsoft ACPI-Compliant Embedded Controller OK Microsoft ACPI-Compliant Embedded Controller OK Intel(R) 7 Series/C216 Chipset Family PCI Express Root P Realtek PCIe GBE Family Controller OK Intel(R) 7 Series/C216 Chipset Family PCI Express Root P Motherboard resources Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Programmable interrupt Intel(R) 7 Series/C216 System timer OK System timer OK Intel(R) HD Graphics Intel(R) HD Graphics Intel(R) HD Graphics Direct memory access PCI bus OK Direct memory access Direct memory access Direct memory access OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK controller OK Chipset Family SMBus Host Control

3000 3000 3000 controller

OK OK OK OK

controller OK controller OK controller OK

0x00000060-0x00000060 0x00000064-0x00000064 0x00000D00-0x0000FFFF 0x00004088-0x0000408F OK 0x00004094-0x00004097 OK 0x00004080-0x00004087 OK 0x00004090-0x00004093 OK 0x00004060-0x0000407F OK 0x00000070-0x00000077 0x00000070-0x00000077 0x00003000-0x00003FFF ort 1 - 1E10 OK 0x0000002E-0x0000002F 0x0000004E-0x0000004F 0x00000061-0x00000061 0x00000063-0x00000063 0x00000065-0x00000065 0x00000067-0x00000067 0x00000080-0x00000080 0x00000092-0x00000092 0x000000B2-0x000000B3 0x00000680-0x0000069F 0x00000800-0x0000080F 0x0000FFFF-0x0000FFFF 0x0000FFFF-0x0000FFFF 0x00000400-0x00000453 0x00000458-0x0000047F 0x00000500-0x0000057F 0x0000164E-0x0000164F 0x00000068-0x0000006F 0x000006A4-0x000006A4 0x000006A0-0x000006A0 0x000000F0-0x000000F0 [IRQs]

Standard PS/2 Keyboard OK Standard PS/2 Keyboard OK PCI bus OK Intel(R) 7 Series Chipset Family SATA AHCI Controller Intel(R) 7 Series Chipset Family SATA AHCI Controller Intel(R) 7 Series Chipset Family SATA AHCI Controller Intel(R) 7 Series Chipset Family SATA AHCI Controller Intel(R) 7 Series Chipset Family SATA AHCI Controller System CMOS/real time clock OK Motherboard resources OK Intel(R) 7 Series/C216 Chipset Family PCI Express Root P Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Motherboard resources Numeric data processor OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK

Resource Device Status IRQ 17 Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 2 - 1E12 OK IRQ 16 Intel(R) Management Engine Interface OK IRQ 16 Intel(R) 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E2 D OK IRQ 16 Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 1 - 1E10 OK IRQ 18 Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 3 - 1E14 OK IRQ 4294967294 Realtek PCIe GBE Family Controller OK IRQ 19 Intel(R) 7 Series/C216 Chipset Family PCI Express Root Port 4 - 1E16 OK IRQ 19 Intel(R) 7 Series Chipset Family SATA AHCI Controller OK IRQ 4294967290 Intel(R) Centrino(R) Advanced-N 6205 OK IRQ 22 High Definition Audio Controller OK IRQ 12 ThinkPad UltraNav Pointing Device OK IRQ 81 Microsoft ACPI-Compliant System OK IRQ 82 Microsoft ACPI-Compliant System OK

IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ

83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142

Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft Microsoft

ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant ACPI-Compliant

System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System System

OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK OK

IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ IRQ OK IRQ IRQ IRQ 6 IRQ IRQ IRQ IRQ

143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 7

Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Microsoft ACPI-Compliant System OK Intel(R) 7 Series/C216 Chipset Family SMBus Host Controller - 1E22

0 System timer OK 4294967293 Intel(R) HD Graphics 3000 OK 23 Intel(R) 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E2 OK 1 Standard PS/2 Keyboard OK 8 System CMOS/real time clock OK 4294967292 Intel(R) USB 3.0 eXtensible Host Controller OK 13 Numeric data processor OK

[Memory]

Resource Device Status 0xF1D00000-0xF1DFFFFF Intel(R) 7 Series/C216 Chipset Family PCI Express Root P ort 2 - 1E12 OK 0xF1D00000-0xF1DFFFFF Intel(R) Centrino(R) Advanced-N 6205 OK 0xF2615000-0xF261500F Intel(R) Management Engine Interface OK 0xF1500000-0xF1CFFFFF Intel(R) 7 Series/C216 Chipset Family PCI Express Root P ort 3 - 1E14 OK 0xF0C00000-0xF13FFFFF Intel(R) 7 Series/C216 Chipset Family PCI Express Root P ort 3 - 1E14 OK 0xFF000000-0xFFFFFFFF Intel(R) 82802 Firmware Hub Device OK 0xFF000000-0xFFFFFFFF Motherboard resources OK 0xF1404000-0xF1404FFF Realtek PCIe GBE Family Controller OK 0xF1400000-0xF1403FFF Realtek PCIe GBE Family Controller OK 0xF1400000-0xF1403FFF Intel(R) 7 Series/C216 Chipset Family PCI Express Root P ort 4 - 1E16 OK 0xFED40000-0xFED44FFF Trusted Platform Module 1.2 OK 0xF2610000-0xF2613FFF High Definition Audio Controller OK 0xF2614000-0xF26140FF Intel(R) 7 Series/C216 Chipset Family SMBus Host Control ler - 1E22 OK 0xFED00000-0xFED003FF High precision event timer OK 0xF0000000-0xF03FFFFF Intel(R) HD Graphics 3000 OK 0xE0000000-0xEFFFFFFF Intel(R) HD Graphics 3000 OK 0xA0000-0xBFFFF Intel(R) HD Graphics 3000 OK 0xA0000-0xBFFFF PCI bus OK 0xF2619000-0xF26193FF Intel(R) 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E26 OK 0xDFA00000-0xFEAFFFFF PCI bus OK 0xF2618000-0xF26187FF Intel(R) 7 Series Chipset Family SATA AHCI Controller OK 0xF261A000-0xF261A3FF Intel(R) 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E2D OK 0x20000000-0x201FFFFF System board OK 0x40000000-0x401FFFFF System board OK 0xFED1C000-0xFED1FFFF Motherboard resources OK 0xFED10000-0xFED17FFF Motherboard resources OK 0xFED18000-0xFED18FFF Motherboard resources OK 0xFED19000-0xFED19FFF Motherboard resources OK 0xF8000000-0xFBFFFFFF Motherboard resources OK 0xFED20000-0xFED3FFFF Motherboard resources OK 0xFED90000-0xFED93FFF Motherboard resources OK 0xFED45000-0xFED8FFFF Motherboard resources OK 0xFEE00000-0xFEEFFFFF Motherboard resources OK 0xFFFFF000-0xFFFFFFFF Motherboard resources OK 0xF1E00000-0xF25FFFFF Intel(R) 7 Series/C216 Chipset Family PCI Express Root P ort 1 - 1E10 OK 0xF0400000-0xF0BFFFFF Intel(R) 7 Series/C216 Chipset Family PCI Express Root P ort 1 - 1E10 OK 0xF2600000-0xF260FFFF Intel(R) USB 3.0 eXtensible Host Controller OK 0xFE800000-0xFE80FFFF Motherboard resources OK [Components]

[Multimedia]

[Audio Codecs]

CODEC Manufacturer Description Status File Version Size Creation Date c:\windows\system32\msg711.acm Microsoft Corporation OK C:\windo ws\system32\MSG711.ACM 6.1.7600.16385 14.50 KB (14,848 bytes) 7/14/2009 5:48 A M c:\windows\system32\imaadp32.acm Microsoft Corporation OK C:\windows\system32\IMAADP32.ACM 6.1.7600.16385 21.50 KB (22,016 bytes) 7/14/2009 5:48 AM c:\windows\system32\msgsm32.acm Microsoft Corporation OK C:\windo ws\system32\MSGSM32.ACM 6.1.7600.16385 28.50 KB (29,184 bytes) 7/14/2009 5:48 A M c:\windows\system32\msadp32.acm Microsoft Corporation OK C:\windo ws\system32\MSADP32.ACM 6.1.7600.16385 23.50 KB (24,064 bytes) 7/14/2009 5:48 A M c:\windows\system32\l3codeca.acm Fraunhofer Institut Integrierte Schaltun gen IIS Fraunhofer IIS MPEG Layer-3 Codec OK C:\windows\system32\L3CO DECA.ACM 1.9.0.401 79.50 KB (81,408 bytes) 7/14/2009 5:52 AM [Video Codecs] CODEC Manufacturer Description Status File Version Size Creation Date c:\windows\system32\msvidc32.dll Microsoft Corporation OK C:\windows\system32\MSVIDC32.DLL 6.1.7601.17514 38.00 KB (38,912 bytes) 3/19/2011 3:23 AM c:\windows\system32\msrle32.dll Microsoft Corporation OK C:\windo ws\system32\MSRLE32.DLL 6.1.7601.17514 16.00 KB (16,384 bytes) 3/19/2011 3:23 A M c:\windows\system32\msyuv.dll Microsoft Corporation OK C:\windo ws\system32\MSYUV.DLL 6.1.7601.17514 25.00 KB (25,600 bytes) 3/19/2011 3:23 A M c:\windows\system32\iyuv_32.dll Microsoft Corporation OK C:\windo ws\system32\IYUV_32.DLL 6.1.7601.17514 53.00 KB (54,272 bytes) 3/19/2011 3:23 A M c:\windows\system32\tsbyuv.dll Microsoft Corporation OK C:\windo ws\system32\TSBYUV.DLL 6.1.7601.17514 14.50 KB (14,848 bytes) 3/19/2011 3:23 A M [CD-ROM] Item Value

[Sound Device] Item Value Name Realtek High Definition Audio Manufacturer Realtek Status OK PNP Device ID HDAUDIO\FUNC_01&VEN_10EC&DEV_0269&SUBSYS_17AA21F7&REV_1002\4&348 C00AB&0&0001 Driver c:\windows\system32\drivers\rtkvhd64.sys (6.0.1.6895, 3.23 MB (3,388,744 bytes), 8/23/2013 10:01 AM) Name Intel(R) Display Audio Manufacturer Intel(R) Corporation Status OK PNP Device ID HDAUDIO\FUNC_01&VEN_8086&DEV_2806&SUBSYS_80860101&REV_1000\4&348 C00AB&0&0301 Driver c:\windows\system32\drivers\intcdaud.sys (6.14.0.3097, 334.50 KB (342,52

8 bytes), 5/4/2013 11:02 AM) [Display] Item Value Name Intel(R) HD Graphics 3000 PNP Device ID PCI\VEN_8086&DEV_0126&SUBSYS_21F717AA&REV_09\3&11583659&0&10 Adapter Type Intel(R) HD Graphics Family, Intel Corporation compatible Adapter Description Intel(R) HD Graphics 3000 Adapter RAM (2,084,569,088) bytes Installed Drivers igdumd64.dll,igd10umd64.dll,igd10umd64.dll,igdumd32,igd1 0umd32,igd10umd32 Driver Version 9.17.10.2843 INF File oem163.inf (iSNBM0 section) Color Planes Not Available Color Table Entries 4294967296 Resolution 1366 x 768 x 50 hertz Bits/Pixel 32 Memory Address 0xF0000000-0xF03FFFFF Memory Address 0xE0000000-0xEFFFFFFF I/O Port 0x00004000-0x0000403F IRQ Channel IRQ 4294967293 I/O Port 0x000003B0-0x000003BB I/O Port 0x000003C0-0x000003DF Memory Address 0xA0000-0xBFFFF Driver c:\windows\system32\drivers\igdkmd64.sys (9.17.10.2843, 8.58 MB (9,000,2 56 bytes), 2/19/2013 8:34 PM) [Infrared] Item [Input] Value

[Keyboard] Item Value Description Standard PS/2 Keyboard Name Enhanced (101- or 102-key) Layout 00000409 PNP Device ID ACPI\PNP0303\4&258A662B&0 Number of Function Keys 12 I/O Port 0x00000060-0x00000060 I/O Port 0x00000064-0x00000064 IRQ Channel IRQ 1 Driver c:\windows\system32\drivers\i8042prt.sys (6.1.7600.16385, 103.00 KB (105 ,472 bytes), 7/14/2009 4:49 AM) [Pointing Device] Item Value Hardware Type USB Input Device Number of Buttons 0 Status OK PNP Device ID USB\VID_046D&PID_C52F&MI_00\7&3748C5D2&0&0000 Power Management Supported No Double Click Threshold Not Available Handedness Not Available

Driver c:\windows\system32\drivers\hidusb.sys (6.1.7601.17514, 29.50 KB (30,208 bytes), 3/19/2011 3:22 AM) Hardware Type ThinkPad UltraNav Pointing Device Number of Buttons 0 Status OK PNP Device ID ACPI\LEN0040\4&258A662B&0 Power Management Supported No Double Click Threshold Not Available Handedness Not Available IRQ Channel IRQ 12 Driver c:\windows\system32\drivers\i8042prt.sys (6.1.7600.16385, 103.00 KB (105 ,472 bytes), 7/14/2009 4:49 AM) [Modem] Item Value

[Network]

[Adapter] Item Value Name [00000000] WAN Miniport (SSTP) Adapter Type Not Available Product Type WAN Miniport (SSTP) Installed Yes PNP Device ID ROOT\MS_SSTPMINIPORT\0000 Last Reset 12/4/2013 9:04 AM Index 0 Service Name RasSstp IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\rassstp.sys (6.1.7600.16385, 82.00 KB (83,96 8 bytes), 7/14/2009 5:40 AM) Name [00000001] WAN Miniport (IKEv2) Adapter Type Not Available Product Type WAN Miniport (IKEv2) Installed Yes PNP Device ID ROOT\MS_AGILEVPNMINIPORT\0000 Last Reset 12/4/2013 9:04 AM Index 1 Service Name RasAgileVpn IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available

Driver c:\windows\system32\drivers\agilevpn.sys (6.1.7600.16385, 59.00 KB (60,4 16 bytes), 7/14/2009 5:40 AM) Name [00000002] WAN Miniport (L2TP) Adapter Type Not Available Product Type WAN Miniport (L2TP) Installed Yes PNP Device ID ROOT\MS_L2TPMINIPORT\0000 Last Reset 12/4/2013 9:04 AM Index 2 Service Name Rasl2tp IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\rasl2tp.sys (6.1.7601.17514, 126.50 KB (129, 536 bytes), 3/19/2011 3:24 AM) Name [00000003] WAN Miniport (PPTP) Adapter Type Not Available Product Type WAN Miniport (PPTP) Installed Yes PNP Device ID ROOT\MS_PPTPMINIPORT\0000 Last Reset 12/4/2013 9:04 AM Index 3 Service Name PptpMiniport IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\raspptp.sys (6.1.7601.17514, 108.50 KB (111, 104 bytes), 3/19/2011 3:24 AM) Name [00000004] WAN Miniport (PPPOE) Adapter Type Not Available Product Type WAN Miniport (PPPOE) Installed Yes PNP Device ID ROOT\MS_PPPOEMINIPORT\0000 Last Reset 12/4/2013 9:04 AM Index 4 Service Name RasPppoe IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\raspppoe.sys (6.1.7600.16385, 90.50 KB (92,6 72 bytes), 7/14/2009 5:40 AM)

Name [00000005] WAN Miniport (IPv6) Adapter Type Not Available Product Type WAN Miniport (IPv6) Installed Yes PNP Device ID ROOT\MS_NDISWANIPV6\0000 Last Reset 12/4/2013 9:04 AM Index 5 Service Name NdisWan IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\ndiswan.sys (6.1.7601.17514, 160.50 KB (164, 352 bytes), 3/19/2011 3:24 AM) Name [00000006] WAN Miniport (Network Monitor) Adapter Type Not Available Product Type WAN Miniport (Network Monitor) Installed Yes PNP Device ID ROOT\MS_NDISWANBH\0000 Last Reset 12/4/2013 9:04 AM Index 6 Service Name NdisWan IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\ndiswan.sys (6.1.7601.17514, 160.50 KB (164, 352 bytes), 3/19/2011 3:24 AM) Name [00000007] Realtek PCIe GBE Family Controller Adapter Type Ethernet 802.3 Product Type Realtek PCIe GBE Family Controller Installed Yes PNP Device ID PCI\VEN_10EC&DEV_8168&SUBSYS_21F717AA&REV_07\4&1B248392&0&00E3 Last Reset 12/4/2013 9:04 AM Index 7 Service Name RTL8167 IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled Yes DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address 3C:97:0E:3E:A9:2E I/O Port 0x0000DF00-0x0000DFFF Memory Address 0xF1404000-0xF1404FFF Memory Address 0xF1400000-0xF1403FFF IRQ Channel IRQ 4294967294 Driver c:\windows\system32\drivers\rt64win7.sys (7.50.1123.2011, 633.60 KB (648 ,808 bytes), 5/4/2013 11:03 AM)

Name [00000008] WAN Miniport (IP) Adapter Type Not Available Product Type WAN Miniport (IP) Installed Yes PNP Device ID ROOT\MS_NDISWANIP\0000 Last Reset 12/4/2013 9:04 AM Index 8 Service Name NdisWan IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\ndiswan.sys (6.1.7601.17514, 160.50 KB (164, 352 bytes), 3/19/2011 3:24 AM) Name [00000009] Microsoft ISATAP Adapter Adapter Type Tunnel Product Type Microsoft ISATAP Adapter Installed Yes PNP Device ID ROOT\*ISATAP\0003 Last Reset 12/4/2013 9:04 AM Index 9 Service Name tunnel IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\tunnel.sys (6.1.7601.17514, 122.50 KB (125,4 40 bytes), 3/19/2011 3:22 AM) Name [00000010] RAS Async Adapter Adapter Type Wide Area Network (WAN) Product Type RAS Async Adapter Installed Yes PNP Device ID SW\{EEAB7790-C514-11D1-B42B-00805FC1270E}\ASYNCMAC Last Reset 12/4/2013 9:04 AM Index 10 Service Name AsyncMac IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address 20:41:53:59:4E:FF Driver c:\windows\system32\drivers\asyncmac.sys (6.1.7600.16385, 22.50 KB (23,0 40 bytes), 7/14/2009 5:40 AM) Name [00000011] Microsoft Teredo Tunneling Adapter Adapter Type Tunnel

Product Type Microsoft Teredo Tunneling Adapter Installed Yes PNP Device ID ROOT\*TEREDO\0000 Last Reset 12/4/2013 9:04 AM Index 11 Service Name tunnel IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\tunnel.sys (6.1.7601.17514, 122.50 KB (125,4 40 bytes), 3/19/2011 3:22 AM) Name [00000012] Intel(R) Centrino(R) Advanced-N 6205 Adapter Type Ethernet 802.3 Product Type Intel(R) Centrino(R) Advanced-N 6205 Installed Yes PNP Device ID PCI\VEN_8086&DEV_0085&SUBSYS_13118086&REV_34\4&12DC5D99&0&00E1 Last Reset 12/4/2013 9:04 AM Index 12 Service Name NETwNs64 IP Address 192.168.1.4, fe80::8477:efbc:38b2:e0 IP Subnet 255.255.255.0, 64 Default IP Gateway 192.168.1.1 DHCP Enabled Yes DHCP Server 192.168.1.1 DHCP Lease Expires 12/7/2013 5:09 PM DHCP Lease Obtained 12/6/2013 5:09 PM MAC Address 60:67:20:B5:23:D8 Memory Address 0xF1D00000-0xF1DFFFFF IRQ Channel IRQ 4294967290 Driver c:\windows\system32\drivers\netwsw00.sys (15.3.1.2, 10.99 MB (11,523,072 bytes), 9/30/2012 11:24 AM) Name [00000013] Microsoft ISATAP Adapter Adapter Type Tunnel Product Type Microsoft ISATAP Adapter Installed Yes PNP Device ID ROOT\*ISATAP\0000 Last Reset 12/4/2013 9:04 AM Index 13 Service Name tunnel IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\tunnel.sys (6.1.7601.17514, 122.50 KB (125,4 40 bytes), 3/19/2011 3:22 AM) Name [00000014] Microsoft 6to4 Adapter Adapter Type Tunnel Product Type Microsoft 6to4 Adapter

Installed Yes PNP Device ID ROOT\*6TO4MP\0001 Last Reset 12/4/2013 9:04 AM Index 14 Service Name tunnel IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\tunnel.sys (6.1.7601.17514, 122.50 KB (125,4 40 bytes), 3/19/2011 3:22 AM) Name [00000015] AGN Virtual Network Adapter Adapter Type Not Available Product Type AGN Virtual Network Adapter Installed Yes PNP Device ID ROOT\NET\0000 Last Reset 12/4/2013 9:04 AM Index 15 Service Name avpnnic IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\avpnnic.sys (7.2.0.6401, 14.50 KB (14,848 by tes), 6/30/2010 4:52 AM) Name [00000016] Apple Mobile Device Ethernet Adapter Type Not Available Product Type Apple Mobile Device Ethernet Installed Yes PNP Device ID Not Available Last Reset 12/4/2013 9:04 AM Index 16 Service Name Netaapl IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled Yes DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Name [00000017] Mobility Client Virtual Adapter Adapter Type Not Available Product Type Mobility Client Virtual Adapter Installed Yes PNP Device ID ROOT\NET\0001 Last Reset 12/4/2013 9:04 AM Index 17 Service Name wcndis

IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled Yes DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\wcndis.sys (, 17.85 KB (18,280 bytes), 9/15/ 2010 6:16 PM) Name [00000018] Microsoft ISATAP Adapter Adapter Type Tunnel Product Type Microsoft ISATAP Adapter Installed Yes PNP Device ID ROOT\*ISATAP\0001 Last Reset 12/4/2013 9:04 AM Index 18 Service Name tunnel IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\tunnel.sys (6.1.7601.17514, 122.50 KB (125,4 40 bytes), 3/19/2011 3:22 AM) [Protocol] Item Value Name MSAFD Tcpip [TCP/IP] Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 16 bytes Maximum Message Size 0 bytes Message Oriented No Minimum Address Size 16 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data Yes Supports Graceful Closing Yes Supports Guaranteed Bandwidth No Supports Multicasting No Name MSAFD Tcpip [UDP/IP] Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 16 bytes Maximum Message Size 63.99 KB (65,527 bytes) Message Oriented Yes Minimum Address Size 16 bytes Pseudo Stream Oriented No

Supports Supports Supports Supports Supports Supports Supports Supports

Broadcasting Yes Connect Data No Disconnect Data Encryption No Expedited Data No Graceful Closing Guaranteed Bandwidth Multicasting Yes

No No No

Name MSAFD Tcpip [TCP/IPv6] Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 28 bytes Maximum Message Size 0 bytes Message Oriented No Minimum Address Size 28 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data Yes Supports Graceful Closing Yes Supports Guaranteed Bandwidth No Supports Multicasting No Name MSAFD Tcpip [UDP/IPv6] Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 28 bytes Maximum Message Size 63.99 KB (65,527 bytes) Message Oriented Yes Minimum Address Size 28 bytes Pseudo Stream Oriented No Supports Broadcasting Yes Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth No Supports Multicasting Yes Name RSVP TCPv6 Service Provider Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 28 bytes Maximum Message Size 0 bytes Message Oriented No Minimum Address Size 28 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption Yes Supports Expedited Data Yes Supports Graceful Closing Yes

Supports Guaranteed Bandwidth Supports Multicasting No

No

Name RSVP TCP Service Provider Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 16 bytes Maximum Message Size 0 bytes Message Oriented No Minimum Address Size 16 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption Yes Supports Expedited Data Yes Supports Graceful Closing Yes Supports Guaranteed Bandwidth No Supports Multicasting No Name RSVP UDPv6 Service Provider Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 28 bytes Maximum Message Size 63.99 KB (65,527 bytes) Message Oriented Yes Minimum Address Size 28 bytes Pseudo Stream Oriented No Supports Broadcasting Yes Supports Connect Data No Supports Disconnect Data No Supports Encryption Yes Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth No Supports Multicasting Yes Name RSVP UDP Service Provider Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 16 bytes Maximum Message Size 63.99 KB (65,527 bytes) Message Oriented Yes Minimum Address Size 16 bytes Pseudo Stream Oriented No Supports Broadcasting Yes Supports Connect Data No Supports Disconnect Data No Supports Encryption Yes Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth No Supports Multicasting Yes [WinSock] Item Value

File c:\windows\syswow64\wsock32.dll Size 15.00 KB (15,360 bytes) Version 6.1.7600.16385 File c:\windows\system32\wsock32.dll Size 18.00 KB (18,432 bytes) Version 6.1.7600.16385 [Ports]

[Serial] Item Value

[Parallel] Item Value

[Storage]

[Drives] Item Value Drive C: Description Local Fixed Disk Compressed No File System NTFS Size 298.09 GB (320,070,479,872 bytes) Free Space 186.49 GB (200,239,620,096 bytes) Volume Name SANLAX Volume Serial Number 22449FDD Drive F: Description Local Fixed Disk Compressed No File System NTFS Size 931.51 GB (1,000,202,039,296 bytes) Free Space 695.08 GB (746,339,954,688 bytes) Volume Name Seagate Backup Plus Drive Volume Serial Number 1CC3FA47 [Disks] Item Value Description Disk drive Manufacturer (Standard disk drives) Model HITACHI HTS723232A7A364 Bytes/Sector 512 Media Loaded Yes Media Type Fixed hard disk Partitions 1 SCSI Bus 0 SCSI Logical Unit 0 SCSI Port 0 SCSI Target ID 0 Sectors/Track 63

Size 298.09 GB (320,070,320,640 bytes) Total Cylinders 38,913 Total Sectors 625,137,345 Total Tracks 9,922,815 Tracks/Cylinder 255 Partition Disk #0, Partition #0 Partition Size 298.09 GB (320,070,483,968 bytes) Partition Starting Offset 1,048,576 bytes Description Disk drive Manufacturer (Standard disk drives) Model Seagate Backup+ BL USB Device Bytes/Sector 512 Media Loaded Yes Media Type Removable media Partitions 1 SCSI Bus Not Available SCSI Logical Unit Not Available SCSI Port Not Available SCSI Target ID Not Available Sectors/Track 63 Size 931.51 GB (1,000,202,273,280 bytes) Total Cylinders 121,601 Total Sectors 1,953,520,065 Total Tracks 31,008,255 Tracks/Cylinder 255 Partition Disk #1, Partition #0 Partition Size 931.51 GB (1,000,202,043,392 bytes) Partition Starting Offset 1,048,576 bytes [SCSI] Item [IDE] Item Value Name Intel(R) 7 Series Chipset Family SATA AHCI Controller Manufacturer Intel Status OK PNP Device ID PCI\VEN_8086&DEV_1E03&SUBSYS_21F717AA&REV_04\3&11583659&0&FA I/O Port 0x00004088-0x0000408F I/O Port 0x00004094-0x00004097 I/O Port 0x00004080-0x00004087 I/O Port 0x00004090-0x00004093 I/O Port 0x00004060-0x0000407F Memory Address 0xF2618000-0xF26187FF IRQ Channel IRQ 19 Driver c:\windows\system32\drivers\iastor.sys (11.2.0.1006, 555.81 KB (569,152 bytes), 5/4/2013 11:03 AM) [Printing] Name Driver Port Name Server Name Snagit 11 Snagit 11 Printer C:\ProgramData\TechSmith\Snagit 11\Print erPortFile Not Available inbega34-Work Room B2-3-EGL-A-Bangalore Canon iR2525 PS3 IP_9.182.91.12 Not Available Fax Microsoft Shared Fax Driver SHRFAX: Not Available CutePDF Writer CutePDF Writer CPW2: Not Available Value

[Problem Devices] Device PNP Device ID Error Code AGN Virtual Network Adapter ROOT\NET\0000 This device is disabled. Mobility Client Virtual Adapter ROOT\NET\0001 This device is disabled. Integrated Camera USB\VID_04F2&PID_B2EA&MI_00\7&2F653659&0&0000 This dev ice is working properly. [USB] Device PNP Device ID Intel(R) 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E26 PCI\VEN_8086&DEV_1E26&SUBSYS_21F717AA&REV_04\3&11583659&0&E8 Intel(R) 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E2D PCI\VEN_8086&DEV_1E2D&SUBSYS_21F717AA&REV_04\3&11583659&0&D0 Intel(R) USB 3.0 eXtensible Host Controller PCI\VEN_8086&DEV_1E31&SUBSYS_21F 717AA&REV_04\3&11583659&0&A0 [Software Environment]

[System Drivers] Name Description File Type Started Start Mode State Status Error Control Accept Pause Accept Stop 1394ohci 1394 OHCI Compliant Host Controller c:\windows\system32\driv ers\1394ohci.sys Kernel Driver No Manual Stopped OK Normal No No 5u877 5U877 c:\windows\system32\drivers\5u877.sys Kernel Driver No Manual Stopped OK Normal No No acpi Microsoft ACPI Driver c:\windows\system32\drivers\acpi.sys Kernel D river Yes Boot Running OK Critical No Yes acpipmi ACPI Power Meter Driver c:\windows\system32\drivers\acpipmi.sys Kernel D river No Manual Stopped OK Normal No No adp94xx adp94xx c:\windows\system32\drivers\adp94xx.sys Kernel Driver No Manual Stopped OK Normal No No adpahci adpahci c:\windows\system32\drivers\adpahci.sys Kernel Driver No Manual Stopped OK Normal No No adpu320 adpu320 c:\windows\system32\drivers\adpu320.sys Kernel Driver No Manual Stopped OK Normal No No afd Ancillary Function Driver for Winsock c:\windows\system32\drivers\afd. sys Kernel Driver Yes System Running OK Normal No Yes agnfilt AGN Filter Interface (LWF) c:\windows\system32\drivers\agnfilt.sys Kernel Driver Yes System Running OK Normal No Yes agp440 Intel AGP Bus Filter c:\windows\system32\drivers\agp440.sys Kernel D river No Manual Stopped OK Normal No No aliide aliide c:\windows\system32\drivers\aliide.sys Kernel Driver No Manual Stopped OK Critical No No amdide amdide c:\windows\system32\drivers\amdide.sys Kernel Driver No Manual Stopped OK Critical No No amdk8 AMD K8 Processor Driver c:\windows\system32\drivers\amdk8.sys Kernel D river No Manual Stopped OK Normal No No amdppm AMD Processor Driver c:\windows\system32\drivers\amdppm.sys Kernel D river No Manual Stopped OK Normal No No amdsata amdsata c:\windows\system32\drivers\amdsata.sys Kernel Driver No Manual Stopped OK Normal No No amdsbs amdsbs c:\windows\system32\drivers\amdsbs.sys Kernel Driver No Manual Stopped OK Normal No No

amdxata amdxata c:\windows\system32\drivers\amdxata.sys Kernel Driver Yes Boot Running OK Normal No Yes amppal Intel Centrino Wireless Bluetooth + High Speed Virtual Adapter c:\windo ws\system32\drivers\amppal.sys Kernel Driver Yes Manual Running OK Normal No Yes amppalp Intel Centrino Wireless Bluetooth + High Speed Protocol c:\windows\syste m32\drivers\amppal.sys Kernel Driver No Manual Stopped OK Normal No No appid AppID Driver c:\windows\system32\drivers\appid.sys Kernel Driver No Manual Stopped OK Normal No No arc arc c:\windows\system32\drivers\arc.sys Kernel Driver No Manual Stopped OK Normal No No arcsas arcsas c:\windows\system32\drivers\arcsas.sys Kernel Driver No Manual Stopped OK Normal No No asyncmac RAS Asynchronous Media Driver c:\windows\system32\drivers\asyn cmac.sys Kernel Driver Yes Manual Running OK Normal No Yes atapi IDE Channel c:\windows\system32\drivers\atapi.sys Kernel Driver No Manual Stopped OK Critical No No avpnnic AGN Virtual Network Adapter c:\windows\system32\drivers\avpnnic.sys Kernel Driver No Manual Stopped OK Normal No No b06bdrv Broadcom NetXtreme II VBD c:\windows\system32\drivers\bxvbda.sys Kernel Driver No Manual Stopped OK Normal No No b57nd60a Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 c:\windows\syste m32\drivers\b57nd60a.sys Kernel Driver No Manual Stopped OK Normal No No beep Beep c:\windows\system32\drivers\beep.sys Kernel Driver Yes System Running OK Normal No Yes bhdrvx64 BHDrvx64 \??\c:\programdata\symantec\symantec endpoint pr otection\12.1.2015.2015.105\data\definitions\bashdefs\20131114.011\bhdrvx64.sys Kernel Driver Yes System Running OK Normal No Yes blbdrive blbdrive c:\windows\system32\drivers\blbdrive.sys Kernel Driver Yes System Running OK Normal No Yes bowser Browser Support Driver c:\windows\system32\drivers\bowser.sys File Sys tem Driver Yes Manual Running OK Normal No Yes brfiltlo Brother USB Mass-Storage Lower Filter Driver c:\windows\syste m32\drivers\brfiltlo.sys Kernel Driver No Manual Stopped OK Normal No No brfiltup Brother USB Mass-Storage Upper Filter Driver c:\windows\syste m32\drivers\brfiltup.sys Kernel Driver No Manual Stopped OK Normal No No brserid Brother MFC Serial Port Interface Driver (WDM) c:\windows\system32\driv ers\brserid.sys Kernel Driver No Manual Stopped OK Normal No No brserwdm Brother WDM Serial driver c:\windows\system32\drivers\brse rwdm.sys Kernel Driver No Manual Stopped OK Normal No No brusbmdm Brother MFC USB Fax Only Modem c:\windows\system32\drivers\brus bmdm.sys Kernel Driver No Manual Stopped OK Normal No No brusbser Brother MFC USB Serial WDM Driver c:\windows\system32\driv ers\brusbser.sys Kernel Driver No Manual Stopped OK Normal No No bthmodem Bluetooth Serial Communications Driver c:\windows\system32\driv ers\bthmodem.sys Kernel Driver No Manual Stopped OK Normal No No btwampfl btwampfl Bluetooth filter driver \??\c:\windows\system32\ drivers\btwampfl.sys Kernel Driver No Manual Stopped OK Normal No No btwavdt Bluetooth AVDT c:\windows\system32\drivers\btwavdt.sys Kernel Driver

No Manual Stopped OK Ignore No No btwrchid btwrchid c:\windows\system32\drivers\btwrchid.sys Kernel Driver No Manual Stopped OK Ignore No No ccsettings_{3771a34d-2132-48ea-a486-d62ecdf9d553} Symantec Endpoint Protec tion 12.1.2015.2015.105 Settings Manager c:\windows\system32\drivers\sep\ 0c0107df\07df.105\x64\ccsetx64.sys Kernel Driver Yes System Running OK Normal No Yes cdfs CD/DVD File System Reader c:\windows\system32\drivers\cdfs.sys File System Driver No Disabled Stopped OK Normal No No cdrom CD-ROM Driver c:\windows\system32\drivers\cdrom.sys Kernel Driver No System Stopped OK Normal No No circlass Consumer IR Devices c:\windows\system32\drivers\circlass.sys Kernel Driver No Manual Stopped OK Normal No No clfs Common Log (CLFS) c:\windows\system32\clfs.sys Kernel Driver Yes Boot Running OK Critical No Yes cmbatt Microsoft ACPI Control Method Battery Driver c:\windows\system32\driv ers\cmbatt.sys Kernel Driver Yes Manual Running OK Normal No Yes cmdide cmdide c:\windows\system32\drivers\cmdide.sys Kernel Driver No Manual Stopped OK Critical No No cng CNG c:\windows\system32\drivers\cng.sys Kernel Driver Yes Boot Running OK Critical No Yes compbatt Microsoft Composite Battery Driver c:\windows\system32\driv ers\compbatt.sys Kernel Driver Yes Boot Running OK Critical No Yes compositebus Composite Bus Enumerator Driver c:\windows\system32\drivers\comp ositebus.sys Kernel Driver Yes Manual Running OK Normal No Yes crcdisk Crcdisk Filter Driver c:\windows\system32\drivers\crcdisk.sys Kernel D river No Disabled Stopped OK Normal No No csc Offline Files Driver c:\windows\system32\drivers\csc.sys Kernel D river Yes System Running OK Normal No Yes dfsc DFS Namespace Client Driver c:\windows\system32\drivers\dfsc.sys File System Driver Yes System Running OK Normal No Yes discache System Attribute Cache c:\windows\system32\drivers\discache.sys Kernel Driver Yes System Running OK Normal No Yes disk Disk Driver c:\windows\system32\drivers\disk.sys Kernel Driver Yes Boot Running OK Normal No Yes dmvsc dmvsc c:\windows\system32\drivers\dmvsc.sys Kernel Driver No Manual Stopped OK Ignore No No drmkaud Microsoft Trusted Audio Drivers c:\windows\system32\drivers\drmkaud.sys Kernel Driver No Manual Stopped OK Normal No No dxgkrnl LDDM Graphics Subsystem c:\windows\system32\drivers\dxgkrnl.sys Kernel D river Yes Manual Running OK Ignore No Yes dzhdd64 DzHDD64 c:\windows\system32\drivers\dzhdd64.sys Kernel Driver Yes Boot Running OK Normal No Yes e1g60 Intel(R) PRO/1000 NDIS 6 Adapter Driver c:\windows\system32\drivers\e1g6 032e.sys Kernel Driver No Manual Stopped OK Normal No No e1kexpress Intel(R) PRO/1000 PCI Express Network Connection Driver K c:\windows\system32\drivers\e1k60x64.sys Kernel Driver No Manual Stopped OK Normal No No ebdrv Broadcom NetXtreme II 10 GigE VBD c:\windows\system32\drivers\evbd a.sys Kernel Driver No Manual Stopped OK Normal No No eectrl Symantec Eraser Control driver \??\c:\program files (x86)\common files\ symantec shared\eengine\eectrl64.sys Kernel Driver Yes System Running OK Normal No Yes elxstor elxstor c:\windows\system32\drivers\elxstor.sys Kernel Driver No Manual Stopped OK Normal No No

eraserutilrebootdrv EraserUtilRebootDrv \??\c:\program files (x86)\commo n files\symantec shared\eengine\eraserutilrebootdrv.sys Kernel Driver Yes Manual Running OK Normal No Yes errdev Microsoft Hardware Error Device Driver c:\windows\system32\drivers\errd ev.sys Kernel Driver No Manual Stopped OK Normal No No etd ELAN PS/2 Port Input Device c:\windows\system32\drivers\etd.sys Kernel Driver Yes Manual Running OK Ignore No Yes exfat exFAT File System Driver c:\windows\system32\drivers\exfat.sys File System Driver No Manual Stopped OK Normal No No fastfat FAT12/16/32 File System Driver c:\windows\system32\drivers\fastfat.sys File System Driver No Manual Stopped OK Normal No No fdc Floppy Disk Controller Driver c:\windows\system32\drivers\fdc.sys Kernel Driver No Manual Stopped OK Normal No No fileinfo File Information FS MiniFilter c:\windows\system32\drivers\file info.sys File System Driver Yes Boot Running OK Normal No Yes filetrace Filetrace c:\windows\system32\drivers\filetrace.sys File System Driver No Manual Stopped OK Normal No No flpydisk Floppy Disk Driver c:\windows\system32\drivers\flpydisk.sys Kernel Driver No Manual Stopped OK Normal No No fltmgr FltMgr c:\windows\system32\drivers\fltmgr.sys File System Driver Yes Boot Running OK Critical No Yes fsdepends File System Dependency Minifilter c:\windows\system32\driv ers\fsdepends.sys File System Driver No Manual Stopped OK Critical No No fvevol Bitlocker Drive Encryption Filter Driver c:\windows\system32\driv ers\fvevol.sys Kernel Driver Yes Boot Running OK Critical No Yes gagp30kx Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms c:\windows\system32\drivers\gagp30kx.sys Kernel Driver No Manual Stopped OK Normal No No gearaspiwdm GEAR ASPI Filter Driver c:\windows\system32\drivers\gearaspiwdm. sys Kernel Driver No Manual Stopped OK Normal No No hcw85cir Hauppauge Consumer Infrared Receiver c:\windows\system32\driv ers\hcw85cir.sys Kernel Driver No Manual Stopped OK Normal No No hdaudaddservice Microsoft 1.1 UAA Function Driver for High Definition Audio Serv ice c:\windows\system32\drivers\hdaudio.sys Kernel Driver No Manual Stopped OK Normal No No hdaudbus Microsoft UAA Bus Driver for High Definition Audio c:\windo ws\system32\drivers\hdaudbus.sys Kernel Driver Yes Manual Running OK Normal No Yes hecix64 Intel(R) Management Engine Interface c:\windows\system32\drivers\heci x64.sys Kernel Driver No Manual Stopped OK Normal No No hidbatt HID UPS Battery Driver c:\windows\system32\drivers\hidbatt.sys Kernel D river No Manual Stopped OK Normal No No hidbth Microsoft Bluetooth HID Miniport c:\windows\system32\drivers\hidb th.sys Kernel Driver No Manual Stopped OK Ignore No No hidir Microsoft Infrared HID Driver c:\windows\system32\drivers\hidir.sys Kernel Driver No Manual Stopped OK Ignore No No hidusb Microsoft HID Class Driver c:\windows\system32\drivers\hidusb.sys Kernel Driver Yes Manual Running OK Ignore No Yes hpsamd HpSAMD c:\windows\system32\drivers\hpsamd.sys Kernel Driver No Manual Stopped OK Normal No No http HTTP c:\windows\system32\drivers\http.sys Kernel Driver Yes Manual Running OK Normal No Yes hwpolicy Hardware Policy Driver c:\windows\system32\drivers\hwpolicy.sys Kernel Driver Yes Boot Running OK Normal No Yes i8042prt i8042 Keyboard and PS/2 Mouse Port Driver c:\windows\syste m32\drivers\i8042prt.sys Kernel Driver Yes Manual Running OK

