Full Disclosure Report
Full Disclosure Report
Full Disclosure Report
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Windows Installer msiserver Stopped Manual Own Process<br />
c:\windows\system32\msiexec.exe /v Normal<br />
LocalSystem 0<br />
SQL Server (MSSQLSERVER) MSSQLSERVER Stopped Manual<br />
Own Process "c:\program files\microsoft sql<br />
server\mssql10_50.mssqlserver\mssql\binn\sqlservr.exe" -smssqlserver<br />
Normal LocalSystem 0<br />
SQL Active Directory Helper Service MSSQLServerADHelper100<br />
Stopped Disabled Own Process "c:\program<br />
files\microsoft sql server\100\shared\sqladhlp.exe" Normal NT<br />
AUTHORITY\NETWORKSERVICE 0<br />
Network Access Protection Agent napagent Stopped Manual<br />
Share Process c:\windows\system32\svchost.exe -k<br />
networkservice Normal NT AUTHORITY\NetworkService<br />
0<br />
Netlogon Netlogon Stopped Manual Share Process<br />
c:\windows\system32\lsass.exe Normal LocalSystem<br />
0<br />
Network Connections Netman Running Manual Share Process<br />
c:\windows\system32\svchost.exe -k<br />
localsystemnetworkrestricted Normal LocalSystem 0<br />
Network List Service netprofm Stopped Disabled Share Process<br />
c:\windows\system32\svchost.exe -k localservice Normal<br />
NT AUTHORITY\LocalService 0<br />
Net.Tcp Port Sharing Service NetTcpPortSharing Stopped Disabled<br />
Share Process<br />
"c:\windows\microsoft.net\framework64\v3.0\windows<br />
communication foundation\smsvchost.exe" Normal NT<br />
AUTHORITY\LocalService 0<br />
Network Location Awareness NlaSvc Stopped Disabled Share<br />
Process c:\windows\system32\svchost.exe -k networkservice Normal<br />
NT AUTHORITY\NetworkService 0<br />
Network Store Interface Service nsi Running Auto Share<br />
Process c:\windows\system32\svchost.exe -k localservice Normal<br />
NT Authority\LocalService 0<br />
Performance Counter DLL Host PerfHost Stopped Manual Own<br />
Process c:\windows\syswow64\perfhost.exe Normal NT<br />
AUTHORITY\LocalService 0<br />
Performance Logs & Alerts pla Stopped Manual Share<br />
Process c:\windows\system32\svchost.exe -k localservicenonetwork<br />
Normal NT AUTHORITY\LocalService 0<br />
Plug and Play PlugPlay Running Auto Share Process<br />
c:\windows\system32\svchost.exe -k dcomlaunch Normal<br />
LocalSystem 0<br />
IPsec Policy Agent PolicyAgent Stopped Auto Share<br />
Process c:\windows\system32\svchost.exe -k<br />
networkservicenetworkrestricted Normal NT Authority\NetworkService<br />
0<br />
Power Power Running Auto Share Process<br />
c:\windows\system32\svchost.exe -k dcomlaunch Normal<br />
LocalSystem 0<br />
User Profile Service ProfSvc Running Auto Share Process<br />
c:\windows\system32\svchost.exe -k netsvcs Normal<br />
LocalSystem 0<br />
HP ProLiant Health Monitor Service ProLiantMonitor Running<br />
Auto Share Process "c:\program files\hewlettpackard\ilo<br />
3\service\proliantmonitor.exe" Normal LocalSystem<br />
0<br />
Protected Storage ProtectedStorage Stopped Manual Share<br />
Process c:\windows\system32\lsass.exe Normal LocalSystem<br />
0<br />
Remote Access Auto Connection Manager RasAuto Stopped Manual<br />
Share Process c:\windows\system32\svchost.exe -k<br />
netsvcs Normal localSystem 0<br />
Remote Access Connection Manager RasMan Stopped Manual<br />
Share Process c:\windows\system32\svchost.exe -k<br />
