Suivi des processus

Transcription

Suivi des processus
WinReporter
Suivi des processus
23/09/2008
Configuration
- Tous les processus
Filtre de tri :
Champ de tri : Date de démarrage
Ordre de tri : Croissant
Evénements between 01/11/2007 01:00:00 and 15/11/2007 01:00:00
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
Fichier
Machine
01/11/2007 01:55:39
01/11/2007 01:56:56
2192 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
01/11/2007 01:55:43
01/11/2007 02:06:43
3168 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
01/11/2007 01:58:29
01/11/2007 01:58:30
668 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
01/11/2007 09:00:00
01/11/2007 09:00:18
2812 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
01/11/2007 09:58:30
01/11/2007 09:58:31
2212 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
01/11/2007 17:58:31
01/11/2007 17:58:32
2160 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
02/11/2007 01:58:32
02/11/2007 01:58:32
3976 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
02/11/2007 01:59:38
02/11/2007 02:00:56
2964 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
02/11/2007 01:59:43
02/11/2007 02:10:43
2032 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
02/11/2007 09:00:00
02/11/2007 09:00:18
2328 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
02/11/2007 09:58:33
02/11/2007 09:58:34
2392 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
02/11/2007 17:58:34
02/11/2007 17:58:34
3572 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
Short description
1/17
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
03/11/2007 01:58:35
03/11/2007 01:58:35
3648 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
03/11/2007 02:03:36
03/11/2007 02:04:54
1672 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
03/11/2007 02:03:41
03/11/2007 02:14:41
1704 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
03/11/2007 09:00:00
03/11/2007 09:00:18
2264 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
03/11/2007 09:58:35
03/11/2007 09:58:37
3964 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
03/11/2007 17:58:37
03/11/2007 17:58:37
780 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
04/11/2007 01:58:37
04/11/2007 01:58:38
2312 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
04/11/2007 02:07:36
04/11/2007 02:08:53
136 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
04/11/2007 02:07:40
04/11/2007 02:18:40
2240 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
04/11/2007 09:00:00
04/11/2007 09:00:18
3944 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
04/11/2007 09:58:38
04/11/2007 09:58:40
2264 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
04/11/2007 17:58:40
04/11/2007 17:58:40
3900 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
05/11/2007 01:58:40
05/11/2007 01:58:41
1660 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
05/11/2007 02:11:34
05/11/2007 02:12:52
3288 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
05/11/2007 02:11:38
05/11/2007 02:22:38
3912 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
05/11/2007 09:00:00
05/11/2007 09:00:18
1588 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
05/11/2007 09:30:12
05/11/2007 09:51:17
3556 / 1792
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
05/11/2007 09:58:41
05/11/2007 09:58:42
3688 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
Short description
Fichier
2/17
Machine
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
ID Processus
enfant/parent
Date de démarrage
Date d'arrêt
05/11/2007 10:58:42
05/11/2007 11:19:45
568 / 1792
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
05/11/2007 11:25:20
05/11/2007 11:46:24
2212 / 1792
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
05/11/2007 12:02:14
05/11/2007 12:23:16
3316 / 1792
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
05/11/2007 17:58:42
05/11/2007 17:58:43
3436 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
06/11/2007 01:58:43
06/11/2007 01:58:43
2916 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
06/11/2007 02:15:43
06/11/2007 02:17:01
3672 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
06/11/2007 02:15:48
06/11/2007 02:26:48
2644 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
06/11/2007 09:00:00
06/11/2007 09:00:19
3432 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
06/11/2007 09:20:00
06/11/2007 09:42:06
4000 / 1792
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007 09:45:12
