Process Name Process ID Session ID Process Identity Additional Info ------------ ---------- ---------- ---------------- --------------- System Process 0 0 SYSTEM System 4 0 SYSTEM smss.exe 296 0 NT AUTHORITY\SYSTEM csrss.exe 384 0 NT AUTHORITY\SYSTEM wininit.exe 428 0 NT AUTHORITY\SYSTEM csrss.exe 436 1 NT AUTHORITY\SYSTEM winlogon.exe 472 1 NT AUTHORITY\SYSTEM services.exe 532 0 NT AUTHORITY\SYSTEM lsass.exe 540 0 NT AUTHORITY\SYSTEM Services: ProtectedStorage, SamSs lsm.exe 548 0 NT AUTHORITY\SYSTEM svchost.exe 648 0 NT AUTHORITY\SYSTEM Services: DcomLaunch, PlugPlay, Power svchost.exe 728 0 NT AUTHORITY\NETWORK SERVICE Services: RpcEptMapper, RpcSs LogonUI.exe 800 1 NT AUTHORITY\SYSTEM svchost.exe 816 0 NT AUTHORITY\LOCAL SERVICE Services: Dhcp, eventlog, lmhosts RouterNT.exe 872 0 NT AUTHORITY\SYSTEM Services: Sophos Message Router svchost.exe 900 0 NT AUTHORITY\SYSTEM Services: AeLookupSvc, Appinfo, BITS, CertPropSvc, gpsvc, IKEEXT, iphlpsvc, LanmanServer, ProfSvc, sacsvr, Schedule, SENS, SessionEnv, ShellHWDetection, Winmgmt, wuauserv svchost.exe 932 0 NT AUTHORITY\LOCAL SERVICE Services: EventSystem, fdPHost, netprofm, nsi svchost.exe 988 0 NT AUTHORITY\SYSTEM Services: Netman, TrkWks, UmRdpService, UxSms SavService.exe 1016 0 NT AUTHORITY\LOCAL SERVICE Services: SAVService svchost.exe 1176 0 NT AUTHORITY\NETWORK SERVICE Services: CryptSvc, Dnscache, LanmanWorkstation, NlaSvc, WinRM svchost.exe 1260 0 NT AUTHORITY\LOCAL SERVICE Services: BFE, DPS, MpsSvc Dbghost.exe 1304 0 NT AUTHORITY\SYSTEM spoolsv.exe 1416 0 NT AUTHORITY\SYSTEM Services: Spooler svchost.exe 1444 0 NT AUTHORITY\SYSTEM Services: AppHostSvc cissesrv.exe 1560 0 NT AUTHORITY\SYSTEM Services: Cissesrv cpqrcmc.exe 1580 0 NT AUTHORITY\SYSTEM Services: CpqRcmc vcagent.exe 1616 0 NT AUTHORITY\SYSTEM Services: cpqvcagent svchost.exe 1640 0 NT AUTHORITY\SYSTEM Services: ftpsvc inetinfo.exe 1660 0 NT AUTHORITY\SYSTEM Services: IISADMIN WmiPrvSE.exe 1684 0 NT AUTHORITY\SYSTEM EmailAgent.exe 1788 0 NT AUTHORITY\SYSTEM Services: Persits Software EmailAgent svchost.exe 1812 0 NT AUTHORITY\LOCAL SERVICE Services: RemoteRegistry swc_service.exe 1832 0 NT AUTHORITY\SYSTEM Services: Sophos Web Control Service SAVAdminService.exe 1844 0 NT AUTHORITY\SYSTEM Services: SAVAdminService snmp.exe 1884 0 NT AUTHORITY\SYSTEM Services: SNMP ManagementAgentNT.exe 1928 0 NT AUTHORITY\SYSTEM Services: Sophos Agent ALsvc.exe 1984 0 NT AUTHORITY\SYSTEM Services: Sophos AutoUpdate Service swi_service.exe 2140 0 NT AUTHORITY\SYSTEM Services: swi_service sysdown.exe 2216 0 NT AUTHORITY\SYSTEM Services: sysdown smhstart.exe 2280 0 NT AUTHORITY\SYSTEM Services: SysMgmtHp bpinetd.exe 2312 0 NT AUTHORITY\SYSTEM Services: NetBackup Legacy Client Service notepad.exe 2328 2 WEB-SRV3\w3bt3am svchost.exe 2388 0 NT AUTHORITY\NETWORK SERVICE