Vous êtes sur la page 1sur 7

smax4pnp - Author - Analogue Devices process installed alongside the Analogue Devices range of audio products.

This p rogram is a non-essential process, but should not be terminated unless suspected to be causing problems. Process File: rtvscan.exe or rtvscan Process Name: Symantec Real Time Virus Scan service Description: rtvscan.exe is an executable of the Symantec Internet Security Suite. It is resp onsible for the execution of real-time virus-scanning in order to detect virus i nfected files as they enter your system. This program is important for the stabl e and secure running of your computer and should not be terminated. Process File: acsvc.exe or acsvc Process Name: Access Connections Main Service Description: acsvc.exe is the Access Connections Main Service and is part of ThinkPad Access Connections suite. It is installed on Lenovo Thinkpad laptops. This program is a non-essential process, but should not be terminated unless suspected to be caus ing problems. Process File: acprfmgrsvc.exe or acprfmgrsvc Process Name: Ac Profile Manager Service Description: acprfmgrsvc.exe is a process which is registered as Ac Profile Manager Service. It is installed on Lenovo notebooks. Disabling or enabling it is down to user pr eference. Process File: acs.exe or acs Process Name: Atheros Wireless LAN Description: acs.exe is a process installed alongside Atheros Wireless LAN and provides addit ional configuration options for these devices. This program is a non-essential p rocess, but should not be terminated unless suspected to be causing problems. Process File: actray.exe or actray Process Name: actray Description: actray.exe is a process associated with ThinkVantage Access Connections from Len ovo. It is pre-installed on ThinkPad laptops and displays a tray icon to show th e status of network connection on your computer. This program is a non-essential process, but should not be terminated unless suspected to be causing problems. Process File: acwlicon.exe or acwlicon Process Name: acwlicon Description: acwlicon.exe is part of ThinkPad Access Connections suite and comes preinstalled on ThinkPad laptops. A traybar icon shows the status of the wireless connection . ALG.EXE: Process Name: Application Layer Gateway Service Process Description: alg.exe is a part of the Microsoft Windows operating system . It is a core process for Microsoft Windows Internet Connection sharing and Int ernet connection firewall. This program is important for the stable and secure r unning of your computer and should not be terminated ALG.EXE: Process Name: Application Layer Gateway Service

Process Description: alg.exe is a part of the Microsoft Windows operating system . It is a core process for Microsoft Windows Internet Connection sharing and Int ernet connection firewall. This program is important for the stable and secure r unning of your computer and should not be terminated Process File: btstac~1.exe or btstac~1 Process Name: Bluetooth Stack COM Server Description: btstac~1.exe is a process associated with Bluetooth Software 3.0.1.913 from Broa dcom Corporation. Process File: bttray.exe or bttray Process Name: Widcomm's Bluetooth Tray Application Description: bttray.exen is the traybar process for Widcomm Inc Bluetooth products. It gives you easy access to the configurations a nd settings for the Bluetooth products. Process File: btwdins.exe or btwdins Process Name: MSI Bluetooth Software Description: btwdins.exe is a part of the Microsoft Windows Operating System which deals with Bluetooth functionality and should not be terminated. Process File: ccapp.exe or ccapp Process Name: Symantec Common Client CC App Description: ccapp.exe is a process belonging to Norton AntiVirus. It is responsible for the auto-protect and email checking facilities, both of which will not function corr ectly if this service is stopped. This program is important for the stable and s ecure running of your computer and should not be terminated. Note: ccapp.exe could also be a process belonging to an advertising program by S ymantec Common Client CC App. This process monitors your browsing habits and dis tributes the data back to the author's servers for analysis. This also prompts a dvertising popups. This process is a security risk and should be removed from yo ur system. Determining whether ccapp.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks Process File: ccevtmgr.exe or ccevtmgr Process Name: Symantec Event Manager Service Description: ccevtmgr.exe is a process belonging to Norton Internet Security Suite. This proc ess acts as a logger for the AntiVirus and firewall application installed. This program is important for the stable and secure running of your computer and shou ld not be terminated. Process File: ccsetmgr.exe or ccsetmgr Process Name: Symantec Set Manager Module Description: ccsetmgr.exe is a process associated with the Symantec Internet Security Suite a nd is essential to it's functioning. This program is important for the stable an d secure running of your computer and should not be terminated. client.exe - Zonelabs? CSRSS.EXE: Process Name: Microsoft Client/Server Runtime Server Subsystem