06/11/2007 09:45:32
1780 / 304
C:\WINDOWS\system32\csrss.exe
COMPUTER20
DOMAIN21 \
06/11/2007 09:45:12
06/11/2007 09:45:32
760 / 304
C:\WINDOWS\system32\winlogon.exe
COMPUTER20
DOMAIN21 \
06/11/2007 09:45:40
06/11/2007 09:45:58
3724 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
06/11/2007 09:46:01
06/11/2007 09:46:02
06/11/2007 09:46:02
06/11/2007 09:51:34
2888 / 2828
3976 / 2888
C:\WINDOWS\system32\dumprep.exe
C:\WINDOWS\system32\dumprep.exe
COMPUTER20
COMPUTER20
DOMAIN21 \
DOMAIN21 \
06/11/2007 09:46:05
06/11/2007 09:47:19
2868 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
06/11/2007 09:46:34
06/11/2007 09:46:34
06/11/2007 09:51:34
06/11/2007 09:46:35
3872 / 3976
2460 / 2828
C:\WINDOWS\system32\dwwin.exe
C:\WINDOWS\explorer.exe
COMPUTER20
COMPUTER20
DOMAIN21 \
DOMAIN21 \
06/11/2007 09:58:44
06/11/2007 09:58:44
1460 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
06/11/2007 09:59:01
06/11/2007 09:59:03
3412 / 2828
C:\WINDOWS\system32\regsvr32.exe
COMPUTER20
DOMAIN21 \
06/11/2007 09:59:17
06/11/2007 10:29:27
2700 / 1792
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007 10:00:16
06/11/2007 10:01:36
06/11/2007 10:00:18
06/11/2007 10:01:38
3648 / 2828
2684 / 2828
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
COMPUTER20
COMPUTER20
DOMAIN21 \
DOMAIN21 \
Short description
Fichier
3/17
Machine
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
administrator
administrator
COMPUTER20
$
administrator
administrator
COMPUTER20
$
administrator
COMPUTER20
$
administrator
administrator
Date de démarrage
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
10:02:43
10:04:10
10:04:21
10:05:24
10:05:28
10:05:53
Date d'arrêt
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
10:02:45
10:04:12
10:04:25
10:05:26
10:05:29
10:05:54
ID Processus
enfant/parent
1564
2912
4072
2984
1208
2276
/
/
/
/
/
/
2828
2828
2828
2828
2828
2828
Fichier
Machine
Domaine\Utilisateur
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
COMPUTER20
COMPUTER20
COMPUTER20
COMPUTER20
COMPUTER20
COMPUTER20
DOMAIN21
DOMAIN21
DOMAIN21
DOMAIN21
DOMAIN21
DOMAIN21
\
\
\
\
\
\
06/11/2007 10:22:56
06/11/2007 10:33:54
2964 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 10:34:58
06/11/2007 10:35:19
2868 / 656
C:\WINDOWS\system32\inetsrv\iisrstas.exe
COMPUTER20
DOMAIN21 \
06/11/2007 10:35:09
06/11/2007 12:37:39
2864 / 428
C:\WINDOWS\system32\inetsrv\inetinfo.exe
COMPUTER20
DOMAIN21 \
06/11/2007 10:35:11
06/11/2007 12:37:34
3872 / 428
C:\WINDOWS\system32\svchost.exe
COMPUTER20
DOMAIN21 \
06/11/2007 10:35:23
06/11/2007 10:56:26
1580 / 3872
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007 10:36:11
06/11/2007 10:36:15
2968 / 828
C:\WINDOWS\system32\wbem\wmiadap.exe
COMPUTER20
DOMAIN21 \
06/11/2007 10:45:18
06/11/2007 11:06:08
2204 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 11:06:33
06/11/2007 11:27:38
3552 / 3872
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007 11:16:26
06/11/2007 11:24:13
2552 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 11:34:18
06/11/2007 11:59:13
2216 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 12:00:26
06/11/2007 12:21:30
3496 / 3872
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007 12:09:13
06/11/2007 12:31:02
2928 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 12:31:32
06/11/2007 12:37:33
3112 / 3872
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007 12:32:47
06/11/2007 12:39:32
208 / 2828
C:\WINDOWS\system32\notepad.exe
COMPUTER20
DOMAIN21 \
06/11/2007 12:37:20
06/11/2007 12:37:26
1648 / 656
C:\WINDOWS\system32\inetsrv\iisrstas.exe
COMPUTER20
DOMAIN21 \
06/11/2007 12:37:31
06/11/2007 12:37:48
3964 / 656
C:\WINDOWS\system32\inetsrv\iisrstas.exe
COMPUTER20
DOMAIN21 \
Short description
4/17
administrator
administrator
administrator
administrator
administrator
administrator
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
administrator
COMPUTER20
$
COMPUTER20
$
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
06/11/2007 12:37:40
06/11/2007 14:42:16
2496 / 428
06/11/2007 12:37:41
06/11/2007 14:42:11
220 / 428
06/11/2007 12:38:05
06/11/2007 13:05:11
06/11/2007 12:40:23
06/11/2007 12:46:14
06/11/2007 12:46:23
Fichier
Machine
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
administrator
administrator
administrator
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
C:\WINDOWS\system32\inetsrv\inetinfo.exe
COMPUTER20
DOMAIN21 \
C:\WINDOWS\system32\svchost.exe
COMPUTER20
DOMAIN21 \
1584 / 220