Normal No Yes iastor Intel AHCI Controller c:\windows\system32\drivers\iastor.sys Kernel D river Yes Boot Running OK Normal No Yes iastorv iaStorV c:\windows\system32\drivers\iastorv.sys Kernel Driver No Manual Stopped OK Normal No No ibmpmdrv IBMPMDRV c:\windows\system32\drivers\ibmpmdrv.sys Kernel Driver Yes Manual Running OK Ignore No Yes idsvia64 IDSVia64 \??\c:\programdata\symantec\symantec endpoint pr otection\12.1.2015.2015.105\data\definitions\ipsdefs\20131205.011\idsvia64.sys Kernel Driver Yes System Running OK Normal No Yes igfx igfx c:\windows\system32\drivers\igdkmd64.sys Kernel Driver Yes Manual Running OK Ignore No Yes iirsp iirsp c:\windows\system32\drivers\iirsp.sys Kernel Driver No Manual Stopped OK Normal No No intcazaudaddservice Service for Realtek HD Audio (WDM) c:\windows\syste m32\drivers\rtkvhd64.sys Kernel Driver Yes Manual Running OK Normal No Yes intcdaud Intel(R) Display Audio c:\windows\system32\drivers\intcdaud.sys Kernel Driver Yes Manual Running OK Normal No Yes intelide intelide c:\windows\system32\drivers\intelide.sys Kernel Driver No Manual Stopped OK Critical No No intelppm Intel Processor Driver c:\windows\system32\drivers\intelppm.sys Kernel Driver Yes Manual Running OK Normal No Yes ipfilterdriver IP Traffic Filter Driver c:\windows\system32\drivers\ipfl tdrv.sys Kernel Driver No Manual Stopped OK Normal No No ipmidrv IPMIDRV c:\windows\system32\drivers\ipmidrv.sys Kernel Driver No Manual Stopped OK Normal No No ipnat IP Network Address Translator c:\windows\system32\drivers\ipnat.sys Kernel Driver No Manual Stopped OK Normal No No irenum IR Bus Enumerator c:\windows\system32\drivers\irenum.sys Kernel D river No Manual Stopped OK Ignore No No isapnp isapnp c:\windows\system32\drivers\isapnp.sys Kernel Driver No Manual Stopped OK Critical No No iscsiprt iScsiPort Driver c:\windows\system32\drivers\msiscsi.sys Kernel Driver No Manual Stopped OK Normal No No iusb3hcs Intel(R) USB 3.0 Host Controller Switch Driver c:\windows\syste m32\drivers\iusb3hcs.sys Kernel Driver Yes Boot Running OK Normal No Yes iusb3hub Intel(R) USB 3.0 Hub Driver c:\windows\system32\drivers\iusb 3hub.sys Kernel Driver Yes Manual Running OK Normal No Yes iusb3xhc Intel(R) USB 3.0 eXtensible Host Controller Driver c:\windo ws\system32\drivers\iusb3xhc.sys Kernel Driver Yes Manual Running OK Normal No Yes kbdclass Keyboard Class Driver c:\windows\system32\drivers\kbdclass.sys Kernel Driver Yes Manual Running OK Normal No Yes kbdhid Keyboard HID Driver c:\windows\system32\drivers\kbdhid.sys Kernel D river No Manual Stopped OK Ignore No No ksecdd KSecDD c:\windows\system32\drivers\ksecdd.sys Kernel Driver Yes Boot Running OK Critical No Yes ksecpkg KSecPkg c:\windows\system32\drivers\ksecpkg.sys Kernel Driver Yes Boot Running OK Critical No Yes ksthunk Kernel Streaming Thunks c:\windows\system32\drivers\ksthunk.sys Kernel D river Yes Manual Running OK Normal No Yes lltdio Link-Layer Topology Discovery Mapper I/O Driver c:\windows\system32\driv ers\lltdio.sys Kernel Driver Yes Auto Running OK Normal No Yes lsi_fc LSI_FC c:\windows\system32\drivers\lsi_fc.sys Kernel Driver No Manual Stopped OK Normal No No

lsi_sas LSI_SAS c:\windows\system32\drivers\lsi_sas.sys Kernel Driver No Manual Stopped OK Normal No No lsi_sas2 LSI_SAS2 c:\windows\system32\drivers\lsi_sas2.sys Kernel Driver No Manual Stopped OK Normal No No lsi_scsi LSI_SCSI c:\windows\system32\drivers\lsi_scsi.sys Kernel Driver No Manual Stopped OK Normal No No luafv UAC File Virtualization c:\windows\system32\drivers\luafv.sys File Sys tem Driver Yes Auto Running OK Normal No Yes megasas megasas c:\windows\system32\drivers\megasas.sys Kernel Driver No Manual Stopped OK Normal No No megasr MegaSR c:\windows\system32\drivers\megasr.sys Kernel Driver No Manual Stopped OK Normal No No meix64 Intel(R) Management Engine Interface c:\windows\system32\drivers\heci x64.sys Kernel Driver Yes Manual Running OK Normal No Yes modem Modem c:\windows\system32\drivers\modem.sys Kernel Driver No Manual Stopped OK Ignore No No monitor Microsoft Monitor Class Function Driver Service c:\windows\system32\driv ers\monitor.sys Kernel Driver Yes Manual Running OK Normal No Yes mouclass Mouse Class Driver c:\windows\system32\drivers\mouclass.sys Kernel Driver Yes Manual Running OK Normal No Yes mouhid Mouse HID Driver c:\windows\system32\drivers\mouhid.sys Kernel D river Yes Manual Running OK Ignore No Yes mountmgr Mount Point Manager c:\windows\system32\drivers\mountmgr.sys Kernel Driver Yes Boot Running OK Critical No Yes mpio mpio c:\windows\system32\drivers\mpio.sys Kernel Driver No Manual Stopped OK Normal No No mpsdrv Windows Firewall Authorization Driver c:\windows\system32\drivers\mpsd rv.sys Kernel Driver No Manual Stopped OK Normal No No mrxdav WebDav Client Redirector Driver c:\windows\system32\drivers\mrxdav.sys File System Driver No Manual Stopped OK Normal No No mrxsmb SMB MiniRedirector Wrapper and Engine c:\windows\system32\drivers\mrxs mb.sys File System Driver Yes Manual Running OK Normal No Yes mrxsmb10 SMB 1.x MiniRedirector c:\windows\system32\drivers\mrxsmb10.sys File System Driver Yes Manual Running OK Normal No Yes mrxsmb20 SMB 2.0 MiniRedirector c:\windows\system32\drivers\mrxsmb20.sys File System Driver Yes Manual Running OK Normal No Yes msahci msahci c:\windows\system32\drivers\msahci.sys Kernel Driver No Manual Stopped OK Critical No No msdsm msdsm c:\windows\system32\drivers\msdsm.sys Kernel Driver No Manual Stopped OK Normal No No msfs Msfs c:\windows\system32\drivers\msfs.sys File System Driver Yes System Running OK Normal No Yes mshidkmdf Pass-through HID to KMDF Filter Driver c:\windows\system32\driv ers\mshidkmdf.sys Kernel Driver No Manual Stopped OK Ignore No No mshusbvideo NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver c:\windows\system32\drivers\nx6000.sys Kernel Driver No Manual Stopped OK Normal No No msisadrv msisadrv c:\windows\system32\drivers\msisadrv.sys Kernel Driver Yes Boot Running OK Critical No Yes mskssrv Microsoft Streaming Service Proxy c:\windows\system32\drivers\msks srv.sys Kernel Driver No Manual Stopped OK Normal No No mspclock Microsoft Streaming Clock Proxy c:\windows\system32\drivers\mspc lock.sys Kernel Driver No Manual Stopped OK Normal No No mspqm Microsoft Streaming Quality Manager Proxy c:\windows\system32\driv ers\mspqm.sys Kernel Driver No Manual Stopped OK Normal No No

msrpc MsRPC c:\windows\system32\drivers\msrpc.sys Kernel Driver No Manual Stopped OK Normal No No mssmbios Microsoft System Management BIOS Driver c:\windows\system32\driv ers\mssmbios.sys Kernel Driver Yes System Running OK Normal No Yes mstee Microsoft Streaming Tee/Sink-to-Sink Converter c:\windows\system32\driv ers\mstee.sys Kernel Driver No Manual Stopped OK Normal No No mtconfig Microsoft Input Configuration Driver c:\windows\system32\driv ers\mtconfig.sys Kernel Driver No Manual Stopped OK Normal No No mup Mup c:\windows\system32\drivers\mup.sys File System Driver Yes Boot Running OK Normal No Yes nativewifip NativeWiFi Filter c:\windows\system32\drivers\nwifi.sys Kernel Driver Yes Manual Running OK Normal No Yes naveng NAVENG \??\c:\programdata\symantec\symantec endpoint protection\12.1.20 15.2015.105\data\definitions\virusdefs\20131205.024\eng64.sys Kernel Driver Yes Manual Running OK Normal No Yes navex15 NAVEX15 \??\c:\programdata\symantec\symantec endpoint protection\12.1.20 15.2015.105\data\definitions\virusdefs\20131205.024\ex64.sys Kernel Driver Yes Manual Running OK Normal No Yes ndis NDIS System Driver c:\windows\system32\drivers\ndis.sys Kernel D river Yes Boot Running OK Critical No Yes ndiscap NDIS Capture LightWeight Filter c:\windows\system32\drivers\ndiscap.sys Kernel Driver No Manual Stopped OK Normal No No ndistapi Remote Access NDIS TAPI Driver c:\windows\system32\drivers\ndis tapi.sys Kernel Driver Yes Manual Running OK Normal No Yes ndisuio NDIS Usermode I/O Protocol c:\windows\system32\drivers\ndisuio.sys Kernel Driver Yes Manual Running OK Normal No Yes ndiswan Remote Access NDIS WAN Driver c:\windows\system32\drivers\ndiswan.sys Kernel Driver Yes Manual Running OK Normal No Yes ndproxy NDIS Proxy c:\windows\system32\drivers\ndproxy.sys Kernel Driver Yes Manual Running OK Normal No Yes netaapl Apple Mobile Device Ethernet Service c:\windows\system32\drivers\neta apl64.sys Kernel Driver No Manual Stopped OK Normal No No netbios NetBIOS Interface c:\windows\system32\drivers\netbios.sys File Sys tem Driver Yes System Running OK Normal No Yes netbt NetBT c:\windows\system32\drivers\netbt.sys Kernel Driver Yes System Running OK Normal No Yes netwns64 ___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for W indows 7 - 64 Bit c:\windows\system32\drivers\netwsw00.sys Kernel D river Yes Manual Running OK Normal No Yes nfrd960 nfrd960 c:\windows\system32\drivers\nfrd960.sys Kernel Driver No Manual Stopped OK Normal No No npfs Npfs c:\windows\system32\drivers\npfs.sys File System Driver Yes System Running OK Normal No Yes nsiproxy NSI proxy service driver. c:\windows\system32\drivers\nsip roxy.sys Kernel Driver Yes System Running OK Normal No Yes ntfs Ntfs c:\windows\system32\drivers\ntfs.sys File System Driver Yes Manual Running OK Normal No Yes null Null c:\windows\system32\drivers\null.sys Kernel Driver Yes System Running OK Normal No Yes nvraid nvraid c:\windows\system32\drivers\nvraid.sys Kernel Driver No Manual Stopped OK Normal No No nvstor nvstor c:\windows\system32\drivers\nvstor.sys Kernel Driver No Manual Stopped OK Critical No No nv_agp NVIDIA nForce AGP Bus Filter c:\windows\system32\drivers\nv_agp.sys

Kernel Driver No Manual Stopped OK Normal No No ohci1394 1394 OHCI Compliant Host Controller (Legacy) c:\windows\syste m32\drivers\ohci1394.sys Kernel Driver No Manual Stopped OK Normal No No parport Parallel port driver c:\windows\system32\drivers\parport.sys Kernel D river No Manual Stopped OK Ignore No No partmgr Partition Manager c:\windows\system32\drivers\partmgr.sys Kernel D river Yes Boot Running OK Critical No Yes pci PCI Bus Driver c:\windows\system32\drivers\pci.sys Kernel Driver Yes Boot Running OK Critical No Yes pciide pciide c:\windows\system32\drivers\pciide.sys Kernel Driver No Manual Stopped OK Critical No No pcmcia pcmcia c:\windows\system32\drivers\pcmcia.sys Kernel Driver No Manual Stopped OK Normal No No pcw Performance Counters for Windows Driver c:\windows\system32\drivers\pcw. sys Kernel Driver Yes Boot Running OK Normal No Yes peauth PEAUTH c:\windows\system32\drivers\peauth.sys Kernel Driver Yes Auto Running OK Normal No Yes pgpdisk PGPdisk c:\windows\system32\drivers\pgpdisk.sys Kernel Driver Yes Auto Running OK Normal No Yes pgpsdkdriver PGPsdkDriver c:\windows\system32\drivers\pgpsdk.sys Kernel D river Yes System Running OK Normal No Yes pgpwded PGPwded Storage Filter Service c:\windows\system32\drivers\pgpwded.sys Kernel Driver Yes Boot Running OK Normal No Yes pgpwdefs Pgpwdefs c:\windows\system32\drivers\pgpwdefs.sys File System Driver Yes Boot Running OK Normal No Yes pptpminiport WAN Miniport (PPTP) c:\windows\system32\drivers\raspptp.sys Kernel Driver Yes Manual Running OK Normal No Yes processor Processor Driver c:\windows\system32\drivers\processr.sys Kernel Driver No Manual Stopped OK Normal No No psched QoS Packet Scheduler c:\windows\system32\drivers\pacer.sys Kernel D river Yes System Running OK Normal No Yes pxhlpa64 PxHlpa64 c:\windows\system32\drivers\pxhlpa64.sys Kernel Driver Yes Boot Running OK Normal No Yes ql2300 ql2300 c:\windows\system32\drivers\ql2300.sys Kernel Driver No Manual Stopped OK Normal No No ql40xx ql40xx c:\windows\system32\drivers\ql40xx.sys Kernel Driver No Manual Stopped OK Normal No No qwavedrv QWAVE driver c:\windows\system32\drivers\qwavedrv.sys Kernel Driver No Manual Stopped OK Normal No No rasacd Remote Access Auto Connection Driver c:\windows\system32\drivers\rasa cd.sys Kernel Driver No Manual Stopped OK Normal No No rasagilevpn WAN Miniport (IKEv2) c:\windows\system32\drivers\agilevpn.sys Kernel Driver Yes Manual Running OK Normal No Yes rasl2tp WAN Miniport (L2TP) c:\windows\system32\drivers\rasl2tp.sys Kernel D river Yes Manual Running OK Normal No Yes raspppoe Remote Access PPPOE Driver c:\windows\system32\drivers\rasp ppoe.sys Kernel Driver Yes Manual Running OK Normal No Yes rassstp WAN Miniport (SSTP) c:\windows\system32\drivers\rassstp.sys Kernel D river Yes Manual Running OK Normal No Yes rdbss Redirected Buffering Sub Sysytem c:\windows\system32\drivers\rdbs s.sys File System Driver Yes System Running OK Normal No Yes rdpbus Remote Desktop Device Redirector Bus Driver c:\windows\system32\driv ers\rdpbus.sys Kernel Driver Yes Manual Running OK Normal No Yes rdpcdd RDPCDD c:\windows\system32\drivers\rdpcdd.sys Kernel Driver Yes System Running OK Ignore No Yes rdpdr Terminal Server Device Redirector Driver c:\windows\system32\driv

ers\rdpdr.sys Kernel Driver No Manual Stopped OK Normal No No rdpencdd RDP Encoder Mirror Driver c:\windows\system32\drivers\rdpe ncdd.sys Kernel Driver Yes System Running OK Ignore No Yes rdprefmp Reflector Display Driver used to gain access to graphics data c:\windows\system32\drivers\rdprefmp.sys Kernel Driver Yes System Running OK Ignore No Yes rdpvideominiport Remote Desktop Video Miniport Driver c:\windows\syste m32\drivers\rdpvideominiport.sys Kernel Driver No Manual Stopped OK Normal No No rdpwd RDP Winstation Driver c:\windows\system32\drivers\rdpwd.sys Kernel D river No Manual Stopped OK Ignore No No rdyboost ReadyBoost c:\windows\system32\drivers\rdyboost.sys Kernel Driver Yes Boot Running OK Critical No Yes rsp2stor Realtek PCIE CardReader Driver - P2 c:\windows\system32\driv ers\rtsp2stor.sys Kernel Driver No Manual Stopped OK Ignore No No rspndr Link-Layer Topology Discovery Responder c:\windows\system32\drivers\rspn dr.sys Kernel Driver Yes Auto Running OK Normal No Yes rtl8167 Realtek 8167 NT Driver c:\windows\system32\drivers\rt64win7.sys Kernel Driver Yes Manual Running OK Normal No Yes s3cap s3cap c:\windows\system32\drivers\vms3cap.sys Kernel Driver No Manual Stopped OK Normal No No sahdad64 HDD Filter Driver c:\windows\system32\drivers\sahdad64.sys Kernel Driver Yes Boot Running OK Normal No Yes saibad64 Volume Filter Driver c:\windows\system32\drivers\saibad64.sys Kernel Driver Yes Boot Running OK Normal No Yes saibvdad64 Virtual Disk Driver c:\windows\system32\drivers\saibvdad64.s ys Kernel Driver Yes System Running OK Normal No Yes sbp2port sbp2port c:\windows\system32\drivers\sbp2port.sys Kernel Driver No Manual Stopped OK Normal No No scfilter Smart card PnP Class Filter Driver c:\windows\system32\driv ers\scfilter.sys Kernel Driver No Manual Stopped OK Normal No No secdrv Security Driver c:\windows\system32\drivers\secdrv.sys Kernel Driver Yes Auto Running OK Normal No Yes serenum Serenum Filter Driver c:\windows\system32\drivers\serenum.sys Kernel D river No Manual Stopped OK Normal No No serial Serial c:\windows\system32\drivers\serial.sys Kernel Driver No Manual Stopped OK Ignore No No sermouse Serial Mouse Driver c:\windows\system32\drivers\sermouse.sys Kernel Driver No Manual Stopped OK Normal No No sffdisk SFF Storage Class Driver c:\windows\system32\drivers\sffdisk.sys Kernel Driver No Manual Stopped OK Normal No No sffp_mmc SFF Storage Protocol Driver for MMC c:\windows\system32\driv ers\sffp_mmc.sys Kernel Driver No Manual Stopped OK Normal No No sffp_sd SFF Storage Protocol Driver for SDBus c:\windows\system32\drivers\sffp _sd.sys Kernel Driver No Manual Stopped OK Normal No No sfloppy High-Capacity Floppy Disk Drive c:\windows\system32\drivers\sfloppy.sys Kernel Driver No Manual Stopped OK Normal No No shockprf Shockprf c:\windows\system32\drivers\apsx64.sys Kernel D river Yes Boot Running OK Normal No Yes sisraid2 SiSRaid2 c:\windows\system32\drivers\sisraid2.sys Kernel Driver No Manual Stopped OK Normal No No sisraid4 SiSRaid4 c:\windows\system32\drivers\sisraid4.sys Kernel Driver No Manual Stopped OK Normal No No smb Message-oriented TCP/IP and TCP/IPv6 Protocol (SMB session) c:\windo ws\system32\drivers\smb.sys Kernel Driver No Manual Stopped OK

Normal No No spldr Security Processor Loader Driver c:\windows\system32\drivers\spld r.sys Kernel Driver Yes Boot Running OK Critical No Yes srtsp Symantec Real Time Storage Protection x64 c:\windows\system32\driv ers\sep\0c0107df\07df.105\x64\srtsp64.sys File System Driver Yes System Running OK Normal No Yes srtspx Symantec Real Time Storage Protection (PEL) x64 c:\windows\system32\driv ers\sep\0c0107df\07df.105\x64\srtspx64.sys Kernel Driver Yes System Running OK Normal No Yes srv Server SMB 1.xxx Driver c:\windows\system32\drivers\srv.sys File Sys tem Driver Yes Manual Running OK Normal No Yes srv2 Server SMB 2.xxx Driver c:\windows\system32\drivers\srv2.sys File Sys tem Driver Yes Manual Running OK Normal No Yes srvnet srvnet c:\windows\system32\drivers\srvnet.sys File System Driver Yes Manual Running OK Normal No Yes stexstor stexstor c:\windows\system32\drivers\stexstor.sys Kernel Driver No Manual Stopped OK Normal No No storflt Disk Virtual Machine Bus Acceleration Filter Driver c:\windows\syste m32\drivers\vmstorfl.sys Kernel Driver Yes Boot Running OK Normal No Yes storvsc storvsc c:\windows\system32\drivers\storvsc.sys Kernel Driver No Manual Stopped OK Normal No No swenum Software Bus Driver c:\windows\system32\drivers\swenum.sys Kernel D river Yes Manual Running OK Normal No Yes swg3knmea01 Sierra Wireless QMI NMEA Communication - Lenovo c:\windows\syste m32\drivers\swg3knmea01.sys Kernel Driver No Manual Stopped OK Normal No No swg3kser01 Sierra Wireless QMI USB Device for Legacy Serial Communication Lenovo c:\windows\system32\drivers\swg3kser01.sys Kernel Driver No Manual Stopped OK Normal No No swibus01 Sierra Wireless Bus Enumerator 01 c:\windows\system32\driv ers\swibus01.sys Kernel Driver No Manual Stopped OK Normal No No swibusflt01 Sierra Wireless Bus Enumerator Filter 01 c:\windows\syste m32\drivers\swibusflt01.sys Kernel Driver No Manual Stopped OK Normal No No sydvctrl SyDvCtrl \??\c:\program files (x86)\symantec\symantec end point protection\12.1.2015.2015.105\bin64\sydvctrl64.sys Kernel Driver No Manual Stopped OK Normal No No symds Symantec Data Store c:\windows\system32\drivers\sep\0c0107df\07df.10 5\x64\symds64.sys Kernel Driver Yes Boot Running OK Normal No Yes symefa Symantec Extended File Attributes c:\windows\system32\drivers\sep\ 0c0107df\07df.105\x64\symefa64.sys File System Driver Yes Boot Running OK Normal No Yes symevent SymEvent \??\c:\windows\system32\drivers\symevent64x86.sy s Kernel Driver Yes Manual Running OK Normal No Yes symiron Symantec Iron Driver c:\windows\system32\drivers\sep\0c0107df\07df.10 5\x64\ironx64.sys Kernel Driver Yes System Running OK Normal No Yes symnets Symantec Network Security WFP Driver c:\windows\system32\drivers\sep\ 0c0107df\07df.105\x64\symnets.sys Kernel Driver Yes System Running OK Normal No Yes sysplant SysPlant for NT c:\windows\system32\drivers\sysplant.sys Kernel Driver Yes System Running OK Normal No Yes tcpip TCP/IP Protocol Driver c:\windows\system32\drivers\tcpip.sys Kernel D river Yes Boot Running OK Normal No Yes tcpip6 Microsoft IPv6 Protocol Driver c:\windows\system32\drivers\tcpip.sys Kernel Driver No Manual Stopped OK Normal No No

tcpipreg TCP/IP Registry Compatibility c:\windows\system32\drivers\tcpi preg.sys Kernel Driver Yes Auto Running OK Normal No Yes tdpipe TDPIPE c:\windows\system32\drivers\tdpipe.sys Kernel Driver No Manual Stopped OK Normal No No tdtcp TDTCP c:\windows\system32\drivers\tdtcp.sys Kernel Driver No Manual Stopped OK Normal No No tdx NetIO Legacy TDI Support Driver c:\windows\system32\drivers\tdx.sys Kernel Driver Yes System Running OK Normal No Yes teefer2 Symantec Endpoint Protection Firewall c:\windows\system32\drivers\teef er.sys Kernel Driver Yes System Running OK Normal No Yes termdd Terminal Device Driver c:\windows\system32\drivers\termdd.sys Kernel D river Yes System Running OK Normal No Yes terminpt Microsoft Remote Desktop Input Driver c:\windows\system32\driv ers\terminpt.sys Kernel Driver No Manual Stopped OK Normal No No tpdigimn TPDIGIMN c:\windows\system32\drivers\apshm64.sys Kernel D river Yes Boot Running OK Normal No Yes tpm TPM c:\windows\system32\drivers\tpm.sys Kernel Driver Yes Manual Running OK Normal No Yes tppwrif TPPWRIF c:\windows\system32\drivers\tppwr64v.sys Kernel Driver Yes System Running OK Normal No Yes tssecsrv Remote Desktop Services Security Filter Driver c:\windows\syste m32\drivers\tssecsrv.sys Kernel Driver No Manual Stopped OK Ignore No No tsusbflt TsUsbFlt c:\windows\system32\drivers\tsusbflt.sys Kernel Driver No Manual Stopped OK Normal No No tsusbgd Remote Desktop Generic USB Device c:\windows\system32\drivers\tsus bgd.sys Kernel Driver No Manual Stopped OK Normal No No tunnel Microsoft Tunnel Miniport Adapter Driver c:\windows\system32\driv ers\tunnel.sys Kernel Driver Yes Manual Running OK Normal No Yes tvtvcamd Camera Plus (VGA Resolution Maximum) c:\windows\system32\driv ers\tvtvcamd.sys Kernel Driver Yes Manual Running OK Normal No Yes uagp35 Microsoft AGPv3.5 Filter c:\windows\system32\drivers\uagp35.sys Kernel Driver No Manual Stopped OK Normal No No udfs udfs c:\windows\system32\drivers\udfs.sys File System Driver No Disabled Stopped OK Normal No No uliagpkx Uli AGP Bus Filter c:\windows\system32\drivers\uliagpkx.sys Kernel Driver No Manual Stopped OK Normal No No umbus UMBus Enumerator Driver c:\windows\system32\drivers\umbus.sys Kernel D river Yes Manual Running OK Normal No Yes umpass Microsoft UMPass Driver c:\windows\system32\drivers\umpass.sys Kernel D river No Manual Stopped OK Normal No No usbaapl64 Apple Mobile USB Driver c:\windows\system32\drivers\usbaapl64.sy s Kernel Driver No Manual Stopped OK Normal No No usbaudio USB Audio Driver (WDM) c:\windows\system32\drivers\usbaudio.sys Kernel Driver No Manual Stopped OK Normal No No usbccgp Microsoft USB Generic Parent Driver c:\windows\system32\drivers\usbc cgp.sys Kernel Driver Yes Manual Running OK Normal No Yes usbcir eHome Infrared Receiver (USBCIR) c:\windows\system32\drivers\usbc ir.sys Kernel Driver No Manual Stopped OK Normal No No usbehci Microsoft USB 2.0 Enhanced Host Controller Miniport Driver c:\windo ws\system32\drivers\usbehci.sys Kernel Driver Yes Manual Running OK Normal No Yes usbhub Microsoft USB Standard Hub Driver c:\windows\system32\drivers\usbh ub.sys Kernel Driver Yes Manual Running OK Normal No Yes usbohci Microsoft USB Open Host Controller Miniport Driver c:\windows\syste m32\drivers\usbohci.sys Kernel Driver No Manual Stopped OK Normal

No No usbprint Microsoft USB PRINTER Class c:\windows\system32\drivers\usbp rint.sys Kernel Driver No Manual Stopped OK Normal No No usbstor USB Mass Storage Driver c:\windows\system32\drivers\usbstor.sys Kernel D river Yes Manual Running OK Normal No Yes usbuhci Microsoft USB Universal Host Controller Miniport Driver c:\windows\syste m32\drivers\usbuhci.sys Kernel Driver No Manual Stopped OK Normal No No usbvideo USB Video Device (WDM) c:\windows\system32\drivers\usbvideo.sys Kernel Driver No Manual Stopped OK Normal No No vdrvroot Microsoft Virtual Drive Enumerator Driver c:\windows\syste m32\drivers\vdrvroot.sys Kernel Driver Yes Boot Running OK Critical No Yes vga vga c:\windows\system32\drivers\vgapnp.sys Kernel Driver No Manual Stopped OK Ignore No No vgasave VgaSave c:\windows\system32\drivers\vga.sys Kernel Driver Yes System Running OK Ignore No Yes vhdmp vhdmp c:\windows\system32\drivers\vhdmp.sys Kernel Driver No Manual Stopped OK Normal No No viaide viaide c:\windows\system32\drivers\viaide.sys Kernel Driver No Manual Stopped OK Critical No No vmbus vmbus c:\windows\system32\drivers\vmbus.sys Kernel Driver No Manual Stopped OK Normal No No vmbushid VMBusHID c:\windows\system32\drivers\vmbushid.sys Kernel Driver No Manual Stopped OK Ignore No No volmgr Volume Manager Driver c:\windows\system32\drivers\volmgr.sys Kernel D river Yes Boot Running OK Critical No Yes volmgrx Dynamic Volume Manager c:\windows\system32\drivers\volmgrx.sys Kernel D river Yes Boot Running OK Critical No Yes volsnap Storage volumes c:\windows\system32\drivers\volsnap.sys Kernel Driver Yes Boot Running OK Critical No Yes vsmraid vsmraid c:\windows\system32\drivers\vsmraid.sys Kernel Driver No Manual Stopped OK Normal No No vwifibus Virtual WiFi Bus Driver c:\windows\system32\drivers\vwifibus.sys Kernel Driver Yes Manual Running OK Normal No Yes vwififlt Virtual WiFi Filter Driver c:\windows\system32\drivers\vwif iflt.sys Kernel Driver Yes System Running OK Normal No Yes wacompen Wacom Serial Pen HID Driver c:\windows\system32\drivers\waco mpen.sys Kernel Driver No Manual Stopped OK Normal No No wanarp Remote Access IP ARP Driver c:\windows\system32\drivers\wanarp.sys Kernel Driver No Manual Stopped OK Normal No No wanarpv6 Remote Access IPv6 ARP Driver c:\windows\system32\drivers\wana rp.sys Kernel Driver Yes System Running OK Normal No Yes wcndis Mobility Client Virtual Miniport c:\windows\system32\drivers\wcnd is.sys Kernel Driver No Manual Stopped OK Normal No No wd Wd c:\windows\system32\drivers\wd.sys Kernel Driver No Manual Stopped OK Normal No No wdf01000 Kernel Mode Driver Frameworks service c:\windows\system32\driv ers\wdf01000.sys Kernel Driver Yes Boot Running OK Normal No Yes wfplwf WFP Lightweight Filter c:\windows\system32\drivers\wfplwf.sys Kernel D river Yes System Running OK Normal No Yes wimmount WIMMount c:\windows\system32\drivers\wimmount.sys File System Driver No Manual Stopped OK Normal No No winusb WinUsb c:\windows\system32\drivers\winusb.sys Kernel Driver No Manual Stopped OK Normal No No wmiacpi Microsoft Windows Management Interface for ACPI c:\windows\system32\driv

ers\wmiacpi.sys Kernel Driver Yes Manual Running OK Normal No Yes ws2ifsl Winsock IFS Driver c:\windows\system32\drivers\ws2ifsl.sys Kernel D river No Disabled Stopped OK Normal No No wudfpf User Mode Driver Frameworks Platform Driver c:\windows\system32\driv ers\wudfpf.sys Kernel Driver Yes Manual Running OK Normal No Yes wudfrd Windows Driver Foundation - User-mode Driver Framework Reflector c:\windows\system32\drivers\wudfrd.sys Kernel Driver No Manual Stopped OK Normal No No mandiant_tools Mandiant_Tools \??\c:\programdata\mandiant\mandiant intelligent response agent\mktools.sys Kernel Driver Yes Manual Running OK Normal No Yes [Environment Variables] Variable Value User Name ComSpec %SystemRoot%\system32\cmd.exe <SYSTEM> FP_NO_HOST_CHECK NO <SYSTEM> OS Windows_NT <SYSTEM> Path %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROO T%\System32\WindowsPowerShell\v1.0\;C:\Program Files\ThinkPad\Bluetooth Software \;C:\Program Files\ThinkPad\Bluetooth Software\syswow64;C:\Program Files (x86)\L enovo\Access Connections\;C:\Program Files (x86)\IBM\Personal Communications\;C: \Program Files (x86)\IBM\Trace Facility\;C:\Program Files (x86)\Common Files\Rox io Shared\DLLShared\;C:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\ ;C:\Program Files (x86)\Common Files\Roxio Shared\13.0\DLLShared\;C:\Program Fil es (x86)\IBM\Mobility Client\;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Prog ram Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C: \Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\O penCL SDK\2.0\bin\x64 <SYSTEM> PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC <SYSTEM> PROCESSOR_ARCHITECTURE AMD64 <SYSTEM> TEMP %SystemRoot%\TEMP <SYSTEM> TMP %SystemRoot%\TEMP <SYSTEM> USERNAME SYSTEM <SYSTEM> windir %SystemRoot% <SYSTEM> PSModulePath %SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ <SYSTEM> NUMBER_OF_PROCESSORS 4 <SYSTEM> PROCESSOR_LEVEL 6 <SYSTEM> PROCESSOR_IDENTIFIER Intel64 Family 6 Model 42 Stepping 7, GenuineIntel <SYSTEM> PROCESSOR_REVISION 2a07 <SYSTEM> TSMPATH C:\Program Files\ThinkPad\UltraNav Utility <SYSTEM> ACPath C:\Program Files (x86)\Lenovo\Access Connections\ <SYSTEM> COMMPath C:\Program Files\Lenovo\Communications Utility <SYSTEM> PCOMM_Root C:\Program Files (x86)\IBM\Personal Communications\ <SYSTEM> RCAUTOPLAY C:\Program Files (x86)\Roxio 2011\Roxio Central\ <SYSTEM> EMC_AUTOPLAY C:\Program Files (x86)\Common Files\Roxio Shared\ <SYSTEM> BURN_AUTOPLAY C:\Program Files (x86)\Roxio 2011\Roxio Burn\ <SYSTEM> asl.log Destination=file <SYSTEM> CLASSPATH .;C:\Program Files (x86)\IBM\Java60\jre\lib\ext\QTJava.zip <SYSTEM> QTJAVA C:\Program Files (x86)\IBM\Java60\jre\lib\ext\QTJava.zip <SYSTEM> TEMP %USERPROFILE%\AppData\Local\Temp NT AUTHORITY\SYSTEM TMP %USERPROFILE%\AppData\Local\Temp NT AUTHORITY\SYSTEM TEMP %USERPROFILE%\AppData\Local\Temp NT AUTHORITY\LOCAL SERVICE TMP %USERPROFILE%\AppData\Local\Temp NT AUTHORITY\LOCAL SERVICE TEMP %USERPROFILE%\AppData\Local\Temp NT AUTHORITY\NETWORK SERVICE TMP %USERPROFILE%\AppData\Local\Temp NT AUTHORITY\NETWORK SERVICE

TEMP %USERPROFILE%\AppData\Local\Temp SPUMANTE\shashidhar TMP %USERPROFILE%\AppData\Local\Temp SPUMANTE\shashidhar Path C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\Wir elessCommon\ SPUMANTE\shashidhar [Print Jobs] Document Size Owner Notify Status Time Submitted Start Time Until Time Elapsed Time Pages Printed Job ID Priority Paramete rs Driver Print Processor Host Print Queue Data Type Name [Network Connections] Local Name [Running Tasks] Name Path Process ID Priority Min Working Set Max Working Set Start Time Version Size File Date system idle process Not Available 0 0 Not Available Not Avai lable Not Available Not Available Not Available Not Available system Not Available 4 8 Not Available Not Available 12/4/201 3 9:04 AM Not Available Not Available Not Available smss.exe Not Available 468 11 200 1380 12/4/2013 9:04 A M Not Available Not Available Not Available csrss.exe c:\windows\system32\csrss.exe 724 13 200 1380 12/4/2013 9:04 AM 6.1.7600.16385 7.50 KB (7,680 bytes) 7/14/2009 4:49 A M wininit.exe c:\windows\system32\wininit.exe 804 13 200 1380 12/4/2013 9:04 AM 6.1.7600.16385 126.00 KB (129,024 bytes) 7/14/200 9 5:22 AM csrss.exe c:\windows\system32\csrss.exe 816 13 200 1380 12/4/2013 9:04 AM 6.1.7600.16385 7.50 KB (7,680 bytes) 7/14/2009 4:49 A M winlogon.exe c:\windows\system32\winlogon.exe 872 13 200 1380 12/4/2013 9:04 AM 6.1.7601.17514 381.50 KB (390,656 bytes) 3/19/2011 3:25 AM services.exe c:\windows\system32\services.exe 896 9 200 1380 12/4/2013 9:04 AM 6.1.7600.16385 321.00 KB (328,704 bytes) 7/14/2009 4:49 AM lsass.exe c:\windows\system32\lsass.exe 920 9 200 1380 12/4/2013 9:04 AM 6.1.7601.18270 30.00 KB (30,720 bytes) 11/18/2013 12:27 PM lsm.exe c:\windows\system32\lsm.exe 928 8 200 1380 12/4/201 3 9:04 AM 6.1.7601.17514 335.00 KB (343,040 bytes) 3/19/2011 3:25 A M svchost.exe c:\windows\system32\svchost.exe 160 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M ibmpmsvc.exe c:\windows\system32\ibmpmsvc.exe 756 8 200 1380 12/4/2013 9:05 AM 1.67.4.4 65.29 KB (66,856 bytes) 11/11/20 13 11:22 AM svchost.exe c:\windows\system32\svchost.exe 952 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M svchost.exe c:\windows\system32\svchost.exe 1068 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M svchost.exe c:\windows\system32\svchost.exe 1104 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A Remote Name Type Status User Name

