C:\WINDOWS\System32\alg.exe


Search on Google


Search for MD5 [1caf531836820ecb81974a1f418e679f]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs


Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs


Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k bthsvcs


Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\Program Files\Billionton\Bluetooth Software\bin\btwdins.exe

*** Unknown ***
Search on Google


Search for MD5 [9db4fcb7bc45e6b08a865e48bcf82c7a]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost -k DcomLaunch

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k NetworkService

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\services.exe

*** Unknown ***
Search on Google


Search for MD5 [c71da9498b37280c61c75983789be279]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
"C:\Program Files\firebird\firebird_1_5\bin\fbguard.exe"

*** Unknown ***
Search on Google


Search for MD5 [32a43f342d4eea700cbefbf0c1998c0f]


Close
"C:\Program Files\firebird\firebird_1_5\bin\fbserver.exe"

*** Unknown ***
Search on Google


Search for MD5 [6087037d00c24f972bb6888ac908cc2c]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\Program Files\Interactive Intelligence\I3UpdateSvcU.exe

*** Unknown ***
Search on Google


Search for MD5 [df34e84ba1d273162580a5f048dd2c14]


Close
C:\WINDOWS\system32\inetsrv\inetinfo.exe

*** Unknown ***
Search on Google


Search for MD5 [75e8113a1498fa02f6e93ae3b7c77c73]


Close
C:\Program Files\Ahead\InCD\InCDsrv.exe

*** Unknown ***
Search on Google


Search for MD5 [1c5622809694604167ef6ee991f4965e]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k LocalService

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
"C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"

*** Unknown ***
Search on Google


Search for MD5 [11f714f85530a2bd134074dc30e99fca]


Close
C:\WINDOWS\system32\msiexec.exe /V

*** Unknown ***
Search on Google


Search for MD5 [f5f0146580e7023adb963879840777f8]


Close
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe -sMSSQLSERVER

*** Unknown ***
Search on Google


Search for MD5 [f80eec5e1d6cdf82cb974daada0c57dd]


Close
C:\WINDOWS\system32\lsass.exe

*** Unknown ***
Search on Google


Search for MD5 [2380b134a9fea8b7683be78a4c8d92b8]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\Program Files\Eset\nod32krn.exe

*** Unknown ***
Search on Google


Search for MD5 [bd71e8bae0017c79f77fae9e8ac2eafa]


Close
C:\WINDOWS\system32\services.exe

*** Unknown ***
Search on Google


Search for MD5 [c71da9498b37280c61c75983789be279]


Close
C:\WINDOWS\system32\HPZipm12.exe

*** Unknown ***
Search on Google


Search for MD5 [9d84376931440f3679beef2a414fa493]


Close
C:\WINDOWS\system32\lsass.exe

*** Unknown ***
Search on Google


Search for MD5 [2380b134a9fea8b7683be78a4c8d92b8]


Close
C:\WINDOWS\system32\lsass.exe

*** Unknown ***
Search on Google


Search for MD5 [2380b134a9fea8b7683be78a4c8d92b8]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\RegSrvc.exe

*** Unknown ***
Search on Google


Search for MD5 [3043ee469f1cdac7a6746cb0d126eca7]


Close
C:\WINDOWS\system32\svchost.exe -k LocalService

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost -k rpcss

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\S24EvMon.exe

*** Unknown ***
Search on Google


Search for MD5 [1e63fae51e6baf51bdbdedab12d9553c]


Close
C:\WINDOWS\system32\lsass.exe

*** Unknown ***
Search on Google


Search for MD5 [2380b134a9fea8b7683be78a4c8d92b8]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\inetsrv\inetinfo.exe

*** Unknown ***
Search on Google


Search for MD5 [75e8113a1498fa02f6e93ae3b7c77c73]


Close
C:\WINDOWS\System32\snmp.exe

*** Unknown ***
Search on Google


Search for MD5 [6596d11f6ac7789be89239eab2728493]


Close
C:\WINDOWS\system32\spoolsv.exe

*** Unknown ***
Search on Google


Search for MD5 [da81ec57acd4cdc3d4c51cf3d409af9f]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k LocalService

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k imgsvc

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\System32\svchost -k DComLaunch

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\trlrm\RMHSvc.exe

*** Unknown ***
Search on Google


Search for MD5 [43d82f21e27776e7c323a50e5106391a]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\inetsrv\inetinfo.exe

*** Unknown ***
Search on Google


Search for MD5 [75e8113a1498fa02f6e93ae3b7c77c73]


Close
C:\WINDOWS\system32\svchost.exe -k LocalService

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\system32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
C:\WINDOWS\System32\svchost.exe -k netsvcs

*** Unknown ***
Search on Google


Search for MD5 [1d651165a36d10f6b0fc69a914e52947]


