Using wireshark, i've seen the traffic even with all my ports closed. Last night, i saw traffic moving even with my router disconnected. They are multicast packets and are likely using my phone as the router. i finally shut down all the traffic but i had to use a linux box to "ifconfig <interface> down" but if i waited long enough, my eth0 would come back up all on its own... dont' think that's normal either. here are the results of
COMMAND LINE "wmic /dcomapp"
notice all the "virtual" ,"remote" and "proxy" that again, without a baseline am not sure if that's normal, but with everything else going on I'm leaning towards them being at the root of my issues.
AppID Caption Description InstallDate Name Status
{00021401-0000-0000-C000-000000000046}
{000C101C-0000-0000-C000-000000000046}
{0010890e-8789-413c-adbc-48f5b511b3af} User Notification User Notification User Notification
{0018752E-7735-4B30-9DA9-4A01F024F270} hpqwmiex hpqwmiex hpqwmiex
{00f22b16-589e-4982-a172-a51d9dcceb68} PhotoAcquire PhotoAcquire PhotoAcquire
{00f2b433-44e4-4d88-b2b0-2698a0a91dba} PhotoAcqHWEventHandler PhotoAcqHWEventHandler PhotoAcqHWEventHandler
{01419581-4d63-4d43-ac26-6e2fc976c1f3} TabTip TabTip TabTip
{01A39A4B-90E2-4EDF-8A1C-DD9E5F526568}
{03837503-098b-11d8-9414-505054503030} PLA PLA PLA
{03e15b2e-cca6-451c-8fb0-1e2ee37a27dd} CTapiLuaLib Class CTapiLuaLib Class CTapiLuaLib Class
{03e64e17-b220-4052-9b9b-155f9cb8e016} WinStore OM WinStore OM WinStore OM
{06622D85-6856-4460-8DE1-A81921B41C4B} COpenControlPanel COpenControlPanel COpenControlPanel
{0671E064-7C24-4AC0-AF10-0F3055707C32} SMLUA SMLUA SMLUA
{06C792F8-6212-4F39-BF70-E8C0AC965C23} %systemroot%\System32\UserAccountControlSettings.dll %systemroot%\System32\UserAccountControlSettings.dll %systemroot%\System32\UserAccountControlSettings.dll
{0868DC9B-D9A2-4f64-9362-133CEA201299} sppui sppui sppui
{08F646B3-5E7F-4B7A-A5CB-F95445F9F67A} WIA Extension Host for 64 bit extensions WIA Extension Host for 64 bit extensions WIA Extension Host for 64 bit extensions
{08FC06E4-C6B5-40BE-97B0-B80F943C615B} Proximity Sharing Proximity Sharing Proximity Sharing
{0968e258-16c7-4dba-aa86-462dd61e31a3} PersistentZoneIdentifier PersistentZoneIdentifier PersistentZoneIdentifier
{09C5C2B5-1D32-4598-B87E-203F32BB08E3} Windows Media Player Rich Preview Handler Windows Media Player Rich Preview Handler Windows Media Player Rich Preview Handler
{0A886F29-465A-4aea-8B8E-BE926BFAE83E}
{0B15AFD8-3A99-4A6E-9975-30D66F70BD94} AxInstSv AxInstSv AxInstSv
{0C00D6E0-078D-4275-8110-4336695AA586} Import Duplicate Detection Manager Import Duplicate Detection Manager Import Duplicate Detection Manager
{0C3B05FB-3498-40C3-9C03-4B22D735550C} RASDLGLUA RASDLGLUA RASDLGLUA
{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}
{0da7bfdf-c0a0-44eb-be82-b7a82c4721de} %SystemRoot%\system32\appwiz.cpl %SystemRoot%\system32\appwiz.cpl %SystemRoot%\system32\appwiz.cpl
{0FFE56BF-2994-42C1-81F6-C58F05825C98} HpDataProtection HpDataProtection HpDataProtection
{11AC3232-E7D7-49CD-ABFE-501700100B3A} IntelCpHeciSvc IntelCpHeciSvc IntelCpHeciSvc
{11c058e0-9f3e-4c90-a459-2553f2f9e011} Vista Elevated Windows Update Web Control Vista Elevated Windows Update Web Control Vista Elevated Windows Update Web Control
{1202DB60-1DAC-42C5-AED5-1ABDD432248E} Sync Center Client Sync Center Client Sync Center Client
{12C21EA7-2EB8-4B55-9249-AC243DA8C666} Virtual Factory for DiagCpl Virtual Factory for DiagCpl Virtual Factory for DiagCpl
{133eac4f-5891-4d04-bada-d84870380a80} Shell Create Object Task Server Shell Create Object Task Server Shell Create Object Task Server
{135fd325-45b7-4c30-89f8-4386961669f0} Shell Create Object Handler Shell Create Object Handler Shell Create Object Handler
{136A0DC7-DF5C-4271-A2AC-15DF1A1323F2}
{145B4335-FE2A-4927-A040-7C35AD3180EF}
{150F28F1-49A5-4C28-BE1A-CFA854A1D04B} TPM Virtual Smart Card VCard Module Manager TPM Virtual Smart Card VCard Module Manager TPM Virtual Smart Card VCard Module Manager
{152EA2A8-70DC-4C59-8B2A-32AA3CA0DCAC} Remote TPM Virtual Smart Card Manager Remote TPM Virtual Smart Card Manager Remote TPM Virtual Smart Card Manager
{15533488-4A86-4DDA-B82C-DF60F640ADF4}
{16A18E86-7F6E-4C20-AD89-4FFC0DB7A96A} TPM Virtual Smart Card Manager TPM Virtual Smart Card Manager TPM Virtual Smart Card Manager
{18210155-49CD-444C-B582-FA9DE415B89F} lfsvc lfsvc lfsvc
{19833350-BF9B-42A1-BDF0-BD1FCBE1FD31} Immersive TPM Virtual Smart Card Manager Immersive TPM Virtual Smart Card Manager Immersive TPM Virtual Smart Card Manager
