NOTE: Maximise this file to see everything neater.

Used on our Windows XP startup:.
alg.exe		C:\Windows\System32\	= Application Layer Gateway (part of Windows)
avgamsvr.exe				= AVG.
avgcc.exe				= AVG Control Center.
avgemc.exe				= AVG.
avgupsvc.exe				= AVG.
csrss.exe	C:\Windows\System32\	= client/server run-time subsystem and is an essential subsystem, should be less
					 3624KB, else it's fake.
ctfmon.exe	= Alternative User Input and the Office Language bar. To disable it:
			Open up Control Panel and choose Regional and Language Options.
			Choose the Languages tab and then click on Details in the top section.
			Now on the Advanced tab you can choose to "Turn off advanced text services", which should
			 immediately close ctfmon.
DRAGDIAG.EXE	= diagnostics for Alcatel ADSL modem.
explorer.exe	C:\Windows\		= Windows Explorer (is used to show the Desktop) (part of Windows).
FirewallGUI.exe	C:\Program Files\Pc Tools Firewall Plus\	= PC Tools Firewall Plus GUI.
FWService.exe	C:\Program Files\Pc Tools Firewall Plus\	= PC Tools Firewall Plus service.
gnotify.exe				= GMail (Google Mail) email notifier.
jusched.exe				= Java Update Schedule.
lsass.exe	C:\Windows\System32\	= LSA Shell (Export Version) (part of Windows).
pctsAuxs.exe	C:\Program Files\Spyware Doctor\	= PC Tools Security Service (sdCoreService).
pctsgui.exe	C:\Program Files\Spyware Doctor\	= PC Tools GUI Application.
pctsSvc.exe	C:\Program Files\Spyware Doctor\	= PC Tools Security Service.
pctsTray.exe	C:\Program Files\Spyware Doctor\	= PC Tools Tray Application.
Rapimgr.exe	C:\Program Files\Microsoft Activesync\	ActiveSync RAPI Manager.
services.exe	C:\Windows\System32\	= Services and Controller app (part of Windows), starts & stops processes.
smss.exe	C:\Windows\System32\	= Windows NT Session Manager.
spoolsv.exe	C:\Windows\System32\	= managing spooled print/fax jobs. 
svchost.exe	C:\Windows\System32\	= Generic Host Process for Win32 Services (part of Windows).
System
System Idle Process  SYSTEM
taskmgr.exe	C:\Windows\System32\	= Windows Task Manager.
TFService.exe	C:\Program Files\Threatfire\	= Threatfire (part of PC Tools).
TFTray.exe	C:\Program Files\Threatfire\	= Threatfire system tray menu (part of PC Tools).
Wcescomm.exe	C:\Program Files\Microsoft Activesync\	ActiveSync Connection Manager.
wdfmgr.exe	C:\WINDOWS\system32\
winlogon.exe	C:\Windows\System32\	= Windows NT Logon Application.
wscntfy.exe	C:\Windows\System32\	= Windows Security Center, introduced in Service Pack 2
wuauclt.exe	C:\Windows\System32\	= Windows Update Automatic Updates (part of Windows)

OTHERS:
drst.exe				= Dr. SpeedTouch - SpeedTouch 330 modem diagnostics from Thomson for Virgin.
Update.exe	C:\Program Files\Pc Tools Firewall Plus\	 = PC Tools Smart Update.
Update.exe	C:\Program Files\Spyware Doctor\	 = PC Tools Smart Update.

After running USB_Driver_32.msi, the following run as tasks:
msiexec.exe			C:\WINDOWS\system32\	= Windows installer.
MROUTE~2.EXE	(mRouter.exe)	C:\Program Files\Intuwave\Shared\mRouteRuntime\	= ###.
SCBAL.exe	C:\Program Files\Symbian\Shared\SymbianConnectRunTime\		= Symbian Connect Runtime.
SYMBIA~1.EXE	(SymbianConnectRuntime.exe)	C:\Program Files\Symbian\Shared\SymbianConnectRunTime\	= ###.
ConnectionWizard.exe	= "How to connect wizard" from Motorola.
Generic.exe		C:\Program Files\Common Files\Teleca Shared\	= Motorola PcSync.
CapabilityManager.exe	C:\Program Files\Common Files\Teleca Shared\	= Motorola PcSync.
Application Launcher.exe		= Motorola PcSync.
wdfmgr.exe	C:\WINDOWS\system32\ and C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-9...


-------------------------------------------------------------------------------------------------------