Windows进程知识库

Windows进程知识库

1. 什么是进程？ 

2. 什么是木马？

进程是程序在内存中的一次运行。在Windows系统运行的进程中，可能包括系统文件应用程序文件和恶意程序。察看系统正在运行的进程的方法请参考“如何察看系统中运行的进程”。

木马是编写的一种远程控制恶意程序，木马会未经用户许可，记录用户的键盘录入，盗取用户银行账户，密码等信息，并将其发送给攻击者。
在你的计算机上，有20-30个进程在后台运行着。有的占用了太多的系统资源，造成机器运行缓慢。更为不幸的是，一些进程是间谍软件和木马，如此你的隐私和机器的控制权会被黑客所掌控。这里提供了大多数常见的进程知识。这里的分类包括：

存在安全风险进程Top榜

存在安全风险进程列表
180ax.exe	a.exe	actalert.exe
adaware.exe	Alchem.exe	alevir.exe
aqadcup.exe	archive.exe	arr.exe
ARUpdate.exe	asm.exe	av.exe
avserve.exe	avserve2.exe	backWeb.exe
bargains.exe	basfipm.exe	belt.exe
Biprep.exe	blss.exe	bokja.exe
bootconf.exe	bpc.exe	brasil.exe
BRIDGE.DLL	Buddy.exe	BUGSFIX.EXE
bundle.exe	bvt.exe	cashback.exe
cdaEngine	cmd32.exe	cmesys.exe
conime.exe	conscorr.exe	crss.exe
cxtpls.exe	datemanager.exe	dcomx.exe
Desktop.exe	directs.exe	divx.exe
dllreg.exe	dmserver.exe	dpi.exe
dssagent.exe	dvdkeyauth.exe	emsw.exe
exdl.exe	exec.exe	EXP.EXE
explore.exe	explored.exe	Fash.exe
ffisearch.exe	fntldr.exe	fsg_4104.exe
FVProtect.exe	game.exe	gator.exe
gmt.exe	goidr.exe	hbinst.exe
hbsrv.exe	hwclock.exe	hxdl.exe
hxiul.exe	iedll.exe	iedriver.exe
IEHost.EXE	iexplorer.exe	infus.exe
infwin.exe	intdel.exe	isass.exe
istsvc.exe	jawa32.exe	jdbgmrg.exe
kazza.exe	keenvalue.exe	kernel32.exe
lass.exe	lmu.exe	loader.exe
lssas.exe	mapisvc32.exe	mario.exe
md.exe	mfin32.exe	mmod.exe
mostat.exe	msapp.exe	msbb.exe
msblast.exe	mscache.exe	msccn32.exe
mscman.exe	msdm.exe	msgfix.exe
msiexec16.exe	msinfo.exe	mslagent.exe
mslaugh.exe	msmc.exe	msmgt.exe
msmsgri32.exe	MSN.exe	msrexe.exe
mssvc32.exe	mssys.exe	msvxd.exe
mwsoemon.exe	mwsvm.exe	netd32.exe
nls.exe	nssys32.exe	nstask32.exe
nsupdate.exe	ntfs64.exe	NTOSA32.exe
omniscient.exe	onsrvr.exe	optimize.exe
P2P Networking.exe	pcsvc.exe	pgmonitr.exe
PIB.exe	powerscan.exe	prizesurfer.exe
prmt.exe	prmvr.exe	ray.exe
rb32.exe	rcsync.exe	rk.exe
run32dll.exe	rundll16.exe	ruxdll32.exe
saap.exe	sahagent.exe	saie.exe
sais.exe	salm.exe	satmat.exe
save.exe	savenow.exe	sc.exe
scam32.exe	scrsvr.exe	scvhost.exe
SearchUpdate33.exe	SearchUpgrader.exe	soap.exe
spoler.exe	Ssk.exe	start.exe
stcloader.exe	Susp.exe	svc.exe
svchosts.exe	svshost.exe	SyncroAd.exe
sysfit.exe	system.exe	system32.exe
tb_setup.exe	TBPS.EXE	teekids.exe
tibs3.exe	trickler.exe	ts.exe
ts2.exe	tsa.exe	tsadbot.exe
tsl.exe	tsm2.exe	Tvm.exe
tvmd.exe	tvtmd.exe	update.exe
updater.exe	updmgr.exe	VVSN.exe
wast.exe	web.exe	webdav.exe
webrebates.exe	webrebates0.exe	win-bugsfix.exe
win_upd2.exe	win32.exe	win32us.exe
winactive.exe	winad.exe	winadalt.exe
winadctl.exe	WinAdTools.exe	WINdirect.exe
windows.exe	wingo.exe	wininetd.exe
wininit.exe	winlock.exe	winlogin.exe
winmain.exe	winnet.exe	winppr32.exe
winrarshell32.exe	WinRatchet.exe	WinSched.exe
winservn.exe	winshost.exe	winssk32.exe
winstart.exe	winstart001.exe	WinStatKeep.exe
wintaskad.exe	Wintime.exe	wintsk32.exe
winupdate.exe	winupdt.exe	winupdtl.exe
winxp.exe	wmon32.exe	wnad.exe
wo.exe	wovax.exe	wsup.exe
wsxsvc.exe	wtoolsa.exe	WToolsA.exe
wtoolss.exe	wuamgrd.exe	wupdate.exe
wupdater.exe	wupdmgr.exe	wupdt.exe
Xhrmy.exe	y.exe