{19BCA967-D266-436f-B2D4-CBE4D4B42F96}
{1A1F4206-0688-4E7F-BE03-D82EC69DF9A5} Sync Center Control Sync Center Control Sync Center Control
{1AC32B1A-E379-4CAD-B655-F978A30856EC} GIDS Smart Card Simulator Manager GIDS Smart Card Simulator Manager GIDS Smart Card Simulator Manager
{1BA783C1-2A30-4ad3-B928-A9A46C604C28}
{1BE1F766-5536-11D1-B726-00C04FB926AF}
{1C749B87-568C-4865-8E73-6413F8372CE6} %systemroot%\system32\lpksetup.exe %systemroot%\system32\lpksetup.exe %systemroot%\system32\lpksetup.exe
{1f2e5c40-9550-11ce-99d2-00aa006e086c} rshx32.dll rshx32.dll rshx32.dll
{1F7D1BE9-7A50-40B6-A605-C4F3696F49C0} ThirdPartyEapDispatcherPeerConfig ThirdPartyEapDispatcherPeerConfig ThirdPartyEapDispatcherPeerConfig
{1F87137D-0E7C-44d5-8C73-4EFFB68962F2} Microsoft WMI Provider Subsystem Secured Host Microsoft WMI Provider Subsystem Secured Host Microsoft WMI Provider Subsystem Secured Host
{1fb2a002-4c6c-4de7-85c2-cb8db9a4f728}
{1fda955b-61ff-11da-978c-0008744faab7} DetectionAndSharing DetectionAndSharing DetectionAndSharing
{205609B7-5E08-443E-B0A7-A7AED3F3A717} Microsoft Software Protection Platform Admin Object (Inner) Microsoft Software Protection Platform Admin Object (Inner) Microsoft Software Protection Platform Admin Object (Inner)
{209444d2-2540-495e-962c-a61ad3243526} Microsoft Windows WSMan Provider Host With User Settings Microsoft Windows WSMan Provider Host With User Settings Microsoft Windows WSMan Provider Host With User Settings
{217700E0-0000-11DF-ADB9-F4CE462D9137} Provisioning Core Provisioning Core Provisioning Core
{2206CDB0-19C1-11D1-89E0-00C04FD7A829} MSDAINITIALIZE MSDAINITIALIZE MSDAINITIALIZE
{266C72E7-62E8-11D1-AD89-00C04FD8FDFF} Microsoft WBEM Active Scripting Event Consumer Provider Microsoft WBEM Active Scripting Event Consumer Provider Microsoft WBEM Active Scripting Event Consumer Provider
{27170d71-7a40-4c8b-a3d1-64f7cbe81c66}
{273541FF-7F64-5B0F-8F00-5D77AFBE261E} IMAPI2 IMAPI2 IMAPI2
{27550CA0-E9DE-4186-A566-37A59BB6CA69} WInRTDesktopBroker WInRTDesktopBroker WInRTDesktopBroker
{278A87E1-1BC2-4E19-82E9-8BBE31D67D20}
{27AF75ED-20D9-11D1-B1CE-00805FC1270E} netman netman netman
{292bed96-e9ce-40f8-b71b-c313defa3a78} RasMobilityManager RasMobilityManager RasMobilityManager
{2C256447-3F0D-4CBB-9D12-575BB20CDA0A} faultrep.dll faultrep.dll faultrep.dll
{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}
{2C941FD1-975B-59BE-A960-9A2A262853A5} FileSystemImage FileSystemImage FileSystemImage
{2CD19B3E-3897-4EAB-9AC6-B1438F520CA1} WinStore OM WinStore OM WinStore OM
{2F76FDA4-6EA4-49E3-991B-E637A144480A}
{2F93C02D-77F9-46B4-95FB-8CBB81EEB62C} DevicesFlow DevicesFlow DevicesFlow
{2FD08A73-D1F1-43EB-B888-24C2496F95FD} Immersive Shell Broker Immersive Shell Broker Immersive Shell Broker
{304CE942-6E39-40D8-943A-B913C40C9CD4}
{30d49246-d217-465f-b00b-ac9ddd652eb7} Identity Store Identity Store Identity Store
{31337EC7-5767-11CF-BEAB-00AA006C3606} AuthHost AuthHost AuthHost
{316CDED5-E4AE-4B15-9113-7055D84DCC97} Immersive Shell Immersive Shell Immersive Shell
{35b1d3bb-2d4e-4a7c-9af0-f2f677af7c30}
{362cc086-4d81-4824-bbb5-666d34b3197d} Windows Push Notification Platform Windows Push Notification Platform Windows Push Notification Platform
{36938566-B1AA-4E77-9B3F-730CF4E996AB} TabTip TabTip TabTip
{375ff002-dd27-11d9-8f9c-0002b3988e81}
{37B73D7B-A976-43AE-97E4-BD4977B241F2} Microsoft Portable Workspace Launcher Microsoft Portable Workspace Launcher Microsoft Portable Workspace Launcher
{3ad05575-8857-4850-9277-11b85bdb8e09}
{3C3F40BC-60EB-4567-B90C-480C87C21AC1} WorkspacePolicyProcessor WorkspacePolicyProcessor WorkspacePolicyProcessor
{3E000D72-A845-4CD9-BD83-80C07C3B881F} CMLUAUTIL CMLUAUTIL CMLUAUTIL
{3e5ca495-8d6a-4d1f-ad99-177b426c8b8e} Microsoft Windows Remote Shell Host Microsoft Windows Remote Shell Host Microsoft Windows Remote Shell Host
{3E5FC7F9-9A51-4367-9063-A120244FBEC7} CMSTPLUA CMSTPLUA CMSTPLUA
{3eb3c877-1f16-487c-9050-104dbcd66683} WinInetCacheServer WinInetCacheServer WinInetCacheServer
{3eef301f-b596-4c0b-bd92-013beafce793}
{3F4D7BB8-4F38-4526-8CD3-C44D68689C5F}
{3F5E4B87-C907-4f76-82E4-6FDF0CE90E25} Out Of Proc Mapi Handler Out Of Proc Mapi Handler Out Of Proc Mapi Handler
{3feb2f63-0eec-4b96-84ab-da1307e0117c} Microsoft Windows WSMan Provider Host Microsoft Windows WSMan Provider Host Microsoft Windows WSMan Provider Host
{40AEEAB6-8FDA-41e3-9A5F-8350D4CFCA91} HTML Application HTML Application HTML Application