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007 12:40:36
06/11/2007 12:46:15
06/11/2007 12:46:28
1980 / 2828
1976 / 260
3652 / 260
C:\WINDOWS\system32\notepad.exe
C:\Program Files\ISDecisions\UserLock\ULTerm.exe
C:\Program Files\ISDecisions\UserLock\ULTerm.exe
COMPUTER20
COMPUTER20
COMPUTER20
DOMAIN21 \
DOMAIN21 \
DOMAIN21 \
06/11/2007 12:56:50
06/11/2007 14:39:22
3248 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 14:09:05
06/11/2007 14:30:07
2512 / 220
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:42:09
06/11/2007 14:42:25
3908 / 656
C:\WINDOWS\system32\inetsrv\iisrstas.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:42:17
06/11/2007 15:10:21
3308 / 428
C:\WINDOWS\system32\inetsrv\inetinfo.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:42:18
06/11/2007 15:10:16
3172 / 428
C:\WINDOWS\system32\svchost.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:42:42
06/11/2007 14:42:43
1460 / 2828
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 14:42:42
06/11/2007 14:43:13
2008 / 1460
C:\Program
Files\ISDecisions\UserLock\CheckBeforeUninstall.exe
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 14:42:44
06/11/2007 15:25:57
2736 / 428
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 14:42:46
06/11/2007 14:43:13
1952 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 14:42:48
06/11/2007 14:43:18
2664 / 656
06/11/2007 14:42:48
06/11/2007 14:43:13
2680 / 656
06/11/2007 14:42:59
06/11/2007 14:43:00
2016 / 2736
C:\Program Files\ISDecisions\UserLock\UserLock.exe
COMPUTER20
06/11/2007 14:43:00
06/11/2007 14:43:01
2312 / 2736
C:\Program
Files\ISDecisions\UserLock\UlAgentInstaller.exe
COMPUTER20
06/11/2007 14:43:01
06/11/2007 14:43:01
2004 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
Short description
C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3
~1\knlwrap.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3
~1\ikernel.exe
5/17
COMPUTER20
COMPUTER20
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
06/11/2007 14:43:01
06/11/2007 14:43:02
2980 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:43:02
06/11/2007 14:43:02
3996 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:43:02
06/11/2007 14:43:03
1096 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:43:17
06/11/2007 15:06:47
2248 / 2828
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:43:49
06/11/2007 15:06:47
3412 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:43:51
06/11/2007 14:43:51
3740 / 3412
COMPUTER20
DOMAIN21 \
06/11/2007 14:43:52
06/11/2007 14:43:53
2740 / 3412
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 14:43:54
06/11/2007 14:43:54
2532 / 3412
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 14:43:54
06/11/2007 14:43:55
3836 / 3412
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 14:43:55
06/11/2007 14:43:55
06/11/2007 14:43:55
06/11/2007 14:43:55
06/11/2007 14:43:55
06/11/2007 14:43:56
3752 / 3412
3988 / 3412
2956 / 3412
COMPUTER20
COMPUTER20
COMPUTER20
06/11/2007 14:43:57
06/11/2007 14:47:33
576 / 656
06/11/2007 14:43:57
06/11/2007 14:47:24
3880 / 656
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
06/11/2007 14:46:38
06/11/2007 14:47:23
2448 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 14:46:38
06/11/2007 14:46:39
2452 / 2448
COMPUTER20
06/11/2007 14:46:39
06/11/2007 14:46:39
3160 / 2448
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 14:46:39
06/11/2007 14:46:39
4076 / 2448
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 14:46:39
06/11/2007 14:46:39
1928 / 2448
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 14:46:39
06/11/2007 14:46:39
06/11/2007 14:46:40
06/11/2007 14:46:39
06/11/2007 14:46:40
06/11/2007 14:46:40
2748 / 2448
1944 / 2448
2144 / 2448
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
DOMAIN21 \ administrator
DOMAIN21 \ administrator
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
DOMAIN21 \ administrator
COMPUTER20
COMPUTER20
COMPUTER20
06/11/2007 14:47:10
06/11/2007 14:47:10
3328 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \ administrator
DOMAIN21 \ administrator
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \
$
Short description
Fichier
6/17
Machine
COMPUTER20
COMPUTER20
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
administrator
COMPUTER20
$
administrator
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
06/11/2007 14:47:10
06/11/2007 14:47:11
2932 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:11
06/11/2007 14:47:12
