Here's my issue:
After what I believe was a virus, I did a simple system restore from backup. Now the OS is sluggish, shutdown takes five minutes or more and I occasionally get the "Something went wrong..." screen. (running Windows 10) Seems ever since installing Win 10 each boot, or reboot offers up a new surprise, but that's another story. My question is should I try Windows Repair first (I have the pro version), or do a reset of Win 10 with keep files, or try to restore from backup again? With each method, it seems I have do a bit of fixing afterward, sometimes it's easy and sometimes it's a real pain. I'm wondering if something in the policy manager got hammered. (I have policy manager installed into Win 10 Home.) The OS was zipping right along before the virus, or whatever it was. Which method should I try first?
My Speccy log is below:
Summary
Operating System
Windows 10 Home 64-bit
CPU
AMD Phenom II X4 955 44 °C
Deneb 45nm Technology
RAM
8.00GB Dual-Channel DDR2 @ 399MHz (6-6-6-18)
Motherboard
MICRO-STAR INTERNATIONAL CO.LTD 785GT-E63(MS-7551) (CPU 1) 47 °C
Graphics
2752 (1920x1080@60Hz)
Acer G245HQ (1920x1080@60Hz)
4095MB NVIDIA GeForce GT 740 (EVGA) 40 °C
Storage
465GB Western Digital WDC WD5001AALS-00LWTA0 ATA Device (SATA) 44 °C
1397GB Western Digital WD Elements 10B8 USB Device (USB (SATA)) 37 °C
3726GB Seagate Backup+ Desk USB Device (USB (SATA)) 38 °C
3726GB Western Digital WDC WD40 04FZWX-00GBGB0 USB Device (USB (SATA)) 37 °C
465GB asmedia ASM1053E USB Device (USB (SATA)) 40 °C
1862GB Western Digital WD My Book 1140 USB Device (USB (SATA)) 38 °C
Optical Drives
PIONEER DVD-RW DVR-118L ATA Device
ASUS DRW-24B1ST i ATA Device
Audio
Realtek High Definition Audio
Operating System
Windows 10 Home 64-bit
Computer type: Tablet
Installation Date: 7/11/2017 7:28:46 PM
Windows Security Center
User Account Control (UAC) Enabled
Notify level 0 - Never Notify
Firewall Enabled
Windows Update
AutoUpdate Not configured
Windows Defender
Windows Defender Disabled
Antivirus
Avast Antivirus
Antivirus Enabled
Virus Signature Database Up to date
Windows Defender
Antivirus Disabled
Virus Signature Database Up to date
.NET Frameworks installed
v4.7 Full
v4.7 Client
v3.5 SP1
v3.0 SP2
v2.0 SP2
Internet Explorer
Version 11.540.15063.0
PowerShell
Version 5.1.15063.0
Java
Java Runtime Environment
Path C:\Program Files (x86)\Java\jre1.8.0_121\bin\java.exe
Version 8.0
Update 121
Build 13
Environment Variables
USERPROFILE C:\Users\Dave
SystemRoot C:\WINDOWS
User Variables
OneDrive C:\Users\Dave\OneDrive
Path C:\Users\Dave\AppData\Local\Microsoft\WindowsApps
C:\Program Files (x86)\GmoteServer\bin\vlc
TEMP C:\Users\Dave\AppData\Local\Temp
TMP C:\Users\Dave\AppData\Local\Temp
Machine Variables
ADSK_CLM_WPAD_PROXY_CHECK FALSE
asl.log Destination=file
ComSpec C:\WINDOWS\system32\cmd.exe
INTEL_DEV_REDIST C:\Program Files (x86)\Common Files\Intel\Shared Libraries\
MEDIAMALL C:\Program Files (x86)\MediaMall\
MIC_LD_LIBRARY_PATH %INTEL_DEV_REDIST%compiler\lib\mic
NUMBER_OF_PROCESSORS 4
OS Windows_NT
Path %INTEL_DEV_REDIST%redist\intel64\compiler
C:\ProgramData\Oracle\Java\javapath
C:\WINDOWS\system32
C:\WINDOWS
C:\WINDOWS\System32\Wbem
C:\WINDOWS\System32\WindowsPowerShell\v1.0\
C:\Program Files (x86)\Calibre2\
C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common
C:\WINDOWS\system32\wbem
C:\Program Files (x86)\IVT Corporation\BlueSoleil\Mobile
C:\WINDOWS\system32
C:\WINDOWS
C:\WINDOWS\System32\Wbem
C:\WINDOWS\System32\WindowsPowerShell\v1.0\
PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE AMD64
PROCESSOR_IDENTIFIER AMD64 Family 16 Model 4 Stepping 3, AuthenticAMD
PROCESSOR_LEVEL 16
PROCESSOR_REVISION 0403
PSModulePath %ProgramFiles%\WindowsPowerShell\Modules
C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules
TEMP C:\WINDOWS\TEMP
TMP C:\WINDOWS\TEMP
USERNAME SYSTEM
windir C:\WINDOWS
Power Profile
Active power scheme High performance
Hibernation Enabled
Turn Off Monitor after: (On AC Power) 15 min
Turn Off Hard Disk after: (On AC Power) 20 min
Suspend after: (On AC Power) Never
Screen saver Disabled
Uptime
Current Session
Current Time 9/6/2017 1:54:26 PM
Current Uptime 88,828 sec (1 d, 00 h, 40 m, 28 s)
Last Boot Time 9/5/2017 1:13:58 PM
Services
Running Adobe Acrobat Update Service
Running Adobe Genuine Software Integrity Service
Running AdobeUpdateService
Running Apple Mobile Device Service
Running Application Host Helper Service
Running Application Information
Running aswbIDSAgent
Running Autodesk Desktop App Service
Running Avast Antivirus
Running Background Tasks Infrastructure Service
Running Base Filtering Engine
Running BlueSoleilCS
Running Bonjour Service
Running BsHelpCS
Running Chrome Remote Desktop Service
Running CNG Key Isolation
Running COM+ Event System
Running Computer Browser
Running Connected Devices Platform Service
Running Connected Devices Platform User Service_4777cf0
Running Contact Data_4777cf0
Running CoreMessaging
Running Credential Manager
Running Cryptographic Services
Running Data Sharing Service
Running Data Usage
Running DbxSvc
Running DCOM Server Process Launcher
Running Delivery Optimization
Running Device Association Service