{40AFA0B6-3B2F-4654-8C3F-161DE85CF80E} Connected User Store Connected User Store Connected User Store
{434A6274-C539-4E99-88FC-44206D942775} AccessibilityCplAdmin AccessibilityCplAdmin AccessibilityCplAdmin
{44831FEC-DC51-4716-A7E1-E898FDF83C85} SPP External COM Object SPP External COM Object SPP External COM Object
{4545dea0-2dfc-4906-a728-6d986ba399a9} Thumbnail Extraction Host Class Thumbnail Extraction Host Class Thumbnail Extraction Host Class
{45597c98-80f6-4549-84ff-752cf55e2d29} Add to Windows Media Player list Add to Windows Media Player list Add to Windows Media Player list
{45BA127D-10A8-46EA-8AB7-56EA9078943C} Application Activation Manager Application Activation Manager Application Activation Manager
{46298684-0fd3-47f3-94b3-65650c65b36a} Health Key and Certificate Management Health Key and Certificate Management Health Key and Certificate Management
{46B988E8-BEC2-401F-A1C5-16C694F26D3E} Set Network Location Elevated Virtual Factory Set Network Location Elevated Virtual Factory Set Network Location Elevated Virtual Factory
{46C166AA-3108-11D4-9348-00C04F8EEB71}
{478B41E6-3257-4519-BDA8-E971F9843849} RadioManagement Lib Class RadioManagement Lib Class RadioManagement Lib Class
{48da6741-1bf0-4a44-8325-293086c79077} IASDataStoreComServer IASDataStoreComServer IASDataStoreComServer
{49BD2028-1523-11D1-AD79-00C04FD8FDFF} Microsoft WBEM Unsecured Apartment Microsoft WBEM Unsecured Apartment Microsoft WBEM Unsecured Apartment
{49f171dd-b51a-40d3-9a6c-52d674cc729d} UIAutomationCrossBitnessHook64 Class UIAutomationCrossBitnessHook64 Class UIAutomationCrossBitnessHook64 Class
{4A0F9AA8-A71E-4CC3-891B-76CAC67E67C0}
{4A3F2F56-454A-4CC5-9734-BB7D8141AC0A} Virtual Factory for Languages Configuration Virtual Factory for Languages Configuration Virtual Factory for Languages Configuration
{4A6B8BAD-9872-4525-A812-71A52367DC17} RASGCWLUA RASGCWLUA RASGCWLUA
{4BC67F23-D805-4384-BCA3-6F1EDFF50E2C} wercplsupport.dll wercplsupport.dll wercplsupport.dll
{4D111E08-CBF7-4f12-A926-2C7920AF52FC} Shell Security Editor Shell Security Editor Shell Security Editor
{4db9c793-c48d-449c-9754-46027ee45c94} Microsoft Volume Shadow Copy Service software provider Microsoft Volume Shadow Copy Service software provider Microsoft Volume Shadow Copy Service software provider
{4E14FBA2-2E22-11D1-9964-00C04FBBB345} COM+ Event System COM+ Event System COM+ Event System
{4EB61BAC-A3B6-4760-9581-655041EF4D69} ServiceModule ServiceModule ServiceModule
{4F0AC159-5804-4aa7-AE91-117D6E67BB9B} upnpcont.exe upnpcont.exe upnpcont.exe
{4f6bcd94-c2a5-42ce-8dbc-31e794be4630} Shell Computer Accounts Shell Computer Accounts Shell Computer Accounts
{4FCDA643-B15B-41C6-84F8-5E447F6F6D25} WkspRT.exe WkspRT.exe WkspRT.exe
{50a9ab2a-20f8-4d71-9f32-9fd305b49601} HomeGroup CPL Advanced Settings Writer HomeGroup CPL Advanced Settings Writer HomeGroup CPL Advanced Settings Writer
{50d69d24-961d-4828-9d1c-5f4717f226d1} Microsoft Windows Font Folder Microsoft Windows Font Folder Microsoft Windows Font Folder
{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8} acppage.dll acppage.dll acppage.dll
{514B5E31-5596-422F-BE58-D804464683B5} %systemroot%\system32\intl.cpl %systemroot%\system32\intl.cpl %systemroot%\system32\intl.cpl
{515980c3-57fe-4c1e-a561-730dd256ab98}
{51a1467f-96a2-4b1c-9632-4b4d950fe216}
{52551A19-B337-498d-AE75-2283E29902DE} Offline Files Service Offline Files Service Offline Files Service
{52FC5917-F4E4-4C78-B469-20E722379F6C} FsrmPropertiesPropSheet FsrmPropertiesPropSheet FsrmPropertiesPropSheet
{53362C32-A296-4F2D-A2F8-FD984D08340B} RemoteProxyFactory32 Class RemoteProxyFactory32 Class RemoteProxyFactory32 Class
{53362C64-A296-4F2D-A2F8-FD984D08340B} RemoteProxyFactory32 Class RemoteProxyFactory32 Class RemoteProxyFactory32 Class
{534A1E02-D58F-44f0-B58B-36CBED287C7C} 32-bit Preview Handler Surrogate Host 32-bit Preview Handler Surrogate Host 32-bit Preview Handler Surrogate Host
{5364ED0E-493F-4B16-9DBF-AE486CF22660} Virtual Disk Service Loader Virtual Disk Service Loader Virtual Disk Service Loader
{536AACFB-5238-4314-B4D4-5B0A2E8B968E} LockScreenContentServer Out of Proc Helper for LockScreenContent Clients LockScreenContentServer Out of Proc Helper for LockScreenContent Clients LockScreenContentServer Out of Proc Helper for LockScreenContent Clients
{545C8D56-7A88-492D-B38D-559657A3DD4C} UNS UNS UNS
{549e57e9-b362-49d1-b679-b64d510efe4b} ShareFlow ShareFlow ShareFlow
