Thursday, June 17, 2010

Windows Server processes

1) smss.exe
Description
smss.exe is a process which is a part of the Microsoft Windows Operating System. It is called the Session Manager Subsystem and is responsible for handling sessions on your system. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
smss.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
smss.exe general information
Author: Microsoft Corp.
Part of: Microsoft Windows Operating System
Common Path(s): %system%\smss.exe

2) csrss.exe
Description
The Microsoft Client Server Runtime Server subsystem utilizes the process csrss.exe for managing the majority of the graphical instruction sets under the Microsoft Windows operating system. As such Csrss.exe provides the critical functions of the operating system, and its termination can result in the Blue Screen of Death being displayed.

Csrss.exe controls threading and Win32 console window features. Threading is where the application splits itself into multiple simultaneous running tasks. Threads supported by csrss.exe are different from processes in that threads are commonly contained within the process, with various threads sharing resources within the same process. The Win32 console is the plain text window in the Windows API system (programs can use the console without the need for image display).

In mobile devices such as notebooks and laptops, the process csrss.exe is closely dependent on power management schemes implemented by the system as defined under the Control Panel option.

Recommendation
csrss.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
csrss.exe general information
Author: Microsoft Corp
Part of: Microsoft Windows Operating System
Common Path(s): %system%\csrss.exe
3) winlogon.exe
Description
Description
winlogon.exe is a process belonging to the Windows login manager. It handles the login and logout procedures on your system. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
winlogon.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
winlogon.exe general information
Author: Microsoft Corp.
Part of: Microsoft Windows Operating System
Common Path(s): %system%\winlogon.exe
services.exe
Description
services.exe is a part of the Microsoft Windows Operating System and manages the operation of starting and stopping services. This process also deals with the automatic starting of services during the computers boot-up and the stopping of services during shut-down. This program is important for the stable and secure running of your computer and should not be terminated
Recommendation
services.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
services.exe general information
Author:
Microsoft Corp.

Part of:
Microsoft Windows Operating System

Common Path(s):
%system%\services.exe
lsass.exe
Description
The process lsass.exe serves as the Local Security Authentication Server by Microsoft, Inc. It is responsible for the enforcement of the security policy within the operating system. This process checks whether a user’s supplied identification is valid or not whenever he or she tries to access the computer system.

With the execution of the file lsass.exe, the system acquires security by preventing the access of unwanted users to any private information. The file lsass.exe also handles the password modifications done by the user.

The process lsass.exe mainly operates in the system through its ability to create access tokens. These tokens encapsulate the file’s security descriptor, which contains the necessary information to process user authentication such as data on which user holds access to the system and whether the access is mandatory or discretionary.
Recommendation
lsass.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
lsass.exe general information

Author:
Microsoft Corp.

Part of:
Microsoft Windows Operating System

Common Path(s):
%system%\LSASS.exe
%system%\system32\lsass.exe
svchost.exe
Description
The file svchost.exe is the Generic Host Process for Win32 Services used for administering 16-bit-based dynamically linked library files (DLL files) including other supplementary support applications.

As operating systems became more complex Microsoft decided to run more software functionality from a dynamic link library (DLL) interface. However DLLs are unable to launch themselves and require at least one executable program, i.e. svchost.exe, is needed to bridge between the library process and the operating system.

Through the solitary file svchost.exe, the DLLs efficiently contain and dispense Win32 services as well as neatly facilitate the execution of svchost.exe’s own operations. Acting as a host, the file svchost.exe creates multiple instances of itself. The multiple executions of the file svchost.exe contribute to the stability and security of the operating system by reducing the possibility of a crashing process that causes a domino effect on its neighbor processes, thereby creating a system-wide crash in the machine.
Recommendation
svchost.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft Corp.