Running DHCP Client
Running Diagnostic Policy Service
Running Diagnostic Service Host
Running Diagnostic System Host
Running Distributed Link Tracking Client
Running DNS Client
Running Encrypting File System (EFS)
Running Function Discovery Provider Host
Running Function Discovery Resource Publication
Running Geolocation Service
Running GlassWire Control Service
Running HomeGroup Provider
Running Human Interface Device Service
Running IIS Admin Service
Running IKE and AuthIP IPsec Keying Modules
Running Internet Off Service
Running IP Helper
Running IPsec Policy Agent
Running Local Session Manager
Running MediaMall Server
Running Microsoft Account Sign-in Assistant
Running Microsoft FTP Service
Running Microsoft Office Click-to-Run Service
Running Microsoft Passport
Running Microsoft Passport Container
Running Network Connected Devices Auto-Setup
Running Network Connection Broker
Running Network Connections
Running Network List Service
Running Network Location Awareness
Running Network Store Interface Service
Running NVIDIA Display Container LS
Running NVIDIA LocalSystem Container
Running NVIDIA Telemetry Container
Running Peer Name Resolution Protocol
Running Peer Networking Identity Manager
Running Plex Update Service
Running Plug and Play
Running Power
Running Print Spooler
Running Program Compatibility Assistant Service
Running Quality Windows Audio Video Experience
Running Remote Procedure Call (RPC)
Running RPC Endpoint Mapper
Running Sandboxie Service
Running Secondary Logon
Running Security Accounts Manager
Running Security Center
Running Sensor Service
Running Server
Running Shell Hardware Detection
Running Splashtop Remote Service
Running SSDP Discovery
Running State Repository Service
Running Storage Service
Running Sync Host_4777cf0
Running System Event Notification Service
Running System Events Broker
Running Task Scheduler
Running TCP/IP NetBIOS Helper
Running Themes
Running Tile Data model server
Running Time Broker
Running TokenBroker
Running Touch Keyboard and Handwriting Panel Service
Running Unchecky
Running UPnP Device Host
Running User Data Access_4777cf0
Running User Data Storage_4777cf0
Running User Manager
Running User Profile Service
Running VPN Unlimited Service
Running Windows Audio
Running Windows Audio Endpoint Builder
Running Windows Backup
Running Windows Connection Manager
Running Windows Defender Security Center Service
Running Windows Driver Foundation - User-mode Driver Framework
Running Windows Event Log
Running Windows Firewall
Running Windows Font Cache Service
Running Windows Image Acquisition (WIA)
Running Windows License Manager Service
Running Windows Management Instrumentation
Running Windows Process Activation Service
Running Windows Push Notifications System Service
Running Windows Push Notifications User Service_4777cf0
Running Windows Search
Running Windows Time
Running Windows Update
Running WinHTTP Web Proxy Auto-Discovery Service
Running WLAN AutoConfig
Running WMI Performance Adapter
Running Workstation
Running World Wide Web Publishing Service
Stopped ABBYY FineReader 12 PE Licensing Service
Stopped ActiveX Installer (AxInstSV)
Stopped Adobe Flash Player Update Service
Stopped AllJoyn Router Service
Stopped AOMEI Backupper Scheduler Service
Stopped App Readiness
Stopped Application Identity
Stopped Application Layer Gateway Service
Stopped AppX Deployment Service (AppXSVC)
Stopped ASP.NET State Service
Stopped Auto Time Zone Updater
Stopped Background Intelligent Transfer Service
Stopped BitLocker Drive Encryption Service
Stopped Block Level Backup Engine Service
Stopped Bluetooth Handsfree Service
Stopped Bluetooth Support Service
Stopped Certificate Propagation
Stopped Client License Service (ClipSVC)
Stopped COM+ System Application
Stopped Connected User Experiences and Telemetry
Stopped debugregsvc
Stopped Developer Tools Service
Stopped Device Install Service
Stopped Device Management Enrollment Service
Stopped Device Setup Manager
Stopped DevicesFlow_4777cf0
Stopped DevQuery Background Discovery Broker
Stopped Distributed Transaction Coordinator
Stopped dmwappushsvc
Stopped Downloaded Maps Manager
Stopped Dropbox Update Service (dbupdate)
Stopped Dropbox Update Service (dbupdatem)
Stopped Embedded Mode
Stopped Enterprise App Management Service
Stopped Extensible Authentication Protocol
Stopped Fax
Stopped File History Service
Stopped FlexNet Licensing Service 64
Stopped Garmin Device Interaction Service
Stopped Google Update Service (gupdate)
Stopped Google Update Service (gupdatem)
Stopped Group Policy Client
Stopped HomeGroup Listener
Stopped HV Host Service
Stopped Hyper-V Data Exchange Service
Stopped Hyper-V Guest Service Interface
Stopped Hyper-V Guest Shutdown Service
Stopped Hyper-V Heartbeat Service
Stopped Hyper-V PowerShell Direct Service
Stopped Hyper-V Remote Desktop Virtualization Service
Stopped Hyper-V Time Synchronization Service
Stopped Hyper-V Volume Shadow Copy Requestor
Stopped Infrared monitor service
Stopped Interactive Services Detection
Stopped Internet Connection Sharing (ICS)
Stopped IP Translation Configuration Service
Stopped iPod Service
