1.svchost.exe process file: svchost or svchost.exe process name: microsoft service host process Description: svchost.exe is a system program belonging to Microsoft Windows operating system, used to execute dll files. This program is very important for the normal operation of your system. Note: svchost.exe may also be a w32.welchia.worm virus that exploits the windowslsass vulnerability to create a buffer overflow that causes your computer to shut down. Please note the name of this process, there is also a virus svch0st.exe, the middle of the name is the number 0, not the English letter o. Please note that the folder where this process is located, the normal process should be under windows system32 and servicepackfiles\\i386 2.IEXPLORE.EXE Process file: iexplore or iexplore.exe Process name: microsoft internet explorer Description: iexplore.exe is microsoft internet The main program of explorer. This Microsoft windows app lets you surf the web and access the local interanet network. This is not a pure system program, but if it is terminated, it can lead to an unknown problem. Iexplore.exe is also part of the avant web browser, a free internet explorer based browser. Note that iexplore.exe may also be a Trojan.killav.b virus, which will terminate your anti-virus software, and some windows system tools. The normal process should be under 3.programfiles\\internetexplorer and system32\\dllcache 3.rundll32.exe process file: rundll32 or rundll32.exe process name: microsoftrundll32 Description: rundll32.exe is used to run dll files in memory, they will be in the application Used in the program. This program is very important for the normal operation of your system. Note: rundll32.exe may also be w32.miroot.worm virus. The virus allows an attacker to access your computer and steal passwords and personal data. Please note that the folder where this process is located, the normal process should be under windows system32 and system32\\dllcache 4.ctfmon.exe Name: alternative user input services Description: ctfmon.exe is part of the microsoft office product suite. It can choose the user text input program, and the Microsoft office xp language bar. This is not a pure system program, but if it is terminated, it can lead to an unknown problem. 5.WINLogoN.EXE process file: winLogon or winLogon.exe Process name: microsoft windows Logon process Description: winLogon.exe is the windows domain login manager. It is used to handle the process of logging in and out of the system. The role of this process in your system is very important. Note: winLogon.exe may also be the w32.netsky.d@mm worm. The virus spreads via email and is infected when you open an attachment sent by the virus. The virus will create the smtp engine on the victim's computer, and the ** mail will spread. The virus allows an attacker to access your computer and steal passwords and personal data. Please note that the folder where this process is located, the normal process should be under the system32 of windows. 6.wdfmgr.exe process file: wdfmgr or wdfmgr.exe process name: windows driver foundation manager Description: wdfmgr.exe is Microsoft microsoftwindowsmediaplayer10 player Related procedures. This process is used to reduce compatibility issues. This is not a pure system program, but if it is terminated, it can lead to an unknown problem. 7.alg.exe process file: alg or alg.exe process name: application layer gateway service Description: alg.exe is the program that comes with the Microsoft Windows operating system. It is used to handle Microsoft Windows network connection sharing and network connection firewall. This program is very important for the normal operation of your system. 8.smss.exe Process File: smss or smss.exe Process Name: session manager subsystem Description: smss.exe is part of the Microsoft Windows operating system. This process invokes the dialog management subsystem and the dialog responsible for operating your system. This program is very important for the normal operation of your system. Note: smss.exe may also be win32.ladex.a trojan. The Trojan allows attackers to access your computer and steal passwords and personal data. Please note that the folder where this process is located, the normal process should be in the windows system32 and servicepackfiles\\i386 9.explorer.exe process file: explorer or explorer.exe process name: microsoft windows explorer Description: explorer.exe is windows program Manager or Windows Explorer, which is used to manage windows graphics shells, including start menus, taskbars, desktops, and file management. Deleting this program will make the windows graphical interface unsuitable. Note: explorer.exe may also be w32.codered and w32.mydoom.b@mm virus. The virus spreads via email and is infected when you open the attachment. The worm will build smtp services on the victim's machine for a wider range of propagation. The worm allows attackers to access your computer and steal passwords and personal data. Please note that the folder where this process is located, the normal process should be in the windows and servicepackfiles\\i386 10.csrss.exe process file: csrss or csrss.exe process name: microsoft client /server runtime server subsystem Description: csrss.exe is Microsoft client/server runtime subsystem. This process manages windows graphics related tasks. This program is very important for the normal operation of your system. Note: csrss.exe may also be created by w32.netsky.ab@mm, w32.webus Trojan, win32.ladex.a and other viruses. The virus is spread by email and is infected when you open the attachment. The worm will set up the smtp service on the victim's machine for its own propagation. The virus allows attackers to access your computer and steal Trojans and personal data. Please note that the folder where this process is located, the normal process should be in the windows system32 and servicepackfiles\\i386 11.lsass.exe process file: lsass or lsass.exe process name: local security level author ityservice Description: lsass.exe is A system process for Microsoft security mechanisms that handles some special security mechanisms and login policies. 12.CONIME.EXE This file is the input method process, please note the folder where the process is located. The normal process should be under windows system32 and system32\\dllcache. Note that in non-Asian languages, conime.exe is a bfghost 1.0 remote control backdoor that allows an attacker to access your computer and steal passwords and personal data. 13.wmiprvse.exe Process File: wmiprvse or wmiprvse.exe Process Name: microsoft windows management instrumentation Description: wmiprvse.exe is part of the Microsoft Windows operating system. Used to process wmi operations via the winmgmt.exe program. This program is very important for the normal operation of your system. 14.timplatform.exe timplatform.exe is an external application development interface management program used by qq and tencent messenger, which is an indispensable underlying core module of qq. If you delete the program, qq will lose the ability to call each other with the peripheral function module and the external application. 15.realsched.exe process file: realsched or realsched.exe process name: real networks scheduler Description: realsched.exe is a real networks product timing upgrade test. This is not a process that is required by the system and is installed through a user license agreement. If you terminate it, you will not be able to display the upgrade prompt.