Helping people with computers... one answer at a time.

There may be many programs running on your machine. It's not always obvious exactly what they are or why they're running. We'll look for some clues.

What's this program running on my machine?

As you use your Windows machine there may be many programs running - some of which you can see and some of which are running in the background. In Windows 95, 98 and Me, pressing CTRL-ALT-DEL will present you with a list of the programs running on your machine. On Windows NT, 2000, XP and 2003, running task manager (right click on the clock or any open space on the task bar and select Task Manager) and selecting the Processes tab will show you that list.

It's probably a longer list than you expected.

So what are all those programs running on your machine?

Some will be fairly obvious based on their name. For example a program called "msnmsngr" is MSN Messenger, the MSN Instant messaging program. "CMD" is the "Command Prompt". But CSRSS? LSASS? SVCHOST? For these and many of the others we don't immediately recognize we need to look a little deeper.

One of the tools I use the most is Process Explorer (procexp) by the folks out at Sysinternals.com. Think of it as task manager on steroids.

Just running procexp will answer the question for a number of programs running on your machine. Procexp will list them much like task manager did except with much more available information including a description if there is one.

The columns available to be displayed in procexp are extensive - one that I've added to my default display is "Command Line". Much like a previous article about What's This DLL? simply knowing where the program was loaded from on disk will often tell us what application it is a part of. For example it didn't dawn on me what "ypager" was until I saw that it had been loaded from "\Program Files\Yahoo!\Messenger". That made it fairly clear that it's Yahoo's instant messaging client.

"Just running procexp will answer the question for a number of programs running on your machine."

If it's not obvious from the description or the command line then my next step, again much like the DLL search, is Google. For example search on "LSASS.EXE" provided me with a site that told me it was the "The Windows Local Security Authority Server Process" the component of windows that handles local security related requests. In other words, a key component of the operating system itself.

I also recommend Microsoft's Support Site. The problem with both it and Google is simply that there are often a lot of unhelpful entries to wade through. LSASS, for example, returns a plethora of articles on the Microsoft Support site dealing with specific issues relating to LSASS but not a clear definition of what it is. Nonetheless, both can be valuable aids if you can sort the wheat from the chaff.

Most of programs can be identified by the steps above, at least to the point of understanding what application they belong to or whether they are part of the operating system.

One program, "svchost", usually has multiple copies running at the same time on Windows NT, XP, 2000, and 2003. Labeled only as "Generic Host Process", it deserves a little more attention that I'll save for a separate article.

Article C1851 - October 17, 2003 « »

Share this article with your friends:

Share this article on Facebook Tweet this article Email a link to this article
Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

44 Comments
Erle
January 5, 2004 7:48 PM

Heard about your site on one of the PC oriented radio shows. Heard someone ask about a slow PC. Host recommended your site. I had the problem too and went to your site. Your recommendation to try Process Explorer allowed me (a novice)to locate a problem with my firewall (on/off cycling process, CPU up to 100% every 20 seconds). Went to firewall software and reset firewall enable...fixed problem immediately. THANKS SO MUCH!

Erle

Erle
January 5, 2004 7:48 PM

Heard about your site on one of the PC oriented radio shows. Heard someone ask about a slow PC. Host recommended your site. I had the problem too and went to your site. Your recommendation to try Process Explorer allowed me (a novice)to locate a problem with my firewall (on/off cycling process, CPU up to 100% every 20 seconds). Went to firewall software and reset firewall enable...fixed problem immediately. THANKS SO MUCH!

Erle

Allan Brine
March 9, 2004 2:04 PM

In my Ctrl-alt-del there is a program simply called "A". what is it? please email me a response A.S.A.P. thanks
-Allan

Leo
March 9, 2004 2:28 PM

Darned good question. I assume you are running Win9x? Grab a copy of Process Explorer from sysinternals, referenced in the article. Run it and you'll at least be able to see where "A" is on your hard drive. From there you can begin to investigate, again as outlined in the article. I also assume you've already run virus and spyware scans.

Leo

Thioden
March 24, 2004 7:08 AM

I accedently shut down a proces in taskmgr and now all the tabs (like programs and network ... ) are gone, i can't make them reapear. I've tryed to use system restore but it doesn't work. What should I do?
This is realy annoying.
thanks in advance.

Leo
March 24, 2004 9:16 AM

Rebooting should resolve anything caused by killing a task in taskmanager.

Leo

P-skijj
April 3, 2004 1:30 PM

About missing tabs in taskmanager:
I had the same problem. Rebooting didn't help me, but I simply double clicked on the 'frame', the grayish border(?) and the tabs all came back. Double click again to make them disappear again.
/P-skijj

Maxwell
September 5, 2004 10:38 PM

Armor2net Personal Firewall, a program for the Windows operating system that helps protect computers from the threats on the Internet and World Wide Web. With Armor2net Personal Firewall in place, end-users can breathe a sigh of relief.
For more information, please visit: http://www.armor2net.com

Edward
October 22, 2004 5:04 PM

my computer is running slow, so i open windows task manager. i see all the processes when i didnt even open alot of programs yet. the processes just appear and i want to ask how to make them decrease when i start my desktop.

