My process list

  • Thread starter Thread starter ms
  • Start date Start date
M

ms

W2K/SP4, home desktop, DUN, no system issues AFAIK.

csrss.exe 192 C:\WINNT\system32\csrss.exe Client Server Runtime
Process 5.00.2195.6601. Copyright (C) Microsoft Corp. 1981-1999
Explorer.EXE 1068 C:\WINNT\Explorer.EXE Windows Explorer
5.00.3700.6690. Copyright (C) Microsoft Corp. 1981-1999
lsass.exe 256 C:\WINNT\system32\lsass.exe LSA Executable and Server
DLL (Export Version) 5.00.2195.6695. Copyright (C) Microsoft Corp. 1981-
1999
msdtc.exe 480 C:\WINNT\System32\msdtc.exe MS DTC console program
03.00.00.3504. Copyright (C) Microsoft Corp. 1995-1999
MSTask.exe 648 C:\WINNT\system32\MSTask.exe Task Scheduler Engine
4.71.2195.6704. Copyright (C) Microsoft Corp. 1997
services.exe 244 C:\WINNT\system32\services.exe Services and
Controller app 5.00.2195.6700. Copyright (C) Microsoft Corp. 1981-1999
smss.exe 168 C:\WINNT\System32\smss.exe Windows NT Session
Manager 5.00.2195.6601. Copyright (C) Microsoft Corp. 1981-1999
spoolsv.exe 452 C:\WINNT\system32\spoolsv.exe Spooler SubSystem App
5.00.2195.6659. Copyright (C) Microsoft Corp. 1981-1999
svchost.exe 428 C:\WINNT\system32\svchost.exe Generic Host Process for
Win32 Services 5.00.2134.1. Copyright (C) Microsoft Corp. 1981-1999
svchost.exe 596 C:\WINNT\System32\svchost.exe Generic Host Process for
Win32 Services 5.00.2134.1. Copyright (C) Microsoft Corp. 1981-1999
winlogon.exe 216 C:\WINNT\system32\winlogon.exe Windows NT
Logon Application 5.00.2195.6714. Copyright (C) Microsoft Corp. 1981-
1999
WinMgmt.exe 700 C:\WINNT\System32\WBEM\WinMgmt.exe Windows Management
Instrumentation 1.50.1085.0100. Copyright (C) Microsoft Corp. 1995-1999

This is my list of active processes, I omitted my utilities/drivers, the
question relates to the MS processes.

First, I notice 2 active files of "svchost.exe"- is that normal, or what
causes it?

Second, is there anything else not normal in a normal system?

Thanks

Mike
 
Not unusual
Nothing obvious, but some malaware / trojans can assume the identity of
another process
 
There is nothing unusual in your list, perhaps it is uncommon to have
the Distributed Transaction Coordinator service (msdtc.exe) running on a
home machine but there may be a valid reason to have it running.
Having multiple instances of Svchost,exe running is perfectly normal,
see the following for more information:

Description of Svchost.exe in Windows 2000
http://support.microsoft.com/kb/250320/

John
 
ms said:
W2K/SP4, home desktop, DUN, no system issues AFAIK.

csrss.exe 192 C:\WINNT\system32\csrss.exe Client Server
Runtime Process 5.00.2195.6601. Copyright (C) Microsoft Corp.
1981-1999 Explorer.EXE 1068 C:\WINNT\Explorer.EXE Windows
Explorer 5.00.3700.6690. Copyright (C) Microsoft Corp. 1981-1999
lsass.exe 256 C:\WINNT\system32\lsass.exe LSA Executable
and Server DLL (Export Version) 5.00.2195.6695. Copyright (C)
Microsoft Corp. 1981- 1999
msdtc.exe 480 C:\WINNT\System32\msdtc.exe MS DTC console
program 03.00.00.3504. Copyright (C) Microsoft Corp. 1995-1999
MSTask.exe 648 C:\WINNT\system32\MSTask.exe Task Scheduler
Engine 4.71.2195.6704. Copyright (C) Microsoft Corp. 1997
services.exe 244 C:\WINNT\system32\services.exe Services
and Controller app 5.00.2195.6700. Copyright (C) Microsoft Corp.
1981-1999 smss.exe 168 C:\WINNT\System32\smss.exe Windows
NT Session Manager 5.00.2195.6601. Copyright (C) Microsoft Corp.
1981-1999 spoolsv.exe 452 C:\WINNT\system32\spoolsv.exe
Spooler SubSystem App 5.00.2195.6659. Copyright (C) Microsoft Corp.
1981-1999 svchost.exe 428 C:\WINNT\system32\svchost.exe
Generic Host Process for Win32 Services 5.00.2134.1. Copyright (C)
Microsoft Corp. 1981-1999 svchost.exe 596
C:\WINNT\System32\svchost.exe Generic Host Process for Win32
Services 5.00.2134.1. Copyright (C) Microsoft Corp. 1981-1999
winlogon.exe 216 C:\WINNT\system32\winlogon.exe Windows NT
Logon Application 5.00.2195.6714. Copyright (C) Microsoft Corp. 1981-
1999
WinMgmt.exe 700 C:\WINNT\System32\WBEM\WinMgmt.exe Windows
Management Instrumentation 1.50.1085.0100. Copyright (C) Microsoft
Corp. 1995-1999

This is my list of active processes, I omitted my utilities/drivers,
the question relates to the MS processes.

First, I notice 2 active files of "svchost.exe"- is that normal, or
what causes it?

Second, is there anything else not normal in a normal system?

Thanks

Mike
Click to expand...

Thanks to all

Mike
 
There is nothing unusual in your list, perhaps it is uncommon to have
the Distributed Transaction Coordinator service (msdtc.exe) running on
a
home machine but there may be a valid reason to have it running.
Having multiple instances of Svchost,exe running is perfectly normal,
see the following for more information:

Description of Svchost.exe in Windows 2000
http://support.microsoft.com/kb/250320/

John
Click to expand...

Thanks for the link.

Mike
 
Back
Top