Stopped KtmRm for Distributed Transaction Coordinator
Stopped Link-Layer Topology Discovery Mapper
Stopped LPA Service
Stopped LxssManager
Stopped MessagingService_4777cf0
Stopped Microsoft Diagnostics Hub Standard Collector Service
Stopped Microsoft iSCSI Initiator Service
Stopped Microsoft Software Shadow Copy Provider
Stopped Microsoft Storage Spaces SMP
Stopped Microsoft Windows SMS Router Service.
Stopped Mozilla Maintenance Service
Stopped Natural Authentication
Stopped Net.Tcp Port Sharing Service
Stopped Netlogon
Stopped Network Connectivity Assistant
Stopped Network Setup Service
Stopped NVIDIA NetworkService Container
Stopped Office 64 Source Engine
Stopped Optimize drives
Stopped Payments and NFC/SE Manager
Stopped Peer Networking Grouping
Stopped Performance Counter DLL Host
Stopped Performance Logs & Alerts
Stopped Phone Service
Stopped PNRP Machine Name Publication Service
Stopped Portable Device Enumerator Service
Stopped Printer Extensions and Notifications
Stopped Problem Reports and Solutions Control Panel Support
Stopped Radio Management Service
Stopped Remote Access Auto Connection Manager
Stopped Remote Access Connection Manager
Stopped Remote Desktop Configuration
Stopped Remote Desktop Services
Stopped Remote Desktop Services UserMode Port Redirector
Stopped Remote Packet Capture Protocol v.0 (experimental)
Stopped Remote Procedure Call (RPC) Locator
Stopped Remote Registry
Stopped Retail Demo Service
Stopped Routing and Remote Access
Stopped Secure Socket Tunneling Protocol Service
Stopped Sensor Data Service
Stopped Sensor Monitoring Service
Stopped Shared PC Account Manager
Stopped Smart Card
Stopped Smart Card Device Enumeration Service
Stopped Smart Card Removal Policy
Stopped SNMP Trap
Stopped Software Protection
Stopped Spot Verifier
Stopped SSH Server Broker
Stopped SSH Server Proxy
Stopped Still Image Acquisition Events
Stopped Storage Tiers Management
Stopped Superfetch
Stopped System Explorer Service
Stopped TeamViewer 12
Stopped Telephony
Stopped Update Orchestrator Service
Stopped Virtual Disk
Stopped Volume Shadow Copy
Stopped W3C Logging Service
Stopped WalletService
Stopped Web Management
Stopped Web Management Service
Stopped WebClient
Stopped Wi-Fi Direct Services Connection Manager Service
Stopped Windows Biometric Service
Stopped Windows Camera Frame Server
Stopped Windows Connect Now - Config Registrar
Stopped Windows Defender Antivirus Network Inspection Service
Stopped Windows Defender Antivirus Service
Stopped Windows Encryption Provider Host Service
Stopped Windows Error Reporting Service
Stopped Windows Event Collector
Stopped Windows Insider Service
Stopped Windows Installer
Stopped Windows Media Player Network Sharing Service
Stopped Windows Mobile Hotspot Service
Stopped Windows Modules Installer
Stopped Windows Perception Service
Stopped Windows Presentation Foundation Font Cache 3.0.0.0
Stopped Windows Remote Management (WS-Management)
Stopped Wired AutoConfig
Stopped Work Folders
Stopped WWAN AutoConfig
Stopped Xbox Accessory Management Service
Stopped Xbox Game Monitoring
Stopped Xbox Live Auth Manager
Stopped Xbox Live Game Save
Stopped Xbox Live Networking Service
TimeZone
TimeZone GMT -8:00 Hours
Language English (United States)
Location United States
Format English (United States)
Currency $
Date Format M/d/yyyy
Time Format h:mm:ss tt
Scheduler
9/6/2017 1:50 PM; HPCustParticipation HP Officejet Pro 8620
9/6/2017 1:50 PM; GoogleUpdateTaskMachineUA
9/6/2017 1:57 PM; Adobe Flash Player Updater
9/6/2017 2:13 PM; GoogleUpdateTaskUserS-1-5-21-805796551-2877709788-167495849-1001UA
9/6/2017 2:16 PM; DropboxUpdateTaskMachineUA
9/6/2017 5:13 PM; GoogleUpdateTaskUserS-1-5-21-805796551-2877709788-167495849-1001Core
9/6/2017 5:39 PM; SafeZone scheduled Autoupdate 1481223928
9/7/2017 2:00 AM; Adobe Acrobat Update Task
9/7/2017 2:11 AM; GarminUpdaterTask
9/7/2017 3:50 AM; GoogleUpdateTaskMachineCore
9/7/2017 9:16 AM; DropboxUpdateTaskMachineCore
9/7/2017 10:38 AM; Opera scheduled Autoupdate 1484591018
9/7/2017 8:05 PM; OneDrive Standalone Update Task-S-1-5-21-805796551-2877709788-167495849-1001
9/8/2017 5:10 PM; Adobe Flash Player PPAPI Notifier
9/12/2017 3:14 PM; Red Giant Link
CCleanerSkipUAC
CreateExplorerShellUnelevatedTask
IObitSelfCheckTask
MasterSeeker.UACBypass.47968b56bf088fc73896d2e2402e8b8b
MasterSeeker.UACBypass.7507186413136a7eeb40ddce65c2d75a
Open URL by RoboForm
Process Explorer-DESKTOP-EBOILA5-Dave
Run RoboForm TaskBar Icon
Seagate_Install_Launch
SmartDefrag_AutoAnalyze
SmartDefrag_Update
Tweaking.com - Windows Repair Tray Icon
Hotfixes
Installed
9/4/2017 Definition Update for Windows Defender - KB2267602 (Definition 1.251.434.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/8/2017 2017-08 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB4034674)
A security issue has been identified in a Microsoft software
product that could affect your system. You can help protect your
system by installing this update from Microsoft. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article. After you install
this update, you may have to restart your system.