{56676660-4A4D-45B0-B24E-9CF6B35E9ABF} ShapeCollector ShapeCollector ShapeCollector
{56BE716B-2F76-4dfa-8702-67AE10044F0B} Volume Shadow Copy Service Volume Shadow Copy Service Volume Shadow Copy Service
{577289b6-6e75-11df-86f8-18a905160fe0}
{588E10FA-0618-48A1-BE2F-0AD93E899FCC} PrintNotify PrintNotify PrintNotify
{59347292-B72D-41F2-98C5-E9ACA1B247A2} FaxCommon Class FaxCommon Class FaxCommon Class
{59c7f6ec-7d18-412f-a68e-877982768e61} Authentication UI Terminal Services Bump Dialog Authentication UI Terminal Services Bump Dialog Authentication UI Terminal Services Bump Dialog
{5AAABB05-F91B-4bce-AB18-D8319DEDABA8}
{5C797117-3B23-4549-A6D8-475AB3B62228} PrintBrmEngine PrintBrmEngine PrintBrmEngine
{5C917E9C-0B2F-40D6-928B-5C43FDB16DF4} %SystemRoot%\System32\wsclient.dll %SystemRoot%\System32\wsclient.dll %SystemRoot%\System32\wsclient.dll
{5E1395B2-B685-44e3-8AED-E2304D85ACD1} WiaWow64 WiaWow64 WiaWow64
{5E9173B5-AFE3-45D2-902D-3FB991CFCADD} CLWFLService CLWFLService CLWFLService
{5EAD00DC-0E8B-497C-BDE8-B9153058CBEF} Splash screen Splash screen Splash screen
{60173D16-A550-47f0-A14B-C6F9E4DA0831}
{60a90a2f-858d-42af-8929-82be9d99e8a1} UIAutomationCrossBitnessHook32 Class UIAutomationCrossBitnessHook32 Class UIAutomationCrossBitnessHook32 Class
{6236FF8C-E747-4173-86D3-99F511B61DF3} PDFPrevHndlr PDFPrevHndlr PDFPrevHndlr
{623D5F5E-2F09-427d-8BD7-64495CD9835D} wlidcli wlidcli wlidcli
{6295DF2D-35EE-11D1-8707-00C04FD93327} Sync Center (Private) Sync Center (Private) Sync Center (Private)
{62D2FBE4-89F7-48A5-A35F-DA2B8A3C54B7} StartMenuHelper StartMenuHelper StartMenuHelper
{63A53A38-004F-489B-BD61-96B5EEFADC04}
{63CE6D27-426A-41F9-8E51-549C1132DAE2} PenIMC2 PenIMC2 PenIMC2
{642ef9d6-48a5-476b-919a-a507cfd02c0f}
{653C5148-4DCE-4905-9CFD-1B23662D3D9E} Windows Update Agent Windows Update Agent Windows Update Agent
{6571503D-D0FB-4D98-BBC3-1FBB2B3F344E} FwCplLUA FwCplLUA FwCplLUA
{65843E27-A491-429F-84A0-30A947E20F92} ClassicExplorer ClassicExplorer ClassicExplorer
{66eea0f5-001a-4073-a496-783f86fcf4c0}
{69AD4AEE-51BE-439b-A92C-86AE490E8B30} Background Intelligent Transfer Service Background Intelligent Transfer Service Background Intelligent Transfer Service
{69F9CB25-25E2-4BE1-AB8F-07AA7CB535E8} Sync Center Isolation Collection (Private) Sync Center Isolation Collection (Private) Sync Center Isolation Collection (Private)
{6B1DE8B3-DFB1-4C0E-9D9A-89CA730DE93F} MsRdpSessionManager MsRdpSessionManager MsRdpSessionManager
{6c482a9c-033d-45fe-a01c-9722ef35e255} Activator Activator Activator
{6CE51F75-0448-438e-B9CA-69C352A248A7} Sensors CPL Change Device Permission LUA Helper Sensors CPL Change Device Permission LUA Helper Sensors CPL Change Device Permission LUA Helper
{6CF9B800-50DB-46B5-9218-EACF07F5E414}
{6d2b5079-2f0b-48dd-ab7f-97cec514d30b} Preview Handler Surrogate Host Preview Handler Surrogate Host Preview Handler Surrogate Host
{6d8ff8e0-730d-11d4-bf42-00b0d0118b56} UPnPContainer UPnPContainer UPnPContainer
{6d8ff8e8-730d-11d4-bf42-00b0d0118b56} UPnPContainer64 UPnPContainer64 UPnPContainer64
{6D9A7A40-DDCA-414E-B48E-DFB032C03C1B} SPPComApi SPPComApi SPPComApi
{6f33340d-8a01-473a-b75f-ded88c8360ce} HomeGroup UI Status HomeGroup UI Status HomeGroup UI Status
{6f5bad87-9d5e-459f-bd03-3957407051ca} IEWindows IEWindows IEWindows
{6F7C8E8F-DC69-4e3f-BC05-439962A05FD5} HomeGroup Provider Object HomeGroup Provider Object HomeGroup Provider Object
{7007ACC5-3202-11D1-AAD2-00805FC1270E}
{7007ACD1-3202-11D1-AAD2-00805FC1270E}
{712cedb9-16a4-4f79-801d-7de24d8c706e} workfolderssvc workfolderssvc workfolderssvc
{722b3793-5367-4446-b6bb-db89b05c1f24}
{72A7994A-3092-4054-B6BE-08FF81AEEFFC} Sharing Elevated Virtual Factory Sharing Elevated Virtual Factory Sharing Elevated Virtual Factory
{72E3272B-4EEA-4104-B358-1A282E4FC1AD} User Profile Service DCOM server User Profile Service DCOM server User Profile Service DCOM server
{72F8681D-D893-46a1-A3C4-CEC073EF3EC5} GeofenceServerSimulator GeofenceServerSimulator GeofenceServerSimulator
{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4} Microsoft WMI Provider Subsystem Host Microsoft WMI Provider Subsystem Host Microsoft WMI Provider Subsystem Host
{752073A2-23F2-4396-85F0-8FDB879ED0ED} Trusted Installer Service Trusted Installer Service Trusted Installer Service
{7568952A-571E-4C70-BEA9-7F9004393436} PenIMC4 PenIMC4 PenIMC4
{7649f23b-5a5e-4e2a-ba1e-fdeecb94ed83} Bulk File Operations Manager Bulk File Operations Manager Bulk File Operations Manager
{76be8257-c4c0-4d37-90c0-a23372254d27}