1020 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:12
06/11/2007 14:47:13
3520 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:13
06/11/2007 14:47:13
3084 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:13
06/11/2007 14:47:15
1088 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:15
06/11/2007 14:47:15
776 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:15
06/11/2007 14:47:15
292 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:15
06/11/2007 14:47:16
1708 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:16
06/11/2007 14:47:16
4064 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:16
06/11/2007 14:47:16
3608 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:16
06/11/2007 14:47:17
3760 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:17
06/11/2007 14:47:17
2744 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:17
06/11/2007 14:47:18
3668 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:47:18
06/11/2007 14:47:19
1904 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 14:57:25
06/11/2007 15:06:16
2172 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 15:06:23
06/11/2007 15:06:24
06/11/2007 15:06:24
06/11/2007 15:06:47
2360 / 2248
704 / 2248
C:\Program Files\ISDecisions\UserLock\ULWebConfig.exe
C:\Program Files\ISDecisions\UserLock\ConfigWizard.exe
COMPUTER20
COMPUTER20
DOMAIN21 \
DOMAIN21 \
06/11/2007 15:06:37
06/11/2007 15:08:16
2908 / 428
C:\Program Files\ISDecisions\UserLock\UserLock.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:06:40
06/11/2007 15:06:40
2332 / 2908
C:\WINDOWS\system32\LogoffAgent.EXE
COMPUTER20
DOMAIN21 \
06/11/2007 15:07:00
06/11/2007 15:10:15
2524 / 3172
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
Short description
Fichier
7/17
Machine
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
administrator
administrator
COMPUTER20
$
administrator
COMPUTER20
$
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
06/11/2007 15:09:56
06/11/2007 15:10:00
06/11/2007 15:10:03
06/11/2007 15:09:58
06/11/2007 15:10:01
06/11/2007 15:10:04
3908 / 2828
2668 / 2828
3104 / 2828
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
COMPUTER20
COMPUTER20
COMPUTER20
06/11/2007 15:10:10
06/11/2007 15:10:30
1888 / 656
C:\WINDOWS\system32\inetsrv\iisrstas.exe
COMPUTER20
06/11/2007 15:10:22
06/11/2007 15:11:17
1348 / 428
C:\WINDOWS\system32\inetsrv\inetinfo.exe
COMPUTER20
06/11/2007 15:10:23
06/11/2007 15:11:13
2548 / 428
C:\WINDOWS\system32\svchost.exe
COMPUTER20
06/11/2007 15:10:30
06/11/2007 15:11:12
2212 / 2548
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
06/11/2007 15:11:08
06/11/2007 15:11:26
3440 / 656
C:\WINDOWS\system32\inetsrv\iisrstas.exe
COMPUTER20
06/11/2007 15:11:18
06/11/2007 15:38:16
2800 / 428
C:\WINDOWS\system32\inetsrv\inetinfo.exe
COMPUTER20
06/11/2007 15:11:19
06/11/2007 15:38:09
2144 / 428
C:\WINDOWS\system32\svchost.exe
COMPUTER20
06/11/2007 15:11:21
06/11/2007 15:11:22
2820 / 2828
06/11/2007 15:11:22
06/11/2007 15:11:48
2852 / 2820
C:\Program
Files\ISDecisions\UserLock\CheckBeforeUninstall.exe
C:\WINDOWS\system32\msiexec.exe
06/11/2007 15:11:28
06/11/2007 15:11:48
2480 / 2736
C:\WINDOWS\system32\msiexec.exe
06/11/2007 15:11:29
06/11/2007 15:11:58
4084 / 656
06/11/2007 15:11:29
06/11/2007 15:11:48
3668 / 656
06/11/2007 15:11:35
06/11/2007 15:11:36
1128 / 2736
C:\Program Files\ISDecisions\UserLock\UserLock.exe
COMPUTER20
06/11/2007 15:11:36
06/11/2007 15:11:37
1920 / 2736
C:\Program
Files\ISDecisions\UserLock\UlAgentInstaller.exe
COMPUTER20
06/11/2007 15:11:37
06/11/2007 15:11:37
3856 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:11:37
06/11/2007 15:11:38
3960 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:11:38
06/11/2007 15:11:38
2772 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
Short description
Fichier
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
8/17
Machine
Domaine\Utilisateur
DOMAIN21 \ administrator
DOMAIN21 \ administrator
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
COMPUTER20
COMPUTER20
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
06/11/2007 15:11:38
06/11/2007 15:11:38
3416 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:12:08
06/11/2007 15:13:23
3560 / 2828
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:12:21
06/11/2007 15:13:22
2028 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:12:22
06/11/2007 15:12:22
4004 / 2028
COMPUTER20
06/11/2007 15:12:22
06/11/2007 15:12:23
3924 / 2028
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 15:12:23