Process Description: csrss.exe is the main executable for the Microsoft Client/S erver Runtime Server Subsystem. This process manages most graphical commands in Windows. This program is important for the stable and secure running of your com puter and should not be terminated. csrss.exe is also process which is registere d as the W32.Netsky.AB@mm worm, the W32.Webus Trojan, Win32.Ladex.a and more. Th is virus is distributed via the Internet through e-mail and comes in the form of an e-mail message, in the hopes that you open it's hostile attachment. The worm has it's own SMTP engine which means it gathers E-mails from your local compute r and re-distributes itself. In worst cases this worm can allow attackers to acc ess your computer, stealing passwords and personal data. It is a registered secu rity risk and should be removed immediately. Process File: defwatch.exe or defwatch Process Name: Norton Antivirus Corporarte Edition DefWatch Description: defwatch.exe is a part of Norton Antivirus Corporate Edition, and is responsible for monitoring the virus definition files and initiating processes to bring the m up to date if they aren't. Entrust Login Interface (ELIService) Command etlisrv.exe Description Related to Entrust Login Interface service, Made by Entrust Technolo gies Ltd. This file is found in the Windows or Winnt folder. etlitr50.exe is usually Entrust Login Interface Tray (If you have installed Entr ust software) Process File: explorer.exe or explorer Process Name: Microsoft Windows Explorer Description: explorer.exe is the Windows Program Manager or Windows Explorer. It manages the Windows Graphical Shell including the Start menu, taskbar, desktop, and File Man ager. By removing this process the graphical interface for Windows will disappea r. This program is important for the stable and secure running of your computer and should not be terminated. Note: explorer.exe is a process which is registered as a trojan. This Trojan all ows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system. Determining whether explorer.exe is a virus or a legitimate Windows process depe nds on the directory location it executes or runs from in WinTasks. Process File: hkcmd.exe or hkcmd Process Name: Intel Hotkey Description: hkcmd.exe is installed alongside Intel multimedia devices and allows configurati on and diagnostic options for these devices. This program is a non-essential pro cess, but should not be terminated unless suspected to be causing problems. Process File: ibmpmsvc.exe or ibmpmsvc Process Name: Ibmpmsvc Description: ibmpmsvc.exe is a process from IBM used for power management on IBM laptop compu ters. The application manages the different power buttons on your ThinkPad keybo ard. Processes : ICLIENT.EXE Summary : ZoneLabs Integrity Client

Description : ZoneLabs Integrity Client Company : Zone Labs Inc. Process File: igfxpers.exe or igfxpers Process Name: Intel Common User Interface Module Description: igfxpers.exe is a process installed alongside NVidia graphics cards and provides additional configuration options for these devices. This program is a non-essen tial process, but should not be terminated unless suspected to be causing proble ms. Process File: igfxtray.exe or igfxtray Process Name: Intel(R) Graphics Accelerator Helper Description: igfxtray.exe is a process which allows you to access the Intel Graphics configur ation and diagnostic application for the Intel 810 series graphics chipset. This program is a non-essential system process, and is installed for ease of use via the desktop tray. Process File: igfxtray.exe or igfxtray Process Name: Intel(R) Graphics Accelerator Helper Description: igfxtray.exe is a process which allows you to access the Intel Graphics configur ation and diagnostic application for the Intel 810 series graphics chipset. This program is a non-essential system process, and is installed for ease of use via the desktop tray. Processes : ISAMSMT.EXE Summary : IBM ISAM Software Metering Tool Description : IBM ISAM Software Metering Tool Company : IBM Corporation ProcessName isamtray.exe Processes : ISSIMSVC.EXE Description : IBM ISSI EZUpdate Service Process File: jusched.exe or jusched Process Name: Sun Java Update Scheduler Description: jusched.exe is a process installed alongside Sun Microsystem's Java suite and ch ecks for Java updates which involves usage of the Internet. This program is impo rtant for the stable and secure running of your computer's Internet browsing and Java usage and should not be terminated. ldlcserv.exe - part of the IBM personal communications suite LSASS.EXE: Process Name: Local Security Authority Service Process Description: lsass.exe is a system process of the Microsoft Windows secu rity mechanisms. It specifically deals with local security and login policies. A gain, lsass.exe also relates to the Windang.worm, irc.ratsou.b, Webus.B, MyDoom. L, Randex.AR, Nimos.worm which spread via floppy disk drives, mass-mailing and p eer-to-peer sharing. Process File: mdm.exe or mdm Process Name: Machine Debug Manager