系统进程列表

Top System Processes
[system process]	actmovie.exe	agentsvr.exe
alg.exe	ASPNET_WP.exe	btwdins.exe
ccmexec.exe	cidaemon.exe	cisvc.exe
clisvcl.exe	cmd.exe	Control.exe
csrss.exe	ctfmon.exe	ddhelp.exe
dfssvc.exe	dllhost.exe	dos4gw.exe
dotnetfx.exe	dumprep.exe	explorer.exe
fast.exe	grpconv.exe	hidserv.exe
iexplore.exe	imapi.exe	inetinfo.exe
internat.exe	kernel32.dll	launch32.exe
loadwc.exe	locator.exe	logonui.exe
lsass.exe	mad.exe	mapisp32.exe
mmc.exe	mmtask.tsk	mprexe.exe
msconfig.exe	msdtc.exe	msgsrv32.exe
msiexec.exe	msoobe.exe	mstask.exe
mstinit.exe	ndisuio.sys	netdde.exe
ntoskrnl.exe	ntvdm.exe	pchschd.exe
pstores.exe	rasautou.exe	rdpclip.exe
regsvc.exe	regsvr32.exe	rnaapp.exe
rpcss.exe	rsvp.exe	rundll.exe
rundll32.exe	runonce.exe	sapisvr.exe
savedump.exe	scanregw.exe	scardsvr.exe
services.exe	smss.exe	snmp.exe
spool32.exe	spoolss.exe	spoolsv.exe
srvany.exe	svchost.exe	system
System Idle Process	systray.exe	tapisrv.exe
taskmgr.exe	taskmon.exe	tcpsvcs.exe
tlntsvr.exe	userinit.exe	winlogon.exe
winmgmt.exe	winoa386.mod	WMIADAP.EXE
wmiexe.exe	wmiprvse.exe	wowexec.exe
wpabaln.exe	wscntfy.exe	wuaclt.exe
wuauboot.exe	wuauclt.exe	wuaudt.exe
wucrtupd.exe