06/11/2007 15:12:23
420 / 2028
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 15:12:24
06/11/2007 15:12:24
2560 / 2028
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 15:12:24
06/11/2007 15:12:24
06/11/2007 15:12:24
06/11/2007 15:12:24
06/11/2007 15:12:24
06/11/2007 15:12:25
2416 / 2028
3200 / 2028
1848 / 2028
COMPUTER20
COMPUTER20
COMPUTER20
06/11/2007 15:12:26
06/11/2007 15:13:29
2624 / 656
06/11/2007 15:12:26
06/11/2007 15:13:23
3584 / 656
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
COMPUTER20
$
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \
$
DOMAIN21 \ administrator
06/11/2007 15:12:46
06/11/2007 15:13:20
1864 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:12:47
06/11/2007 15:12:47
1956 / 1864
COMPUTER20
06/11/2007 15:12:47
06/11/2007 15:12:48
3788 / 1864
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 15:12:48
06/11/2007 15:12:48
1548 / 1864
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 15:12:48
06/11/2007 15:12:48
928 / 1864
COMPUTER20
DOMAIN21 \ administrator
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\msiexec.exe
DOMAIN21 \ administrator
DOMAIN21 \ administrator
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
DOMAIN21 \ administrator
COMPUTER20
COMPUTER20
COMPUTER20
COMPUTER20
DOMAIN21
DOMAIN21
DOMAIN21
DOMAIN21
15:12:48
15:12:48
15:12:48
15:14:11
15:12:48
15:12:48
15:12:48
15:15:57
780
2472
3300
2172
/
/
/
/
1864
1864
1864
2828
Fichier
Machine
COMPUTER20
COMPUTER20
Domaine\Utilisateur
DOMAIN21 \
06/11/2007 15:14:24
06/11/2007 15:15:57
2204 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:14:24
06/11/2007 15:14:25
3028 / 2204
COMPUTER20
06/11/2007 15:14:25
06/11/2007 15:14:26
3796 / 2204
COMPUTER20
DOMAIN21 \ administrator
06/11/2007 15:14:26
06/11/2007 15:14:26
2896 / 2204
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
C:\WINDOWS\system32\regsvr32.exe
administrator
administrator
administrator
administrator
COMPUTER20
DOMAIN21 \
$
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \ administrator
Short description
9/17
\
\
\
\
ID Processus
enfant/parent
Date de démarrage
Date d'arrêt
06/11/2007 15:14:27
06/11/2007 15:14:27
516 / 2204
06/11/2007 15:14:27
06/11/2007 15:14:27
06/11/2007 15:14:27
06/11/2007 15:14:27
06/11/2007 15:14:27
06/11/2007 15:14:28
1100 / 2204
3676 / 2204
2696 / 2204
06/11/2007 15:14:28
06/11/2007 15:15:39
2032 / 656
06/11/2007 15:14:29
06/11/2007 15:15:32
3944 / 656
06/11/2007 15:14:47
06/11/2007 15:15:31
2628 / 2736
06/11/2007 15:14:48
06/11/2007 15:14:48
212 / 2628
06/11/2007 15:14:48
06/11/2007 15:14:49
2556 / 2628
06/11/2007 15:14:49
06/11/2007 15:14:49
1540 / 2628
06/11/2007 15:14:49
06/11/2007 15:14:49
1980 / 2628
06/11/2007 15:14:49
06/11/2007 15:14:49
06/11/2007 15:14:49
06/11/2007 15:14:49
06/11/2007 15:14:49
06/11/2007 15:14:49
3708 / 2628
2612 / 2628
220 / 2628
06/11/2007 15:15:18
06/11/2007 15:15:18
06/11/2007 15:15:18
Fichier
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
Machine
Domaine\Utilisateur
COMPUTER20
DOMAIN21 \ administrator
COMPUTER20
COMPUTER20
COMPUTER20
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\ikernel.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Common
Files\InstallShield\engine\6\Intel 32\knlwrap.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
COMPUTER20
DOMAIN21 \ administrator
DOMAIN21 \ administrator
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \ administrator
COMPUTER20
COMPUTER20
COMPUTER20
264 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:15:19
1720 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:15:19
06/11/2007 15:15:20
3908 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:15:20
06/11/2007 15:15:21
2668 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:15:21
06/11/2007 15:15:22
3104 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:15:22
06/11/2007 15:15:23
2312 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:15:23
06/11/2007 15:15:23
3132 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
06/11/2007 15:15:23
06/11/2007 15:15:23
2980 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \ administrator
DOMAIN21 \ administrator
DOMAIN21 \ administrator
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
COMPUTER20
DOMAIN21 \
$
Short description
10/17
COMPUTER20
COMPUTER20
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
06/11/2007 15:15:23
06/11/2007 15:15:24
2148 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:15:24
06/11/2007 15:15:24
