SYSTEM ====== Host name: JACKY IP-address: 192.168.1.100 User name: JACKY\Mijn naam Description: Operating system: Microsoft Windows XP Home Edition (version 5.1.2600; build 2600) Name: Microsoft Windows XP Home Edition Version: 5.1.2600 Build: 2600 Install date: 28/11/2004 17:11:47 Service pack: Service Pack 3 Windows product ID: 76395-OEM-0011903-00126 Windows product key: Model: MS-7091 BIOS: Phoenix Technologies, LTD (version: 6.00 PG; date: 10/01/2005) Manufacturer: Phoenix Technologies, LTD Version: 6.00 PG Date: 10/01/2005 Serial number: Motherboard: MICRO-STAR INTERNATIONAL CO., LTD (MS-7091) Manufacturer: MICRO-STAR INTERNATIONAL CO., LTD Product: MS-7091 Version: Chassis: Desktop Processor: Intel(R) Pentium(R) 4 CPU 3.40GHz (architecture: x86; 3391 MHz) Name: Intel(R) Pentium(R) 4 CPU 3.40GHz Manufacturer: GenuineIntel Max clock speed: 3391 MHz Architecture: x86 Level 2 cache size: 0 KB Socket type: Socket 478 Version: Model 3, stepping 4 Physical memory: 1023,5 MB Memory slot: Empty Capacity: Device locator: Bank label: Form factor: Memory type: Manufacturer: Speed: Max capacity: 4,0 GB Memory slot: Empty Capacity: Device locator: Bank label: Form factor: Memory type: Manufacturer: Speed: Max capacity: 4,0 GB Memory slot: Empty Capacity: Device locator: Bank label: Form factor: Memory type: Manufacturer: Speed: Max capacity: 4,0 GB Memory slot: Empty Capacity: Device locator: Bank label: Form factor: Memory type: Manufacturer: Speed: Max capacity: 4,0 GB Disk: WDC WD2500JD-00HBB0 (232,9 GB) Caption: WDC WD2500JD-00HBB0 Size: 232,9 GB Manufacturer: (Standaardschijfstations) Interface type: IDE Media type: Fixed hard disk media Bytes per sector: 512 Heads: 255 Cylinders: 30401 Sectors: 488392065 Tracks: 7752255 Disk: Generic CF Card CF USB Device Caption: Generic CF Card CF USB Device Size: Manufacturer: (Standaardschijfstations) Interface type: USB Media type: Bytes per sector: Heads: Cylinders: Sectors: Tracks: Disk: Generic MS/SD Combo MS USB Device Caption: Generic MS/SD Combo MS USB Device Size: Manufacturer: (Standaardschijfstations) Interface type: USB Media type: Bytes per sector: Heads: Cylinders: Sectors: Tracks: Disk: Generic SM/xD Combo SM USB Device Caption: Generic SM/xD Combo SM USB Device Size: Manufacturer: (Standaardschijfstations) Interface type: USB Media type: Bytes per sector: Heads: Cylinders: Sectors: Tracks: Disk: Imation Nano USB Device (1,9 GB) Caption: Imation Nano USB Device Size: 1,9 GB Manufacturer: (Standaardschijfstations) Interface type: USB Media type: Removable media other than floppy Bytes per sector: 512 Heads: 255 Cylinders: 250 Sectors: 4016250 Tracks: 63750 Disk: Imation Nano Pro USB Device (7,6 GB) Caption: Imation Nano Pro USB Device Size: 7,6 GB Manufacturer: (Standaardschijfstations) Interface type: USB Media type: Removable media other than floppy Bytes per sector: 512 Heads: 255 Cylinders: 987 Sectors: 15856155 Tracks: 251685 Logical drive: C: (Lokale vaste schijf; size: 125,5 GB; free space: 107,0 GB; file system: NTFS) Name: C: Description: Lokale vaste schijf Size: 125,5 GB Free space: 107,0 GB File system: NTFS Serial number: B41C6BCD Logical drive: D: (Lokale