8/8/2017 Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - August 2017 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
8/8/2017 2017-08 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4034662)
A security issue has been identified in a Microsoft software
product that could affect your system. You can help protect your
system by installing this update from Microsoft. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article. After you install
this update, you may have to restart your system.
8/7/2017 MediaTek Inc. - Other hardware - MediaTek USB Port
MediaTek Inc. Other hardware software update released in January,
2015
8/7/2017 Definition Update for Windows Defender - KB2267602 (Definition 1.249.734.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/6/2017 Definition Update for Windows Defender - KB2267602 (Definition 1.249.733.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/12/2017 2017-07 Security Update for Adobe Flash Player for Windows 10 Version 1703 for x64-based Systems (KB4025376)
A security issue has been identified in a Microsoft software
product that could affect your system. You can help protect your
system by installing this update from Microsoft. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article. After you install
this update, you may have to restart your system.
7/12/2017 Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - July 2017 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
7/12/2017 2017-06 Update for Windows 10 Version 1703 for x64-based Systems (KB4022405)
Install this update to resolve issues in Windows. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article for more information.
After you install this item, you may have to restart your computer.
Not Installed
8/7/2017 Definition Update for Windows Defender - KB2267602 (Definition 1.249.762.0)
Installation Status Failed
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/29/2017 Definition Update for Windows Defender - KB2267602 (Definition 1.249.380.0)
Installation Status Canceled
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
System Folders
Application Data C:\ProgramData
Cookies C:\Users\Dave\AppData\Local\Microsoft\Windows\INetCookies
Desktop C:\Users\Dave\Desktop
Documents C:\Users\Public\Documents
Fonts C:\WINDOWS\Fonts
Global Favorites C:\Users\Dave\Favorites
Internet History C:\Users\Dave\AppData\Local\Microsoft\Windows\History
Local Application Data C:\Users\Dave\AppData\Local
Music C:\Users\Public\Music
Path for burning CD C:\Users\Dave\AppData\Local\Microsoft\Windows\Burn\Burn
Physical Desktop C:\Users\Dave\Desktop
Pictures C:\Users\Public\Pictures
Program Files C:\Program Files
Public Desktop C:\Users\Public\Desktop
Start Menu C:\ProgramData\Microsoft\Windows\Start Menu
Start Menu Programs C:\ProgramData\Microsoft\Windows\Start Menu\Programs
Startup C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Templates C:\ProgramData\Microsoft\Windows\Templates
Temporary Internet Files C:\Users\Dave\AppData\Local\Microsoft\Windows\INetCache
User Favorites C:\Users\Dave\Favorites
Videos C:\Users\Public\Videos
Windows Directory C:\WINDOWS
Windows/System C:\WINDOWS\system32
Process List
acrotray.exe
Process ID 24340
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
Memory Usage 17 MB
Peak Memory Usage 22 MB
AdAppMgrSvc.exe
Process ID 4964
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
Memory Usage 16 MB
Peak Memory Usage 17 MB
Adobe CEF Helper.exe
Process ID 13664
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
Memory Usage 58 MB
Peak Memory Usage 103 MB
Adobe Desktop Service.exe
Process ID 14540
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
Memory Usage 64 MB
Peak Memory Usage 134 MB
AdobeIPCBroker.exe
Process ID 12748
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
Memory Usage 11 MB
Peak Memory Usage 13 MB
AdobeUpdateService.exe
Process ID 4940
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
Memory Usage 8.76 MB
Peak Memory Usage 9.11 MB
AGSService.exe
Process ID 4900
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
Memory Usage 15 MB
Peak Memory Usage 17 MB
AppleMobileDeviceService.exe
Process ID 4892
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
Memory Usage 12 MB
Peak Memory Usage 13 MB
ApplicationFrameHost.exe
Process ID 25136
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\ApplicationFrameHost.exe
Memory Usage 24 MB
Peak Memory Usage 30 MB
appnhost.exe
Process ID 22420
User Dave
Domain DESKTOP-EBOILA5
Path C:\Users\Dave\AppData\Local\Mixesoft\AppNHost\appnhost.exe
Memory Usage 12 MB
Peak Memory Usage 13 MB
armsvc.exe
Process ID 4932
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
Memory Usage 6.56 MB
Peak Memory Usage 6.73 MB
aswidsagenta.exe
Process ID 1160
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
Memory Usage 55 MB
Peak Memory Usage 115 MB
audiodg.exe
Process ID 18316
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\audiodg.exe
Memory Usage 27 MB
Peak Memory Usage 30 MB
AvastSvc.exe
Process ID 3176
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\AVAST Software\Avast\AvastSvc.exe
Memory Usage 67 MB
Peak Memory Usage 408 MB
AvastUI.exe
Process ID 21800