Edward
October 22, 2004 5:05 PM

my computer is running slow, so i open windows task manager. i see all the processes when i didnt even open alot of programs yet. the processes just appear and i want to ask how to make them decrease when i start my desktop.

Leo
October 22, 2004 5:13 PM

It depends on what the processes are, which is why this article was written - to help identify them. Many are important parts of the operating system itself, others are a waste of time. Once you know which is what, how you turn them off will, once again, depend on exactly what each process is.

There's no blanket answer, I'm afraid.

paul robinson
November 3, 2004 7:01 AM

dear leo
your site is a valuable source of informatin and help. thanks. keep it up.

paul

Florida Mortgage
November 7, 2004 5:54 AM

I agree with the last comment 100%.

Marion
November 20, 2004 11:33 AM

When will you post info on svhost. I have five of them don't know which I can delete. Marion

Leo
November 20, 2004 1:04 PM

I have had several articles on svchost for a long time. Start here: http://ask-leo.com/what_is_svchost_and_why_is_there_more_than_one_copy_running.html

Martin Ford
April 4, 2005 12:40 PM

Hi!

I have been reading many of your articles and am pleased with the clarity. I cannot seem however to find the article on svchost.exe. Call me thick if you will but I must be missing it.

Frustrated because I have three computers now all at standstill whill this exe files eats away at my CPU. In one case I am getting 100% red in the task manager!!!

I have read so much rubbish for days now contradicting themselves about this listening to everyone else saying the same problems with a myriad of unhelpful answers.

I know very well what it is what I want to know is how to kill whatever is possesing it!!!

Can you help?

Please???

Martin

Kevin
July 6, 2005 10:47 PM

Hello I have 2 program icons on my desktop i wish to delete--i right click them and hit delete and it pauses and it said they are being run by a program and can't delete----check in task manager and nothing obvious is in there. I restart in safe mode and same result---is there a way to see what program is running these 2 items so I can delete them???? thanks---great web site by the way---so much info i am on overload---

Leo
July 7, 2005 8:45 PM

Icons are just files on your machine, so this article may help: http://ask-leo.com/how_can_i_find_out_who_is_using_a_file_in_use.html

Desktop icons would be in c:\documents and settings\username\desktop and in c:\documents and settings\all users\desktop

So find out which applications have those icon files open, and then you can take appropriate action.

Jaime
September 15, 2005 10:54 PM

Big problem here. I instant messaged a friend's cell phone from my PC. Unfortunatly, the same message has been sent to her over and over on her cell phone all day long!!! No one seems to know how to stop it and each text message is costing her money. can you help?

Leo
September 16, 2005 7:50 PM

How'd you send it? Seems like her wireless phone company is the only place to turn for help.

K.Uma Mahesh
January 6, 2006 9:39 AM

i learnt a lot from ur site .... thanks a lot leo

karlye
January 18, 2006 9:36 PM

I can't seem to get rid of msn (i think it's version 4.7) It won't remove from my add/remove programs lists.... I had originally tried to remove it so I could use versions 7.5, but 7.5 won't work on my laptop and 4.7 won't go!
I am not familiar with most of the technical stuff with computers.. but I can usually add and remove proigrams no probs!
thanks Karlye

Leo
January 18, 2006 9:45 PM

This article may help: http://ask-leo.com/how_do_i_uninstall_windows_messenger.html

tom catlin
April 26, 2006 4:29 PM

i have some programs running on my windows xp that are running under the users name, ive run spy bot, ive downloaded the process explorer and it wont see them, if i use task manager to stop the process, it just restarts itself, ive searched the registry for refernces to the file names running and got rid of them there but they still show up in task manager, i found the some files in Windows/system32 but you can delete it because there in use, if i go to safe mode you cant find them in the windows explorer, im frustrated, the file names are veumb.exe and xcpji.exe. the second file is in the start up folder and you can get rid of it there either. can someone help? i didnt find anything in the articles to get me movin but this is a great site

james
April 26, 2006 11:27 PM

I have an annoying warning A DECK SCROLLBAR OUT OF RANGE what is it and how to get rid of it please

Patti
June 20, 2006 10:36 PM

Whenever I shut down, I get the "End Now" box telling me there's a program running that needs to stop before I can shut down. There is an option to Cancel (to return to windows) or "End Now" (and I will lose any unsaved information ..." The name of the program is Sample--that's it -- just "Sample" -- what on earth is "Sample?" For months -- in vain, I've searched this computer inside and out and I cannot find anything called "Sample" that resembles a program. Sometimes I think I get it narrowed down to a graphic program of some sort-who knows? I cannot get rid of it - it a persistant rascal and even survived a major crash last Sunday! If you can solve this one for me - I'll dance at your wedding, or your retirement party, whichever comes first.

Leo
June 21, 2006 9:02 PM

I would use Process Explorer, referred to in the article, to see if you can identify which of the processes might be titled "Sample".

Rosland
July 24, 2006 9:55 AM

I WANT TO END SOME OF THE PROCESSES RUNNING ON MY COMPUTER BECAUSE THEY ARE MAKING MY COMPUTER SLOWER... HOW DO I KNOW WHICH ONES NOT TO END, WHICH ONES ARE VERY IMPORTANT, AND WHICH ONES I CAN END???

laverne hargett
September 25, 2006 12:04 AM

thank you very much for solving my problems with my pc. you have a wonderful site. thank you again

christi
February 20, 2007 2:38 AM

Hello. I keep getting this little task pop-up thing with a little white box with a blue horrizontal line across the top in my task bar. The whole thing just randomly pops up and then disappears after a few seconds---it's too fast for me to click on it to see what it is. It also disrupts my screen saver. I turned my computer off and I had that "end now" box that came up before I could shutdown. Apparently there were two programs running I had no idea about: __PIAWIA and Windows Forums Parking Windows.

Are these viruses? How do I get rid of them?

Any help would be most appreciated. Thank you!

Leo Notenboom
February 22, 2007 10:52 AM

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A couple of ideas:

http://ask-leo.com/how_do_i_read_a_message_that_flies_by_too_quickly_on_my_screen.html

and

http://ask-leo.com/how_can_i_track_what_programs_come_and_go_on_my_machine.html

And of course make sure your anti-virus and anti-spyware programs both
have up to date databases.

Leo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)

iD8DBQFF3eY3CMEe9B/8oqERAjQzAJ0bP/I6xzarbDi61CUwq8gHmeeBRgCeNbSV
Cwr4U+jU5nXP2O1MwgsAgXU=
=Cy2r
-----END PGP SIGNATURE-----

Jenny d
August 4, 2007 1:49 AM

What is the program running in the background? On the task bar there is a task w/ a box in it. When I click on the task nothing happens. Before I was able to log off the computer and it would disappear but now it constantly stays on the screen. Can it be a virus?

quoc
October 13, 2007 12:46 PM

how come my computer got lagier the next day and what antivirus do you recemend that i should use

Dale Black
February 24, 2008 7:03 PM

My wife downloaded two screen savers, :(
When she tried to install something went wrong.
now the two .exe files are on the desktop (where she DL them) and we can't delete/move them and no screensaver to run.

When we try to delete them we get a message telling us that another program or person is using them.

I have tried several online Virus/spyware, etc and although they found and cleaned a few things it did not fix this one and we still can't get rid of them.

I tried to look them up in the task mgr and I see no listing or anything out of the normal.

Can you help????

babe
March 30, 2008 9:43 AM

I even log off and progam is runnig

Marilyn
August 13, 2008 8:50 PM

Why when I go to shut down my pc does this pop up
come up that says other people are on your computer and if you shut down now they will lose information? Has some person or persons hacked into my computer?

Beverly Adams
October 28, 2008 10:56 AM

I am tring to speed up my computer, I have a HUGE list on the "started" services from control-adm tools-services. I am scared i may delete the wrong ones. I did you answer this question 'I WANT TO END SOME OF THE PROCESSES RUNNING ON MY COMPUTER BECAUSE THEY ARE MAKING MY COMPUTER SLOWER... HOW DO I KNOW WHICH ONES NOT TO END, WHICH ONES ARE VERY IMPORTANT, AND WHICH ONES I CAN END???" Does deleting the history on your pages make it slower or faster? Help

Beverly Adams
October 28, 2008 11:01 AM

i have deleted my history ,cookies , removed stuff i dont use thru the removal tool in control panel, delete recycle bin,run spy ware, defragment tool. What else can I do to Speed up things.

jonathon
November 24, 2008 11:55 PM

k so i am listing this on many sites trying to find an answer to this process. running on my win 2000 laptop its called trickler_bic_do. if anyone has an idea on this process's origins it would be helpful. when this is running system resoures are used upp at an alarming rate until reduced to zero and cpu stays pegged full load. it can be ended but starts back up just as fast. not seen as virus by many many checkers or ad adware or ect... any help would be useful

shahin
September 7, 2009 9:12 AM

go to download.com and search for malwarebyte then do full system scan then remove the spywares

arlene vera
November 18, 2009 8:36 AM

wen I try to close my computer it says I have a program running, when I try to close this program it says task manager warning trying to end this process could cause losing data. How do I get this off my screen.

There's no blanket answer - it depends on which program is not responding.
Leo
19-Nov-2009

Rehan Celliers
October 19, 2010 5:16 AM

There is a program called runner running on my system. It causes a small, grey rectangular shape on the desktop. When one ALT-TAB it just says Runner. What is this?

Suzanne
August 14, 2012 10:42 AM

I never thought of myself as a Geek, I'm 70 years old, but I do have to say I spend an inordinate amount of time looking at Task Manager esp when something is running and I don't know what it is; but, if it isn't showing up on Task Manager I had no idea how to locate it. So, I'm going to try this. I am hoping I can interpret what it says Process explorer.

Comments on this entry are closed.

If you have a question, start by using the search box up at the top of the page - there's a very good chance that your question has already been answered on Ask Leo!.

If you don't find your answer, head out to http://askleo.com/ask to ask your question.