This file is Client/Server Runtime Server Subsystem.Csrss stands for client/server runtime
subsystem and is an essential subsystem that must be running at all
times. Csrss is responsible for console windows, creating and deleting threads... Some malware uses a process name of "csrss.exe" to cloak
itself. Every csrss.exe should be running from same system directory.
explorer.exe
Explorer.exe is name of the system process in which runs Windows Program Manager. This manager is responsible for displaying of the desktop icons, Task Bar or Start menu. Some malware often uses a process name of "explorer.exe" to cloak
itself. Every explorer.exe should be running from right system directory.
Malware
Malware is short for malicious software. This software is designed to damage or infiltrate a computer system without user agreement. Malware includes viruses, trojans, worms, rootkits, spyware, adware and others.
Module
Module or Dynamic-link library is shared library which can contain code,data and resources. Usually have the file extension DLL.
PID
Unique Identifier of a Process.
Process
Process is an instance of a computer program. Every process has one or more threads which are sequentially executed by system. Operating system shares processor time and other resources between all processes. More information can be found in Process management.
searchindexer.exe
SearchIndexer.exe is the system service which makes indexs for fast search. This process often uses much processor time and memory. Can be disabled via services (Stop Search Service).
Service
Windows service is program without user interface. It's running on the background and performs specific functions/services. Can be configured to start when the operating system is booted. Service can be running in single process or as DLL loaded into svchost.exe.
services.exe
Services.exe is system process which manages all system services. Some malware often uses a process name of "Services.exe" to cloak
itself. There should be only one running process of this name and the path should lead to system directory.
slsvc.exe
Slsvc.exe is system process in which is running Software Licensing Service. It's important for Windows Update.
Snapshot
System Explorer Snapshot is data file containing informations about registry and file structure in the time of snapshot creation. Any snapshots can be compared and differences between snapshots displayed in tree or text report. Report contains infromations about Added/Deleted/Modified files and registry values. This way you can determine what any program do during installation/run/uninstallation.
spoolsv.exe
Spoolsv.exe is the spooler service. It's responsible for managing spooled print/fax jobs. The spoolsv.exe file is located in the system folder (For example: C:\Windows\System32). In
other cases, spoolsv.exe it could be a malware.
Startups
Collection of programs registered in system for automatic start during system boot. System provides many ways how to register program for auto start. Many registered programs can slow down system boot-time and overall system performance.
svchost.exe
Svchost.exe is the name of a process for hosting dynamically linked services. Some malware often uses a process name of "svchost.exe" to cloak itself. Every svchost.exe should be running from same system directory.
Tray icon
Icon in right corner of the Windows Taskbar. This icon can be automatically hidden by system. If you want to show the Tray icon, right click to Taskbar and select "Customize notification icons"
wininit.exe
Wininit.exe is system process which starts the Service Control Manager, Local Security Authority Subsystem and Local Session manager. Some malware often uses a process name of "Wininit.exe" to cloak
itself. Every Wininit.exe should be running from same system directory.
winlogon.exe
Winlogon.exe is process belonging to Windows login manager. It handles login and logout procedures. It's important for stable running of your System and should not be terminated.