{76D0CB12-7604-4048-B83C-1005C7DDC503}
{76db1bf3-e820-4765-a1b2-0b16a86b1950} PrintFilterPipelineSvc PrintFilterPipelineSvc PrintFilterPipelineSvc
{777BA81A-2498-4875-933A-3067DE883070} XWizard Virtual Factory XWizard Virtual Factory XWizard Virtual Factory
{77AB4812-5411-4EA9-8437-77AD0F230302} AcroIEHelperShim AcroIEHelperShim AcroIEHelperShim
{7A076CE1-4B31-452a-A4F1-0304C8738100} Network and Sharing Center Cpl Elevated Virtual Factory Network and Sharing Center Cpl Elevated Virtual Factory Network and Sharing Center Cpl Elevated Virtual Factory
{7aa7790d-75d7-484b-98a1-3913d022091d} Shell FMIFS Wrapper Shell FMIFS Wrapper Shell FMIFS Wrapper
{7B130458-E09C-4823-A8AF-2583DCD9AEC7} EapThirdPartyDllHost EapThirdPartyDllHost EapThirdPartyDllHost
{7B29F495-0F55-49F7-8885-9E8A22CE3829} Internet Explorer Add-on Installer Internet Explorer Add-on Installer Internet Explorer Add-on Installer
{7B6EA1D5-03C2-4AE4-B21C-8D0515CC91B7} Shell Create Object Local Server Shell Create Object Local Server Shell Create Object Local Server
{7C8AB6D9-8764-4033-8F62-2FE896E54B32} WlanPrefLUA WlanPrefLUA WlanPrefLUA
{7d378de6-ed8d-426d-91df-0273d07cd7f6} Microsoft Windows Remote Shell Host With User Settings Microsoft Windows Remote Shell Host With User Settings Microsoft Windows Remote Shell Host With User Settings
{7D7B609B-D089-4687-9606-264A9AA2FBB2} Dispatch Dispatch Dispatch
{7DF8EF76-D449-485f-B4EB-58DC96B31EDB} HomeGroup Printing Device Class HomeGroup Printing Device Class HomeGroup Printing Device Class
{7e0423cd-1119-0928-900c-e6d4a52a0715} MMC Application Class MMC Application Class MMC Application Class
{7F429620-16D1-471E-A81A-114992148034} wisptis wisptis wisptis
{7f9bbc82-ba5f-4448-8622-ef76b8d007e6} GPMC Reporting GPMC Reporting GPMC Reporting
{7FC12E96-4CB7-4ABD-ADAA-EF7845B10629} Authentication UI CredUI Out of Proc Helper for AppContainer Clients Authentication UI CredUI Out of Proc Helper for AppContainer Clients Authentication UI CredUI Out of Proc Helper for AppContainer Clients
{82C49192-BE68-467F-BF50-971FD01DABF3} WinStore OM WinStore OM WinStore OM
{82D94FB3-7FE6-4797-BB72-9A886C66073B} CFmIfsEngine host CFmIfsEngine host CFmIfsEngine host
{84D586C4-A423-11D2-B943-00C04F79D22F} CustReg Class CustReg Class CustReg Class
{86d5eb8a-859f-4c7b-a76b-2bd819b7a850} Virtual Factory for Usercpl Virtual Factory for Usercpl Virtual Factory for Usercpl
{86F80216-5DD6-4F43-953B-35EF40A35AEE} CElevateWlanUi CElevateWlanUi CElevateWlanUi
{87BB326B-E4A0-4DE1-94F0-B9F41D0C6059} ThirdPartyEapDispatcherPeerRuntime ThirdPartyEapDispatcherPeerRuntime ThirdPartyEapDispatcherPeerRuntime
{88283d7c-46f4-47d5-8fc2-db0b5cf0cb54} AppReadiness Service AppReadiness Service AppReadiness Service
{8B30085D-A3E3-44e3-AE7F-B03A1340EBED} Desktop Wallpaper Factory Desktop Wallpaper Factory Desktop Wallpaper Factory
{8BC3F05E-D86B-11D0-A075-00C04FB68820} Windows Management and Instrumentation Windows Management and Instrumentation Windows Management and Instrumentation
{8be0366c-8522-40be-8b08-cb26557f2854} TSTheme TSTheme TSTheme
{8C334A55-DDB9-491C-817E-35A6B85D2ECB} IASExtensionHost IASExtensionHost IASExtensionHost
{8C482DCE-2644-4419-AEFF-189219F916B9}
{8cec58ae-07a1-11d9-b15e-000d56bfe6ee} AP Client HxHelpPaneServer Class AP Client HxHelpPaneServer Class AP Client HxHelpPaneServer Class
{8D15A4F3-1BE5-4120-8A4D-2EF92A5DD58D} TiWorker TiWorker TiWorker
{8D8B8E30-C451-421B-8553-D2976AFA648C} Sync Center Schedule Wizard Sync Center Schedule Wizard Sync Center Schedule Wizard
{8DF61FB6-3223-4E2D-8A92-D937DDB0DF4C}
{8e7fae4d-cff0-41d3-a326-5a80470264bb} RdpSa RdpSa RdpSa
{8f3080a6-af99-4f2e-a806-f3d5702a0444} Shell Computer Groups Shell Computer Groups Shell Computer Groups
{9200689A-F979-4eea-8830-0E1D6B74821F} Virtual Factory for Recovery Virtual Factory for Recovery Virtual Factory for Recovery
{924DC564-16A6-42EB-929A-9A61FA7DA06F} Authentication UI CredUI Out of Proc Helper for Non-AppContainer Clients Authentication UI CredUI Out of Proc Helper for Non-AppContainer Clients Authentication UI CredUI Out of Proc Helper for Non-AppContainer Clients
{93AAD2A0-036A-4B11-A078-DA8776B38139} HtmlLocalFileResolver HtmlLocalFileResolver HtmlLocalFileResolver
{9465B4B4-5216-4042-9A2C-754D3BCDC410} ServiceModule ServiceModule ServiceModule
{98a89e0c-1fde-4c2a-a373-b04831e6aa60} PrintIsolationHost PrintIsolationHost PrintIsolationHost
