Detailed Description of Windows 2000 Processes

Many friends ask questions like: "What is this process?", "What is that process?", "Is it a Trojan?" and so on. Below, we will introduce some common processes.

The most basic system processes (that is to say, these processes are the fundamental conditions for the system to run; with these processes, the system can operate normally):

- **smss.exe**: Session Manager

- **csrss.exe**: Subsystem server process

- **winlogon.exe**: Manages user login

- **services.exe**: Contains many system services

- **lsass.exe**: Manages IP security policies as well as initiating ISAKMP/Oakley (IKE) and IP Security drivers. (System service)

Generates session keys and grants service credentials (tickets) for interactive client/server authentication. (System service)

- **svchost.exe**: Contains many system services

- **svchost.exe**

- **SPOOLSV.EXE**: Loads files into memory to print later. (System service)

- **explorer.exe**: File Explorer

- **internat.exe**: Pinyin icon in the system tray

Additional system processes (these processes are not necessary; you can add or remove them according to your needs through the Services Manager):