vaste schijf; size: 89,8 GB; free space: 60,0 GB; file system: NTFS) Name: D: Description: Lokale vaste schijf Size: 89,8 GB Free space: 60,0 GB File system: NTFS Serial number: 5CAAEFED Logical drive: E: (Lokale vaste schijf; size: 17,6 GB; free space: 13,6 GB; file system: FAT32) Name: E: Description: Lokale vaste schijf Size: 17,6 GB Free space: 13,6 GB File system: FAT32 Serial number: BCB62696 Logical drive: F: (Cd-rom-schijf) Name: F: Description: Cd-rom-schijf Size: Free space: File system: Serial number: Logical drive: G: (Cd-rom-schijf) Name: G: Description: Cd-rom-schijf Size: Free space: File system: Serial number: Logical drive: H: (Verwisselbare schijf; size: 1,9 GB; free space: 1,7 GB; file system: FAT) Name: H: Description: Verwisselbare schijf Size: 1,9 GB Free space: 1,7 GB File system: FAT Serial number: 74BA4690 Logical drive: I: (Verwisselbare schijf) Name: I: Description: Verwisselbare schijf Size: Free space: File system: Serial number: Logical drive: J: (Verwisselbare schijf) Name: J: Description: Verwisselbare schijf Size: Free space: File system: Serial number: Logical drive: K: (Verwisselbare schijf) Name: K: Description: Verwisselbare schijf Size: Free space: File system: Serial number: Logical drive: L: (Verwisselbare schijf; size: 7,5 GB; free space: 7,3 GB; file system: FAT32) Name: L: Description: Verwisselbare schijf Size: 7,5 GB Free space: 7,3 GB File system: FAT32 Serial number: 3C090975 CD-ROM: PIONEER DVD RW DVR-108 (CD-ROM) Name: PIONEER DVD RW DVR-108 Media type: CD-ROM Manufacturer: (Standaard cd-rom-stations) Drive: F: CD-ROM: IDE DVD-ROM 16X (CD-ROM) Name: IDE DVD-ROM 16X Media type: CD-ROM Manufacturer: (Standaard cd-rom-stations) Drive: G: Video: NVIDIA GeForce 6610 XL (1152x864x32b) Name: NVIDIA GeForce 6610 XL Current horizontal resolution: 1152 Current vertical resolution: 864 Current bits per pixel: 32 Current refresh rate: 75 Hz Memory size: 128,0 MB Monitor: Plug en Play-monitor Name: Plug en Play-monitor Screen width: 1152 Screen height: 864 Printer: HP Deskjet F300 series Multimedia: C-Media High Definition Audio Device Name: C-Media High Definition Audio Device Manufacturer: C-Media Multimedia: Unimodem Half-Duplex-audioapparaat Name: Unimodem Half-Duplex-audioapparaat Manufacturer: Microsoft Multimedia: Bluetooth Audio Name: Bluetooth Audio Manufacturer: IVT Corporation. Modem: Creatix V.92 Data Fax Modem Name: Creatix V.92 Data Fax Modem Port: COM3 Modem: Bluetooth Fax Modem Name: Bluetooth Fax Modem Port: COM14 Modem: Bluetooth LAP Modem Name: Bluetooth LAP Modem Port: COM13 Modem: Bluetooth LAP Modem #2 Name: Bluetooth LAP Modem #2 Port: COM12 Modem: Bluetooth DUN Modem Name: Bluetooth DUN Modem Port: COM11 Network adapter: VIA VT6105 Rhine III Fast Ethernet Adapter Adapter type: Ethernet 802.3 Net connection status: Connected Manufacturer: VIA Technologies, Inc. Speed: Adapter IP-address: 192.168.1.100 Adapter MAC-address: 00:11:09:A5:18:9B DHCP enabled: True DHCP server: 192.168.1.1 DNS domain: WINS primary server: WINS secondary server: Network adapter: RT2500 USB Wireless LAN Card Adapter type: Net connection status: Disconnected Manufacturer: Ralink Technology