What are system processes? System process. Ending the process. Function ex1H()
The term "service" has many meanings in the Windows environment. Below are some of them relevant to the topic under consideration:
API service is an API function or subroutine that implements some action (service) of the operating system, such as creating a file or working with graphics (drawing lines or circles). For example, API function CreateProcess used in Windows to create a new process;
system service is an undocumented function that can be called from user mode. These functions are often used by Win32 API functions to provide low-level services. For example, API function CreateProcess to actually create a process calls a system service NTCreateProcess;
internal service - a function or subroutine that can only be called from code running in kernel mode. These functions belong to the low-level part Windows code: to the Windows NT executive system, to the kernel, or to the hardware abstraction layer (HAL).
System processes
System processes are special processes that maintain the operating system. The following system processes are constantly running in Windows (all of them, except the system process, run in user mode):
process idle, which consists of a single thread that manages processor idle time;
process system- a special process that runs only in kernel mode. Its threads are called system threads;
process Session Manager(session manager) - SMSS.EXE;
subsystem Win32- CSRSS.EXE;
registration process in the system - WinLogon(WINLOGON.EXE).
You can verify that these system processes are actually running on the system by looking at the Processes tab in Task Manager.
Let's look at some of these system processes.
Session Manager process
The Session Manager process (SMSS.EXE) is one of the first processes created by the operating system during the boot process. It performs important initialization functions such as creating system environment variables; setting MS DOS device names, for example, LPT1 and COM1; loading that part of the Win32 subsystem that belongs to kernel mode; starting the registration process in the WinLogon system.
WinLogon process
This system process manages how users log in and out of the system. Called by the special Windows key combination Ctrl+Alt+Delete. WinLogon is responsible for loading the Windows shell (usually Windows Explorer).
Process system
The system process consists of system threads, which are kernel-mode threads. Windows and many device drivers create system threads for various purposes. For example, the memory manager forms system threads to solve management tasks virtual memory,The cache manager uses system threads to manage the ,cache memory and the floppy disk driver to control the floppy ,disks.
Win32 subsystem
The Win32 subsystem is the main subject of our consideration. It is a type of environmental subsystem. Other subsystems Windows environment(not shown in the figure) include POSIX and OS/2. POSIX is an abbreviation for the term "portable" operating system UNIX-based" (portable operating system based on UNIX) and provides limited support for the UNIX operating system.
The purpose of the environment subsystem is to serve as an interface between user applications and the corresponding part of the Windows executive system. Each subsystem has its own functionality based on a single Windows executive system. Any executable file is inextricably linked to one of these subsystems. The Win32 subsystem contains the Win32 API as a set of DLLs, such as KERNEL32.DLL, GDI32.DLL and USER32.DLL.
In Windows NT, Microsoft moved part of the Win32 subsystem from user mode to kernel mode. Specifically, the kernel mode device driver WIN32K.SYS, which controls window display, screen output, keyboard and mouse input, and message passing. It also includes the Graphic Device Interface library (GDL.DLL), used to create graphics and text.
You can view a list of all programs running on your computer using Windows Task Manager. To do this, press the key combination on your keyboard. You will see a list of processes, and the question will immediately arise: why is each specific process in this list needed? Let's figure out what it is processes and how they can be managed.
Processes- that's all that happens in at the moment time in the system. IN Task Manager The “Processes” tab displays all currently running programs. Processes can be “spawned” either by the user or the system. System processes start when booting Windows; user processes are programs launched by the computer user himself or launched on his behalf. All system processes run as LOCAL SERVICE, NETWORK SERVICE or SYSTEM (this information available in Task Manager in the “Username” column).
The task manager only allows you to view the list of processes and terminate their work. To do this, select the process name in the list and click the “End Process” button. This means the program that owns the process is terminated. However, it is not possible to view information about a particular process in the Task Manager.
To manage Windows processes, I would recommend using a more powerful utility called . This is great free program, which also does not require installation. Download it, then run the file from the folder and select the “Processes” tab at the top.
shows all processes in real time, providing comprehensive information on each of them. Clicking right key mouse on the process we are interested in and selecting “File Properties”, we can find out the manufacturer software module, version, attributes and other information. The process context menu also allows you to go to the program folder, end the process, or find information about it on the Internet.
How to get rid of viruses on your computer using Starter?
Very often viruses and other malware disguise themselves as various processes. Therefore, if you notice that something is wrong with your computer, run an antivirus scan. If this does not help or your antivirus refuses to start at all, open Task Manager and view all running processes.
Pay special attention to a process if it is running as a user and is consuming too many resources (the “CPU” and “Memory” columns). If you find an obviously suspicious process in the list, end it and see how your system works after that. If you are in doubt or don’t know which program the running process belongs to, it’s better to go to Google or Yandex, enter search bar name of the process and find information about it.
The Task Manager built into Windows, of course, allows you to disable processes, but, unfortunately, it provides very little information about them, and therefore it is quite difficult to understand whether a process is viral. The Starter program is much more useful in this regard.
So, to find and remove a virus process from your computer, do the following::
1. Launch the program and go to the “Processes” tab.
2. We find a process that makes us suspicious. Right-click on it and select “File Properties”. For example, I chose the file svchost.exe. In the window that opens look at the manufacturing company of this application:
The fact is that practically any process is signed by its developer. But virus applications are usually not signed.
In my case the file svchost.exe signed by the company Microsoft Corporation and therefore we can trust him.
3. If the selected process turns out to be not signed by anyone or signed by some strange company, then again right-click on the name of this process and select “Search on the Internet” - “Google” (the Internet on the computer must be connected).
4. If the sites suggested by Google confirm that this process is a virus, then you need to go to the folder of this process (to do this, go to Starter in context menu select “Explorer to process folder”). Then, after completing the process, delete the file here this process.
If you still doubt whether it is a virus or not (perhaps you were unable to look up information about it on Google due to the lack of Internet), then you can simply change the extension from this file(for example, from .exe to .txt) and move it to another folder.
That's all. Today we learned what Windows processes are and what utilities can be used to manage them. In addition, we now know how to get rid of viruses masquerading as various processes.
As the key provisions of the reflex theory of P.K. Anokhin highlighted the following:
1. the exclusivity of the trigger stimulus as a factor determining the action that is its cause;
2. completion of a behavioral act with a reflex action, response;
3. forward movement of excitation along the reflex arc.
All these provisions are rejected when considering behavior from the perspective of TPS [Anokhin, 1978].
The presence of a trigger stimulus is not sufficient for the emergence of adequate behavior. It arises: a) after training, i.e. if appropriate memory material is available; b) in the presence of appropriate motivation and c) in the appropriate environment. These components were, of course, considered by other authors, but only as modulators or conditions under which a given stimulus causes a given reaction associated with it. PC. Anokhin noted that when a given stimulus appears and conditions change, the animal can achieve the result of behavior in the most in different ways, never associated with this stimulus. For example, instead of approaching the feeder, it can swim to it if the water suddenly becomes an obstacle.
According to TFS, the integration of all these components is carried out within the framework of a special systemic mechanism of afferent synthesis, during which, based on motivation, taking into account the situation and past experience, conditions are created for eliminating excess degrees of freedom - making decisions about what, how and when to do, in order to obtain a useful adaptive result. Decision making ends with the formation of an acceptor of action results, which is an apparatus for predicting the parameters of future results: stage and final, and comparing them with the parameters of the results actually obtained during the implementation of the action program. When compared with the parameters of the obtained stage results, the compliance of the progress of the program with the planned one is revealed (for more details, see [Batuev, 1978; Pashina, Shvyrkov, 1978]) when compared with the final parameters - the correspondence of the achieved relationship between the organism and the environment with the one for which the system was formed. These system mechanisms constitute the operational architectonics of any functional system(Fig. 14.1). Their introduction into the conceptual scheme is the second most important advantage and feature that distinguishes TFS from other options for the systems approach.
