Process PID CPU Description Company Name
System Idle Process 0 95.38
Interrupts n/a Hardware Interrupts
DPCs n/a Deferred Procedure Calls
System 4
smss.exe 476 Windows NT Session Manager Microsoft Corporation
csrss.exe 532 3.08 Client Server Runtime Process Microsoft Corporation
winlogon.exe 556 Aplicación de inicio de sesión de Windows NT Microsoft Corporation
services.exe 600 Aplicación de servicios y controlador Microsoft Corporation
svchost.exe 784 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 872 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1024 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1044 Generic Host Process for Win32 Services Microsoft Corporation
lsass.exe 612 LSA Shell (Export Version) Microsoft Corporation
explorer.exe 1304 Explorador de Windows Microsoft Corporation
procexp.exe 348 1.54 Sysinternals Process Explorer Sysinternals

Process: System Idle Process Pid: 0

Type Name
Process PID CPU Description Company Name
System Idle Process 0 86.15
explorer.exe 1304 1.54 Explorador de Windows Microsoft Corporation

Process: explorer.exe Pid: 1304

Type Name
Desktop \Default
Directory \Windows
Directory \BaseNamedObjects
Directory \KnownDlls
Event \BaseNamedObjects\userenv: User Profile setup event
Event \BaseNamedObjects\crypt32LogoffEvent
Event \BaseNamedObjects\ShellReadyEvent
Event \BaseNamedObjects\userenv: Machine Group Policy has been applied
Event \BaseNamedObjects\userenv: User Group Policy has been applied
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\Documents and Settings\All Users\Escritorio
File D:\Documents and Settings\Claudia\Escritorio
File D:\Documents and Settings\Claudia\Configuración local\Application Data\Microsoft\CD Burning
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File \Device\NamedPipe\ntsvcs
File D:\Documents and Settings\All Users\Menú Inicio
File D:\Documents and Settings\Claudia\Menú Inicio
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File \Dfs
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File \Device\KsecDD
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\Documents and Settings\Claudia\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat
File D:\Documents and Settings\Claudia\Cookies\index.dat
File D:\Documents and Settings\Claudia\Configuración local\Historial\History.IE5\index.dat
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\Documents and Settings\Claudia\Configuración local\Historial\History.IE5\MSHist0120050305200503 06\index.dat
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.1360_x-ww_24a2ed47
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File \Device\NamedPipe\srvsvc
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\Documents and Settings\Claudia\Datos de programa\Microsoft\SystemCertificates\My
File C:\procexpnt
File \Device\Tcp
File \Device\Afd
File \Device\Tcp
File D:\
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
Key HKCU\Software\Microsoft\Plus!\Themes\Apply
Key HKCU\Control Panel\Appearance\New Schemes
Key HKCU\Control Panel\Appearance\New Schemes\21
Key HKCU\Control Panel\Appearance\New Schemes\21
Key HKCU\Control Panel\Appearance\New Schemes\21\Sizes\0
Key HKCU\Software\Classes
Key HKCR\http\shell
Key HKCU\Software\Classes
Key HKLM
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKU
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\FileExts
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Global
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Sites
Key HKCU\Software\Microsoft\Windows\Shell
Key HKCU\Software\Classes\CLSID
Key HKCU\Software\Microsoft\Windows\ShellNoRoam
Key HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICac he
Key HKCU\Software\Classes
Key HKLM\SOFTWARE\Microsoft\Windows\Shell
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\ HwOrder
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Internet Explorer\TypedURLs
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\ZoneMap
Key HKCU\Software\Microsoft\Windows\ShellNoRoam\Bags\3 3\Shell
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\RunMRU
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKLM\SYSTEM\Setup
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\P3P\History
Key HKCU\Software\Classes
Key HKCU
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Sites
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Global
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Roo t
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\CA
