What are the system processes in the Windows Task Manager?

Which processes in the Windows Task Manager are system processes?

In Windows, the most attractive window is not the resource manager, but the task manager, which is a window from which we can get a glimpse of the system kernel. The basic function of the Task Manager is to display the programs, processes, and services currently running on your computer. In general, you can use Task Manager to close programs that are not responding, or to view the performance of your current computer. For computers on a network, you can use the Task Manager to view the network status; if a user connects to our computer, you can see who is connecting and can send messages to them. You can open the Task Manager window by right-clicking on the taskbar and selecting “Start Task Manager" or press [CtrI+Shift+Esc]. For the network management, the task manager is usually used when dealing with a virus-infected electric chest. Perhaps because the protection of the virus can not completely end the virus process at one time, but at least can determine whether the system is currently running a suspicious virus program. Virus programs are usually suspicious: their names are very different from system processes and normal programs. You can find them carefully when you look at them; some viruses can spoof system processes, such as using the similarity of l and 1 to name the program, confuse the fish, and escape the check. . To quickly identify the progress of a virus program, first determine that the system process is necessary, and it is best to be familiar with the system process. The typical system process is as follows. · SystemldleProcess: This is the key process of the system, the function is to cycle the CPU's idleness. The larger the value, the better. The process cannot be ended. · System: This is the Windows page memory management process, with 0 priority. When .exe appears after system, it is a virus process, the name of the system does not have an exe suffix. ·explorer: The explorer.exe process controls the standard user interface and desktop. If the system does not display the desktop, most of the time this program is not running. ·Iexplore: This is Microsoft's browser process and a program that is often spoofed. ·csrss: This is one of the core programs of Windows, called the Client Server rimtime Process, which cannot be terminated. ·winlogon: This process is required to handle login and logout tasks. ·services: This is a Windows system process for starting and stopping services. ·Svchost: This is a Windows system program for executing dll files. Startup appears "Generic host process for win32 services" (experienced problems need to be closed), generally this process is not caused by the dll file. ·smss: This is one of the core processes of Windows and is the session manager for the Windows NT kernel. ·lsass: This is the Windows Local Security Rights Service, which handles some special security mechanisms and login policies. There are many system processes in Windows, and different versions of Windows are different. Some of the system processes belong to the system service and can be stopped by the services.msc sequence. One of the optimizations of system optimization is the optimization of services. Stopping those services that are not used can save a lot of money for the system and facilitate the smooth operation of the system. By looking at the properties of a service (executable path and dependencies), you can see which executable is started by this service, as shown in Figure 5-13. The task manager of Windows has different appearances in different system versions, and the management function of the system process is generally improved. For example, in Windows 7, you can select "Show only user process" to isolate the system process from the user process; you can easily locate the program directory from the process, which is convenient for finding virus files; you can also manage tasks at the same time. Enable and stop a service without running servlces.msc, etc. Many times, virus processes cannot be terminated in the task manager. At this time, you will use a snow sword & mdash; — ice blade IceSword, its powerful enough to end the virus rogue. Another helper for viewing system processes is Procexp, which is better than the system's own task manager. Many system maintenance tools also come with process viewing. In short, system processes and services are a special practice of network management, and the effect is immediate.