3724 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:15:24
06/11/2007 15:15:24
1800 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:15:24
06/11/2007 15:15:25
2972 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:15:25
06/11/2007 15:15:25
3660 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:15:25
06/11/2007 15:15:26
2176 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:15:26
06/11/2007 15:15:26
2700 / 2736
C:\WINDOWS\system32\msiexec.exe
COMPUTER20
DOMAIN21 \
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
3748
3356
3368
1664
C:\Program Files\ISDecisions\UserLock\ULWebConfig.exe
C:\Program Files\ISDecisions\UserLock\ConfigWizard.exe
C:\WINDOWS\system32\LogoffAgent.EXE
C:\WINDOWS\system32\mmc.exe
COMPUTER20
COMPUTER20
COMPUTER20
COMPUTER20
DOMAIN21
DOMAIN21
DOMAIN21
DOMAIN21
15:15:33
15:15:34
15:15:52
15:15:56
15:15:34
15:15:56
15:15:52
15:16:02
/
/
/
/
2172
2172
2848
3356
Fichier
Machine
Domaine\Utilisateur
\
\
\
\
06/11/2007 15:16:10
06/11/2007 15:38:08
3236 / 2144
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
06/11/2007
2356
3552
3268
3148
2532
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\notepad.exe
COMPUTER20
COMPUTER20
COMPUTER20
COMPUTER20
COMPUTER20
DOMAIN21
DOMAIN21
DOMAIN21
DOMAIN21
DOMAIN21
15:17:02
15:18:25
15:21:27
15:31:13
15:37:18
15:37:14
15:18:27
15:21:30
15:38:24
15:38:22
/
/
/
/
/
2828
2828
2828
2828
2828
\
\
\
\
\
06/11/2007 15:38:01
06/11/2007 15:38:27
3696 / 656
C:\WINDOWS\system32\inetsrv\iisrstas.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:38:19
--
1700 / 428
C:\WINDOWS\system32\svchost.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:38:32
06/11/2007 16:05:37
3484 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:40:26
06/11/2007 16:07:39
3972 / 2828
C:\WINDOWS\system32\notepad.exe
COMPUTER20
DOMAIN21 \
06/11/2007 15:51:10
06/11/2007 16:06:20
2144 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 16:06:15
06/11/2007 16:57:21
3568 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
Short description
11/17
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
administrator
administrator
administrator
administrator
COMPUTER20
$
administrator
administrator
administrator
administrator
administrator
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
administrator
COMPUTER20
$
COMPUTER20
$
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
06/11/2007 16:17:42
06/11/2007 16:47:07
3776 / 384
06/11/2007 16:47:19
06/11/2007 16:51:23
06/11/2007 17:01:24
06/11/2007 17:18:50
06/11/2007 17:28:52
Fichier
Machine
Domaine\Utilisateur
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
C:\WINDOWS\system32\notepad.exe
COMPUTER20
DOMAIN21 \
2752 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 19:35:23
964 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
06/11/2007 17:46:10
06/11/2007 17:47:21
2948 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
06/11/2007 17:58:44
06/11/2007 17:58:46
3920 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
07/11/2007 01:46:11
07/11/2007 01:47:22
3552 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
07/11/2007 01:58:45
07/11/2007 01:58:46
2248 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
07/11/2007 02:33:19
07/11/2007 02:34:37
896 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
07/11/2007 02:33:26
07/11/2007 02:44:26
3260 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
07/11/2007 09:00:01
07/11/2007 09:00:14
3560 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
07/11/2007 09:05:57
07/11/2007 09:06:04
700 / 304
C:\WINDOWS\system32\csrss.exe
COMPUTER20
DOMAIN21 \
07/11/2007 09:05:57
07/11/2007 09:06:03
508 / 304
C:\WINDOWS\system32\winlogon.exe
COMPUTER20
DOMAIN21 \
07/11/2007 09:22:33
07/11/2007 09:41:06
1848 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
07/11/2007 09:25:25
07/11/2007 09:49:30
2448 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
07/11/2007 09:46:13
07/11/2007 09:47:23
2252 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
07/11/2007 09:51:17
07/11/2007 09:59:00
2904 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
07/11/2007 09:58:46
07/11/2007 09:58:46
3264 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
07/11/2007 10:09:05
07/11/2007 18:33:25
2928 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
780 / 2828
Short description
12/17
COMPUTER20
$
administrator
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
07/11/2007 17:46:14
07/11/2007 17:47:26