{995C996E-D918-4a8c-A302-45719A6F4EA7} Shell Hardware Mixed Content Handler Shell Hardware Mixed Content Handler Shell Hardware Mixed Content Handler
{9aa46009-3ce0-458a-a354-715610a075e6}
{9af8cd33-7aae-4cc2-b00a-835f6721e3c2}
{9BA05972-F6A8-11CF-A442-00A0C90A8F39} ShellWindows ShellWindows ShellWindows
{9CA88EE3-ACB7-47c8-AFC4-AB702511C276} RuntimeBroker RuntimeBroker RuntimeBroker
{9df523b0-a6c0-4ea9-b5f1-f4565c3ac8b8} timedate.cpl timedate.cpl timedate.cpl
{9E175B9C-F52A-11D8-B9A5-505054503030} WSearch WSearch WSearch
{9E88EF3C-E2BB-4E5E-AFBA-565B81069D7D} WMLSS WMLSS WMLSS
{A0ADD4EC-5BD3-4f70-A47B-07797A45C635}
{A1F4E726-8CF1-11D1-BF92-0060081ED811} WIA Device Manager WIA Device Manager WIA Device Manager
{a2b77517-6d12-4c60-b0c6-725e971ec8fe} TrayNotify TrayNotify TrayNotify
{A2D8CFE7-7BA4-4bad-B86B-851376B59134} Windows Parental Controls Windows Parental Controls Windows Parental Controls
{a2d9ca22-a492-400c-b875-78ac25c0a6f3} rundll32.exe rundll32.exe rundll32.exe
{A36294D6-90C9-4BA5-AD98-EEA4AB6D53D4} Elevated System Settings COM Host Elevated System Settings COM Host Elevated System Settings COM Host
{A4B07E49-6567-4FB8-8D39-01920E3B2357} Virtual Factory for Windows Firewall Cpl Virtual Factory for Windows Firewall Cpl Virtual Factory for Windows Firewall Cpl
{a4c31131-ff70-4984-afd6-0609ced53ad6} Shell ChkdskEx Dialog Shell ChkdskEx Dialog Shell ChkdskEx Dialog
{A5065670-136D-4FD6-A45F-00C85B90359C} DsmAdminApi DsmAdminApi DsmAdminApi
{A5090E95-F1E2-41C8-BDA1-5AEB6C321FDE} PDFShellInfo PDFShellInfo PDFShellInfo
{A55803CC-4D53-404c-8557-FD63DBA95D24} WPDShextAutoplay WPDShextAutoplay WPDShextAutoplay
{A6721677-BA21-44E9-9E2A-76466D24D121} WLIDSvc WLIDSvc WLIDSvc
{A6BFEA43-501F-456F-A845-983D3AD7B8F0} Virtual Factory for MaintenanceUI Virtual Factory for MaintenanceUI Virtual Factory for MaintenanceUI
{A79DB36D-6218-48e6-9EC9-DCBA9A39BF0F} Microsoft Windows Defender Microsoft Windows Defender Microsoft Windows Defender
{A7A63E5C-3877-4840-8727-C1EA9D7A4D50} %SystemRoot%\System32\fveui.dll %SystemRoot%\System32\fveui.dll %SystemRoot%\System32\fveui.dll
{A7D2EC8B-B70F-434C-A0CE-0DF324805F7D} SysFxUi SysFxUi SysFxUi
{AA0B85DA-FDDF-4272-8D1D-FF9B966D75B0}
{AAAF9453-58F9-4872-A428-0507C383AC37}
{ab7c873b-eb14-49a6-be60-a602f80e6d22} DEFRAGSVC service DEFRAGSVC service DEFRAGSVC service
{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5} Thumbnail Cache Out of Proc Server Thumbnail Cache Out of Proc Server Thumbnail Cache Out of Proc Server
{AB93B6F1-BE76-4185-A488-A9001B105B94} BDEUILauncher Class BDEUILauncher Class BDEUILauncher Class
{ada41b3c-c6fd-4a08-8cc1-d6efde67be7d} WPN Srumon Server WPN Srumon Server WPN Srumon Server
{b0316d0c-da2f-40e0-9f91-f600caf042dc}
{B06FF84E-0A77-4DD2-A919-0EABD8979DC1} WorkspaceBroker Class WorkspaceBroker Class WorkspaceBroker Class
{B1445657-5A98-11d9-A4E5-00301BB132BA} TabIps TabIps TabIps
{B1B9CBB2-B198-47E2-8260-9FD629A2B2EC}
{B292921D-AF50-400c-9B75-0C57A7F29BA1} NAP Agent Service NAP Agent Service NAP Agent Service
{B366DEBE-645B-43A5-B865-DDD82C345492} Windows Update Agent - Remote Access Windows Update Agent - Remote Access Windows Update Agent - Remote Access
{B3823009-106A-4898-8C5A-F28A7CA83ED6} WinStore OM WinStore OM WinStore OM
{B6A32FE6-E29D-AEAE-A608-D273E40CA34C} Found New Hardware Wizard Found New Hardware Wizard Found New Hardware Wizard
{B6C292BC-7C88-41EE-8B54-8EC92617E599} WIA Device Manager 2 WIA Device Manager 2 WIA Device Manager 2
{B8558612-DF5E-4F95-BB81-8E910B327FB2} Sync Center (Private) Sync Center (Private) Sync Center (Private)
{B8C54A54-355E-11D3-83EB-00A0C92A2F2D} Windows Media Player Windows Media Player Windows Media Player
{BA126F01-2166-11D1-B1D0-00805FC1270E}
{BB07BACD-CD56-4E63-A8FF-CBF0355FB9F4} Event Object Change 2 Event Object Change 2 Event Object Change 2
{BBAA0E44-3862-490C-8E63-AC2D2D6EF733} AcroPDF AcroPDF AcroPDF
{BBC4356A-F004-4628-A27A-E13D70412B70} SyncHost SyncHost SyncHost
{BBD8C065-5E6C-4e88-BFD7-BE3E6D1C063B} Virtual Factory for Power Options Control Panel Virtual Factory for Power Options Control Panel Virtual Factory for Power Options Control Panel
{bcbb3f8c-2889-474f-8fb7-904d4a416145} Setting Sync Task Factory Setting Sync Task Factory Setting Sync Task Factory
{BCEA735B-4DAC-4B71-9C47-1D560AFD2A9B} DfsShlEx.dll DfsShlEx.dll DfsShlEx.dll
{BDE0D630-7801-47cd-984E-1F0AFBC5ACBF}
{be0fc7f0-f248-4091-a123-34ca29a6901b} VM IC Heartbeat Service VM IC Heartbeat Service VM IC Heartbeat Service
{BF8841C9-378A-4CAD-B4FC-5091366CBC0D} Shell AutoPlay Direct Shell AutoPlay Direct Shell AutoPlay Direct