应用程序进程列表

Top Applications
[System Process]	000stthk.exe	1xconfig.exe
3dm2.exe	AcctMgr.exe	acrobat.exe
acrord32.exe	acrotray.exe	ACS.exe
acsd.exe	adgjdet.exe	AdobeUpdateManager.exe
adservice.exe	adusermon.exe	agent.exe
agrsmmsg.exe	AgtServ.exe	aim.exe
aim95.exe	AIT	alogserv.exe
anvshell.exe	AOLacsd.exe	AOLDial.exe
aom.exe	apntex.exe	apoint.exe
asfagent.exe	ashWebSv.exe	astart.exe
ati2evxx.exe	ATIevxx.exe	atiptaxx.exe
atrack.exe	aupdate.exe	autochk.exe
avconsol.exe	AVENGINE.EXE	avgserv.exe
avgupsvc.exe	avgw.exe	avpcc.exe
avsynmgr.exe	backweb-137903.exe	backweb-8876480.exe
bacstray.exe	bcmsmmsg.exe	blackd.exe
bpcpost.exe	BRMFRSMG.EXE	brss01a.exe
BRSVC01A.EXE	bttnserv.exe	ca.exe
calc.exe	carpserv.exe	CCAP.EXE
ccapp.exe	ccevtmgr.exe	ccproxy.exe
ccpxysvc.exe	ccregvfy.exe	cdac11ba.exe
cdantsrv.exe	cdplayer.exe	cfd.exe
cfgwiz.exe	cftmon.exe	charmap.exe
cleanup.exe	cli.exe	cmanager.exe
cmmpu.exe	Companion.exe	comsmd.exe
cpd.exe	crypserv.exe	crypserv.exe
cthelper.exe	ctnotify.exe	ctsvccda.exe
cvpnd.exe	dadapp.exe	dadtray.exe
damon.exe	dap.exe	DavCData.exe
dcfssvc.exe	ddcman.exe	defwatch.exe
delayrun.exe	devenv.exe	devldr.exe
devldr16.exe	devldr32.exe	dfrgntfs.exe
digstream.exe	directcd.exe	dit.exe
ditexp.exe	dkservice.exe	dlg.exe
dllcmd32.exe	dmadmin.exe	dpmw32.exe
dpps2.exe	dragdiag.exe	drwtsn32.exe
dsentry.exe	dvzmsgr.exe	dw.exe
dwrcs.exe	dwwin.exe	dxdllreg.exe
e_s10ic2.exe	EasyShare.exe	eausbkbd.exe
eEBSvc.exe	em_exec.exe	essspk.exe
evntsvc.exe	excel.exe	ezsp_px.exe
findfast.exe	firedaemon.exe	firefox.exe
flash.exe	FrameworkService.exe	full.exe
fxssvc.exe	fxsvr2.exe	gamechannel.exe
gbpoll.exe	gcastdtserv.exe	gcIPtoHostQueue.exe
gearsec.exe	ghost_2.exe	gwmdmmsg.exe
hc.exe	helpctr.exe	helper.exe
helpinst.exe	hh.exe	hijackthis.exe
hkcmd.exe	hl.exe	hndlrsvc.exe
hpcmpmgr.exe	hpgs2wnd.exe	hpgs2wnf.exe
hphmon05.exe	hpoevm06.exe	hpoevm08.exe
hpoevm09.exe	hposts08.exe	hpotdd01.exe
HPQTRA08.EXE	hpsysdrv.exe	hpzipm12.exe
hpztsb01.exe	hpztsb02.exe	hpztsb04.exe
hpztsb05.exe	hpztsb06.exe	hpztsb07.exe
hpztsb08.exe	htpatch.exe	iamapp.exe
iao.exe	iap.exe	icepack.exe
ico.exe	icq.exe	icwconn1.exe
ie5setup.exe	ie6setup.exe	igfxtray.exe
imgicon.exe	InoRT.exe	installstub.exe
instantaccess.exe	ipmon32.exe	iPodManager.exe
ipodservice.exe	iPodWatcher.exe	irmon.exe
isafe.exe	issch.exe	ISSVC.exe
isuspm.exe	iTunesHelper.exe	iw.exe
java.exe	javaw.exe	JDBGMGR.EXE
jusched.exe	kav.exe	kazaa.exe
kbd.exe	KEM.exe	khalmnpr.exe
khost.exe	kodakimg.exe	kontiki.exe
lexbces.exe	lexpps.exe	livenote.exe
llssrv.exe	loadqm.exe	logi_mwx.exe
logon.scr	logwatnt.exe	ltsmmsg.exe
luall.exe	lucoms.exe	lucoms~1.exe
lucomserver.exe	lvcoms.exe	LVCOMSX.EXE
lxsupmon.exe	manifestengine.exe	mantispm.exe
mcshield.exe	mcvsescn.exe	mcvsftsn.exe
mcvsrte.exe	mdm.exe	mediadet.exe
mgabg.exe	mghtml.exe	mimboot.exe
mixer.exe	mm_tray.exe	mmjb.exe
mmkeybd.exe	mmtask.exe	mmx.exe
mnmsrvc.exe	mobsync.exe	monwow.exe
mosearch.exe	motivesb.exe	motmon.exe
MpfAgent.exe	mplayer.exe	mplayer2.exe
mqsvc.exe	mrt.exe	mrtmngr.exe
msgsys.exe	mshta.exe	msimn.exe
MSKSrvr.exe	msmsgs.exe	msnappau.exe
msnmsgr.exe	mspaint.exe	mspmspsv.exe
mssvc.exe	mssysmgr.exe	mstsc.exe
naimas32.exe	naprdmgr.exe	navapsvc.exe
navapw32.exe	navw32.exe	NclTray.exe
ndetect.exe	nerocheck.exe	netscape.exe
netscp.exe	netscp6.exe	nhksrv.exe
nisserv.exe	nisum.exe	nmain.exe
nmssvc.exe	nopdb.exe	notepad.exe
notifyalert.exe	nprotect.exe	nsctop.exe
ntbackup.exe	nvsvc32.exe	nwiz.exe
ocraware.exe	odhost.exe	ofcdog.exe
olfsnt40.exe	omtsreco.exe	opscan.exe
opware32.exe	opxpapp.exe	osa.exe
osa9.exe	osd.exe	OSE.EXE
ossproxy.exe	outlook.exe	p_981116.exe
patch.exe	pccpfw.exe	PCMService.exe
pctptt.exe	pctspk.exe	pdesk.exe
pds.exe	pelmiced.exe	perl.exe
pinger.exe	playlist.exe	plib_version
pntiomon.exe	point32.exe	pop3trap.exe
poproxy.exe	precisiontime.exe	printray.exe
promon.exe	pronomgr.exe	prpcui.exe
ps2.exe	psfree.exe	ptsnoop.exe
putty.exe	qagent.exe	qserver.exe
qttask.exe	quickpar.exe	quickset.exe
qwdlls.exe	r_server.exe	RAMASST.exe
ramsys.exe	rar.exe	RcMan.exe
realevent.exe	realplay.exe	realsched.exe
realtime.exe	reboot.exe	recguard.exe
regedit.exe	regshave.exe	residence.exe
rmctrl.exe	rnathchk.exe	rnav.exe
rndal.exe	rscmpt.exe	rsednclient.exe
rtvscan.exe	rulaunch.exe	rxmon.exe
s3apphk.exe	sagent2.exe	savroam.exe
SAVScan.exe	sbhc.exe	scandisk.exe
schwizex.exe	SDMCP.exe	Search.exe
selfcert.exe	sentry.exe	server.exe
service.exe	setup.exe	sgtray.exe
shellmon.exe	showbehind.exe	shstat.exe
Shutdown.exe	shwicon2k.exe	sk9910dm.exe
slave.exe	slmss.exe	slrundll.exe
SM1BG.EXE	smc.exe	SNDMon.exe
SNDSrvc.exe	sndvol32.exe	soundman.exe
sp.exe	srmclean.exe	srng.exe
ssdpsrv.exe	starteak.exe	starter.exe
statemgr.exe	steam.exe	stimon.exe
stinger.exe	stisvc.exe	store.exe
stub.exe	studio.exe	suchost.exe
support.exe	swdoctor.exe	swEudora.exe
sxgtkbar.exe	sychost.exe	symproxysvc.exe
symwsc.exe	sync.exe	syntpenh.exe
syntplpr.exe	SysAI.exe	sysdoc32.exe
sysdoor.exe	sysdown.exe	system idle
Sysupd.exe	tcaudiag.exe	tclock.exe
TeaTimer.exe	tfswctrl.exe	tfswshx.dll
tgcmd.exe	tgfix.exe	tkbell.exe
TkBellExe	tmlisten.exe	tmntsrv.exe
TMOAgent.exe	tmproxy.exe	tppaldr.exe
tsc.exe	TSMSvc.exe	type32.exe
UAService7.exe	ULCDRSvr.exe	uninst.exe
uninstall.exe	unrar.exe	unwise.exe
updaterui.exe	updatestats.exe	updreg.exe
uptodate.exe	UrlLstCk.exe	urlmap.exe
UsrPrmpt.exe	vetmsg.exe	ViewMgr.exe
vpc32.exe	vptray.exe	vshwin32.exe
vsmon.exe	vsstat.exe	vstskmgr.exe
VTTimer.exe	W3wp.exe	wab.exe
wanmpsvc.exe	waol.exe	wcescomm.exe
wcmdmgr.exe	wcmdmgrl.exe	wdfmgr.exe
WEBPROXY.EXE	webrebates1.exe	webscanx.exe
webshots.scr	win32sl.exe	winamp.exe
winampa.exe	winpopup.exe	Winrar.exe
WinSync.exe	winword.exe	winzip32.exe
WISPTIS.EXE	wjview.exe	wkcalrem.exe
wkufind.exe	wltrysvc.exe	wm.exe
wmplayer.exe	wordpad.exe	wrapper.exe
wscript.exe	wuser32.exe	wwDisp.exe
wzqkpick.exe	xfr.exe	xl.exe
ybrwicon.exe	ycommon.exe	ypager.exe
zapro.exe	zcfgsvc.exe	zlclient.exe

--摘自进程知识库