My process list

[ms]

W2K/SP4, home desktop, DUN, no system issues AFAIK.

csrss.exe 192 C:\WINNT\system32\csrss.exe Client Server Runtime
Process 5.00.2195.6601. Copyright (C) Microsoft Corp. 1981-1999
Explorer.EXE 1068 C:\WINNT\Explorer.EXE Windows Explorer
5.00.3700.6690. Copyright (C) Microsoft Corp. 1981-1999
lsass.exe 256 C:\WINNT\system32\lsass.exe LSA Executable and Server
DLL (Export Version) 5.00.2195.6695. Copyright (C) Microsoft Corp. 1981-
1999
msdtc.exe 480 C:\WINNT\System32\msdtc.exe MS DTC console program
03.00.00.3504. Copyright (C) Microsoft Corp. 1995-1999
MSTask.exe 648 C:\WINNT\system32\MSTask.exe Task Scheduler Engine
4.71.2195.6704. Copyright (C) Microsoft Corp. 1997
services.exe 244 C:\WINNT\system32\services.exe Services and
Controller app 5.00.2195.6700. Copyright (C) Microsoft Corp. 1981-1999
smss.exe 168 C:\WINNT\System32\smss.exe Windows NT Session
Manager 5.00.2195.6601. Copyright (C) Microsoft Corp. 1981-1999
spoolsv.exe 452 C:\WINNT\system32\spoolsv.exe Spooler SubSystem App
5.00.2195.6659. Copyright (C) Microsoft Corp. 1981-1999
svchost.exe 428 C:\WINNT\system32\svchost.exe Generic Host Process for
Win32 Services 5.00.2134.1. Copyright (C) Microsoft Corp. 1981-1999
svchost.exe 596 C:\WINNT\System32\svchost.exe Generic Host Process for
Win32 Services 5.00.2134.1. Copyright (C) Microsoft Corp. 1981-1999
winlogon.exe 216 C:\WINNT\system32\winlogon.exe Windows NT
Logon Application 5.00.2195.6714. Copyright (C) Microsoft Corp. 1981-
1999
WinMgmt.exe 700 C:\WINNT\System32\WBEM\WinMgmt.exe Windows Management
Instrumentation 1.50.1085.0100. Copyright (C) Microsoft Corp. 1995-1999

This is my list of active processes, I omitted my utilities/drivers, the
question relates to the MS processes.

First, I notice 2 active files of "svchost.exe"- is that normal, or what
causes it?

Second, is there anything else not normal in a normal system?

Thanks

Mike

 

[DL]

Not unusual
Nothing obvious, but some malaware / trojans can assume the identity of
another process

 

[John John (MVP)]

There is nothing unusual in your list, perhaps it is uncommon to have
the Distributed Transaction Coordinator service (msdtc.exe) running on a
home machine but there may be a valid reason to have it running.
Having multiple instances of Svchost,exe running is perfectly normal,
see the following for more information:

Description of Svchost.exe in Windows 2000
http://support.microsoft.com/kb/250320/

John

 

[ms]

W2K/SP4, home desktop, DUN, no system issues AFAIK.

csrss.exe 192 C:\WINNT\system32\csrss.exe Client Server
Runtime Process 5.00.2195.6601. Copyright (C) Microsoft Corp.
1981-1999 Explorer.EXE 1068 C:\WINNT\Explorer.EXE Windows
Explorer 5.00.3700.6690. Copyright (C) Microsoft Corp. 1981-1999
lsass.exe 256 C:\WINNT\system32\lsass.exe LSA Executable
and Server DLL (Export Version) 5.00.2195.6695. Copyright (C)
Microsoft Corp. 1981- 1999
msdtc.exe 480 C:\WINNT\System32\msdtc.exe MS DTC console
program 03.00.00.3504. Copyright (C) Microsoft Corp. 1995-1999
MSTask.exe 648 C:\WINNT\system32\MSTask.exe Task Scheduler
Engine 4.71.2195.6704. Copyright (C) Microsoft Corp. 1997
services.exe 244 C:\WINNT\system32\services.exe Services
and Controller app 5.00.2195.6700. Copyright (C) Microsoft Corp.
1981-1999 smss.exe 168 C:\WINNT\System32\smss.exe Windows
NT Session Manager 5.00.2195.6601. Copyright (C) Microsoft Corp.
1981-1999 spoolsv.exe 452 C:\WINNT\system32\spoolsv.exe
Spooler SubSystem App 5.00.2195.6659. Copyright (C) Microsoft Corp.
1981-1999 svchost.exe 428 C:\WINNT\system32\svchost.exe
Generic Host Process for Win32 Services 5.00.2134.1. Copyright (C)
Microsoft Corp. 1981-1999 svchost.exe 596
C:\WINNT\System32\svchost.exe Generic Host Process for Win32
Services 5.00.2134.1. Copyright (C) Microsoft Corp. 1981-1999
winlogon.exe 216 C:\WINNT\system32\winlogon.exe Windows NT
Logon Application 5.00.2195.6714. Copyright (C) Microsoft Corp. 1981-
1999
WinMgmt.exe 700 C:\WINNT\System32\WBEM\WinMgmt.exe Windows
Management Instrumentation 1.50.1085.0100. Copyright (C) Microsoft
Corp. 1995-1999

This is my list of active processes, I omitted my utilities/drivers,
the question relates to the MS processes.

First, I notice 2 active files of "svchost.exe"- is that normal, or
what causes it?

Second, is there anything else not normal in a normal system?

Thanks

Mike

Thanks to all

Mike

 

[ms]

There is nothing unusual in your list, perhaps it is uncommon to have
the Distributed Transaction Coordinator service (msdtc.exe) running on
a
home machine but there may be a valid reason to have it running.
Having multiple instances of Svchost,exe running is perfectly normal,
see the following for more information:

Description of Svchost.exe in Windows 2000
http://support.microsoft.com/kb/250320/

John

Thanks for the link.

Mike

 

[John John (MVP)]

Thanks for the link.

You're welcome.

John