{c08afd90-f2a1-11d1-8455-00a0c91f3880} ShellBrowserWindow ShellBrowserWindow ShellBrowserWindow
{C100BEBB-D33A-4a4b-BF23-BBEF4663D017}
{c2a71820-3463-498f-bab7-4798795a2ff6} provsvc.dll provsvc.dll provsvc.dll
{C3A34354-660F-41EE-B072-2AEA5E3A80AF} cttunesvr cttunesvr cttunesvr
{C3B65D83-FB15-4e3f-BA04-097D1E2B5AC1} Microsoft Block Level Backup Service Microsoft Block Level Backup Service Microsoft Block Level Backup Service
{C49F2185-50A7-11D3-9144-00104BA11C5E} Microsoft IMAPI Microsoft IMAPI Microsoft IMAPI
{C4AB7CB7-E735-48FF-AADD-39D09668F444} BdeUISrv BdeUISrv BdeUISrv
{C4CDC408-581C-4480-9FFE-3B1C78D5C20D} HomeGroup Listener Service HomeGroup Listener Service HomeGroup Listener Service
{c5bbbd35-e321-468a-9884-6708aa083f83} Nap Elevated COM class Nap Elevated COM class Nap Elevated COM class
{C6E0A4C8-A933-411E-8068-406C2391665F} EmailClient Class EmailClient Class EmailClient Class
{C89FC3EF-A0DC-4feb-BFBC-F13A9C334D4F} LockScreen Application Notification Broker LockScreen Application Notification Broker LockScreen Application Notification Broker
{C92A9617-0EAE-4235-BD2B-84540EF1FFA9} TSWbPrxy.exe TSWbPrxy.exe TSWbPrxy.exe
{C945AD06-534F-460C-8CB4-17C33099AF81} DictationHost Class DictationHost Class DictationHost Class
{C947D50F-378E-4FF6-8835-FCB50305244D} Sync Infrastructure Sync Infrastructure Sync Infrastructure
{C96887DA-A652-4426-905E-4A37546F847C} netprofm netprofm netprofm
{C9F65BA8-1F8F-4382-AE27-C91FFB29275F} RCM RCM RCM
{CB1DFE3A-EDFF-4d1f-867D-8ADB02926F4B} OpenSearch Description Create Search Connector Verb Handler OpenSearch Description Create Search Connector Verb Handler OpenSearch Description Create Search Connector Verb Handler
{CB363445-F453-4C1E-8EE4-BD123C5E394F} PrintIsolationSessionHost PrintIsolationSessionHost PrintIsolationSessionHost
{CC70FEAD-94B9-4F76-88CC-004BB068ACDF} EnhancedStorageShell EnhancedStorageShell EnhancedStorageShell
{CCFDD24D-CEAB-458B-A4F1-F884973395DF} sppui sppui sppui
{CD11FAB6-1C0E-45e1-BA31-5C6008EF2607} WcsPlugInServiceLib WcsPlugInServiceLib WcsPlugInServiceLib
{cdc32574-7521-4124-90c3-8d5605a34933} Windows Media Player Burn Audio CD Handler Windows Media Player Burn Audio CD Handler Windows Media Player Burn Audio CD Handler
{CDCBCFCA-3CDC-436f-A4E2-0E02075250C2} Elevated-Unelevated Explorer Factory Elevated-Unelevated Explorer Factory Elevated-Unelevated Explorer Factory
{cee8ccc9-4f6b-4469-a235-5a22869eef03} PNPXAssoc.dll PNPXAssoc.dll PNPXAssoc.dll
{CF254B00-1986-4b24-A92D-463D01F7E395} sdchange sdchange sdchange
{D0565000-9DF4-11D1-A281-00C04FCA0AA7} Event Object Change Event Object Change Event Object Change
{d056ebce-e7e9-4994-a5e6-de59430306c1}
{D215781D-019E-4FA0-903D-0CDCDE13A4F5} Winmgmt MOF Compiler OOP Winmgmt MOF Compiler OOP Winmgmt MOF Compiler OOP
{D2E7041B-2927-42fb-8E9F-7CE93B6DC937} Color Management Color Management Color Management
{D3DCB472-7261-43ce-924B-0704BD730D5F}
{D3E34B21-9D75-101A-8C3D-00AA001A1652} Bitmap Image Bitmap Image Bitmap Image
{D63AA156-D534-4BAC-9BF1-55359CF5EC30} Sync Center User Profile Notification Handler Sync Center User Profile Notification Handler Sync Center User Profile Notification Handler
{D8775A07-C529-4EA7-B307-BA7C8CBBDA03} CloudStorageWizard CloudStorageWizard CloudStorageWizard
{D8D4249F-A8FB-44A7-8AA0-564E8C385BD6} Microsoft Software Protection Platform Admin Object (outer) Microsoft Software Protection Platform Admin Object (outer) Microsoft Software Protection Platform Admin Object (outer)
{daa6bc26-4dfa-4e8f-8d5f-47202dc8e400} Microsoft.Live.FolderShare.Client Microsoft.Live.FolderShare.Client Microsoft.Live.FolderShare.Client
{DCED8DB0-11A5-4b16-AB9D-4E28CA38C99F}
{ddcfd26b-feed-44cd-b71d-79487d2e5e5a} Srumon Server Srumon Server Srumon Server
{de5d803e-5d2a-4b5f-9c63-af25a465cc44} rundll32.exe rundll32.exe rundll32.exe
{DE5DBCDC-104A-4cbc-A4D5-0C2104A142C5} AccStore Class AccStore Class AccStore Class
{DE7D3D65-5454-4EF5-9518-776739DAB39F} LockScreen Call Broker LockScreen Call Broker LockScreen Call Broker
{DF3255F4-FF55-44FA-A728-E77B83E9E403} ClassicIE ClassicIE ClassicIE
{E10F6C3A-F1AE-4adc-AA9D-2FE65525666E} Profile Notification Host Profile Notification Host Profile Notification Host
{E15FBAC2-C276-4523-92CA-561456EBCF3E} Immersive Print Dialog Surrogate Immersive Print Dialog Surrogate Immersive Print Dialog Surrogate
{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}