M svchost.exe c:\windows\system32\svchost.exe 1132 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M svchost.exe c:\windows\system32\svchost.exe 1156 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M svchost.exe c:\windows\system32\svchost.exe 1264 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M svchost.exe c:\windows\system32\svchost.exe 1412 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M wlanext.exe c:\windows\system32\wlanext.exe 1556 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 97.00 KB (99,328 bytes) 7/14/2009 5:37 A M conhost.exe c:\windows\system32\conhost.exe 1564 8 200 1380 12/4/2013 9:05 AM 6.1.7601.18229 330.50 KB (338,432 bytes) 9/11/201 3 9:49 PM spoolsv.exe c:\windows\system32\spoolsv.exe 1676 8 200 1380 12/4/2013 9:05 AM 6.1.7601.17777 546.00 KB (559,104 bytes) 2/5/2013 8:53 AM svchost.exe c:\windows\system32\svchost.exe 1756 8 200 1380 12/4/2013 9:05 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M saibsvc.exe c:\program files (x86)\roxio\backontrack\app\saibsvc.exe 1820 8 200 1380 12/4/2013 9:05 AM 1.0.37.0 446.48 K B (457,200 bytes) 2/10/2011 3:06 AM acprfmgrsvc.exe c:\program files (x86)\lenovo\access connections\acprfmgrsvc.exe 1900 8 200 1380 12/4/2013 9:05 AM 6.0.1.9 130.29 KB (133,4 16 bytes) 3/18/2013 5:26 PM taskhost.exe c:\windows\system32\taskhost.exe 1232 8 200 1380 12/4/2013 9:05 AM 6.1.7601.18010 67.00 KB (68,608 bytes) 1/11/201 3 1:10 AM dwm.exe c:\windows\system32\dwm.exe 1432 13 51200 2097152 12/4/201 3 9:05 AM 6.1.7600.16385 117.50 KB (120,320 bytes) 7/14/2009 5:07 A M armsvc.exe c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe 2144 8 200 1380 12/4/2013 9:05 AM 1.7.4.0 64.10 KB (65,640 bytes) 5/11/2013 4:07 PM applemobiledeviceservice.exe c:\program files (x86)\common files\apple\mobile device support\applemobiledeviceservice.exe 2200 8 200 1380 12/4/2013 9:05 AM 17.323.0.9 54.32 KB (55,624 bytes) 9/7/2013 9:13 AM artstartsvc.exe c:\program files (x86)\ibm\mobility client\artstartsvc.exe 2496 8 200 1380 12/4/2013 9:05 AM 6.1.4.1750 56.00 KB (57,344 bytes) 9/20/2010 9:48 PM acdeskbandhlpr.exe c:\program files (x86)\lenovo\access connections\acdeskb andhlpr.exe 2544 8 200 1380 12/4/2013 9:05 AM 6.0.1.9 826.29 KB (846,120 bytes) 3/18/2013 5:25 PM besclient.exe c:\program files (x86)\bigfix enterprise\bes client\besclient.ex e 2556 8 200 1380 12/4/2013 9:05 AM 8.2.1093.0 4.46 MB (4,678,552 bytes) 12/6/2011 5:19 AM mdnsresponder.exe c:\program files\bonjour\mdnsresponder.exe 2596 8 200 1380 12/4/2013 9:05 AM 3.0.0.10 451.35 KB (462,1 84 bytes) 8/30/2011 11:05 PM bservice.exe c:\program files (x86)\roxio\backontrack\app\bservice.exe 2620 8 200 1380 12/4/2013 9:05 AM Not Available 38.48 KB (39,408 bytes) 2/25/2011 10:32 AM btwdins.exe c:\program files\thinkpad\bluetooth software\btwdins.exe 2656 8 200 1380 12/4/2013 9:05 AM 6.5.1.2700 934.78 K

B (957,216 bytes) 4/1/2012 9:51 PM evteng.exe c:\program files\intel\wifi\bin\evteng.exe 2712 8 200 1380 12/4/2013 9:05 AM 15.3.0.0 614.30 KB (629,040 bytes ) 8/23/2012 4:04 PM presentationfontcache.exe c:\windows\microsoft.net\framework64\v3.0\wpf\pr esentationfontcache.exe 2820 8 200 1380 12/4/2013 9:05 AM 3.0.6920.5011 41.85 KB (42,856 bytes) 3/19/2011 3:24 AM nsd.exe c:\notes\nsd.exe 3000 8 200 1380 12/4/2013 9:06 A M 9.0.0.3056 4.91 MB (5,153,280 bytes) 3/9/2013 4:17 AM miragent.exe c:\program files (x86)\mandiant\mandiant intelligent response ag ent\miragent.exe 3052 4 200 1380 12/4/2013 9:06 AM 2.2.5.0 12.77 MB (13,387,128 bytes) 9/25/2012 5:03 PM c4ebreg.exe c:\program files (x86)\c4ebreg\c4ebreg.exe 1196 8 200 1380 12/4/2013 9:06 AM 7.45.0.4 499.73 KB (511,728 bytes ) 8/9/2013 11:39 PM issimsvc.exe c:\sdwork\issimsvc.exe 2280 8 200 1380 12/4/201 3 9:06 AM 4.15.0.0 179.77 KB (184,088 bytes) 9/7/2012 11:39 P M cammute.exe c:\program files\lenovo\communications utility\cammute.exe 2336 8 200 1380 12/4/2013 9:06 AM 3.0.40.0 56.86 KB (58,224 bytes) 5/4/2013 3:52 PM tpknrsvc.exe c:\program files\lenovo\communications utility\tpknrsvc.exe 1796 8 200 1380 12/4/2013 9:06 AM 3.0.40.0 59.86 KB (61,296 bytes) 5/4/2013 3:52 PM vcamsvc.exe c:\program files\lenovo\communications utility\vcamsvc.exe 2100 8 200 1380 12/4/2013 9:06 AM 3.0.40.0 183.36 K B (187,760 bytes) 5/4/2013 3:52 PM lvvsst.exe c:\program files\lenovo\virtscrl\lvvsst.exe 2412 8 200 1380 12/4/2013 9:06 AM 1.2.0.0 133.09 KB (136,288 bytes) 8/23/2013 9:49 AM suservice.exe c:\notes\suservice.exe 2876 8 200 1380 12/4/201 3 9:06 AM 9.0.0.13067 1.58 MB (1,654,376 bytes) 3/9/2013 4:19 AM virtscrl.exe c:\progra~1\lenovo\virtscrl\virtscrl.exe 2888 8 200 1380 12/4/2013 9:06 AM 2.0.0.0 111.06 KB (113,728 bytes) 8/23/2013 9:49 AM mscams64.exe c:\program files\microsoft lifecam\mscams64.exe 1624 8 200 1380 12/4/2013 9:06 AM 3.22.270.0 194.86 KB (199,536 bytes ) 5/20/2010 3:26 PM ntmulti.exe c:\notes\ntmulti.exe 2128 8 200 1380 12/4/201 3 9:06 AM 9.0.0.13067 27.00 KB (27,648 bytes) 3/9/2013 4:18 AM netautoconnectfocussvc.exe c:\program files (x86)\at&t network client\netau toconnectfocussvc.exe 748 8 200 1380 12/4/2013 9:06 AM 9.2.1.3002 278.81 KB (285,504 bytes) 4/19/2013 10:06 AM netcfgsvr.exe c:\program files (x86)\at&t network client\netcfgsvr.exe 2288 8 200 1380 12/4/2013 9:06 AM 9.2.1.3002 1.07 MB (1,126,208 bytes) 4/19/2013 10:05 AM netclientsvc.exe c:\program files (x86)\at&t network client\netclientsvc. exe 1836 8 200 1380 12/4/2013 9:06 AM 9.2.1.3002 374.81 KB (383,808 bytes) 4/19/2013 10:05 AM netlogsvc.exe c:\program files (x86)\at&t network client\netlogsvc.exe 3080 8 200 1380 12/4/2013 9:06 AM 9.2.1.3002 80.81 KB (82,752 bytes) 4/19/2013 10:05 AM regsrvc.exe c:\program files\common files\intel\wirelesscommon\regsrvc.exe 3228 8 200 1380 12/4/2013 9:06 AM 15.3.0.0 145.80 K B (149,296 bytes) 8/23/2012 4:03 PM ccsvchst.exe c:\program files (x86)\symantec\symantec endpoint protection\12. 1.2015.2015.105\bin\ccsvchst.exe 3584 8 1024 16384 12/4/201 3 9:06 AM 12.1.1.5 140.55 KB (143,928 bytes) 11/3/2012 7:22 A M c2c_service.exe c:\programdata\skype\toolbars\skype c2c service\c2c_service.exe

3608 8 200 1380 12/4/2013 9:06 AM 6.13.0.13771 3.12 MB (3,275,136 bytes) 10/9/2013 10:58 AM svchost.exe c:\windows\system32\svchost.exe 3680 8 200 1380 12/4/2013 9:06 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M swicarddetect64.exe c:\program files (x86)\sierra wireless inc\common\swicar ddetect64.exe 3700 8 200 1380 12/4/2013 9:06 AM 11.3.130 2.0 324.32 KB (332,104 bytes) 2/1/2013 5:30 PM tphksvc.exe c:\program files\lenovo\hotkey\tphksvc.exe 3768 8 200 1380 12/4/2013 9:06 AM 2.2.1.0 141.56 KB (144,960 bytes) 5/4/2013 11:03 AM tpnumlkd.exe c:\progra~1\lenovo\hotkey\tpnumlkd.exe 3872 13 200 1380 12/4/2013 9:06 AM 1.3.2.0 144.56 KB (148,032 bytes) 5/4/2013 11:03 AM zeroconfigservice.exe c:\program files\intel\wifi\bin\zeroconfigservice.exe 3900 8 200 1380 12/4/2013 9:06 AM 15.3.0.0 3.19 MB (3,342,640 bytes) 8/23/2012 4:05 PM acsvc.exe c:\program files (x86)\lenovo\access connections\acsvc.exe 3956 8 200 1380 12/4/2013 9:06 AM 6.0.1.9 266.29 KB (272,6 80 bytes) 3/18/2013 5:26 PM micmute.exe c:\program files\lenovo\hotkey\micmute.exe 4004 8 200 1380 12/4/2013 9:06 AM 1.2.0.0 99.35 KB (101,736 bytes) 5/4/2013 11:03 AM ccsvchst.exe c:\program files (x86)\symantec\symantec endpoint protection\12. 1.2015.2015.105\bin\ccsvchst.exe 4044 8 1024 3072 12/4/201 3 9:06 AM 12.1.1.5 140.55 KB (143,928 bytes) 11/3/2012 7:22 A M tphkload.exe c:\program files\lenovo\hotkey\tphkload.exe 4084 8 200 1380 12/4/2013 9:06 AM 1.2.0.0 141.85 KB (145,256 bytes) 5/4/2013 11:03 AM unsecapp.exe c:\windows\system32\wbem\unsecapp.exe 1656 8 200 1380 12/4/2013 9:06 AM 6.1.7600.16385 46.00 KB (47,104 bytes) 7/14/200 9 5:17 AM wmiprvse.exe c:\windows\system32\wbem\wmiprvse.exe 3912 8 200 1380 12/4/2013 9:07 AM 6.1.7601.17514 364.00 KB (372,736 bytes) 3/19/2011 3:25 AM wmiprvse.exe c:\windows\system32\wbem\wmiprvse.exe 4100 8 200 1380 12/4/2013 9:07 AM 6.1.7601.17514 364.00 KB (372,736 bytes) 3/19/2011 3:25 AM smc.exe c:\program files (x86)\symantec\symantec endpoint protection\12.1.2015.2 015.105\bin64\smc.exe 4536 8 1024 8192 12/4/2013 9:07 AM 12.1.2015.2015 2.19 MB (2,294,112 bytes) 11/3/2012 7:22 AM rundll32.exe c:\windows\system32\rundll32.exe 4568 8 200 1380 12/4/2013 9:07 AM 6.1.7600.16385 44.50 KB (45,568 bytes) 7/14/200 9 5:27 AM tponscr.exe c:\progra~1\lenovo\hotkey\tponscr.exe 4580 8 200 1380 12/4/2013 9:07 AM 6.7.0.0 554.06 KB (567,360 bytes) 5/4/2013 11:03 AM svchost.exe c:\windows\system32\svchost.exe 4996 8 200 1380 12/4/2013 9:07 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M svchost.exe c:\windows\system32\svchost.exe 4288 8 200 1380 12/4/2013 9:07 AM 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 A M tpshocks.exe c:\windows\system32\tpshocks.exe 4520 8 200 1380 12/4/2013 9:07 AM 1.76.900.2000 373.56 KB (382,528 bytes) 2/25/2012 9:08 AM etdctrl.exe c:\program files\elantech\etdctrl.exe 4472 10 200 1380 12/4/2013 9:07 AM 11.0.0.14 2.74 MB (2,876,816 bytes) 8/23/2013 9:33 AM

tpknrres.exe c:\program files\lenovo\communications utility\tpknrres.exe 4716 8 200 1380 12/4/2013 9:07 AM 3.0.40.0 286.36 K B (293,232 bytes) 5/4/2013 3:52 PM searchindexer.exe c:\windows\system32\searchindexer.exe 1944 8 200 1380 12/4/2013 9:07 AM 7.0.7601.17610 578.00 KB (591,872 bytes ) 7/18/2011 9:55 AM ravcpl64.exe c:\program files\realtek\audio\hda\ravcpl64.exe 1272 8 200 1380 12/4/2013 9:07 AM 1.0.0.861 12.91 MB (13,535,304 byt es) 8/23/2013 10:01 AM ravbg64.exe c:\program files\realtek\audio\hda\ravbg64.exe 4884 8 200 1380 12/4/2013 9:07 AM 1.0.0.149 1.25 MB (1,307,720 bytes ) 8/23/2013 10:01 AM svcguihlpr.exe c:\program files (x86)\lenovo\access connections\svcguihlpr.exe 2248 8 200 1380 12/4/2013 9:07 AM 6.0.1.9 588.00 KB (602,1 12 bytes) 3/18/2013 5:07 PM hkcmd.exe c:\windows\system32\hkcmd.exe 4908 8 200 1380 12/4/2013 9:07 AM 8.15.10.2843 389.31 KB (398,656 bytes) 2/19/201 3 8:35 PM igfxpers.exe c:\windows\system32\igfxpers.exe 3048 8 200 1380 12/4/2013 9:07 AM 8.15.10.2843 430.81 KB (441,152 bytes) 2/19/2013 8:35 PM iccproxy.exe c:\program files (x86)\intel\intel(r) integrated clock controlle r service\iccproxy.exe 5264 8 200 1380 12/4/2013 9:07 AM 1.0.0.1 165.77 KB (169,752 bytes) 9/15/2013 11:47 AM icloudservices.exe c:\program files (x86)\common files\apple\internet servi ces\icloudservices.exe 5372 8 200 1380 12/4/2013 9:07 AM 2.3.28.4 58.32 KB (59,720 bytes) 9/14/2013 3:38 AM applephotostreams.exe c:\program files (x86)\common files\apple\internet servi ces\applephotostreams.exe 5420 8 200 1380 12/4/2013 9:07 A M 7.12.44.1 58.32 KB (59,720 bytes) 9/15/2013 2:34 PM etdctrlhelper.exe c:\program files\elantech\etdctrlhelper.exe 5716 10 200 1380 12/4/2013 9:07 AM 11.0.0.7 2.14 MB (2,249,1 04 bytes) 8/23/2013 9:33 AM etdintelligent.exe c:\program files\elantech\etdintelligent.exe 5740 8 200 1380 12/4/2013 9:07 AM 11.0.0.6 2.15 MB (2,259,3 44 bytes) 8/23/2013 9:33 AM bttray.exe c:\program files\thinkpad\bluetooth software\bttray.exe 5836 8 200 1380 12/4/2013 9:07 AM 6.5.1.2700 1.33 MB (1,390,3 68 bytes) 4/1/2012 9:51 PM lfmonitor.exe c:\program files (x86)\ibm\connections desktop plugins\lfmonitor .exe 5976 8 200 1380 12/4/2013 9:07 AM 4.5.0.659 1.82 MB (1,911,976 bytes) 8/5/2013 8:00 PM symphony.exe c:\program files (x86)\ibm\lotus\symphony\framework\rcp\eclipse\ plugins\com.ibm.rcp.base_6.2.3.20110915-1350\win32\x86\symphony.exe 6004 8 200 1380 12/4/2013 9:07 AM 3.4.0.0 77.38 KB (79,232 bytes) 9/16/2011 1:49 AM acwlicon.exe c:\program files (x86)\lenovo\access connections\acwlicon.exe 5384 8 200 1380 12/4/2013 9:08 AM 6.0.1.9 190.29 KB (194,8 56 bytes) 3/18/2013 5:25 PM actray.exe c:\program files (x86)\lenovo\access connections\actray.exe 5380 8 200 1380 12/4/2013 9:08 AM 6.0.1.9 422.29 KB (432,4 24 bytes) 3/18/2013 5:25 PM isamtray.exe c:\program files (x86)\c4ebreg\isamtray.exe 5172 8 200 1380 12/4/2013 9:08 AM 7.45.0.4 335.73 KB (343,792 bytes ) 8/9/2013 11:40 PM roxioburnlauncher.exe c:\program files (x86)\roxio 2011\roxio burn\roxioburnla uncher.exe 4836 8 200 1380 12/4/2013 9:08 AM 1.60.33. 0 506.48 KB (518,640 bytes) 1/13/2011 3:52 AM pgptray.exe c:\program files (x86)\pgp corporation\pgp desktop\pgptray.exe 5464 8 200 1380 12/4/2013 9:08 AM 10.3.0.9307 4.00 MB

(4,194,416 bytes) 6/28/2013 4:31 AM snagit32.exe c:\program files (x86)\techsmith\snagit 11\snagit32.exe 5608 8 200 1380 12/4/2013 9:08 AM 11.3.0.107 9.18 MB (9,625,4 56 bytes) 11/11/2013 1:32 PM rcimgdir.exe c:\program files (x86)\integrated camera driver\x64\rcimgdir.exe 6016 8 200 1380 12/4/2013 9:08 AM 1.1.0.0 54.50 KB (55,808 bytes) 8/23/2013 9:29 AM rundll32.exe c:\windows\syswow64\rundll32.exe 5996 8 200 1380 12/4/2013 9:08 AM 6.1.7600.16385 43.50 KB (44,544 bytes) 7/14/200 9 5:11 AM soffice.exe c:\program files (x86)\openoffice 4\program\soffice.exe 5140 8 200 1380 12/4/2013 9:08 AM 4.0.9714.500 9.38 MB (9,837,0 56 bytes) 9/20/2013 2:12 PM rundll32.exe c:\windows\system32\rundll32.exe 3388 8 200 1380 12/4/2013 9:08 AM 6.1.7600.16385 44.50 KB (45,568 bytes) 7/14/200 9 5:27 AM pcee4.exe c:\program files (x86)\dolby advanced audio v2\pcee4.exe 4160 8 200 1380 12/4/2013 9:08 AM 7.2.8000.17 496.73 K B (508,656 bytes) 8/31/2012 7:21 PM soffice.bin c:\program files (x86)\openoffice 4\program\soffice.bin 5216 8 200 1380 12/4/2013 9:08 AM 4.0.9714.500 9.37 MB (9,828,8 64 bytes) 9/20/2013 2:12 PM besclientui.exe c:\program files (x86)\bigfix enterprise\bes client\besclientui. exe 6404 8 200 1380 12/4/2013 9:08 AM 8.2.1093.0 1.40 MB (1,471,896 bytes) 12/6/2011 5:19 AM divxupdate.exe c:\program files (x86)\divx\divx update\divxupdate.exe 6420 8 200 1380 12/4/2013 9:08 AM 1.0.6.105 1.78 MB (1,861,9 68 bytes) 8/29/2013 5:53 AM ituneshelper.exe c:\program files (x86)\itunes\ituneshelper.exe 6516 8 200 1380 12/4/2013 9:08 AM 11.1.3.8 148.82 KB (152,3 92 bytes) 11/2/2013 12:29 AM rundll32.exe c:\windows\syswow64\rundll32.exe 6620 8 200 1380 12/4/2013 9:08 AM 6.1.7600.16385 43.50 KB (44,544 bytes) 7/14/200 9 5:11 AM schtask.exe c:\progra~2\thinkpad\utilit~1\schtask.exe 6632 8 200 1380 12/4/2013 9:08 AM 1.0.0.1 124.79 KB (127,784 bytes) 8/23/2013 9:50 AM pwmdbsvc.exe c:\program files (x86)\thinkpad\utilities\pwmdbsvc.exe 6704 8 200 1380 12/4/2013 9:08 AM 1.0.0.1 1.59 MB (1,667,368 bytes ) 8/23/2013 9:50 AM ipodservice.exe c:\program files\ipod\bin\ipodservice.exe 7004 8 200 1380 12/4/2013 9:08 AM 11.1.3.8 626.32 KB (641,352 bytes ) 11/2/2013 12:29 AM apsdaemon.exe c:\program files (x86)\common files\apple\internet services\apsd aemon.exe 5516 8 200 1380 12/4/2013 9:08 AM 2.2.10.8 58.32 KB (59,720 bytes) 9/14/2013 3:27 AM tschelp.exe c:\program files (x86)\techsmith\snagit 11\tschelp.exe 4396 8 200 1380 12/4/2013 9:08 AM 1.1.11087.1 45.00 KB (46,080 bytes) 5/29/2013 4:05 PM snagpriv.exe c:\program files (x86)\techsmith\snagit 11\snagpriv.exe 3672 8 200 1380 12/4/2013 9:08 AM 11.3.0.107 127.36 KB (130,4 16 bytes) 11/11/2013 1:32 PM bthsamppalservice.exe c:\program files\intel\bluetoothhs\bthsamppalservice.exe 7336 8 200 1380 12/4/2013 9:08 AM 15.3.0.1 644.02 K B (659,472 bytes) 7/18/2012 12:52 AM pgpcbt64.exe c:\program files (x86)\pgp corporation\pgp desktop\pgpcbt64.exe 7844 8 200 1380 12/4/2013 9:09 AM 10.3.0.9307 72.17 KB (73,904 bytes) 6/28/2013 4:31 AM snagiteditor.exe c:\program files (x86)\techsmith\snagit 11\snagiteditor. exe 7180 8 200 1380 12/4/2013 9:09 AM 11.3.0.107

8.69 MB (9,107,312 bytes) 11/11/2013 1:32 PM bthssecuritymgr.exe c:\program files\intel\bluetoothhs\bthssecuritymgr.exe 4464 8 200 1380 12/4/2013 9:09 AM 15.3.0.8 132.80 K B (135,984 bytes) 8/23/2012 1:39 PM soffice.bin c:\program files (x86)\ibm\lotus\symphony\framework\shared\eclip se\plugins\com.ibm.symphony.brand.win32_3.0.1.20120110-2000\program\soffice.bin 8184 8 200 1380 12/4/2013 9:11 AM 3.1.9399.500 10.77 MB (11,296,768 bytes) 5/4/2013 4:25 PM osppsvc.exe c:\program files\common files\microsoft shared\officesoftwarepro tectionplatform\osppsvc.exe 8948 8 200 1380 12/4/2013 9:26 A M 14.0.370.400 4.70 MB (4,925,184 bytes) 1/9/2010 9:34 PM explorer.exe c:\windows\explorer.exe 8312 8 200 1380 12/4/201 3 9:32 AM 6.1.7601.17567 2.74 MB (2,871,808 bytes) 7/18/2011 9:54 A M wsect.exe c:\program files (x86)\wst\wsect.exe 7040 8 200 1380 12/4/2013 10:30 AM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 6072 8 200 1380 12/4/2013 10:35 AM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 3756 8 200 1380 12/4/2013 10:40 AM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 3112 8 200 1380 12/4/2013 2:00 PM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 7944 8 200 1380 12/4/2013 2:05 PM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 1228 8 200 1380 12/4/2013 2:10 PM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM syncserver.exe c:\program files (x86)\common files\apple\mobile device support\ syncserver.exe 5204 8 200 1380 12/4/2013 10:41 PM 17.669.6 .28 54.32 KB (55,624 bytes) 9/7/2013 9:14 AM conhost.exe c:\windows\system32\conhost.exe 7940 8 200 1380 12/4/2013 10:41 PM 6.1.7601.18229 330.50 KB (338,432 bytes) 9/11/201 3 9:49 PM iexplore.exe c:\program files\internet explorer\iexplore.exe 5472 8 200 1380 12/4/2013 10:47 PM 11.0.9600.16428 785.70 KB (804,560 bytes ) 11/18/2013 5:32 PM iexplore.exe c:\program files (x86)\internet explorer\iexplore.exe 8404 8 385616 385816 12/4/2013 10:47 PM 11.0.9600.16428 787.20 KB (806,0 96 bytes) 11/18/2013 5:32 PM iexplore.exe c:\program files (x86)\internet explorer\iexplore.exe 9540 8 200 1380 12/4/2013 10:50 PM 11.0.9600.16428 787.20 KB (806,0 96 bytes) 11/18/2013 5:32 PM wsect.exe c:\program files (x86)\wst\wsect.exe 2276 8 200 1380 12/5/2013 10:57 AM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 9356 8 200 1380 12/5/2013 11:02 AM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM applephotostreamsdownloader.exe c:\program files (x86)\common files\apple\intern et services\applephotostreamsdownloader.exe 10288 8 200 1380 12/5/2013 11:05 AM 7.12.44.1 58.32 KB (59,720 bytes) 9/15/2013 2:34 P M wsect.exe c:\program files (x86)\wst\wsect.exe 10152 8 200 1380 12/5/2013 11:07 AM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM

wsect.exe c:\program files (x86)\wst\wsect.exe 12024 8 200 1380 12/5/2013 2:27 PM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 11224 8 200 1380 12/5/2013 2:32 PM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 12184 8 200 1380 12/5/2013 2:37 PM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM chrome.exe c:\program files (x86)\google\chrome\application\chrome.exe 10844 8 200 1380 12/6/2013 8:38 AM 31.0.1650.63 842.95 K B (863,184 bytes) 8/24/2013 10:08 AM chrome.exe c:\program files (x86)\google\chrome\application\chrome.exe 10624 8 200 1380 12/6/2013 8:38 AM 31.0.1650.63 842.95 K B (863,184 bytes) 8/24/2013 10:08 AM chrome.exe c:\program files (x86)\google\chrome\application\chrome.exe 10548 6 200 1380 12/6/2013 8:38 AM 31.0.1650.63 842.95 K B (863,184 bytes) 8/24/2013 10:08 AM chrome.exe c:\program files (x86)\google\chrome\application\chrome.exe 8240 6 200 1380 12/6/2013 8:40 AM 31.0.1650.63 842.95 K B (863,184 bytes) 8/24/2013 10:08 AM wsect.exe c:\program files (x86)\wst\wsect.exe 9404 8 200 1380 12/6/2013 9:16 AM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 8308 8 200 1380 12/6/2013 9:21 AM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 11400 8 200 1380 12/6/2013 9:26 AM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM issimgui.exe c:\sdwork\issimgui.exe 7988 8 200 1380 12/6/201 3 9:26 AM 4.22.0.0 361.00 KB (369,664 bytes) 9/7/2012 11:39 P M chrome.exe c:\program files (x86)\google\chrome\application\chrome.exe 11408 8 200 1380 12/6/2013 10:26 AM 31.0.1650.63 842.95 K B (863,184 bytes) 8/24/2013 10:08 AM totalcmd64.exe c:\totalcmd\totalcmd64.exe 11488 8 200 1380 12/6/2013 12:18 PM 8.5.0.0 7.72 MB (8,098,872 bytes) 8/22/2013 6:33 P M wsect.exe c:\program files (x86)\wst\wsect.exe 12112 8 200 1380 12/6/2013 12:46 PM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 11396 8 200 1380 12/6/2013 12:51 PM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM wsect.exe c:\program files (x86)\wst\wsect.exe 8620 8 200 1380 12/6/2013 12:56 PM 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM cellularplugincontroller.exe c:\program files (x86)\at&t network client\cellu larplugincontroller\cellularplugincontroller.exe 5036 8 200 1380 12/6/2013 5:45 PM 9.2.1.3002 362.81 KB (371,520 bytes) 4/19/2013 10:06 AM chrome.exe c:\program files (x86)\google\chrome\application\chrome.exe 9292 8 200 1380 12/6/2013 5:56 PM 31.0.1650.63 842.95 K B (863,184 bytes) 8/24/2013 10:08 AM audiodg.exe Not Available 6588 8 Not Available Not Available 12/6/2013 6:23 PM Not Available Not Available Not Available taskeng.exe c:\windows\system32\taskeng.exe 12460 6 200 1380 12/6/2013 6:27 PM 6.1.7601.17514 453.50 KB (464,384 bytes) 3/19/201 1 3:25 AM

msinfo32.exe c:\windows\system32\msinfo32.exe 3456 8 200 1380 12/6/2013 6:29 PM 6.1.7601.17514 370.00 KB (378,880 bytes) 3/19/2011 3:25 AM [Loaded Modules] Name Version Size File Date Manufacturer Path csrss 6.1.7600.16385 7.50 KB (7,680 bytes) 7/14/2009 4:49 AM Microsof t Corporation c:\windows\system32\csrss.exe ntdll 6.1.7601.18247 1.65 MB (1,732,032 bytes) 10/8/2013 11:46 PM Microsoft Corporation c:\windows\system32\ntdll.dll csrsrv 6.1.7601.18229 42.50 KB (43,520 bytes) 9/11/2013 9:49 PM Microsof t Corporation c:\windows\system32\csrsrv.dll basesrv 6.1.7600.16385 51.50 KB (52,736 bytes) 7/14/2009 4:48 AM Microsof t Corporation c:\windows\system32\basesrv.dll winsrv 6.1.7601.18229 210.00 KB (215,040 bytes) 9/11/2013 9:49 PM Microsoft Corporation c:\windows\system32\winsrv.dll user32 6.1.7601.17514 984.50 KB (1,008,128 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\user32.dll gdi32 6.1.7601.18275 395.00 KB (404,480 bytes) 11/18/2013 12:26 PM Microsoft Corporation c:\windows\system32\gdi32.dll kernel32 6.1.7601.18229 1.11 MB (1,161,216 bytes) 9/11/2013 9:49 P M Microsoft Corporation c:\windows\system32\kernel32.dll kernelbase 6.1.7601.18229 414.50 KB (424,448 bytes) 9/11/2013 9:49 P M Microsoft Corporation c:\windows\system32\kernelbase.dll lpk 6.1.7601.18177 40.50 KB (41,472 bytes) 10/8/2013 11:46 PM Microsof t Corporation c:\windows\system32\lpk.dll usp10 1.626.7601.18009 782.00 KB (800,768 bytes) 2/2/2013 6:32 AM Microsoft Corporation c:\windows\system32\usp10.dll msvcrt 7.0.7601.17744 620.00 KB (634,880 bytes) 3/14/2012 8:25 AM Microsoft Corporation c:\windows\system32\msvcrt.dll sxssrv 6.1.7600.16385 31.00 KB (31,744 bytes) 7/14/2009 4:56 AM Microsof t Corporation c:\windows\system32\sxssrv.dll sxs 6.1.7601.17514 569.00 KB (582,656 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\sxs.dll rpcrt4 6.1.7601.18205 1.16 MB (1,217,024 bytes) 8/23/2013 8:51 PM Microsoft Corporation c:\windows\system32\rpcrt4.dll cryptbase 6.1.7600.16385 43.00 KB (44,032 bytes) 7/14/2009 4:50 AM Microsoft Corporation c:\windows\system32\cryptbase.dll advapi32 6.1.7601.18247 857.50 KB (878,080 bytes) 10/8/2013 11:46 PM Microsoft Corporation c:\windows\system32\advapi32.dll sechost 6.1.7600.16385 111.00 KB (113,664 bytes) 7/14/2009 4:50 AM Microsoft Corporation c:\windows\system32\sechost.dll wininit 6.1.7600.16385 126.00 KB (129,024 bytes) 7/14/2009 5:22 AM Microsoft Corporation c:\windows\system32\wininit.exe profapi 6.1.7600.16385 43.00 KB (44,032 bytes) 7/14/2009 4:50 AM Microsof t Corporation c:\windows\system32\profapi.dll imm32 6.1.7600.16385 163.50 KB (167,424 bytes) 7/14/2009 5:08 AM Microsoft Corporation c:\windows\system32\imm32.dll msctf 6.1.7600.16385 1.02 MB (1,067,008 bytes) 7/14/2009 5:10 AM Microsoft Corporation c:\windows\system32\msctf.dll rpcrtremote 6.1.7601.17514 64.00 KB (65,536 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\rpcrtremote.dll apphelp 6.1.7601.17514 334.00 KB (342,016 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\apphelp.dll ws2_32 6.1.7601.17514 291.00 KB (297,984 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\ws2_32.dll nsi 6.1.7600.16385 13.50 KB (13,824 bytes) 7/14/2009 4:51 AM Microsof t Corporation c:\windows\system32\nsi.dll mswsock 6.1.7601.18254 319.50 KB (327,168 bytes) 10/8/2013 11:46 PM

Microsoft Corporation c:\windows\system32\mswsock.dll wshtcpip 6.1.7600.16385 13.00 KB (13,312 bytes) 7/14/2009 4:51 AM Microsoft Corporation c:\windows\system32\wshtcpip.dll wship6 6.1.7600.16385 13.50 KB (13,824 bytes) 7/14/2009 4:51 AM Microsof t Corporation c:\windows\system32\wship6.dll secur32 6.1.7601.18270 27.50 KB (28,160 bytes) 11/18/2013 12:27 PM Microsof t Corporation c:\windows\system32\secur32.dll sspicli 6.1.7601.18270 132.50 KB (135,680 bytes) 11/18/2013 12:27 PM Microsoft Corporation c:\windows\system32\sspicli.dll credssp 6.1.7601.17514 21.50 KB (22,016 bytes) 3/19/2011 3:24 AM Microsof t Corporation c:\windows\system32\credssp.dll winlogon 6.1.7601.17514 381.50 KB (390,656 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\winlogon.exe sysfer 12.1.2015.2015 447.95 KB (458,704 bytes) 9/3/2013 11:44 AM Symantec Corporation c:\windows\system32\sysfer.dll winsta 6.1.7601.17514 229.50 KB (235,008 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\winsta.dll uxinit 6.1.7600.16385 24.50 KB (25,088 bytes) 7/14/2009 5:24 AM Microsof t Corporation c:\windows\system32\uxinit.dll uxtheme 6.1.7600.16385 324.50 KB (332,288 bytes) 7/14/2009 5:25 AM Microsoft Corporation c:\windows\system32\uxtheme.dll cryptsp 6.1.7600.16385 78.00 KB (79,872 bytes) 7/14/2009 5:23 AM Microsof t Corporation c:\windows\system32\cryptsp.dll rsaenh 6.1.7600.16385 274.66 KB (281,256 bytes) 7/14/2009 5:23 AM Microsoft Corporation c:\windows\system32\rsaenh.dll windowscodecs 6.2.9200.16583 1.36 MB (1,424,384 bytes) 8/23/2013 11:33 PM Microsoft Corporation c:\windows\system32\windowscodecs.dll ole32 6.1.7601.17514 1.99 MB (2,086,912 bytes) 3/19/2011 3:26 AM Microsoft Corporation c:\windows\system32\ole32.dll wkscli 6.1.7601.17514 70.00 KB (71,680 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\wkscli.dll netjoin 6.1.7601.17514 184.50 KB (188,928 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\netjoin.dll netutils 6.1.7601.17514 28.50 KB (29,184 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\netutils.dll slc 6.1.7600.16385 30.00 KB (30,720 bytes) 7/14/2009 5:21 AM Microsof t Corporation c:\windows\system32\slc.dll mpr 6.1.7600.16385 79.00 KB (80,896 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\mpr.dll authz 6.1.7600.16385 173.50 KB (177,664 bytes) 7/14/2009 5:20 AM Microsoft Corporation c:\windows\system32\authz.dll services 6.1.7600.16385 321.00 KB (328,704 bytes) 7/14/2009 4:49 A M Microsoft Corporation c:\windows\system32\services.exe scext 6.1.7600.16385 87.00 KB (89,088 bytes) 7/14/2009 5:01 AM Microsof t Corporation c:\windows\system32\scext.dll scesrv 6.1.7601.17514 396.50 KB (406,016 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\scesrv.dll srvcli 6.1.7601.17514 125.00 KB (128,000 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\srvcli.dll ubpm 6.1.7600.16385 209.00 KB (214,016 bytes) 7/14/2009 5:01 AM Microsoft Corporation c:\windows\system32\ubpm.dll wtsapi32 6.1.7600.16385 53.00 KB (54,272 bytes) 7/14/2009 5:47 AM Microsoft Corporation c:\windows\system32\wtsapi32.dll lsass 6.1.7601.18270 30.00 KB (30,720 bytes) 11/18/2013 12:27 PM Microsof t Corporation c:\windows\system32\lsass.exe sspisrv 6.1.7601.18270 28.00 KB (28,672 bytes) 11/18/2013 12:27 PM Microsof t Corporation c:\windows\system32\sspisrv.dll lsasrv 6.1.7601.18270 1.38 MB (1,447,936 bytes) 11/18/2013 12:27 PM Microsoft Corporation c:\windows\system32\lsasrv.dll samsrv 6.1.7601.17514 741.00 KB (758,784 bytes) 3/19/2011 3:25 AM

