Common system processes page 1/2

1. System Process [system process]
1: necessary processes of the system
System Process
Process file: [system process] or [system process]
Process name: Windows Memory Processing System Process
Description: Windows page memory management process, with a priority of 0.
Alg.exe
Process file: ALG or alg.exe
Process name: Application Layer Gateway Service
Description: This is an Application Layer Gateway Service for network sharing.
Csrss.exe
Process file: CSRSS or csrss.exe
Process name: Client/Server Runtime Server Subsystem
Description: Client Service subsystem used to control Windows Graphics subsystems.
Ddhelp.exe
Process file: ddhelp or ddhelp.exe
Process name: DirectDraw helper
Description: DirectDraw helper is an integral part of DirectX for graphics services.
Dllhost.exe
Process file: DLLHOST or dllhost.exe
Process name: dcom dll host process
Description: The dcom dll host process supports running Windows Based on COM objects. Program
Assumer.exe
Process file: Explorer or assumer.exe
Process name: Program Management
Description: Windows program manager or Windows Explorer is used to control Windows Graphics shell, including Start Menu, taskbar, desktop and file management. This process is mainly responsible for displaying the icons and taskbar on the system desktop.
Inetinfo.exe
Process file: inetinfo or inetinfo.exe
Process name: IIS Admin Service helper
Description: inetinfo is part of Microsoft Internet infomation Services (IIS). It is used for debugging and debugging.
Internat.exe
Process file: internat or internat.exe
Process name: Input locales
Description: This input control icon is used to change country-like settings, keyboard types, and date formats.
Kernel32.dll
Process file: Kernel32 or kernel32.dll
Process name: Windows Shell Process
Description: Windows Shell processes are used to manage multithreading, memory, and resources.
Lsass.exe
Process file: LSASS or lsass.exe
Process name: local security permission Service
Description: This local security permission Service controls the Windows security mechanism.
Process details: manage IP Security Policies and start ISAKMP/Oakley (IKE) and IP Security drivers. (System Service) generates session keys and grants service credenet (ticket) for Interactive Client/Server Authentication, that is, the local security permission service, which is one of the core processes of windowsde, hackers have also tried every means to find vulnerabilities. One of the most famous vulnerabilities was exploited,
Mdm.exe
Process file: Mdm or mdm.exe
Process name: Machine debug Manager
Description: Debug debugging management. It is used to debug applications and Microsoft Script Editor in Microsoft Office.
Mmtask. Tsk
Process file: mmtask or mmtask. Tsk
Process name: multimedia support process
Description: This windows multimedia background program controls multimedia services.
Mprexe.exe
Process file: mprexe or mprexe.exe
Process name: Windows route Process
Description: The Windows route process includes sending network requests to the appropriate network.
Msgsrv32.exe
Process file: msgsrv32 or msgsrv32.exe
Process name: Windows Messenger Service
Description: The Windows Messenger service calls the Windows Driver and program management at startup.
Mstask.exe
Process file: mstask or mstask.exe
Process name: Windows scheduled task
Description: A Windows scheduled task is used to set the inherited time or date for backup or operation.
Regsvc.exe
Process file: regsvc or regsvc.exe
Process name: Remote Registry Service
Description: Remote Registry is used to access the registry on a remote computer.
Rpcss.exe
Process file: RPCSS or rpcss.exe
Process name: RPC Portmapper
Description: The rpc port ing process in Windows processes RPC calls (Remote module calls) and maps them to the specified service provider.
Services.exe
Process file: services or services.exe
Process name: Windows Service Controller
Description: Windows service management.
Smss.exe
Process file: SMSs or smss.exe
Process name: session manager subsystem
Description: The process for the session management subsystem to initialize system variables, MS-DOS driver name is similar to LPT1 and COM, call Win32 shell sub-system and run in Windows login process
Snmp.exe
Process file: SNMP or snmp.exe
Process name: Microsoft SNMP Agent
Description: a simple network protocol proxy (SNMP) in Windows is used to listen to and send requests to the appropriate network section.
Spool32.exe
Process file: spool32 or spool32.exe
Process name: Printer Spooler
Description: Windows Print task control program, used for printer preparation.
Spoolsv.exe
Process file: spoolsv or spoolsv.exe
Process name: Printer Spooler Service
Description: Windows Print task control program, used for printer preparation.
Stisvc.exe
Process file: stisvc or stisvc.exe
Process name: Still Image Service
Description: The Still Image Service is used to control the connection between a scanner and a digital camera on Windows.
Svchost.exe
Process file: svchost or svchost.exe
Process name: service host process
Description: service host process is a standard dynamic connection Database Host processing service.
Process details: svchost.exe is a core process of the system, not a virus process. However, because of the special nature of the svchost.exeprocess, the unique svchost.exe virus is also widely used. You can check the execution path of the svchost.exe process to check whether it is the name of the common host process of the Service running from the dynamic link library (DLL.
Svchost.exe is a core process of Windows XP. Svchost.exe not only appears in Windows XP, but also exists in the Windows System Using ntinner. Generally, in Windows 2000, the number of svchost.exe processes is 2, while in Windows XP, the number of svchost.exe processes has increased to 4 and more. As you can see, there are several svchost.exe in the process of the system.
If you suspect that the computer can be infected with viruses and the svchost.exe service encounters an exception, you can search for the svchost.exe file to find the exception. Generally, only the svchost.exe program under the "C: windowssystem32”" directory is found. If you find the svchost.exe program in another directory, it is probably poisoned.
Process file: system or System
Process name: Windows System Process
Description: Microsoft Windows system process.
Taskmgr.exe
Process file: taskmgr or taskmgr.exe
Process name: the Windows Task Manager
Description: Windows Task Manager. It is the executor of Windows Task Management.
Taskmon.exe
Process file: taskmon or taskmon.exe
Process name: Windows Task Optimizer
Description: The Windows Task optimizer monitors the frequency of using a program and sorts out the optimized hard disk by loading frequently used programs.
Tcpsvcs.exe
Process file: tcpsvcs or tcpsvcs.exe
Process name: TCP/IP Services
Description: TCP/IP Services application supports connecting LAN and Internet through TCP/IP
Winlogon.exe
Process file: Winlogon or winlogon.exe
Process name: Windows logon process
Description: Windows NT user logon program.
Winmgmt.exe
Process file: Winmgmt or winmgmt.exe
Process name: Windows Management Service
Description: Windows Management Service processes requests from the application client using Windows Management Instrumentation data (Wmi) technology.
Wuauclt.exe
Process file: wuauclt or wuauclt.exe
Process name: AutoUpdate for Windows
Description: Windows automatic upgrade,
Process description: wuauclt.exe is the system process in charge of Windows automatic upgrade. you can check for recent windows updates online. If you do not enable automatic updates, this process will not happen, and even if you enable it, it will not be enabled at any time.
Wuauc.exe
Process file: wuauc or wuauc.exe
Process name: automatic update
Process description: wuauc.exe is automatically updated for Windows Management. This program automatically checks recent windows updates.