윈도우 프로세스 정리

http://support.microsoft.com/default.aspx?scid=KB;EN-US;q263201&

 

System process – Windows Memory Handler System Process - The Windows memory Handler System Process zeroes any free pages of RAM and is the only process with priority 0

 

Cisvc – cisvc.exe – Microsoft Index Service Helper - MS index Service Helper, a service that monitors the memory usage of MS Indexing Service (cidamon.exe) and automatically re-starts cidaemon.exe if is uses more than 40MB of memory

 

Csrss – csrss.exe – Client/Server Runtime Server Subsystem - Process information – Windows client server run-time subsystem handles Windows and graphics functions for all subsystems

 

Dfssvc – dfssvc.exe – Distributed File System (DFS) - Background task that implements a Distributed File system (DFs) that consists of logical volumes distributed across a local or wide area network.

 

Dumprep – dumprep.exe – Dump Reporting Tool - MS provided windows error dump reporting tool that creates memory dump reports that you can send back to Microsoft for further analysis. The tool is found on Windows XP/2003.

 

helpctr - helpctr.exe - Microsoft Help and Support Center -  Part of the Windows XP Help system. This application is started when you click Start > Help and Support from the Windows taskbar.

 

inetinfo - inetinfo.exe - IIS Admin Service Helper - InetInfo, which is part of Microsoft Internet Information Services (IIS) and is used for debugging. The service is seen primarily on Windows NT 4 or 2000 Server where InetInfo provides Internet proxy and web server services.

 

ismserv - ismserv.exe - Intersite Messaging - Application that allows a user to send and receive messages between Windows Advanced Server sites.

 

lights - lights.exe - System tray bar application that is used to show the modem status. The application contains two red/green activity lights that help users to get the modem status.

 

mad - mad.exe - System Attendant Service - System Attendant Service for Microsoft Exchange Server that runs in the background and is needed by Microsoft Exchange Server. The service loads DLLs for Microsoft Exchange, writes log messages, and generates the offline address books

 

mmc - mmc.exe - Microsoft Management Console - Microsoft Management Console application is used to display various management plug-ins accessed from the Control Panel, such as the Device Manager or the Computer Management console. The Microsoft Management Console manages most of the Microsoft system products such as SQL Server, Exchange server, and more.

 

mprexe - mprexe.exe - Windows Routing Process - Application that allows Windows 95, 98, or ME to have more than one network client, protocol, or adapter. The software routes network requests between the different adapters and clients.

 

msgsrv32 - msgsrv32.exe - Windows Message Server - Windows Message Server, which loads Windows drivers and the Program Manager at start-up. The software runs invisibly in the background performing a variety of essential services, most of which concern on-screen messages and notifications.

 

mssearch - mssearch.exe - MS Index Service - Application that generates full-text indexes on content and properties of structured and semi-structured data to allow fast linguistic searches on this data that is used for IIS.

 

netdde - netdde.exe - Microsoft Windows Network DDE server - Application that is the Network DDE server for Microsoft Windows. The software allows applications that use the DDE transport to transparently exchange data over a network.

 

pstores - pstores.exe - Protected Storage Service - Microsoft Protected Storage Server, in Win95/98/ME, or Protected Storage Service, in WinNT/2000/XP. Protected Storage, in the form of PSTORES, was introduced with Internet Explorer 4. It is invoked by Microsoft Internet programs, such as Outlook Express and Internet Explorer, to securely store a variety of secure and confidential data into the registry, such as Outlook Express passwords, SSL certificates, auto-complete fields, such as usernames and passwords to enter web sites, and so forth, and web forms data.

 

rnaapp - rnaapp.exe - Windows Modem Connection - Windows Dial-Up Networking application that handles dial-up modem connections. RNAAPP only appears in your Task List if your computer tries or tried to dial out at some stage or if the computer is waiting for an in-bound connection using Dial-Up Networking.

 

runonce - runonce.exe – Runonce - Known as the Microsoft "Run Once" wrapper. The application is a program that developers can use as part of their installation procedures to ensure, for example, that after the first reboot after the software installation, some additional configuration program runs once, and once only, to complete the installation.

 

scardsvr - scardsvr.exe - Smartcard-Ressource server - Application that provides a facility for Smart Card authentication on local or network computers.

 

smss - smss.exe - Session Manager Subsystem - Application that is used to start, manage, and delete user sessions or client sessions under Terminal Server.

 

spool32 - spool32.exe - Printer Spooler - Application that handles the spooling of print jobs transparently. It works only when the user configures the printer to spool print jobs.

 

srvany - srvany.exe –Srvany - Application that is associated with Microsoft Windows NT 4, 2000, and XP Resource Kits and is used to run normal Windows applications as services.

 

systray - systray.exe - System Tray Services - Background application that runs the Windows system tray, which provides space to display the clock time and icons installed by other applications.

