digiblade

Thursday, September 15, 2005

For Windows Users: What's running on YOUR PC

Question: With over 30 processes running on your PC at any one time, how do you distinguish between legitimate tasks being performed for the stability of your system and malicious code aiming to compromise security?
Lsass.exe, cideamon.exe: Invisible Threats or Legitimate Processes?While you are reading this article, your computer is most definitely running lsass.exe, several instances of svchost.exe, and alg.exe. Are these invisible threats or legitimate processes? They're legitimate all right but, in some instances, there are serious security breaches that disguise themselves as legitimate processes. Well, here goes our top ten - you'll find the full descriptions on processlibrary.com:
10 Most Common Processes Running on PCs

  1. LSASS.EXE:Process Name: Local Security Authority ServiceProcess Description: lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. Read More...

  2. ALG.EXE:Process Name: Application Layer Gateway ServiceProcess Description: alg.exe is a part of the Microsoft Windows operating system. It is a core process for Microsoft Windows Internet Connection sharing and Internet connection firewall. Read More...

  3. SVCHOST.EXE: Process Name: Microsoft Service Host ProcessProcess Description: svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. Read More...

  4. CSRSS.EXE:Process Name: Microsoft Client/Server Runtime Server SubsystemProcess Description: csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows. Read More...

  5. SMSS.EXE:Process Name: Session Manager SubsystemProcess Description: smss.exe is a process which is a part of the Microsoft Windows Operating System. It is called the Session Manager SubSystem and is responsible for handling sessions on your system. Read More...

  6. SCVHOST.EXEProcess Name: W32/Agobot-S virusProcess Description: scvhost.exe is a process which is registered as the W32/Agobot-S virus. This Trojan allows attackers to access your computer, stealing passwords and personal data. Read More...

  7. WDFMGR.EXE:Process Name: Windows Driver Foundation ManagerProcess Description: wdfmgr.exe is part of Microsoft Windows media player 10 and above. This process decreases compatibility problems whilst the product is in use. Read More...

  8. CTFMON.EXE:Process Name: Alternative User Input ServicesProcess Description: ctfmon.exe is a part of the Microsoft Office suite. It activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office XP Language Bar. Read More...

  9. SERVICES.EXE:Process Name: Windows Service ControllerProcess Description: services.exe is a part of the Microsoft Windows Operating System and manages the operation of starting and stopping services. Read More...

  10. SPOOLSV.EXE:Process Name: Microsoft Printer Spooler ServiceProcess Description: spoolsv.exe is a Microsoft Windows system executable which handles the printing process to your local printers. Read More...
Related Article: Do You Really Know What's Running on Your PC?

0 Comments:

Post a Comment

<< Home