Part of:
Microsoft Windows Operating System

Common Path(s):
%system%\svchost.exe
ccsetmgr.exe
Description
ccsetmgr.exe is a process associated with the Symantec Internet Security suite and is essential to it's functioning. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Symantec Corporation

Part of:
Symantec Internet Security suite

Common Path(s):
%programfilescommon%\Symantec Shared\ccSetMgr.exe
spoolsv.exe
Description
The spoolsv.exe file is described as the Spooler SubSystem App or Windows Print Spooler Service and is the main component of the printing interfaces. The spoolsv.exe file is initialized when the computer starts, and it runs in the background until the computer is turned off.

The process spoolsv.exe transfers the data in a buffer. If the printer needs the data, it will retrieve it from the buffer. While the spoolsv.exe file is storing the data in the buffer, the user can carry out other operations. The spoolsv.exe process is also responsible for queuing printing tasks. Through this function, the user does not need to wait for each printing task to be completed one after the other.

When a printer is in use, the Print Spooler service or the spoolsv.exe file is launched, and the process can be seen running in Windows Task Manager. In case you are not using a printer, the spoolsv.exe process can be closed through the Task Manager.
Recommendation
spoolsv.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft Corp.

Part of:
Microsoft Windows Operating System
Common Path(s):
%system%\spoolsv.exe
Msdtc.exe
Description
msdtc.exe is the Microsoft Distributed Transaction Coordinator. The process is loaded into the system by Microsoft Personal Web Server and Microsoft SQL Server. The service is used to manage transactions across multiple servers.
Recommendation
msdtc.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft Corp.

Part of:
Microsoft Personal Web Server

Common Path(s):
N/A
bbattachserver.exe
Description
bbattachserver.exe is a Server belonging to BlackBerry® Attachment Server from Research In Motion Limited
Recommendation
This process is still being reviewed by our team. We shall be adding additional information, such as Security Rating, once the process is reviewed. If you have any information to contribute, you can send it to pl[at]Uniblue[dot]net.
Author:
Research In Motion Limited

Part of:
BlackBerry® Attachment Server

Common Path(s):
e:\program files\research in motion\blackberry enterprise server\attachserver
defwatch.exe
Description
defwatch.exe is a part of Norton Antivirus Corporate Edition, and is responsible for monitoring the virus definition files and initiating processes to bring them up to date if they aren't.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Symantec Corporation

Part of:
Norton Antivirus Corporarte Edition

Common Path(s):
N/A
dfssvc.exe
Description
dfssvc.exe is the Distributed File System service. Only found on Microsoft Windows Server suites, this process is crucial for the DFS service. Essential Microsoft server service.
Recommendation
dfssvc.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft Corp.

Part of:
Microsoft Windows Server suite

Common Path(s):
N/A
dns.exe
Description
dns.exe is the main process which handles the Microsoft Windows DNS server, if enabled. This program is important for the stable and secure running of your server and should not be terminated.
Recommendation
dns.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft Corp.

Part of:
Microsoft Windows Server Suites

Common Path(s):
N/A
nhancer.exe
Description
nhancer.exe is a nHancer.exe belonging to nHancer from KSE - Korndörfer Software Engineering
Recommendation
This process is still being reviewed by our team. We shall be adding additional information, such as Security Rating, once the process is reviewed. If you have any information to contribute, you can send it to pl[at]Uniblue[dot]net.
Author:
KSE - Korndörfer Software Engineering

Part of:
nHancer

Common Path(s):
%programfiles%\nhancer
inetinfo.exe
Description
inetinfo.exe is used primarily for debugging Microsoft Windows Server Internet Information Services. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
inetinfo.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft Corp.

Part of:
Microsoft Windows Server Suites

Common Path(s):
%system%\inetinfo.exe
pds.exe
Description
pds.exe is associated with Intel LANDesk Management Suite software and discovers registered products on your computer. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Intel Corporation.