 

taskmon - taskmon.exe - Application that is used to collect information from hard disksby monitoring the most frequently used programs. This information is used by the Disk Defragmenter program, so that the programs and files that the user accesses the most will load faster.

 

winmgmt - winmgmt.exe - Windows Management Service -  Windows Management Instrumentation from Microsoft that allows you to write scripts for the management of devices, user accounts, services, networking, and other aspects of your Windows 98/ME/NT/2000 system.

 

wkdetect - wkdetect.exe – Wkdetect - A background process that checks automatically for Microsoft Works updates when you are connected to the Internet.

 

wuauclt - wuauclt.exe - AutoUpdate for WindowsME - Background process responsible for updates to Windows ME. Whenever you connect to the Internet, Wuauclt checks the Microsoft web site for updates to Windows ME.

 

agentsvr - agentsvr.exe - Microsoft Agent Server- ActiveX control that helps software developers to add character animation to their software or web pages, text to speech facilities, or end-user voice commands capability.

 

cconnect - cconnect.exe – CorrectConnect - Background application that is included with the Windows 2000 Resource Kit and monitors user connections to servers and the system they are logging on to.

 

clisvcl - clisvcl.exe - SMS Client Service - SMS Client Service (Clisvcl.exe) that starts the Microsoft Systems Management Server Software Inventory process. Microsoft Systems Management Server Software Inventory provides a comprehensive scan of the software installed on the computer.

 

ctfmon - ctfmon.exe - Alternative User Input Services - A service that handles the Alternative User Input Text Processor (TIP) and the Microsoft Office Language Bar. It provides text input support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies.

 

dllhost - dllhost.exe - DCOM DLL Host Process - DCOM DLL host process that supports DLL-based COM objects and is used by many Windows programs.

 

explorer - explorer.exe - Program Manager - Windows Program Manager or Windows Explorer, which handles the Windows Graphical Shell including the Start menu, taskbar, desktop, and File Manager.

 

hidserv - hidserv.exe - Microsoft Human Interface Device Audio Service - Background service that provides support for USB audio devices and USB multimedia keyboards

 

internat - internat.exe - Input Locales - Application that provides multi-language support on keyboards for Microsoft Windows programs.

 

kernel32 - kernel32.dll - Windows Kernel Process - Windows Kernel, which provides system services for managing threads, memory, and resources.

 

locator - locator.exe - RPC Locator - Background task that runs on Windows NT 4, 2000, and XP platforms, and maintains the database of currently publicly-declared procedures. Server processes and applications register all their publicly declared procedures with Locator. Thus, client processes can query Locator for specific publicly-declared procedures.

 

mapisp32 - mapisp32.exe - Mapisp32 - Also known as MAPI Spooler. The application dispatches the messages waiting in Microsoft Exchange, Windows Messaging, or the Microsoft Outlook outbox.

 

mmtask - mmtask.tsk - Multimedia Support Task - Windows Multimedia Background Task Support Module that handles multimedia services. The software provides simulated multitasking for multimedia applications; for example, you could be playing more than one AVI movie at the same time. This task does not exist in Windows NT 4, 2000, or XP operating systems, which are true multitasking operating systems.

 

msconfig - msconfig.exe - Windows System Configuration Utility - A file that helps to manage startup and configure system files like autoexec.bat and win.ini. This file also changes the display of printer properties.

 

msiexec - msiexec.exe - Windows Installer Component - Windows Installer Component that is used to install new programs that use Windows Installer package files (MSI).

 

mstask - mstask.exe - Windows Task Scheduler - Windows Task Scheduler, a service that schedules tasks, such as backups or updates, to run at certain times or dates.

 

ntfrs - ntfrs.exe - File Replication Service - Application that is used to maintain file synchronization of file directory contents among multiple servers.

 

regsvc - regsvc.exe - Remote Registry Service - A service that allows access to the Windows registry from remote computers. The service runs on Windows 2000 Server and Advanced Server. Whenever you install Microsoft software, such as SQL on Windows 2000 Server, and your setup program needs to write keys to the registry, the setup program interacts with the Remote registry Service (REGSVC.EXE) and the Remote registry Service does the actual writing of the registry keys. This background service is also required if you intend to edit the registry from a remote computer using Windows 2000 Remote Administration facilities.

 

rpcss - rpcss.exe - Remote Procedure Call Services - Application that allows other programs to call publicly declared procedures over a network. This application becomes a crucial component for other network related Microsoft software.

 

sage - sage.exe – SystemAgent - Application that automatically performs system tuning tasks like disk optimization and error correction. The application can also run any application at prescheduled times.

 

scm - scm.exe - Service Control Manager - Application that is used to manage all services running on windows. The application provides functionality to stop start, pause, and restart the service. Also offers to change and set the startup type, both automatic and manual, for the service.

