Shulou(Shulou.com)06/01 Report--

What are the 15 main system processes of XP? in view of this problem, this article introduces the corresponding analysis and solutions in detail, hoping to help more partners who want to solve this problem to find a more simple and feasible way.

1.svchost.exe

Process file: svchost or svchost.exe

Process name: microsoft service host process

Description: svchost.exe is a system program belonging to Microsoft's windows operating system that executes dll files. This program is very important for the normal operation of your system. Note: svchost.exe may also be a w32.welchia.worm virus, which exploits windowslsass vulnerabilities to create a buffer overflow that causes your computer to shut down. Note the name of this process, and another virus is svch0st.exe, with the number 0 in the middle of the name, not the letter o. Please pay attention to the folder where this process is located. The normal process should be under system32 and servicepackfiles\ i386 of windows.

2.IEXPLORE.EXE

Process file: iexplore or iexplore.exe

Process name: microsoft internet explorer

Description: iexplore.exe is the main program of microsoft internet explorer. This Microsoft windows app allows you to surf the web and access your local interanet network. This is not a pure system program, but if it is terminated, it can lead to unknowable problems. Iexplore.exe is also part of the avant web browser, a free internet explorer-based browser. Note that iexplore.exe may also be a Trojan horse. Killav. B virus, which will terminate your antivirus software, and some windows system tools. Normal processes should be under\ programfiles\ internetexplorer and system32\ dllcache

3.rundll32.exe

Process file: rundll32 or rundll32.exe

Process name: microsoftrundll32

Description: rundll32.exe is used to run dll files in memory, and they are used in applications. This program is very important for the normal operation of your system. Note: rundll32.exe may also be a w32.miroot.worm virus. The virus allows attackers to access your computer and steal passwords and personal data. Please pay attention to the folder where this process is located. The normal process should be under system32 and system32\ dllcache of windows.

4.ctfmon.exe

Name: alternative user input services

Description: ctfmon.exe is part of the microsoft office product suite. It can choose a user text input program, and Microsoft office xp language bar. This is not a pure system program, but if it is terminated, it can lead to unknowable problems.

5.WINLOGON.EXE

Process files: winlogon or winlogon.exe

Process name: microsoft windows logon process

Description: winlogon.exe is the windows domain login manager. It is used to handle your login and exit process. The role of this process in your system is very important. Note: winlogon.exe can also be a w32.netsky.d@mm worm. The virus spreads through email mail and is infected when you open the attachment sent by the virus. The virus creates a smtp engine on the victim's computer, and * * mail spreads. The virus allows attackers to access your computer and steal passwords and personal data. Please note the folder where this process is located. The normal process should be under the system32 of windows.

6.wdfmgr.exe

Process file: wdfmgr or wdfmgr.exe

Process name: windows driver foundation manager

Description:

Wdfmgr.exe is the related program of Microsoft microsoftwindowsmediaplayer10 player. This process is used to reduce compatibility issues. This is not a pure system program, but if it is terminated, it can lead to unknowable problems.

7.alg.exe

Process file: alg or alg.exe process name: application layer gateway service description: alg.exe is a program that comes with Microsoft's windows operating system. It is used to deal with Microsoft windows network connection sharing and network connection firewall. This program is very important for the normal operation of your system.

8.smss.exe

Process file: smss or smss.exe

Process name: session manager subsystem

Description: smss.exe is part of Microsoft's windows operating system. The process invokes the dialogue management subsystem and the dialogue responsible for operating your system. This program is very important for the normal operation of your system. Note: smss.exe can also be a win32.ladex.a Trojan. The Trojan allows attackers to access your computer and steal passwords and personal data. Please pay attention to the folder where this process is located. The normal process should be under system32 and servicepackfiles\ i386 of windows.

9.explorer.exe

Process file: explorer or explorer.exe

Process name: microsoft windows explorer

Description: explorer.exe is the windows Program Manager or windows Explorer, which is used to manage windows graphics shells, including the start menu, taskbar, desktop, and file management. Removing this program will cause the windows graphical interface to be inapplicable. Note: explorer.exe may also be w32.codered and w32.mydoom.b@mm viruses. The virus spreads through email mail, and when you open the attachment, you will be infected. The worm sets up smtp services on the victim's machine for wider spread. This worm allows attackers to access your computer and steal passwords and personal data. Please note the folder where this process is located. The normal process should be under windows and servicepackfiles\ i386.

10.csrss.exe

Process file: csrss or csrss.exe

Process name: microsoft client/server runtime server subsystem

Description: csrss.exe is a Microsoft client / server runtime subsystem. This process manages tasks related to windows graphics. This program is very important for the normal operation of your system. Note: csrss.exe may also be created by viruses such as w32.netsky.ab@mm, w32.webus Trojan horse, win32.ladex.a, etc. The virus spreads through email mail and is infected when you open the attachment. The worm sets up a smtp service on the victim's machine for self-propagation. The virus allows attackers to access your computer and steal Trojans and personal data. Please pay attention to the folder where this process is located. The normal process should be under system32 and servicepackfiles\ i386 of windows.

11.lsass.exe

Process file: lsass or lsass.exe process name: local security level author ityservice description: lsass.exe is a Microsoft security mechanism about the system process, mainly dealing with some special security mechanisms and login policies.

12.CONIME.EXE

This file is the input method process, please note that this process is located in the folder, the normal process should be in the windows system32 and system32\ dllcache. Note that in non-Asian language windows, conime.exe is a bfghost1.0 remote control backdoor that allows attackers to access your computer and steal passwords and personal data.

13.wmiprvse.exe

Process file: wmiprvse or wmiprvse.exe process name: microsoft windows management instrumentation description: wmiprvse.exe is part of the Microsoft windows operating system. Used to handle wmi operations through winmgmt.exe programs. This program is very important for the normal operation of your system.

14.timplatform.exe

Timplatform.exe is an external application development interface management program used by qq and tencent messenger, which is an indispensable underlying core module of qq. If the program is deleted, qq will lose the ability to call each other with surrounding functional modules and external applications.

15.realsched.exe

Process file: realsched or realsched.exe

Process name: real networks scheduler

Description: realsched.exe is a regular upgrade tester for real networks products. This is not a necessary process for the system and is installed through the user license agreement. If you terminate it, the upgrade prompt will not be displayed.

The answers to the questions about the 15 main system processes of XP are shared here. I hope the above content can be of some help to you. If you still have a lot of doubts to be solved, you can follow the industry information channel to learn more about it.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.