List of common system processes

System - Process in kernel mode
Contains most of the system threads of the system. It is not possible to terminate or kill the process or inter-react with him.

Idle - Idle process
This process controls processor time when no other thread is active (running) on the system. This process is a virtual process because it does no calculation on the processor. On recent computers, despite uninterrupted usage in terms of multimedia and office automation, this process is the one which will be "used" in the majority of time.

Smss.exe - Session Management Subsystem
This is the process in charge of starting and stopping user sessions. This process is started by the system and is responsible for carrying out the process winlogon and csrss.exe and loading system settings. Smss.exe est aussi en charge de la surveillance des processus winlogon et csrss afin de bloquer le système en cas de fin anormale de ces processus. Smss.exe is also in charge of monitoring processes winlogon and csrss to block the system in case of abnormal end of these processes.

Winlogon.exe - Microsoft Windows Logon Process
This is the process responsible for managing the user login and logout. Winlogon is responsible for the initial login screen of Windows, when the system has just started and it display the dialog box when the user presses Alt-Ctrl-Del. In contrast to smss, winlogon takes care of the graphics in the management of sessions.

Csrss.exe - client/server run-time subsystem
This is the user mode portion of the subsystem Win32 (Win32.sys being the portion in kernel mode). Csrss is a necessary process for system performance performance. Csrss is used to display the Windows command shell, the management of threads (creation / termination) and the virtual DOS 16-bit environment.

Explorer.exe - Windows Explorer
Explorer.exe is the process that display Windows Explorer windows, which display volumes content and it also display the Desktop icons the taskbar. Once booted, there is only one process explorer.exe, the one in charge of the display on the desktop. The next explorer.exe processes will display Windows Explorer windows. The Windows Explorer is regarded as a shell, a process that holds the user interface functionnality.

	It should be noted that the number of explorer.exe processes depends on the parameter "Open the windows files in a different process," in the folder options, in Control Panel.
	Sometimes it happens that the desktop, the taskbar or the start menu are not responding. In this case, you must kill every explorer.exe processes then execute a new task by simply specifying "explorer.exe" as the file name. The desktop will be back.

Lsass.exe - Local Security Authority Subsystem Service
Lsass.exe is the process in charge of the authentication of users for the service Winlogon. This process is performed by using libraries for authentication, such as the default library msgina.dll. Its role is to authenticate the login information from network with the local users credentials, ie those stored on the computer only.

Services.exe - Services Processes Controller
Services.exe is the process responsible for the management of service processes (stop, start, pause). It also takes care of the interaction between services or between applications and services by using numerical command post. This interaction remains limited.

Svchost.exe - Generic Host Process for Win32 Services
This is a generic process used to host other processes stored in the form of DLL libraries. Svchost is used in the execution of one or more services at a time.

Alg.exe - Application Layer Gateway Service
This process corresponds to the service Application Layer Gateway Service.It manages external protocol extensions integration for the Windows Firewall Windows and the Sharing of Internet Connection.

Ctfmon.exe - CTF Loader
It is the text process of Microsoft, in charge after the Microsoft Office XP installation to manage additional user input features.
Ctfmon.exe activates the TIP (Text Input Processor) that user input required and manage the language bar of Microsoft Office. The additional user inputs may be the speech recognition, handwriting recognition, advanced keyboard, translation and other techniques.

Spoolsv.exe - Printer Spooler Service
This process job is the management of print jobs, they are put into queue and they are sent to the printer. This process is necessary for printing. It does not consume any resources until the arrival of one or more print jobs. In this case, the size of the memory used depends on the size and content of the print job.

Wuauclt.exe - Windows Update Automatic Updates
Wuauclt.exe is the process responsible for the update of Microsoft products. Its role is to connect to the Microsoft site and check, download and install needed updates. This process is active only when the automatic updates are enabled. It consumes very few resources. This process is needed for your computer security!