Windows 2000 / XP Task Manager is a very useful tool that provides us with a lot of information, such as programs running in the system (process), but in the face of those file executable files, we may be a bit awkward, do not know them If you do, there will be no suspicious process (virus, Trojan, etc.). The purpose of this article is to provide some process names in common Windows 2000, and briefly explain their use.
IN WINDOWS 2000 system includes the following default processes: Csrss.exe Explorer.exe Internat.exe Lsass.exe Mstask.exe Smss.exe Spoolsv.exe Svchost.exe Services.exe System System Idle Process Taskmgr.exe Winlogon.exe Winmgmt .exe
The following is listed below and their brief description process name description SMSS.exe session manager csrss.exe subsystem Target = "_ blank"> server process Winlogon.exe Manage User Login Services.exe Contains Many System Services LSAss.exe Management IP security policies and launch isakmp / Oakley (IKE) and IP security drivers. SVCHOST.EXE Windows 2000 / XP file protection system spoolsv.exe loads files into memory for later printing. ) Explorer.exe resource manager INTERNAT.EXE tray area Pinyin icon) mstask.exe allows programs to run in the specified time. Regsvc.exe allows remote registry operations. (System Services) -> RemoteRegister Winmgmt.exe Provides System Management Information (System Services). INetInfo.exe MsftpsVC, W3SVC, Iisadmn TLNTSVR.EXE TLNRSVR TFTPD.EXE implements the FTP Internet standard. This standard does not require username and password. Termsrv.exe Termservice DNS.exe Answer Query and Update Request for Domain Name System (DNS) name. TCPSVCS.EXE provides the ability to remotely install Windows 2000 Professional on the PXE remote boot client computer. Ismserv.exe allows you to send and receive messages between Windows Advanced Server sites. UPS.exe management is connected to the computer's uninterruptible power supply (UPS). Wins.exe provides NetBIOS Name Services for TCP / IP customers registered and parsing NetBIOS names. Llssrv.exe Certificate Record Service NTFRS.EXE Synchronize the files of the file directory content between multiple servers. Rssub.exe controls media used to remotely store data. Locator.exe Manages the RPC Name Service Database. Lserver.exe registered client license. DFSSVC.exe Manages logical volumes distributed in a local area network or wide area network. Clipsrv.exe supports the "Scrapbook Viewer" so that you can access the scrap page from the remote scrapbook. MSDTC.exe is a transaction, which is distributed in more than two databases, message queues, file systems, or other transaction protection resource managers. Faxsvc.exe Helps you send and receive faxes. Cisvc.exe Index Service Dmadmin.exe System Management Service for Disk Management Request. MnMsrvc.exe allows users to access the Windows desktop remotely using NetMeeting remotely. NetDe.exe provides network transfer and security features of Dynamic Data Exchange (DDE). SMLogsvc.exe Configuring Performance Logs and Alerts. RSVP.exe provides network signals and local communication control installation functions for relying on quality service (QoS) programs and control applications. RSENG.EXE coordinates the service and management tools for storing uncommon data. RSFSA.EXE manages the operation of the file that is stored. Grovel.exe Scan the Duplicate file on the zero backup storage (SIS) volume, and points your duplicate file to a data storage point to save disk space (useful only for NTFS file systems). Scardsvr.ex manages and accesss control over smart cards inserted in a computer smart card reader. SNMP.exe contains the agent to monitor the network device and report to the network console workstation.
SNMPTrap.exe Receives a trap message generated by a local or remote SNMP agent and then passes the message to the SNMP manager running on this computer. Utilman.exe launches and configures an auxiliary tool from a window. Msiexec.exe is installed, repaired, and deletes software based on the command contained in the .msi file. Summary: The secret of discovering the suspicious process is to see the list of processes in the task manager. After reading, you can find a suspicious process, just like a group of strangers in a group of familiar people.