Part of:
Intel Ping Discovery Service

Common Path(s):
N/A


llssrv.exe

Description
llssrv.exe on Microsoft Windows Server suites is a license logging service and should not be stopped under any circumstances.
Recommendation
Monitors and records client access licensing for portions of the operating system (such as IIS, Terminal Server and File/Print) as well as products that aren't a part of the OS, like SQL and Exchange Server. If this service is stopped, licensing will be enforced, but will not be monitored.
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Microsoft Corp.

Part of:
Microsoft License Service

Common Path(s):
N/A
mr2kserv.exe
Description
mr2kserv.exe is a process belonging to the Dell OpenManage and provides Array management functionality. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Dell

Part of:
Dell OpenManage

Common Path(s):
N/A
nsctop.exe
Description
nsctop.exe is a process belonging to Symantec System Center. The application searches AV servers on the network.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Symantec Corporation

Part of:
Symantec System Center

Common Path(s):
N/A
ntfrs.exe
Description
ntfrs.exe is process belonging to Windows. It is used to maintain file synchronization of file directory contents among multiple servers. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
ntfrs.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft Corp.

Part of:
Windows

Common Path(s):
N/A
qserver.exe
Description
qserver.exe is a process associated with the Norton Internet Security Suite and deals with the communication of quarantined files.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Symantec

Part of:
Norton Internet Security Suite

Common Path(s):
N/A

reportersvc.exe
Description
reportersvc.exe is a Symantec Reporting Service from Symantec Corporation belonging to Reporting
Description
reportersvc.exe is a Symantec Reporting Service from Symantec Corporation belonging to Reporting
Author:
Symantec Corporation

Part of:
Reporting

Common Path(s):
%programfilescommon%\symantec shared\reporting agents\win32
sbscrexe.exe
SBS Licensing Service
Description
sbscrexe.exe is a SBS Licensing Service from Microsoft Corporation belonging to Microsoft® Windows® Operating System
Author:
Microsoft Corporation

Part of:
Microsoft® Windows® Operating System

Common Path(s):
%system%
scanexplicit.exe
Description
scanexplicit.exe is a part of Norton Internet Security Suite and scans files submitted to the Quarantine section using a separate set of definitions. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
scanexplicit.exe general information
Author:
Symantec Corporation

Part of:
NAV Symantec Quarantine Scanner

Common Path(s):
N/A
owstimer.exe
owstimer.exe description
Description
owstimer.exe is a SharePoint Timer Service from Microsoft Corporation belonging to Microsoft SharePoint
Recommendation
owstimer.exe general information
Author:
Microsoft Corporation

Part of:
Microsoft SharePoint

Common Path(s):
%programfilescommon%\microsoft shared\web server extensions\50\bin
%programfilescommon%\microsoft shared\web server extensions\60\bin
sqlagent.exe
Microsoft SQL Server Agent
Description
sqlagent.exe is a process belonging to the Microsoft SQL Server Agent and is used for executing scheduled jobs.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Microsoft Corp.

Part of:
Microsoft SQL Server Agent

Common Path(s):
N/A
appmgr.exe
Description
appmgr.exe is a process belonging to the Windows Server operating system which provides remote server management functionality. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
appmgr.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft

Part of:
Microsoft Windows Server

Common Path(s):
%system%\serverappliance\appmgr.exe
conduit.exe
Description
conduit.exe is a conduit_client belonging to Symantec Brightmail AntiSpam[tm] from Symantec Corporation
conduit.exe general information
Author:
Symantec Corporation

Part of:
Symantec Brightmail AntiSpam[tm]

Common Path(s):
%programfiles%\symantec\sbas\scanner\bin
uphclean.exe
Description
uphclean.exe is a process belonging to Microsoft's User profile cleanup service. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Microsoft Corporation

Part of:
Microsoft Windows Operating System

Common Path(s):
%programfiles%\uphclean\uphclean.exe
tcpsvcs.exe
Description
tcpsvcs.exe is a part of Microsoft Windows networking components. This essential system process is initiated when the computer uses special TCP/IP networking services such as DHCP, Simple TCP and print services. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
tcpsvcs.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft Corp.

Part of:
Microsoft Windows Operating System

Common Path(s):
%system%\tcpsvcs.exe
icepack.exe
Description
icepack.exe is a part of the Norton Antivirus Corporate edition suite and acts as a medium between server and client. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Symantec Corporation

Part of:
NAV CE Server/Client - Symantec Quarantine Agent

Common Path(s):
N/A
hndlrsvc.exe
Intel Alert Handler
Description
hndlrsvc.exe is a process associated with Intel Alert Handler which alerts you regarding e-mails, and other options. This is a non-essential process. Disabling or enabling it is down to user preference.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Intel Corporation

Part of:
Intel Alert Handler

Common Path(s):
N/A
iao.exe
Description
iao.exe is a process belonging to Symantec Internet security suite. This program is important for the stable and secure running of your computer and should not be terminated.
Click to run a free scan for iao.exe related errors.

Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
exmgmt.exe
exmgmt.exe description
Description
exmgmt.exe is a process belonging to the Microsoft Exchange Console which allows for configuration of this e-mail server product. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Recommendation
Not a critical component, but see the information above before disabling it. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings..
Author:
Microsoft

Part of:
Microsoft Exchange Server Suite

Common Path(s):
%programfiles%\Exchsrvr\bin\exmgmt.exe
mad.exe
mad.exe description
Description
mad.exe is a process which deals with certain important Microsoft Exchange functions such as the loading of DLL's and message logging. This program is important for the stable and secure running of your computer and should not be terminated.
Recommendation
mad.exe should not be disabled, required for essential applications to work properly.. It is highly recommended to Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings.
Author:
Microsoft Corp.

Part of:
Microsoft Exchance Server

Common Path(s):
N/A


mssearch.exe

mssearch.exe is a process relating to Microsoft Windows Server suite, which is responsible for the cataloguing of indexes for Exchange server and SQL server. This program is important for the stable and secure running of your computer and should not be terminated.
mssearch.exe general information

Author: Microsoft Corp.
Part of: Microsoft Windows Server suite
Common Path(s):
N/A
wmiprvse.exe
wmiprvse.exe description
The wmiprvse.exe file is otherwise known as Windows Management Instrumentation. It is a Microsoft Windows-based component that provides control and information about management in an enterprise environment.

Developers use the wmiprvse.exe file in order to develop applications used for monitoring purposes. These programs can notify users about important events related to network and file or application management right after each event occurs. With wmiprvse.exe, file managers in the enterprise environment are capable of configuring and searching for desktop system information or network and application information across the network.

The wmiprvse.exe file is placed with other services in the shared service host. This started to be applied with the release of MS Windows XP. Providers are also loaded separately in the wmiprvse.exe file since it considers the wmiprvse.exe executable as a host process.

Author: Microsoft
Part of: Microsoft Windows Operating System
Common Path(s):
%system%\wbem\wmiprvse.exe
itadminserver.exe

Description
itadminserver.exe is a ITAdminServer belonging to BlackBerry® Policy Service from Research In Motion Limited
Recommendation
Author: Research In Motion Limited
Part of: BlackBerry® Policy Services
Common Path(s): e:\program files\research in motion\blackberry enterprise server
IMBSERVICE.EXE
Description
imbservice.exe is a IMBSERVICE.EXE belonging to Microsoft® Windows® Small Business Server from Microsoft Corporation
Author:
Microsoft Corporation

Part of:
Microsoft® Windows® Small Business Server

Common Path(s):
%programfiles%\microsoft windows small business server\networking\pop3

Locator.exe
locator.exe is the remote procedure call locator service and is essential for the smooth running of Microsoft Windows. This process maintains a database of publicly declared procedures. This program is important for the stable and secure running of your computer and should not be terminated.
Author:
Microsoft Corp.

