Windows 2000 / XP Task Manager is a very useful tool that provides us with a lot of information, such as programs running in the system (process), but in the face of those file executable files, we may be a bit awkward, do not know them If you do, there will be no suspicious process (virus, Trojan, etc.). The purpose of this article is to provide some process names in common Windows 2000, and briefly explain their use.
In Windows 2000, the system contains the following default processes:
CSRSS.EXE
Explorer.exe
AllTernat.exe
LSAss.exe
Mstask.exe
SMSS.exe
Sputsv.exe
Svchost.exe
SERVICES.EXE
System
Tem Idle Process
Taskmgr.exe
Winlogon.exe
Winmgmt.exe
The following lists are listed below and their brief description
Ming
SMSS.exe manager
CSRSS.EXE subsystem server process
Winlogon.exe - Management user login
Services.exe
LSAss.exe management IP security policy and launch Isakmp / Oakley (IKE) and IP security drivers.
WINDOWS 2000 / XP
Spoolsv.exe )
Explorer.exe
MStask.exe Allow the program to run at the specified time.
(System Services) -> RemoteRegister
Winmgmt.exe provides system management information (system service).
Ietinfo.exe MSFTPSVC, W3SVC, Iisadmn
TLNTSVR.EXE TLNRSVR
TFTPD.exe enables TFTP Internet standards. This standard does not require username and password.
TERMSRV.EXE Termservice
DNS.EXE Answer Query and Update Request for Domain Name System (DNS) name.
Tcpsvcs.exe provides the ability to remotely install Windows 2000 Professional on the PXE remote boot customer machine.
inismserv.exe allows you to send and receive messages between Windows Advanced Server sites.
management connection to the computer's uninterruptible power supply (UPS).
Wins.exe provides NetBIOS Name Services for TCP / IP customers of NetBIOS names for registration and parse.
LLSSRV.exe certificate record service
NTFRS.EXE Synchronization of the file directory content between multiple servers.
RSSUB.EXE controls media used to remotely store data.
Locator.exe Management RPC Name Service Database.
LLSERVER.EXE register the client license.
DFSSVC.exe - Management Distributed Logical Volumes of LAN or WAN.
CLIPSRV.EXE supports "Scrapbook Viewer" so that you can access the scrap page from the remote scrapbook.
Msdtc.exe parallel transactions, are distributed in more than two databases, message queues, file systems, or other transaction protection resource managers.
FAXSVC.exe helping you send and receive faxes.
Cisvc.exe indexing service
DMADMIN.EXE system management service requested by disk management. Mnmsrvc.exe Allowed users to access the Windows desktop remotely using NetMeeting remotely.
providing a network transfer and security feature of Dynamic Data Exchange (DDE).
SMLogsvc.exe - Profitable log and alert.
to rely on quality service (QoS) procedures and control applications, providing network signals and local communication control installation work functions.
RSENG.EXE coordinate the service and management tools for storing non-common data.
Rsfsa.exe management manages the operation of the remote stored file.
scanning the repetition file on the zero backup storage (SIS) volume and points the duplicate file to a data storage point to save disk space (useful only for NTFS file systems).
Scardsvr.ex management and access control over the smart card inserted in the computer smart card reader.
Snmp.exe
Snmptrap.exe receiving the trap message generated by the local or remote SNMP agent, and then pass the message to the SNMP manager running on this computer.
.
Msiexec.exe installed, repaired, and deleted software based on the command contained in the .msi file.
Summary: The secret of discovering the suspicious process is to see the list of processes in the task manager. After reading, you can find a suspicious process, just like finding a group of strangers in a group of familiar people.
Publisher: Difficult Source: Snobear