Microsoft Corporation c:\windows\system32\samsrv.dll cryptdll 6.1.7600.16385 64.50 KB (66,048 bytes) 7/14/2009 5:19 AM Microsoft Corporation c:\windows\system32\cryptdll.dll msasn1 6.1.7601.17514 45.50 KB (46,592 bytes) 3/19/2011 3:24 AM Microsof t Corporation c:\windows\system32\msasn1.dll wevtapi 6.1.7600.16385 418.00 KB (428,032 bytes) 7/14/2009 5:16 AM Microsoft Corporation c:\windows\system32\wevtapi.dll cngaudit 6.1.7600.16385 18.50 KB (18,944 bytes) 7/14/2009 5:19 AM Microsoft Corporation c:\windows\system32\cngaudit.dll ncrypt 6.1.7601.18270 300.00 KB (307,200 bytes) 11/18/2013 12:27 PM Microsoft Corporation c:\windows\system32\ncrypt.dll bcrypt 6.1.7600.16385 121.00 KB (123,904 bytes) 7/14/2009 5:19 AM Microsoft Corporation c:\windows\system32\bcrypt.dll msprivs 6.1.7600.16385 2.00 KB (2,048 bytes) 7/14/2009 5:20 AM Microsof t Corporation c:\windows\system32\msprivs.dll negoexts 6.1.7600.16385 114.50 KB (117,248 bytes) 7/14/2009 5:20 A M Microsoft Corporation c:\windows\system32\negoexts.dll kerberos 6.1.7601.17926 699.00 KB (715,776 bytes) 1/11/2013 1:10 A M Microsoft Corporation c:\windows\system32\kerberos.dll msv1_0 6.1.7601.17514 305.00 KB (312,320 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\msv1_0.dll netlogon 6.1.7601.17514 679.50 KB (695,808 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\netlogon.dll dnsapi 6.1.7601.17570 349.50 KB (357,888 bytes) 7/15/2011 10:27 AM Microsoft Corporation c:\windows\system32\dnsapi.dll logoncli 6.1.7601.17514 182.50 KB (186,880 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\logoncli.dll schannel 6.1.7601.18270 333.00 KB (340,992 bytes) 11/18/2013 12:27 PM Microsoft Corporation c:\windows\system32\schannel.dll crypt32 6.1.7601.18277 1.41 MB (1,474,048 bytes) 11/18/2013 12:27 PM Microsoft Corporation c:\windows\system32\crypt32.dll wdigest 6.1.7600.16385 205.50 KB (210,432 bytes) 7/14/2009 5:20 AM Microsoft Corporation c:\windows\system32\wdigest.dll tspkg 6.1.7601.17514 84.00 KB (86,016 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\tspkg.dll pku2u 6.1.7600.16385 235.00 KB (240,640 bytes) 7/14/2009 5:20 AM Microsoft Corporation c:\windows\system32\pku2u.dll bcryptprimitives 6.1.7601.17514 291.12 KB (298,104 bytes) 3/19/201 1 3:25 AM Microsoft Corporation c:\windows\system32\bcryptprimitives.dll efslsaext 6.1.7600.16385 55.50 KB (56,832 bytes) 7/14/2009 5:20 AM Microsoft Corporation c:\windows\system32\efslsaext.dll scecli 6.1.7601.17514 227.50 KB (232,960 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\scecli.dll BtwProximityCP 6.4.0.640 151.78 KB (155,424 bytes) 4/1/2012 9:52 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btwproximit ycp.dll shlwapi 6.1.7601.17514 438.00 KB (448,512 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\shlwapi.dll credui 6.1.7601.18276 192.50 KB (197,120 bytes) 11/18/2013 12:27 PM Microsoft Corporation c:\windows\system32\credui.dll bthprops 6.1.7601.17514 704.50 KB (721,408 bytes) 3/19/2011 3:23 A M Microsoft Corporation c:\windows\system32\bthprops.cpl shell32 6.1.7601.18222 13.52 MB (14,172,672 bytes) 9/11/2013 9:48 PM Microsoft Corporation c:\windows\system32\shell32.dll oleaut32 6.1.7601.17676 841.50 KB (861,696 bytes) 1/25/2012 2:15 P M Microsoft Corporation c:\windows\system32\oleaut32.dll setupapi 6.1.7601.17514 1.81 MB (1,900,544 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\setupapi.dll cfgmgr32 6.1.7601.17514 203.00 KB (207,872 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\cfgmgr32.dll

devobj 6.1.7600.16385 91.00 KB (93,184 bytes) 7/14/2009 4:56 AM Microsof t Corporation c:\windows\system32\devobj.dll msimg32 6.1.7600.16385 8.00 KB (8,192 bytes) 7/14/2009 5:08 AM Microsof t Corporation c:\windows\system32\msimg32.dll psapi 6.1.7600.16385 9.00 KB (9,216 bytes) 7/14/2009 4:56 AM Microsof t Corporation c:\windows\system32\psapi.dll msvcr100 10.0.40219.325 809.83 KB (829,264 bytes) 1/17/2013 1:35 A M Microsoft Corporation c:\windows\system32\msvcr100.dll comctl32 6.10.7601.17514 1.94 MB (2,030,080 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\winsxs\amd64_microsoft.windows.common -controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll api-ms-win-downlevel-advapi32-l1-1-0 6.2.9200.16492 10.50 KB (10,752 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\api-ms-win-d ownlevel-advapi32-l1-1-0.dll keyiso 6.1.7600.16385 28.50 KB (29,184 bytes) 7/14/2009 5:19 AM Microsof t Corporation c:\windows\system32\keyiso.dll iphlpapi 6.1.7601.17514 142.50 KB (145,920 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\iphlpapi.dll winnsi 6.1.7600.16385 25.50 KB (26,112 bytes) 7/14/2009 4:51 AM Microsof t Corporation c:\windows\system32\winnsi.dll userenv 6.1.7601.17514 106.50 KB (109,056 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\userenv.dll efssvc 6.1.7600.16385 36.50 KB (37,376 bytes) 7/14/2009 5:20 AM Microsof t Corporation c:\windows\system32\efssvc.dll efscore 6.1.7601.17514 297.00 KB (304,128 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\efscore.dll efsutil 6.1.7600.16385 34.00 KB (34,816 bytes) 7/14/2009 5:20 AM Microsof t Corporation c:\windows\system32\efsutil.dll gpapi 6.1.7600.16385 94.50 KB (96,768 bytes) 7/14/2009 5:24 AM Microsof t Corporation c:\windows\system32\gpapi.dll dssenh 6.1.7600.16385 186.41 KB (190,880 bytes) 7/14/2009 5:23 AM Microsoft Corporation c:\windows\system32\dssenh.dll cryptnet 6.1.7601.18205 136.50 KB (139,776 bytes) 8/23/2013 11:32 PM Microsoft Corporation c:\windows\system32\cryptnet.dll wldap32 6.1.7601.17514 305.50 KB (312,832 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\wldap32.dll sensapi 6.1.7600.16385 15.50 KB (15,872 bytes) 7/14/2009 5:04 AM Microsof t Corporation c:\windows\system32\sensapi.dll certpoleng 6.1.7601.17514 70.00 KB (71,680 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\certpoleng.dll lsm 6.1.7601.17514 335.00 KB (343,040 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\lsm.exe sysntfy 6.1.7600.16385 22.50 KB (23,040 bytes) 7/14/2009 5:22 AM Microsof t Corporation c:\windows\system32\sysntfy.dll wmsgapi 6.1.7600.16385 14.50 KB (14,848 bytes) 7/14/2009 5:22 AM Microsof t Corporation c:\windows\system32\wmsgapi.dll pcwum 6.1.7600.16385 36.00 KB (36,864 bytes) 7/14/2009 4:49 AM Microsof t Corporation c:\windows\system32\pcwum.dll svchost 6.1.7600.16385 26.50 KB (27,136 bytes) 7/14/2009 5:01 AM Microsof t Corporation c:\windows\system32\svchost.exe umpnpmgr 6.1.7601.17621 395.00 KB (404,480 bytes) 7/15/2011 10:29 AM Microsoft Corporation c:\windows\system32\umpnpmgr.dll spinf 6.1.7600.16385 103.00 KB (105,472 bytes) 7/14/2009 4:56 AM Microsoft Corporation c:\windows\system32\spinf.dll devrtl 6.1.7600.16385 57.00 KB (58,368 bytes) 7/14/2009 4:56 AM Microsof t Corporation c:\windows\system32\devrtl.dll umpo 6.1.7600.16385 160.00 KB (163,840 bytes) 7/14/2009 4:57 AM Microsoft Corporation c:\windows\system32\umpo.dll rpcss 6.1.7601.17514 500.00 KB (512,000 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\rpcss.dll

clbcatq 2001.12.8530.16385 593.50 KB (607,744 bytes) 7/14/2009 5:30 A M Microsoft Corporation c:\windows\system32\clbcatq.dll msi 5.0.7601.17807 3.07 MB (3,216,384 bytes) 2/2/2013 6:04 AM Microsoft Corporation c:\windows\system32\msi.dll msiltcfg 5.0.7600.16385 19.50 KB (19,968 bytes) 7/14/2009 5:18 AM Microsoft Corporation c:\windows\system32\msiltcfg.dll version 6.1.7600.16385 28.50 KB (29,184 bytes) 7/14/2009 5:27 AM Microsof t Corporation c:\windows\system32\version.dll ntmarta 6.1.7600.16385 158.50 KB (162,304 bytes) 7/14/2009 5:20 AM Microsoft Corporation c:\windows\system32\ntmarta.dll wmidcprv 6.1.7601.17514 187.00 KB (191,488 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\wbem\wmidcprv.dll fastprox 6.1.7600.16385 888.00 KB (909,312 bytes) 7/14/2009 5:17 A M Microsoft Corporation c:\windows\system32\wbem\fastprox.dll wbemcomn 6.1.7601.17514 517.00 KB (529,408 bytes) 3/19/2011 3:19 A M Microsoft Corporation c:\windows\system32\wbemcomn.dll ntdsapi 6.1.7600.16385 148.50 KB (152,064 bytes) 7/14/2009 5:24 AM Microsoft Corporation c:\windows\system32\ntdsapi.dll wbemprox 6.1.7600.16385 42.50 KB (43,520 bytes) 7/14/2009 5:16 AM Microsoft Corporation c:\windows\system32\wbem\wbemprox.dll wbemsvc 6.1.7600.16385 63.00 KB (64,512 bytes) 7/14/2009 5:16 AM Microsof t Corporation c:\windows\system32\wbem\wbemsvc.dll wmiutils 6.1.7600.16385 134.00 KB (137,216 bytes) 7/14/2009 5:17 A M Microsoft Corporation c:\windows\system32\wbem\wmiutils.dll wintrust 6.1.7601.18205 219.00 KB (224,256 bytes) 8/23/2013 11:32 PM Microsoft Corporation c:\windows\system32\wintrust.dll sfc 6.1.7600.16385 3.00 KB (3,072 bytes) 7/14/2009 4:55 AM Microsof t Corporation c:\windows\system32\sfc.dll sfc_os 6.1.7600.16385 44.00 KB (45,056 bytes) 7/14/2009 4:56 AM Microsof t Corporation c:\windows\system32\sfc_os.dll ibmpmsvc 1.67.4.4 65.29 KB (66,856 bytes) 11/11/2013 11:22 AM Lenovo. c:\windows\system32\ibmpmsvc.exe rpcepmap 6.1.7600.16385 65.50 KB (67,072 bytes) 7/14/2009 4:51 AM Microsoft Corporation c:\windows\system32\rpcepmap.dll firewallapi 6.1.7600.16385 730.50 KB (748,032 bytes) 7/14/2009 5:38 A M Microsoft Corporation c:\windows\system32\firewallapi.dll fwpuclnt 6.1.7601.18283 316.50 KB (324,096 bytes) 11/18/2013 12:27 PM Microsoft Corporation c:\windows\system32\fwpuclnt.dll wevtsvc 6.1.7601.17514 1.57 MB (1,646,080 bytes) 3/19/2011 3:26 AM Microsoft Corporation c:\windows\system32\wevtsvc.dll audiosrv 6.1.7601.17514 663.50 KB (679,424 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\audiosrv.dll powrprof 6.1.7600.16385 163.50 KB (167,424 bytes) 7/14/2009 4:57 A M Microsoft Corporation c:\windows\system32\powrprof.dll mmdevapi 6.1.7600.16385 277.50 KB (284,160 bytes) 7/14/2009 5:48 A M Microsoft Corporation c:\windows\system32\mmdevapi.dll propsys 7.0.7601.17514 1.16 MB (1,212,416 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\propsys.dll avrt 6.1.7600.16385 18.00 KB (18,432 bytes) 7/14/2009 5:52 AM Microsof t Corporation c:\windows\system32\avrt.dll lmhsvc 6.1.7600.16385 23.00 KB (23,552 bytes) 7/14/2009 5:39 AM Microsof t Corporation c:\windows\system32\lmhsvc.dll nrpsrv 6.1.7601.17514 15.00 KB (15,360 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\nrpsrv.dll dhcpcore 6.1.7601.17514 310.50 KB (317,952 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\dhcpcore.dll dhcpcore6 6.1.7601.17970 221.50 KB (226,816 bytes) 2/2/2013 6:27 AM Microsoft Corporation c:\windows\system32\dhcpcore6.dll dhcpcsvc6 6.1.7601.17970 54.00 KB (55,296 bytes) 2/2/2013 6:27 AM Microsoft Corporation c:\windows\system32\dhcpcsvc6.dll

dhcpcsvc 6.1.7600.16385 85.00 KB (87,040 bytes) 7/14/2009 4:51 AM Microsoft Corporation c:\windows\system32\dhcpcsvc.dll audioses 6.1.7601.17514 289.50 KB (296,448 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\audioses.dll wscsvc 6.1.7600.16385 95.00 KB (97,280 bytes) 7/14/2009 5:18 AM Microsof t Corporation c:\windows\system32\wscsvc.dll dbghelp 6.1.7601.17514 1.04 MB (1,087,488 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\dbghelp.dll imagehlp 6.1.7601.17787 79.50 KB (81,408 bytes) 5/29/2012 8:25 PM Microsoft Corporation c:\windows\system32\imagehlp.dll wuapi 7.6.7600.256 685.52 KB (701,976 bytes) 7/2/2012 8:34 AM Microsoft Corporation c:\windows\system32\wuapi.dll cabinet 6.1.7601.17514 92.50 KB (94,720 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\cabinet.dll rtkapo64 11.0.6000.324 3.52 MB (3,693,640 bytes) 8/23/2013 10:01 AM Realtek Semiconductor Corp. c:\windows\system32\rtkapo64.dll audioeng 6.1.7600.16385 430.50 KB (440,832 bytes) 7/14/2009 5:48 A M Microsoft Corporation c:\windows\system32\audioeng.dll r4eel64a 7.2.8000.17 138.27 KB (141,584 bytes) 8/23/2013 10:01 AM Dolby Laboratories c:\windows\system32\r4eel64a.dll r4eed64a 7.2.8000.17 424.77 KB (434,960 bytes) 8/23/2013 10:01 AM Dolby Laboratories c:\windows\system32\r4eed64a.dll nlaapi 6.1.7601.17964 69.00 KB (70,656 bytes) 2/2/2013 6:23 AM Microsof t Corporation c:\windows\system32\nlaapi.dll napinsp 6.1.7600.16385 66.50 KB (68,096 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\napinsp.dll pnrpnsp 6.1.7600.16385 84.00 KB (86,016 bytes) 7/14/2009 5:41 AM Microsof t Corporation c:\windows\system32\pnrpnsp.dll mdnsnsp 3.0.0.10 129.85 KB (132,968 bytes) 8/30/2011 11:05 PM Apple Inc. c:\program files\bonjour\mdnsnsp.dll rasadhlp 6.1.7600.16385 16.00 KB (16,384 bytes) 7/14/2009 5:40 AM Microsoft Corporation c:\windows\system32\rasadhlp.dll winrnr 6.1.7600.16385 28.00 KB (28,672 bytes) 7/14/2009 5:23 AM Microsof t Corporation c:\windows\system32\winrnr.dll cscsvc 6.1.7601.17514 676.00 KB (692,224 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\cscsvc.dll peerdist 6.1.7600.16385 177.50 KB (181,760 bytes) 7/14/2009 5:41 A M Microsoft Corporation c:\windows\system32\peerdist.dll taskschd 6.1.7601.17514 1.14 MB (1,197,056 bytes) 3/19/2011 3:26 A M Microsoft Corporation c:\windows\system32\taskschd.dll mstask 6.1.7601.17514 232.50 KB (238,080 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\mstask.dll uxsms 6.1.7600.16385 38.00 KB (38,912 bytes) 7/14/2009 5:07 AM Microsof t Corporation c:\windows\system32\uxsms.dll wlansvc 6.1.7600.16385 866.00 KB (886,784 bytes) 7/14/2009 5:37 AM Microsoft Corporation c:\windows\system32\wlansvc.dll dsrole 6.1.7600.16385 32.00 KB (32,768 bytes) 7/14/2009 5:20 AM Microsof t Corporation c:\windows\system32\dsrole.dll wlanmsm 6.1.7601.17514 405.00 KB (414,720 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\wlanmsm.dll wlansec 6.1.7600.16385 437.50 KB (448,000 bytes) 7/14/2009 5:37 AM Microsoft Corporation c:\windows\system32\wlansec.dll onex 6.1.7601.17514 230.00 KB (235,520 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\onex.dll eappprxy 6.1.7600.16385 63.00 KB (64,512 bytes) 7/14/2009 5:42 AM Microsoft Corporation c:\windows\system32\eappprxy.dll eappcfg 6.1.7600.16385 257.50 KB (263,680 bytes) 7/14/2009 5:42 AM Microsoft Corporation c:\windows\system32\eappcfg.dll wlgpclnt 6.1.7600.16385 106.00 KB (108,544 bytes) 7/14/2009 5:37 A M Microsoft Corporation c:\windows\system32\wlgpclnt.dll

l2gpstore 6.1.7600.16385 69.50 KB (71,168 bytes) 7/14/2009 5:37 AM Microsoft Corporation c:\windows\system32\l2gpstore.dll wlanutil 6.1.7600.16385 10.50 KB (10,752 bytes) 7/14/2009 5:37 AM Microsoft Corporation c:\windows\system32\wlanutil.dll winscard 6.1.7601.17514 212.50 KB (217,600 bytes) 3/19/2011 3:23 A M Microsoft Corporation c:\windows\system32\winscard.dll msxml6 6.30.7601.17988 1.91 MB (2,002,432 bytes) 1/11/2013 1:10 AM Microsoft Corporation c:\windows\system32\msxml6.dll api-ms-win-downlevel-shlwapi-l1-1-0 6.2.9200.16492 9.50 KB (9,728 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\api-ms-win-d ownlevel-shlwapi-l1-1-0.dll eapp3hst 6.1.7601.17514 340.00 KB (348,160 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\eapp3hst.dll netcfgx 6.1.7601.17514 507.50 KB (519,680 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\netcfgx.dll eapphost 6.1.7601.17514 296.50 KB (303,616 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\eapphost.dll pcasvc 6.1.7600.16385 182.00 KB (186,368 bytes) 7/14/2009 5:02 AM Microsoft Corporation c:\windows\system32\pcasvc.dll aepic 6.1.7600.16385 58.50 KB (59,904 bytes) 7/14/2009 5:02 AM Microsof t Corporation c:\windows\system32\aepic.dll sysmain 6.1.7601.17514 1.66 MB (1,743,360 bytes) 3/19/2011 3:26 AM Microsoft Corporation c:\windows\system32\sysmain.dll trkwks 6.1.7600.16385 117.00 KB (119,808 bytes) 7/14/2009 5:29 AM Microsoft Corporation c:\windows\system32\trkwks.dll hidserv 6.1.7600.16385 38.00 KB (38,912 bytes) 7/14/2009 5:36 AM Microsof t Corporation c:\windows\system32\hidserv.dll hid 6.1.7600.16385 29.50 KB (30,208 bytes) 7/14/2009 5:36 AM Microsof t Corporation c:\windows\system32\hid.dll portabledeviceapi 6.1.7601.17514 740.50 KB (758,272 bytes) 3/19/201 1 3:25 AM Microsoft Corporation c:\windows\system32\portabledeviceapi.dl l portabledeviceconnectapi 6.1.7600.16385 76.00 KB (77,824 bytes) 7/14/200 9 5:51 AM Microsoft Corporation c:\windows\system32\portabledeviceconnec tapi.dll netman 6.1.7600.16385 352.00 KB (360,448 bytes) 7/14/2009 5:38 AM Microsoft Corporation c:\windows\system32\netman.dll netshell 6.1.7601.17514 2.53 MB (2,652,160 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\netshell.dll rasapi32 6.1.7600.16385 375.50 KB (384,512 bytes) 7/14/2009 5:40 A M Microsoft Corporation c:\windows\system32\rasapi32.dll rasman 6.1.7600.16385 98.00 KB (100,352 bytes) 7/14/2009 5:40 AM Microsoft Corporation c:\windows\system32\rasman.dll hnetcfg 6.1.7600.16385 414.50 KB (424,448 bytes) 7/14/2009 5:38 AM Microsoft Corporation c:\windows\system32\hnetcfg.dll atl 3.5.2284.0 88.50 KB (90,624 bytes) 7/14/2009 6:04 AM Microsof t Corporation c:\windows\system32\atl.dll cscobj 6.1.7601.17514 235.00 KB (240,640 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\cscobj.dll rasdlg 6.1.7600.16385 840.50 KB (860,672 bytes) 7/14/2009 5:40 AM Microsoft Corporation c:\windows\system32\rasdlg.dll mprapi 6.1.7601.17514 216.00 KB (221,184 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\mprapi.dll rtutils 6.1.7601.17514 51.00 KB (52,224 bytes) 3/19/2011 3:24 AM Microsof t Corporation c:\windows\system32\rtutils.dll wudfsvc 6.2.9200.16384 83.00 KB (84,992 bytes) 2/5/2013 8:56 AM Microsof t Corporation c:\windows\system32\wudfsvc.dll wudfplatform 6.2.9200.16384 189.50 KB (194,048 bytes) 2/5/2013 8:56 AM Microsoft Corporation c:\windows\system32\wudfplatform.dll fntcache 6.2.9200.16492 1.12 MB (1,175,552 bytes) 8/22/2013 7:47 P

M Microsoft Corporation c:\windows\system32\fntcache.dll es 2001.12.8530.16385 393.50 KB (402,944 bytes) 7/14/2009 5:30 A M Microsoft Corporation c:\windows\system32\es.dll nsisvc 6.1.7600.16385 25.00 KB (25,600 bytes) 7/14/2009 4:51 AM Microsof t Corporation c:\windows\system32\nsisvc.dll netprofm 6.1.7600.16385 449.00 KB (459,776 bytes) 7/14/2009 5:42 A M Microsoft Corporation c:\windows\system32\netprofm.dll wdi 6.1.7600.16385 88.50 KB (90,624 bytes) 7/14/2009 5:01 AM Microsof t Corporation c:\windows\system32\wdi.dll npmproxy 6.1.7600.16385 31.00 KB (31,744 bytes) 7/14/2009 5:42 AM Microsoft Corporation c:\windows\system32\npmproxy.dll perftrack 6.1.7600.16385 847.50 KB (867,840 bytes) 7/14/2009 5:03 A M Microsoft Corporation c:\windows\system32\perftrack.dll wer 6.1.7600.16385 473.00 KB (484,352 bytes) 7/14/2009 5:11 AM Microsoft Corporation c:\windows\system32\wer.dll dwmapi 6.1.7600.16385 80.50 KB (82,432 bytes) 7/14/2009 5:07 AM Microsof t Corporation c:\windows\system32\dwmapi.dll webio 6.1.7601.17725 386.50 KB (395,776 bytes) 1/26/2012 10:02 AM Microsoft Corporation c:\windows\system32\webio.dll sstpsvc 6.1.7600.16385 73.50 KB (75,264 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\sstpsvc.dll httpapi 6.1.7601.17514 44.00 KB (45,056 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\httpapi.dll fthsvc 6.1.7600.16385 63.50 KB (65,024 bytes) 7/14/2009 5:02 AM Microsof t Corporation c:\windows\system32\fthsvc.dll profsvc 6.1.7601.17832 205.00 KB (209,920 bytes) 2/2/2013 6:03 AM Microsoft Corporation c:\windows\system32\profsvc.dll themeservice 6.1.7600.16385 43.50 KB (44,544 bytes) 7/14/2009 5:24 AM Microsoft Corporation c:\windows\system32\themeservice.dll sens 6.1.7600.16385 63.00 KB (64,512 bytes) 7/14/2009 5:04 AM Microsof t Corporation c:\windows\system32\sens.dll eapsvc 6.1.7600.16385 108.50 KB (111,104 bytes) 7/14/2009 5:42 AM Microsoft Corporation c:\windows\system32\eapsvc.dll umb 6.1.7601.17514 58.50 KB (59,904 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\umb.dll shsvcs 6.1.7601.17514 362.00 KB (370,688 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\shsvcs.dll schedsvc 6.1.7601.17514 1.06 MB (1,110,016 bytes) 3/19/2011 3:26 A M Microsoft Corporation c:\windows\system32\schedsvc.dll netapi32 6.1.7601.17887 71.50 KB (73,216 bytes) 1/11/2013 1:13 AM Microsoft Corporation c:\windows\system32\netapi32.dll ktmw32 6.1.7600.16385 22.50 KB (23,040 bytes) 7/14/2009 4:49 AM Microsof t Corporation c:\windows\system32\ktmw32.dll xmllite 1.3.1001.0 195.00 KB (199,680 bytes) 8/9/2011 12:59 PM Microsoft Corporation c:\windows\system32\xmllite.dll fveapi 6.1.7601.17514 337.50 KB (345,600 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\fveapi.dll tbs 6.1.7600.16385 19.50 KB (19,968 bytes) 7/14/2009 4:51 AM Microsof t Corporation c:\windows\system32\tbs.dll fvecerts 6.1.7600.16385 20.00 KB (20,480 bytes) 7/14/2009 4:51 AM Microsoft Corporation c:\windows\system32\fvecerts.dll wiarpc 6.1.7600.16385 42.50 KB (43,520 bytes) 7/14/2009 6:05 AM Microsof t Corporation c:\windows\system32\wiarpc.dll taskcomp 6.1.7601.17514 462.50 KB (473,600 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\taskcomp.dll wmisvc 6.1.7600.16385 237.00 KB (242,688 bytes) 7/14/2009 5:17 AM Microsoft Corporation c:\windows\system32\wbem\wmisvc.dll vssapi 6.1.7601.17514 1.67 MB (1,753,088 bytes) 3/19/2011 3:26 AM Microsoft Corporation c:\windows\system32\vssapi.dll vsstrace 6.1.7600.16385 75.00 KB (76,800 bytes) 7/14/2009 5:06 AM

Microsoft Corporation c:\windows\system32\vsstrace.dll samcli 6.1.7601.17514 66.00 KB (67,584 bytes) 3/19/2011 3:24 AM Microsof t Corporation c:\windows\system32\samcli.dll samlib 6.1.7600.16385 104.50 KB (107,008 bytes) 7/14/2009 5:23 AM Microsoft Corporation c:\windows\system32\samlib.dll wbemcore 6.1.7601.17514 1.17 MB (1,225,216 bytes) 3/19/2011 3:19 A M Microsoft Corporation c:\windows\system32\wbem\wbemcore.dll esscli 6.1.7600.16385 430.00 KB (440,320 bytes) 7/14/2009 5:17 AM Microsoft Corporation c:\windows\system32\wbem\esscli.dll repdrvfs 6.1.7600.16385 441.00 KB (451,584 bytes) 7/14/2009 5:17 A M Microsoft Corporation c:\windows\system32\wbem\repdrvfs.dll wmiprvsd 6.1.7601.17514 736.50 KB (754,176 bytes) 3/19/2011 3:26 A M Microsoft Corporation c:\windows\system32\wbem\wmiprvsd.dll ncobjapi 6.1.7600.16385 67.50 KB (69,120 bytes) 7/14/2009 5:17 AM Microsoft Corporation c:\windows\system32\ncobjapi.dll wbemess 6.1.7600.16385 494.00 KB (505,856 bytes) 7/14/2009 5:17 AM Microsoft Corporation c:\windows\system32\wbem\wbemess.dll iphlpsvc 6.1.7601.17964 556.00 KB (569,344 bytes) 2/2/2013 6:23 AM Microsoft Corporation c:\windows\system32\iphlpsvc.dll sqmapi 6.1.7601.17514 239.00 KB (244,736 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\sqmapi.dll wdscore 6.1.7600.16385 265.00 KB (271,360 bytes) 7/14/2009 4:58 AM Microsoft Corporation c:\windows\system32\wdscore.dll nci 6.1.7601.17514 88.00 KB (90,112 bytes) 3/19/2011 3:24 AM Microsof t Corporation c:\windows\system32\nci.dll srvsvc 6.1.7601.17514 230.50 KB (236,032 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\srvsvc.dll browser 6.1.7601.17887 133.50 KB (136,704 bytes) 1/11/2013 1:13 AM Microsoft Corporation c:\windows\system32\browser.dll sscore 6.1.7601.17514 13.00 KB (13,312 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\sscore.dll clusapi 6.1.7601.17514 307.00 KB (314,368 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\clusapi.dll resutils 6.1.7600.16385 84.00 KB (86,016 bytes) 7/14/2009 5:04 AM Microsoft Corporation c:\windows\system32\resutils.dll ncprov 6.1.7600.16385 76.50 KB (78,336 bytes) 7/14/2009 5:17 AM Microsof t Corporation c:\windows\system32\wbem\ncprov.dll qmgr 7.5.7601.17514 830.00 KB (849,920 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\qmgr.dll bitsperf 7.5.7601.17514 24.00 KB (24,576 bytes) 3/19/2011 3:22 AM Microsoft Corporation c:\windows\system32\bitsperf.dll bitsigd 7.5.7600.16385 55.50 KB (56,832 bytes) 7/14/2009 5:16 AM Microsof t Corporation c:\windows\system32\bitsigd.dll winhttp 6.1.7601.17514 434.00 KB (444,416 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\winhttp.dll qmgrprxy 7.5.7600.16385 43.50 KB (44,544 bytes) 7/14/2009 5:16 AM Microsoft Corporation c:\windows\system32\qmgrprxy.dll wuaueng 7.6.7600.256 2.32 MB (2,428,952 bytes) 7/2/2012 8:34 AM Microsoft Corporation c:\windows\system32\wuaueng.dll esent 6.1.7601.17577 2.45 MB (2,565,632 bytes) 7/18/2011 9:54 AM Microsoft Corporation c:\windows\system32\esent.dll winspool 6.1.7601.17514 432.00 KB (442,368 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\winspool.drv mspatcha 6.1.7600.16385 45.50 KB (46,592 bytes) 7/14/2009 4:51 AM Microsoft Corporation c:\windows\system32\mspatcha.dll seclogon 6.1.7601.17514 30.00 KB (30,720 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\seclogon.dll rasmans 6.1.7601.17514 336.00 KB (344,064 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\rasmans.dll rastapi 6.1.7600.16385 80.50 KB (82,432 bytes) 7/14/2009 5:40 AM Microsof

t Corporation c:\windows\system32\rastapi.dll tapi32 6.1.7600.16385 243.00 KB (248,832 bytes) 7/14/2009 6:11 AM Microsoft Corporation c:\windows\system32\tapi32.dll rasppp 6.1.7601.17514 206.50 KB (211,456 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\rasppp.dll vpnike 6.1.7601.17514 257.00 KB (263,168 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\vpnike.dll raschap 6.1.7601.17514 330.00 KB (337,920 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\raschap.dll mmcss 6.1.7600.16385 66.00 KB (67,584 bytes) 7/14/2009 5:52 AM Microsof t Corporation c:\windows\system32\mmcss.dll appmgmts 6.1.7600.16385 189.00 KB (193,536 bytes) 7/14/2009 5:24 A M Microsoft Corporation c:\windows\system32\appmgmts.dll adsldpc 6.1.7600.16385 231.00 KB (236,544 bytes) 7/14/2009 5:23 AM Microsoft Corporation c:\windows\system32\adsldpc.dll ikeext 6.1.7601.18283 839.50 KB (859,648 bytes) 11/18/2013 12:27 PM Microsoft Corporation c:\windows\system32\ikeext.dll tschannel 6.1.7600.16385 17.00 KB (17,408 bytes) 7/14/2009 5:16 AM Microsoft Corporation c:\windows\system32\tschannel.dll actxprxy 6.1.7601.17514 936.00 KB (958,464 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\actxprxy.dll aelupsvc 6.1.7600.16385 70.50 KB (72,192 bytes) 7/14/2009 4:51 AM Microsoft Corporation c:\windows\system32\aelupsvc.dll gpsvc 6.1.7601.17514 759.50 KB (777,728 bytes) 3/19/2011 3:26 AM Microsoft Corporation c:\windows\system32\gpsvc.dll dnsrslvr 6.1.7601.17570 179.00 KB (183,296 bytes) 7/15/2011 10:27 AM Microsoft Corporation c:\windows\system32\dnsrslvr.dll dnsext 6.1.7600.16385 8.00 KB (8,192 bytes) 7/14/2009 5:42 AM Microsof t Corporation c:\windows\system32\dnsext.dll wkssvc 6.1.7601.17514 116.00 KB (118,784 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\wkssvc.dll cryptsvc 6.1.7601.18205 180.00 KB (184,320 bytes) 8/23/2013 11:32 PM Microsoft Corporation c:\windows\system32\cryptsvc.dll nlasvc 6.1.7601.17964 296.00 KB (303,104 bytes) 2/2/2013 6:23 AM Microsoft Corporation c:\windows\system32\nlasvc.dll ncsi 6.1.7601.17964 211.50 KB (216,576 bytes) 2/2/2013 6:23 AM Microsoft Corporation c:\windows\system32\ncsi.dll ssdpapi 6.1.7600.16385 50.00 KB (51,200 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\ssdpapi.dll tapisrv 6.1.7601.17514 309.50 KB (316,928 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\tapisrv.dll unimdm 6.1.7601.17514 314.00 KB (321,536 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\unimdm.tsp uniplat 6.1.7600.16385 22.50 KB (23,040 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\uniplat.dll kmddsp 6.1.7600.16385 46.00 KB (47,104 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\kmddsp.tsp ndptsp 6.1.7600.16385 59.50 KB (60,928 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\ndptsp.tsp hidphone 6.1.7600.16385 38.00 KB (38,912 bytes) 7/14/2009 6:11 AM Microsoft Corporation c:\windows\system32\hidphone.tsp winmm 6.1.7600.16385 212.50 KB (217,600 bytes) 7/14/2009 5:48 AM Microsoft Corporation c:\windows\system32\winmm.dll wlanext 6.1.7600.16385 97.00 KB (99,328 bytes) 7/14/2009 5:37 AM Microsof t Corporation c:\windows\system32\wlanext.exe iwmssvc 15.3.0.0 2.38 MB (2,499,376 bytes) 8/23/2012 4:06 PM Intel(R) Corporation c:\windows\system32\iwmssvc.dll mfc100 10.0.40219.325 5.32 MB (5,574,984 bytes) 6/11/2011 1:15 AM Microsoft Corporation c:\windows\system32\mfc100.dll comctl32 5.82.7601.18201 619.00 KB (633,856 bytes) 10/8/2013 11:46