Part of:
Microsoft Windows Operating System
Common Path(s):
%system%\locator.exe

w3wp.exe
Description
w3wp.exe is a process associated with application pool in ISS. If you have more than one application pool, you will have more than one instance of w3wp.exe running. This process usually allocates large amounts of resources. This program is important for the stable and secure running of your computer and should not be terminated.
Author:
Microsoft

Part of:
Microsoft Web Server

Common Path(s):
N/A
SFMSVC.EXE - Windows NT Macintosh File Server Service
Sfmsvc.exe is related to Windows NT Macintosh File Server Service.
Manufacturer: Microsoft Corp.
beremote.exe

beremote.exe is a process that belongs to Backup Exec from Veritas. This process should not be removed to ensure that the backup process is not interrupted
Author:
Veritas

Part of:
Backup Exec

Common Path(s):
N/A

pvlsvr.exe

Description
pvlsvr.exe is a part of Veritas Backup Exec and offers essential functionality for Backup Exec. This program is important for the stable and secure running of your computer and should not be terminated.
Author:
VERITAS Software Corporation.

Part of:
Veritas Backup Exec

Common Path(s):
N/A
beserver.exe
Description
beserver.exe is the main backup service for Veritas Backup Exec. This program is essential in keeping backups up to date and should not be terminated.
Author:
VERITAS Software Corporation.

Part of:
Unknown

Common Path(s):
N/A
bengine.exe
Description
bengine.exe is the main backup service for Veritas Backup Exec. This program is essential in keeping backups up to date and should not be terminated.
Author:
Veritas Software Corporation

Part of:
Veritas Backup Exec

Common Path(s):
N/A
benetns.exe
Description
benetns.exe belongs to the Backup Exec application from Veritas. This process provides a remote browsing agent for the Backup Exec service on the backup server. This process should not be removed to ensure that your backup applications works properly.
Author:
VERITAS Software Corporation.

Part of:
Veritas Backup Exec

Common Path(s):
N/A
dlt.exe
Description
dlt.exe is a part of the Dell OpenManage system management software. Essential system process for the running of Dell OpenManage, and should not be disabled whilst this application is used.
Author:
Dell

Part of:
Dell Legacy

Common Path(s):
N/A
savfmsesp.exe
Symantec Mail Security for Microsoft Exchange

Description
savfmsesp.exe is a Symantec Mail Security for Microsoft Exchange from Symantec Corporation belonging to Symantec Mail Security for Microsoft Exchange
Author:
Symantec Corporation

Part of:
Symantec Mail Security for Microsoft Exchange

Common Path(s):
%programfiles%\symantec\smsmse\4.6\server
ccApp.exe
ccapp.exe
Description
The ccapp.exe file stands for Common Client Application and is the executable responsible for checking emails and auto-protect facilities as part of the Norton Antivirus suite.

The ccapp.exe file is used as the Norton Antivirus’ real-time scanner. When Windows loads, the ccapp.exe file also loads as VxD or virtual device driver. As the ccapp.exe file executes behind the scenes, it scans your system for Trojan Horses, viruses, and worms.

Before Windows can completely shut down, the ccapp.exe file will scan the boot drives for sector viruses if a floppy disk can be found inside the drive. In case a virus is detected, a message will be displayed asking you to repair the infected floppy disk boot record.

You will be able to view the details of the scan in the recorded report log. Details in the report include the name of the virus, location of the file infected, time it was detected, and the action taken by the application or the user.
Author:
Symantec Corporation

Part of:
Norton AntiVirus Suite

Common Path(s):
%program files%\common\symantec shared\

vptray.exe
Description
vptray.exe is the tray bar process for Norton AntiVirus. It gives the user fast access to Norton AntiVirus. This process can safely be removed without reducing system security.
Author:
Symantec Corporation

Part of:
Norton AntiVirus

Common Path(s):
N/A
ctfmon.exe
Description
ctfmon.exe is a process belonging to Microsoft Office Suite. It activates the Alternative User Input Text Input Processor (TIP) and the Microsoft Office XP Language Bar. This program is a non-essential system process, but should not be terminated unless suspected to be causing problems.
Author:
Microsoft Corp.