Corp. Speed: Adapter IP-address: Adapter MAC-address: DHCP enabled: True DHCP server: DNS domain: WINS primary server: WINS secondary server: Network adapter: Bluetooth PAN Network Adapter Adapter type: Net connection status: Disconnected Manufacturer: IVT Corporation Speed: Adapter IP-address: Adapter MAC-address: DHCP enabled: True DHCP server: DNS domain: WINS primary server: WINS secondary server: Network adapter: 1394-netwerkkaart Adapter type: Net connection status: Disconnected Manufacturer: Microsoft Speed: Adapter IP-address: Adapter MAC-address: DHCP enabled: True DHCP server: DNS domain: WINS primary server: WINS secondary server: Local account: JACKY\Administrator (Disabled: False) Caption: JACKY\Administrator Name: Administrator Domain: JACKY Description: Ingebouwde account voor beheer van de computer of het domein SID: S-1-5-21-2576270098-3842992165-3927899635-500 Disabled: False Local account: JACKY\ASPNET (Disabled: False) Caption: JACKY\ASPNET Name: ASPNET Domain: JACKY Description: Account die wordt gebruikt voor het uitvoeren van het ASP.NET-werkproces (aspnet_wp.exe) SID: S-1-5-21-2576270098-3842992165-3927899635-1005 Disabled: False Local account: JACKY\Gast (Disabled: False) Caption: JACKY\Gast Name: Gast Domain: JACKY Description: Ingebouwde account voor gasttoegang op de computer of het domein SID: S-1-5-21-2576270098-3842992165-3927899635-501 Disabled: False Local account: JACKY\HelpAssistant (Disabled: True) Caption: JACKY\HelpAssistant Name: HelpAssistant Domain: JACKY Description: Account voor het leveren van hulp op afstand SID: S-1-5-21-2576270098-3842992165-3927899635-1006 Disabled: True Local account: JACKY\Mijn naam (Disabled: False) Caption: JACKY\Mijn naam Name: Mijn naam Domain: JACKY Description: SID: S-1-5-21-2576270098-3842992165-3927899635-1007 Disabled: False Local account: JACKY\SUPPORT_388945a0 (Disabled: True) Caption: JACKY\SUPPORT_388945a0 Name: SUPPORT_388945a0 Domain: JACKY Description: Dit is een leveranciersaccount voor de Service van Help en ondersteuning SID: S-1-5-21-2576270098-3842992165-3927899635-1002 Disabled: True Share: IPC$ (Externe IPC) Name: IPC$ Caption: Externe IPC Path: Type: IPC Admin Share: print$ (Printerstuurprogramma's) Name: print$ Caption: Printerstuurprogramma's Path: C:\WINDOWS\system32\spool\drivers Type: Disk Drive Share: HPF380 (HP Deskjet F300 series) Name: HPF380 Caption: HP Deskjet F300 series Path: HP Deskjet F300 series,LocalsplOnly Type: Print Queue System hotfix: KB835221WXP - High Definition Audio Driver Package - KB835221 System hotfix: KB936929 - Windows XP Service Pack 3 System hotfix: Q147222 - Startup: JACKY\Mijn naam: MSMSGS ("C:\Program Files\Messenger\msmsgs.exe" /background) Name: MSMSGS Command: "C:\Program Files\Messenger\msmsgs.exe" /background Location: HKU\S-1-5-21-2576270098-3842992165-3927899635-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: JACKY\Mijn naam Startup: JACKY\Mijn naam: NBJ ("C:\Program Files\Ahead\Nero BackItUp\nbj.exe") Name: NBJ Command: "C:\Program Files\Ahead\Nero BackItUp\nbj.exe" Location: HKU\S-1-5-21-2576270098-3842992165-3927899635-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: JACKY\Mijn