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files\AVAST Software\Avast\AvastUI.exe
Memory Usage 43 MB
Peak Memory Usage 43 MB
BlueSoleilCS.exe
Process ID 4908
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
Memory Usage 14 MB
Peak Memory Usage 14 MB
BsHelpCS.exe
Process ID 2512
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
Memory Usage 5.61 MB
Peak Memory Usage 7.91 MB
BtTray.exe
Process ID 24060
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
Memory Usage 22 MB
Peak Memory Usage 22 MB
CCLibrary.exe
Process ID 14448
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
Memory Usage 3.41 MB
Peak Memory Usage 3.63 MB
CCXProcess.exe
Process ID 27300
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
Memory Usage 3.36 MB
Peak Memory Usage 3.57 MB
chrome.exe
Process ID 30160
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 8.21 MB
Peak Memory Usage 76 MB
chrome.exe
Process ID 3660
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 109 MB
Peak Memory Usage 291 MB
chrome.exe
Process ID 11652
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 8.14 MB
Peak Memory Usage 71 MB
chrome.exe
Process ID 27104
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 13 MB
Peak Memory Usage 72 MB
chrome.exe
Process ID 18512
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 14 MB
Peak Memory Usage 77 MB
chrome.exe
Process ID 21356
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 14 MB
Peak Memory Usage 74 MB
chrome.exe
Process ID 20552
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 105 MB
Peak Memory Usage 279 MB
chrome.exe
Process ID 16224
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 24 MB
Peak Memory Usage 82 MB
chrome.exe
Process ID 29948
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 14 MB
Peak Memory Usage 73 MB
chrome.exe
Process ID 29928
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 23 MB
Peak Memory Usage 81 MB
chrome.exe
Process ID 11344
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 19 MB
Peak Memory Usage 91 MB
chrome.exe
Process ID 76
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 18 MB
Peak Memory Usage 75 MB
chrome.exe
Process ID 15672
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 48 MB
Peak Memory Usage 132 MB
chrome.exe
Process ID 5360
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 14 MB
Peak Memory Usage 77 MB
chrome.exe
Process ID 24180
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 28 MB
Peak Memory Usage 115 MB
chrome.exe
Process ID 17576
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 21 MB
Peak Memory Usage 112 MB
chrome.exe
Process ID 984
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 17 MB
Peak Memory Usage 81 MB
chrome.exe
Process ID 18132
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 268 MB
Peak Memory Usage 332 MB
chrome.exe
Process ID 24288
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 158 MB
Peak Memory Usage 160 MB
chrome.exe
Process ID 12520
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 51 MB
Peak Memory Usage 98 MB
chrome.exe
Process ID 25696
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 131 MB
Peak Memory Usage 398 MB
chrome.exe
Process ID 9780
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 14 MB
Peak Memory Usage 77 MB
chrome.exe
Process ID 21576
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 8.17 MB
Peak Memory Usage 44 MB
chrome.exe
Process ID 14480
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 8.17 MB
Peak Memory Usage 45 MB
chrome.exe
Process ID 28936
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 75 MB
Peak Memory Usage 171 MB
chrome.exe
Process ID 20388
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Memory Usage 105 MB
Peak Memory Usage 356 MB
cmd.exe
Process ID 13436
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\cmd.exe
Memory Usage 3.39 MB
Peak Memory Usage 3.39 MB
conhost.exe
Process ID 10496
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\conhost.exe
Memory Usage 9.96 MB
Peak Memory Usage 10 MB
conhost.exe
Process ID 11492
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\conhost.exe
Memory Usage 10 MB
Peak Memory Usage 11 MB
conhost.exe
Process ID 28800
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\conhost.exe
Memory Usage 9.98 MB
Peak Memory Usage 10 MB
conhost.exe
Process ID 3532
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\conhost.exe
Memory Usage 9.96 MB
Peak Memory Usage 10 MB
conhost.exe
Process ID 12532
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\conhost.exe
Memory Usage 11 MB
Peak Memory Usage 12 MB
conhost.exe
Process ID 24520
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\conhost.exe
Memory Usage 808 KB
Peak Memory Usage 10 MB
conhost.exe
Process ID 14484
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\conhost.exe
Memory Usage 8.11 MB
Peak Memory Usage 12 MB
CoreSync.exe
Process ID 25416
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
Memory Usage 37 MB
Peak Memory Usage 39 MB
Creative Cloud.exe
Process ID 23492
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
Memory Usage 46 MB
Peak Memory Usage 87 MB
csrss.exe
Process ID 760
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\csrss.exe
