One: System processes [Systems process]
1: System-necessary processes
System process
Process files: [System process] or [system process]
Process name: Windows Memory Processing System process
Description: Windows page memory management process with a level 0 priority.
Alg.exe
Process files: ALG or Alg.exe
Process Name: application-tier Gateway Service
Description: This is an application-tier Gateway service for network sharing
Csrss.exe
Process file: Csrss or Csrss.exe
Process name: Client/server Runtime Server Subsystem
Description: The client service subsystem, which controls the Windows graphics-related subsystem.
Ddhelp.exe
Process file: DDhelp or Ddhelp.exe
Process Name: DirectDraw Helper
Description: DirectDraw helper is an integral part of DirectX for Graphics services.
Dllhost.exe
Process file: Dllhost or Dllhost.exe
Process name: DCOM DLL Host Process
Description: The DCOM DLL host process supports a COM object-based DLL to run Windows programs
Explorer.exe
Process file: Explorer or Explorer.exe
Process Name: Program Management
Description: Windows Program Manager or Windows Explorer is used to control the Windows graphics Shell, including Start menu, taskbar, desktop, and file management. This process is primarily responsible for displaying icons on the system desktop and the taskbar
Inetinfo.exe
Process file: Inetinfo or Inetinfo.exe
Process name: IIS Admin Service Helper
Description: Inetinfo is part of Microsoft Internet infomation Services (IIS) for debug debug debugging.
Internat.exe
Process file: Internat or Internat.exe
Process Name: Input Locales
Description: This input control icon is used to change similar country settings, keyboard types, and date formats
Kernel32.dll
Process file: Kernel32 or Kernel32.dll
Process name: Windows shell process
Description: Windows shell process for managing multithreading, memory, and resources
Lsass.exe
Process file: Lsass or Lsass.exe
Process Name: Local Security Permission Service
Description: This local Security Privilege service controls Windows security.
Process Walkthrough: Managing IP Security Policies and initiating Isakmp/oakley (IKE) and IP security drivers. (System services) generates session keys and grants service credentials for interactive client/server authentication (ticket), the local Security Privilege service, which belongs to one of the core processes of WINDOWSDE, and is exploited by hackers to find loopholes, and the famous shock wave exploits one of the loopholes,
Mdm.exe
Process files: MDM or Mdm.exe
Process name: Machine Debug Manager
Description: Debug error management for debugging applications and the Microsoft Script Editor Script Editor in Microsoft Office
Mmtask.tsk
Process file: Mmtask or Mmtask.tsk
Process Name: Multimedia support Process
Description: This Windows multimedia Background program Control Multimedia Service
Mprexe.exe
Process file: Mprexe or Mprexe.exe
Process Name: Windows routing Process
Description: The Windows routing process involves making network requests to the appropriate network segment
Msgsrv32.exe
Process file: Msgsrv32 or Msgsrv32.exe
Process name: Windows Messenger Service
Description: Windows Messenger Service invokes Windows driver and program management at startup
Mstask.exe
Process file: Mstask or Mstask.exe
Process Name: Windows Scheduled Tasks
Description: Windows Scheduled tasks are used to set the time or date that the inheritance is backed up or run
Regsvc.exe
Process file: Regsvc or Regsvc.exe
Process Name: Remote Registry Service
Description: The remote Registry service is used to access the registry on the remote computer
Rpcss.exe
Process file: RPCSS or Rpcss.exe
Process Name: RPC portmapper
Description: The RPC port mapping process for Windows handles RPC calls (remote module calls) and maps them to the specified service provider
Services.exe
Process files: Services or Services.exe
Process name: Windows Service Controller
Description: Managing Windows Services
Smss.exe
Process file: SMSs or Smss.exe
Process Name: Session Manager Subsystem
Description: This process is used by the session management subsystem to initialize system variables, MS-DOS driver names like LPT1 and COM, call the Win32 shell subsystem and run in the Windows login process
Snmp.exe
Process files: SNMP or Snmp.exe
Process name: Microsoft SNMP Agent
Description: Windows Simple Network protocol agent (SNMP) is used to listen and send requests to the appropriate network section
Spool32.exe
Process file: Spool32 or Spool32.exe
Process Name: Printer Spooler
Description: Windows Print task control program for printer ready
Spoolsv.exe
Process file: SPOOLSV or Spoolsv.exe
Process name: Printer Spooler Service
Description: Windows Print task control program for printer ready
Stisvc.exe
Process file: Stisvc or Stisvc.exe
Process name: Still Image Service
Description: Still Image service is used to control scanners and digital camera connections in Windows
Svchost.exe
Process file: Svchost or Svchost.exe
Process Name: Service Host Process
Description: Service host process is a standard dynamic connection Library host processing services.
Process Explanation: Svchost.exe is a core process of a system, not a virus process. However, because of the particularity of the Svchost.exe process, the virus will do everything possible to invade Svchost.exe. You can confirm whether poisoning Svchost.exe is the generic host process name of a service running from a dynamic-link library (DLL) by looking at the execution path of the Svchost.exe process.
In fact, Svchost.exe is a core process of Windows XP systems. Svchost.exe not only appears in Windows XP, but there are Svchost.exe in Windows systems that use the NT kernel. Typically, the number of Svchost.exe processes in Windows 2000 is 2, and the number of Svchost.exe processes in Windows XP rises to 4 and more than 4. So there are a few Svchost.exe in the system's process list that you don't need to worry about.
If you suspect that your computer may be infected with a virus, Svchost.exe services can find anomalies by searching for Svchost.exe files. In general, you will find only one Svchost.exe program in the "C:windowssystem32" directory. If you find a Svchost.exe program in another directory, it is likely to be poisoned.
Process files: System or System
Process Name: Windows System Process
Description: Microsoft Windows system process.
Taskmgr.exe
Process file: Taskmgr or Taskmgr.exe
Process name: The Windows Task Manager
Description: Windows Task Manager, Windows task management performer
Taskmon.exe
Process file: Taskmon or Taskmon.exe
Process name: Windows Task Optimizer
Description: Windows task optimizer monitors the frequency with which you use a program and collates the hard drive by loading the programs that you use frequently
Tcpsvcs.exe
Process file: Tcpsvcs or Tcpsvcs.exe
Process name: TCP/IP Services
Description: TCP/IP Services application supports LAN and Internet connectivity via TCP/IP
Winlogon.exe
Process file: Winlogon or Winlogon.exe
Process Name: Windows Logon Process
Description: Windows NT User Login program.
Winmgmt.exe
Process file: WinMgmt or Winmgmt.exe
Process name: Windows Management Service
Description: Windows Management Service processes requests from application clients through Windows Management Instrumentation Data (WMI) technology
Wuauclt.exe
Process file: WUAUCLT or Wuauclt.exe
Process name: AutoUpdate for Windows
Description: Windows automatic upgrades,
Process Details: Wuauclt.exe is a system process that is responsible for automatic windows upgrades. Can detect the latest Windows Update online if you don't turn on automatic upgrades you won't have this process, and even if you open it, it's not always open.
Wuauc.exe
Process file: Wuauc or Wuauc.exe
Process Name: Automatic Updates Automatic upgrade
Process Description: Wuauc.exe Automatic Updates for Windows management. This program automatically checks for recent Windows updates.
Current 1/2 page
12 Next read the full text
