[System Process]

System

system	Windows Process Library - System Processes	Supplied with Windows.	This file is usually safe.
system.ini	Windows System Initialization File	Contains initialization information for Windows. Important in Windows 3.x, and increasingly unused in versions thereafter but kept for backwards compatibility.	This file is usually safe.
system idle process	System idle process	Supplied with Windows.	This file is usually safe.
system32.sys	TROJ_SUA.A Trojan	TROJ_SUA.A Trojan virus.	This is a trojan / virus.

SMSS.EXE

smss.exe

This is the session manager subsystem, which is responsible for starting the user session.

This is the session manager subsystem, which is responsible for starting the user session. This process is initiated by the system thread and is responsible for various activities, including launching the Winlogon and Win32 (Csrss.exe) processes and setting system variables. After it has launched these processes, it waits for either Winlogon or Csrss to end. If this happens "normally," the system shuts down; if it happens unexpectedly, Smss.exe causes the system to stop responding (hang).

Known to be a target for infections.

CSRSS.EXE

csrss.exe

Microsoft Client/Server Runtime Server Subsystem

csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows. This program is important for the stable and secure running of your computer and should not be terminated.csrss.exe is also process which is registered as a number of mass mailing worms and trojans. These viruses are distributed via the Internet through e-mail and comes in the form of an e-mail message, in the hopes that you open it’s hostile attachment. The worm has it’s own SMTP engine which means it gathers E-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately.

This file is usually safe.

WINLOGON.EXE

winlogon.exe

Windows Logon Process - Winlogon.exe

This is the process responsible for managing user logon and logoff. Moreover, Winlogon is active only when the user presses CTRL+ALT+DEL, at which point it shows the security dialog box.

This file is usually safe.

SERVICES.EXE

services.exe	Microsoft Windows Operating System	services.exe is a part of the Microsoft Windows Operating System and manages the operation of starting and stopping services. This process also deals with the automatic starting of services during the computers boot-up and the stopping of servicse during shut-down. This program is important for the stable and secure running of your computer and should not be terminated.	This file is usually safe.
services.exe	Often Used for Standard Windows Services, however,	Files with the same name can be used for viruses such as the Sober worm, and the Semisoft virus. Be sure that only one instance of services.exe is running in your task manager. If you have more than one...chances are you have one legitimate copy and a copy related to a virus.	Known to be a target for infections.

LSASS.EXE

lsass.exe	Local Security Authority Service	Verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. It's always located in the system32 windows folder.	This file is usually safe.
lsass.exe	system process of the Microsoft Windows security mechanisms	lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. This program is important for the stable and secure running of your computer and should not be terminated.	This file is usually safe.
lsass.exe	W32.AGOBOT.RL	ssas.exe is a process which is registered as the W32.AGOBOT.RL Trojan. This Trojan allows attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately. Please see additional details regarding this processIt's always located outside the system32 windows folder.	Known to be a target for infections.
lsass.exe	Microsoft Windows security mechanism	lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. This program is important for the stable and secure running of your computer and should not be terminated.	This file is usually safe.

svchost.exe

svchost.exe	Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs). It's supplied with Windows.	The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services permits better control and easier debugging.	This file is usually safe.
svchost.exe	system file		This file is usually safe.
svchost.exe	system file		This file is usually safe.

SNDSrvc.exe

sndsrvc.exe

Network Driver service

Core component of Norton Internet security and is required for Norton products to function correctly

This file is usually safe.

ccSetMgr.exe

ccsetmgr.exe

Norton Internet Security or Norton Antivirus

Process associated with the Symantec Internet Security Suite and is essential to it's functioning

This file is usually safe.

SPBBCSvc.exe

spbbcsvc.exe

Symantec Internet Security Service

Part of the Symantec Internet security suite and assists in keeping your computer upto date from Internet bound viruses

This file is usually safe.

ccEvtMgr.exe

CCEVTMGR.EXE

Norton Internet Security Suite Logger

Logger for the AntiVirus and Firewall

This file is usually safe.

spoolsv.exe

spoolsv.exe	Spooler. Supplied with Windows.	spoolsv.exe is a Microsoft Windows system executable which handles the printing process to your local printers. This program is important for the stable and secure running of your computer and should not be terminated.	This file is usually safe.
spoolsv.exe	Microsoft Windows system executable	spoolsv.exe is a Microsoft Windows system executable which handles the printing process to your local printers. This program is important for the stable and secure running of your computer and should not be terminated.	This file is usually safe.

svchost.exe

svchost.exe	Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs). It's supplied with Windows.	The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services permits better control and easier debugging.	This file is usually safe.
svchost.exe	system file		This file is usually safe.
svchost.exe	system file		This file is usually safe.

hidserv.exe

navapsvc.exe

navapsvc.exe

Norton AntiVirus Auto-Protect Service

Part of the Norton AntiVirus application. It is running in the background and provides auto-protection features to the system.

This file is usually safe.

NPFMntor.exe

npfmntor.exe

Part of the Internet Security Suite of Norton Antivirus

npfmntor.exe is a process belonging to the Norton Antivirus Internet security suite, and helps your computer achieve real-time antivirus protection by checking files. This program is important for the stable and secure running of your computer and should not be terminated.

