From cainiao to master: comprehensive understanding of System Processes

Note: The Process List of the system is the focus of beginners.
Process names describe the most basic system processes. That is to say, these processes are the basic conditions for system operation. With these processes, the system can run normally)

Smss.exe Session Manager

Csrss.exe subsystem server process

Winlogon.exe manage user logon

Services.exe contains many system services

Lsass.exe manages IP Security Policies and starts ISAKMP/Oakley (IKE) and IP Security drivers. (System Service) generate session keys and assign service creden。 (ticket) for Interactive Client/Server Authentication ). (System Service)

Svchost.exe contains many system services

Svchost.exe

SPOOLSV. EXE loads the file into the memory for later printing. (System Service)

Assumer.exe Resource Manager

Pinyin icon in internat.exe Tray
Attaching system processes these processes are not necessary. You can increase or decrease them through the Service Manager as needed)

Mstask.exe allows programs to run at a specified time. (System Service)

Regsvc.exe allows remote registry operations. (System Service)

Winmgmt.exe provides system management information (system services ).

Inetinfo.exe provides FTP connection and management through the management unit of Internet Information Service. (System Service)

Tlntsvr.exe allows a remote user to log on to the system and run the console program using the command line. (System Service)
Allows you to manage Web and FTP services through the management units of Internet Information Services. (System Service)

Tftpd.exe implements the TFTP Internet standard. The user name and password are not required for this standard. Part of the Remote Installation service. (System Service)

Termsrv.exe provides a multi-session environment that allows client devices to access virtual Windows 2000

Professional desktop sessions and Windows-based programs running on servers. (System Service)

Dns.exe responds to queries and updates requests for Domain Name System (DNS) names. (System Service)

The following services are rarely used. The above services are harmful to security and should be disabled if not necessary:

Tcpsvcs.exe provides the ability to remotely install Windows2000 Professional on a PXE client computer. (System Service)
The following TCP/IP Services are supported: Character Generator, Daytime, Discard, Echo, and Quote of the Day. (System Service)

Ismserv.exe allows sending and receiving messages between Windows Advanced Server sites. (System Service)

Ups.exe manages the uninterruptible power supply (UPS) that is connected to the computer ). (System Service)

Wins.exe provides the NetBIOS Name Service for TCP/IP customers who register and resolve NetBIOS names. (System Service)

Llssrv.exe License Logging Service (system service)

Ntfrs.exe maintains file synchronization between multiple servers in the file directory. (System Service)

RsSub.exe controls the media used to remotely store data. (System Service)

Locator.exe manages the RPC Name Service database. (System Service)

Lserver.exe registers the client license. (System Service)

Dfssvc.exe manages logical volumes distributed on the LAN or WAN. (System Service)

Clipsrv.exe supports "Clipboard viewer", so that you can view the clipboard page remotely. (System Service)
Msdtc.exe is a parallel transaction that is distributed in more than two databases, message queues, file systems, or other transaction protection resource managers. (System Service)

Faxsvc.exe helps you send and receive faxes. (System Service)

Cisvc.exe Indexing Service (system service)

Dmadmin.exe System Management Service for disk management requests. (System Service)

Mnmsrvc.exe allows authorized users to remotely access Windows desktops using NetMeeting. (System Service)

Netdde.exe provides the network transmission and security features of Dynamic Data Exchange (DDE. (System Service)

Smlogsvc.exe configure Performance Logs and alarms. (System Service)

Rsvp.exe provides network signal and local communication control installation for quality service (QoS)-dependent programs and control applications. (System Service)

RsEng.exe is a service and management tool that stores infrequently used data. (System Service)

RsFsa.exe Manages objects stored remotely. (System Service)

Grovel.exe scans duplicate files on the zero-backup storage (SIS) volume and points the duplicate files to a data storage point to save disk space. (System Service)

SCardSvr.exe manages and controls access to smart cards inserted into smart card readers. (System Service)

Snmp.exe contains a proxy program that can monitor activities of network devices and report to the Network Console workstation. (System Service)

Snmptrap.exe Receives trap messages generated by local or remote SNMP agents, and then transmits the messages to the SNMP manager running on this computer. (System Service)

UtilMan.exe starts and configures the auxiliary tool from a window. (System Service)

Msiexec.exe installs, repairs, and deletes software based on the commands in the. MSI file. (System Service)

Related Articles]

• System Process Overview

• Windows Process application knowledge

• Introduction to basic Windows System Processes