Description: mdm.exe is associated with Microsoft Windows process debugging system. It allows the user to debug Internet Explorer errors by using a script interface tool. Th is is a non-essential process. Disabling or enabling it is down to user preferen ce. Note: mdm.exe could also be a process which is registered as a Machine Debug Man ager. This Machine Debug Manager allows attackers to access your computer from r emote locations, stealing passwords, Internet banking and personal data. This pr ocess is a security risk and should be removed from your system. Determining whether mdm.exe is a virus or a legitimate Windows process depends o n the directory location it executes or runs from in WinTasks. netcfgsv.exe Network Configuration Service (NetCfgSvr). Command, NetCfgSv.EXE ... Description , Related to AT&T Process File: ntmulti.exe or ntmulti Process Name: IBM Lotus Component Description: ntmulti.exe is a part of the IBM Lotus product suite. IBM Lotus is an advanced c ontact management system. Process File: ntaskldr.exe or ntaskldr Process Name: IBM Lotus Component Description: ntmulti.exe is a part of the IBM Lotus product suite. IBM Lotus is an advanced c ontact management system. Processes : PCS_AGNT.EXE Summary : IBM Always Resident Personal Communications Description : IBM Personal Communications is a key component of IBM's Host Acce ss products, providing access to applications and data whether residing on mid-r ange or enterprise servers (mainframes). SR_service.exe - checkpoint securemote Process File: tfswctrl.exe or tfswctrl Process Name: HP DLA Packet Writing Software Description: tfswctrl.exe is an essential process for HP's packet writing software which burn s data to CD's using Microsoft Windows explorer. This program is a non-essential system process, but should not be terminated unless suspected to be causing pro blems.

SVCHOST.EXE: Process Name: Microsoft Service Host Process Process Description: svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This progra m is important for the stable and secure running of your computer and should not be terminated. It should be noted that svchost.exe is a process which is regist ered as the W32.Welchia.Worm. It takes advantage of the Windows LSASS vulnerabil ity, which creates a buffer overflow and instigates your computer to shut down. To determine whether the process is legitimate or not, review file path and make sure it is not in your system folder. If it is it is ok, if not then this is a registered security risk and should be removed immediately.

SMSS.EXE: Process Name: Session Manager Subsystem Process Description: smss.exe is a process which is a part of the Microsoft Wind ows Operating System. It is called the Session Manager SubSystem and is responsi ble for handling sessions on your system. This program is important for the stab le and secure running of your computer and should not be terminated. Note: smss. exe is also a process which is registered as the Win32.Ladex.a Trojan. This Troj an allows attackers to access your computer, stealing passwords and personal dat a. It is a registered security risk and should be removed immediately. SCVHOST.EXE Process Name: W32/Agobot-S virus Process Description: scvhost.exe is a process which is registered as the W32/Ago bot-S virus. This Trojan allows attackers to access your computer, stealing pass words and personal data. It is a registered security risk and should be removed immediately. WDFMGR.EXE: Process Name: Windows Driver Foundation Manager Process Description: wdfmgr.exe is part of Microsoft Windows media player 10 and above. This process decreases compatibility problems whilst the product is in u se. This program is non-essential process to the running of the system, but shou ld not be terminated unless suspected to be causing problems. CTFMON.EXE: Process Name: Alternative User Input Services Process Description: ctfmon.exe is a part of the Microsoft Office suite. It acti vates the Alternative User Input Text Input Processor (TIP) and the Microsoft Of fice XP Language Bar. This program is a non-essential system process, but should not be terminated unless suspected to be causing problems. SERVICES.EXE: Process Name: Windows Service Controller Process Description: services.exe is a part of the Microsoft Windows Operating S ystem and manages the operation of starting and stopping services. This process also deals with the automatic starting of services during the computers boot-up and the stopping of servicse during shut-down. This program is important for the stable and secure running of your computer and should not be terminated. Note: services.exe is also a process which is registered as the W32.Randex.R (stored i n %systemroot%\system32\ directory) and Sober.P (stored in %systemroot%\Connecti on Wizard\Status\ directory) Trojan. This Trojan allows attackers to access your computer, stealing passwords and personal data. It is a registered security ris k and should be removed immediately. SPOOLSV.EXE: Process Name: Microsoft Printer Spooler Service Process Description: spoolsv.exe is a Microsoft Windows system executable which handles the printing process to your local printers. Note: spoolsv.exe is also a process which is registered as the Backdoor.Ciadoor.B Trojan. This Trojan allow s attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately.