查看看正在运行的系统进程的详细信息

Caption

System Idle Process System

SMSS.EXE

csrss.exe

winlogon.exe services.exe

lsass.exe

svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe kxescore.exe KSafeSvc.exe spoolsv.exe Explorer.EXE KSafeTray.exe TrueImageMonitor.exe schedhlp.exe kxetray.exe

ctfmon.exe

ishare_user.exe svchost.exe searchindexer.exe wscntfy.exe afcdpsrv.exe

alg.exe

svchost.exe conime.exe

klive.exe

excel.exe

cmd.exe

wmic.exe

wmiprvse.exe

wmic:root\cli>

CommandLine

\SystemRoot\System32\smss.exe

C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost -k DcomLaunch

C:\WINDOWS\system32\svchost -k rpcss

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

"C:\program files\kingsoft\kingsoft antivirus\kxescore.exe" /service kxescore

"C:\Program Files\KSafe\KSafeSvc.exe" -svc

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

"C:\Program Files\KSafe\KSafeTray.exe" -autorun

"C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe"

"C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"

"C:\program files\kingsoft\kingsoft antivirus\kxetray.exe" -autorun

"C:\WINDOWS\system32\ctfmon.exe"

"D:\Program Files\3b359626bcd126fff7050bbb宽带认证客户端\ishare_user.exe"

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\WINDOWS\system32\SearchIndexer.exe /Embedding

C:\WINDOWS\system32\wscntfy.exe

"C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe"

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

C:\WINDOWS\system32\conime.exe

"C:\Documents and Settings\Administrator\Application Data\kingsoft\klive\bin\klive. "C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e

"C:\WINDOWS\system32\cmd.exe"

wmic

C:\WINDOWS\system32\wbem\wmiprvse.exe

CreationClassName CreationDate CSCreationClassName CSName

Win32_Process Win32_ComputerSystem PC-201105120739 Win32_Process Win32_ComputerSystem PC-201105120739 Win32_Process20111128175401.906250+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175521.140625+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175521.937500+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175523.250000+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175523.312500+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175524.203125+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175524.578125+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175524.718750+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175524.781250+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175524.859375+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175524.890625+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175525.062500+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175526.390625+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175527.937500+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175535.781250+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175535.828125+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175535.906250+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175535.968750+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175536.062500+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175536.359375+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175545.937500+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175546.062500+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175547.578125+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175601.625000+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175605.578125+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175607.031250+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128175929.475779+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128181739.842674+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128181836.511284+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128182023.222556+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128182027.534670+480Win32_ComputerSystem PC-201105120739 Win32_Process20111128182032.940435+480Win32_ComputerSystem PC-201105120739

Description

System Idle Process System

SMSS.EXE

csrss.exe

winlogon.exe services.exe

lsass.exe

svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe kxescore.exe KSafeSvc.exe spoolsv.exe Explorer.EXE KSafeTray.exe TrueImageMonitor.exe schedhlp.exe kxetray.exe

ctfmon.exe

ishare_user.exe svchost.exe searchindexer.exe wscntfy.exe afcdpsrv.exe

alg.exe

svchost.exe conime.exe

klive.exe

excel.exe

cmd.exe

wmic.exe

wmiprvse.exe

ExecutablePath Handle

4 C:\WINDOWS\System32\smss.exe1268 C:\WINDOWS\system32\csrss.exe1440 C:\WINDOWS\system32\winlogon.exe1464 C:\WINDOWS\system32\services.exe1508 C:\WINDOWS\system32\lsass.exe1520 C:\WINDOWS\system32\svchost.exe1708 C:\WINDOWS\system32\svchost.exe1776 C:\WINDOWS\System32\svchost.exe488 C:\WINDOWS\system32\svchost.exe584 C:\WINDOWS\system32\svchost.exe736 C:\program files\kingsoft\kingsoft antivirus\kxescore.exe780 C:\Program Files\KSafe\KSafeSvc.exe808 C:\WINDOWS\system32\spoolsv.exe1152 C:\WINDOWS\Explorer.EXE1760 C:\Program Files\KSafe\KSafeTray.exe1972 C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe1980 C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe2028 C:\program files\kingsoft\kingsoft antivirus\kxetray.exe2040 C:\WINDOWS\system32\ctfmon.exe2064 D:\Program Files\3b359626bcd126fff7050bbb宽带认证客户端\ishare_user.exe2104 C:\WINDOWS\system32\svchost.exe3368 C:\WINDOWS\system32\SearchIndexer.exe3448 C:\WINDOWS\system32\wscntfy.exe3752 C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe372 C:\WINDOWS\System32\alg.exe3676 C:\WINDOWS\System32\svchost.exe3812 C:\WINDOWS\system32\conime.exe2772 C:\Documents and Settings\Administrator\Application Data\kingsoft\klive\bin\klive.e872 C:\Program Files\Microsoft Office\Office12\EXCEL.EXE3644 C:\WINDOWS\system32\cmd.exe828 C:\WINDOWS\System32\Wbem\wmic.exe4080 C:\WINDOWS\system32\wbem\wmiprvse.exe2556