netsvcs Normal localSystem 0<br />
Routing and Remote Access RemoteAccess Stopped Disabled<br />
Share Process c:\windows\system32\svchost.exe -k<br />
netsvcs Normal localSystem 0<br />
Remote Registry RemoteRegistry Stopped Disabled Share<br />
Process c:\windows\system32\svchost.exe -k regsvc Normal NT<br />
AUTHORITY\LocalService 0<br />
RPC Endpoint Mapper RpcEptMapper Running Auto<br />
Share Process c:\windows\system32\svchost.exe -k rpcss<br />
Normal NT AUTHORITY\NetworkService 0<br />
Remote Procedure Call (RPC) Locator RpcLocator Stopped<br />
Manual Own Process<br />
c:\windows\system32\locator.exe Normal NT<br />
AUTHORITY\NetworkService 0<br />
Remote Procedure Call (RPC) RpcSs Running Auto Share<br />
Process c:\windows\system32\svchost.exe -k rpcss Normal NT<br />
AUTHORITY\NetworkService 0<br />
Resultant Set of Policy Provider RSoPProv Stopped Manual Share<br />
Process c:\windows\system32\rsopprov.exe Normal<br />
LocalSystem 0<br />
Special Administration Console Helper sacsvr Stopped Manual<br />
Share Process c:\windows\system32\svchost.exe -k<br />
netsvcs Normal LocalSystem 0<br />
Security Accounts Manager SamSs Running Auto Share<br />
Process c:\windows\system32\lsass.exe Normal LocalSystem<br />
0<br />
Smart Card SCardSvr Stopped Manual Share Process<br />
c:\windows\system32\svchost.exe -k<br />
localserviceandnoimpersonation Normal NT AUTHORITY\LocalService<br />
0<br />
Task Scheduler Schedule Running Auto Share Process<br />
c:\windows\system32\svchost.exe -k netsvcs Normal<br />
LocalSystem 0<br />
Smart Card Removal Policy SCPolicySvc Stopped Manual<br />
Share Process c:\windows\system32\svchost.exe -k<br />
netsvcs Normal LocalSystem 0<br />
Secondary Logon seclogon Stopped Manual Share Process<br />
c:\windows\system32\svchost.exe -k netsvcs Normal<br />
LocalSystem 0<br />
System Event Notification Service SENS Running Auto<br />
Share Process c:\windows\system32\svchost.exe -k<br />
netsvcs Normal LocalSystem 0<br />
Remote Desktop Configuration SessionEnv Running Manual<br />
Share Process c:\windows\system32\svchost.exe -k<br />
netsvcs Normal localSystem 0<br />
Internet Connection Sharing (ICS) SharedAccess Stopped<br />
Disabled Share Process<br />
c:\windows\system32\svchost.exe -k netsvcs Normal<br />
LocalSystem 0<br />
Shell Hardware Detection ShellHWDetection Running Auto<br />
Share Process c:\windows\system32\svchost.exe -k<br />
netsvcs Ignore LocalSystem 0<br />
SNMP Trap SNMPTRAP Stopped Manual Own<br />
Process c:\windows\system32\snmptrap.exe Normal NT<br />
AUTHORITY\LocalService 0<br />
Print Spooler Spooler Stopped Disabled Own Process<br />
c:\windows\system32\spoolsv.exe Normal<br />
LocalSystem 0<br />
Software Protection sppsvc Running Manual Own Process<br />
c:\windows\system32\sppsvc.exe Normal NT<br />
AUTHORITY\NetworkService 0<br />
SPP Notification Service sppuinotify Stopped Disabled<br />
Share Process c:\windows\system32\svchost.exe -k<br />
localservice Normal NT AUTHORITY\LocalService 0<br />
SQL Server Browser SQLBrowser Stopped Disabled Own<br />
Process "c:\program files (x86)\microsoft sql<br />
server\90\shared\sqlbrowser.exe" Normal NT<br />
AUTHORITY\LOCALSERVICE 0<br />
HP TPC-H FULL DISCLOSURE REPORT 61 July, 2010<br />
© 2010 Hewlett-Packard Company. All rights reserved.
Change language