1 2 1 2 1 2 2 2 2 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 2 2 2 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 2 2 2 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 1 2 2 2 0723000000000000000000000000000000000000000000000000000000000000 0 0723000000000000000000000000000000000000000000000000000000000000 0 0723000000000000000000000000000000000000000000000000000000000000 0 1 1 1 true true true true %SystemRoot%\System32\svchost.exe -k termsvcs true %SystemRoot%\System32\svchost.exe -k termsvcs true %SystemRoot%\System32\svchost.exe -k termsvcs 3 3 3 2 2 2 102 111 116 29 95 122 102 111 116 29 95 122 102 111 116 29 95 122 100 3 100 3 100 3 4 4 4 4 4 4 4 4 4 1 1 1 true true true true true true true true true true true true true true true true true true true true true true true true true true true true true true 3 true 1 3 true 1 3 true 1 System Reserved EMS WdfLoadGroup Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Virtualization FSFilter Encryption FSFilter Compression FSFilter Imaging FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Streams Drivers NDIS Wrapper COM Infrastructure Event Log ProfSvc_Group UIGroup PlugPlay Cryptography PNP_TDI NDIS TDI iSCSI NetBIOSGroup ShellSvcGroup SchedulerGroup AudioGroup SmartCardGroup NetworkProvider MS_WindowsRemoteValidation MS_WindowsLocalValidation SpoolerGroup NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions System Reserved EMS WdfLoadGroup Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Virtualization FSFilter Encryption FSFilter Compression FSFilter Imaging FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Streams Drivers NDIS Wrapper COM Infrastructure Event Log ProfSvc_Group UIGroup PlugPlay Cryptography PNP_TDI NDIS TDI iSCSI NetBIOSGroup ShellSvcGroup SchedulerGroup AudioGroup SmartCardGroup NetworkProvider MS_WindowsRemoteValidation MS_WindowsLocalValidation SpoolerGroup NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions System Reserved EMS WdfLoadGroup Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Virtualization FSFilter Encryption FSFilter Compression FSFilter Imaging FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Streams Drivers NDIS Wrapper COM Infrastructure Event Log ProfSvc_Group UIGroup PlugPlay Cryptography PNP_TDI NDIS TDI iSCSI NetBIOSGroup ShellSvcGroup SchedulerGroup AudioGroup SmartCardGroup NetworkProvider MS_WindowsRemoteValidation MS_WindowsLocalValidation SpoolerGroup NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions 010004807400000084000000000000001400000002006000040000000000140007000000010100000000000100000000000014000700000001010000000000050700000000001800070000000102000000000005200000003202000000001800070000000102000000000005200000002f0200000102000000000005200000002002000001020000000000052000000020020000 010004807400000084000000000000001400000002006000040000000000140007000000010100000000000100000000000014000700000001010000000000050700000000001800070000000102000000000005200000003202000000001800070000000102000000000005200000002f0200000102000000000005200000002002000001020000000000052000000020020000 010004807400000084000000000000001400000002006000040000000000140007000000010100000000000100000000000014000700000001010000000000050700000000001800070000000102000000000005200000003202000000001800070000000102000000000005200000002f0200000102000000000005200000002002000001020000000000052000000020020000 0 0 0 4 4 4 4 4 4 4 4 4 3 3 3 3 3 3 3 3 3 2 2 2 2 2 2 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 1 3 0 3 3 3 1 3 3 1 3 3 1 1 0 0 3 3 1 65536 3 3 3 3 3 3 0 3 3 3 3 3 3 3 3 3 3 0 3 3 3 0 3 73728 73728 73728 67 67 66816 0 0 0 0 1 1 no no no 1 1 0 1 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 1 3 0 3 3 3 1 3 3 1 3 3 1 1 0 0 3 3 1 65536 3 3 3 3 3 3 0 3 3 3 3 3 3 3 3 3 3 0 3 3 3 0 3 73728 73728 73728 67 67 66816 0 0 0 0 1 1 no no no 1 1 0 1 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 1 3 0 3 3 3 1 3 3 1 3 3 1 1 0 0 3 3 1 65536 3 3 3 3 3 3 0 3 3 3 3 3 3 3 3 3 3 0 3 3 3 0 3 73728 73728 73728 67 67 66816 0 0 0 0 1 1 no no no 1 1 0 1 %SystemRoot%\system32\wbadmin.msc %SystemRoot%\system32\wbadmin.msc %SystemRoot%\system32\wbadmin.msc -1,2 -1,2 -1,2