HandleCount InstallDate KernelModeTime MaximumWorkingSetSize 030727812500

6161671875001413120

191562501413120

762521875001413120

45553125001413120

297120312501413120

33539062501413120

1984687501413120

32518750001413120

153364062501413120 926250001413120

28814062501413120

1105110937501413120

62221875005259264

1847812501413120

5491378125001413120

41559375005308416

24410937501942405120

4701413120

31620312501413120

943125001413120

229159375001413120

1309375001413120

119471875001413120 6101413120

1479375001942405120

10901413120

951562501413120

603125001413120

26526562501413120

406178125001413120

3301413120

1824687501413120

1413125001413120

MinimumWorkingSetSize Name OSCreationClassName

System Idle Process Win32_OperatingSystem

0System Win32_OperatingSystem

204800SMSS.EXE Win32_OperatingSystem

204800csrss.exe Win32_OperatingSystem

204800winlogon.exe Win32_OperatingSystem

204800services.exe Win32_OperatingSystem

204800lsass.exe Win32_OperatingSystem

204800svchost.exe Win32_OperatingSystem

204800svchost.exe Win32_OperatingSystem

204800svchost.exe Win32_OperatingSystem

204800svchost.exe Win32_OperatingSystem

204800svchost.exe Win32_OperatingSystem

204800kxescore.exe Win32_OperatingSystem

5242880KSafeSvc.exe Win32_OperatingSystem

204800spoolsv.exe Win32_OperatingSystem

204800Explorer.EXE Win32_OperatingSystem

5242880KSafeTray.exe Win32_OperatingSystem

204800TrueImageMonitor.exe Win32_OperatingSystem

204800schedhlp.exe Win32_OperatingSystem

204800kxetray.exe Win32_OperatingSystem

204800ctfmon.exe Win32_OperatingSystem

204800ishare_user.exe Win32_OperatingSystem

204800svchost.exe Win32_OperatingSystem

204800searchindexer.exe Win32_OperatingSystem

204800wscntfy.exe Win32_OperatingSystem

204800afcdpsrv.exe Win32_OperatingSystem

204800alg.exe Win32_OperatingSystem

204800svchost.exe Win32_OperatingSystem

204800conime.exe Win32_OperatingSystem

204800klive.exe Win32_OperatingSystem

204800excel.exe Win32_OperatingSystem

204800cmd.exe Win32_OperatingSystem

204800wmic.exe Win32_OperatingSystem

204800wmiprvse.exe Win32_OperatingSystem

OSName OtherOperationCount OtherTransferCount MicrosoftWindowsXPProfessional|C:\WINDOWS|00 MicrosoftWindowsXPProfessional|C:\WINDOWS|104781067479 MicrosoftWindowsXPProfessional|C:\WINDOWS|161958 MicrosoftWindowsXPProfessional|C:\WINDOWS|47076553164 MicrosoftWindowsXPProfessional|C:\WINDOWS|6888181504 MicrosoftWindowsXPProfessional|C:\WINDOWS|176518856 MicrosoftWindowsXPProfessional|C:\WINDOWS|177******** MicrosoftWindowsXPProfessional|C:\WINDOWS|73917560 MicrosoftWindowsXPProfessional|C:\WINDOWS|139653696 MicrosoftWindowsXPProfessional|C:\WINDOWS|39981639684 MicrosoftWindowsXPProfessional|C:\WINDOWS|2160168800 MicrosoftWindowsXPProfessional|C:\WINDOWS|153192825 MicrosoftWindowsXPProfessional|C:\WINDOWS|589992731633 MicrosoftWindowsXPProfessional|C:\WINDOWS|352884365340 MicrosoftWindowsXPProfessional|C:\WINDOWS|2162126254 MicrosoftWindowsXPProfessional|C:\WINDOWS|23270817616036 MicrosoftWindowsXPProfessional|C:\WINDOWS|549411347520 MicrosoftWindowsXPProfessional|C:\WINDOWS|186122203246 MicrosoftWindowsXPProfessional|C:\WINDOWS|2703236 MicrosoftWindowsXPProfessional|C:\WINDOWS|911874786 MicrosoftWindowsXPProfessional|C:\WINDOWS|475668 MicrosoftWindowsXPProfessional|C:\WINDOWS|8005114082 MicrosoftWindowsXPProfessional|C:\WINDOWS|2842824 MicrosoftWindowsXPProfessional|C:\WINDOWS|158******** MicrosoftWindowsXPProfessional|C:\WINDOWS|3842406 MicrosoftWindowsXPProfessional|C:\WINDOWS|179322173950 MicrosoftWindowsXPProfessional|C:\WINDOWS|453106598 MicrosoftWindowsXPProfessional|C:\WINDOWS|40595982 MicrosoftWindowsXPProfessional|C:\WINDOWS|769107152 MicrosoftWindowsXPProfessional|C:\WINDOWS|157******** MicrosoftWindowsXPProfessional|C:\WINDOWS|4554291382 MicrosoftWindowsXPProfessional|C:\WINDOWS|43396028 MicrosoftWindowsXPProfessional|C:\WINDOWS|1180130660 MicrosoftWindowsXPProfessional|C:\WINDOWS|591102898

