Windows 2000/XP has a limited number of traditional processes. If you need it, you can refer to it. The following is a list of common processes for the system first
================================================ =
The most basic system processes (that is, these processes are the basic conditions for the system to run, with these processes, the system will run normally)
smss.exe Session Manager
csrss. The exe subsystem server process
winlogon.exe administrative user login
services.exe contains many system services
lsass.exe to manage IP security policies and to start ISAKMP/Oakley (IKE) and IP security drivers.
(System Services)
Generate session keys and grant service tickets for interactive client/server authentication. (System Services)
svchost.exe contains many system services
svchost.exe
SPOOLSV.EXE loads files into memory for later printing. (system service)
explorer.exe resource manager
internat.exe pinyin icon in the tray area
----------------------- --------------------
Additional system processes (these processes are not necessary, you can increase or decrease through the service manager as needed)
mstask.exe allows the program to run at the specified time. (System Services)
regsvc.exe Allows Remote Registry Operations? System Services)
winmgmt.exe Provides system management information (system services).
inetinfo.exe provides FTP connection and management through the management unit of Internet Information Services. (System Services)
tlntsvr.exe Allows remote users to log in to the system and run the console program using the command line. (System Services)
Allows management of Web and FTP services through the snap-in of Internet Information Services. (System Services)
tftpd.exe implements the TFTP Internet standard. This standard does not require a username and password. Part of the remote installation service. (System Services)
termsrv.exe provides a multi-session environment that allows client devices to access virtual Windows 2000 Professional desktop sessions as well as Windows-based programs running on the server. (System Services)
dns.exe Answers queries and update requests for Domain Name System (DNS) names. (System Services)
--------------------
The following services are rarely used, which are harmful to safety, if not necessary Turn off
tcpsvcs.exe provides the ability to remotely install Windows 2000
Professional on a PXE remote bootable client computer. (System Services)
Supports the following TCP/IP services: Character Generator, Daytime, Discard, Echo, and Quote of the Day. (System Services)
ismserv.exe allows messages to be sent and received between Windows Advanced Server sites. (System Services)
ups.exe Manages the uninterruptible power supply (UPS) connected to the computer. (System Services)
wins.exe Provides the NetBiOS Name Service for TCP/IP clients who register and resolve NetBIOS-type names. (System Service)
llssrv.exe License Logging Service(system service)
ntfrs.exe Maintains file synchronization of file directory contents across multiple servers. (System Services)
RsSub.exe controls the media used to store data remotely. (System Services)
locator.exe Manages the RPC Name Service Database. (System Services)
lserver.exe Register a client license. (System Services)
dfssvc.exe Manages logical volumes distributed across a LAN or WAN. (System Services)
clipsrv.exe supports the Scrapbook Viewer so that you can view scrapbook pages from a remote scrapbook. (system service)
msdtc.exe Parallel transaction, distributed in more than two databases, message queues, file systems, or other transaction protection resource managers. (System Services)
faxsvc.exe helps you send and receive faxes. (system service)
cisvc.exe Indexing Service(system service)
dmadmin.exe System management service for disk management requests. (System Services)
mnmsrvc.exe Allows authorized users to remotely access the Windows desktop using NetMeeting. (System Services)
netdde.exe provides network transport and security features for Dynamic Data Exchange (DDE). (System Services)
smlogsvc.exe Configure performance logs and alerts. (System Services)
rsvp.exe provides network signaling and local communication control installation capabilities for Quality of Service (QoS)-dependent programs and control applications. (System Services)
RsEng.exe coordinates services and management tools used to store less frequently used data. (System Services)
RsFsa.exe manages the operation of remotely stored files. (System Services)
grovel.exe scans duplicate files on a zero-backup storage (SIS) volume and points duplicate files to a data storage point to save disk space. (System Services)
SCardSvr.exe Manages and controls access to smart cards inserted in the computer's smart card reader. (System Services)
snmp.exe Contains an agent that monitors the activity of network devices and reports to the network console workstation. (System Services)
snmptrap.exe Receives trap messages generated by local or remote SNMP agents and then passes the messages to the SNMP manager running on this computer. (System Services)
UtilMan.exe Launches and configures accessibility tools from a window. (System Services)
msIExec.exe Installs, repairs, and removes software based on the commands contained in the .MSI file. (System Services)
summary:
discover the secret of suspicious processes is to look at the Task Manager process list to see more after a suspicious process can be found, just find a group of familiar people The same as strangers.
====================================================================== New additions to the process after Windows XP installed Sp 2:
control.exe---Control Panel program.
alg.exe --- Application Layer Gateway Service Application Layer Gateway Service (Firewall)
wscenfy.exe --- Windows Security Center Notification App Security Center Warning Program
Wuauclt.exe --- automatic Updates to automatically upgrade
alg.exe is Microsoft Windows firewall. Although the function is not very strong, it can meet the most basic requirements of users, and it occupies quite a small amount of resources.
wscenfy.exe is the notification program for Microsoft's Security Center. Wscenfy.exe will appear when your system security settings are at risk. If you want it to not appear, you have to install anti-virus software or give up monitoring. 2 Turn on automatic updates. 3 Turn on the firewall or choose not to monitor the firewall. Otherwise, this stuff will depend on the taskbar.
Wuauclt.exe is an automatic update program for Windows XP. If you don't have an automatic upgrade, you won't have this process, and even if you turn it on, it won't be turned on at all times. The resources occupied by Wuauclt.exe are not too small. The memory usage at runtime is about 6m, but the automatic upgrade is not always open every moment. But if you close this program, hehe. Wscenfy.exe will start, it is 3m memory, huh, huh. I will inform you all the time, pay attention to this matter. I have to speak in memory.
============================================================================================================ Process, part of Microsoft Windows Media player 10