The most basic system process SMSS.exe session manager CSRSS.EXE subsystem server process Winlogon.exe management user login Services.exe Contains Many System Services LSASS.exe Manage IP Security Policy and Start ISAKMP / Oakley (IKE) and IP Security Drivers . (System Services) Generate session keys and grants a service credentials (Ticket) for interactive client / server authentication. (System Services) SVCHOST.EXE contains many system services SVCHOST.EXE SPOOLSV.EXE loads files into memory for later printing. (System Service) Explorer.exe Explorer INTERNAT.EXE Pinyin icon. Run at the specified time. (System Services) Regsvc.exe allows remote registry operations. (System Services) Winmgmt.exe Provides System Management Information (System Services). INetInfo.exe provides FTP connection and management through the management unit of Internet Information Services. (System Services) TLNTSVR.EXE allows remote users to log in to the system and run console programs using the command line. (System Services) Allows the Web and FTP services to be managed through the management unit of Internet information. (System Services) TFTPD.exe implements TFTP Internet standards. This standard does not require username and password. Part of the remote installation service. (System Services) Termsrv.exe offers multi-session environments to allow client devices to access virtual Windows 2000 Professional desktop sessions and Windows-based programs running on the server. (System Services) DNS.exe Answer Query and Update Request for Domain Name System (DNS) name. (System Services). The following services are rarely used. The above services are harmful to security. If not necessary, TCPSVCS.exe is not necessary to provide remotely to remotely launch the client computer to remotely install Windows 2000 Professional capabilities. (System Services) Support the following TCP / IP services: Character Generator, Daytime, Discard, Echo, and Quote of The Day. (System Services) ISMSERV.EXE allows you to send and receive messages between Windows Advanced Server sites. (System Services) UPS.exe Management Connect to the Uninterruptible Power Supply (UPS) of your computer. (System Services) Wins.exe Provides NetBIOS Name Services for registration and parsing of NetBIOS names for TCP / IP customers. (System Services) Llssrv.exe License Logging Service (System Service) NTFRS.exe Synchronization of the contents of the file directory content between multiple servers. (System Services) Rssub.exe controls media used to remotely store data. (System Services) Locator.exe Manages the RPC Name Service Database. (System Services) LserveR.exe Register a client license. (System Services) DFSSVC.exe Management Distributed on LAN or WAN to logical volumes. (System Services) Clipsrv.exe supports the "Scrapbook Viewer" so that you can access the scrap page from the remote scrapbook. (System Services) MSDTC.exe is a transaction, which is distributed in more than two databases, message queues, file systems, or other transaction protection resource managers. (System Services) FaxSvc.exe Helps you send and receive faxes. (System Services) CISVC.EXE INDEXING Service (System Service) Dmadmin.exe System Management Services for Disk Management Request. (System Services) MnMsrvc.exe allows users to access Windows desktops remotely using NetMeeting. (System Services) NetDe.exe provides network transfer and security features of Dynamic Data Exchange (DDE).
(System Services) SMLogSvc.exe Configure Performance Logs and Alerts. (System Services) RSVP.exe provides network signals and local communication control installation capabilities for relying on quality service (QoS) programs and control applications. (System Services) RSENG.EXE Coordinates the service and management tools used to store uncommon data. (System Services) RSFSA.exe Manages the operation of the file that remotely stored. (System Services) Grovel.exe Scanning Zero Backup Storage (SIS) Volumes and repeated file points to a data storage point to save disk space. (System Services) SCARDSVR.EXE manages and accesss control over smart cards inserted in your computer smart card reader. (System Services) SNMP.exe contains an agent to monitor network devices and report to the network console workstation. (System Services) SNMPTrap.exe Receives the trap message generated by the local or remote SNMP agent, and then passes the message to the SNMP manager (system service) on this computer. Utilman.exe starts and configures auxiliary from one window tool. (System Services) Msiexec.exe is installed, repaired, and deletes software based on the commands included in the .msi file. (System Services) Details: Win2k Run Process SVCHOST.EXE SVCHOST.EXE file is a normal host process name for services running from the dynamic connection library. The svhost.exe file is positioned under the% SystemRoot% / System32 folder of the system. When startup, Svchost.exe checks the location of the registry to build a list of service that requires load. This will cause multiple svchost.exe to run at the same time. Each SVCHOST.EXE reply contains a set of services, so that a separate service must rely on how SVCHOST.EXE is started there. This makes it easier to control and find errors. The SVCHOST.EXE group is identified by the following registry value. HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows NT / CURRENTVERSION / SVCHOST Each value under this key represents a separate SVCHOST group and it is displayed as a separate example when you are looking at the activity process. Each key value is the value of the REG_MULTI_SZ type and includes services running within the SVCHOST group. Each SVCHOST group contains one or more service names selected from the registry value, and the parameter value of this service contains a serviceDLL value. HKEY_LOCAL_MACHINE / SYSTEM / CURRENTCONTROLSET / Services / Service More information In order to see the service running in the SVCHOST list. Start - Run - Type CMD and then type TLIST -S (TLIST should be the winter winter in the Win2K toolbox) TLIST shows a list of event processes. Switch -s Displays a list of active services in each process. If you want to know more about the process, you can knock TLIST PID. SMSS.EXE CSRSS.exe is a part of the user mode Win32 subsystem. CSRSS acts on behalf of the client / server running subsystem and a basic subsystem must have been running. CSRSS is responsible for controlling Windows, creating or deleting threads and some 16-bit virtual MS-DOS environments Explorer.exe This is a user's shell, which looks like task bars, desktop, and so on. This process is not as an important process as an important process, you can stop it from the task manager, or restart. It usually does not have any negative impact on the system. INTERNAT.EXE This process is to be turned off from the task manager. INTERNAT.EXE starts running at startup. It loads different input points specified by the user. The input point is this position hkey_users / .default / keyboard layout / preload loading content from the registry.