Memory Usage 6.16 MB
Peak Memory Usage 7.34 MB
csrss.exe
Process ID 19488
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\csrss.exe
Memory Usage 5.28 MB
Peak Memory Usage 23 MB
dasHost.exe
Process ID 2844
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\dasHost.exe
Memory Usage 20 MB
Peak Memory Usage 22 MB
DbxSvc.exe
Process ID 4980
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\DbxSvc.exe
Memory Usage 6.35 MB
Peak Memory Usage 6.59 MB
DesktopOK_x64.exe
Process ID 21736
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files\DesktopOK\DesktopOK_x64.exe
Memory Usage 24 MB
Peak Memory Usage 25 MB
dllhost.exe
Process ID 10140
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\dllhost.exe
Memory Usage 10 MB
Peak Memory Usage 12 MB
dllhost.exe
Process ID 28360
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\dllhost.exe
Memory Usage 11 MB
Peak Memory Usage 13 MB
dllhost.exe
Process ID 28628
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\dllhost.exe
Memory Usage 8.50 MB
Peak Memory Usage 8.52 MB
Dropbox.exe
Process ID 22480
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
Memory Usage 8.11 MB
Peak Memory Usage 8.42 MB
Dropbox.exe
Process ID 3900
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
Memory Usage 216 MB
Peak Memory Usage 229 MB
Dropbox.exe
Process ID 18692
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
Memory Usage 7.27 MB
Peak Memory Usage 7.65 MB
DropboxUpdate.exe
Process ID 2352
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Memory Usage 4.06 MB
Peak Memory Usage 9.57 MB
dwm.exe
Process ID 27936
User DWM-1
Domain Window Manager
Path C:\Windows\System32\dwm.exe
Memory Usage 53 MB
Peak Memory Usage 60 MB
EvernoteClipper.exe
Process ID 22544
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
Memory Usage 12 MB
Peak Memory Usage 12 MB
Everything.exe
Process ID 14104
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files\Everything\Everything.exe
Memory Usage 164 MB
Peak Memory Usage 174 MB
Everything.exe
Process ID 16496
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files\Everything\Everything.exe
Memory Usage 16 MB
Peak Memory Usage 17 MB
explorer.exe
Process ID 18460
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\explorer.exe
Memory Usage 132 MB
Peak Memory Usage 168 MB
fontdrvhost.exe
Process ID 524
User UMFD-0
Domain Font Driver Host
Path C:\Windows\System32\fontdrvhost.exe
Memory Usage 16 MB
Peak Memory Usage 19 MB
fontdrvhost.exe
Process ID 3092
User UMFD-1
Domain Font Driver Host
Path C:\Windows\System32\fontdrvhost.exe
Memory Usage 43 MB
Peak Memory Usage 55 MB
GWCtlSrv.exe
Process ID 4924
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
Memory Usage 150 MB
Peak Memory Usage 614 MB
GWIdlMon.exe
Process ID 1180
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\GlassWire\GWIdlMon.exe
Memory Usage 16 MB
Peak Memory Usage 17 MB
inetinfo.exe
Process ID 4996
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\inetsrv\inetinfo.exe
Memory Usage 11 MB
Peak Memory Usage 20 MB
InternetOff.exe
Process ID 3736
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\InternetOff\InternetOff.exe
Memory Usage 16 MB
Peak Memory Usage 17 MB
IOffSvc.exe
Process ID 1832
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\InternetOff\IOffSvc.exe
Memory Usage 7.71 MB
Peak Memory Usage 12 MB
lsass.exe
Process ID 988
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\lsass.exe
Memory Usage 23 MB
Peak Memory Usage 23 MB
mDNSResponder.exe
Process ID 4916
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Bonjour\mDNSResponder.exe
Memory Usage 6.62 MB
Peak Memory Usage 6.80 MB
MediaMallServer.exe
Process ID 28428
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\MediaMall\MediaMallServer.exe
Memory Usage 320 MB
Peak Memory Usage 331 MB
Memory Compression
Process ID 6004
User SYSTEM
Domain NT AUTHORITY
Memory Usage 216 MB
Peak Memory Usage 241 MB
MSASCuiL.exe
Process ID 21680
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files\Windows Defender\MSASCuiL.exe
Memory Usage 9.38 MB
Peak Memory Usage 9.60 MB
node.exe
Process ID 3904
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
Memory Usage 54 MB
Peak Memory Usage 62 MB
node.exe
Process ID 9924
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
Memory Usage 64 MB
Peak Memory Usage 71 MB
nvcontainer.exe
Process ID 17740
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
Memory Usage 28 MB
Peak Memory Usage 55 MB
nvcontainer.exe
Process ID 5124
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Memory Usage 15 MB
Peak Memory Usage 25 MB
NVDisplay.Container.exe
Process ID 2044
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
Memory Usage 13 MB
Peak Memory Usage 14 MB
NVDisplay.Container.exe
Process ID 12640
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
Memory Usage 25 MB
Peak Memory Usage 25 MB
NVIDIA Web Helper.exe
Process ID 20872
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
Memory Usage 7.92 MB
Peak Memory Usage 35 MB
NvTelemetryContainer.exe
Process ID 5132
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
Memory Usage 16 MB
Peak Memory Usage 17 MB
nvtray.exe
Process ID 9536