PM Microsoft Corporation c:\windows\winsxs\amd64_microsoft.windows.common -controls_6595b64144ccf1df_5.82.7601.18201_none_a4d3b9377117c3df\comctl32.dll msvcp100 10.0.40219.325 593.83 KB (608,080 bytes) 6/11/2011 1:15 A M Microsoft Corporation c:\windows\system32\msvcp100.dll mfc100enu 10.0.40219.325 53.83 KB (55,120 bytes) 6/11/2011 1:15 AM Microsoft Corporation c:\windows\system32\mfc100enu.dll wlanapi 6.1.7600.16385 111.50 KB (114,176 bytes) 7/14/2009 5:37 AM Microsoft Corporation c:\windows\system32\wlanapi.dll libeay32 1.0.0.2 1.75 MB (1,837,360 bytes) 8/23/2012 4:03 PM The OpenSSL Project, http://www.openssl.org/ c:\program files\common files\in tel\wirelesscommon\libeay32.dll psregapi 15.3.0.0 170.80 KB (174,896 bytes) 8/23/2012 4:03 P M Intel(R) Corporation c:\program files\common files\intel\wirelesscomm on\psregapi.dll traceapi 15.3.0.0 292.30 KB (299,312 bytes) 8/23/2012 4:03 P M Intel(R) Corporation c:\program files\common files\intel\wirelesscomm on\traceapi.dll ccxplugin 15.3.0.0 401.30 KB (410,928 bytes) 8/23/2012 4:05 P M Intel(R) Corporation c:\program files\intel\wifi\bin\kmmdlplugins\ccx plugin.dll intstngs 15.3.0.0 109.30 KB (111,920 bytes) 8/23/2012 4:04 P M Intel(R) Corporation c:\program files\intel\wifi\bin\intstngs.dll iwmsprov 15.3.0.0 59.30 KB (60,720 bytes) 8/23/2012 4:04 PM Intel(R) Corporation c:\program files\intel\wifi\bin\iwmsprov.dll conhost 6.1.7601.18229 330.50 KB (338,432 bytes) 9/11/2013 9:49 PM Microsoft Corporation c:\windows\system32\conhost.exe spoolsv 6.1.7601.17777 546.00 KB (559,104 bytes) 2/5/2013 8:53 AM Microsoft Corporation c:\windows\system32\spoolsv.exe localspl 6.1.7601.17841 934.50 KB (956,928 bytes) 1/11/2013 1:10 A M Microsoft Corporation c:\windows\system32\localspl.dll spoolss 6.1.7600.16385 56.50 KB (57,856 bytes) 7/14/2009 6:09 AM Microsof t Corporation c:\windows\system32\spoolss.dll printisolationproxy 6.1.7601.17514 47.00 KB (48,128 bytes) 3/19/2011 3:23 A M Microsoft Corporation c:\windows\system32\printisolationproxy.dll cpwmon64 Not Available 85.11 KB (87,152 bytes) 8/24/2013 3:49 PM Not Available c:\windows\system32\cpwmon64.dll fxsmon 6.1.7601.17514 41.00 KB (41,984 bytes) 3/19/2011 3:22 AM Microsof t Corporation c:\windows\system32\fxsmon.dll tcpmon 6.1.7600.16385 190.50 KB (195,072 bytes) 7/14/2009 6:09 AM Microsoft Corporation c:\windows\system32\tcpmon.dll snmpapi 6.1.7600.16385 27.00 KB (27,648 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\snmpapi.dll wsnmp32 6.1.7601.17514 65.50 KB (67,072 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\wsnmp32.dll usbmon 6.1.7600.16385 44.00 KB (45,056 bytes) 7/14/2009 6:09 AM Microsof t Corporation c:\windows\system32\usbmon.dll wls0wndh 6.1.7600.16385 10.50 KB (10,752 bytes) 7/14/2009 5:22 AM Microsoft Corporation c:\windows\system32\wls0wndh.dll wsdmon 6.1.7600.16385 219.50 KB (224,768 bytes) 7/14/2009 6:09 AM Microsoft Corporation c:\windows\system32\wsdmon.dll wsdapi 6.1.7601.17514 564.00 KB (577,536 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\wsdapi.dll webservices 6.1.7601.17514 1.10 MB (1,158,656 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\webservices.dll fundisc 6.1.7600.16385 190.00 KB (194,560 bytes) 7/14/2009 5:05 AM Microsoft Corporation c:\windows\system32\fundisc.dll fdpnp 6.1.7600.16385 50.00 KB (51,200 bytes) 7/14/2009 5:05 AM Microsof t Corporation c:\windows\system32\fdpnp.dll winprint 6.1.7601.17514 38.50 KB (39,424 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\spool\prtprocs\x64\winprint.dll

win32spl 6.1.7601.18142 733.50 KB (751,104 bytes) 8/23/2013 8:55 P M Microsoft Corporation c:\windows\system32\win32spl.dll inetpp 6.1.7601.17514 163.00 KB (166,912 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\inetpp.dll cscapi 6.1.7601.17514 45.00 KB (46,080 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\cscapi.dll tcpmib 6.1.7600.16385 38.00 KB (38,912 bytes) 7/14/2009 6:09 AM Microsof t Corporation c:\windows\system32\tcpmib.dll mgmtapi 6.1.7600.16385 22.00 KB (22,528 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\mgmtapi.dll ps5ui 0.3.6000.16386 830.50 KB (850,432 bytes) 8/24/2013 3:49 PM Microsoft Corporation c:\windows\system32\spool\drivers\x64\3\ps5ui.dll pscript5 0.3.6000.16386 614.00 KB (628,736 bytes) 8/24/2013 3:49 P M Microsoft Corporation c:\windows\system32\spool\drivers\x64\3\pscript5 .dll mscms 6.1.7601.17514 611.00 KB (625,664 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\mscms.dll bfe 6.1.7601.17514 688.50 KB (705,024 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\bfe.dll dps 6.1.7601.17514 159.00 KB (162,816 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\dps.dll radardt 6.1.7600.16385 95.50 KB (97,792 bytes) 7/14/2009 5:02 AM Microsof t Corporation c:\windows\system32\radardt.dll wdiasqmmodule 6.1.7601.17514 35.50 KB (36,352 bytes) 3/19/2011 3:22 AM Microsoft Corporation c:\windows\system32\wdiasqmmodule.dll diagperf 6.1.7601.17514 1.28 MB (1,340,416 bytes) 3/19/2011 3:26 A M Microsoft Corporation c:\windows\system32\diagperf.dll saibsvc 1.0.37.0 446.48 KB (457,200 bytes) 2/10/2011 3:06 AM Not Available c:\program files (x86)\roxio\backontrack\app\saibsvc.exe wow64 6.1.7601.18247 238.00 KB (243,712 bytes) 10/8/2013 11:46 PM Microsoft Corporation c:\windows\system32\wow64.dll wow64win 6.1.7601.18015 354.00 KB (362,496 bytes) 2/2/2013 6:11 AM Microsoft Corporation c:\windows\system32\wow64win.dll wow64cpu 6.1.7601.18015 13.00 KB (13,312 bytes) 2/2/2013 6:11 AM Microsoft Corporation c:\windows\system32\wow64cpu.dll AcPrfMgrSvc 6.0.1.9 130.29 KB (133,416 bytes) 3/18/2013 5:26 PM Lenovo c:\program files (x86)\lenovo\access connections\acprfmgrsvc.exe taskhost 6.1.7601.18010 67.00 KB (68,608 bytes) 1/11/2013 1:10 AM Microsoft Corporation c:\windows\system32\taskhost.exe playsndsrv 6.1.7600.16385 83.00 KB (84,992 bytes) 7/14/2009 5:48 AM Microsoft Corporation c:\windows\system32\playsndsrv.dll wininet 11.0.9600.16428 2.22 MB (2,332,160 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\windows\system32\wininet.dll api-ms-win-downlevel-user32-l1-1-0 6.2.9200.16492 4.00 KB (4,096 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\api-ms-win-d ownlevel-user32-l1-1-0.dll api-ms-win-downlevel-version-l1-1-0 6.2.9200.16492 3.00 KB (3,072 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\api-ms-win-d ownlevel-version-l1-1-0.dll api-ms-win-downlevel-normaliz-l1-1-0 6.2.9200.16492 2.50 KB (2,560 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\api-ms-win-d ownlevel-normaliz-l1-1-0.dll normaliz 6.1.7600.16385 2.50 KB (2,560 bytes) 7/14/2009 4:56 AM Microsoft Corporation c:\windows\system32\normaliz.dll iertutil 11.0.9600.16428 2.64 MB (2,764,288 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\windows\system32\iertutil.dll hotstartuseragent 6.1.7601.17514 26.50 KB (27,136 bytes) 3/19/2011 3:23 A M Microsoft Corporation c:\windows\system32\hotstartuseragent.dll msctfmonitor 6.1.7600.16385 27.50 KB (28,160 bytes) 7/14/2009 5:09 AM Microsoft Corporation c:\windows\system32\msctfmonitor.dll

msutb 6.1.7600.16385 230.00 KB (235,520 bytes) 7/14/2009 5:09 AM Microsoft Corporation c:\windows\system32\msutb.dll api-ms-win-downlevel-ole32-l1-1-0 6.2.9200.16492 5.50 KB (5,632 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\api-ms-win-d ownlevel-ole32-l1-1-0.dll api-ms-win-downlevel-advapi32-l2-1-0 6.2.9200.16492 3.50 KB (3,584 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\api-ms-win-d ownlevel-advapi32-l2-1-0.dll dimsjob 6.1.7600.16385 39.50 KB (40,448 bytes) 7/14/2009 5:23 AM Microsof t Corporation c:\windows\system32\dimsjob.dll sqmapi 6.2.9200.16384 286.20 KB (293,072 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\program files\internet explorer\sqmapi.dll wdmaud 6.1.7601.17514 212.00 KB (217,088 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\wdmaud.drv ksuser 6.1.7600.16385 5.00 KB (5,120 bytes) 7/14/2009 5:48 AM Microsof t Corporation c:\windows\system32\ksuser.dll msacm32 6.1.7600.16385 25.00 KB (25,600 bytes) 7/14/2009 5:48 AM Microsof t Corporation c:\windows\system32\msacm32.drv msacm32 6.1.7600.16385 81.50 KB (83,456 bytes) 7/14/2009 5:48 AM Microsof t Corporation c:\windows\system32\msacm32.dll midimap 6.1.7600.16385 20.00 KB (20,480 bytes) 7/14/2009 5:48 AM Microsof t Corporation c:\windows\system32\midimap.dll pgphk 10.3.0.9307 50.05 KB (51,256 bytes) 6/28/2013 4:31 AM Symantec Corporation c:\windows\system32\pgphk.dll dwm 6.1.7600.16385 117.50 KB (120,320 bytes) 7/14/2009 5:07 AM Microsoft Corporation c:\windows\system32\dwm.exe dwmredir 6.1.7601.17514 125.50 KB (128,512 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\dwmredir.dll dwmcore 6.1.7601.17514 1.56 MB (1,632,256 bytes) 3/19/2011 3:26 AM Microsoft Corporation c:\windows\system32\dwmcore.dll d3d10_1 6.2.9200.16492 190.00 KB (194,560 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\d3d10_1.dll d3d10_1core 6.2.9200.16492 325.50 KB (333,312 bytes) 8/22/2013 7:47 P M Microsoft Corporation c:\windows\system32\d3d10_1core.dll dxgi 6.2.9200.16492 354.50 KB (363,008 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\dxgi.dll d3d11 6.2.9200.16570 1.80 MB (1,887,232 bytes) 8/22/2013 7:45 PM Microsoft Corporation c:\windows\system32\d3d11.dll igd10umd64 9.17.10.2843 12.24 MB (12,833,280 bytes) 5/4/2013 11:02 A M Intel Corporation c:\windows\system32\igd10umd64.dll udwm 6.1.7600.16385 321.00 KB (328,704 bytes) 7/14/2009 5:07 AM Microsoft Corporation c:\windows\system32\udwm.dll btmmhook 6.5.1.2700 233.78 KB (239,392 bytes) 4/1/2012 9:52 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btmmhook.dl l armsvc 1.7.4.0 64.10 KB (65,640 bytes) 5/11/2013 4:07 PM Adobe Systems In corporated c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe AppleMobileDeviceService 17.323.0.9 54.32 KB (55,624 bytes) 9/7/2013 9:13 AM Apple Inc. c:\program files (x86)\common files\apple\mobile device support\applemobiledeviceservice.exe artstartsvc 6.1.4.1750 56.00 KB (57,344 bytes) 9/20/2010 9:48 PM IBM c:\program files (x86)\ibm\mobility client\artstartsvc.exe AcDeskBandHlpr 6.0.1.9 826.29 KB (846,120 bytes) 3/18/2013 5:25 PM Lenovo c:\program files (x86)\lenovo\access connections\acdeskbandhlpr.exe BESClient 8.2.1093.0 4.46 MB (4,678,552 bytes) 12/6/2011 5:19 A M IBM Corp. c:\program files (x86)\bigfix enterprise\bes client\besc lient.exe mDNSResponder 3.0.0.10 451.35 KB (462,184 bytes) 8/30/2011 11:05 PM Apple Inc. c:\program files\bonjour\mdnsresponder.exe bservice Not Available 38.48 KB (39,408 bytes) 2/25/2011 10:32 AM

Not Available c:\program files (x86)\roxio\backontrack\app\bservice.exe btwdins 6.5.1.2700 934.78 KB (957,216 bytes) 4/1/2012 9:51 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btwdins.exe btwleapi 6.5.1.2700 98.78 KB (101,152 bytes) 4/1/2012 9:51 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btwleapi.dl l evteng 15.3.0.0 614.30 KB (629,040 bytes) 8/23/2012 4:04 PM Intel(R) Corporation c:\program files\intel\wifi\bin\evteng.exe murocapi 15.3.0.0 542.30 KB (555,312 bytes) 8/23/2012 4:04 P M Intel(R) Corporation c:\program files\intel\wifi\bin\murocapi.dll amtwsman 15.3.0.0 3.14 MB (3,287,856 bytes) 8/23/2012 4:03 P M Intel(R) Corporation c:\program files\intel\wifi\bin\amtwsman.dll wsock32 6.1.7600.16385 18.00 KB (18,432 bytes) 7/14/2009 5:40 AM Microsof t Corporation c:\windows\system32\wsock32.dll s24mudll 15.3.0.0 27.30 KB (27,952 bytes) 8/23/2012 4:04 PM Intel(R) Corporation c:\program files\intel\wifi\bin\s24mudll.dll presentationfontcache 3.0.6920.5011 41.85 KB (42,856 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\microsoft.net\framework64\v3.0\wpf\pr esentationfontcache.exe mscoree 4.0.40305.0 434.33 KB (444,752 bytes) 3/19/2011 3:26 AM Microsoft Corporation c:\windows\system32\mscoree.dll mscoreei 4.0.30319.18408 599.08 KB (613,456 bytes) 9/11/2013 7:39 P M Microsoft Corporation c:\windows\microsoft.net\framework64\v4.0.30319\ mscoreei.dll mscorwks 2.0.50727.5472 9.53 MB (9,991,832 bytes) 8/23/2013 11:37 PM Microsoft Corporation c:\windows\microsoft.net\framework64\v2.0.50727\ mscorwks.dll msvcr80 8.0.50727.6195 783.83 KB (802,640 bytes) 8/29/2013 10:02 AM Microsoft Corporation c:\windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18 e3b_8.0.50727.6195_none_88e41e092fab0294\msvcr80.dll mscorlib.ni 2.0.50727.5472 14.86 MB (15,577,088 bytes) 8/24/2013 8:51 A M Microsoft Corporation c:\windows\assembly\nativeimages_v2.0.50727_64\m scorlib\88744044294787b99dd4a8704ab75a79\mscorlib.ni.dll System.ni 2.0.50727.5467 10.16 MB (10,655,744 bytes) 8/24/2013 8:51 A M Microsoft Corporation c:\windows\assembly\nativeimages_v2.0.50727_64\s ystem\af0a0b96a02f9925eb84392ee65a5cfa\system.ni.dll System.ServiceProcess.ni 2.0.50727.5420 288.50 KB (295,424 bytes) 8/24/2013 8:54 AM Microsoft Corporation c:\windows\assembly\nativeimages _v2.0.50727_64\system.serviceproce#\bcdc7d59f3f8ed743115a7e706e6232a\system.serv iceprocess.ni.dll mscorjit 2.0.50727.5467 1.50 MB (1,574,496 bytes) 1/11/2013 1:14 A M Microsoft Corporation c:\windows\microsoft.net\framework64\v2.0.50727\ mscorjit.dll WindowsBase.ni 3.0.6920.5453 4.73 MB (4,962,816 bytes) 10/9/2013 12:49 AM Microsoft Corporation c:\windows\assembly\nativeimages_v2.0.50727_64\w indowsbase\fd08d5ddc926ae51bf653620202e8d19\windowsbase.ni.dll PresentationCore.ni 3.0.6920.5453 15.78 MB (16,542,720 bytes) 10/9/201 3 12:50 AM Microsoft Corporation c:\windows\assembly\nativeimages_v2.0.50 727_64\presentationcore\4ea564f9fd06e0fb40a42acf7693b81a\presentationcore.ni.dll wpfgfx_v0300 3.0.6920.5453 2.15 MB (2,256,032 bytes) 8/23/2013 11:37 PM Microsoft Corporation c:\windows\microsoft.net\framework64\v3.0\wpf\wp fgfx_v0300.dll shfolder 6.1.7600.16385 10.00 KB (10,240 bytes) 7/14/2009 5:25 AM Microsoft Corporation c:\windows\system32\shfolder.dll nsd 9.0.0.3056 4.91 MB (5,153,280 bytes) 3/9/2013 4:17 AM IBM c:\notes\nsd.exe miragent 2.2.5.0 12.77 MB (13,387,128 bytes) 9/25/2012 5:03 PM Not Available c:\program files (x86)\mandiant\mandiant intelligent response ag ent\miragent.exe pdh 6.1.7601.17514 293.00 KB (300,032 bytes) 3/19/2011 3:24 AM

Microsoft Corporation c:\windows\system32\pdh.dll c4ebreg 7.45.0.4 499.73 KB (511,728 bytes) 8/9/2013 11:39 PM IBM Corp. c:\program files (x86)\c4ebreg\c4ebreg.exe issimsvc 4.15.0.0 179.77 KB (184,088 bytes) 9/7/2012 11:39 P M IBM Corp. c:\sdwork\issimsvc.exe cammute 3.0.40.0 56.86 KB (58,224 bytes) 5/4/2013 3:52 PM Lenovo G roup Limited c:\program files\lenovo\communications utility\cammute.exe tpknrsvc 3.0.40.0 59.86 KB (61,296 bytes) 5/4/2013 3:52 PM Lenovo Group Limited c:\program files\lenovo\communications utility\tpknrsvc. exe vcamsvc 3.0.40.0 183.36 KB (187,760 bytes) 5/4/2013 3:52 PM Lenovo Group Limited c:\program files\lenovo\communications utility\vcamsvc.e xe lvvsst 1.2.0.0 133.09 KB (136,288 bytes) 8/23/2013 9:49 AM Lenovo G roup Limited c:\program files\lenovo\virtscrl\lvvsst.exe enlpu 1.0.0.0 129.85 KB (132,968 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\program files\lenovo\virtscrl\enlpu.dll SUService 9.0.0.13067 1.58 MB (1,654,376 bytes) 3/9/2013 4:19 AM IBM Corp c:\notes\suservice.exe virtscrl 2.0.0.0 111.06 KB (113,728 bytes) 8/23/2013 9:49 AM Lenovo Group Limited c:\progra~1\lenovo\virtscrl\virtscrl.exe enlpu 1.0.0.0 129.85 KB (132,968 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\progra~1\lenovo\virtscrl\enlpu.dll mscams64 3.22.270.0 194.86 KB (199,536 bytes) 5/20/2010 3:26 P M Microsoft Corporation c:\program files\microsoft lifecam\mscams64.exe msvcp90 9.0.30729.4940 833.33 KB (853,328 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18 e3b_9.0.30729.4940_none_08e4299fa83d7e3c\msvcp90.dll msvcr90 9.0.30729.4940 609.83 KB (624,464 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18 e3b_9.0.30729.4940_none_08e4299fa83d7e3c\msvcr90.dll cal264 3.22.270.0 1.18 MB (1,232,240 bytes) 5/20/2010 3:26 PM Microsoft Corporation c:\program files\microsoft lifecam\cal264.dll devenum 6.6.7600.16385 74.00 KB (75,776 bytes) 7/14/2009 5:48 AM Microsof t Corporation c:\windows\system32\devenum.dll msdmo 6.6.7601.17514 35.00 KB (35,840 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\msdmo.dll ntmulti 9.0.0.13067 27.00 KB (27,648 bytes) 3/9/2013 4:18 AM IBM Corp c:\notes\ntmulti.exe NetAutoconnectFocusSvc 9.2.1.3002 278.81 KB (285,504 bytes) 4/19/201 3 10:06 AM AT&T c:\program files (x86)\at&t network client\netautoconnec tfocussvc.exe netcfgsvr 9.2.1.3002 1.07 MB (1,126,208 bytes) 4/19/2013 10:05 AM AT&T c:\program files (x86)\at&t network client\netcfgsvr.exe NetClientSvc 9.2.1.3002 374.81 KB (383,808 bytes) 4/19/2013 10:05 AM AT&T c:\program files (x86)\at&t network client\netclientsvc.exe NetLogSvc 9.2.1.3002 80.81 KB (82,752 bytes) 4/19/2013 10:05 AM AT&T c:\program files (x86)\at&t network client\netlogsvc.exe regsrvc 15.3.0.0 145.80 KB (149,296 bytes) 8/23/2012 4:03 PM Intel(R) Corporation c:\program files\common files\intel\wirelesscommon\regsr vc.exe ccsvchst 12.1.1.5 140.55 KB (143,928 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin\ccsvchst.exe c2c_service 6.13.0.13771 3.12 MB (3,275,136 bytes) 10/9/2013 10:58 AM Skype Technologies S.A. c:\programdata\skype\toolbars\skype c2c service\ c2c_service.exe wiaservc 6.1.7601.17514 566.50 KB (580,096 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\wiaservc.dll wiatrace 6.1.7600.16385 14.50 KB (14,848 bytes) 7/14/2009 6:05 AM

Microsoft Corporation c:\windows\system32\wiatrace.dll wsdchngr 6.1.7601.17514 25.50 KB (26,112 bytes) 3/19/2011 3:22 AM Microsoft Corporation c:\windows\system32\wsdchngr.dll portabledevicetypes 6.1.7600.16385 214.50 KB (219,648 bytes) 7/14/200 9 5:51 AM Microsoft Corporation c:\windows\system32\portabledevicetypes. dll SwiCardDetect64 11.3.1302.0 324.32 KB (332,104 bytes) 2/1/2013 5:30 PM Sierra Wireless, Inc. c:\program files (x86)\sierra wireless inc\common\swicar ddetect64.exe cd_ext64 11.6.1212.1 212.39 KB (217,488 bytes) 12/8/2012 12:06 AM Sierra Wireless, Inc. c:\program files (x86)\sierra wireless inc\commo n\cd_ext64.dll tphksvc 2.2.1.0 141.56 KB (144,960 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\program files\lenovo\hotkey\tphksvc.exe tpnumlkd 1.3.2.0 144.56 KB (148,032 bytes) 5/4/2013 11:03 AM Lenovo Group Limited c:\progra~1\lenovo\hotkey\tpnumlkd.exe enlpu 1.0.0.0 129.85 KB (132,968 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\progra~1\lenovo\hotkey\enlpu.dll tpnumlkd 1.0.1.0 46.35 KB (47,464 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\progra~1\lenovo\hotkey\tpnumlkd.dll ZeroConfigService 15.3.0.0 3.19 MB (3,342,640 bytes) 8/23/201 2 4:05 PM Intel Corporation c:\program files\intel\wifi\bin\zeroconf igservice.exe comdlg32 6.1.7601.17514 580.50 KB (594,432 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\comdlg32.dll oleacc 7.0.0.0 324.00 KB (331,776 bytes) 1/25/2012 2:15 PM Microsof t Corporation c:\windows\system32\oleacc.dll gdiplus 6.1.7601.18120 2.07 MB (2,165,760 bytes) 8/23/2013 11:30 PM Microsoft Corporation c:\windows\winsxs\amd64_microsoft.windows.gdiplus_6595b6 4144ccf1df_1.1.7601.18120_none_2b25b14c71ebf230\gdiplus.dll ps7zcfgs 15.3.0.0 183.30 KB (187,696 bytes) 8/23/2012 4:04 P M Intel(R) Corporation c:\program files\intel\wifi\bin\ps7zcfgs.dll pfmgrapi 15.3.0.0 1.01 MB (1,058,608 bytes) 8/23/2012 4:04 P M Intel(R) Corporation c:\program files\intel\wifi\bin\pfmgrapi.dll dbengine 15.3.0.0 106.80 KB (109,360 bytes) 8/23/2012 4:03 P M Intel(R) Corporation c:\program files\intel\wifi\bin\dbengine.dll acsvc 6.0.1.9 266.29 KB (272,680 bytes) 3/18/2013 5:26 PM Lenovo c:\program files (x86)\lenovo\access connections\acsvc.exe micmute 1.2.0.0 99.35 KB (101,736 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\program files\lenovo\hotkey\micmute.exe tphkload 1.2.0.0 141.85 KB (145,256 bytes) 5/4/2013 11:03 AM Lenovo Group Limited c:\program files\lenovo\hotkey\tphkload.exe enlpu 1.0.0.0 129.85 KB (132,968 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\program files\lenovo\hotkey\enlpu.dll tposd 1.3.3.0 143.06 KB (146,496 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\progra~1\lenovo\hotkey\tposd.dll spkvol 1.0.2.0 173.35 KB (177,512 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\program files\lenovo\hotkey\spkvol.dll lcdbl 1.0.2.0 179.35 KB (183,656 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\program files\lenovo\hotkey\lcdbl.dll unsecapp 6.1.7600.16385 46.00 KB (47,104 bytes) 7/14/2009 5:17 AM Microsoft Corporation c:\windows\system32\wbem\unsecapp.exe wmiprvse 6.1.7601.17514 364.00 KB (372,736 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\wbem\wmiprvse.exe cimwin32 6.1.7601.17514 1.96 MB (2,058,240 bytes) 3/19/2011 3:26 A M Microsoft Corporation c:\windows\system32\wbem\cimwin32.dll framedynos 6.1.7601.17514 289.00 KB (295,936 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\framedynos.dll winbrand 6.1.7600.16385 16.00 KB (16,384 bytes) 7/14/2009 5:00 AM Microsoft Corporation c:\windows\system32\winbrand.dll

perfos 6.1.7600.16385 29.00 KB (29,696 bytes) 7/14/2009 5:01 AM Microsof t Corporation c:\windows\system32\perfos.dll browcli 6.1.7601.17887 58.00 KB (59,392 bytes) 1/11/2013 1:13 AM Microsof t Corporation c:\windows\system32\browcli.dll schedcli 6.1.7601.17514 23.50 KB (24,064 bytes) 3/19/2011 3:22 AM Microsoft Corporation c:\windows\system32\schedcli.dll dskquota 6.1.7600.16385 112.50 KB (115,200 bytes) 7/14/2009 5:26 A M Microsoft Corporation c:\windows\system32\dskquota.dll security 6.1.7600.16385 5.00 KB (5,120 bytes) 7/14/2009 5:20 AM Microsoft Corporation c:\windows\system32\security.dll ntevt 6.1.7601.17514 259.50 KB (265,728 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\wbem\ntevt.dll provthrd 6.1.7600.16385 300.00 KB (307,200 bytes) 7/14/2009 5:17 A M Microsoft Corporation c:\windows\system32\provthrd.dll msvcirt 7.0.7600.16385 76.50 KB (78,336 bytes) 7/14/2009 4:48 AM Microsof t Corporation c:\windows\system32\msvcirt.dll unidrvui 0.3.7601.17514 863.50 KB (884,224 bytes) 7/14/2009 6:48 A M Microsoft Corporation c:\windows\system32\spool\drivers\x64\3\unidrvui .dll CNS30MUI_DDA5C 0.3.20.90 3.84 MB (4,026,880 bytes) 10/16/2013 6:29 PM CANON INC. c:\windows\system32\spool\drivers\x64\3\cns30mui_dda5c.d ll fxsui 6.1.7601.17514 156.50 KB (160,256 bytes) 7/14/2009 6:06 AM Microsoft Corporation c:\windows\system32\spool\drivers\x64\3\fxsui.dll fxswzrd 6.1.7601.17514 153.00 KB (156,672 bytes) 7/14/2009 6:06 AM Microsoft Corporation c:\windows\system32\spool\drivers\x64\3\fxswzrd.dll fxstiff 6.1.7601.17514 424.50 KB (434,688 bytes) 7/14/2009 6:05 AM Microsoft Corporation c:\windows\system32\spool\drivers\x64\3\fxstiff.dll fxsres 6.1.7601.17514 6.26 MB (6,566,400 bytes) 7/14/2009 6:49 AM Microsoft Corporation c:\windows\system32\spool\drivers\x64\3\fxsres.dll fxsapi 6.1.7601.17514 608.50 KB (623,104 bytes) 7/14/2009 6:05 AM Microsoft Corporation c:\windows\system32\spool\drivers\x64\3\fxsapi.dll snacnp 12.1.2015.2015 54.95 KB (56,272 bytes) 5/8/2012 11:26 PM Symantec Corporation c:\windows\system32\snacnp.dll drprov 6.1.7600.16385 24.00 KB (24,576 bytes) 7/14/2009 5:47 AM Microsof t Corporation c:\windows\system32\drprov.dll ntlanman 6.1.7601.17514 126.50 KB (129,536 bytes) 3/19/2011 3:23 A M Microsoft Corporation c:\windows\system32\ntlanman.dll davclnt 6.1.7601.18201 100.00 KB (102,400 bytes) 10/8/2013 11:46 PM Microsoft Corporation c:\windows\system32\davclnt.dll davhlpr 6.1.7600.16385 25.00 KB (25,600 bytes) 7/14/2009 4:53 AM Microsof t Corporation c:\windows\system32\davhlpr.dll wmiprov 6.1.7601.17514 223.50 KB (228,864 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\wbem\wmiprov.dll wmiperfclass 6.1.7600.16385 133.00 KB (136,192 bytes) 7/14/2009 5:01 A M Microsoft Corporation c:\windows\system32\wbem\wmiperfclass.dll smc 12.1.2015.2015 2.19 MB (2,294,112 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\smc.exe ccl120u 12.1.1.5 1.01 MB (1,059,280 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\ccl120u.dll msvcp100 10.0.40219.1 593.83 KB (608,080 bytes) 11/3/2012 7:22 A M Microsoft Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\msvcp100.dll msvcr100 10.0.40219.1 809.83 KB (829,264 bytes) 11/3/2012 7:22 A M Microsoft Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\msvcr100.dll SymDeltaDll 12.1.2015.2015 280.95 KB (287,696 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin

t protection\12.1.2015.2015.105\bin64\symdeltadll.dll mfc100u 10.0.40219.1 5.34 MB (5,601,616 bytes) 11/3/2012 7:22 AM Microsoft Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\mfc100u.dll sylog 12.1.2015.2015 139.95 KB (143,312 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\sylog.dll mfc100 10.0.40219.1 5.32 MB (5,574,472 bytes) 11/3/2012 7:22 AM Microsoft Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\mfc100.dll ccvrtrst 12.1.1.5 115.95 KB (118,736 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\ccvrtrst.dll efacli64 4.1.1.10 110.95 KB (113,616 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\efacli64.dll ccset 12.1.1.5 463.45 KB (474,576 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\ccset.dll smcres 12.1.2015.2015 135.95 KB (139,216 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\res\1033\smcres.dll dataman 12.1.2015.2015 92.45 KB (94,672 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12. 1.2015.2015.105\bin64\dataman.dll ccipc 12.1.1.5 225.45 KB (230,864 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\ccipc.dll sylink 12.1.2015.2015 1.50 MB (1,577,424 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\sylink.dll netport 12.1.2015.2015 105.45 KB (107,984 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\netport.dll LicenseMan64 12.1.2015.2015 1.50 MB (1,577,424 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\licenseman64.dll trident 12.1.2015.2015 849.45 KB (869,840 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\trident.dll sghi 12.1.2015.2015 575.95 KB (589,776 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\sghi.dll sfconfig 12.1.2015.2015 239.95 KB (245,712 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\sfconfig.dll tseConfig 12.1.2015.2015 613.95 KB (628,688 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\tseconfig.dll spnet 12.1.2015.2015 552.45 KB (565,712 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\spnet.dll NacManager 12.1.2015.2015 81.95 KB (83,920 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\nacmanager.plg ProfileManagementClient 12.1.2015.2015 118.95 KB (121,808 bytes) 11/3/201 2 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12.1.2015.2015.105\bin64\profilemanagementclient.dll atpiman 12.1.2015.2015 48.95 KB (50,128 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12.

1.2015.2015.105\bin64\atpiman.plg avman 12.1.2015.2015 72.45 KB (74,192 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12. 1.2015.2015.105\bin64\avman.plg bashman 12.1.2015.2015 133.45 KB (136,656 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\bashman.plg cidsman 12.1.2015.2015 109.95 KB (112,592 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\cidsman.plg CommonMan 12.1.2015.2015 38.45 KB (39,376 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\commonman.plg devman 12.1.2015.2015 150.45 KB (154,064 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\devman.plg guproxy 12.1.2015.2015 339.95 KB (348,112 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\guproxy.plg localrep 12.1.2015.2015 36.95 KB (37,840 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\localrep.plg luman 12.1.2015.2015 530.45 KB (543,184 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\luman.plg ProfileMgrMan 12.1.2015.2015 69.95 KB (71,632 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\profilemgrman.plg RebootMgrMan 12.1.2015.2015 62.45 KB (63,952 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\rebootmgrman.plg RepMgtMan 12.1.2015.2015 53.95 KB (55,248 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\repmgtman.plg sfman 12.1.2015.2015 294.95 KB (302,032 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\sfman.plg SubmissionsMan 12.1.2015.2015 65.95 KB (67,536 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\submissionsman.plg ProfileManagement 12.1.2015.2015 234.95 KB (240,592 bytes) 11/3/201 2 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12.1.2015.2015.105\bin64\profilemanagement.dll avmanres 12.1.2015.2015 10.45 KB (10,704 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\res\1033\avmanres.dll AvPluginImpl 12.1.2015.2015 450.45 KB (461,264 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\avpluginimpl.dll atl100 10.0.40219.1 154.82 KB (158,536 bytes) 11/3/2012 7:22 AM Microsoft Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\atl100.dll GUProxyRes 12.1.2015.2015 11.95 KB (12,240 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\res\1033\guproxyres.dll lumanres 12.1.2015.2015 11.45 KB (11,728 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\res\1033\lumanres.dll LueEimProxy 12.1.2015.2015 167.45 KB (171,472 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin

t protection\12.1.2015.2015.105\bin64\lueeimproxy.dll sfmanres 12.1.2015.2015 13.95 KB (14,288 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\res\1033\sfmanres.dll SEPPolicyMonitor 12.1.2015.2015 63.45 KB (64,976 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\seppolicymonitor.dll DevManRes 12.1.2015.2015 12.45 KB (12,752 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\res\1033\devmanres.dll AtpiEimProxy 12.1.2015.2015 136.95 KB (140,240 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\atpieimproxy.dll BashEimProxy 12.1.2015.2015 120.45 KB (123,344 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\basheimproxy.dll CIDSManRes 12.1.2015.2015 14.95 KB (15,312 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\res\1033\cidsmanres.dll CidsEimProxy 12.1.2015.2015 102.45 KB (104,912 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\cidseimproxy.dll RebootMgrEimProxy 12.1.2015.2015 113.95 KB (116,688 bytes) 11/3/201 2 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12.1.2015.2015.105\bin64\rebootmgreimproxy.dll srtsp64 14.2.0.7 520.02 KB (532,496 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\srtsp64.dll RepMgtEimProxy 12.1.2015.2015 61.45 KB (62,928 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\repmgteimproxy.dll SubmissionsEimProxy 12.1.2015.2015 92.45 KB (94,672 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\submissionseimproxy.dll NacManagerRes 12.1.2015.2015 9.45 KB (9,680 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\res\1033\nacmanagerres.dll msxml3 8.110.7601.17988 1.80 MB (1,882,624 bytes) 1/11/2013 1:10 A M Microsoft Corporation c:\windows\system32\msxml3.dll inetmib1 6.1.7601.17514 64.00 KB (65,536 bytes) 3/19/2011 3:22 AM Microsoft Corporation c:\windows\system32\inetmib1.dll defutdcd 4.6.1.11 389.97 KB (399,328 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\defutdcd.dll ducclib 4.6.1.11 36.97 KB (37,856 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12. 1.2015.2015.105\bin64\ducclib.dll sghires 12.1.2015.2015 13.45 KB (13,776 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12. 1.2015.2015.105\res\1033\sghires.dll urlmon 11.0.9600.16428 1.33 MB (1,394,176 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\windows\system32\urlmon.dll spnetres 12.1.2015.2015 154.95 KB (158,672 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\res\1033\spnetres.dll tse 12.1.2015.2015 555.45 KB (568,784 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\tse.dll IdsTrafficPipe 12.1.2015.2015 231.95 KB (237,520 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin

t protection\12.1.2015.2015.105\bin64\idstrafficpipe.dll pssensor 12.1.2015.2015 35.95 KB (36,816 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\pssensor.dll tfman 12.1.2015.2015 78.45 KB (80,336 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12. 1.2015.2015.105\bin64\tfman.dll tseres 12.1.2015.2015 14.95 KB (15,312 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12. 1.2015.2015.105\res\1033\tseres.dll symneti 13.1.0.8 317.98 KB (325,616 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\symneti.dll ccgevt 12.1.1.5 432.95 KB (443,344 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\ccgevt.dll wscproxystub 6.1.7600.16385 13.50 KB (13,824 bytes) 7/14/2009 5:18 AM Microsoft Corporation c:\windows\system32\wscproxystub.dll adsldp 6.1.7600.16385 233.50 KB (239,104 bytes) 7/14/2009 5:23 AM Microsoft Corporation c:\windows\system32\adsldp.dll activeds 6.1.7600.16385 261.50 KB (267,776 bytes) 7/14/2009 5:23 A M Microsoft Corporation c:\windows\system32\activeds.dll SyLinkRes 12.1.2015.2015 17.45 KB (17,872 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\res\1033\sylinkres.dll smcimpl 12.1.2015.2015 25.45 KB (26,064 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protection\12. 1.2015.2015.105\bin64\smcimpl.dll rtvscanPS64 12.1.2015.2015 86.95 KB (89,040 bytes) 11/3/2012 7:22 AM Symantec Corporation c:\program files (x86)\symantec\symantec endpoint protec tion\12.1.2015.2015.105\bin64\rtvscanps64.dll comsvcs 2001.12.8530.16385 1.66 MB (1,735,680 bytes) 7/14/2009 5:31 A M Microsoft Corporation c:\windows\system32\comsvcs.dll rundll32 6.1.7600.16385 44.50 KB (45,568 bytes) 7/14/2009 5:27 AM Microsoft Corporation c:\windows\system32\rundll32.exe hotkey 1.0.1.0 98.06 KB (100,416 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\program files\lenovo\hotkey\hotkey.dll tponscr 6.7.0.0 554.06 KB (567,360 bytes) 5/4/2013 11:03 AM Lenovo G roup Limited c:\progra~1\lenovo\hotkey\tponscr.exe ipsecsvc 6.1.7601.17514 489.50 KB (501,248 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\ipsecsvc.dll fwremotesvr 6.1.7600.16385 74.00 KB (75,776 bytes) 7/14/2009 5:38 AM Microsoft Corporation c:\windows\system32\fwremotesvr.dll ssdpsrv 6.1.7600.16385 188.50 KB (193,024 bytes) 7/14/2009 5:40 AM Microsoft Corporation c:\windows\system32\ssdpsrv.dll tpshocks 1.76.900.2000 373.56 KB (382,528 bytes) 2/25/2012 9:08 A M Lenovo. c:\windows\system32\tpshocks.exe tpshocks 1.76.900.1000 240.56 KB (246,336 bytes) 2/17/2012 5:37 P M Lenovo. c:\program files\thinkpad\tpshocks\mui\0409\tpshocks.dll sensor64 1.76.2.0 23.06 KB (23,616 bytes) 12/29/2011 8:18 AM Lenovo. c:\windows\system32\sensor64.dll etdctrl 11.0.0.14 2.74 MB (2,876,816 bytes) 8/23/2013 9:33 AM ELAN Microelectronics Corp. c:\program files\elantech\etdctrl.exe riched20 5.31.23.1230 618.50 KB (633,344 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\riched20.dll ETDFavorite 11.0.0.7 2.17 MB (2,277,776 bytes) 8/23/2013 9:33 A M ELAN Microelectronics Corp. c:\program files\elantech\etdfavorite.dl l etdapix 11.0.0.8 2.20 MB (2,306,448 bytes) 8/23/2013 9:33 AM ELAN Microelectronic Corp. c:\program files\elantech\etdapix.dll

etdcmds 11.0.0.8 2.29 MB (2,399,632 bytes) 8/23/2013 9:33 AM ELAN Microelectronics Corp. c:\program files\elantech\etdcmds.dll tpknrres 3.0.40.0 286.36 KB (293,232 bytes) 5/4/2013 3:52 PM Lenovo Group Limited c:\program files\lenovo\communications utility\tpknrres. exe searchindexer 7.0.7601.17610 578.00 KB (591,872 bytes) 7/18/2011 9:55 A M Microsoft Corporation c:\windows\system32\searchindexer.exe tquery 7.0.7601.17610 2.21 MB (2,315,776 bytes) 7/18/2011 9:55 AM Microsoft Corporation c:\windows\system32\tquery.dll mssrch 7.0.7601.17610 2.12 MB (2,223,616 bytes) 7/18/2011 9:55 AM Microsoft Corporation c:\windows\system32\mssrch.dll msidle 6.1.7600.16385 11.00 KB (11,264 bytes) 7/14/2009 5:25 AM Microsof t Corporation c:\windows\system32\msidle.dll mssprxy 7.0.7600.16385 98.00 KB (100,352 bytes) 7/14/2009 5:59 AM Microsoft Corporation c:\windows\system32\mssprxy.dll tquery.dll 7.0.7600.16385 190.50 KB (195,072 bytes) 7/14/2009 11:05 AM Microsoft Corporation c:\windows\system32\en-us\tquery.dll.mui naturallanguage6 6.1.7601.17514 1.26 MB (1,326,080 bytes) 3/19/201 1 3:26 AM Microsoft Corporation c:\windows\system32\naturallanguage6.dll elscore 6.1.7600.16385 44.50 KB (45,568 bytes) 7/14/2009 4:56 AM Microsof t Corporation c:\windows\system32\elscore.dll elslad 6.1.7600.16385 632.50 KB (647,680 bytes) 7/14/2009 4:56 AM Microsoft Corporation c:\windows\system32\elslad.dll structuredquery 7.0.7601.17514 472.50 KB (483,840 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\structuredquery.dll ravcpl64 1.0.0.861 12.91 MB (13,535,304 bytes) 8/23/2013 10:01 AM Realtek Semiconductor c:\program files\realtek\audio\hda\ravcpl64.exe dsound 6.1.7600.16385 528.00 KB (540,672 bytes) 7/14/2009 5:48 AM Microsoft Corporation c:\windows\system32\dsound.dll oledlg 6.1.7600.16385 125.00 KB (128,000 bytes) 7/14/2009 5:29 AM Microsoft Corporation c:\windows\system32\oledlg.dll ravbg64 1.0.0.149 1.25 MB (1,307,720 bytes) 8/23/2013 10:01 AM Realtek Semiconductor c:\program files\realtek\audio\hda\ravbg64.exe rtkcfg64 1.0.0.2 146.10 KB (149,608 bytes) 8/23/2013 10:01 AM Realtek Semiconductor Corp. c:\windows\system32\rtkcfg64.dll SvcGuiHlpr 6.0.1.9 588.00 KB (602,112 bytes) 3/18/2013 5:07 PM Lenovo c:\program files (x86)\lenovo\access connections\svcguihlpr.exe hkcmd 8.15.10.2843 389.31 KB (398,656 bytes) 2/19/2013 8:35 PM Intel Corporation c:\windows\system32\hkcmd.exe hccutils 8.15.10.2843 108.00 KB (110,592 bytes) 5/4/2013 11:02 A M Intel Corporation c:\windows\system32\hccutils.dll igfxsrvc 8.15.10.2843 62.00 KB (63,488 bytes) 5/4/2013 11:02 AM Intel Corporation c:\windows\system32\igfxsrvc.dll igfxrenu 8.15.10.2843 279.50 KB (286,208 bytes) 2/19/2013 8:34 P M Intel Corporation c:\windows\system32\igfxrenu.lrc igfxpers 8.15.10.2843 430.81 KB (441,152 bytes) 2/19/2013 8:35 P M Intel Corporation c:\windows\system32\igfxpers.exe IccLibDll_x64 Not Available 92.00 KB (94,208 bytes) 5/4/2013 11:02 AM Not Available c:\windows\system32\icclibdll_x64.dll iccproxy 1.0.0.1 165.77 KB (169,752 bytes) 9/15/2013 11:47 AM Intel Corporation c:\program files (x86)\intel\intel(r) integrated clock c ontroller service\iccproxy.exe iCloudServices 2.3.28.4 58.32 KB (59,720 bytes) 9/14/2013 3:38 AM Apple Inc. c:\program files (x86)\common files\apple\internet services\iclo udservices.exe ApplePhotoStreams 7.12.44.1 58.32 KB (59,720 bytes) 9/15/2013 2:34 P M Apple Inc. c:\program files (x86)\common files\apple\internet servi ces\applephotostreams.exe ETDCtrlHelper 11.0.0.7 2.14 MB (2,249,104 bytes) 8/23/2013 9:33 A M ELAN Microelectronics Corp. c:\program files\elantech\etdctrlhelper.