This file is usually safe.

nvsvc32.exe

nvsvc32.exe	NVIDIA Display Driver Service	nvsvc32.exe is a process that belongs to the NVIDIA graphics card drivers. This process could be removed (with sc delete nvsvc) because it doesn't really have any use.	This file is usually safe.
nvsvc32.exe	NVidia Display Utility - Driver Helper	NVSVC32 is a NVIDIA Driver Helper that is installed under Windows Me/NT4/2000/XP with the NVIDIA software for cards based upon the NVIDIA chipset. It’s best to leave it alone unless it’s causing problems. Sometimes this utility can cause your system to hang on shut down. If this happens, try updating your driver.	This file is usually safe.
nvsvc32.exe	nVidia Driver Application		This file is usually safe.

regsvc.exe

regsvc.exe

Remote Registry Service / Spyware/Adware

regsvc.exe is a system service in Windows Server Suite. It allows remote computers to access the local registry. regsvc.exe It is also a process belonging to the Ace Spy advertising program by Retina-X Studios. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups.

Known to be a target for infections.

mstask.exe

mstask.exe

MicroSoft Task Schedular a.k.a Task Manager

This is the Task Manager, which manages all the running tasks and processes on a Windows box. You can usually get to it by pressing ctl-alt-del simultaneouly and selecting Task Manager

This file is usually safe.

stisvc.exe

stisvc.exe

Microsoft Still Image Service

An executable which is installed by Windows tofether with digital cameras, scanners or another graphical input devices. Hardware device drivers use this service and it should not be terminated whilst these devices are used.

This file is usually safe.

symlcsvc.exe

symlcsvc.exe

Symlcsvc.exe is an application which belongs to Norton's Internet Security Suite

Symlcsvc.exe is an application which belongs to Norton's Internet Security Suite, and provides additional security features. This program is important for the stable and secure running of your computer and should not be terminated..

This file is usually safe.

Tablet.exe

Tablet.exe

WacomService

This is a service created by Wacom as you install their drivers.

This file is usually safe.

WinMgmt.exe

winmgmt.exe

Windows Management Service

The Windows Management Instrumentation. It is used by system administrators to create Windows management scripts, for example, scripts that handles the user accounts on a server.

This file is usually safe.

MsPMSPSv.exe

MsPMSPSv.exe

Windows Media Player Service

The WMDM PMSP service will be installed with Windows Media Player 7 on Windows 2000 and is necessary for MS Digital Rights Management. The service allows WMDM (Windows Media Device Manager) to copy audio content from a computer to a portable audio player. You can disable this service if you don't use Media Player. On Windows XP/2003 the WMDM PMSP service is an instance of svchost.exe called Portable Media Serial Number.

This file is usually safe.

svchost.exe

svchost.exe	Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs). It's supplied with Windows.	The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services permits better control and easier debugging.	This file is usually safe.
svchost.exe	system file		This file is usually safe.
svchost.exe	system file		This file is usually safe.

explorer.exe

explorer.exe

Windows 9x, NT, 2000, XP, 2003 UI / File & Web Browser

Runs the main UI process of Windows as well as built in OS File and Web Browsers.

This file is usually safe.

realsched.exe

realsched.exe

Real Media scheduled service

Installed with RealPlayer. Does some regular action with the Real servers.

This file is usually safe.

hpztsb04.exe

ccApp.exe

CCAPP.exe	Symantec Common Client CC App	Process belonging to Norton AntiVirus. It is responsible for the auto-protect and email checking facilities, both of which will not function correctly if this service is stopped	This file is usually safe.
ccapp.exe	Symantec Common Client CC App	ccapp.exe is a process belonging to Norton AntiVirus. It is responsible for the auto-protect and email checking facilities, both of which will not function correctly if this service is stopped. This program is important for the stable and secure running of your computer and should not be terminated. ccapp.exe is also a process belonging to the media.fastclick adware which creates advertising popups on your computer and sends Internet usage information back to it's company's servers. This is a registered security risk and should be terminated immediatly.	Known to be a target for infections.
CCAPP.EXE	ADMIN FILE		This file is usually safe.

internat.exe

wcescomm.exe

wcescomm.exe

Microsoft ActiveSync

Synchronize Windows Mobile Pocket PCs

This file is usually safe.

TeaTimer.exe

teatimer.exe

Spybot S&D system settings monitor.

This is a program that comes bundled with Spybot Search & Destroy, a well known anti spyware program that keeps track and alerts you of registry changes . Handy to use.

This file is usually safe.

tclock.exe

PGPtray.exe

PGPtray.exe

PGP Desktop system tray icon interface

PGP Corporation's system tray icon interface for PGP Desktop, an encryption utility for email and local files.

This file is usually safe.

conime.exe

conime.exe

running in Windows system 32 folder and Windows/Service Pack files i386

Questions asked here: http://www.dslreports.com/forum/remark,15477974 did search on system, scanned, SAFE

This file is usually safe.

husen.exe

firefox.exe

firefox.exe	Mozilla Firefox	Firefox is a webbrowser, it can be found at firefox.com, getfirefox.com, mozilla.com.	This file is usually safe.
firefox.exe	A freeware Internet browser.	The .exe of a freeware Internet browser.	This file is usually safe.
firefox.exe	Webbrowser from Mozilla	The best browsers currently available ;-)	This file is usually safe.
firefox.exe	Mozilla FireFox	The well known Internet Browser.	This file is usually safe.
firefox.exe	free browser		This file is usually safe.

thunderbird.exe

thunderbird.exe

Email client

The Mozilla Thunderbird Email/NNTP/RSS client

This file is usually safe.

SharpReader.exe

imejpmgr.exe

IMEJPMGR.exe

Microsoft Input Method Editor Manager

Japanese Microsoft Input Method Editor (IME) Manager

This file is usually safe.

explorer.exe

explorer.exe

Windows 9x, NT, 2000, XP, 2003 UI / File & Web Browser

Runs the main UI process of Windows as well as built in OS File and Web Browsers.

This file is usually safe.

Win32.exe