Services: TermService pbx_exchange.exe 2452 0 NT AUTHORITY\SYSTEM Services: VRTSpbx svchost.exe 2548 0 NT AUTHORITY\SYSTEM Services: W3SVC, WAS TrustedInstaller.exe 2556 0 NT AUTHORITY\SYSTEM Services: TrustedInstaller cpqnimgt.exe 2580 0 NT AUTHORITY\SYSTEM Services: CpqNicMgmt cmd.exe 2592 0 NT AUTHORITY\SYSTEM conhost.exe 2612 0 NT AUTHORITY\SYSTEM cqmgserv.exe 2644 0 NT AUTHORITY\SYSTEM Services: CqMgServ cqmgstor.exe 2668 0 NT AUTHORITY\SYSTEM Services: CqMgStor vnetd.exe 2748 0 NT AUTHORITY\SYSTEM Services: NetBackup Legacy Network Service hpsmhd.exe 2756 0 NT AUTHORITY\SYSTEM w3wp.exe 2976 0 IIS APPPOOL\Economic Development IIS Application Pool: Economic Development WmiPrvSE.exe 2988 0 NT AUTHORITY\SYSTEM w3wp.exe 3124 0 IIS APPPOOL\cpak IIS Application Pool: cpak cmd.exe 3236 0 NT AUTHORITY\SYSTEM rotatelogs.exe 3292 0 NT AUTHORITY\SYSTEM rotatelogs.exe 3320 0 NT AUTHORITY\SYSTEM jusched.exe 3472 2 WEB-SRV3\w3bt3am w3wp.exe 3572 0 IIS APPPOOL\default web site IIS Application Pool: default web site dllhost.exe 3656 0 NT AUTHORITY\SYSTEM COM+ Application: System ApplicationServices: COMSysApp CcmExec.exe 4028 0 NT AUTHORITY\SYSTEM Services: CcmExec bpcd.exe 4048 0 NT AUTHORITY\SYSTEM Services: NetBackup Client Service cqmghost.exe 4072 0 NT AUTHORITY\SYSTEM Services: CqMgHost w3wp.exe 4256 0 IIS APPPOOL\pdkairport IIS Application Pool: pdkairport msdtc.exe 4380 0 NT AUTHORITY\NETWORK SERVICE Services: MSDTC sdcservice.exe 4432 0 NT AUTHORITY\LOCAL SERVICE Services: Sophos Device Control Service iexplore.exe 4504 2 WEB-SRV3\w3bt3am svchost.exe 4508 0 NT AUTHORITY\NETWORK SERVICE Services: PolicyAgent conhost.exe 4716 0 NT AUTHORITY\SYSTEM WmiPrvSE.exe 4796 0 NT AUTHORITY\SYSTEM mmc.exe 4816 2 WEB-SRV3\w3bt3am ALMon.exe 4924 2 WEB-SRV3\w3bt3am explorer.exe 5112 2 WEB-SRV3\w3bt3am w3wp.exe 5232 0 IIS APPPOOL\dcrctkts IIS Application Pool: dcrctkts rotatelogs.exe 5352 0 NT AUTHORITY\SYSTEM cmd.exe 5552 0 NT AUTHORITY\SYSTEM sppsvc.exe 5648 0 NT AUTHORITY\NETWORK SERVICE Services: sppsvc svchost.exe 5676 0 NT AUTHORITY\LOCAL SERVICE Services: FontCache cmd.exe 5704 0 NT AUTHORITY\SYSTEM conhost.exe 6656 0 NT AUTHORITY\SYSTEM iexplore.exe 6684 2 WEB-SRV3\w3bt3am fwsession.exe 6712 2 WEB-SRV3\w3bt3am cmd.exe 6768 0 NT AUTHORITY\SYSTEM winlogon.exe 6844 2 NT AUTHORITY\SYSTEM rdpclip.exe 6852 2 WEB-SRV3\w3bt3am w3wp.exe 6932 0 IIS APPPOOL\DeKalb State Court IIS Application Pool: DeKalb State Court wuauclt.exe 6996 2 WEB-SRV3\w3bt3am DbgSvc.exe 7020 0 NT AUTHORITY\SYSTEM Services: DbgSvc hpsmhd.exe 7356 0 NT AUTHORITY\SYSTEM dwm.exe 7444 2 WEB-SRV3\w3bt3am InetMgr.exe 7644 2 WEB-SRV3\w3bt3am csrss.exe 7976 2 NT AUTHORITY\SYSTEM taskhost.exe 7996 2 WEB-SRV3\w3bt3am w3wp.exe 8124 0 IIS APPPOOL\Lee May IIS Application Pool: Lee May rotatelogs.exe 8188 0 NT AUTHORITY\SYSTEM