exe ETDIntelligent 11.0.0.6 2.15 MB (2,259,344 bytes) 8/23/2013 9:33 A M ELAN Microelectronics Corp. c:\program files\elantech\etdintelligent .exe bttray 6.5.1.2700 1.33 MB (1,390,368 bytes) 4/1/2012 9:51 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\bttray.exe btwapi 6.5.1.2700 744.78 KB (762,656 bytes) 4/1/2012 9:51 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btwapi.dll btosif 6.5.1.2700 318.28 KB (325,920 bytes) 4/1/2012 9:51 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btosif.dll btwhidcs 6.5.1.2700 524.78 KB (537,376 bytes) 4/1/2012 9:51 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btwhidcs.dl l mfc100u 10.0.40219.325 5.34 MB (5,601,616 bytes) 6/11/2011 1:15 AM Microsoft Corporation c:\windows\system32\mfc100u.dll irprops 6.1.7600.16385 416.00 KB (425,984 bytes) 7/14/2009 5:39 AM Microsoft Corporation c:\windows\system32\irprops.cpl BtBalloon 6.5.1.2700 62.28 KB (63,776 bytes) 5/4/2013 3:39 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btballoon.d ll btrez 6.5.1.2700 23.46 MB (24,596,256 bytes) 4/1/2012 9:52 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btrez.dll btkeyind 6.5.1.2700 121.78 KB (124,704 bytes) 4/1/2012 9:52 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btkeyind.dl l btwcp 6.5.1.2700 2.20 MB (2,304,288 bytes) 4/1/2012 9:51 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btwcp.dll LFMonitor 4.5.0.659 1.82 MB (1,911,976 bytes) 8/5/2013 8:00 PM IBM Corporation c:\program files (x86)\ibm\connections desktop plugins\lfmonitor .exe symphony 3.4.0.0 77.38 KB (79,232 bytes) 9/16/2011 1:49 AM IBM c:\program files (x86)\ibm\lotus\symphony\framework\rcp\eclipse\plugins\com.ibm. rcp.base_6.2.3.20110915-1350\win32\x86\symphony.exe acwlicon 6.0.1.9 190.29 KB (194,856 bytes) 3/18/2013 5:25 PM Lenovo c:\program files (x86)\lenovo\access connections\acwlicon.exe actray 6.0.1.9 422.29 KB (432,424 bytes) 3/18/2013 5:25 PM Lenovo c:\program files (x86)\lenovo\access connections\actray.exe isamtray 7.45.0.4 335.73 KB (343,792 bytes) 8/9/2013 11:40 P M IBM Corp. c:\program files (x86)\c4ebreg\isamtray.exe RoxioBurnLauncher 1.60.33.0 506.48 KB (518,640 bytes) 1/13/201 1 3:52 AM Not Available c:\program files (x86)\roxio 2011\roxio burn\rox ioburnlauncher.exe pgptray 10.3.0.9307 4.00 MB (4,194,416 bytes) 6/28/2013 4:31 AM Symantec Corporation c:\program files (x86)\pgp corporation\pgp desktop\pgptr ay.exe snagit32 11.3.0.107 9.18 MB (9,625,456 bytes) 11/11/2013 1:32 PM TechSmith Corporation c:\program files (x86)\techsmith\snagit 11\snagi t32.exe rcimgdir 1.1.0.0 54.50 KB (55,808 bytes) 8/23/2013 9:29 AM Ricoh co .,Ltd. c:\program files (x86)\integrated camera driver\x64\rcimgdir.exe rundll32 6.1.7600.16385 43.50 KB (44,544 bytes) 7/14/2009 5:11 AM Microsoft Corporation c:\windows\syswow64\rundll32.exe soffice 4.0.9714.500 9.38 MB (9,837,056 bytes) 9/20/2013 2:12 PM Apache Software Foundation c:\program files (x86)\openoffice 4\program\soff ice.exe pwmtr64v 1.0.0.0 5.72 MB (6,002,984 bytes) 8/23/2013 9:50 AM Lenovo Group Limited c:\progra~2\thinkpad\utilit~1\pwmtr64v.dll pwmrt64v Not Available 92.00 KB (94,208 bytes) 8/23/2013 9:50 AM Not Available c:\progra~2\thinkpad\utilit~1\us\pwmrt64v.dll pwmif64v 1.0.0.0 3.86 MB (4,046,592 bytes) 8/23/2013 9:50 AM

Lenovo Group Limited c:\progra~2\thinkpad\utilit~1\pwmif64v.dll igfxexps 8.15.10.2843 28.00 KB (28,672 bytes) 5/4/2013 11:02 AM Intel Corporation c:\windows\system32\igfxexps.dll wbemdisp 6.1.7600.16385 260.50 KB (266,752 bytes) 7/14/2009 5:17 A M Microsoft Corporation c:\windows\system32\wbem\wbemdisp.dll linkinfo 6.1.7600.16385 29.00 KB (29,696 bytes) 7/14/2009 5:25 AM Microsoft Corporation c:\windows\system32\linkinfo.dll ntshrui 6.1.7601.17755 498.00 KB (509,952 bytes) 2/2/2013 6:01 AM Microsoft Corporation c:\windows\system32\ntshrui.dll atm64 1.3.4.0 132.28 KB (135,456 bytes) 8/23/2013 9:50 AM Lenovo J apan c:\progra~2\thinkpad\utilit~1\atm64.dll pcee4 7.2.8000.17 496.73 KB (508,656 bytes) 8/31/2012 7:21 PM Not Available c:\program files (x86)\dolby advanced audio v2\pcee4.exe clr 4.0.30319.18408 9.39 MB (9,844,280 bytes) 9/11/2013 7:39 PM Microsoft Corporation c:\windows\microsoft.net\framework64\v4.0.30319\clr.dll msvcr110_clr0400 11.0.50938.18408 835.61 KB (855,664 bytes) 9/11/2013 7:39 PM Microsoft Corporation c:\windows\system32\msvcr110_clr 0400.dll mscorlib.ni 4.0.30319.18408 21.97 MB (23,037,440 bytes) 12/1/2013 7:57 P M Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30319_64\m scorlib\54c5d3ee1f311718f3a2feb337c5fa29\mscorlib.ni.dll clrjit 4.0.30319.18408 1.19 MB (1,243,208 bytes) 9/11/2013 7:39 PM Microsoft Corporation c:\windows\microsoft.net\framework64\v4.0.30319\clrjit.d ll System.ni 4.0.30319.18408 12.72 MB (13,338,624 bytes) 12/1/2013 7:57 P M Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30319_64\s ystem\4598449d72d7ebbd53952399ed5fc710\system.ni.dll WindowsBase.ni 4.0.30319.18408 5.25 MB (5,500,416 bytes) 12/1/2013 8:18 P M Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30319_64\w indowsbase\a4da99c6b004dccd9d04901b883532b1\windowsbase.ni.dll PresentationCore.ni 4.0.30319.18408 14.18 MB (14,871,040 bytes) 12/1/201 3 8:18 PM Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30 319_64\presentationcore\bbeeae74f02b74f8ddd6d16a4ba20047\presentationcore.ni.dll PresentationFramework.ni 4.0.30319.18408 23.43 MB (24,571,392 bytes) 12/1/2013 8:18 PM Not Available c:\windows\assembly\nativeimages_v4.0.30 319_64\presentatio5ae0f00f#\c7c9cfde997a6a8d8286df1ac983b9a3\presentationframewo rk.ni.dll System.Xaml.ni 4.0.30319.18408 2.44 MB (2,563,584 bytes) 12/1/2013 8:19 P M Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30319_64\s ystem.xaml\168436448f309e554334f2002fafbc16\system.xaml.ni.dll pcee4c 7.2.8000.17 1.03 MB (1,080,560 bytes) 8/31/2012 7:21 PM Not Available c:\program files (x86)\dolby advanced audio v2\pcee4c.dll dwrite 6.2.9200.16571 1.57 MB (1,643,520 bytes) 8/23/2013 11:32 PM Microsoft Corporation c:\windows\system32\dwrite.dll wpfgfx_v0400 4.0.30319.18408 2.02 MB (2,122,848 bytes) 9/11/2013 7:39 P M Microsoft Corporation c:\windows\microsoft.net\framework64\v4.0.30319\ wpf\wpfgfx_v0400.dll PresentationNative_v0400 4.0.30319.18408 1.03 MB (1,080,464 bytes) 9/11/2013 7:39 PM Microsoft Corporation c:\windows\microsoft.net\framewo rk64\v4.0.30319\wpf\presentationnative_v0400.dll System.Configuration.ni 4.0.30319.18408 1.21 MB (1,270,784 bytes) 12/1/201 3 8:17 PM Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30 319_64\system.configuration\7c42b91ec0ddf9b0c7bb847fc93e837b\system.configuratio n.ni.dll System.Core.ni 4.0.30319.18408 9.65 MB (10,116,096 bytes) 12/1/2013 8:17 P M Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30319_64\s ystem.core\c7f0d1f9b23270a4e10e9ea2d5ebaf07\system.core.ni.dll Dolby.Interop 7.2.8000.17 39.73 KB (40,688 bytes) 8/31/2012 7:22 PM Not Available c:\program files (x86)\dolby advanced audio v2\dolby.interop.dll r4eea64a 7.2.8000.17 121.27 KB (124,176 bytes) 8/23/2013 10:01

AM Dolby Laboratories c:\windows\system32\r4eea64a.dll System.Xml.ni 4.0.30319.18408 9.74 MB (10,212,352 bytes) 12/1/2013 8:17 P M Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30319_64\s ystem.xml\8d35ec2b45fd2eaccdf8fa8b7bee1adf\system.xml.ni.dll nlssorting 4.0.30319.18408 82.09 KB (84,056 bytes) 9/11/2013 7:39 PM Microsoft Corporation c:\windows\microsoft.net\framework64\v4.0.30319\nlssorti ng.dll pcee4c.resources 7.2.8000.17 18.73 KB (19,184 bytes) 8/31/2012 7:21 P M Not Available c:\program files (x86)\dolby advanced audio v2\en-us\pce e4c.resources.dll System.Drawing.ni 4.0.30319.18408 2.17 MB (2,278,400 bytes) 12/1/201 3 8:19 PM Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30 319_64\system.drawing\3910e71ce88e7357fb3a36e72e8bbf36\system.drawing.ni.dll System.Windows.Forms.ni 4.0.30319.18408 16.18 MB (16,966,144 bytes) 12/1/201 3 8:19 PM Microsoft Corporation c:\windows\assembly\nativeimages_v4.0.30 319_64\system.windows.forms\def88a73637e1af60947a105d8931e6d\system.windows.form s.ni.dll soffice 4.0.9714.500 9.37 MB (9,828,864 bytes) 9/20/2013 2:12 PM Apache Software Foundation c:\program files (x86)\openoffice 4\program\soff ice.bin BESClientUI 8.2.1093.0 1.40 MB (1,471,896 bytes) 12/6/2011 5:19 A M IBM Corp. c:\program files (x86)\bigfix enterprise\bes client\besc lientui.exe DivXUpdate 1.0.6.105 1.78 MB (1,861,968 bytes) 8/29/2013 5:53 A M Not Available c:\program files (x86)\divx\divx update\divxupdate.exe iTunesHelper 11.1.3.8 148.82 KB (152,392 bytes) 11/2/2013 12:29 AM Apple Inc. c:\program files (x86)\itunes\ituneshelper.exe schtask 1.0.0.1 124.79 KB (127,784 bytes) 8/23/2013 9:50 AM Lenovo G roup Limited c:\progra~2\thinkpad\utilit~1\schtask.exe pwmdbsvc 1.0.0.1 1.59 MB (1,667,368 bytes) 8/23/2013 9:50 AM Lenovo c:\program files (x86)\thinkpad\utilities\pwmdbsvc.exe iPodService 11.1.3.8 626.32 KB (641,352 bytes) 11/2/2013 12:29 AM Apple Inc. c:\program files\ipod\bin\ipodservice.exe iPodServiceLocalized 11.1.3.8 45.32 KB (46,408 bytes) 11/2/2013 12:29 AM Apple Inc. c:\program files\ipod\bin\ipodservice.resources\en.lproj \ipodservicelocalized.dll iPodService 11.1.3.8 44.32 KB (45,384 bytes) 11/2/2013 12:29 AM Apple Inc. c:\program files\ipod\bin\ipodservice.resources\ipodservice.dll APSDaemon 2.2.10.8 58.32 KB (59,720 bytes) 9/14/2013 3:27 AM Apple Inc. c:\program files (x86)\common files\apple\internet services\apsd aemon.exe tschelp 1.1.11087.1 45.00 KB (46,080 bytes) 5/29/2013 4:05 PM TechSmit h Corporation c:\program files (x86)\techsmith\snagit 11\tschelp.exe snagpriv 11.3.0.107 127.36 KB (130,416 bytes) 11/11/2013 1:32 PM TechSmith Corporation c:\program files (x86)\techsmith\snagit 11\snagp riv.exe BTHSAmpPalService 15.3.0.1 644.02 KB (659,472 bytes) 7/18/201 2 12:52 AM Intel Corporation c:\program files\intel\bluetoothhs\bthsa mppalservice.exe UsR3IoPort 15.3.0.1 103.00 KB (105,472 bytes) 7/18/2012 12:48 AM Intel Corporation c:\program files\intel\bluetoothhs\usr3ioport.dl l pgpcbt64 10.3.0.9307 72.17 KB (73,904 bytes) 6/28/2013 4:31 AM Symantec Corporation c:\program files (x86)\pgp corporation\pgp desktop\pgpcb t64.exe SnagitEditor 11.3.0.107 8.69 MB (9,107,312 bytes) 11/11/2013 1:32 PM TechSmith Corporation c:\program files (x86)\techsmith\snagit 11\snagi teditor.exe BTHSSecurityMgr 15.3.0.8 132.80 KB (135,984 bytes) 8/23/2012 1:39 P M Intel(R) Corporation c:\program files\intel\bluetoothhs\bthssecuritym

gr.exe BTSupplicantPlugin 15.3.0.1 292.30 KB (299,312 bytes) 8/23/201 2 1:39 PM Intel(R) Corporation c:\program files\intel\bluetoothhs\kmmdl plugins\btsupplicantplugin.dll PanAuthenticator 15.3.0.5 413.30 KB (423,216 bytes) 8/23/201 2 1:40 PM Intel(R) Corporation c:\program files\intel\bluetoothhs\kmmdl plugins\panauthenticator.dll BTHSSupplicant 15.3.0.1 486.50 KB (498,176 bytes) 8/23/2012 12:58 PM Intel Corporation c:\program files\intel\bluetoothhs\bthssupplican t.dll soffice 3.1.9399.500 10.77 MB (11,296,768 bytes) 5/4/2013 4:25 PM IBM c:\program files (x86)\ibm\lotus\symphony\framework\shared\eclipse\plugi ns\com.ibm.symphony.brand.win32_3.0.1.20120110-2000\program\soffice.bin osppsvc 14.0.370.400 4.70 MB (4,925,184 bytes) 1/9/2010 9:34 PM Microsoft Corporation c:\program files\common files\microsoft shared\officesof twareprotectionplatform\osppsvc.exe osppobjs 14.0.370.400 2.07 MB (2,173,696 bytes) 1/9/2010 9:34 PM Microsoft Corporation c:\program files\common files\microsoft shared\officesof twareprotectionplatform\osppobjs.dll explorer 6.1.7601.17567 2.74 MB (2,871,808 bytes) 7/18/2011 9:54 A M Microsoft Corporation c:\windows\explorer.exe explorerframe 6.1.7601.17514 1.78 MB (1,866,240 bytes) 3/19/2011 3:26 A M Microsoft Corporation c:\windows\system32\explorerframe.dll duser 6.1.7600.16385 254.50 KB (260,608 bytes) 7/14/2009 5:09 AM Microsoft Corporation c:\windows\system32\duser.dll dui70 6.1.7600.16385 954.00 KB (976,896 bytes) 7/14/2009 5:11 AM Microsoft Corporation c:\windows\system32\dui70.dll ehstorshell 6.1.7600.16385 198.50 KB (203,264 bytes) 7/14/2009 5:30 A M Microsoft Corporation c:\windows\system32\ehstorshell.dll grooveex 14.0.4761.1000 6.41 MB (6,722,448 bytes) 3/25/2010 10:41 AM Microsoft Corporation c:\progra~1\micros~2\office14\grooveex.dll atl90 9.0.30729.4148 172.32 KB (176,456 bytes) 5/4/2013 5:30 PM Microsoft Corporation c:\windows\winsxs\amd64_microsoft.vc90.atl_1fc8b3b9a1e18 e3b_9.0.30729.4148_none_0a1d2fcba76b3f00\atl90.dll office 14.0.4738.1000 4.06 MB (4,254,560 bytes) 1/30/2010 2:40 AM Microsoft Corporation c:\progra~1\common~1\micros~1\office14\cultures\office.o df GrooveIntlResource 14.0.4761.1000 8.39 MB (8,794,976 bytes) 3/24/201 0 9:38 PM Microsoft Corporation c:\progra~1\micros~2\office14\1033\groov eintlresource.dll cscui 6.1.7601.17514 487.00 KB (498,688 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\cscui.dll cscdll 6.1.7601.17514 29.50 KB (30,208 bytes) 3/19/2011 3:22 AM Microsof t Corporation c:\windows\system32\cscdll.dll iconcodecservice 6.1.7600.16385 14.00 KB (14,336 bytes) 7/14/2009 5:07 A M Microsoft Corporation c:\windows\system32\iconcodecservice.dll sndvolsso 6.1.7601.17514 220.00 KB (225,280 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\sndvolsso.dll timedate 6.1.7601.17753 503.50 KB (515,584 bytes) 2/2/2013 5:59 AM Microsoft Corporation c:\windows\system32\timedate.cpl shdocvw 6.1.7601.18222 192.50 KB (197,120 bytes) 9/11/2013 9:48 PM Microsoft Corporation c:\windows\system32\shdocvw.dll AcDeskBand64 6.1.0.1 449.79 KB (460,584 bytes) 3/18/2013 5:25 PM Lenovo c:\program files (x86)\lenovo\access connections\acdeskband64.dll pwmtr64v 1.0.0.0 5.72 MB (6,002,984 bytes) 8/23/2013 9:50 AM Lenovo Group Limited c:\program files (x86)\thinkpad\utilities\pwmtr64v.dll gameux 6.1.7601.18020 2.62 MB (2,746,368 bytes) 2/2/2013 6:30 AM Microsoft Corporation c:\windows\system32\gameux.dll msls31 3.10.349.0 242.00 KB (247,808 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\windows\system32\msls31.dll

tiptsf 6.1.7601.17514 491.50 KB (503,296 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\program files\common files\microsoft shared\ink\tipts f.dll authui 6.1.7601.18276 1.84 MB (1,930,752 bytes) 11/18/2013 12:27 PM Microsoft Corporation c:\windows\system32\authui.dll cryptui 6.1.7601.17514 1.02 MB (1,065,984 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\cryptui.dll api-ms-win-downlevel-shlwapi-l2-1-0 6.2.9200.16492 5.50 KB (5,632 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\api-ms-win-d ownlevel-shlwapi-l2-1-0.dll networkexplorer 6.1.7601.17514 1.60 MB (1,672,704 bytes) 3/19/2011 3:23 A M Microsoft Corporation c:\windows\system32\networkexplorer.dll pgpwipe 10.3.0.9307 170.26 KB (174,344 bytes) 6/28/2013 4:31 AM Symantec Corporation c:\program files (x86)\pgp corporation\pgp desktop\pgpwi pe.dll LFShare64 4.5.0.659 1.08 MB (1,132,200 bytes) 8/5/2013 8:00 PM IBM Corporation c:\program files (x86)\ibm\connections desktop plugins\lfshare64 .dll lfcore64 4.5.0.659 2.97 MB (3,109,544 bytes) 8/5/2013 8:00 PM IBM Corporation c:\program files (x86)\ibm\connections desktop plugins\lfcore64. dll xerces-c_3_064 3.0.1.0 2.53 MB (2,656,256 bytes) 8/5/2013 7:55 PM Apache Software Foundation c:\program files (x86)\ibm\connections desktop p lugins\xerces-c_3_064.dll LFUILib64 4.5.0.659 3.58 MB (3,749,544 bytes) 8/5/2013 8:00 PM IBM Corporation c:\program files (x86)\ibm\connections desktop plugins\lfuilib64 .dll lfres 4.5.0.659 1.33 MB (1,394,176 bytes) 8/5/2013 8:00 PM IBM Corporation c:\program files (x86)\ibm\connections desktop plugins\lfres.dll uianimation 6.2.9200.16492 216.00 KB (221,184 bytes) 8/22/2013 7:47 P M Microsoft Corporation c:\windows\system32\uianimation.dll stobject 6.1.7601.17514 251.00 KB (257,024 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\stobject.dll batmeter 6.1.7601.17514 732.00 KB (749,568 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\batmeter.dll prnfldr 6.1.7601.17514 406.50 KB (416,256 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\prnfldr.dll dxp 6.1.7601.17514 449.00 KB (459,776 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\dxp.dll syncreg 2007.94.7600.16385 72.00 KB (73,728 bytes) 7/14/2009 5:52 AM Microsoft Corporation c:\windows\system32\syncreg.dll ehsso 6.1.7600.16385 25.50 KB (26,112 bytes) 7/14/2009 5:54 AM Microsof t Corporation c:\windows\ehome\ehsso.dll alttab 6.1.7600.16385 52.00 KB (53,248 bytes) 7/14/2009 5:25 AM Microsof t Corporation c:\windows\system32\alttab.dll wpdshserviceobj 6.1.7601.17514 112.50 KB (115,200 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\wpdshserviceobj.dll btncopy 6.5.1.2700 418.28 KB (428,320 bytes) 4/1/2012 9:52 PM Broadcom Corporation. c:\program files\thinkpad\bluetooth software\btncopy.dll DragExt64 1.2.1.3261 201.43 KB (206,264 bytes) 9/25/2013 9:35 A M Martin Prikryl c:\program files (x86)\winscp\dragext64.dll pnidui 6.1.7601.17514 1.72 MB (1,808,384 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\pnidui.dll qutil 6.1.7601.17514 105.00 KB (107,520 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\qutil.dll wwanapi 6.1.7600.16385 360.00 KB (368,640 bytes) 7/14/2009 5:42 AM Microsoft Corporation c:\windows\system32\wwanapi.dll wwapi 8.1.2.0 35.50 KB (36,352 bytes) 7/14/2009 5:42 AM Microsoft Corpor ation c:\windows\system32\wwapi.dll qagent 6.1.7601.17514 260.00 KB (266,240 bytes) 3/19/2011 3:25 AM

Microsoft Corporation c:\windows\system32\qagent.dll srchadmin 7.0.7601.17514 333.00 KB (340,992 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\srchadmin.dll synccenter 6.1.7601.17514 2.16 MB (2,262,528 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\synccenter.dll actioncenter 6.1.7601.17514 762.50 KB (780,800 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\actioncenter.dll imapi2 6.1.7601.17514 491.50 KB (503,296 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\imapi2.dll hgcpl 6.1.7601.17514 324.50 KB (332,288 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\hgcpl.dll provsvc 6.1.7601.17514 183.50 KB (187,904 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\provsvc.dll fxsst 6.1.7600.16385 843.50 KB (863,744 bytes) 7/14/2009 6:05 AM Microsoft Corporation c:\windows\system32\fxsst.dll fxsapi 6.1.7601.17514 608.50 KB (623,104 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\fxsapi.dll fxsresm 6.1.7600.16385 903.50 KB (925,184 bytes) 7/14/2009 6:06 AM Microsoft Corporation c:\windows\system32\fxsresm.dll wscinterop 6.1.7600.16385 143.00 KB (146,432 bytes) 7/14/2009 5:18 A M Microsoft Corporation c:\windows\system32\wscinterop.dll wscapi 6.1.7601.17514 62.00 KB (63,488 bytes) 3/19/2011 3:24 AM Microsof t Corporation c:\windows\system32\wscapi.dll wscui 6.1.7600.16385 1.11 MB (1,162,240 bytes) 7/14/2009 5:18 AM Microsoft Corporation c:\windows\system32\wscui.cpl werconcpl 6.1.7601.17514 1.22 MB (1,281,024 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\werconcpl.dll wercplsupport 6.1.7600.16385 82.50 KB (84,480 bytes) 7/14/2009 5:10 AM Microsoft Corporation c:\windows\system32\wercplsupport.dll hcproviders 6.1.7600.16385 30.50 KB (31,232 bytes) 7/14/2009 5:26 AM Microsoft Corporation c:\windows\system32\hcproviders.dll ieproxy 11.0.9600.16428 704.50 KB (721,408 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\program files\internet explorer\ieproxy.dll ieframe 11.0.9600.16428 12.39 MB (12,995,584 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\windows\system32\ieframe.dll api-ms-win-downlevel-shell32-l1-1-0 6.2.9200.16492 3.00 KB (3,072 bytes) 8/22/2013 7:47 PM Microsoft Corporation c:\windows\system32\api-ms-win-d ownlevel-shell32-l1-1-0.dll mlang 6.1.7600.16385 221.50 KB (226,816 bytes) 7/14/2009 5:25 AM Microsoft Corporation c:\windows\system32\mlang.dll msftedit 5.41.21.2510 781.00 KB (799,744 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\msftedit.dll prnntfy 6.1.7600.16385 186.50 KB (190,976 bytes) 7/14/2009 6:10 AM Microsoft Corporation c:\windows\system32\prnntfy.dll puiapi 6.1.7600.16385 190.00 KB (194,560 bytes) 7/14/2009 6:10 AM Microsoft Corporation c:\windows\system32\puiapi.dll printui 6.1.7601.17514 1.00 MB (1,050,624 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\printui.dll puiobj 6.1.7601.17514 419.50 KB (429,568 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\puiobj.dll zipfldr 6.1.7601.17514 357.50 KB (366,080 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\zipfldr.dll twext 6.1.7601.17514 168.50 KB (172,544 bytes) 3/19/2011 3:24 AM Microsoft Corporation c:\windows\system32\twext.dll pgpmn 10.3.0.9307 181.30 KB (185,656 bytes) 6/28/2013 4:31 AM Symantec Corporation c:\windows\system32\pgpmn.dll dfscli 6.1.7600.16385 61.50 KB (62,976 bytes) 7/14/2009 5:23 AM Microsof t Corporation c:\windows\system32\dfscli.dll pgpmnp 10.3.0.9307 159.69 KB (163,520 bytes) 6/28/2013 4:31 AM Symantec Corporation c:\windows\system32\pgpmnp.dll

TeraCopyExt64 Not Available 662.50 KB (678,400 bytes) 9/26/2013 3:24 P M Not Available c:\progra~1\teracopy\teraco~2.dll SnagitShellExt64 11.3.0.107 2.13 MB (2,231,664 bytes) 11/11/20 13 1:32 PM TechSmith Corporation c:\program files (x86)\techsmith\snagit 11\dllx64\snagitshellext64.dll SnagitShellExtRes 11.3.0.107 18.36 KB (18,800 bytes) 11/11/2013 1:32 PM TechSmith Corporation c:\program files (x86)\techsmith\snagit 11\snagi tshellextres.dll AVSShellConverter64 1.0.1.26 147.35 KB (150,888 bytes) 11/19/20 13 10:00 PM Online Media Technologies Ltd. c:\program files (x86)\common fi les\avsmedia\activex\avsshellconverter64.dll atl80 8.0.50727.6195 111.00 KB (113,664 bytes) 11/19/2013 9:59 PM Microsoft Corporation c:\windows\winsxs\amd64_microsoft.vc80.atl_1fc8b3b9a1e18 e3b_8.0.50727.6195_none_8a1dd9552ed7f8d8\atl80.dll DC_ShellExt64 13.3.1.80 144.98 KB (148,464 bytes) 1/19/2011 1:42 A M Sonic Solutions c:\program files\roxio 2011\virtual drive 10\dc_shellext 64.dll ShellStreams64 7.12.44.1 914.32 KB (936,264 bytes) 9/15/2013 2:34 P M Apple Inc. c:\program files\common files\apple\internet services\sh ellstreams64.dll msvcp80 8.0.50727.6195 1.02 MB (1,068,368 bytes) 8/29/2013 10:02 AM Microsoft Corporation c:\windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18 e3b_8.0.50727.6195_none_88e41e092fab0294\msvcp80.dll LFShellMenu64 4.5.0.659 231.66 KB (237,224 bytes) 8/5/2013 8:00 PM IBM Corporation c:\program files (x86)\ibm\connections desktop plugins\lfshellme nu64.dll vpshell2 12.1.2015.2015 605.95 KB (620,496 bytes) 11/3/2012 7:22 A M Symantec Corporation c:\program files (x86)\symantec\symantec endpoin t protection\12.1.2015.2015.105\bin64\vpshell2.dll syncui 6.1.7601.17514 195.50 KB (200,192 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\syncui.dll synceng 6.1.7601.17959 93.50 KB (95,744 bytes) 1/11/2013 1:13 AM Microsof t Corporation c:\windows\system32\synceng.dll NppShell_05 0.1.0.0 217.50 KB (222,720 bytes) 6/18/2012 8:54 PM Not Available c:\program files (x86)\notepad++\nppshell_05.dll acppage 6.1.7601.17514 52.00 KB (53,248 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\acppage.dll wpdshext 6.1.7601.17514 2.43 MB (2,543,616 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\wpdshext.dll searchfolder 6.1.7601.17514 847.50 KB (867,840 bytes) 3/19/2011 3:26 A M Microsoft Corporation c:\windows\system32\searchfolder.dll fdproxy 6.1.7601.17514 72.50 KB (74,240 bytes) 3/19/2011 3:23 AM Microsof t Corporation c:\windows\system32\fdproxy.dll storagecontexthandler 6.1.7600.16385 74.00 KB (75,776 bytes) 7/14/2009 5:27 A M Microsoft Corporation c:\windows\system32\storagecontexthandler.dll msohevi 14.0.4730.1010 75.38 KB (77,184 bytes) 1/9/2010 9:21 PM Microsof t Corporation c:\program files\microsoft office\office14\msohevi.dll shacct 6.1.7601.17514 132.00 KB (135,168 bytes) 3/19/2011 3:23 AM Microsoft Corporation c:\windows\system32\shacct.dll wsect 2.6.2.0 28.50 KB (29,184 bytes) 11/12/2010 6:38 AM Not Available c:\program files (x86)\wst\wsect.exe SyncServer 17.669.6.28 54.32 KB (55,624 bytes) 9/7/2013 9:14 AM Apple Inc. c:\program files (x86)\common files\apple\mobile device support\ syncserver.exe iexplore 11.0.9600.16428 785.70 KB (804,560 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\program files\internet explorer\iexplore.exe ieshims 11.0.9600.16428 336.50 KB (344,576 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\program files\internet explorer\ieshims.dll ieui 11.0.9600.16428 561.50 KB (574,976 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\windows\system32\ieui.dll

msfeeds 11.0.9600.16428 611.50 KB (626,176 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\windows\system32\msfeeds.dll ieapfltr 11.0.9600.16428 798.50 KB (817,664 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\windows\system32\ieapfltr.dll mshtml 11.0.9600.16428 22.14 MB (23,212,032 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\windows\system32\mshtml.dll iexplore 11.0.9600.16428 787.20 KB (806,096 bytes) 11/18/2013 5:32 PM Microsoft Corporation c:\program files (x86)\internet explorer\iexplor e.exe ApplePhotoStreamsDownloader 7.12.44.1 58.32 KB (59,720 bytes) 9/15/201 3 2:34 PM Apple Inc. c:\program files (x86)\common files\apple\intern et services\applephotostreamsdownloader.exe chrome 31.0.1650.63 842.95 KB (863,184 bytes) 8/24/2013 10:08 AM Google Inc. c:\program files (x86)\google\chrome\application\chrome.exe issimgui 4.22.0.0 361.00 KB (369,664 bytes) 9/7/2012 11:39 P M IBM Corp. c:\sdwork\issimgui.exe TOTALCMD64 8.5.0.0 7.72 MB (8,098,872 bytes) 8/22/2013 6:33 PM Ghisler Software GmbH c:\totalcmd\totalcmd64.exe msoxev 14.0.4750.1000 54.83 KB (56,144 bytes) 3/1/2010 5:18 AM Microsof t Corporation c:\program files\common files\microsoft shared\office14\msoxev.d ll mf 12.0.7601.17514 3.93 MB (4,120,064 bytes) 3/19/2011 3:26 AM Microsoft Corporation c:\windows\system32\mf.dll mfplat 12.0.7600.16385 420.50 KB (430,592 bytes) 7/14/2009 5:49 AM Microsoft Corporation c:\windows\system32\mfplat.dll msoxmlmf 14.0.4750.1000 54.88 KB (56,192 bytes) 2/28/2010 2:24 AM Microsoft Corporation c:\program files\common files\microsoft shared\office14\ msoxmlmf.dll ApplePhotoStreamsPS64 7.12.44.1 23.32 KB (23,880 bytes) 9/15/2013 2:34 P M Apple Inc. c:\program files\common files\apple\internet services\ap plephotostreamsps64.dll thumbcache 6.1.7601.17514 110.00 KB (112,640 bytes) 3/19/2011 3:24 A M Microsoft Corporation c:\windows\system32\thumbcache.dll ehstorapi 6.1.7601.17514 141.50 KB (144,896 bytes) 3/19/2011 3:23 A M Microsoft Corporation c:\windows\system32\ehstorapi.dll CellularPlugInController 9.2.1.3002 362.81 KB (371,520 bytes) 4/19/2013 10:06 AM AT&T c:\program files (x86)\at&t network client\cellu larplugincontroller\cellularplugincontroller.exe taskeng 6.1.7601.17514 453.50 KB (464,384 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\taskeng.exe msinfo32 6.1.7601.17514 370.00 KB (378,880 bytes) 3/19/2011 3:25 A M Microsoft Corporation c:\windows\system32\msinfo32.exe mfc42u 6.6.8064.0 1.30 MB (1,359,872 bytes) 7/15/2011 10:27 AM Microsoft Corporation c:\windows\system32\mfc42u.dll odbc32 6.1.7601.17514 704.00 KB (720,896 bytes) 3/19/2011 3:25 AM Microsoft Corporation c:\windows\system32\odbc32.dll odbcint 6.1.7600.16385 224.00 KB (229,376 bytes) 7/14/2009 5:58 AM Microsoft Corporation c:\windows\system32\odbcint.dll [Services] Display Name Name State Start Mode Service Type Path Error Co ntrol Start Name Tag ID Roxio SAIB Service 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269 Running Auto Own Process c:\program files (x86)\roxio\backontrack\app\saibsvc.exe Normal LocalSystem 0 AcPrfMgrSvc AcPrfMgrSvc Running Auto Own Process c:\program files (x86)\lenovo\access connections\acprfmgrsvc.exe Normal LocalSystem 0 AcSvc AcSvc Running Auto Own Process c:\program files (x86)\lenovo\ac

cess connections\acsvc.exe Normal LocalSystem 0 Adobe Acrobat Update Service AdobeARMservice Running Auto Own Process "c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe" Ignore LocalSys tem 0 Adobe Flash Player Update Service AdobeFlashPlayerUpdateSvc Stopped Manual Own Process c:\windows\syswow64\macromed\flash\flashplayerupdateserv ice.exe Normal LocalSystem 0 Application Experience AeLookupSvc Running Manual Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal localSystem 0 Application Layer Gateway Service ALG Stopped Manual Own Process c:\windows\system32\alg.exe Normal NT AUTHORITY\LocalService 0 Intel Centrino Wireless Bluetooth + High Speed Service AMPPALR3 Running Auto Own Process c:\program files\intel\bluetoothhs\bthsamppalservice.exe Normal LocalSystem 0 Application Identity AppIDSvc Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k localserviceandnoimpersonation Normal NT Autho rity\LocalService 0 Application Information Appinfo Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Apple Mobile Device Apple Mobile Device Running Auto Own Process "c:\program files (x86)\common files\apple\mobile device support\applemobiledevi ceservice.exe" Normal LocalSystem 0 Application Management AppMgmt Running Manual Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Mobility Client ArtourService Stopped Manual Own Process "c:\program file s (x86)\ibm\mobility client\artsvc.exe" Ignore LocalSystem 0 Mobility Client Administration Service artstartsvc Running Auto Own Proc ess "c:\program files (x86)\ibm\mobility client\artstartsvc.exe" Ignore LocalSystem 0 ASP.NET State Service aspnet_state Stopped Disabled Own Process c:\windows\microsoft.net\framework64\v4.0.30319\aspnet_state.exe Normal NT AUTHORITY\NetworkService 0 Windows Audio Endpoint Builder AudioEndpointBuilder Running Auto Share Pr ocess c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Windows Audio AudioSrv Running Auto Share Process c:\windows\syste m32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\Loc alService 0 ActiveX Installer (AxInstSV) AxInstSV Stopped Manual Share Process c:\windows\system32\svchost.exe -k axinstsvgroup Normal LocalSystem 0 BitLocker Drive Encryption Service BDESVC Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 BES Client BESClient Running Auto Own Process "c:\program file s (x86)\bigfix enterprise\bes client\besclient.exe" Normal LocalSystem 0 Base Filtering Engine BFE Running Auto Share Process c:\windows\syste m32\svchost.exe -k localservicenonetwork Normal NT AUTHORITY\LocalServic e 0 Background Intelligent Transfer Service BITS Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Bonjour Service Bonjour Service Running Auto Own Process "c:\program file s\bonjour\mdnsresponder.exe" Normal LocalSystem 0 BOT4Service BOT4Service Running Auto Own Process "c:\program file s (x86)\roxio\backontrack\app\bservice.exe" Ignore LocalSystem 0 Computer Browser Browser Running Manual Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Bluetooth Support Service bthserv Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k bthsvcs Normal NT AUTHORITY\LocalService 0

Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service BTHSSecurityMgr Running Auto Own Process "c:\program files\intel\bluetoot hhs\bthssecuritymgr.exe" Normal LocalSystem 0 Bluetooth Service btwdins Running Auto Own Process c:\program files \thinkpad\bluetooth software\btwdins.exe Normal LocalSystem 0 Certificate Propagation CertPropSvc Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Microsoft .NET Framework NGEN v2.0.50727_X86 clr_optimization_v2.0.50727_32 Stopped Manual Own Process c:\windows\microsoft.net\framework\v2.0.50727\ms corsvw.exe Ignore LocalSystem 0 Microsoft .NET Framework NGEN v2.0.50727_X64 clr_optimization_v2.0.50727_64 Stopped Manual Own Process c:\windows\microsoft.net\framework64\v2.0.50727\ mscorsvw.exe Ignore LocalSystem 0 Microsoft .NET Framework NGEN v4.0.30319_X86 clr_optimization_v4.0.30319_32 Stopped Auto Own Process c:\windows\microsoft.net\framework\v4.0.30319\ms corsvw.exe Ignore LocalSystem 0 Microsoft .NET Framework NGEN v4.0.30319_X64 clr_optimization_v4.0.30319_64 Stopped Auto Own Process c:\windows\microsoft.net\framework64\v4.0.30319\ mscorsvw.exe Ignore LocalSystem 0 COM+ System Application COMSysApp Stopped Manual Own Process c:\windo ws\system32\dllhost.exe /processid:{02d4b3f1-fd88-11d1-960d-00805fc79235} Normal LocalSystem 0 Intel(R) Content Protection HECI Service cphs Stopped Manual Own Proc ess c:\windows\syswow64\intelcphecisvc.exe Normal LocalSystem 0 Cryptographic Services CryptSvc Running Auto Share Process c:\windo ws\system32\svchost.exe -k networkservice Normal NT Authority\NetworkServ ice 0 Offline Files CscService Running Auto Share Process c:\windows\syste m32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 IBM Command Line Trace cstrcser Stopped Manual Own Process c:\windo ws\syswow64\drivers\cstrcser.exe Normal LocalSystem 0 DCOM Server Process Launcher DcomLaunch Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch Normal LocalSystem 0 Disk Defragmenter defragsvc Stopped Manual Own Process c:\windo ws\system32\svchost.exe -k defragsvc Normal localSystem 0 DHCP Client Dhcp Running Auto Share Process c:\windows\system32\svch ost.exe -k localservicenetworkrestricted Normal NT Authority\LocalServic e 0 DNS Client Dnscache Running Auto Share Process c:\windows\syste m32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 Wired AutoConfig dot3svc Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k localsystemnetworkrestricted Normal localSystem 0 Lenovo Doze Mode Service DozeSvc Stopped Manual Own Process c:\progr am files (x86)\thinkpad\utilities\dzsvc64.exe Normal LocalSystem 0 Diagnostic Policy Service DPS Running Auto Share Process c:\windo ws\system32\svchost.exe -k localservicenonetwork Normal NT AUTHORITY\Loc alService 0 Extensible Authentication Protocol EapHost Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Encrypting File System (EFS) EFS Running Auto Share Process c:\windo ws\system32\lsass.exe Normal LocalSystem 0 Windows Media Center Receiver Service ehRecvr Stopped Manual Own Process c:\windows\ehome\ehrecvr.exe Ignore NT AUTHORITY\networkService 0 Windows Media Center Scheduler Service ehSched Stopped Manual Own Process c:\windows\ehome\ehsched.exe Ignore NT AUTHORITY\networkService 0 Windows Event Log eventlog Running Auto Share Process c:\windo ws\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHO RITY\LocalService 0 COM+ Event System EventSystem Running Auto Share Process c:\windo

ws\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Intel(R) PROSet/Wireless Event Log EvtEng Running Auto Own Process c:\program files\intel\wifi\bin\evteng.exe Normal LocalSystem 0 Fax Fax Stopped Manual Own Process c:\windows\system32\fxssvc.exe Normal NT AUTHORITY\NetworkService 0 Function Discovery Provider Host fdPHost Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalServic e 0 Function Discovery Resource Publication FDResPub Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Windows Font Cache Service FontCache Running Auto Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalServic e 0 Windows Presentation Foundation Font Cache 3.0.0.0 FontCache3.0.0.0 Running Auto Own Process c:\windows\microsoft.net\framework64\v3.0\wpf\pr esentationfontcache.exe Normal NT Authority\LocalService 0 Group Policy Client gpsvc Running Auto Own Process c:\windows\syste m32\svchost.exe -k gpsvcgroup Normal LocalSystem 0 Google Update Service (gupdate) gupdate Stopped Auto Own Process "c:\prog ram files (x86)\google\update\googleupdate.exe" /svc Normal LocalSystem 0 Google Update Service (gupdatem) gupdatem Stopped Manual Own Proc ess "c:\program files (x86)\google\update\googleupdate.exe" /medsvc Normal LocalSystem 0 Google Updater Service gusvc Stopped Manual Own Process "c:\program file s (x86)\google\common\google updater\googleupdaterservice.exe" Ignore LocalSys tem 0 Human Interface Device Access hidserv Running Manual Share Process c:\windo ws\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Health Key and Certificate Management hkmsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 HomeGroup Listener HomeGroupListener Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSys tem 0 HomeGroup Provider HomeGroupProvider Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalService 0 IBM Notes Diagnostics IBM Notes Diagnostics Running Auto Own Process c:\notes\nsd.exe -svcinvoke -ini "c:\notes\notes.ini" Ignore LocalSystem 0 Lenovo PM Service IBMPMSVC Running Auto Own Process c:\windo ws\system32\ibmpmsvc.exe Ignore LocalSystem 0 Intel(R) Integrated Clock Controller Service - Intel(R) ICCS ICCS Running Manual Own Process "c:\program files (x86)\intel\intel(r) integrated clock controller service\iccproxy.exe" Normal LocalSystem 0 Windows CardSpace idsvc Stopped Manual Share Process "c:\windows\micr osoft.net\framework64\v3.0\windows communication foundation\infocard.exe" Normal LocalSystem 0 Internet Explorer ETW Collector Service IEEtwCollectorService Stopped Manual Own Process c:\windows\system32\ieetwcollector.exe /v Normal LocalSys tem 0 IKE and AuthIP IPsec Keying Modules IKEEXT Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Intelligent Response Agent Intelligent Response Agent Running Auto Own Process c:\program files (x86)\mandiant\mandiant intelligent response ag ent\miragent.exe -service -servicename intelligent response agent Normal LocalSystem 0

PnP-X IP Bus Enumerator IPBusEnum Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 IP Helper iphlpsvc Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 iPod Service iPod Service Running Manual Own Process "c:\program file s\ipod\bin\ipodservice.exe" Normal LocalSystem 0 IBM Standard Asset Manager Service ISAMSvc Running Auto Own Process "c:\program files (x86)\c4ebreg\c4ebreg.exe" Ignore LocalSystem 0 ISSI ISSIMon Running Auto Own Process "c:\sdwork\issimsvc.exe" Ignore LocalSystem 0 CNG Key Isolation KeyIso Running Manual Share Process c:\windows\syste m32\lsass.exe Normal LocalSystem 0 KtmRm for Distributed Transaction Coordinator KtmRm Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k networkserviceandnoimpersonation Normal NT AUTHORITY\NetworkService 0 Server LanmanServer Running Auto Share Process c:\windows\system32\svch ost.exe -k netsvcs Normal LocalSystem 0 Workstation LanmanWorkstation Running Auto Share Process c:\windo ws\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkServ ice 0 Lenovo Camera Mute LENOVO.CAMMUTE Running Auto Own Process c:\progr am files\lenovo\communications utility\cammute.exe Ignore LocalSystem 0 Lenovo Microphone Mute LENOVO.MICMUTE Running Auto Own Process c:\progr am files\lenovo\hotkey\micmute.exe Ignore LocalSystem 0 Lenovo Keyboard Noise Reduction LENOVO.TPKNRSVC Running Auto Own Process c:\program files\lenovo\communications utility\tpknrsvc.exe Ignore LocalSys tem 0 ThinkVantage Virtual Camera Controller LENOVO.TVTVCAM Running Auto Own Proc ess c:\program files\lenovo\communications utility\vcamsvc.exe Ignore LocalSystem 0 Lenovo Auto Scroll Lenovo.VIRTSCRLSVC Running Auto Own Process "c:\program files\lenovo\virtscrl\lvvsst.exe" Ignore LocalSystem 0 Link-Layer Topology Discovery Mapper lltdsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalServic e 0 TCP/IP NetBIOS Helper lmhosts Running Auto Share Process c:\windows\syste m32\svchost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\Loc alService 0 IBM Notes Smart Upgrade Service LNSUSvc Running Auto Own Process c:\notes \suservice.exe Ignore LocalSystem 0 Media Center Extender Service Mcx2Svc Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT Authority\LocalService 0 Microsoft SharePoint Workspace Audit Service Microsoft SharePoint Workspace A udit Service Stopped Manual Own Process "c:\program files (x86)\microsof t office\office14\groove.exe" /auditservice Normal NT AUTHORITY\LocalServic e 0 Multimedia Class Scheduler MMCSS Running Auto Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Mozilla Maintenance Service MozillaMaintenance Stopped Manual Own Proc ess "c:\program files (x86)\mozilla maintenance service\maintenanceservice.e xe" Normal LocalSystem 0 Windows Firewall MpsSvc Stopped Disabled Share Process c:\windo ws\system32\svchost.exe -k localservicenonetwork Normal NT Authority\Loc alService 0 MSCamSvc MSCamSvc Running Auto Own Process "c:\program file s\microsoft lifecam\mscams64.exe" Normal LocalSystem 0 Distributed Transaction Coordinator MSDTC Stopped Manual Own Process

c:\windows\system32\msdtc.exe Normal NT AUTHORITY\NetworkService 0 Microsoft iSCSI Initiator Service MSiSCSI Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Windows Installer msiserver Stopped Manual Own Process c:\windo ws\system32\msiexec.exe /v Normal LocalSystem 0 Multi-user Cleanup Service Multi-user Cleanup Service Running Auto Own Process c:\notes\ntmulti.exe Ignore LocalSystem 0 Network Access Protection Agent napagent Stopped Manual Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHORITY\Net workService 0 AT&T Autoconnect Focus Reporting Service NetAutoconnectFocusSvc Running Auto Own Process "c:\program files (x86)\at&t network client\netautoconne ctfocussvc.exe" Normal LocalSystem 0 AT&T Network Configuration Service netcfgsvr Running Auto Own Proc ess "c:\program files (x86)\at&t network client\netcfgsvr.exe" Normal LocalSystem 0 AT&T Global Network Client Service NetClientSvc Running Auto Own Proc ess "c:\program files (x86)\at&t network client\netclientsvc.exe" Normal LocalSystem 0 Netlogon Netlogon Stopped Manual Share Process c:\windows\syste m32\lsass.exe Normal LocalSystem 0 AT&T Global Network Client Logging Service NetLogSvc Running Auto Own Process "c:\program files (x86)\at&t network client\netlogsvc.exe" Normal LocalSystem 0 Network Connections Netman Running Manual Share Process c:\windows\syste m32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Net.Msmq Listener Adapter NetMsmqActivator Stopped Disabled Share Process "c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe" -netmsmqactivator Normal NT AUTHORITY\NetworkService 0 Net.Pipe Listener Adapter NetPipeActivator Stopped Disabled Share Process c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe Normal NT AUTHORITY\LocalService 0 Network List Service netprofm Running Manual Share Process c:\windo ws\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Net.Tcp Listener Adapter NetTcpActivator Stopped Disabled Share Pr ocess c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe Normal NT AUTHORITY\LocalService 0 Net.Tcp Port Sharing Service NetTcpPortSharing Stopped Disabled Share Process c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe Normal NT AUTHORITY\LocalService 0 Network Location Awareness NlaSvc Running Auto Share Process c:\windo ws\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkServ ice 0 Network Store Interface Service nsi Running Auto Share Process c:\windo ws\system32\svchost.exe -k localservice Normal NT Authority\LocalService 0 Office Source Engine ose Stopped Manual Own Process "c:\program file s (x86)\common files\microsoft shared\source engine\ose.exe" Normal LocalSys tem 0 Office Software Protection Platform osppsvc Running Manual Own Process "c:\program files\common files\microsoft shared\officesoftwareprotectionplatform \osppsvc.exe" Normal NT AUTHORITY\NetworkService 0 Peer Networking Identity Manager p2pimsvc Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHO RITY\LocalService 0 Peer Networking Grouping p2psvc Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalServic e 0 Program Compatibility Assistant Service PcaSvc Running Auto Share Process

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSys tem 0 BranchCache PeerDistSvc Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k peerdist Normal NT AUTHORITY\NetworkService 0 Performance Counter DLL Host PerfHost Stopped Manual Own Process c:\windows\syswow64\perfhost.exe Normal NT AUTHORITY\LocalService 0 Performance Logs & Alerts pla Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k localservicenonetwork Normal NT AUTHORITY\Loc alService 0 Plug and Play PlugPlay Running Auto Share Process c:\windows\syste m32\svchost.exe -k dcomlaunch Normal LocalSystem 0 PNRP Machine Name Publication Service PNRPAutoReg Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k localservicepeernet Normal NT AUTHO RITY\LocalService 0 Peer Name Resolution Protocol PNRPsvc Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k localservicepeernet Normal NT AUTHORITY\LocalServic e 0 IPsec Policy Agent PolicyAgent Running Manual Share Process c:\windo ws\system32\svchost.exe -k networkservicenetworkrestricted Normal NT Autho rity\NetworkService 0 Power Power Running Auto Share Process c:\windows\system32\svchost.exe -k dcomlaunch Normal LocalSystem 0 Power Manager DBC Service Power Manager DBC Service Running Manual Own Process "c:\program files (x86)\thinkpad\utilities\pwmdbsvc.exe" Normal LocalSystem 0 User Profile Service ProfSvc Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Protected Storage ProtectedStorage Stopped Manual Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Cisco EnergyWise Enabler PwmEWSvc Stopped Manual Own Process "c:\program files (x86)\thinkpad\utilities\pwmewsvc.exe" Normal LocalSys tem 0 Quality Windows Audio Video Experience QWAVE Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Remote Access Auto Connection Manager RasAuto Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Remote Access Connection Manager RasMan Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Intel(R) PROSet/Wireless Registry Service RegSrvc Running Auto Own Proc ess c:\program files\common files\intel\wirelesscommon\regsrvc.exe Normal LocalSystem 0 Routing and Remote Access RemoteAccess Stopped Disabled Share Pr ocess c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Remote Registry RemoteRegistry Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k regsvc Normal NT AUTHORITY\LocalService 0 RoxMediaDB13 RoxMediaDB13 Stopped Manual Own Process "c:\program file s (x86)\common files\roxio shared\13.0\sharedcom\roxmediadb13.exe" Ignore LocalSystem 0 Roxio Hard Drive Watcher 12 RoxWatch12 Stopped Auto Own Process "c:\program files (x86)\common files\roxio shared\13.0\sharedcom\roxwatch13.exe" Ignore LocalSystem 0 RPC Endpoint Mapper RpcEptMapper Running Auto Share Process c:\windo ws\system32\svchost.exe -k rpcss Normal NT AUTHORITY\NetworkService 0 Remote Procedure Call (RPC) Locator RpcLocator Stopped Manual Own Proc ess c:\windows\system32\locator.exe Normal NT AUTHORITY\NetworkService 0

Remote Procedure Call (RPC) RpcSs Running Auto Share Process c:\windo ws\system32\svchost.exe -k rpcss Normal NT AUTHORITY\NetworkService 0 Security Accounts Manager SamSs Running Auto Share Process c:\windo ws\system32\lsass.exe Normal LocalSystem 0 Smart Card SCardSvr Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\Loc alService 0 Task Scheduler Schedule Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Smart Card Removal Policy SCPolicySvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Windows Backup SDRSVC Stopped Manual Own Process c:\windows\system32\svch ost.exe -k sdrsvc Normal localSystem 0 Secondary Logon seclogon Running Manual Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 System Event Notification Service SENS Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Adaptive Brightness SensrSvc Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHO RITY\LocalService 0 Symantec Endpoint Protection SepMasterService Running Auto Own Proc ess "c:\program files (x86)\symantec\symantec endpoint protection\12.1.2015. 2015.105\bin\ccsvchst.exe" /s "symantec endpoint protection" /m "c:\program file s (x86)\symantec\symantec endpoint protection\12.1.2015.2015.105\bin\sms.dll" /p refetch:1 Normal LocalSystem 0 Remote Desktop Configuration SessionEnv Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Internet Connection Sharing (ICS) SharedAccess Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Shell Hardware Detection ShellHWDetection Running Auto Share Pr ocess c:\windows\system32\svchost.exe -k netsvcs Ignore LocalSystem 0 Skype C2C Service Skype C2C Service Running Auto Own Process "c:\programdata\skype\toolbars\skype c2c service\c2c_service.exe" Ignore LocalSystem 0 Skype Updater SkypeUpdate Stopped Auto Own Process "c:\program file s (x86)\skype\updater\updater.exe" Ignore LocalSystem 0 Symantec Management Client SmcService Running Manual Own Process "c:\program files (x86)\symantec\symantec endpoint protection\12.1.2015.2015.105 \bin64\smc.exe" /prefetch:1 Normal LocalSystem 0 Symantec Network Access Control SNAC Stopped Manual Own Process "c:\prog ram files (x86)\symantec\symantec endpoint protection\12.1.2015.2015.105\bin64\s nac64.exe" Normal LocalSystem 0 SNMP Trap SNMPTRAP Stopped Manual Own Process c:\windows\syste m32\snmptrap.exe Normal NT AUTHORITY\LocalService 0 Print Spooler Spooler Running Auto Own Process c:\windows\system32\spoo lsv.exe Normal LocalSystem 0 Software Protection sppsvc Stopped Auto Own Process c:\windows\syste m32\sppsvc.exe Normal NT AUTHORITY\NetworkService 0 SPP Notification Service sppuinotify Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalServic e 0 SSDP Discovery SSDPSRV Running Manual Share Process c:\windows\system32\svch ost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalServic e 0 Secure Socket Tunneling Protocol Service SstpSvc Running Manual Share Pr ocess c:\windows\system32\svchost.exe -k localservice Normal NT Authority\Loc alService 0

Windows Image Acquisition (WIA) stisvc Running Auto Own Process c:\windo ws\system32\svchost.exe -k imgsvc Normal NT Authority\LocalService 0 Storage Service StorSvc Stopped Manual Share Process c:\windows\system32\svch ost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Sierra Wireless Card Detection Service SwiCardDetectSvc Running Auto Own Process "c:\program files (x86)\sierra wireless inc\common\swicarddetect 64.exe" Normal LocalSystem 0 Microsoft Software Shadow Copy Provider swprv Stopped Manual Own Process c:\windows\system32\svchost.exe -k swprv Normal LocalSystem 0 Superfetch SysMain Running Auto Share Process c:\windows\system32\svch ost.exe -k localsystemnetworkrestricted Ignore LocalSystem 0 Tablet PC Input Service TabletInputService Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSys tem 0 Telephony TapiSrv Running Manual Share Process c:\windows\system32\svch ost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 TPM Base Services TBS Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\Loc alService 0 Remote Desktop Services TermService Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k networkservice Normal NT Authority\NetworkServ ice 0 Themes Themes Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Thread Ordering Server THREADORDER Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 ThinkPad HDD APS Logging Service TPHDEXLGSVC Stopped Manual Own Proc ess system32\tphdexlg64.exe Normal LocalSystem 0 Lenovo Hotkey Client Loader TPHKLOAD Running Auto Own Process c:\program files\lenovo\hotkey\tphkload.exe Ignore LocalSystem 0 On Screen Display TPHKSVC Running Auto Own Process c:\program files \lenovo\hotkey\tphksvc.exe Ignore LocalSystem 0 Tivoli Endpoint Manager for Remote Control - Target TRCTARGET Stopped Manual Own Process "c:\program files (x86)\ibm\tivoli\remote control\target \trc_base.exe" -s Normal LocalSystem 0 Distributed Link Tracking Client TrkWks Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSys tem 0 Windows Modules Installer TrustedInstaller Stopped Manual Own Proc ess c:\windows\servicing\trustedinstaller.exe Normal localSystem 0 Interactive Services Detection UI0Detect Stopped Auto Own Process c:\windows\system32\ui0detect.exe Normal LocalSystem 0 Remote Desktop Services UserMode Port Redirector UmRdpService Stopped Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkres tricted Normal localSystem 0 UPnP Device Host upnphost Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHO RITY\LocalService 0 Desktop Window Manager Session Manager UxSms Running Auto Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal localSys tem 0 Credential Manager VaultSvc Stopped Manual Share Process c:\windo ws\system32\lsass.exe Normal LocalSystem 0 Virtual Disk vds Stopped Manual Own Process c:\windows\system32\vds. exe Normal LocalSystem 0 Volume Shadow Copy VSS Stopped Manual Own Process c:\windows\syste m32\vssvc.exe Normal LocalSystem 0

Windows Time W32Time Stopped Manual Share Process c:\windows\system32\svch ost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Windows Activation Technologies Service WatAdminSvc Stopped Manual Own Proc ess c:\windows\system32\wat\watadminsvc.exe Normal LocalSystem 0 Block Level Backup Engine Service wbengine Stopped Manual Own Proc ess "c:\windows\system32\wbengine.exe" Normal localSystem 0 Windows Biometric Service WbioSrvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k wbiosvcgroup Normal LocalSystem 0 Windows Connect Now - Config Registrar wcncsvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localserviceandnoimpersonation Normal NT AUTHORITY\LocalService 0 Windows Color System WcsPlugInService Stopped Manual Share Process c:\windows\system32\svchost.exe -k wcssvc Normal NT AUTHORITY\LocalServic e 0 Diagnostic Service Host WdiServiceHost Running Manual Share Process c:\windo ws\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Diagnostic System Host WdiSystemHost Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 WebClient WebClient Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Windows Event Collector Wecsvc Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 Problem Reports and Solutions Control Panel Support wercplsupport Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Windows Error Reporting Service WerSvc Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k wersvcgroup Ignore localSystem 0 Windows Defender WinDefend Stopped Disabled Share Process c:\windows\system32\svchost.exe -k secsvcs Normal LocalSystem 0 WinHTTP Web Proxy Auto-Discovery Service WinHttpAutoProxySvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Windows Management Instrumentation Winmgmt Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Ignore localSystem 0 Windows Remote Management (WS-Management) WinRM Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHO RITY\NetworkService 0 WLAN AutoConfig Wlansvc Running Auto Share Process c:\windows\system32\svch ost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 WMI Performance Adapter wmiApSrv Stopped Manual Own Process c:\windo ws\system32\wbem\wmiapsrv.exe Normal localSystem 0 Windows Media Player Network Sharing Service WMPNetworkSvc Stopped Manual Own Process "c:\program files\windows media player\wmpnetwk.exe" Normal NT AUTHORITY\NetworkService 0 Parental Controls WPCSvc Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k localservicenetworkrestricted Normal NT Authority\Loc alService 0 Portable Device Enumerator Service WPDBusEnum Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 Security Center wscsvc Running Auto Share Process c:\windows\system32\svch ost.exe -k localservicenetworkrestricted Normal NT AUTHORITY\LocalServic e 0 Windows Search WSearch Running Auto Own Process c:\windows\system32\sear chindexer.exe /embedding Normal LocalSystem 0 Windows Update wuauserv Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0

Windows Driver Foundation - User-mode Driver Framework wudfsvc Running Manual Share Process c:\windows\system32\svchost.exe -k localsystemnetworkrestricted Normal LocalSystem 0 WWAN AutoConfig WwanSvc Stopped Manual Share Process c:\windows\system32\svch ost.exe -k localservicenonetwork Normal NT Authority\LocalService 0 Intel(R) PROSet/Wireless Zero Configuration Service ZeroConfigService Running Auto Own Process "c:\program files\intel\wifi\bin\zeroconfigservi ce.exe" Normal LocalSystem 0 [Program Groups] Group Name Name User Name Start Menu Default:Start Menu Default Start Menu\Programs Default:Start Menu\Programs Default Start Menu\Programs\Accessories Default:Start Menu\Programs\Accessories Default Start Menu\Programs\Accessories\Accessibility Default:Start Menu\Programs\Acce ssories\Accessibility Default Start Menu\Programs\Accessories\System Tools Default:Start Menu\Programs\Acce ssories\System Tools Default Start Menu\Programs\Administrative Tools Default:Start Menu\Programs\Admi nistrative Tools Default Start Menu\Programs\Maintenance Default:Start Menu\Programs\Maintenance Default Start Menu\Programs\Startup Default:Start Menu\Programs\Startup Default Start Menu Public:Start Menu Public Start Menu\Programs Public:Start Menu\Programs Public Start Menu\Programs\Accessories Public:Start Menu\Programs\Accessories Public Start Menu\Programs\Accessories\Accessibility Public:Start Menu\Programs\Acces sories\Accessibility Public Start Menu\Programs\Accessories\System Tools Public:Start Menu\Programs\Acces sories\System Tools Public Start Menu\Programs\Accessories\Tablet PC Public:Start Menu\Programs\Acces sories\Tablet PC Public Start Menu\Programs\Accessories\Windows PowerShell Public:Start Menu\Progra ms\Accessories\Windows PowerShell Public Start Menu\Programs\Administrative Tools Public:Start Menu\Programs\Admin istrative Tools Public Start Menu\Programs\AT&T Global Network Client Public:Start Menu\Programs\AT&T Global Network Client Public Start Menu\Programs\AVS4YOU Public:Start Menu\Programs\AVS4YOU Public Start Menu\Programs\AVS4YOU\Image Public:Start Menu\Programs\AVS4YOU\Image Public Start Menu\Programs\AVS4YOU\Video Public:Start Menu\Programs\AVS4YOU\Video Public Start Menu\Programs\CutePDF Public:Start Menu\Programs\CutePDF Public Start Menu\Programs\CutePDF\PDF Writer Public:Start Menu\Programs\CutePDF\PDF W riter Public Start Menu\Programs\DivX Public:Start Menu\Programs\DivX Public Start Menu\Programs\Dolby Public:Start Menu\Programs\Dolby Public Start Menu\Programs\eClaim Public:Start Menu\Programs\eClaim Public Start Menu\Programs\FreeMind Public:Start Menu\Programs\FreeMind Public Start Menu\Programs\Games Public:Start Menu\Programs\Games Public Start Menu\Programs\Google Chrome Public:Start Menu\Programs\Google Chrome Public Start Menu\Programs\IBM Public:Start Menu\Programs\IBM Public Start Menu\Programs\IBM\GS Risk Public:Start Menu\Programs\IBM\GS Risk Public Start Menu\Programs\IBM\ILC Public:Start Menu\Programs\IBM\ILC Public Start Menu\Programs\IBM\SDM GPE Public:Start Menu\Programs\IBM\SDM GPE Public Start Menu\Programs\IBM Applications Public:Start Menu\Programs\IBM Applicati ons Public

Start Menu\Programs\IBM Applications\Support Public:Start Menu\Programs\IBM A pplications\Support Public Start Menu\Programs\IBM Lotus Sametime Connect Public:Start Menu\Programs\IBM L otus Sametime Connect Public Start Menu\Programs\IBM Mobility Client Public:Start Menu\Programs\IBM Mobility Client Public Start Menu\Programs\IBM Personal Communications Public:Start Menu\Programs\IBM P ersonal Communications Public Start Menu\Programs\IBM Personal Communications\Administrative and PD Aids Public:Start Menu\Programs\IBM Personal Communications\Administrative and PD Aid s Public Start Menu\Programs\IBM Personal Communications\Utilities Public:Start Men u\Programs\IBM Personal Communications\Utilities Public Start Menu\Programs\iCloud Public:Start Menu\Programs\iCloud Public Start Menu\Programs\iTunes Public:Start Menu\Programs\iTunes Public Start Menu\Programs\Lenovo ThinkVantage Tools Public:Start Menu\Programs\Lenov o ThinkVantage Tools Public Start Menu\Programs\Maintenance Public:Start Menu\Programs\Maintenance Public Start Menu\Programs\Microsoft LifeCam Public:Start Menu\Programs\Microsoft Lif eCam Public Start Menu\Programs\Microsoft Office Public:Start Menu\Programs\Microsoft Off ice Public Start Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools Public:S tart Menu\Programs\Microsoft Office\Microsoft Office 2010 Tools Public Start Menu\Programs\Microsoft Office Live Meeting 2007 Public:Start Menu\Progra ms\Microsoft Office Live Meeting 2007 Public Start Menu\Programs\Notepad++ Public:Start Menu\Programs\Notepad++ Public Start Menu\Programs\Office Tab Public:Start Menu\Programs\Office Tab Public Start Menu\Programs\OpenOffice 4.0.1 Public:Start Menu\Programs\OpenOffice 4. 0.1 Public Start Menu\Programs\Picasa 3 Public:Start Menu\Programs\Picasa 3 Public Start Menu\Programs\PuTTY Public:Start Menu\Programs\PuTTY Public Start Menu\Programs\QuickTime Public:Start Menu\Programs\QuickTime Public Start Menu\Programs\Roxio Public:Start Menu\Programs\Roxio Public Start Menu\Programs\Roxio\Roxio BackOnTrack Public:Start Menu\Programs\Roxio \Roxio BackOnTrack Public Start Menu\Programs\Roxio Creator Silver 4 Public:Start Menu\Programs\Roxio Creator Silver 4 Public Start Menu\Programs\Roxio Creator Silver 4\Applications Public:Start Menu\Progra ms\Roxio Creator Silver 4\Applications Public Start Menu\Programs\SharePoint Public:Start Menu\Programs\SharePoint Public Start Menu\Programs\Skype Public:Start Menu\Programs\Skype Public Start Menu\Programs\Startup Public:Start Menu\Programs\Startup Public Start Menu\Programs\Symantec Encryption Public:Start Menu\Programs\Symantec Encr yption Public Start Menu\Programs\Symantec Encryption\Documentation Public:Start Menu\Progra ms\Symantec Encryption\Documentation Public Start Menu\Programs\Symantec Encryption\Documentation\French Public:Start Men u\Programs\Symantec Encryption\Documentation\French Public Start Menu\Programs\Symantec Encryption\Documentation\German Public:Start Men u\Programs\Symantec Encryption\Documentation\German Public Start Menu\Programs\Symantec Encryption\Documentation\Japanese Public:Start Men u\Programs\Symantec Encryption\Documentation\Japanese Public Start Menu\Programs\Symantec Encryption\Documentation\Spanish Public:Start Men u\Programs\Symantec Encryption\Documentation\Spanish Public Start Menu\Programs\Symantec Endpoint Protection Public:Start Menu\Progra ms\Symantec Endpoint Protection Public Start Menu\Programs\Tablet PC Public:Start Menu\Programs\Tablet PC Public Start Menu\Programs\TechSmith Public:Start Menu\Programs\TechSmith Public Start Menu\Programs\TeraCopy Public:Start Menu\Programs\TeraCopy Public

Start Menu\Programs\ThinkVantage Public:Start Menu\Programs\ThinkVantage Public Start Menu\Programs\VideoLAN Public:Start Menu\Programs\VideoLAN Public Start Menu\Programs\WinSCP Public:Start Menu\Programs\WinSCP Public Start Menu\Programs\WinSCP\Key tools Public:Start Menu\Programs\WinSCP\Key to ols Public Start Menu\Programs\Workstation Security Tool Public:Start Menu\Programs\Works tation Security Tool Public Start Menu\Programs\XMind Public:Start Menu\Programs\XMind Public Start Menu\Programs\XMind\Support Public:Start Menu\Programs\XMind\Support Public Start Menu SPUMANTE\shashidhar:Start Menu SPUMANTE\shashidhar Start Menu\Programs SPUMANTE\shashidhar:Start Menu\Programs SPUMANTE\shashid har Start Menu\Programs\Accessories SPUMANTE\shashidhar:Start Menu\Programs\Accessor ies SPUMANTE\shashidhar Start Menu\Programs\Accessories\Accessibility SPUMANTE\shashidhar:Start Menu\P rograms\Accessories\Accessibility SPUMANTE\shashidhar Start Menu\Programs\Accessories\System Tools SPUMANTE\shashidhar:Start Menu\P rograms\Accessories\System Tools SPUMANTE\shashidhar Start Menu\Programs\Administrative Tools SPUMANTE\shashidhar:Start Menu\P rograms\Administrative Tools SPUMANTE\shashidhar Start Menu\Programs\AVS4YOU SPUMANTE\shashidhar:Start Menu\Programs\AVS4YOU SPUMANTE\shashidhar Start Menu\Programs\Maintenance SPUMANTE\shashidhar:Start Menu\Programs\Maintena nce SPUMANTE\shashidhar Start Menu\Programs\Notepad++ SPUMANTE\shashidhar:Start Menu\Programs\Notepad+ + SPUMANTE\shashidhar Start Menu\Programs\Revo Uninstaller SPUMANTE\shashidhar:Start Menu\Programs\ Revo Uninstaller SPUMANTE\shashidhar Start Menu\Programs\Startup SPUMANTE\shashidhar:Start Menu\Programs\Startup SPUMANTE\shashidhar Start Menu\Programs\Total Commander SPUMANTE\shashidhar:Start Menu\Programs\ Total Commander SPUMANTE\shashidhar [Startup Programs] Program Command User Name Location Sidebar %programfiles%\windows sidebar\sidebar.exe /autorun NT AUTHORITY\LOC AL SERVICE Startup Sidebar %programfiles%\windows sidebar\sidebar.exe /autorun NT AUTHORITY\NET WORK SERVICE Startup Adobe Playpanel adobe playpanel.lnk SPUMANTE\shashidhar Startup Open Office 4.0.0 open office 4.0.0.lnk SPUMANTE\shashidhar Startup Open Office 4.0.1 open office 4.0.1.lnk SPUMANTE\shashidhar Startup NetSP - restore settings on power failure "c:\program files (x86)\at&t net work client\netsp.exe" -show SPUMANTE\shashidhar Startup iCloudServices c:\program files (x86)\common files\apple\internet services\iclo udservices.exe SPUMANTE\shashidhar Startup ApplePhotoStreams c:\program files (x86)\common files\apple\internet servi ces\applephotostreams.exe SPUMANTE\shashidhar Startup SymphonyPreLoad "c:\program files (x86)\ibm\lotus\symphony\framework\shared\ecli pse\plugins\com.ibm.symphony.standard.launcher.win32.x86_3.0.1.20120110-2000\ibm lotus symphony" -nogui -nosplash SPUMANTE\shashidhar Startup AT&T Global Network Client c:\progra~2\at&tne~1\netcli~3.exe -netgm Public Common Startup Bluetooth c:\progra~1\thinkpad\blueto~1\bttray.exe Public Common S tartup IBM Connections Drafts Monitor c:\progra~2\ibm\connec~1\lfmoni~1.exe Public Common Startup

PGP Tray c:\windows\installer\{7c687c19-7e5b-441f-be12-8f24eb45cbc0}\icon 6560581611.exe Public Common Startup Snagit 11 c:\progra~2\techsm~1\snagit~1\snagit32.exe Public Common S tartup TpShocks tpshocks.exe Public HKLM\SOFTWARE\Microsoft\Windows\CurrentV ersion\Run ETDCtrl %programfiles%\elantech\etdctrl.exe Public HKLM\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run AcWin7Hlpr c:\program files (x86)\lenovo\access connections\actbenabler.exe Public HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run LENOVO.TPKNRRES c:\program files\lenovo\communications utility\tpknrres.exe Public HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RTHDVCPL "c:\program files\realtek\audio\hda\ravcpl64.exe" -s Public HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RtHDVBg_Dolby "c:\program files\realtek\audio\hda\ravbg64.exe" /forpcee4 Public HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run IgfxTray c:\windows\system32\igfxtray.exe Public HKLM\SOFTWARE\Mi crosoft\Windows\CurrentVersion\Run HotKeysCmds c:\windows\system32\hkcmd.exe Public HKLM\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run Persistence c:\windows\system32\igfxpers.exe Public HKLM\SOFTWARE\Mi crosoft\Windows\CurrentVersion\Run [OLE Registration] Object Local Server WordPad Document "%programfiles%\windows nt\accessories\wordpad.exe" Paintbrush Picture %systemroot%\system32\mspaint.exe Drawing Not Available Package Not Available Microsoft PenInputPanel Control Not Available [Windows Error Reporting] Time Type Details 12/6/2013 12:26 PM Application Error Faulting application name: DivX Player.exe, version: 11.2.1.1, time stamp: 0x52675132&#x000d;&#x000a;Faulting mo dule name: unknown, version: 0.0.0.0, time stamp: 0x00000000&#x000d;&#x000a;Exce ption code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0365fef0&#x000d;&#x000a;Fa ulting process id: 0x3570&#x000d;&#x000a;Faulting application start time: 0x01ce f27e592e37ac&#x000d;&#x000a;Faulting application path: C:\Program Files (x86)\Di vX\DivX Player\DivX Player.exe&#x000d;&#x000a;Faulting module path: unknown&#x00 0d;&#x000a;Report Id: 9ab16409-5e71-11e3-9a39-3c970e3ea92e 12/2/2013 11:27 AM Application Error Faulting application name: issim svc.exe, version: 4.15.0.0, time stamp: 0x504a3845&#x000d;&#x000a;Faulting modul e name: unknown, version: 0.0.0.0, time stamp: 0x00000000&#x000d;&#x000a;Excepti on code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x004c0509&#x000d;&#x000a;Fault ing process id: 0xbe4&#x000d;&#x000a;Faulting application start time: 0x01ceef32 0a5dbf49&#x000d;&#x000a;Faulting application path: c:\sdwork\issimsvc.exe&#x000d ;&#x000a;Faulting module path: unknown&#x000d;&#x000a;Report Id: b63897f5-5b44-1 1e3-a1ba-3c970e3ea92e 11/30/2013 2:08 PM Application Error Faulting application name: DivX Player.exe, version: 11.2.1.1, time stamp: 0x52675132&#x000d;&#x000a;Faulting mo dule name: MSVCR80.dll, version: 8.0.50727.6229, time stamp: 0x4ec352ab&#x000d;& #x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378&#x000d ;&#x000a;Faulting process id: 0x2e7c&#x000d;&#x000a;Faulting application start t ime: 0x01ceedd5b241cad9&#x000d;&#x000a;Faulting application path: C:\Program Fil es (x86)\DivX\DivX Player\DivX Player.exe&#x000d;&#x000a;Faulting module path: C :\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d08 9f796442de10e\MSVCR80.dll&#x000d;&#x000a;Report Id: f4c0e715-59c8-11e3-a1f0-3c97

