Windows service is program without user interface. It's running on the background and performs specific functions/services. Can be configured to start when the operating system is booted. Service can be running in single process or as DLL loaded into svchost.exe.
svchost.exe
Svchost.exe is the name of a process for hosting dynamically linked services. Some malware often uses a process name of "svchost.exe" to cloak itself. Every svchost.exe should be running from same system directory.
Startups
Collection of programs registered in system for automatic start during system boot. System provides many ways how to register program for auto start. Many registered programs can slow down system boot-time and overall system performance.
Snapshot
System Explorer Snapshot is data file containing informations about registry and file structure in the time of snapshot creation. Any snapshots can be compared and differences between snapshots displayed in tree or text report. Report contains infromations about Added/Deleted/Modified files and registry values. This way you can determine what any program do during installation/run/uninstallation.
services.exe
Services.exe is system process which manages all system services. Some malware often uses a process name of "Services.exe" to cloak
itself. There should be only one running process of this name and the path should lead to system directory.
searchindexer.exe
SearchIndexer.exe is the system service which makes indexs for fast search. This process often uses much processor time and memory. Can be disabled via services (Stop Search Service).
slsvc.exe
Slsvc.exe is system process in which is running Software Licensing Service. It's important for Windows Update.
spoolsv.exe
Spoolsv.exe is the spooler service. It's responsible for managing spooled print/fax jobs. The spoolsv.exe file is located in the system folder (For example: C:\Windows\System32). In
other cases, spoolsv.exe it could be a malware.