Part of:
Microsoft Office Suite

Common Path(s):
%system%\ctfmon.exe
sqlmangr.exe
Description
sqlmangr.exe is a system tray application from Microsoft which allows the user to start and stop SQL related services. This program is a non-essential system process, but should not be terminated unless suspected to be causing problems.
Author:
Microsoft Corp.

Part of:
Microsoft SQL Server Service Manager

Common Path(s):
%programfiles%\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe

logon.scr
Microsoft Logon Screensaver

Description
logon.scr is a process belonging to the Microsoft Windows Operating System and provides a screensaver during the login phase. This is a non-essential process. Disabling or enabling it is down to user preference.
Author:
Microsoft

Part of:
Microsoft Windows Operating System

Common Path(s):
%system%\logon.scr


bbconvert.exe
Description
bbconvert.exe is a Convert belonging to BlackBerry® Attachment Server from Research In Motion Limited
Author:
Research In Motion Limited

Part of:
BlackBerry® Attachment Server

Common Path(s):
e:\program files\research in motion\blackberry enterprise server\attachserver


csrss.exe
bbconvert.exe description
Description
bbconvert.exe is a Convert belonging to BlackBerry® Attachment Server from Research In Motion Limited
Author:
Research In Motion Limited

Part of:
BlackBerry® Attachment Server

Common Path(s):
e:\program files\research in motion\blackberry enterprise server\attachserver



winlogon.exe
winlogon.exe is a process belonging to the Windows login manager. It handles the login and logout procedures on your system. This program is important for the stable and secure running of your computer and should not be terminated.
Author:
Microsoft Corp.

Part of:
Microsoft Windows Operating System

Common Path(s):
%system%\winlogon.exe
VPTray.exe
vptray.exe is the tray bar process for Norton AntiVirus. It gives the user fast access to Norton AntiVirus. This process can safely be removed without reducing system security.
Author:
Symantec Corporation

Part of:
Norton AntiVirus

Common Path(s):
N/A
ctfmon.exe

Mono on Linux

Steps:-

1: Install Mono 2.4 And Mod_mono On RHEL5 With Mysql Support
2: To Install BIRT Runtime On RHEL 5

Assumptions
1: You have root access on your RHEL 5 system
2: You are aware of basic sysadmin commands.
Note: This install was tested on a x64 system.

1:Install Mono 2.4 and mod_mono on RHEL5 with Mysql support

Files to Download
Http://Ftp.Novell.Com/Pub/Mono/Sources/Libgdiplus/Libgdiplus-2.4.2.Tar.Bz2
Http://Ftp.Novell.Com/Pub/Mono/Sources/Mono/Mono-2.4.2.3.Tar.Bz2
Http://Ftp.Novell.Com/Pub/Mono/Sources/Xsp/Xsp-2.4.2.Tar.Bz2
Http://Ftp.Novell.Com/Pub/Mono/Sources/Mod_mono/Mod_mono-2.4.2.Tar.Bz2
Http://Mirror.Cogentco.Com/Pub/Mysql/Connector-Net/Mysql-Connector-Net-6.0.4-Noinstall.Zip

RPMs
You need the following rpms to compile mod_mono. You should have these on your RHEL CD.
httpd-devel
apr-devel
apr-util
apr-util-devel

All my sources are placed in /opt/downloads
All my sources will be untared in /opt/build

To install mono on RHEL5

Step 1 : Untar libgdi and build it

tar -jxvf /opt/downloads/libgdiplus-2.4.2.tar.bz2 -C /opt/build
cd /opt/build/libgdiplus-2.4.2
./configure;make;make install

Step 2: Untar mono and build

cd /opt/downloads/mono-2.4.2.3/
./configure ;make;make install

To install mod mono

Step 1: Untar mod_mono package, configure, build & install

tar -jxvf /opt/downloads/mod_mono-2.4.2.tar.bz2
./configure ;make;make install

Move the mod_mono.conf file to the right location so that it is automatically loaded

mv /etc/httpd/conf/mod_mono.conf /etc/httpd/conf.d/

Add this line to the mod_mono.conf
MonoServerPath /usr/local/bin/mod-mono-server2

