Computer Free Support

Windows 2000/XP the Task Manager is a very useful tool, it can provide us with a lot of information, such as the present system of running programs (processes), but the face of those documents executable file name, we may be a bit at a loss, I do not know their What is there would be a suspicious processes (viruses, Trojans, etc.). The purpose of this paper is to provide a number of commonly used process in the Windows 2000 name, and brief description of their use.
In Windows 2000, the system default process includes the following:
Csrss.exe
Explorer.exe
Internat.exe
Lsass.exe
Mstask.exe
Smss.exe
Spoolsv.exe
Svchost.exe
Services.exe
System
System Idle Process
Taskmgr.exe
Winlogon.exe
Winmgmt.exe
more of the process are listed below and a brief description of their
process were Description
smss.exe Session Manager
csrss.exe subsystem server process
winlogon.exe management User Login
services.exe system service contains a lot of
lsass.exe Management IP security policy and start the ISAKMP / Oakley (IKE) and IP security driver.
svchost.exe Windows 2000/XP document protection system
SPOOLSV.EXE file is loaded into memory so that after the latest printing. )
explorer.exe Explorer
internat.exe alphabet tray icon area)
mstask.exe allowed to run in the specified time.
regsvc.exe operation allow remote registry. (System) -> remoteregister
winmgmt.exe provide management information system (system services).
inetinfo.exe msftpsvc, w3svc, iisadmn
tlntsvr.exe tlnrsvr
tftpd.exe achieve TFTP Internet standards. The standard does not require a user name and password.
termsrv.exe termservice
dns.exe response of the Domain Name System (DNS) query and update the name of the request.
tcpsvcs.exe can provide in the PXE remote boot client computer to install Windows 2000 Professional remote capabilities.
ismserv.exe allow Windows Advanced Server sites to send and receive messages.
ups.exe management connected to the computer’s uninterruptible power supply (UPS).
wins.exe resolve NetBIOS for the registration and type the name of the TCP / IP clients with NetBIOS Name Service.
llssrv.exe certificate records
ntfrs.exe between multiple servers in the maintenance of the contents of the file directory synchronization.
RsSub.exe control data to a remote storage media.
locator.exe management RPC name service database.
lserver.exe client license registration.
dfssvc.exe management distributed in the local area network or wide area network of the logical volume.
clipsrv.exe support “Clipboard Viewer” so that we can cut and paste from a remote access scrapbook page.
msdtc.exe tie affairs, is located in two or more databases, message queues, file systems, or other Service Manager to protect the conservation of resources.
faxsvc.exe help you send and receive faxes.
cisvc.exe Indexing Service
dmadmin.exe request disk management system management services.
mnmsrvc.exe allow users to use NetMeeting Remote Access Windows desktop.
netdde.exe provided by Dynamic Data Exchange (DDE) network of transmission and security features.
smlogsvc.exe Performance Logs and Alerts configuration.
rsvp.exe dependent on the quality of service (QoS) control of the application procedures and to provide local communications network signal and the installation of reactive power control function.
RsEng.exe coordination is not commonly used for data storage services and management tools.
RsFsa.exe manage remote document storage operation.
grovel.exe scan zero backup storage (SIS) volume of duplicate files and duplicate files will point to a data storage point, in order to save disk space (only useful on NTFS file system).
SCardSvr.ex computer to insert the smart card reader for smart card management and access control.
snmp.exe contains the agent can monitor the activities of network devices and report to the network console workstation.
snmptrap.exe receive from local or remote SNMP traps generated by agents (trap) message, and then to run the messaging on this computer SNMP management process.
UtilMan.exe window from a start-up and configuration tool.
msiexec.exe basis. MSI file contains the command to install, repair and remove software.
Summary: Tips for suspicious processes is to look at Task Manager process list to see more later, can be found on a process can be suspicious, as to find a group of strangers with the same people.