below 3 are the netbackup files, and its very normal that they are accessing C:\Program Files\VERITAS\
C:\Program Files\VERITAS\NetBackup\bin\bmrbd.exe
C:\Program Files\Veritas\NetBackup\bin\nbftclnt.exe
C:\Program Files\VERITAS\VxPBX\bin\pbx_exchange.exe
it seems you have FT media server and BMR enabled, that is the reason they are trying to access that. and pbx is the always run when netbackup runing...
C:\Windows\System32\spoolsv.exe is seems like a spool process.. (i am not sure about this)