The formation in TPS of the idea that the integration of elementary physiological processes is carried out within the framework of qualitatively different specific system processes was of fundamental importance for the development of a psychophysiological approach to the analysis of behavior and activity, as well as a systemic solution to a psychophysiological problem (see paragraph 5). The development of ideas about the qualitative specificity of integration processes was the discovery of a new type of processes in the whole organism - systemic processes that organize particular physiological processes, but are not reducible to the latter.
The discovery of systemic processes made it possible, in contrast to considering material-energy relations between local impact and reaction as the basis for behavior, to treat behavior as an exchange of organization, or information, between the organism and the environment, carried out within the framework of these information processes. At the same time, the position was substantiated that the system categories of TPS describe simultaneously both the organization of the activity of the elements of the body and its connection with the organization of the external environment [Shvyrkov, 1995].
In stable conditions, for example in a laboratory experiment, the trigger stimulus implements ready-made pre-launch integration, which can be characterized as the readiness of systems for future behavior, formed in the process of performing the previous one. It is directed to the future, but the stability of the situation makes the stimulus-response connection obvious. However, analysis of neural activity in behavior clearly shows that the organization of the latter is determined by what result is achieved in this behavior, while the stimulus only “launches”, “allows” implementation. In cases where the same stimulus in terms of physical parameters “triggers” different behavioral acts (for example, food-procuring or defensive), not only the characteristics of neuronal activity turn out to be different in these acts, but even the very set of cells involved, including in “stimulus-specific” areas of the brain (for example, in the visual cortex when a visual stimulus is presented; see [Shvyrkova, 1979; Aleksandrov, 1989]).
Rice. 14.1. Functional system and behavioral continuum
Operational architectonics of a functional system according to P.K. Anokhin (above). For information on the systemic mechanisms that make up the operational architectonics, see paragraph 2. The arrows from “dominant motivation” to “memory” demonstrate that the nature of the information retrieved from memory is determined by the dominant motivation. The diagram also illustrates the idea that the acceptor of action results contains models of stage results along with the final result and that the model of the latter is represented not by a single characteristic, but by a complex of parameters.
Behavioral continuum (bottom). Р n’, Р n+1 – results of behavioral acts; p1,2,3,– milestone results; T- transformation processes (see paragraph 2). For sets of systems that ensure the implementation of successive acts of the continuum (each set has its own type of shading) and for the involvement in transformation processes of systems that are not involved in the implementation of acts, the replacement of which by these processes is ensured (these systems are indicated by unshaded ovals), see paragraph 7
The second position of the reflex theory, which is rejected by TFS, is the assessment of action as the final stage of a behavioral act. From the perspective of TFS, the final stage of the act deployment is a comparison of the parameters predicted in the acceptor with the parameters of the actually obtained result. If the parameters correspond to the predicted ones, then the individual implements the next behavioral act; if not, then a mismatch arises in the acceptor apparatus, leading to a restructuring of programs for achieving results.
Finally, TFS rejects the proposition that excitation progresses along the reflex arc. In accordance with this position, the implementation of behavior is ensured by the activation of brain structures that are sequentially involved in the reaction: first, sensory structures that process sensory information, then effector structures that form excitation that activates glands, muscles, etc. However, numerous experiments have shown that during the implementation of a behavioral act there is not a sequential activation of afferent and efferent structures, but a synchronous activation of neurons located in various areas of the brain. The pattern of activation of neurons in these structures turns out to be general and has a general cerebral character. The components of this pattern - successive phases of activation - correspond to the sequence of deployment of the previously described system mechanisms (see [Shvyrkov, 1978, 1995]). Experimental results confirming the synchronicity of neuronal activation in behavior continue to accumulate in lately, and they are given increasing importance in understanding not only the organization of definitive behavior, but also learning.
Thus, the involvement of neurons in different brain regions in system processes occurs synchronously. These processes are general cerebral and cannot be localized in any area of the brain. In different areas of the brain, behavior is not local afferent or efferent, but the same general cerebral systemic processes of organizing neuronal activity into a system that is not sensory or motor, but functional. The activity of neurons in these areas does not reflect the processing of sensory information or the processes of movement regulation, but the involvement of neurons in certain phases of organization (afferent synthesis and decision making) and implementation of the system. The activity of any structure simultaneously corresponds to both certain properties of the environment and the nature of motor activity.