Step 2: Untar xsp, configure, build & install

tar -jxvf xsp-2.4.2.tar.bz2 -C /opt/build
cd /opt/build/xsp-2.4.2
./configure;make;make install


Now to test mod_mono
copy xsp files to your document root dir

cp -a /usr/local/lib/xsp/test /var/www/html/

Now go to your browser and check out your installation
http://localhost/test/

Now go ahead if you need to install mysql support

cd /opt/build
unzip /opt/downloads/mysql-connector-net-6.0.4-noinstall.zip
mv mysql.data.dll MySql.Data.dll
/usr/local/bin/gacutil -i /opt/build/MySql.Data.dll

Common error

Object reference not set to an instance of an object
Description: HTTP 500. Error processing request.

1: If you do not change the name of the dll you might get this
error below. So make sure your dll is MySql.Data.dll

2: Make sure you save these config settings in your web.conf






Return To Top

2: To install BIRT runtime on RHEL 5

Files to download
Http://Apache.Mirrors.Hoobly.Com/Tomcat/Tomcat-6/V6.0.20/Bin/Apache-Tomcat-6.0.20.Tar.Gz
Http://Www.Eclipse.Org/Downloads/Download.Php?File=/Birt/Downloads/Drops/R-R1-2_5_0-200906180630/Birt-Runtime-2_5_0.Zip
Jre-6u16-Linux-Amd64.Rpm

Note: Since you are installing the Web Viewer on Tomcat 6, you will need to download the Commons Logging Library.

Install Sun JDK

rpm -ivh /opt/downloads/jre-6u16-linux-amd64.rpm

set your java home

export JAVA_HOME=/usr/java/jre1.6.0_16/

Install Apache tomcat

tar -zxvf /opt/downloads/apache-tomcat-6.0.20.tar.gz -C /opt/build/
cd /opt/build/apache-tomcat-6.0.20/bin/
./startup.sh

Test your installation from the browser
http://localhost:8080/
To use the tomcat manager, set manager user for tomcat in tomcat-users.xml

Restart tomcat and check the url http://localhost:8080/manager/html


Install BIRT runtime

cd /opt/build
unzip /opt/downloads/birt-runtime-2.1.3.zip
cd /opt/build/birt-runtime-2_1_3/
cp -a WebViewerExample /opt/build/apache-tomcat-6.0.20/webapps
mv /opt/build/apache-tomcat-6.0.20/webapps/WebViewerExample/ /opt/build/apache-tomcat-6.0.20/webapps/birt-viewer

Install Commons Logging Library

tar -zxvf /opt/downloads/used/commons-logging-1.1.1-bin.tar.gz -C /opt/build

Copy the jar file into birt-viewer

cp /opt/build/commons-logging-1.1.1/commons-logging-1.1.1.jar /opt/build/apache-tomcat-6.0.20/webapps/birt-viewer/WEB-INF/lib/

Use the tomcat manager to see whether birt-viewer has been auto deployed.

Now you can check your birt-viewer report from your browser http://localhost:8080/birt-viewer/

A page confirming that the BIRT viewer has been installed should be displayed.
Click on the link labeled "View Example" to confirm that your installation is working properly.
The BIRT Viewer requires that cookies be enabled.

Common Errors:
I tried BIRT with the default install of jre on RHEL5/ Fedora8 and I came across so many errors.
After a lot of google I gave up on those versions and downloaded tomcat 6 and sun jre and it worked fine.