naam Startup: JACKY\Mijn naam: ctfmon.exe (C:\WINDOWS\system32\ctfmon.exe) Name: ctfmon.exe Command: C:\WINDOWS\system32\ctfmon.exe Location: HKU\S-1-5-21-2576270098-3842992165-3927899635-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: JACKY\Mijn naam Startup: All Users: BlueSoleil (C:\PROGRA~1\IVTCOR~1\BLUESO~1\BLUESO~1.EXE) Name: BlueSoleil Command: C:\PROGRA~1\IVTCOR~1\BLUESO~1\BLUESO~1.EXE Location: Common Startup User: All Users Startup: All Users: HP Digital Imaging Monitor (C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe) Name: HP Digital Imaging Monitor Command: C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe Location: Common Startup User: All Users Startup: All Users: WinZip Quick Pick (C:\PROGRA~1\WinZip\WZQKPICK.EXE) Name: WinZip Quick Pick Command: C:\PROGRA~1\WinZip\WZQKPICK.EXE Location: Common Startup User: All Users Startup: All Users: NvCplDaemon (RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup) Name: NvCplDaemon Command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: nwiz (nwiz.exe /install) Name: nwiz Command: nwiz.exe /install Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: Snelkoppeling naar eigenschappenvenster voor High Definition Audio (HDAudPropShortcut.exe) Name: Snelkoppeling naar eigenschappenvenster voor High Definition Audio Command: HDAudPropShortcut.exe Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: AGRSMMSG (AGRSMMSG.exe) Name: AGRSMMSG Command: AGRSMMSG.exe Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: CHotkey (mHotkey.exe) Name: CHotkey Command: mHotkey.exe Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: ledpointer (CNYHKey.exe) Name: ledpointer Command: CNYHKey.exe Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: NeroFilterCheck (C:\WINDOWS\system32\NeroCheck.exe) Name: NeroFilterCheck Command: C:\WINDOWS\system32\NeroCheck.exe Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: PCMService ("C:\Program Files\Home Cinema\PowerCinema\PCMService.exe") Name: PCMService Command: "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe" Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: NvMediaCenter (RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit) Name: NvMediaCenter Command: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: Adobe Photo Downloader ("C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe") Name: Adobe Photo Downloader Command: "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: Norman ZANDA ("C:\Program Files\Norman\Npm\Bin\ZLH.EXE" /LOAD /SPLASH) Name: Norman ZANDA Command: "C:\Program Files\Norman\Npm\Bin\ZLH.EXE" /LOAD /SPLASH Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: NPCTray (C:\Program Files\Norman\npc\bin\npc_tray.exe /LOAD) Name: NPCTray Command: C:\Program Files\Norman\npc\bin\npc_tray.exe /LOAD Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users Startup: All Users: HP Software Update (C:\Program Files\HP\HP Software Update\HPWuSchd2.exe) Name: HP Software Update Command: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run User: All Users SOFTWARE ======== Abacus Airbus 380 for FS2004, Version: 1.00.0000 ActiveRadar Update v1.2, Version: 1.2.1 ActiveSky2004.5 