A single pattern of activation and synchronicity of involvement of neurons in different areas of the brain in general cerebral system processes does not mean equipotentiality (equivalence) of brain structures; the contribution of these structures to ensuring behavior depends on the specifics of the projection of individual experience onto them (see paragraph 8).
This article is not a complete and detailed guide to system Windows processes. This article can rather help determine which of them are real and which are not. you ask, how can this be? The answer is very simple. What's happened computer virus? Essentially this simple program, but it only harms and works without your knowledge.
And in order for it to work, a process must be started in the system. Often the virus generates new process from the system, which can cause certain problems. But more on that below. It is recommended to use programs to view running processes in the form of process trees, which simplifies recognition.
So, a list of “allowed” system processes and processes. Sometimes running virus processes generate a process name that matches the system one. They can be distinguished by their abnormally large memory allocation and completion capability. Such processes are marked with an exclamation mark.
explorer.exe – graphical shell. Once you disable it, the average user will only have the task manager and the command line (which, however, still needs to be launched) from the system management tools.
internat.exe – loads the tray icon of the language being used. It’s better not to touch, although, in principle, nothing critical. taskmgr.exe is the task manager itself. If you are using a third-party program, you can safely disable it so as not to consume system resources (since it has the highest priority).
(!)lsass.exe – generates a user tag for the system. Important system process. It is not possible to disable it manually. mstask.exe – task scheduler. It's useless, but you can't turn it off either. smss.exe – is responsible for starting a session for a specific user. It is impossible to disable.
(!)svchost.exe is the source process for all processes that use the DLL. Favorite nest of viruses. Before you disable it, you need to look at who called it and from which folder. You need to be careful not to disable any important ongoing process.
services.exe – system services manager. It is impossible to turn it off. If a malicious process is spawned from it. nothing can be done about it. Use an antivirus.
system – process of the “kernel” of the system. Accordingly, it is also impossible to turn it off.
Thus, it is possible to distinguish a malicious process, although it is not always easy. Often, executable files have randomly generated names (like x8er45yu67rw) or names that should make the user confident that they are a system component. To prevent such deception, you need to know where and what executable file is located (however, this applies only to the most basic processes - you can read their list above). But if the “system” process is not launched from the WINDOWS folder, this is already a good reason to suspect and unload it from memory. However, it is recommended to always use an antivirus, since simple removal cannot always help; viruses often change the registry and system files, and antivirus systems are required for rollback. However, this knowledge may be useful to you when, for example, your computer is infected with a new virus that prohibits access to the Internet, but this virus is not in the database of your antivirus. Then, obviously, you need to delete the virus process, download the database update and remove the virus completely from the antivirus itself.
Submissions
The theory of P.K. Anokhin as an integral system
So, the first most important advantage and feature that distinguishes TFS from other variants of the systems approach is the introduction of the idea of the result of an action into the conceptual scheme. Thus, TFS, firstly, included an isomorphic system-forming factor in the conceptual apparatus of the systems approach and, secondly, radically changed the understanding of the determination of behavior.
It should be noted that when a certain theory has already been clearly formulated, a retrospective analysis of the literature may reveal statements that anticipated any of its set of provisions. This is the situation with TFS. Thus, J. Dewey noted at the end of the last century that “action is determined not by previous events, but by the required result.” In the 20s In the 20th century, A. A. Ukhtomsky put forward the concept of a “moving functional organ,” which meant any combination of forces leading to a certain result. Nevertheless, we find a holistic system of ideas, justified not only theoretically, but also by the richest experimental material, precisely in TFS. Its integrity and consistency lies in the fact that the idea of activity and purposefulness is not simply included in TPS along with other provisions, but actually determines the main content, theoretical and methodological apparatus of the theory. This idea defines both approaches to the analysis of specific mechanisms for achieving behavioral results, operating at the level of the whole organism, and an understanding of the organization of the activity of an individual neuron (see paragraph 3). How does TFS answer the question about the mechanisms that ensure the integration of elements into a system and the achievement of its result? What provisions of the reflex theory made P.K. Anokhin (a student of I.P. Pavlov) reject the logic of the consistent development of systemic ideas, which took TFS beyond the “framework of reflex” [Sudakov, 1996]?
