Windows 98Windows SubsystemWindows Subsystems let Windows run different types of programs at the same time. Subsystems act as different operating system environments, so programs written for MS-DOS, Win32, OS/2, and other operating systems can run simultaneously within Windows. When you are alerted about the Windows Subsystem, it typically means that a program using a subsystem is attempting to access the Internet. Svchost.exeSvchost.exe is part of the Windows operating system. During startup, svchost.exe checks the Registry to identify any services that need to run. Depending on how and where svchost.exe is started, there may be multiple instances of svchost.exe running simultaneously. You may be alerted about svchost.exe when you run MSN Messenger or other Internet programs. RunDLL32.exeRunDLL32.exe is used to request information from .DLL files. A DLL (Dynamic Link Library) is an executable file that lets programs share programming code and other resources needed to perform particular tasks. For example, Windows-based programs use functions and resources from DLL files to run in the Windows environment. Running Windows Update may trigger an alert about RunDLL32.exe. Wininit.exeWininit.exe starts Wininit, an .INI file that lists changes that should be made to Windows when you restart your computer after installing a program. Wininit.exe runs during the restart so that any changes can be made before Windows starts running. If the program you installed requires access to the Internet as part of the installation, you may be alerted that wininit.exe is attempting to access the Internet. However, an alert about wininit.exe may also indicate that a virus or Trojan horse programs is trying to make changes to the wininit files. If you have not installed new programs recently or made any other changes to your Windows configuration, you should run a virus scan. Windows MEWindows SubsystemWindows subsystems let Windows run different types of programs at the same time. Subsystems act as different operating system environments, so programs written for MS-DOS, Win32, OS/2, and other operating systems can run simultaneously within Windows. When you are alerted about the Windows Subsystem, it typically means that a program using a subsystem is attempting to access the Internet. Svchost.exeSvchost.exe is part of the Windows operating system. During startup, svchost.exe checks the Registry to identify any services that need to run. Depending on how and where svchost.exe is started, there may be multiple instances of svchost.exe running simultaneously. You may be alerted about svchost.exe when you run MSN Messenger or other Internet programs. RunDLL32.exeRunDLL32.exe is used to request information from .DLL files. A DLL (Dynamic Link Library) is an executable file that lets programs share programming code and other resources needed to perform particular tasks. For example, Windows-based programs use functions and resources from DLL files to run in the Windows environment. Running Windows Update may trigger an alert about RunDLL32.exe. Explorer.exeExplorer.exe is the program that displays the desktop, taskbar, and other elements of the Windows interface. This is different from IExplorer.exe, which is the Internet Explorer Web browser. Explorer.exe may try to access the Internet for several reasons. In Windows Me, most connection attempts from explorer.exe are related to UPnP (Universal Plug and Play). UPnP is looking for a Plug and Play device within your network, or the Internet, by sending harmless packets to multicast and experimental Internet address groups. Opening saved HTML documents may also cause explorer.exe to attempt to access the Internet. Spool32.exeSpool32.exe manages spooling documents to printers. If multiple computers share a printer over a network, you may get an alert about spool32.exe. Windows 2000Windows SubsystemWindows subsystems let Windows run different types of programs at the same time. Subsystems act as different operating system environments, so programs written for MS-DOS, Win32, OS/2, and other operating systems can run simultaneously within Windows. When you are alerted about the Windows Subsystem, it typically means that a program using a subsystem is attempting to access the Internet. Svchost.exeSvchost.exe is part of the Windows operating system. During startup, svchost.exe checks the Registry to identify any services that need to run. Depending on how and where svchost.exe is started, there may be multiple instances of svchost.exe running simultaneously. You may be alerted about svchost.exe when you run MSN Messenger or other Internet programs. Mstask.exeMstask.exe is the Windows task scheduler. The scheduler launches programs that have been scheduled to run at specific times. For example, mstask.exe is responsible for running Automatic LiveUpdate. You may be alerted about mstask.exe when a scheduled program attempts to access the Internet. Navapw32.exeCsrss.exeCsrss.exe is the Client Server Runtime Process, which manages console windows, creating and deleting threads, and some parts of the 16-bit virtual MS-DOS environment. You may be alerted about csrss.exe when it communicates with a program that accesses the Internet. Lsass.exeLsass.exe is the local security authentication server. Lsass.exe generates the process that the Winlogon service uses to authenticate users. You may be alerted about lsass.exe when your computer logs on to a network or when the authentication server communicates with your computer. Winlogon.exeWinlogon.exe manages logging users on and off. This process loads during Windows startup. You may be alerted about winlogon.exe when the process accesses user information locally or through a network. Windows XPWindows SubsystemWindows subsystems let Windows run different types of programs at the same time. Subsystems act as different operating system environments, so programs written for MS-DOS, Win32, OS/2, and other operating systems can run simultaneously within Windows. When you are alerted about the Windows Subsystem, it typically means that a program using a subsystem is attempting to access the Internet. Svchost.exeSvchost.exe is part of the Windows operating system. During startup, svchost.exe checks the Registry to identify any services that need to run. Depending on how and where svchost.exe is started, there may be multiple instances of svchost.exe running simultaneously. You may be alerted about svchost.exe when you run MSN Messenger or other Internet programs. Mstsc.exeMstsc.exe is part of Remote Desktop Connection. It creates connections to terminal servers or other remote computers, edits existing Remote Desktop Connection (.rdp) configuration files, and migrates Windows XP connections (connections created with Client Connection Manager) to new .rdp files. You may be alerted about mstsc.exe when you initialize a Remote Desktop Connection. Rdpclip.exeRdpclip.exe, which is part of Remote Desktop Connection, allows you to copy and paste files between a terminal session and client console session. This allows you to transmit files between computers. You may be alerted about rdpclip.exe when your computer attempts to share, copy, or move files using Remote Desktop Connection. Mstask.exeMstask.exe is the Windows task scheduler. The scheduler launches programs that have been scheduled to run at specific times. For example, mstask.exe is responsible for running Automatic LiveUpdate. You may be alerted about mstask.exe when a scheduled program attempts to access the Internet. Navapw32.exeCsrss.exeCsrss.exe is the Client Server Runtime Process, which manages console windows, creating and deleting threads, and some parts of the 16-bit virtual MS-DOS environment. You may be alerted about csrss.exe when it communicates with a program that accesses the Internet. Lsass.exeLsass.exe is the local security authentication server. Lsass.exe generates the process that the Winlogon service uses to authenticate users. You may be alerted about lsass.exe when your computer logs on to a network or when the authentication server communicates with your computer. |