Update, Version: 1.6.1931 ActiveSky2004, Version: 1.0.0002 Adobe Acrobat - Reader 6.0.2 Update, Version: 6.0.2 Adobe Acrobat 4.0, 5.0, Version: 5.0 Adobe Acrobat 4.0, Version: 4.0 Adobe Download Manager 2.0 (Remove Only), Version: 2.0 Adobe Flash Player 10 ActiveX, Version: 10.0.42.34 Adobe Reader 6.0.1 - Nederlands, Version: 006.000.001 Adobe® Photoshop® Album Starter Edition 3.0, Version: 3.00.000 aerosoft's - German Airports 3 - FS2004 aerosoft's - Girona 2005 - FS2004 aerosoft's - Monaco 2005 - FS2004 aerosoft's - Scenery Germany 2 - FS2004 aerosoft's - Scenery Germany 3 - FS2004 AGEIA PhysX v6.10.25, Version: 6.10.25 AI Traffic Mover, Version: 1.2.176 BB26008 Livrée en Voyage CCleaner, Version: 2.27 C-Media High Definition Audio Driver Creatix V.92 Data Fax Modem DeviceControl, Version: 1.00.0000 Direct Show Ogg Vorbis Filter (remove only) DivX Player, Version: 2.5.5 DivX Pro, Version: 5.2.1 EC SGMm Sprinter Encarta Encyclopedie Winkler Prins, Version: 2005 ESSO UAHS-Tankers Estación de GARCIA para Ruta Zaragoza-Mora MSTS (v 1.0) FlightRiviera BasePack Fokker F28 v1.1 UPDATE FSGenesis Europe 76.4m Terrain FSNavigator, Version: 4.7 Glacier Express Google Toolbar for Internet Explorer, Version: 1.0.0 High Definition Audio Driver Package - KB835221, Version: 20040219.000000 HighMAT-uitbreiding voor de wizard Cd branden van Microsoft Windows XP, Version: 1.1.1905.1 HijackThis 2.0.2, Version: 2.0.2 HM HMv_serie2 HP Imaging Device Functions 7.0, Version: 7.0 HP Photosmart Essential, Version: 1.9.1.3 HP Photosmart, Officejet and Deskjet 7.0.A HP Solution Center 7.0, Version: 7.0 Informatie over uw PC Java 2 Runtime Environment, SE v1.4.2_05, Version: 1.4.2_05 La Réunion LAGO Bologna Scenery 2.00, Version: 2.00.00 LAGO Florence Scenery FS2004 Version 1.00, Version: 1.00.00 LAGO Honolulu INTL Version 2.10, Version: 2.00.00 LAGO Male Scenery FS2004 2.00, Version: 2.00.00 LAGO Reggio Calabria version 2.00 for FS2004, Version: 2.00.00 LAGO Turin Scenery 1.51 for FS2004, Version: 1.51.00 LAGO Venice Scenery FS2004 Version 1.11, Version: 1.11.00 London City 2003 for FS2002 Macromedia Shockwave Player Malwarebytes' Anti-Malware Microsoft .NET Framework 2.0 Language Pack - NLD Microsoft .NET Framework 2.0 Microsoft AutoRoute 2005, Version: 12.00.07.1200 Microsoft Flight Simulator 2004 A Century of Flight, Version: 9.0 Microsoft Office PowerPoint Viewer 2007 (Dutch), Version: 12.0.4518.1017 Microsoft Photo Premium 10, Version: 10.0.0715 Microsoft Train Simulator Microsoft Windows Journal Viewer, Version: 1.5.2315.3 Microsoft Word 2002, Version: 10.0.6626.0, Product key: Microsoft Works 2005 Setup starten Microsoft Works Suite-invoegtoepassing Microsoft Word, Version: 8.0.0.0000 Microsoft Works, Version: 08.04.0702 MSN Messenger 6.2, Version: 6.2.0133 MSTS Patch 1.7.0519, Version: 1.7.051922 Nero Suite Norman Security Suite, Version: 7.10.1600 NVIDIA Drivers PFJ Fokker F28 v1 Project Canarias 2006, Version: 1.0.0 ProTrain Köln - Frankfurt 1.0 QD NS Railhopper V3.0 rail-trans_TE-4 RealPlayer Shockwave SN Brussels Airlines Avro RJ-85 SN Brussels airlines Boeing 747-400 Combi GE SpeedFan (remove only) STP DB ICE3 403 V1.0 STP DB ICE3 