Create certificate using keytool on glassfish

Create certificate

Use keytool to generate, import, and export certificates. By default, keytool creates a keystore file in the directory where it is run. You can find the keytool utility under the bin directory of java folder.
Note: - When you install Glassfish, it creates a default self-signed certificate as the server certificate. (localhost)

Step:- 1

Delete exiting certificate :-

Type the following command to delete the default self-signed certificate by issuing the following command.
keytool -delete -alias s1as -keystore keystore.jks -storepass

Generate self signed certificate

Steps 1:- Type the following command to create new certificate:
keytool -genkey -alias test

Fill all the information to create the certificate.

Enter keystore password: p@ssw0rd!
What is your first and last name?
[Unknown]: Chandra
what is the name of your organizational unit?
[Unknown]: Paxcel
what is the name of your organization?
[Unknown]: Paxcel
what is the name of your City or Locality?
[Unknown]: Gurgaon
What is the name of your State or Province?
[Unknown]: HR
What is the two-letter country code for this unit?
[Unknown]: IN
Is correct?
[no]: yes
Import certificate

A certificate can be imported into a keystore using keytool. Type the following command to import the certificate:-
keytool -storepass my-keystore-password(paxcel) -alias test -import -file test.cer

Generate expired certificate

Steps:

Default days is 7 and cant not be set 0 day. You need to specify at least 1 day to

create.
keytool -genkey -alias test –validity 1


Note: - To change the location of certificate files - admin console.
Always generate the certificate in the directory containing the keystore and truststore files, by default domain-dir/config.

Open the Glassfish admin console in the web browser.
Login into glassfish admin console (http://localhost:4848), Default uid and password:

admin and adminadmin

a) In the Admin Console tree, select the Application Server node.
b) Select JVM Settings.
c) Click the JVM Options tab.
d) On the JVM Options page, add or modify the following values in the Value

field to reflect the new location of the certificate files:
-Djavax.net.ssl.keyStore=${com.sun.aas.instanceRoot}/path/ks-name
-Djavax.net.ssl.trustStore=${com.sun.aas.instanceRoot}/path/ts-name

e) Where ks-name is the keystore file name and ts-name is the trust store file name.

f) Click Save.

g) Restart the Application Server if Restart Required displays in the console.

Install certificate in GlassFish server


Here are the instructions for enabling GlassFish v2 as an SSL server when the application server is configured with the developer profile.

1. Delete the default self-signed certificate by issuing the following command (note that the commands in this and subsequent steps are shown on multiple lines for formatting purposes):
keytool -delete -alias s1as -keystore keystore.jks -storepass
where is the password for the keystore, for example, "mypass". Note that s1as is the default alias of the GlassFish v2 keystore.

2. Generate a new key pair for the application server by issuing the following command:
keytool -genkeypair -keyalg
-keystore keystore.jks -validity -alias s1as

where is the algorithm to be used for generating the key pair, for example RSA, and is the number of days that the certificate should be considered valid, for example, 365.
Note that in addition to generating a key pair, the command wraps the public key into a self-signed certificate and stores the certificate and the private key in a new keystore entry identified by the alias.

It's important to ensure that the name of the certificate matches the fully-qualified hostname of your site. If the names don't match, clients connecting to the server will see a security alert stating that the name of the certificate does not match the name of the site. You should notice that the name of the default self-signed certificate matches the fully-qualified hostname.


3. Generate a Certificate Signing Request (CSR) by issuing the following command:
keytool -certreq -alias s1as -file
-keystore keystore.jks -storepass
where is the file in which the CSR is stored, for example, s1as.csr, and is the password for the keystore, for example, changeit.


4. keytool -import -v -alias s1as -file s1as.cert -keystore keystore.jks -storepass
When you import the certificate using the same original alias "s1as", keytool treats it as a command to replace the original certificate with the certificate obtained as reply to a CSR.
s1as (self-signed):
Owner: CN=chandra, OU=Paxcel, O=Paxcel Technologies, L=Gurgaon , ST=Haryana, C=IN
Issuer: CN=Chandra, OU=Paxcel Technologies, O=Paxcel Technologies
, L=Gurgaon, ST=Haryana, C=IN
Serial number: 472acd34
Valid from: