XP PROCESSES

ALG.EXE
Process name: Application Layer Gateway Service
Product: Windows
Company: Microsoft
File: alg.exe

Application Layer Gateway service is a component of Windows OS. It is required if you use a third-party firewall or Internet Connection Sharing (ICS) to connect to the internet. If you end this program using the Task Manager, you will lose all Internet connectivity until your next system restart or login.
Note: The alg.exe file is located in the folder C:\Windows\System32. In other cases, alg.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.
CSRSS.EXE
The Microsoft Client Server Runtime Server subsystem utilizes the process csrss.exe for managing the majority of the graphical instruction sets under the Microsoft Windows operating system. As such Csrss.exe provides the critical functions of the operating system, and its termination can result in the Blue Screen of Death being displayed.

Csrss.exe controls threading and Win32 console window features. Threading is where the application splits itself into multiple simultaneous running tasks. Threads supported by csrss.exe are different from processes in that threads are commonly contained within the process, with various threads sharing resources within the same process. The Win32 console is the plain text window in the Windows API system (programs can use the console without the need for image display).

In mobile devices such as notebooks and laptops, the process csrss.exe is closely dependent on power management schemes implemented by the system as defined under the Control Panel option.
SMSS.EXE
There are many processes that run behind the scenes in Window's operating systems. One of these processes that may look suspicious is the SMSS.exe. This is an execution file with the full name Session Management Subsystem.

The Session Manager Subsystem is responsible for starting a user's session. When this process begins, the system thread is responsible for a number of specific tasks including launching the Winlogon, specific Win32 processes and among other items, setting the system variables.

Many computer users first notice the SMSS.exe process when a system shuts down abnormally. For instance, when a Winlogon ends normally, this process usually has no problem fulfilling its tasks, however, when a system shuts down abnormally or unexpectedly, the SMSS.exe causes a "hang" which is when the system stops responding.

SPOOLSV.EXE

A Microsoft Windows file stored in the c:\windows\system32 or c:\winnt\system32 directory that has the file description: Spooler SubSystem App. This file is responsible for how Microsoft Windows handles print and fax jobs on your computer.

The spoolsv.exe is taking up 99%, 100% or other abnormal high amount of CPU.

This is caused when there are still printer jobs in the Windows spool. To manually remove these print jobs follow the below steps.

1. Click Start, Settings, Control Panel.
2. In the Control Panel double-click the Administrative Tools and then Services.
3. Within services locate Print Spooler and right-click it and select Stop.
4. Once this process has been stopped leave the windows open and open My Computer and browse the the below folder.
   
   c:\windows\system32\spool\PRINTERS
   
   or
   
   c:\winnt\system32\spool\PRINTERS
   
   
5. In this folder delete all the files in the PRINTERS folder. Once these have been deleted you can right-click the Print Spooler in the Services window and click Start to re-enable the service.

If this does not resolve your issue it's likely you have an issue with your printer drivers you have installed for your printers and/or you have a trojan, virus, or worm infected on the computer. Make sure you have the latest printer drivers for your printer. A listing of printer drivers can be found through our printer drivers page. Additionally make sure you have an antivirus protection program on the computer and that it's up-to-date. Additional information about updating your antivirus program can be found on document CH000533.

Spoolsv.exe generates errors and will be closed by Windows.

Errors caused by the spoolsv.exe file are often caused by other third-party software programs installed on the computer and/or the printer drivers installed on the computer. Make sure you have the latest printer drivers for your printer. A listing of printer drivers can be found through our printer drivers page. Additionally make sure you have an antivirus protection program on the computer and that it's up-to-date. Additional information about updating your antivirus program can be found on document CH000533.

SVCHOST.EXE

The file svchost.exe is the Generic Host Process for Win32 Services used for administering 16-bit-based dynamically linked library files (DLL files) including other supplementary support applications.

As operating systems became more complex Microsoft decided to run more software functionality from a dynamic link library (DLL) interface. However DLLs are unable to launch themselves and require at least one executable program, i.e. svchost.exe, is needed to bridge between the library process and the operating system.

Through the solitary file svchost.exe, the DLLs efficiently contain and dispense Win32 services as well as neatly facilitate the execution of svchost.exe’s own operations. Acting as a host, the file svchost.exe creates multiple instances of itself. The multiple executions of the file svchost.exe contribute to the stability and security of the operating system by reducing the possibility of a crashing process that causes a domino effect on its neighbor processes, thereby creating a system-wide crash in the machine. We strongly recommend that you run a FREE registry scan to identify svchost.exe related errors.

SERVICES.EXE

services.exe is a part of the Microsoft Windows Operating System and manages the operation of starting and stopping services. This process also deals with the automatic starting of services during the computers boot-up and the stopping of services during shut-down. This program is important for the stable and secure running of your computer and should not be terminated. We strongly recommend that you run a FREE registry scan to identify services.exe related errors.

LSASS.EXE

"lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC or server. Lsass generates the process responsible for authenticating users for the Winlogon service. This is performed by using authentication packages such as the default, Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates then inherit this token. The lsass.exe file is located in the folder C:\Windows\System32.

WUAUCLT.EXE

Wuauclt.exe is the AutoUpdate Client of Windows Update and is used to check for available updates (for the various versions of the MS Windows platform) from Microsoft Update. The wuauclt.exe file is included in the Task Manager’s list of active processes when it is waiting for a response or an action to be performed by the user.

Aside from updating a user’s MS Windows-based system, the wuauclt.exe file also looks for MS Windows-based software and hardware updates. These updates can help a user avoid stability issues and even security risks or system vulnerabilities.

The Automatic update feature embedded on MS Windows can be manually turned on or off and can also be scheduled by the user. The user can proceed to Control Panel and open Automatic Updates in order to access the set of update options provided by this MS Windows utility.