3956 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
07/11/2007 17:58:46
07/11/2007 17:58:47
3936 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
08/11/2007 01:46:16
08/11/2007 01:47:28
988 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
08/11/2007 01:58:47
08/11/2007 01:58:48
2536 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
08/11/2007 02:38:37
08/11/2007 02:39:56
2152 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
08/11/2007 02:38:44
08/11/2007 02:49:44
2704 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
08/11/2007 09:00:01
08/11/2007 09:00:19
2608 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
08/11/2007 09:12:32
08/11/2007 09:12:55
2832 / 304
C:\WINDOWS\system32\csrss.exe
COMPUTER20
DOMAIN21 \
08/11/2007 09:12:33
08/11/2007 09:12:54
3276 / 304
C:\WINDOWS\system32\winlogon.exe
COMPUTER20
DOMAIN21 \
08/11/2007 09:32:28
08/11/2007 16:38:28
3452 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
08/11/2007 09:39:07
08/11/2007 10:05:14
3344 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
08/11/2007 09:46:19
08/11/2007 09:47:29
3976 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
08/11/2007 09:58:48
08/11/2007 09:58:48
1780 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
08/11/2007 11:35:54
08/11/2007 11:56:57
2416 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
08/11/2007 16:48:44
08/11/2007 18:39:49
1740 / 384
C:\WINDOWS\system32\scrnsave.scr
COMPUTER20
DOMAIN21 \
08/11/2007 17:46:19
08/11/2007 17:47:30
2716 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
08/11/2007 17:58:48
08/11/2007 17:58:49
2720 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
09/11/2007 01:46:20
09/11/2007 01:47:32
2904 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
Short description
Fichier
13/17
Machine
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
09/11/2007 01:58:49
09/11/2007 01:58:50
3100 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
09/11/2007 02:55:45
09/11/2007 02:57:04
3968 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
09/11/2007 02:55:52
09/11/2007 03:06:52
1100 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
09/11/2007 09:00:01
09/11/2007 09:00:13
3320 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
09/11/2007 09:37:04
09/11/2007 09:58:08
1544 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
09/11/2007 09:46:22
09/11/2007 09:47:33
3908 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
09/11/2007 09:58:50
09/11/2007 09:58:50
2000 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
09/11/2007 10:15:25
09/11/2007 10:36:27
2656 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
09/11/2007 10:37:49
09/11/2007 10:58:51
4052 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
09/11/2007 17:46:23
09/11/2007 17:47:35
3764 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
09/11/2007 17:58:50
09/11/2007 17:58:51
332 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
10/11/2007 01:46:25
10/11/2007 01:47:37
3024 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
10/11/2007 01:58:51
10/11/2007 01:58:52
588 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
10/11/2007 03:11:55
10/11/2007 03:13:13
3800 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
10/11/2007 03:11:59
10/11/2007 03:22:59
4072 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
10/11/2007 09:00:00
10/11/2007 09:00:18
3136 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
10/11/2007 09:46:27
10/11/2007 09:47:39
2804 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
10/11/2007 09:58:51
10/11/2007 09:58:52
3248 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
Short description
Fichier
14/17
Machine
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
10/11/2007 17:46:29
10/11/2007 17:47:41
3728 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
10/11/2007 17:58:52
10/11/2007 17:58:53
4008 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
11/11/2007 01:46:31
11/11/2007 01:47:43
1960 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
11/11/2007 01:58:53
11/11/2007 01:58:54
3360 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
11/11/2007 03:27:56
11/11/2007 03:29:14
2948 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
11/11/2007 03:28:02
11/11/2007 03:39:02
4052 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
11/11/2007 09:00:00
11/11/2007 09:00:15
2604 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
11/11/2007 09:46:33
11/11/2007 09:47:45