As the key provisions of the reflex theory, P.K. Anokhin identified the following: a) the exclusivity of the trigger stimulus as a factor determining the action that is its cause; b) completion of a behavioral act with a reflex action, response, and c) forward progression of excitation along a reflex arc. All these provisions are rejected when considering behavior from the perspective of TPS [Anokhin, 1978].
The presence of a trigger stimulus is not sufficient for the emergence of adequate behavior. It arises: a) after training, i.e., in the presence of appropriate memory material; b) in the presence of appropriate motivation and c) in the appropriate environment. These components were, of course, considered by other authors, but only as modulators or conditions under which a given stimulus causes a given reaction associated with it. P.K. Anokhin noted that when the same stimulus appears and conditions change, an animal can achieve the result of behavior in a variety of ways that have never been associated with this stimulus. For example, instead of approaching the feeder, it can swim to it if the water suddenly becomes an obstacle.
According to TFS, the integration of all these components is carried out within the framework of a special systemic mechanism of afferent synthesis, during which, based on motivation, taking into account the situation and past experience, conditions are created for eliminating excess degrees of freedom - making decisions about what, how and when to do so that obtain a useful adaptive result. Decision making ends with the formation of an acceptor of action results, which is an apparatus for predicting the parameters of future results: stage and final, and comparing them with the parameters of the results actually obtained during the implementation of the action program. When compared with the parameters of the obtained stage results, the compliance of the progress of the program with the planned one is revealed (for more details, see [Batuev, 1978; Pashina, Shvyrkov, 1978]) when compared with the final parameters - the correspondence of the achieved relationship between the organism and the environment with the one for which the system was formed. These system mechanisms constitute the operational architectonics of any functional system (Fig. 14.1). Their introduction into the conceptual scheme is the second most important advantage and feature that distinguishes TFS from other options for the systems approach.
Rice. 14.1. Functional system and behavioral continuum
Operational architectonics of a functional system according to P.K. Anokhin (top). For information on the systemic mechanisms that make up the operational architectonics, see paragraph 2. The arrows from “dominant motivation” to “memory” demonstrate that the nature of the information retrieved from memory is determined by the dominant motivation. The diagram also illustrates the idea that the acceptor of action results contains models of stage results along with the final result and that the model of the latter is represented not by a single characteristic, but by a complex of parameters
Behavioral continuum (bottom). Р n, Р n+1 - results of behavioral acts; p 1,2,3 - stage results; T-transformation processes (see paragraph 2). For sets of systems that ensure the implementation of successive acts of the continuum, and for the involvement in transformation processes of systems that are not involved in the implementation of acts, the replacement of which by these processes is ensured (these systems are indicated by open ovals), see paragraph 7
The formation in TPS of the idea that the integration of elementary physiological processes is carried out within the framework of qualitatively different specific system processes was of fundamental importance for the development of a psychophysiological approach to the analysis of behavior and activity, as well as a systemic solution to a psychophysiological problem (see paragraph 5). The development of ideas about the qualitative specificity of integration processes was the discovery of a new type of processes in the whole organism - system processes that organize particular physiological processes, but are not reducible to the latter.
The discovery of systemic processes made it possible, in contrast to considering material-energy relations between local impact and reaction as the basis of behavior, to interpret behavior as an exchange of organization, or information, between the organism and the environment, carried out within the framework of these information processes. At the same time, the position was substantiated that the system categories of TPS describe simultaneously both the organization of the activity of the elements of the body and the connection of this activity with the organization of the external environment [Shvyrkov, 1995].