Close
Running Services
Name PathName ProcessId Started StartMode StartName
Company : Microsoft Corporation File Description : Application Layer Gateway Service Original File Name : ALG.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  ALG alg.exe 2060 True Manual NT AUTHORITY\LocalService
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  AudioSrv svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  Browser svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  BthServ svchost.exe 1848 True Auto NT AUTHORITY\LocalService
 btwdins btwdins.exe 1868 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  CryptSvc svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  DcomLaunch svchost 1044 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  Dhcp svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  dmserver svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  Dnscache svchost.exe 1376 True Auto NT AUTHORITY\NetworkService
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  ERSvc svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Hizmetler ve Denetleyici uygulaması Original File Name : services.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  Eventlog services.exe 880 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  EventSystem svchost.exe 1176 True Manual LocalSystem
 FirebirdGuardianDefaultInstance fbguard.exe 1904 True Auto LocalSystem
 FirebirdServerDefaultInstance fbserver.exe 1616 True Manual LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  helpsvc svchost.exe 1176 True Auto LocalSystem
 I3UpdateSvc I3UpdateSvcU.exe 1940 True Auto LocalSystem
Company : Microsoft Corporation File Description : Internet Information Services (IIS) Original File Name : INETINFO.EXE Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  IISADMIN inetinfo.exe 1968 True Auto LocalSystem
 InCDsrv InCDsrv.exe 1204 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  lanmanserver svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  lanmanworkstation svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  LmHosts svchost.exe 1496 True Auto NT AUTHORITY\LocalService
Certificated Company : Microsoft Corporation Description : Machine Debug Manager URL : http://www.microsoft.com MDM MDM.EXE 1988 True Auto LocalSystem
Company : Microsoft Corporation File Description : Windows® installer Original File Name : msiexec.exe Version : 3.1.4000.1823  MSIServer msiexec.exe 2364 True Manual LocalSystem
 MSSQLSERVER sqlservr.exe 2024 True Auto LocalSystem
Company : Microsoft Corporation File Description : LSA Shell (Export Version) Original File Name : lsass.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  Netlogon lsass.exe 892 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  Netman svchost.exe 1176 True Manual LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  Nla svchost.exe 1176 True Manual LocalSystem
 NOD32krn nod32krn.exe 288 True Auto LocalSystem
Company : Microsoft Corporation File Description : Hizmetler ve Denetleyici uygulaması Original File Name : services.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  PlugPlay services.exe 880 True Auto LocalSystem
 Pml Driver HPZ12 HPZipm12.exe 300 True Auto LocalSystem
Company : Microsoft Corporation File Description : LSA Shell (Export Version) Original File Name : lsass.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  PolicyAgent lsass.exe 892 True Auto LocalSystem
Company : Microsoft Corporation File Description : LSA Shell (Export Version) Original File Name : lsass.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  ProtectedStorage lsass.exe 892 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  RasMan svchost.exe 1176 True Manual LocalSystem
 RegSrvc RegSrvc.exe 324 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  RemoteRegistry svchost.exe 1496 True Auto NT AUTHORITY\LocalService
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  RpcSs svchost 1092 True Auto NT AUTHORITY\NetworkService
 S24EventMonitor S24EvMon.exe 1336 True Auto LocalSystem
Company : Microsoft Corporation File Description : LSA Shell (Export Version) Original File Name : lsass.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  SamSs lsass.exe 892 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  Schedule svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  seclogon svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  SENS svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  SharedAccess svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  ShellHWDetection svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Internet Information Services (IIS) Original File Name : INETINFO.EXE Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  SMTPSVC inetinfo.exe 1968 True Auto LocalSystem
Company : Microsoft Corporation File Description : SNMP Hizmeti Original File Name : snmp.exe Version : 5.1.2600.3038 (xpsp_sp2_gdr.061119-2303)  SNMP snmp.exe 380 True Auto LocalSystem
Company : Microsoft Corporation File Description : Spooler SubSystem App Original File Name : spoolsv.exe Version : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)  Spooler spoolsv.exe 1680 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  srservice svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  SSDPSRV svchost.exe 1496 True Manual NT AUTHORITY\LocalService
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  stisvc svchost.exe 440 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  TapiSrv svchost.exe 1176 True Manual LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  TermService svchost 1044 True Manual LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  Themes svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  TrkWks svchost.exe 1176 True Auto LocalSystem
 trlokom_rmhsvc RMHSvc.exe 516 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  W32Time svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Internet Information Services (IIS) Original File Name : INETINFO.EXE Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  W3SVC inetinfo.exe 1968 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  WebClient svchost.exe 1496 True Auto NT AUTHORITY\LocalService
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  winmgmt svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  wuauserv svchost.exe 1176 True Auto LocalSystem
Company : Microsoft Corporation File Description : Generic Host Process for Win32 Services Original File Name : svchost.exe Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  WZCSVC svchost.exe 1176 True Auto LocalSystem

Back

Generated by JaguarForensic 1.0.0.1 (c) JaguarSoft