Process analysis of Win2000XP

xiaoxiao2021-03-06  68

Windows 2000 / XP Task Manager is a very useful tool that provides us with a lot of information, such as programs running in the system (process), but in the face of those file executable files, we may be a bit awkward, do not know them If you do, there will be no suspicious process (virus, Trojan, etc.). The purpose of this article is to provide some process names in common Windows 2000, and briefly explain their use.

In Windows 2000, the system contains the following default processes:

CSRSS.EXE

Explorer.exe

INTERNAT.EXE

LSASS.EXE

Mstask.exe

SMSS.exe

Spoolsv.exe

Svchost.exe

Services.exe

SYSTEM

System idle process

Taskmgr.exe

Winlogon.exe

Winmgmt.exe

More processs are listed below and their brief description

Process Name Description

SMSS.exe                                                                         manager

CSRSS.EXE   subsystem server process

Winlogon.exe - Management user login

Services.exe                

    management IP security policy and launch Isakmp / Oakley (IKE) and IP security drivers

SVCHOST.EXE   File protection system for Windows 2000 / XP

Spoolsv.exe                                                   

Explorer.exe                  

                                                                                                                                        

MStask.exe   Allow the program to run at the specified time.

                                                       (System Services) -> RemoteRegister

Winmgmt.exe provides system management information (system service).

Ietinfo.exe   MSFTPSVC, W3SVC, Iisadmn

TLNTSVR.EXE   TLNRSVR

TFTPD.exe enables TFTP Internet standards. This standard does not require username and password.

TERMSRV.EXE  Termservice

  DNS.EXE Answer Query and Update Request for Domain Name System (DNS) name.

Tcpsvcs.exe provides the ability to remotely install Windows 2000 Professional on the PXE remote boot customer machine.

  inismserv.exe allows you to send and receive messages between Windows Advanced Server sites.

           management connection to the computer's uninterruptible power supply (UPS).

Wins.exe provides NetBIOS Name Services for TCP / IP customers of NetBIOS names for registration and parse.

LLSSRV.exe   certificate record service

  NTFRS.EXE   Synchronization of the file directory content between multiple servers.

RSSUB.EXE controls media used to remotely store data.

Locator.exe Management RPC Name Service Database.

LLSERVER.EXE   register the client license.

DFSSVC.exe -   Management Distributed Logical Volumes of LAN or WAN.

CLIPSRV.EXE supports "Scrapbook Viewer" so that you can access the scrap page from the remote scrapbook.

Msdtc.exe   parallel transactions, is distributed in more than two databases, message queues, file systems, or other transaction protection resource managers.

FAXSVC.exe   helping you send and receive faxes.

Cisvc.exe   indexing service

DMADMIN.EXE   system management service requested by disk management.

Mnmsrvc.exe   Allowed users to access the Windows desktop remotely using NetMeeting remotely.       providing a network transfer and security feature of Dynamic Data Exchange (DDE).

SMLogsvc.exe - Profitable log and alert.

          to rely on quality service (QoS) procedures and control applications Provide network signals and local communication control installation functions.

RSENG.EXE   coordinate the service and management tools for storing non-common data.

Rsfsa.exe management manages the operation of the remote stored file.

      scanning the repetition file on the zero backup storage (SIS) volume and points the duplicate file to a data storage point to save disk space (useful only for NTFS file systems).

Scardsvr.ex management and access control over the smart card inserted in the computer smart card reader.

  Snmp.exe                                                             

  Snmptrap.exe   receiving the trap message generated by the local or remote SNMP agent, and then pass the message to the SNMP manager running on this computer.

                                                                               .

Msiexec.exe   installed, repaired, and deleted software based on the command contained in the .msi file.

Process file: SMSS or smss.exe

Process Name: Session Manager Subsystem

Description: This process serves as a session management subsystem to initialize system variables.

Common error: N / a

Is it a system process: Yes

Process file: CSRSS or CSRSS.exe

Process Name: Client / Server Runtime Server Subsystem

Description: The client serving subsystem is configured to control the Windows graphic associated subsystem.

Common error: N / a

Is it a system process: Yes

转载请注明原文地址:https://www.9cbs.com/read-92036.html

New Post(0)