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
Memory Usage 12 MB
Peak Memory Usage 12 MB
OfficeClickToRun.exe
Process ID 16340
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
Memory Usage 33 MB
Peak Memory Usage 88 MB
OneDrive.exe
Process ID 19592
User Dave
Domain DESKTOP-EBOILA5
Path C:\Users\Dave\AppData\Local\Microsoft\OneDrive\OneDrive.exe
Memory Usage 47 MB
Peak Memory Usage 58 MB
Plex DLNA Server.exe
Process ID 2152
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe
Memory Usage 15 MB
Peak Memory Usage 15 MB
Plex Media Server.exe
Process ID 7020
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
Memory Usage 43 MB
Peak Memory Usage 50 MB
Plex Tuner Service.exe
Process ID 29268
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe
Memory Usage 10.00 MB
Peak Memory Usage 10 MB
Plex Update Service.exe
Process ID 5872
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
Memory Usage 8.16 MB
Peak Memory Usage 8.57 MB
PlexScriptHost.exe
Process ID 26724
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
Memory Usage 35 MB
Peak Memory Usage 35 MB
procexp64.exe
Process ID 19404
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files\Process Explorer\procexp64.exe
Memory Usage 19 MB
Peak Memory Usage 22 MB
RAVCpl64.exe
Process ID 20396
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
Memory Usage 14 MB
Peak Memory Usage 15 MB
RemindersServer.exe
Process ID 10488
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
Memory Usage 18 MB
Peak Memory Usage 23 MB
remoting_host.exe
Process ID 5688
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Google\Chrome Remote Desktop\61.0.3163.20\remoting_host.exe
Memory Usage 9.90 MB
Peak Memory Usage 10 MB
remoting_host.exe
Process ID 3548
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Program Files (x86)\Google\Chrome Remote Desktop\61.0.3163.20\remoting_host.exe
Memory Usage 13 MB
Peak Memory Usage 15 MB
Repair_Windows.exe
Process ID 1416
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\Repair_Windows.exe
Memory Usage 8.16 MB
Peak Memory Usage 45 MB
rf-chrome-nm-host.exe
Process ID 28432
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome-nm-host.exe
Memory Usage 16 MB
Peak Memory Usage 30 MB
robotaskbaricon.exe
Process ID 22000
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
Memory Usage 40 MB
Peak Memory Usage 41 MB
RuntimeBroker.exe
Process ID 11784
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\RuntimeBroker.exe
Memory Usage 49 MB
Peak Memory Usage 75 MB
SbieSvc.exe
Process ID 2912
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Sandboxie\SbieSvc.exe
Memory Usage 6.25 MB
Peak Memory Usage 6.76 MB
SearchFilterHost.exe
Process ID 13844
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\SearchFilterHost.exe
Memory Usage 12 MB
Peak Memory Usage 12 MB
SearchIndexer.exe
Process ID 5800
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\SearchIndexer.exe
Memory Usage 54 MB
Peak Memory Usage 105 MB
SearchProtocolHost.exe
Process ID 18288
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\SearchProtocolHost.exe
Memory Usage 20 MB
Peak Memory Usage 20 MB
SearchUI.exe
Process ID 27512
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
Memory Usage 86 MB
Peak Memory Usage 216 MB
SecurityHealthService.exe
Process ID 5784
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\SecurityHealthService.exe
Memory Usage 13 MB
Peak Memory Usage 13 MB
services.exe
Process ID 940
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\services.exe
Memory Usage 11 MB
Peak Memory Usage 11 MB
SettingSyncHost.exe
Process ID 19916
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\SettingSyncHost.exe
Memory Usage 5.86 MB
Peak Memory Usage 14 MB
ShellExperienceHost.exe
Process ID 17744
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
Memory Usage 46 MB
Peak Memory Usage 80 MB
sihost.exe
Process ID 17624
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\sihost.exe
Memory Usage 27 MB
Peak Memory Usage 28 MB
smss.exe
Process ID 480
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\smss.exe
Memory Usage 1.17 MB
Peak Memory Usage 1.18 MB
Speccy64.exe
Process ID 16680
User Dave
Domain DESKTOP-EBOILA5
Path C:\Program Files\Speccy\Speccy64.exe
Memory Usage 30 MB
Peak Memory Usage 31 MB
SpeechRuntime.exe
Process ID 21436
User Dave
Domain DESKTOP-EBOILA5
Path C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
Memory Usage 42 MB
Peak Memory Usage 61 MB
spoolsv.exe
Process ID 4308
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\spoolsv.exe
Memory Usage 23 MB
Peak Memory Usage 24 MB
SpotifyWebHelper.exe
Process ID 22592
User Dave
Domain DESKTOP-EBOILA5
Path C:\Users\Dave\AppData\Roaming\Spotify\SpotifyWebHelper.exe
Memory Usage 7.95 MB
Peak Memory Usage 8.24 MB
spsetup131.exe
Process ID 21288
User Dave
Domain DESKTOP-EBOILA5
Path C:\Users\Dave\Downloads\spsetup131.exe
Memory Usage 35 MB
Peak Memory Usage 36 MB
SRFeature.exe
Process ID 26864
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe
Memory Usage 10 MB
Peak Memory Usage 11 MB
SRManager.exe
Process ID 9244
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRManager.exe
Memory Usage 14 MB