 

snmp - snmp.exe - Microsoft SNMP Agent - Windows Simple Network Managment Protocol (SNMP) agent, a proxy that listens for requests and hands them off to the appropriate network provider.

 

spoolss - spoolss.exe - Printer Spooler Subsystem - Windows Printer Spooler Subsystem, a service that controls de-spooling of printer data from disk to printer.

 

svchost - svchost.exe - Service Host Process - Application that works as a host process for services that run from dynamic link libraries.

 

tapisrv - tapisrv.exe - TAPI Service - Background service that provides Windows Telephony (TAPI) Support in Windows 98 and Windows NT 4. The service is an essential task used by all telephony services, such as dial-up networking through any type of modem, in these two operating systems.

 

taskswitch - taskswitch.exe - Microsoft TaskSwitch Utility - Application that displays a preview window of each program that the user can switch to by pressing Alt+Tab on the keyboard.

 

winoa386 - winoa386.mod - MS-DOS Console - Windows MS-DOS Console provides DOS console and script functions in Windows. It is the interface between the Windows mode and DOS mode in Windows.

 

wmiexe - wmiexe.exe - Microsoft’s Windows Management Instrumentation (WMI). - Application that gives a standard method of accessing system information, performance information, event monitors, and application monitors. The application works as a transparent task.

 

alg - alg.exe - Application Layer Gateway Service - Part of Internet Connection Sharing application and Internet Connection Firewall for Windows XP. This service provides support for third party protocol plug-ins for the Internet Connection Sharing application and Internet Connection Firewall.

 

cidaemon - cidaemon.exe - Microsoft Indexing Service - Indexing Service that runs in the background and catalogs files so that you can search for files containing a specific text string.

 

ddhelp - ddhelp.exe - DirectDraw Helper - DirectDraw Helper, a part of DirectX and is used for graphics related services.

 

grpconv - grpconv.exe - Windows Program Group Converter - Application that is used to convert the Windows 3.1 groups to folders while upgrading from Windows 3.1.

 

ireike - ireike.exe – ireike - Microsoft virtual private network client that provide remotes access connections across public networks, such as the Internet.

 

launch32 - launch32.exe - launch32 - Application that is a Microsoft Systems Management Server that provides application deployment, asset management, security patch management, Windows Management Services integration, and other facilities.

 

lsass - lsass.exe - Local Security Authority Service - Windows Local Security Authority Server Process handles Windows security mechanisms. It verifies the validity of user logons to your computer or server. Technically, the software generates the process that is responsible for authenticating users for the Winlogon service.

 

mdm - mdm.exe - Machine Debug Manager - Machine Debug Manager is used for debugging applications by technically advanced users and developers and is installed by the Microsoft Script Editor that is included in Microsoft Office.

 

monitor - monitor.exe – Monitor - Application that helps in monitoring Windows NT Server Performance. Monitor.exe runs from the command line on your local workstation. You use this service to start, stop, and set up the Datalog service on the target server.

 

msdtc - msdtc.exe - Distributed Transaction Coordinator - Application that is loaded into the system by Microsoft Personal Web Server and Microsoft SQL Server. The service is used to manage transactions across multiple servers.

 

msoobe - msoobe.exe - Windows Product Activation - Windows Product Activation, which is used to activate an Windows XP license.

 

mtx - mtx.exe - Application that is used to load a specific MTS package by generating MTS objects on behalf of client applications.

 

ntvdm - ntvdm.exe - Windows 16-bit Virtual Machine - Application that provides an environment for a 16-bit process to execute on a 32-bit platform.

 

regsvr32 - regsvr32.exe -Regsvr32 - Application that is used to register dynamic-link libraries and ActiveX controls in the registry.

 

rundll32 - rundll32.exe - Rundll32 - Microsoft "Run a DLL as an App". RUNDLL32 is the Microsoft Windows program that loads DLLs into memory so that they can be used by specific programs or by Windows.

 

scanregw - scanregw.exe - Microsoft’s Registry Checker. - Application that is used to check the integrity of the Windows registry. The application starts on boot up and checks the registry for errors. On finding major errors, the application informs the user to restore from backup; otherwise, the application fixes minor errors.

 

services - services.exe - Windows Service Controller - Application that is used only in Windows NT 4, 2000, and XP for starting, stopping, and interacting with system services.

 

spoolsv - spoolsv.exe - Printer Spooler Service - Windows Printer Spooler, a service that stores printer jobs and forwards them to the printer when it is ready.

 

system - system - Windows System Process –

 

winlogon - winlogon.exe – Windows Logon Process - Windows NT logon utility that manages user logons and logoffs. The utility prompts you for the password when you log on and allows you to log off or shut down.

 

wowexec - wowexec.exe - Windows On Windows Execution Process - Windows On Windows Execution Support Process that provides support for 16-bit Windows applications together with ntvdm.exe. The service is started by NTVDM, which starts every time you run a 16-bit program.