406 V1.0 Ultimate Terrain - Europe VMA s3000 Windows Back-up, Version: 5.1 Windows Media Connect, Version: 1.0.0.0 Windows Media Format Runtime Windows Media Player 10 Windows XP Service Pack 3, Version: 20080414.175804 WinRAR archiver WinZip, Version: 8.1 SR-1 (5266) X10 Hardware(TM) PROCESSES ========= AGRSMMSG.exe (C:\WINDOWS\AGRSMMSG.exe) alg.exe (C:\WINDOWS\System32\alg.exe) apdproxy.exe (C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe) BlueSoleil.exe (C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe) BTNtService.exe (C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe) CClaw.exe (C:\Program Files\Norman\Nvc\Bin\cclaw.exe) CNYHKey.exe (C:\WINDOWS\CNYHKey.exe) csrss.exe (C:\WINDOWS\system32\csrss.exe) ctfmon.exe (C:\WINDOWS\system32\ctfmon.exe) elogsvc.exe (C:\Program Files\Norman\Npm\Bin\Elogsvc.exe) explorer.exe (C:\WINDOWS\Explorer.EXE) freepcaudit.exe (C:\Documents and Settings\Mijn naam\Bureaublad\freepcaudit.exe) hpqste08.exe (C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe) hpqtra08.exe (C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe) hpwuSchd2.exe (C:\Program Files\HP\HP Software Update\HPWuSchd2.exe) locator.exe (C:\WINDOWS\system32\locator.exe) LogWatNT.exe (C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe) lsass.exe (C:\WINDOWS\system32\lsass.exe) mHotkey.exe (C:\WINDOWS\mHotkey.exe) msmsgs.exe (C:\Program Files\Messenger\msmsgs.exe) Nip.exe (C:\Program Files\Norman\Nvc\Bin\Nip.exe) Njeeves.exe (C:\Program Files\Norman\Npm\Bin\Njeeves.exe) npcsvc32.exe (C:\Program Files\Norman\npc\bin\npcsvc32.exe) npfsvc32.exe (C:\Program Files\Norman\npf\bin\npfsvc32.exe) npfuser.exe (C:\Program Files\Norman\npf\bin\npfuser.exe) nprosec.exe (C:\Program Files\Norman\Ngs\Bin\Nprosec.exe) Nsesvc.exe (C:\Program Files\Norman\Nse\Bin\NSESVC.EXE) nuaa.exe (C:\Program Files\Norman\npc\bin\nuaa.exe) Nvcoas.exe (C:\Program Files\Norman\Nvc\Bin\nvcoas.exe) nvoy.exe (C:\Program Files\Norman\npm\bin\nvoy.exe) nvsvc32.exe (C:\WINDOWS\system32\nvsvc32.exe) PCMService.exe (C:\Program Files\Home Cinema\PowerCinema\PCMService.exe) rundll32.exe (C:\WINDOWS\system32\rundll32.exe) rundll32.exe (C:\WINDOWS\system32\RUNDLL32.EXE) scardsvr.exe (C:\WINDOWS\System32\SCardSvr.exe) scheduler.exe (C:\Program Files\Norman\Npm\Bin\scheduler.exe) services.exe (C:\WINDOWS\system32\services.exe) smss.exe (C:\WINDOWS\System32\smss.exe) spoolsv.exe (C:\WINDOWS\system32\spoolsv.exe) svchost.exe (C:\WINDOWS\System32\svchost.exe) svchost.exe (C:\WINDOWS\system32\svchost.exe) svchost.exe (C:\WINDOWS\System32\svchost.exe) svchost.exe (C:\WINDOWS\system32\svchost.exe) svchost.exe (C:\WINDOWS\system32\svchost.exe) svchost.exe (C:\WINDOWS\system32\svchost.exe) svchost.exe (C:\WINDOWS\system32\svchost.exe) wdfmgr.exe (C:\WINDOWS\system32\wdfmgr.exe) winlogon.exe (C:\WINDOWS\system32\winlogon.exe) wmiprvse.exe (C:\WINDOWS\system32\wbem\wmiprvse.exe) wmiprvse.exe (C:\WINDOWS\system32\wbem\wmiprvse.exe) WZQKPICK.EXE (C:\Program Files\WinZip\WZQKPICK.EXE) X10nets.exe (C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe) Zanda.exe (C:\Program Files\Norman\Npm\Bin\Zanda.exe) Zlh.exe (C:\Program Files\Norman\Npm\Bin\ZLH.EXE)