Peak Memory Usage 16 MB
SRServer.exe
Process ID 21960
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRServer.exe
Memory Usage 19 MB
Peak Memory Usage 24 MB
SRService.exe
Process ID 5660
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
Memory Usage 5.80 MB
Peak Memory Usage 6.25 MB
svchost.exe
Process ID 1672
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 6.05 MB
Peak Memory Usage 6.40 MB
svchost.exe
Process ID 1744
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 8.58 MB
Peak Memory Usage 8.65 MB
svchost.exe
Process ID 1872
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 15 MB
Peak Memory Usage 19 MB
svchost.exe
Process ID 1968
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 10 MB
Peak Memory Usage 10 MB
svchost.exe
Process ID 1992
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 7.66 MB
Peak Memory Usage 7.81 MB
svchost.exe
Process ID 2052
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 12 MB
Peak Memory Usage 12 MB
svchost.exe
Process ID 2076
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 11 MB
Peak Memory Usage 12 MB
svchost.exe
Process ID 2188
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 5.79 MB
Peak Memory Usage 6.04 MB
svchost.exe
Process ID 2204
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 7.82 MB
Peak Memory Usage 7.88 MB
svchost.exe
Process ID 2464
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 11 MB
Peak Memory Usage 11 MB
svchost.exe
Process ID 2532
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 8.29 MB
Peak Memory Usage 8.55 MB
svchost.exe
Process ID 2556
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 8.31 MB
Peak Memory Usage 8.90 MB
svchost.exe
Process ID 2564
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 8.71 MB
Peak Memory Usage 18 MB
svchost.exe
Process ID 2652
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 27 MB
Peak Memory Usage 37 MB
svchost.exe
Process ID 2820
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 13 MB
Peak Memory Usage 13 MB
svchost.exe
Process ID 2868
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 11 MB
Peak Memory Usage 19 MB
svchost.exe
Process ID 1456
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 6.31 MB
Peak Memory Usage 6.43 MB
svchost.exe
Process ID 2284
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 12 MB
Peak Memory Usage 12 MB
svchost.exe
Process ID 2252
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 14 MB
Peak Memory Usage 14 MB
svchost.exe
Process ID 3068
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 7.94 MB
Peak Memory Usage 8.48 MB
svchost.exe
Process ID 3104
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 13 MB
Peak Memory Usage 13 MB
svchost.exe
Process ID 3212
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 9.66 MB
Peak Memory Usage 9.83 MB
svchost.exe
Process ID 3320
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 9.66 MB
Peak Memory Usage 11 MB
svchost.exe
Process ID 3344
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 12 MB
Peak Memory Usage 13 MB
svchost.exe
Process ID 3500
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 19 MB
Peak Memory Usage 43 MB
svchost.exe
Process ID 3604
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 12 MB
Peak Memory Usage 12 MB
svchost.exe
Process ID 3968
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 7.66 MB
Peak Memory Usage 7.93 MB
svchost.exe
Process ID 4120
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 9.30 MB
Peak Memory Usage 9.79 MB
svchost.exe
Process ID 4516
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 7.83 MB
Peak Memory Usage 8.09 MB
svchost.exe
Process ID 4988
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 11 MB
Peak Memory Usage 11 MB
svchost.exe
Process ID 5004
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 27 MB
Peak Memory Usage 76 MB
svchost.exe
Process ID 5012
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 13 MB
Peak Memory Usage 16 MB
svchost.exe
Process ID 5020
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 11 MB
Peak Memory Usage 12 MB
svchost.exe
Process ID 5064
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 7.66 MB
Peak Memory Usage 8.02 MB
svchost.exe
Process ID 5072
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 19 MB
Peak Memory Usage 24 MB
svchost.exe
Process ID 5088
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 11 MB
Peak Memory Usage 12 MB
svchost.exe
Process ID 5144
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 9.41 MB
Peak Memory Usage 16 MB
svchost.exe
Process ID 5208
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 16 MB
Peak Memory Usage 17 MB
svchost.exe
Process ID 5260
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 16 MB
Peak Memory Usage 22 MB
svchost.exe
Process ID 23748
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 10 MB
Peak Memory Usage 11 MB
svchost.exe
Process ID 5316
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 5.73 MB
Peak Memory Usage 5.94 MB
svchost.exe
Process ID 5376
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 7.14 MB
Topic: Better to run Windows Repair, or better to do a reset with keep files? (Read 184337 times)