i found a description of some of the processes i didn't know from these web sites:
http://www.liutilities.com/products/wintaskspro/processlibrary/
and
http://www.neuber.com/taskmanager/process/index.html
maybe one of the guys with more knowledge than I can interpret some of them.
mcshield.exe: this process is associated with McAfee's Internet Security suite. More specifically, it is essential to the Antivirus software and should not be removed.
wisptis.exe is a product which is installed alongside Microsoft office or comes packaged with Windows update. This process deals with 'Windows ink services' and tends to run alongside Adobe Acrobat Reader. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
realsched.exe is a program which schedules for manual update checks for Real Networks products. This is a non-essential process. Disabling or enabling this is down to user preference however disabling may prevent notification of updates.
jusched.exe is a process installed alongside Sun Microsystem's Java suite and checks for Java updates which involves usage of the Internet. This program is important for the stable and secure running of your computer's Internet browsing and Java usage and should not be terminated.
updaterui.exe belongs to the McAfee Enterprise 7.0 application. This process should not be removed to ensure that your system is secure.
tbmon.exe is a process belonging to the Network Associates Internet Security suite and acts as an error reporter for their range of AntiVirus products. This program is important for the stable and secure running of your computer and should not be terminated.
shstat.exe: is an application which deals with McAfee process-to-process communications. This program is important for the stable and secure running of your computer and should not be terminated.
viewmgr.exe: is responsible for managing and updating ViewPoint Media Player's components. Similar to Flash, Acrobat, Windows, QuickTime, etc., Viewpoint posts updates toits servers and occasionally the ViewPoint Media Player will check to make sure that it's the latest version. If you'd rather not allow the player to check for updates, you can disable this in your Viewpoint Manager Control Panel which can be found in the Windows Control Panel menu. By selecting "Disable auto-updating for the Viewpoint Manager" -- the player will no longer attempt to check for updates. At no time does ViewPoint Media Player or the Viewpoint Manager collect ANY personal data about you or your usage patterns, nor does it install third-party software or access information on your hard drive.
wdfmgr.exe is part of Microsoft Windows Media Player 10 and above. This process decreases compatibility problems whilst the product is in use. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
naprdmgr.exe is a process belonging to the McAfee ePolicy Orchestrator and deals with the product management. This program is important for the stable and secure running of your computer and should not be terminated.
vstskmgr.exe is a process belonging to the McAfee Internet Security Suite and protects your computer from Internet-bound threats. This program is important for the stable and secure running of your computer and should not be terminated.
frameworkservice.exe is a process by Network Associates belonging to their E-policy orchestrator anti-virus suite. This program is important for the stable and secure running of your computer and should not be terminated.
alg.exe is a process belonging to Microsoft Windows Operating System. It is a core process for Microsoft Windows Internet Connection sharing and Internet connection firewall. This program is important for the stable and secure running of your computer and should not be terminated.
Also: Application Layer Gateway service is a component of of Windows OS. It is required if you use a 3rd party firewall or Internet Connection Sharing (ICS) to connect to the internet. Do not end this program in task manager - you will lose all internet connectivity until next restart or login.
lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. This program is important for the stable and secure running of your computer and should not be terminated.
Note: lsass.exe can be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.
Note: lsass.exe is registered as a downloader. This process usually comes bundled with a virus or spyware and its main role is to do nothing other than download other viruses/spyware to your computer. This process is a security risk and should be removed from your system.
Determining whether lsass.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
http://www.neuber.com/taskmanager/process/index.html
csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows. This program is important for the stable and secure running of your computer and should not be terminated.
Note: csrss.exe can be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.
Determining whether csrss.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks. The real one is found in C:\Windows\System32.
smss.exe is a process which is a part of the Microsoft Windows Operating System. It is called the Session Manager Subsystem and is responsible for handling sessions on your system. This program is important for the stable and secure running of your computer and should not be terminated.
Note: smss.exe can be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.
Determining whether smss.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks. The real one is found in C:\Windows\System32.