Key HKCU\Software\Microsoft\SystemCertificates\CA
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoo t
Key HKCU\Software\Microsoft\SystemCertificates\Root
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA
Key HKCU\Software\Microsoft\SystemCertificates\trust
Key HKCU
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\trust
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Tru st
Key HKCU\Software\Microsoft\SystemCertificates\My
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer
Key HKLM\SOFTWARE\Policies\Microsoft\SystemCertificate s
Key HKCU\Software\Policies\Microsoft\SystemCertificate s
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\World Full Access Shared Parameters
Key HKCU\Software\Policies\Microsoft\SystemCertificate s
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parame ters\Protocol_Catalog9
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parame ters\NameSpace_Catalog5
Key HKLM\SOFTWARE\Microsoft\Tracing\RASAPI32
Key HKCU
Key HKLM\SYSTEM\ControlSet001\Hardware Profiles\0001
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\ZoneMap
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer
Key HKCR
Key HKCU\Software\Classes
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKU
Key HKCR
Key HKU
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKCR\CLSID
Key HKCR
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKU
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKCR\CLSID
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer
Key HKCU\Software\Classes
KeyedEvent \KernelObjects\CritSecOutOfMemoryEvent
Mutant \BaseNamedObjects\MSUIM.GlobalLangBarEventSink.Mut ex
Mutant \BaseNamedObjects\MSUIM.GlobalCompartment.Mutex
Mutant \BaseNamedObjects\MSUIM.Assembly.Mutex
Mutant \BaseNamedObjects\MSUIM.Layouts.Mutex
Mutant \BaseNamedObjects\MSUIM.MarshalInterfaceMutex.TMD
Mutant \BaseNamedObjects\MSCTF.TimListMUTEX.
Mutant \BaseNamedObjects\_SHuassist.mtx
Mutant \BaseNamedObjects\d:!documents and settings!claudia!configuración local!historial!history.ie5!mshist0120050305200503 06!
Mutant \BaseNamedObjects\RasPbFile
Mutant \BaseNamedObjects\WininetStartupMutex
Mutant \BaseNamedObjects\WininetConnectionMutex
Mutant \BaseNamedObjects\_!MSFTHISTORY!_
Mutant \BaseNamedObjects\d:!documents and settings!claudia!configuración local!archivos temporales de internet!content.ie5!
Mutant \BaseNamedObjects\d:!documents and settings!claudia!cookies!
Mutant \BaseNamedObjects\d:!documents and settings!claudia!configuración local!historial!history.ie5!
Mutant \BaseNamedObjects\WininetProxyRegistryMutex
Mutant \BaseNamedObjects\ZonesCounterMutex
Mutant \BaseNamedObjects\ZonesCacheCounterMutex
Mutant \BaseNamedObjects\_!SHMSFTHISTORY!_
Mutant \BaseNamedObjects\ExplorerIsShellMutex
Mutant \BaseNamedObjects\ShimCacheMutex
Port \RPC Control\OLE6C269EDEE1AC46C4AF776567B4FF
Section \BaseNamedObjects\CiceroSharedMemDefault
Section \BaseNamedObjects\D:_Documents and Settings_Claudia_Configuración local_Historial_History.IE5_MSHist0120050305200503 06_index.dat_32768
Section \BaseNamedObjects\D:_Documents and Settings_Claudia_Configuración local_Archivos temporales de Internet_Content.IE5_index.dat_6438912
Section \BaseNamedObjects\D:_Documents and Settings_Claudia_Configuración local_Historial_History.IE5_index.dat_409600
Section \BaseNamedObjects\D:_Documents and Settings_Claudia_Cookies_index.dat_65536
Section \BaseNamedObjects\UrlZonesSM_Claudia
Section \BaseNamedObjects\ShimSharedMemory
Section \BaseNamedObjects\__R_000000000007_SMem__
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Semaphore \BaseNamedObjects\shell.{210A4BA0-3AEA-1069-A2D9-08002B30309D}
Semaphore \BaseNamedObjects\shell.{7CB834F0-527B-11D2-9D1F-0000F805CA57}
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Semaphore \BaseNamedObjects\shell.{6D5313C0-8C62-11D1-B2CD-006097DF8C11}
Semaphore \BaseNamedObjects\shell.{090851A5-EB96-11D2-8BE4-00C04FA31A66}
Thread explorer.exe(1304): 1312
Thread explorer.exe(1304): 1424
Thread explorer.exe(1304): 1432
Thread explorer.exe(1304): 1436
Thread explorer.exe(1304): 1444
Thread explorer.exe(1304): 1456
Thread explorer.exe(1304): 1456
Thread explorer.exe(1304): 340
Thread explorer.exe(1304): 1428
Thread explorer.exe(1304): 1960
Thread explorer.exe(1304): 248
Thread explorer.exe(1304): 2008
Thread explorer.exe(1304): 256
Token NT AUTHORITY\SYSTEM
WindowStation \Windows\WindowStations\WinSta0
WindowStation \Windows\WindowStations\WinSta0

espero que con esto me puedas ayudar muchas gracias