In stable conditions, for example in a laboratory experiment, the appearance of a trigger stimulus makes it possible to implement pre-launch integration, which can be characterized as the readiness of systems for future behavior, formed in the process of performing the previous one. It is directed to the future, but the stability of the situation makes the stimulus-response connection obvious. However, analysis of neural activity in behavior clearly shows that the organization of the latter is determined by what result is achieved in this behavior, while the stimulus only “permits” the implementation of behavior. In cases where the same stimulus in terms of physical parameters “triggers” different behavioral acts (for example, food-procuring or defensive), not only the characteristics of neuronal activity turn out to be different in these acts, but even the very set of cells involved, including in “stimulus-specific” areas of the brain (for example, in the visual cortex when a visual stimulus is presented; see [Shvyrkova, 1979; Aleksandrov, 1989]).
The second position of the reflex theory, which is rejected by TFS, is the assessment of action as the final stage of a behavioral act. From the perspective of TFS, the final stage of the act deployment is the comparison of the parameters predicted in the acceptor with the parameters of the actually obtained result. If the parameters correspond to the predicted ones, then the individual implements the next behavioral act; if not, then a mismatch arises in the acceptor apparatus, leading to a restructuring of programs for achieving results.
Finally, TFS rejects the proposition that excitation progresses along the reflex arc. In accordance with this position, the implementation of behavior is ensured by the activation of brain structures that are successively involved in the reaction: first, sensory structures that process sensory information, then effector structures that form excitation that activates glands, muscles, etc. However, we [Alexandrov, Shvyrkov, 1974 ], as well as the work of the laboratories of J. Olds and especially E. R. John (see in) it was shown that during the implementation of a behavioral act there is not a sequential activation of afferent and efferent structures, but a synchronous activation of neurons located in various areas of the brain . The pattern of neuron activation in these structures turns out to be general and has a general cerebral character. The components of this pattern - successive phases of activation - correspond to the sequence of deployment of the previously described system mechanisms (see [Shvyrkov, 1978, 1995]). This applies not only to brain neurons. For example, it was discovered that in the latent period of a behavioral act (see below about transformational processes), long before the start of its implementation and synchronously with the neurons of the brain, the activity of elements that are usually associated exclusively with “executive” mechanisms is rearranged: muscle units, receptors muscle spindles [Alexandrov, 1989].
Already more than thirty years ago, the critical importance of the phenomenon of synchronicity was obvious. From the standpoint of reflex theory, it was assumed that the synchrony of distant structures ensures an improvement in the conduction of excitation along the reflex arc. From the standpoint of TPS, it was concluded that this phenomenon is evidence of the synchronous involvement of elements of different anatomical localization in system processes. These processes are organism-wide and cannot be localized in any area of the brain or in any part of the body. In different areas of the brain in behavioral acts, it is not local afferent or efferent processes that occur, but the same general cerebral systemic processes of organizing the activity of neurons into a system that is not sensory or motor, but functional. The activity of neurons in these areas does not reflect the processing of sensory information or the processes of movement regulation, but the involvement of neurons in certain phases of organization (afferent synthesis and decision making) and implementation of the system. The activity of any structure simultaneously corresponds to both certain properties of the environment and the nature of motor activity [Shvyrkov 1978; Shvyrkov, Aleksandrov, 1973].
In recent years, the phenomenon of synchronicity of activation of different areas of the brain (including the spinal cord) in behavior has been rediscovered and is being given increasing importance. Arguments are given in favor of the fact that synchrony is a characteristic of brain activity that is mandatory for the functioning of consciousness, updating memory material, organizing and implementing behavior. Since the organization and implementation of behavior occurs due to the activation of systems extracted from memory (see below), and consciousness can be considered as one of the characteristics of the systemic organization of behavior (see in), all the terms highlighted above are different aspects of the description of the systemic structure of the latter . Therefore, the above points of view of different authors are in accordance with the systemic interpretation of synchronicity that we gave earlier.
A single activation pattern and synchronicity of the involvement of neurons in different brain regions in general cerebral system processes do not mean equipotentiality (equivalence) of brain structures; the contribution of these structures to ensuring behavior depends on the specifics of the projection of individual experience onto them (see paragraph 8).