{e30984f1-b02b-4c27-a40f-23d11b8c1212} Windows Update Agent User Interface for Published Applications Windows Update Agent User Interface for Published Applications Windows Update Agent User Interface for Published Applications
{E32549C4-C2B8-4BCC-90D7-0FC3511092BB} Scan Scan Scan
{e44e9428-bdbc-4987-a099-40dc8fd255e7} Execute Unknown Execute Unknown Execute Unknown
{e4803a36-7232-4ac0-a6af-29d59ebcc303}
{E495081B-BBA5-4b89-BA3C-3B86A686B87A} upnphost upnphost upnphost
{E6442437-6C68-4f52-94DD-2CFED267EFB9} TrayDesktopBand TrayDesktopBand TrayDesktopBand
{E8054D20-497D-4E16-BF41-6E69FCD381A5} UICOM UICOM UICOM
{E9495B87-D950-4ab5-87A5-FF6D70BF3E90} wscui.cpl wscui.cpl wscui.cpl
{E95186C7-7D80-4311-843D-0702CBC8B1E4} Remove Device elevation surrogate Remove Device elevation surrogate Remove Device elevation surrogate
{E96767E0-7EAA-45e1-8E7D-64414AFF281A} File Prop Sheet Page Helper File Prop Sheet Page Helper File Prop Sheet Page Helper
{EA022610-0748-4c24-B229-6C507EBDFDBB} HomeGroup Provider Service HomeGroup Provider Service HomeGroup Provider Service
{EA2C6B24-C590-457B-BAC8-4A0F9B13B5B8} %systemroot%\System32\UserAccountControlSettings.dll %systemroot%\System32\UserAccountControlSettings.dll %systemroot%\System32\UserAccountControlSettings.dll
{EB521D7D-4095-4E61-88FB-BF25700F142A} Remote Desktop Services Message Server Remote Desktop Services Message Server Remote Desktop Services Message Server
{EC9846B3-2762-4A6B-A214-6ACB603462D2}
{ECABB0C3-7F19-11D2-978E-0000F8757E2A} ComEvents.ComServiceEvents ComEvents.ComServiceEvents ComEvents.ComServiceEvents
{ECABB0C6-7F19-11D2-978E-0000F8757E2A} ComEvents.ComSystemAppEventData ComEvents.ComSystemAppEventData ComEvents.ComSystemAppEventData
{ed1d0fdf-4414-470a-a56d-cfb68623fc58} Play with Windows Media Player Play with Windows Media Player Play with Windows Media Player
{ED6BB178-B06A-47ad-98B3-6066E0CF0147} Windows Media Player Launch Windows Media Player Launch Windows Media Player Launch
{edb5f444-cb8d-445a-a523-ec5ab6ea33c7} Share Manager Share Manager Share Manager
{EEABD3A3-784D-4334-AAFC-BB13234F17CF} SyncEngineCOMServer SyncEngineCOMServer SyncEngineCOMServer
{F135BE18-BF34-4CBD-B1D5-55D49F0DEDCC} Microsoft Audio Device Graph Server Microsoft Audio Device Graph Server Microsoft Audio Device Graph Server
{F1425A67-1545-44A2-AB59-8DF1020452D9}
{F20DA720-C02F-11CE-927B-0800095AE340}
{F2383816-917A-46CC-AD2A-5013BED3800F} AcroBroker AcroBroker AcroBroker
{F290BFB2-1864-45B1-8804-2654194A87E7} Virtual Disk Service Virtual Disk Service Virtual Disk Service
{f32d97df-e3e5-4cb9-9e3e-0eb5b4e49801} SPPSurrogate SPPSurrogate SPPSurrogate
{F3D3AA8D-EF96-4470-848E-BD70B803047A} NDFAPI NDFAPI NDFAPI
{f4be747e-45c4-4701-90f1-d49d9ac30248} PerfCenter Enabler PerfCenter Enabler PerfCenter Enabler
{f62fdd2e-66d2-423b-9a04-f71ea00f892a} Windows Update Agent User Interface Windows Update Agent User Interface Windows Update Agent User Interface
{f735e733-d681-4aef-83c1-7ec82cac5ecc}
{F74BCE98-9EB4-4022-8317-11C723E5CCF8} WMPNSSCI WMPNSSCI WMPNSSCI
{F808DF63-6049-11D1-BA20-006097D2898E} logagent logagent logagent
{F828BB1A-2FAE-4AC4-AE6F-CAC9B529F996} WLIDFDP WLIDFDP WLIDFDP
{F8FD03A6-DDD9-4C1B-84EE-58159476A0D7} RAServer RAServer RAServer
{F9717507-6651-4EDB-BFF7-AE615179BCCF} WinInetBrokerServer WinInetBrokerServer WinInetBrokerServer
{FA1456D3-4B97-4f9c-8511-2786161DC333} NCLUA NCLUA NCLUA
{FA3FC5CF-0304-4CAC-99F0-032AC2B15D1E}
{FAF53CC4-BD73-4E36-83F1-2B23F46E513E} VssEvent VssEvent VssEvent
{fb479c02-9ec4-4fed-8599-debe037452cb} Shell Hardware Mixed Content Handler Cancelled Shell Hardware Mixed Content Handler Cancelled Shell Hardware Mixed Content Handler Cancelled
{FBF23B40-E3F0-101B-8488-00AA003E56F8}
{FC38B7C8-9E50-497d-A387-7DEBDAD14160} RegisterControl RegisterControl RegisterControl
{fc470800-12e0-4da3-81f3-e67240d19093} WinStore OM WinStore OM WinStore OM
{FC5EEAF6-0002-11DF-ADB9-F4CE462D9137} Hotspot Auth Module Hotspot Auth Module Hotspot Auth Module
{FCC74B77-EC3E-4dd8-A80B-008A702075A9} appwiz.cpl appwiz.cpl appwiz.cpl
{fd6c8b29-e936-4a61-8da6-b0c12ad3ba00} Wordpad Wordpad Wordpad
{FDA74D11-C4A6-4577-9F73-D7CA8586E10C} Proximity UX Host Proximity UX Host Proximity UX Host
{FDA74D11-C4A6-4577-9F73-D7CA8586E10D} MP UX Host MP UX Host MP UX Host
{FE2F9D0D-18A4-4845-BA41-DE6451A66D11}
{ff9e6131-a8c1-4188-aa03-82e9f10a05a8}
{FFB8655F-81B9-4fce-B89C-9A6BA76D13E7} Shell Execute Hardware Event Handler Shell Execute Hardware Event Handler Shell Execute Hardware Event Handler