3392 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
11/11/2007 09:58:53
11/11/2007 09:58:54
3984 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
11/11/2007 17:46:35
11/11/2007 17:47:47
1992 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
11/11/2007 17:58:54
11/11/2007 17:58:55
2636 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
12/11/2007 01:46:37
12/11/2007 01:47:49
2916 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
12/11/2007 01:58:54
12/11/2007 01:58:55
2624 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
12/11/2007 03:43:56
12/11/2007 03:45:14
1592 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
12/11/2007 03:44:03
12/11/2007 03:55:02
3552 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
12/11/2007 09:00:00
12/11/2007 09:00:14
1972 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
12/11/2007 09:19:42
12/11/2007 09:40:50
3780 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
12/11/2007 09:40:50
12/11/2007 10:01:53
2024 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
Short description
Fichier
15/17
Machine
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
12/11/2007 09:46:40
12/11/2007 09:47:50
2592 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
12/11/2007 09:58:55
12/11/2007 09:58:56
2680 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
12/11/2007 10:19:12
12/11/2007 10:40:14
3064 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
12/11/2007 17:46:41
12/11/2007 17:47:53
516 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
12/11/2007 17:58:56
12/11/2007 17:58:57
2776 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
13/11/2007 01:46:43
13/11/2007 01:47:55
1448 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
13/11/2007 01:58:56
13/11/2007 01:58:57
1896 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
13/11/2007 04:12:28
13/11/2007 04:13:46
3716 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
13/11/2007 04:12:33
13/11/2007 04:23:33
3460 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
13/11/2007 09:00:00
13/11/2007 09:00:18
2704 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
13/11/2007 09:18:42
13/11/2007 09:39:48
2692 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
13/11/2007 09:44:11
13/11/2007 10:05:16
4076 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
13/11/2007 09:46:45
13/11/2007 09:47:56
264 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
13/11/2007 09:58:57
13/11/2007 09:58:58
2948 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
13/11/2007 15:59:26
13/11/2007 16:20:33
2968 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
13/11/2007 17:46:47
13/11/2007 17:47:58
2680 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
13/11/2007 17:58:58
13/11/2007 17:58:58
2008 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
14/11/2007 01:46:49
14/11/2007 01:48:00
2216 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
Short description
Fichier
16/17
Machine
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
Date de démarrage
Date d'arrêt
ID Processus
enfant/parent
14/11/2007 01:58:58
14/11/2007 01:58:59
2820 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
14/11/2007 04:28:29
14/11/2007 04:29:47
2152 / 828
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\HelpSvc.exe
COMPUTER20
DOMAIN21 \
14/11/2007 04:28:36
14/11/2007 04:39:36
1556 / 656
C:\WINDOWS\system32\wbem\wmiprvse.exe
COMPUTER20
DOMAIN21 \
14/11/2007 09:00:00
14/11/2007 09:00:17
3156 / 828
C:\Program Files\ISDecisions\UserLock\ULReporter.exe
COMPUTER20
DOMAIN21 \
14/11/2007 09:14:35
14/11/2007 09:43:41
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
14/11/2007 09:46:51
14/11/2007 09:48:02
2560 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
14/11/2007 09:58:59
14/11/2007 09:59:00
2336 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
14/11/2007 10:28:06
14/11/2007 10:49:08
2736 / 1700
C:\WINDOWS\system32\inetsrv\w3wp.exe
COMPUTER20
DOMAIN21 \
14/11/2007 17:46:52
14/11/2007 17:48:02
2504 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
14/11/2007 17:58:59
14/11/2007 17:59:00
3260 / 384
C:\WINDOWS\system32\userinit.exe
COMPUTER20
DOMAIN21 \
628 / 1700
Short description
Fichier
17/17
Machine
Domaine\Utilisateur
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$
COMPUTER20
$

Documents pareils

Accès aux fichiers

Accès aux fichiers C:\WINDOWS\Tasks\WinReporter scan test.job

Plus en détail

Install statistics

Install statistics Computer filter Domain: DOMAIN2

Plus en détail