Changes

Processes in the Windows Task Manager

5,056 bytes added, 03:50, 30 January 2012
The following lines were added (+) and removed (-):
== Windows XP/2000/2003 Services and Background Processes. ==== Windows XP/2000/2003/Vista/7 Services and Background Processes. ==* starwindservice.exe - Belongs to Alcohol 120% and provides network drive sharing capabilities to this product. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.  This is a valid program but it is not required to run on startup.*'''ARA.exe''' - [non-critical] Norton Protection Adviser / Acer Protection Adviser is a nag screen used to remind owners of a new PC (typically Windows 7) to purchase Symantec Norton Anti Virus software.  This is similar to Adware except without the 'ware'.  Unnecessary.:: C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe:: c:\Program Files\Symantec\Norton Online Backup\ARA.exe *'''Communications_Helper.exe''' - [non-critical] A Logitech QuickCam software component installed with the driver for Webcam devices. Automatically run when system starts. Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). Communications_Helper.exe  This is an unnecessary process.:: c:\Program Files\Common Files\LogiShrd\LComMgr  * '''Ctfmon.exe''' - [non-critical] A noncritical and sometimes annoying part of Microsoft Office, Office XP, that activates the Microsoft Office Language Bar and the Alternative User Input Text Input Processor. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features.  The process can sometimes grow to consume over 100M of system memory.  This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.  In %System%:: c:\WINDOWS\system32\ctfmon.exe *'''GoogleUpdate.exe''' - [non-critical] {{:GoogleUpdate}}:: c:\Documents and Settings\<user>\Local Settings\Application Data\Google\Update\GoogleUpdate.exe:: c:\Documents and Settings\<user>\Local Settings\Application Data\Google\Update\1.3.21.79\GoogleUpdate.exe * '''jqs.exe''' - [non-critical] [[Java Quick Starter]] (JQS) improves initial startup time for most Java applets and applications.  It is new from Java SE 6 update 10 (6u10).  It consumes around 1.5 Megabytes of computer memory and 2 Megabytes of virtual memory.  It runs low priority and is relatively harmless, although some users report an increase in cpu activity while the system is idle. The process is useless for someone who does not deal that frequently with Java applets.  It is a non-system process.  Browse to the [[Java Quick Starter]] page for instructions on how to disable.  :: c:\Program Files\Java\jre6\bin\jqs.exe *'''plugin-container.exe''' - [non-critical] Mozilla has changed the way plugins run with Firefox.  They now use out-of-process plugins to the Firefox web browser. This feature runs specific Firefox plugins, like Adobe’s Flash Player, Quicktime or Silverlight, in their own process whenever they are needed to run elements on a web page.  Plugin-Container.exe currently supports Adobe Flash, Apple Quicktime, Microsoft Silverlight.  Firefox change to provide you uninterrupted browsing even when certain plugins stops working.  This is a good process that represents a positive change by the Mozilla Firefox developers. * '''RTHDCPL.exe''' - [non-critical] Realtek HD Audio Control Panel and is bundled alongside Realtek sound cards * '''starwindservice.exe''' - [non-critical] Belongs to Alcohol 120% and provides network drive sharing capabilities to this product. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.  This is a valid program but it is not required to run on startup.:: c:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe * '''sqlwriter.exe''' - [non-critical] a process associated with Microsoft SQL Server from Microsoft Corporation. Allows backup and restore applications to operate in the Volume Shadow Copy Service (VSS) framework.  *'''tbhMonitor.exe''' - [non-critical] [[The Browser Highlighter]] Monitor (tbhMonitor.exe) part of a web browser addon that often gets installed without the user permission.  The eBay browser highlighter is installed by some eBay application and also by Skype.  A rather useless plugin that negatively impacts the performance of Firefox.  See also tbhSystray.exe:: c:\Program Files\tbh\monitor\bin\tbhMonitor.exe:: c:\Program Files\tbh\base\bin\tbhSystray.exe *'''TrackerPodSvcSvr.exe''' - [non-critical] Trackercam software for Eagletron IP camera.  Runs as a system service.  Restarts itself when killed from task manager.  Uninstall through control panel add/remove software. * '''wmiprvse.exe''' - [non-critical] [virus risk] Windows Management Instrumentation (WMI) is found on some but not all XP installations.  Normally, wmipvrse.exe is a valid windows/system32 file, and with SP1, it stays in the WDEM directory at about 199KB, and has the SP1 distribution date of 8/29/2002.  But when you get the virus, you will find another file, of 38KB size in the Windows/Prefetch directory, with the same name, but a more recent date.  Deleting that file and rebooting seems to fix the problem, the original MS file seems unharmed. * '''wuauclt.exe''' - [semi-critical] [virus risk] The file wuauclt.exe is located in the folder C:\Windows\System32. Known file sizes on Windows XP are 124,184 bytes (60% of all occurrence).  If wuauclt.exe is located in the folder C:\Windows then the security rating is 73% dangerous. File size is 230,518 bytes (40% of all occurrence), 230,520 bytes, 196,608 bytes, 17,039 bytes, 60,519 bytes, 58,656 bytes. wuauclt.exe is not a Windows system file.[[Category:Security]]Key Words: process task tsr background manager processes virus terminate stay resident
Bureaucrat, administrator
16,192
edits