The following are the most basic system processes for a list of the most common processes in the system (that is, these processes are the basic conditions for the system to run, and the system will function properly with these processes)
Smss.exe Session Manager
Winlogon.exe Managing User Logins
Lsass.exe manages IP security policies as well as startup Isakmp/oakley (IKE) and IP security drivers. (System service) generates a session key and grants service credentials (ticket) for interactive client/server authentication. (System Services)
Svchost.exe contains many system services Svchost.exe
SPOOLSV. EXE loads the file into memory for later printing. (System Services)
Explorer.exe explorer
The phonetic icon for the Internat.exe tray area ------------------------------------------- Additional system processes (these processes are not necessary, You can increase or decrease as needed through the service manager)
Mstask.exe allows the program to run at a specified time. (System Services)
Regsvc.exe allows remote registry operations. (System Services)
Inetinfo.exe provides FTP connectivity and management through the Internet Information Services snap-in. (System Services)
Tlntsvr.exe allows remote users to log on to the system and run the console program using the command line. (System services) Allows you to manage Web and FTP services through the Internet Information Services snap-in. (System Services)
Tftpd.exe implements TFTP Internet standards. The standard does not require a user name and password. Part of the Remote Installation service. (System services) Termsrv.exe provides a multi-session environment that allows client devices to access virtual Windows Professional desktop sessions and Windows-based programs running on the server. (System Services)
Dns.exe answers queries and update requests for Domain Name System (DNS) names. (System services) The following services are seldom used, are harmful to safety and should be turned off if not necessary
Tcpsvcs.exe provides the ability to remotely install Windows Professional on a client computer that PXE can remotely start . (System services) The following TCP/IP services are supported: Character Generator, Daytime, Discard, Echo, and quote of the day. (System Services)
Ismserv.exe allows messages to be sent and received between Windows advanced Server sites. (System Services)
Ups.exe manages an uninterruptible power supply (UPS) connected to the computer. (System Services)
Wins.exe provides the NetBIOS name service for TCP/IP clients that register and resolve NetBIOS-type names. (System Services)
Llssrv.exe License Logging Service (System service)
Ntfrs.exe maintains file synchronization of file directory content across multiple servers. (System Services)
RsSub.exe controls the media used to store data remotely. (System Services)
Locator.exe manages the RPC name service database. (System Services)
Lserver.exe register the client license. (System Services)
Dfssvc.exe manages logical volumes distributed across a local area network or wide area network. (System Services)
Clipsrv.exe supports ClipBook Viewer so that you can view the clipping page from a remote ClipBook. (System Services)
Msdtc.exe is a parallel transaction that is distributed over more than two databases, Message Queuing, file systems, or other transaction protection resource managers. (System Services)
Faxsvc.exe helps you send and receive faxes. (System Services)
Cisvc.exe Indexing Service (System service)
Dmadmin.exe the System Management Service for disk Management requests. (System Services)
Mnmsrvc.exe allows users with permissions to remotely access the Windows desktop using NetMeeting. (System Services)
Netdde.exe provides network transport and security features for Dynamic Data exchange (DDE). (System Services)
Smlogsvc.exe Configure Performance Logs and Alerts. (System Services)
Rsvp.exe provides network signaling and local communication control installation functions for programs and control applications that rely on quality of service (QoS). (System Services)
RsEng.exe coordinates the services and management tools used to store infrequently used data. (System Services)
RsFsa.exe manages the operation of remotely stored files. (System Services)
Grovel.exe scans the duplicate files on the 0 backup storage (SIS) volume and points the duplicate files to a data storage point to conserve disk space. (System Services)
SCardSvr.exe manages and accesses the smart card that is inserted in the computer's smart card reader. (System Services)
The Snmp.exe contains agents that can monitor the activity of network devices and report to the network console workstation. (System Services)
Snmptrap.exe receives a trap message generated by the local or remote SNMP agent and then passes the message to the SNMP manager running on this computer. (System Services)
UtilMan.exe Start and configure Accessibility tools from one window. (System Services)
Msiexec.exe basis. MSI file contains commands to install, repair, and remove software. (System services) Summary: the secret to discovering suspicious processes is to look at the list of processes in the Task Manager, and when you see more, you can find suspicious processes at a glance, just as you would find strangers in a group of familiar people. another wordy. Windows XP loaded on SP 2 after the process added the new ding
Control.exe is the Control Panel program.
Alg.exe---Application Layer Gateway Service application-tier gateways services (firewalls)
Wscenfy.exe---Windows Security Center Notification APP Security Centre Warning program
Wuauclt.exe---Automatic updates auto-upgrade
Alg.exe is Microsoft Windows Firewall. Although the function is not very strong, but has been able to meet the user's most basic requirements, it accounted for a relatively small amount of resources.
Wscenfy.exe is the notification program for Microsoft's Security Center. Wscenfy.exe, there is a risk in your system security settings. If you want to keep it from appearing, you have to ① install anti-virus software, or give up monitoring. ② turn on Automatic Updates. ③ turn on the firewall, or choose not to monitor the firewall. Otherwise, this stuff is on the taskbar.
Wuauclt.exe is an automatic update program for windowsxp. If you don't turn on auto-escalation, you won't have the process, and even if you open it, it's not always open at all. Wuauclt.exe's resources are not too small. Run-time memory consumption reached about 6m, fortunately, the automatic upgrade is not every moment open. But if you close this program, hehe. Wscenfy.exe will start, but also 3m of memory, hehe. You should pay attention to this matter. And the memory to speak again.
Wdfmgr or Wdfmgr.exe process---windows Driver Foundation Manager general process, part of Microsoft Windows Media Player 10.
System Main Process