0e3ea92e 11/29/2013 9:41 AM Application Error Faulting application name: issim svc.exe, version: 4.15.0.0, time stamp: 0x504a3845&#x000d;&#x000a;Faulting modul e name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000 a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00039342&#x000d;&#x0 00a;Faulting process id: 0x870&#x000d;&#x000a;Faulting application start time: 0 x01cee75f7b310431&#x000d;&#x000a;Faulting application path: c:\sdwork\issimsvc.e xe&#x000d;&#x000a;Faulting module path: C:\windows\syswow64\ole32.dll&#x000d;&#x 000a;Report Id: 7084f333-58da-11e3-a1f0-3c970e3ea92e 11/29/2013 9:41 AM Application Error Faulting application name: c4ebr eg.exe, version: 7.45.0.4, time stamp: 0x52053043&#x000d;&#x000a;Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000a ;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00039342&#x000d;&#x00 0a;Faulting process id: 0xbf8&#x000d;&#x000a;Faulting application start time: 0x 01cee75f7a5866f9&#x000d;&#x000a;Faulting application path: C:\Program Files (x86 )\C4ebreg\c4ebreg.exe&#x000d;&#x000a;Faulting module path: C:\windows\syswow64\o le32.dll&#x000d;&#x000a;Report Id: 70842fe0-58da-11e3-a1f0-3c970e3ea92e 11/17/2013 5:06 AM Application Error Faulting application name: DivX Player.exe, version: 11.2.1.1, time stamp: 0x52675132&#x000d;&#x000a;Faulting mo dule name: MSVCR80.dll, version: 8.0.50727.6229, time stamp: 0x4ec352ab&#x000d;& #x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378&#x000d ;&#x000a;Faulting process id: 0x1648&#x000d;&#x000a;Faulting application start t ime: 0x01cee352aedb5d6d&#x000d;&#x000a;Faulting application path: C:\Program Fil es (x86)\DivX\DivX Player\DivX Player.exe&#x000d;&#x000a;Faulting module path: C :\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d08 9f796442de10e\MSVCR80.dll&#x000d;&#x000a;Report Id: f6ddb054-4f45-11e3-bce2-3c97 0e3ea92e 11/16/2013 12:17 PM Application Error Faulting application name: DivX Player.exe, version: 11.2.1.1, time stamp: 0x52675132&#x000d;&#x000a;Faulting mo dule name: MSVCR80.dll, version: 8.0.50727.6229, time stamp: 0x4ec352ab&#x000d;& #x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378&#x000d ;&#x000a;Faulting process id: 0xfb4&#x000d;&#x000a;Faulting application start ti me: 0x01cee2c5bfbd9ae3&#x000d;&#x000a;Faulting application path: C:\Program File s (x86)\DivX\DivX Player\DivX Player.exe&#x000d;&#x000a;Faulting module path: C: \windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089 f796442de10e\MSVCR80.dll&#x000d;&#x000a;Report Id: fea2e110-4eb8-11e3-bce2-3c970 e3ea92e 11/16/2013 12:16 PM Application Error Faulting application name: DivX Player.exe, version: 11.2.1.1, time stamp: 0x52675132&#x000d;&#x000a;Faulting mo dule name: MSVCR80.dll, version: 8.0.50727.6229, time stamp: 0x4ec352ab&#x000d;& #x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378&#x000d ;&#x000a;Faulting process id: 0x2168&#x000d;&#x000a;Faulting application start t ime: 0x01cee2c5baab2910&#x000d;&#x000a;Faulting application path: C:\Program Fil es (x86)\DivX\DivX Player\DivX Player.exe&#x000d;&#x000a;Faulting module path: C :\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d08 9f796442de10e\MSVCR80.dll&#x000d;&#x000a;Report Id: fab91515-4eb8-11e3-bce2-3c97 0e3ea92e 11/16/2013 12:16 PM Application Error Faulting application name: DivX Player.exe, version: 11.2.1.1, time stamp: 0x52675132&#x000d;&#x000a;Faulting mo dule name: MSVCR80.dll, version: 8.0.50727.6229, time stamp: 0x4ec352ab&#x000d;& #x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378&#x000d ;&#x000a;Faulting process id: 0x1bf4&#x000d;&#x000a;Faulting application start t ime: 0x01cee2c5afa1fc92&#x000d;&#x000a;Faulting application path: C:\Program Fil es (x86)\DivX\DivX Player\DivX Player.exe&#x000d;&#x000a;Faulting module path: C :\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d08 9f796442de10e\MSVCR80.dll&#x000d;&#x000a;Report Id: f3f2843f-4eb8-11e3-bce2-3c97 0e3ea92e 11/12/2013 2:38 PM Application Error Faulting application name: DivX Player.exe, version: 11.2.1.1, time stamp: 0x52675132&#x000d;&#x000a;Faulting mo dule name: MSVCR80.dll, version: 8.0.50727.6229, time stamp: 0x4ec352ab&#x000d;&

#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378&#x000d ;&#x000a;Faulting process id: 0x1910&#x000d;&#x000a;Faulting application start t ime: 0x01cedfb4c2a83e95&#x000d;&#x000a;Faulting application path: C:\Program Fil es (x86)\DivX\DivX Player\DivX Player.exe&#x000d;&#x000a;Faulting module path: C :\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d08 9f796442de10e\MSVCR80.dll&#x000d;&#x000a;Report Id: 088addd6-4ba8-11e3-9267-3c97 0e3ea92e 11/12/2013 2:37 PM Application Error Faulting application name: DivX Player.exe, version: 11.2.1.1, time stamp: 0x52675132&#x000d;&#x000a;Faulting mo dule name: MSVCR80.dll, version: 8.0.50727.6229, time stamp: 0x4ec352ab&#x000d;& #x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378&#x000d ;&#x000a;Faulting process id: 0x1cd0&#x000d;&#x000a;Faulting application start t ime: 0x01cedfb4ace9ac23&#x000d;&#x000a;Faulting application path: C:\Program Fil es (x86)\DivX\DivX Player\DivX Player.exe&#x000d;&#x000a;Faulting module path: C :\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d08 9f796442de10e\MSVCR80.dll&#x000d;&#x000a;Report Id: ef698bb3-4ba7-11e3-9267-3c97 0e3ea92e 11/12/2013 4:37 AM Application Error Faulting application name: Snagi t32.exe, version: 11.2.1.72, time stamp: 0x51a6625e&#x000d;&#x000a;Faulting modu le name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea8e7&#x000d;&#x00 0a;Exception code: 0xc0150010&#x000d;&#x000a;Fault offset: 0x0008482b&#x000d;&#x 000a;Faulting process id: 0x154c&#x000d;&#x000a;Faulting application start time: 0x01cedd06ae618e64&#x000d;&#x000a;Faulting application path: C:\Program Files ( x86)\TechSmith\Snagit 11\Snagit32.exe&#x000d;&#x000a;Faulting module path: C:\wi ndows\SysWOW64\ntdll.dll&#x000d;&#x000a;Report Id: 3278f157-4b54-11e3-9267-3c970 e3ea92e 11/12/2013 4:37 AM Application Error Faulting application name: Snagi t32.exe, version: 11.2.1.72, time stamp: 0x51a6625e&#x000d;&#x000a;Faulting modu le name: unknown, version: 0.0.0.0, time stamp: 0x00000000&#x000d;&#x000a;Except ion code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x004f004c&#x000d;&#x000a;Faul ting process id: 0x154c&#x000d;&#x000a;Faulting application start time: 0x01cedd 06ae618e64&#x000d;&#x000a;Faulting application path: C:\Program Files (x86)\Tech Smith\Snagit 11\Snagit32.exe&#x000d;&#x000a;Faulting module path: unknown&#x000d ;&#x000a;Report Id: 2b666244-4b54-11e3-9267-3c970e3ea92e 10/31/2013 1:55 PM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: unknown, version: 0.0.0.0, time stamp: 0x00000000&#x000d;&#x000 a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x044cfef0&#x000d;&#x0 00a;Faulting process id: 0xf48&#x000d;&#x000a;Faulting application start time: 0 x01ced640daa2773d&#x000d;&#x000a;Faulting application path: C:\Program Files (x8 6)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faulting module pat h: unknown&#x000d;&#x000a;Report Id: 1c436538-4234-11e3-a737-3c970e3ea92e 10/30/2013 7:18 AM Application Error Faulting application name: c4ebr eg.exe, version: 7.45.0.4, time stamp: 0x52053043&#x000d;&#x000a;Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000&#x000d;&#x000a;Exceptio n code: 0xc0000005&#x000d;&#x000a;Fault offset: 0xf1eef1ee&#x000d;&#x000a;Faulti ng process id: 0xb90&#x000d;&#x000a;Faulting application start time: 0x01ced3cc3 0d714be&#x000d;&#x000a;Faulting application path: C:\Program Files (x86)\C4ebreg \c4ebreg.exe&#x000d;&#x000a;Faulting module path: unknown&#x000d;&#x000a;Report Id: 7b387709-4133-11e3-a737-3c970e3ea92e 10/30/2013 7:18 AM Application Error Faulting application name: issim svc.exe, version: 4.15.0.0, time stamp: 0x504a3845&#x000d;&#x000a;Faulting modul e name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000 a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00039342&#x000d;&#x0 00a;Faulting process id: 0xbcc&#x000d;&#x000a;Faulting application start time: 0 x01ced3cc31b474b8&#x000d;&#x000a;Faulting application path: c:\sdwork\issimsvc.e xe&#x000d;&#x000a;Faulting module path: C:\windows\syswow64\ole32.dll&#x000d;&#x 000a;Report Id: 7b384ff8-4133-11e3-a737-3c970e3ea92e 10/28/2013 10:56 AM Application Error Faulting application name: ZeroC onfigService.exe, version: 15.3.0.0, time stamp: 0x5036b2a4&#x000d;&#x000a;Fault

ing module name: MurocApi.dll, version: 15.3.0.0, time stamp: 0x5036b1ea&#x000d; &#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0000000000020b 2b&#x000d;&#x000a;Faulting process id: 0xf68&#x000d;&#x000a;Faulting application start time: 0x01ced3cc4f874bd3&#x000d;&#x000a;Faulting application path: C:\Pro gram Files\Intel\WiFi\bin\ZeroConfigService.exe&#x000d;&#x000a;Faulting module p ath: C:\Program Files\Intel\WiFi\bin\MurocApi.dll&#x000d;&#x000a;Report Id: a8a2 674d-3fbf-11e3-a737-3c970e3ea92e 10/27/2013 5:17 PM Application Error Faulting application name: ZeroC onfigService.exe, version: 15.3.0.0, time stamp: 0x5036b2a4&#x000d;&#x000a;Fault ing module name: MurocApi.dll, version: 15.3.0.0, time stamp: 0x5036b1ea&#x000d; &#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0000000000020b 2b&#x000d;&#x000a;Faulting process id: 0xfb0&#x000d;&#x000a;Faulting application start time: 0x01ced33848f9b3cd&#x000d;&#x000a;Faulting application path: C:\Pro gram Files\Intel\WiFi\bin\ZeroConfigService.exe&#x000d;&#x000a;Faulting module p ath: C:\Program Files\Intel\WiFi\bin\MurocApi.dll&#x000d;&#x000a;Report Id: a118 0838-3f2b-11e3-9e9f-3c970e3ea92e 10/25/2013 2:10 AM Application Error Faulting application name: ZeroC onfigService.exe, version: 15.3.0.0, time stamp: 0x5036b2a4&#x000d;&#x000a;Fault ing module name: MurocApi.dll, version: 15.3.0.0, time stamp: 0x5036b1ea&#x000d; &#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0000000000020b 2b&#x000d;&#x000a;Faulting process id: 0xfc4&#x000d;&#x000a;Faulting application start time: 0x01ced1273a05108b&#x000d;&#x000a;Faulting application path: C:\Pro gram Files\Intel\WiFi\bin\ZeroConfigService.exe&#x000d;&#x000a;Faulting module p ath: C:\Program Files\Intel\WiFi\bin\MurocApi.dll&#x000d;&#x000a;Report Id: 9330 6076-3d1a-11e3-beae-3c970e3ea92e 10/23/2013 1:25 PM Application Error Faulting application name: c4ebr eg.exe, version: 7.45.0.4, time stamp: 0x52053043&#x000d;&#x000a;Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000a ;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00039342&#x000d;&#x00 0a;Faulting process id: 0x984&#x000d;&#x000a;Faulting application start time: 0x 01cece0a59b7a9d7&#x000d;&#x000a;Faulting application path: C:\Program Files (x86 )\C4ebreg\c4ebreg.exe&#x000d;&#x000a;Faulting module path: C:\windows\syswow64\o le32.dll&#x000d;&#x000a;Report Id: 9cc2c011-3be6-11e3-b34b-3c970e3ea92e 10/15/2013 3:20 AM Application Error Faulting application name: ZeroC onfigService.exe, version: 15.3.0.0, time stamp: 0x5036b2a4&#x000d;&#x000a;Fault ing module name: MurocApi.dll, version: 15.3.0.0, time stamp: 0x5036b1ea&#x000d; &#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0000000000020b 2b&#x000d;&#x000a;Faulting process id: 0x650&#x000d;&#x000a;Faulting application start time: 0x01cec9555fa73a53&#x000d;&#x000a;Faulting application path: C:\Pro gram Files\Intel\WiFi\bin\ZeroConfigService.exe&#x000d;&#x000a;Faulting module p ath: C:\Program Files\Intel\WiFi\bin\MurocApi.dll&#x000d;&#x000a;Report Id: b7da fb21-3548-11e3-90fa-3c970e3ea92e 10/14/2013 4:53 PM Application Error Faulting application name: Snagi t32.exe, version: 11.2.1.72, time stamp: 0x51a6625e&#x000d;&#x000a;Faulting modu le name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea8e7&#x000d;&#x00 0a;Exception code: 0xc0000374&#x000d;&#x000a;Fault offset: 0x000ce753&#x000d;&#x 000a;Faulting process id: 0x4d0&#x000d;&#x000a;Faulting application start time: 0x01cec7ccf7a0a32f&#x000d;&#x000a;Faulting application path: C:\Program Files (x 86)\TechSmith\Snagit 11\Snagit32.exe&#x000d;&#x000a;Faulting module path: C:\win dows\SysWOW64\ntdll.dll&#x000d;&#x000a;Report Id: 30c0b92f-34f1-11e3-b1a8-3c970e 3ea92e 10/3/2013 7:35 AM Application Error Faulting application name: c4ebr eg.exe, version: 7.45.0.4, time stamp: 0x52053043&#x000d;&#x000a;Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000a ;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00039342&#x000d;&#x00 0a;Faulting process id: 0x3204&#x000d;&#x000a;Faulting application start time: 0 x01cebf1632786704&#x000d;&#x000a;Faulting application path: C:\Program Files (x8 6)\C4ebreg\c4ebreg.exe&#x000d;&#x000a;Faulting module path: C:\windows\syswow64\ ole32.dll&#x000d;&#x000a;Report Id: 6db07085-2bfe-11e3-b276-3c970e3ea92e 10/3/2013 7:35 AM Application Error Faulting application name: issim

svc.exe, version: 4.15.0.0, time stamp: 0x504a3845&#x000d;&#x000a;Faulting modul e name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000 a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00039342&#x000d;&#x0 00a;Faulting process id: 0xbcc&#x000d;&#x000a;Faulting application start time: 0 x01cebe9edfdb79c0&#x000d;&#x000a;Faulting application path: c:\sdwork\issimsvc.e xe&#x000d;&#x000a;Faulting module path: C:\windows\syswow64\ole32.dll&#x000d;&#x 000a;Report Id: 6db09795-2bfe-11e3-b276-3c970e3ea92e 10/1/2013 11:32 AM Application Error Faulting application name: c4ebr eg.exe, version: 7.45.0.4, time stamp: 0x52053043&#x000d;&#x000a;Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000&#x000d;&#x000a;Exceptio n code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00081001&#x000d;&#x000a;Faulti ng process id: 0xb3c&#x000d;&#x000a;Faulting application start time: 0x01cebcd46 5e1b59f&#x000d;&#x000a;Faulting application path: C:\Program Files (x86)\C4ebreg \c4ebreg.exe&#x000d;&#x000a;Faulting module path: unknown&#x000d;&#x000a;Report Id: 3738d034-2a8d-11e3-b276-3c970e3ea92e 10/1/2013 11:32 AM Application Error Faulting application name: issim svc.exe, version: 4.15.0.0, time stamp: 0x50f595d5&#x000d;&#x000a;Faulting modul e name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000 a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00042a29&#x000d;&#x0 00a;Faulting process id: 0xb70&#x000d;&#x000a;Faulting application start time: 0 x01cebcd466de077c&#x000d;&#x000a;Faulting application path: c:\sdwork\issimsvc.e xe&#x000d;&#x000a;Faulting module path: C:\windows\syswow64\ole32.dll&#x000d;&#x 000a;Report Id: 3738f744-2a8d-11e3-b276-3c970e3ea92e 9/27/2013 7:31 AM Application Error Faulting application name: c4ebr eg.exe, version: 7.45.0.4, time stamp: 0x52053043&#x000d;&#x000a;Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000a ;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00039342&#x000d;&#x00 0a;Faulting process id: 0xbd8&#x000d;&#x000a;Faulting application start time: 0x 01ceba829ab24d85&#x000d;&#x000a;Faulting application path: C:\Program Files (x86 )\C4ebreg\c4ebreg.exe&#x000d;&#x000a;Faulting module path: C:\windows\syswow64\o le32.dll&#x000d;&#x000a;Report Id: cb6434ff-2746-11e3-a11b-3c970e3ea92e 9/26/2013 8:58 AM Application Error Faulting application name: EXCEL .EXE, version: 14.0.4756.1000, time stamp: 0x4b9c08e8&#x000d;&#x000a;Faulting mo dule name: EXCEL.EXE, version: 14.0.4756.1000, time stamp: 0x4b9c08e8&#x000d;&#x 000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x005194b7&#x000d;& #x000a;Faulting process id: 0x1350&#x000d;&#x000a;Faulting application start tim e: 0x01ceba884411859a&#x000d;&#x000a;Faulting application path: C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE&#x000d;&#x000a;Faulting module path: C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE&#x000d;&#x000a;Report Id: d68faa00-2689-11e3-a11b-3c970e3ea92e 9/23/2013 5:55 PM Application Error Faulting application name: Snagi t32.exe, version: 11.2.1.72, time stamp: 0x51a6625e&#x000d;&#x000a;Faulting modu le name: ntdll.dll, version: 6.1.7601.18229, time stamp: 0x51fb1072&#x000d;&#x00 0a;Exception code: 0xc0000374&#x000d;&#x000a;Fault offset: 0x000ce753&#x000d;&#x 000a;Faulting process id: 0x17a0&#x000d;&#x000a;Faulting application start time: 0x01ceb79ec4012ede&#x000d;&#x000a;Faulting application path: C:\Program Files ( x86)\TechSmith\Snagit 11\Snagit32.exe&#x000d;&#x000a;Faulting module path: C:\wi ndows\SysWOW64\ntdll.dll&#x000d;&#x000a;Report Id: 45e91d63-2479-11e3-a1a8-3c970 e3ea92e 9/18/2013 5:19 AM Application Error Faulting application name: Setup .exe_Microsoft Setup Bootstrapper, version: 14.0.4755.1000, time stamp: 0x4b989d f1&#x000d;&#x000a;Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Faul t offset: 0x0003bc21&#x000d;&#x000a;Faulting process id: 0x1d44&#x000d;&#x000a;F aulting application start time: 0x01ceb42e8bf7c28b&#x000d;&#x000a;Faulting appli cation path: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Offic e Setup Controller\Setup.exe&#x000d;&#x000a;Faulting module path: C:\windows\sys wow64\ole32.dll&#x000d;&#x000a;Report Id: f5af451c-2021-11e3-83ef-3c970e3ea92e 9/18/2013 5:03 AM Application Error Faulting application name: Setup .exe_Microsoft Setup Bootstrapper, version: 14.0.4755.1000, time stamp: 0x4b989d

f1&#x000d;&#x000a;Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7b96f&#x000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Faul t offset: 0x0003bc21&#x000d;&#x000a;Faulting process id: 0x8bc&#x000d;&#x000a;Fa ulting application start time: 0x01ceb42c13253d02&#x000d;&#x000a;Faulting applic ation path: C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe&#x000d;&#x000a;Faulting module path: C:\windows\sysw ow64\ole32.dll&#x000d;&#x000a;Report Id: a9c38be2-201f-11e3-83ef-3c970e3ea92e 9/15/2013 1:57 PM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: MSVCR80.dll, version: 8.0.50727.6195, time stamp: 0x4dcddbf3&#x 000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0001500a& #x000d;&#x000a;Faulting process id: 0xa4c&#x000d;&#x000a;Faulting application st art time: 0x01ceb21b797db8ec&#x000d;&#x000a;Faulting application path: C:\Progra m Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faulting module path: C:\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.5072 7.6195_none_d09154e044272b9a\MSVCR80.dll&#x000d;&#x000a;Report Id: bd963fd8-1e0e -11e3-b734-3c970e3ea92e 9/15/2013 6:54 AM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: unknown, version: 0.0.0.0, time stamp: 0x00000000&#x000d;&#x000 a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0366fef0&#x000d;&#x0 00a;Faulting process id: 0x1ae0&#x000d;&#x000a;Faulting application start time: 0x01ceb1e069bc737f&#x000d;&#x000a;Faulting application path: C:\Program Files (x 86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faulting module pa th: unknown&#x000d;&#x000a;Report Id: bc380cd8-1dd3-11e3-809f-3c970e3ea92e 9/15/2013 6:41 AM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: MSVCR80.dll, version: 8.0.50727.6195, time stamp: 0x4dcddbf3&#x 000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378& #x000d;&#x000a;Faulting process id: 0x198c&#x000d;&#x000a;Faulting application s tart time: 0x01ceb1de85bf756b&#x000d;&#x000a;Faulting application path: C:\Progr am Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faultin g module path: C:\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.507 27.6195_none_d09154e044272b9a\MSVCR80.dll&#x000d;&#x000a;Report Id: ca872aa7-1dd 1-11e3-8f18-3c970e3ea92e 9/15/2013 2:12 AM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: MSVCR80.dll, version: 8.0.50727.6195, time stamp: 0x4dcddbf3&#x 000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0001500a& #x000d;&#x000a;Faulting process id: 0x1510&#x000d;&#x000a;Faulting application s tart time: 0x01ceb1b90ea694de&#x000d;&#x000a;Faulting application path: C:\Progr am Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faultin g module path: C:\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.507 27.6195_none_d09154e044272b9a\MSVCR80.dll&#x000d;&#x000a;Report Id: 533f984b-1da c-11e3-bd84-3c970e3ea92e 9/14/2013 5:56 PM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: MSVCR80.dll, version: 8.0.50727.6195, time stamp: 0x4dcddbf3&#x 000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x000173c1& #x000d;&#x000a;Faulting process id: 0x1c14&#x000d;&#x000a;Faulting application s tart time: 0x01ceb173bfa12d24&#x000d;&#x000a;Faulting application path: C:\Progr am Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faultin g module path: C:\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.507 27.6195_none_d09154e044272b9a\MSVCR80.dll&#x000d;&#x000a;Report Id: 02c8fbe9-1d6 7-11e3-b651-3c970e3ea92e 9/12/2013 1:05 AM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: ntdll.dll, version: 6.1.7601.18229, time stamp: 0x51fb1072&#x00 0d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0002e41b&#x 000d;&#x000a;Faulting process id: 0xd5c&#x000d;&#x000a;Faulting application star

t time: 0x01ceaf541eba0755&#x000d;&#x000a;Faulting application path: C:\Program Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faulting m odule path: C:\windows\SysWOW64\ntdll.dll&#x000d;&#x000a;Report Id: 5df3140c-1b4 7-11e3-83cf-3c970e3ea92e 9/11/2013 4:40 PM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: MSVCR80.dll, version: 8.0.50727.6195, time stamp: 0x4dcddbf3&#x 000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x000173f2& #x000d;&#x000a;Faulting process id: 0xfa8&#x000d;&#x000a;Faulting application st art time: 0x01ceaf0d94bceaa0&#x000d;&#x000a;Faulting application path: C:\Progra m Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faulting module path: C:\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.5072 7.6195_none_d09154e044272b9a\MSVCR80.dll&#x000d;&#x000a;Report Id: d8325158-1b00 -11e3-83cf-3c970e3ea92e 9/11/2013 3:48 PM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: MSVCR80.dll, version: 8.0.50727.6195, time stamp: 0x4dcddbf3&#x 000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378& #x000d;&#x000a;Faulting process id: 0x1c64&#x000d;&#x000a;Faulting application s tart time: 0x01ceaf064b72f4f1&#x000d;&#x000a;Faulting application path: C:\Progr am Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faultin g module path: C:\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.507 27.6195_none_d09154e044272b9a\MSVCR80.dll&#x000d;&#x000a;Report Id: 8c4ea96f-1af 9-11e3-b360-3c970e3ea92e 9/11/2013 3:47 PM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: MSVCR80.dll, version: 8.0.50727.6195, time stamp: 0x4dcddbf3&#x 000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378& #x000d;&#x000a;Faulting process id: 0x748&#x000d;&#x000a;Faulting application st art time: 0x01ceaf063e5f889d&#x000d;&#x000a;Faulting application path: C:\Progra m Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faulting module path: C:\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.5072 7.6195_none_d09154e044272b9a\MSVCR80.dll&#x000d;&#x000a;Report Id: 7e0291cd-1af9 -11e3-b360-3c970e3ea92e 9/11/2013 3:47 PM Application Error Faulting application name: DivX Plus Player.exe, version: 11.2.0.81, time stamp: 0x521fe6a1&#x000d;&#x000a;Fault ing module name: MSVCR80.dll, version: 8.0.50727.6195, time stamp: 0x4dcddbf3&#x 000d;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00017378& #x000d;&#x000a;Faulting process id: 0x1fc0&#x000d;&#x000a;Faulting application s tart time: 0x01ceaf062ed5681a&#x000d;&#x000a;Faulting application path: C:\Progr am Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe&#x000d;&#x000a;Faultin g module path: C:\windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.507 27.6195_none_d09154e044272b9a\MSVCR80.dll&#x000d;&#x000a;Report Id: 70ffe719-1af 9-11e3-b360-3c970e3ea92e 9/11/2013 4:12 AM Application Error Faulting application name: nsd.e xe, version: 9.0.0.3056, time stamp: 0x51af982d&#x000d;&#x000a;Faulting module n ame: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e&#x000d;&#x000 a;Exception code: 0x40000015&#x000d;&#x000a;Fault offset: 0x0008d6fd&#x000d;&#x0 00a;Faulting process id: 0x4a8&#x000d;&#x000a;Faulting application start time: 0 x01ceaea51612dc33&#x000d;&#x000a;Faulting application path: C:\notes\nsd.exe&#x0 00d;&#x000a;Faulting module path: C:\windows\system32\MSVCR100.dll&#x000d;&#x000 a;Report Id: 6764490e-1a98-11e3-9054-3c970e3ea92e 9/10/2013 3:25 AM Application Error Faulting application name: ZeroC onfigService.exe, version: 15.3.0.0, time stamp: 0x5036b2a4&#x000d;&#x000a;Fault ing module name: MurocApi.dll, version: 15.3.0.0, time stamp: 0x5036b1ea&#x000d; &#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0000000000020b 2b&#x000d;&#x000a;Faulting process id: 0xefc&#x000d;&#x000a;Faulting application start time: 0x01ceadd5466202cc&#x000d;&#x000a;Faulting application path: C:\Pro gram Files\Intel\WiFi\bin\ZeroConfigService.exe&#x000d;&#x000a;Faulting module p ath: C:\Program Files\Intel\WiFi\bin\MurocApi.dll&#x000d;&#x000a;Report Id: 9ece

e4a1-19c8-11e3-917c-3c970e3ea92e 9/4/2013 5:11 PM Application Error Faulting application name: ZeroC onfigService.exe, version: 15.3.0.0, time stamp: 0x5036b2a4&#x000d;&#x000a;Fault ing module name: MurocApi.dll, version: 15.3.0.0, time stamp: 0x5036b1ea&#x000d; &#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x0000000000020b 2b&#x000d;&#x000a;Faulting process id: 0xde4&#x000d;&#x000a;Faulting application start time: 0x01cea991a17b2a70&#x000d;&#x000a;Faulting application path: C:\Pro gram Files\Intel\WiFi\bin\ZeroConfigService.exe&#x000d;&#x000a;Faulting module p ath: C:\Program Files\Intel\WiFi\bin\MurocApi.dll&#x000d;&#x000a;Report Id: 0374 b17e-1585-11e3-94b4-3c970e3ea92e 9/2/2013 6:29 PM Application Error Faulting application name: Snagi t32.exe, version: 11.2.1.72, time stamp: 0x51a6625e&#x000d;&#x000a;Faulting modu le name: ntdll.dll, version: 6.1.7601.18205, time stamp: 0x51db9710&#x000d;&#x00 0a;Exception code: 0xc0000374&#x000d;&#x000a;Fault offset: 0x000ce753&#x000d;&#x 000a;Faulting process id: 0x1028&#x000d;&#x000a;Faulting application start time: 0x01cea80a66b7a478&#x000d;&#x000a;Faulting application path: C:\Program Files ( x86)\TechSmith\Snagit 11\Snagit32.exe&#x000d;&#x000a;Faulting module path: C:\wi ndows\SysWOW64\ntdll.dll&#x000d;&#x000a;Report Id: aba70688-13fd-11e3-98a4-3c970 e3ea92e 9/2/2013 6:29 PM Application Error Faulting application name: Snagi t32.exe, version: 11.2.1.72, time stamp: 0x51a6625e&#x000d;&#x000a;Faulting modu le name: ntdll.dll, version: 6.1.7601.18205, time stamp: 0x51db9710&#x000d;&#x00 0a;Exception code: 0xc0000374&#x000d;&#x000a;Fault offset: 0x000ce753&#x000d;&#x 000a;Faulting process id: 0xcf8&#x000d;&#x000a;Faulting application start time: 0x01cea80a37af019a&#x000d;&#x000a;Faulting application path: C:\Program Files (x 86)\TechSmith\Snagit 11\Snagit32.exe&#x000d;&#x000a;Faulting module path: C:\win dows\SysWOW64\ntdll.dll&#x000d;&#x000a;Report Id: 8b0d5d25-13fd-11e3-98a4-3c970e 3ea92e 9/2/2013 6:27 PM Application Error Faulting application name: Snagi t32.exe, version: 11.2.1.72, time stamp: 0x51a6625e&#x000d;&#x000a;Faulting modu le name: ntdll.dll, version: 6.1.7601.18205, time stamp: 0x51db9710&#x000d;&#x00 0a;Exception code: 0xc0000374&#x000d;&#x000a;Fault offset: 0x000ce753&#x000d;&#x 000a;Faulting process id: 0x17f4&#x000d;&#x000a;Faulting application start time: 0x01cea5bcaed2e6e8&#x000d;&#x000a;Faulting application path: C:\Program Files ( x86)\TechSmith\Snagit 11\Snagit32.exe&#x000d;&#x000a;Faulting module path: C:\wi ndows\SysWOW64\ntdll.dll&#x000d;&#x000a;Report Id: 5fc9e6b9-13fd-11e3-98a4-3c970 e3ea92e 9/1/2013 3:37 PM Application Error Faulting application name: POWER PNT.EXE, version: 14.0.6009.1000, time stamp: 0x4cc1a4ed&#x000d;&#x000a;Faulting module name: ppcore.dll, version: 14.0.6111.5000, time stamp: 0x4e713cca&#x000d ;&#x000a;Exception code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x000d3d61&#x00 0d;&#x000a;Faulting process id: 0x1b48&#x000d;&#x000a;Faulting application start time: 0x01cea71fdf988899&#x000d;&#x000a;Faulting application path: C:\Program F iles (x86)\Microsoft Office\Office14\POWERPNT.EXE&#x000d;&#x000a;Faulting module path: C:\Program Files (x86)\Microsoft Office\Office14\ppcore.dll&#x000d;&#x000 a;Report Id: 5c3066a6-131c-11e3-98a4-3c970e3ea92e 8/30/2013 9:02 AM Application Error Faulting application name: NetUp dates.exe, version: 9.2.1.3002, time stamp: 0x51714cf7&#x000d;&#x000a;Faulting m odule name: unknown, version: 0.0.0.0, time stamp: 0x00000000&#x000d;&#x000a;Exc eption code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x036b6a08&#x000d;&#x000a;F aulting process id: 0x16d0&#x000d;&#x000a;Faulting application start time: 0x01c ea55c584a05ab&#x000d;&#x000a;Faulting application path: C:\Program Files (x86)\A T&T Network Client\NetUpdates.exe&#x000d;&#x000a;Faulting module path: unknown&# x000d;&#x000a;Report Id: e270644c-1152-11e3-b708-3c970e3ea92e 8/29/2013 1:05 AM Application Error Faulting application name: Acces s Connections.exe, version: 5.3.0.0, time stamp: 0x4da66b5b&#x000d;&#x000a;Fault ing module name: ntdll.dll, version: 6.1.7601.18205, time stamp: 0x51db9710&#x00 0d;&#x000a;Exception code: 0xc0000374&#x000d;&#x000a;Fault offset: 0x000ce753&#x 000d;&#x000a;Faulting process id: 0xec&#x000d;&#x000a;Faulting application start time: 0x01cea4539368a9d6&#x000d;&#x000a;Faulting application path: C:\Program F

iles (x86)\Lenovo\Access Connections\Access Connections.exe&#x000d;&#x000a;Fault ing module path: C:\windows\SysWOW64\ntdll.dll&#x000d;&#x000a;Report Id: 0e5925c 5-1047-11e3-bf9d-3c970e3ea92e 8/23/2013 8:36 AM Application Error Faulting application name: coh64 .exe, version: 6.1.14.2, time stamp: 0x4de6cdd3&#x000d;&#x000a;Faulting module n ame: coh64.exe, version: 6.1.14.2, time stamp: 0x4de6cdd3&#x000d;&#x000a;Excepti on code: 0xc0000005&#x000d;&#x000a;Fault offset: 0x00000000000b3add&#x000d;&#x00 0a;Faulting process id: 0xc70&#x000d;&#x000a;Faulting application start time: 0x 01ce9fdbe61418ac&#x000d;&#x000a;Faulting application path: C:\Program Files (x86 )\Common Files\Symantec Shared\COH\coh64.exe&#x000d;&#x000a;Faulting module path : C:\Program Files (x86)\Common Files\Symantec Shared\COH\coh64.exe&#x000d;&#x00 0a;Report Id: 27151ad0-0bcf-11e3-b7ac-3c970e3ea92e 11/18/2013 8:05 AM Windows Error Reporting Fault bucket , type 0&#x000d;&#x 000a;Event Name: WindowsUpdateFailure&#x000d;&#x000a;Response: Not available&#x0 00d;&#x000a;Cab Id: 0&#x000d;&#x000a;&#x000d;&#x000a;Problem signature:&#x000d;& #x000a;P1: 7.6.7600.256&#x000d;&#x000a;P2: 80072ee2&#x000d;&#x000a;P3: 7B3369E25608-495B-AF58-A9F66C0676D2&#x000d;&#x000a;P4: Download&#x000d;&#x000a;P5: 101&# x000d;&#x000a;P6: Unmanaged&#x000d;&#x000a;P7: &#x000d;&#x000a;P8: &#x000d;&#x00 0a;P9: &#x000d;&#x000a;P10: &#x000d;&#x000a;&#x000d;&#x000a;Attached files:&#x00 0d;&#x000a;&#x000d;&#x000a;These files may be available here:&#x000d;&#x000a;&#x 000d;&#x000a;&#x000d;&#x000a;Analysis symbol: &#x000d;&#x000a;Rechecking for sol ution: 0&#x000d;&#x000a;Report Id: 26eecf78-5028-11e3-9aa8-3c970e3ea92e&#x000d;& #x000a;Report Status: 0 10/21/2013 11:44 AM Application Hang The program java.exe version 6.0 .0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.&#x000d;&#x000a; Process ID: 2368&#x000d;&#x000a; Start Time: 01ce ce4848d0becf&#x000d;&#x000a; Termination Time: 21&#x000d;&#x000a; Application Pa th: C:\Program Files (x86)\IBM\Java60\jre\bin\java.exe&#x000d;&#x000a; Report Id : 1a99d95d-3a46-11e3-b34b-3c970e3ea92e&#x000d;&#x000a; 9/13/2013 8:10 AM Application Hang The program notes2.exe version 3 .4.0.0 stopped interacting with Windows and was closed. To see if more informati on about the problem is available, check the problem history in the Action Cente r control panel.&#x000d;&#x000a; Process ID: 888&#x000d;&#x000a; Start Time: 01c eb057a9fd5755&#x000d;&#x000a; Termination Time: 12&#x000d;&#x000a; Application P ath: C:\notes\framework\rcp\eclipse\plugins\com.ibm.rcp.base_6.2.3.20110915-1350 \win32\x86\notes2.exe&#x000d;&#x000a; Report Id: e634f1de-1c4b-11e3-9762-3c970e3 ea92e&#x000d;&#x000a; 9/8/2013 7:52 AM Application Hang The program Access Connections.e xe version 6.0.0.0 stopped interacting with Windows and was closed. To see if mo re information about the problem is available, check the problem history in the Action Center control panel.&#x000d;&#x000a; Process ID: d34&#x000d;&#x000a; Sta rt Time: 01ceac669fe6c188&#x000d;&#x000a; Termination Time: 18&#x000d;&#x000a; A pplication Path: C:\Program Files (x86)\Lenovo\Access Connections\Access Connect ions.exe&#x000d;&#x000a; Report Id: 1b8a6377-185a-11e3-b6ac-3c970e3ea92e&#x000d; &#x000a; 8/29/2013 12:04 PM Application Hang The program NetClient.exe versio n 8.2.0.3003 stopped interacting with Windows and was closed. To see if more inf ormation about the problem is available, check the problem history in the Action Center control panel.&#x000d;&#x000a; Process ID: f38&#x000d;&#x000a; Start Tim e: 01cea4af83992640&#x000d;&#x000a; Termination Time: 8456&#x000d;&#x000a; Appli cation Path: C:\Program Files (x86)\AT&T Network Client\NetClient.exe&#x000d;&#x 000a; Report Id: 28960aa7-10a3-11e3-9a61-3c970e3ea92e&#x000d;&#x000a; 8/23/2013 11:25 AM Application Hang The program notes2.exe version 3 .4.0.0 stopped interacting with Windows and was closed. To see if more informati on about the problem is available, check the problem history in the Action Cente r control panel.&#x000d;&#x000a; Process ID: fbc&#x000d;&#x000a; Start Time: 01c e9ff008b2d42a&#x000d;&#x000a; Termination Time: 26&#x000d;&#x000a; Application P ath: C:\notes\framework\rcp\eclipse\plugins\com.ibm.rcp.base_9.0.0.20130228-1411 \win32\x86\notes2.exe&#x000d;&#x000a; Report Id: a0df8653-0be6-11e3-9c17-3c970e3

ea92e&#x000d;&#x000a;