PageFaults PageFileUsage ParentProcessId PeakPageFileUsage PeakVirtualSize 00000 107840005369856 2311843204171622414929920 107053665600012687319552249696256 7665719257612681080115261218816 208020316161464240435229581312 387626173441464268697642418176 1740329728015082406400068251648 148921749761508218726445776896 1805515712256150823547904133132288 526317612801508257228836765696 285951240961508586956863959040 4904144564480150862541824274227200 1459236659200150836745216186060800 217245916161508475545662095360 5256521331968159625952256308125696 2495721614592176029515776142262272 129142327756817602328985699205120 99110444801760104448034086912 12414918202624176018317312132530176 180835225601760355942441418752 361291381761760958054476967936 126226746881508279347241480192 1609821889024150824547328269148160 13842523136488253952041881600 6129280985615087442432144744448 100813926401508140083237625856 98018104321508183500841312256 157228180483700283443241132032 34967101089281760203976704292151296 910619001344176019107840210190336 79521913601760219545638277120 24994558848828518963265499136 151132112641708321126444212224

PeakWorkingSetSize Priority PrivatePageCount ProcessId QuotaNonPagedPoolUsage

00000 4435968877824040

552960111843201268640

886374413665600014405656

17784832137192576146462920

62095369203161615086968

58122249261734415206672

53944328329728017085704

505856082174976177614408

2877440081571225648866864

4882432817612805844184

9965568851240967369448

4379033684456448078021640

4160716883665920080814360

78438408459161611526832

33202176821331968176017912

36196352821614592197214496

2311782482327756819807656

38871048104448020282600

21831680818202624204011208

69427208352256020644640

135086088913817621047336

46981128267468833684320

23527424821889024344812072

55173128252313637523040

10424320428098563723640

39895048139264036765808

38871048181043238128160

61235208281804827723440

5411635281010892887211424

33480704819001344364415440

3031040821913608282440

98959368455884840806320

60497928321126425565064

QuotaPagedPoolUsage QuotaPeakNonPagedPoolUsage QuotaPeakPagedPoolUsage

000

000 6068141627540

1827247816509564

10273266296108612

421641110444308

711401008873812

79612764082788

877081637687708

20803671312213892

571081306467012

961081527298116

14514827680145692

13678818640138004

10624412176108708

23750830656556940

15189220296182676

1424289568142828

58116373666628

15404414368156412

77180606477940

11792411880119468

76132576876252

193764107664194396

80220492881220

65180461675468

71604612871844

68092949668108

76556540077244

11298814856117356

31899616632322252

60484293673020

1113006320111300

81164506481348

ReadOperationCount ReadTransferCount SessionId

000

2982159605220

941220

7154737411150

32848788930

7470480

880312557580

1174399020

1114395040

193077573600

1154200410

381034860

1287101006316670

48633192352090

6229040

482924495070

194461093301540

23412975230

1234271590

31744581370

1521450

39563106109940

8231660

11158543493320

1521450

1184233980

6400880

4210960

16251150

234114609530

1701530980

1127520

25737530

14543940

Status TerminationDate ThreadCount UserModeTime VirtualSize WindowsVersion

2005.1.2600

126032153605.1.2600

315625038461445.1.2600

1215781250887152645.1.2600

181250000571965445.1.2600

162343750255590405.1.2600

192187500410009605.1.2600

17625000663019525.1.2600

11625000457768965.1.2600

7575000001169776645.1.2600

6937500354590725.1.2600

17156250612392965.1.2600

130107812502531901445.1.2600

6812500001798266885.1.2600

13468750610467845.1.2600

14368750001380188165.1.2600

2387500001290813445.1.2600

191718750981565445.1.2600

1468750309166085.1.2600

369375001262346245.1.2600

1312500406323205.1.2600

61406250706723845.1.2600

6937500406937605.1.2600

20135937502589941765.1.2600

1312500416194565.1.2600

1315625001447444485.1.2600

6312500373637125.1.2600

8156250410501125.1.2600

1156250407101445.1.2600

328437500963133445.1.2600

1598437502080276485.1.2600

1156250319324165.1.2600

5156250654991365.1.2600

6156250442122245.1.2600

WorkingSetSize WriteOperationCount WriteTransferCount 2867200

38502415448545280

46284844

860569600

405504011310845

60375044623106449

16384008034728894

529612812668

50585606300

233799688443756729

4239360384

95518721127084

11653120229576583260

62259202161460358

75202564156

23040000206127603

595148827401473054

10305536221619

38871048633

31293441541302955

69304321129

13422592231927

464076811609

23343104658019518102

55050241129

58736646280

39895044156

3878912384

61235201129

160358401096704149

33406976114918

302694400

93716486517

604979212888

本文来源：https://www.bwwdw.com/article/8ijq.html