Forum     

Go Back   Digit Technology Discussion Forum > Portables, Peripherals and Electronics > QnA (read only)
Register FAQ Calendar Mark Forums Read

QnA (read only) Mods please help transfer the contents of this forum to proper sections. :)


 
 
LinkBack Thread Tools Search this Thread Display Modes
Old 09-12-2004, 10:43 PM   #1 (permalink)
In The Zone
 
Join Date: Nov 2003
Location: Kerala
Posts: 236
Default What are these processes? cannot delete svchost.exe


What r these programs, which r essential among these?


vsmon.exe
alg.exe
drqjqk.exe
ccApp.exe
CCEVTMGR.EXE
SPOOLSV.EXE
SVHOST.EXE
LSASS.EXE
WINLOGON.EXE
CSRSS.EXE
SMSS.EXE

Some r new to me.How can I configure these programs to run or not?
sarincv is offline  
Advertisements. Register and be a member of the community to get rid of them.
Advertisement

Old 09-12-2004, 11:36 PM   #2 (permalink)
Broken In
 
Join Date: Aug 2004
Posts: 190
Default

hi all these are basic programs that are required by windows to run in everyday user manner
for more info on each
open google
type teh process name processname here.exe and u will get info and learn what each one of them does u can disable each as pe ur need but dodnt disable any without reading complete infor some applications mght not work properly
__________________
Attack life, it\'s going to kill you anyway.
walking-techie is offline  
Old 09-12-2004, 11:39 PM   #3 (permalink)
Alpha Geek
 
club_pranay's Avatar
 
Join Date: Apr 2004
Location: United States
Posts: 624
Default

well, please check "drqjqk.exe" is it spelled correctly?


Source:.....http://www.liutilities.com/products/...rocesslibrary/
----------------------------------------------------------------------------
Process File: alg or alg.exe
Process Name: Application Layer Gateway Service

Description:
alg.exe is a part of the Microsoft Windows operating system. It is a core process for Microsoft Windows Internet Connection sharing and Internet connection firewall. This program is important for the stable and secure running of your computer and should not be terminated
----------------------------------------------------------------------------
Process File: vsmon or vsmon.exe
Process Name: True Vector Internet Monitor

Description:
vsmon.exe is a processs associated with the ZoneAlarm personal firewall. It is used to monitor Internet traffic and generate alerts depending on the security rules configured by the user.
----------------------------------------------------------------------------
Process File: CCAP or CCAP.EXE
Process Name: Symantec AntiVirus

Description:
CCAP.EXE is a process belonging to the Symantec AntiVirus Internet Security suite, which is repsonsible for keeping your computer secure from Internet-bound threats. This program is important for the stable and secure running of your computer and should not be terminated.
----------------------------------------------------------------------------
Process File: ccevtmgr or ccevtmgr.exe
Process Name: Symantec Event Manager Service

Description:
ccevtmgr.exe is a part of the Norton Internet Security Suite. This process acts as a logger for the AntiVirus and firewall application installed. This program is important for the stable and secure running of your computer and should not be terminated.
----------------------------------------------------------------------------
Process File: spoolsv or spoolsv.exe
Process Name: Microsoft Printer Spooler Service

Description:
spoolsv.exe is a Microsoft Windows system executable which handles the printing process to your local printers. Note: spoolsv.exe is also a process which is registered as the Backdoor.Ciadoor.B Trojan. This Trojan allows attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately. Please see additional details regarding this process
----------------------------------------------------------------------------
Process File: ccapp or ccapp.exe
Process Name: Symantec Common Client CC App

Description:
ccapp.exe is a process belonging to Norton AntiVirus 2003. It is responsible for the auto-protect and email checking facilities, both of which will not function correctly if this service is stopped. This program is important for the stable and secure running of your computer and should not be terminated.
----------------------------------------------------------------------------
lsass - lsass.exe - Process Information
Process File: lsass or lsass.exe
Process Name: Local Security Authority Service

Description:
lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. Note: lsass.exe also relates to the Windang.worm, irc.ratsou.b, Webus.B, MyDoom.L, Randex.AR, Nimos.worm which spread via floppy disk drives, mass-mailing and peer-to-peer sharing. Please review file path for clarification of this
----------------------------------------------------------------------------
winlogon - winlogon.exe - Process Information
Process File: winlogon or winlogon.exe
Process Name: Microsoft Windows Logon Process

Description:
WinLogon.exe is the Windows NT login manager. It handles the login and logout procedures on your system. This process is an essential part of your OS and should be left alone. Note: winlogon.exe is a process which is registered as the W32.Netsky.D@mm worm. This virus is distributed via the Internet through e-mail and comes in the form of an e-mail message, in the hopes that you open it’s hostile attachment. The worm has it’s own SMTP engine which means it gathers E-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately. Please see additional details regarding this process
----------------------------------------------------------------------------
smss - smss.exe - Process Information
Process File: smss or smss.exe
Process Name: Session Manager Subsystem

Description:
smss.exe is a process which is a part of the Microsoft Windows Operating System. It is called the Session Manager SubSystem and is responsible for handling sessions on your system. This program is important for the stable and secure running of your computer and should not be terminated. Note: smss.exe is also a process which is registered as the Win32.Ladex.a Trojan. This Trojan allows attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately. Please see additional details regarding this process
----------------------------------------------------------------------------
svchosts - svchosts.exe - Process Information
Process File: svchosts or svchosts.exe
Process Name: Troj/Sdbot-N

Description:
svchosts.exe is a process which is registered as the Troj/Sdbot-N Trojan. This Trojan allows attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately. Please see additional details regarding this process
----------------------------------------------------------------------------
Process File: csrss or csrss.exe
Process Name: Microsoft Client/Server Runtime Server Subsystem

Description:
csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows. This program is important for the stable and secure running of your computer and should not be terminated.
----------------------------------------------------------------------------
__________________
Be not Thou far from me o Lord....o my strength....haste Thee to help me.
club_pranay is offline  
Old 09-12-2004, 11:49 PM   #4 (permalink)
Certified Nutz
 
sreevirus's Avatar
 
Join Date: Jan 2004
Location: The 3rd rock from the sun
Posts: 310
Default

click on the respective links to find out more

vsmon.exe 1 2
alg.exe 1 2
ccApp.exe 1
CCEVTMGR.EXE 1 2
SPOOLSV.EXE 1 2
LSASS.EXE 1 2
WINLOGON.EXE 1 2
CSRSS.EXE 1 2
SMSS.EXE 1 2

all the above processes are usually normal system processes, but there are also worms/viruses/trojans with the same names. so take precaution. search ur pc for all the above processes and if any file with the name exists in a folder other than /windows/system32, then there is a chance that ur pc cud be affected by a malware.


SVHOST.EXE
this cud be a virus.
http://securityresponse.symantec.com....socksbot.html

normally, a process called svchost.exe runs in the background and it is a system process.

drqjqk.exe <-- i have never heard of this process nor did i find anything on google or any other search engine. run ur AV and also run an anti-spyware program to remove any threats.

also check out these links if u have doubts about any other processes
http://www.liutilities.com/products/...ibrary/system/
http://www.liutilities.com/products/...y/application/
http://www.liutilities.com/products/...rary/security/
http://www.neuber.com/taskmanager/process/index.html

also, if u have any other doubts as to ur system being infected, post ur hijackthis logfile here...the old big fat bat will solve ur problem.
__________________
"Don't take life too seriously. You'll never get out alive!" - Bugs Bunny
sreevirus is offline  
Old 10-12-2004, 01:04 AM   #5 (permalink)
Coming back to life ..
 
it_waaznt_me's Avatar
 
Join Date: Nov 2003
Location: A bit closer to heaven
Posts: 1,997
Default

Grrr... Who says I am fat ??
__________________
Sleight of hand and twist of fate...
On a bed of nails she makes me wait...
And I wait without you ...
With or without you ..
----
Batty = Too Busy Now !!!
it_waaznt_me is offline  
Old 10-12-2004, 07:51 AM   #6 (permalink)
Let the music play.....
 
djmykey's Avatar
 
Join Date: Dec 2003
Location: Pune
Posts: 665
Default

hehe anna does.
hey batty u help him man seems like a good guy.
__________________
Long back, a person who sacrificed his sleep, forgot his family, forgot his food, fogot laughter were called "Saints"
But now they are called.."IT professionals"
djmykey is offline  
Old 10-12-2004, 08:22 AM   #7 (permalink)
In The Zone
 
Join Date: Nov 2003
Location: Kerala
Posts: 236
Default

Thanks for your posts
sarincv is offline  
Old 10-12-2004, 08:53 AM   #8 (permalink)
h4ck3r
Guest
 
Posts: n/a
Default You can try this also..

If you think your sys is slow
goto run-->and type msconfig and remove them from startup.
 
Old 10-12-2004, 09:25 AM   #9 (permalink)
In The Zone
 
Join Date: Nov 2003
Location: Kerala
Posts: 236
Default

When I try to terminate svchost.exe a shutdown window opens

message:rpc terminated unexpectedly

initiated by NT authority\system

Also I cannot delete the file svchost.exe
sarincv is offline  
Old 10-12-2004, 01:02 PM   #10 (permalink)
Human Spambot
 
Join Date: May 2004
Location: off to "never ever" land
Posts: 2,912
Default

dude read man !!
svChost is a system file
its REQUIRED
u cant delete it !!!
__________________
No Mercy, No Limits.
Oobertech.net - Keeping Knowledge Free
theraven is offline  
Old 10-12-2004, 06:49 PM   #11 (permalink)
Alpha Geek
 
Join Date: Sep 2004
Posts: 625
Default

is there a way to prioritise the system files bootup . my antivirus is the last one to load when logging into windows . all the other apps like soundmax , copernic etc load well b4 . is there some way to make antivirus process load as soon as i log in ??
__________________
If you make yourself more than just a man, if you devote yourself to an ideal... You become something else entirely
klinux is offline  
Old 11-12-2004, 10:47 AM   #12 (permalink)
Wise Old Owl
 
Join Date: Dec 2004
Location: South Side Crater, Mars
Posts: 1,038
Default

Quote:
Originally Posted by sarincv
When I try to terminate svchost.exe a shutdown window opens

message:rpc terminated unexpectedly

initiated by NT authority\system

Also I cannot delete the file svchost.exe
when u get the above screen nd the clock is ticking frm 59....58....
go to run nd type "shutdown -a"
ofcourse without quotes!
grinning_devil is offline  
 

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


 
Latest Threads
- by abhidev
- by Sarath
- by clmlbx
- by ico
- by clinton

Advertisement




All times are GMT +5.5. The time now is 02:06 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.

Search Engine Optimization by vBSEO 3.3.2