"System" Process on Windows 8

Q

What is the "System" process on Windows 8? Is the "System" process a virus? Can I terminate the "System" process?

✍: FYIcenter.com

A

"System - NT Kernel & System" process is the kernel process of Windows 8 operating system.

On the Processes tab of "Task Manager", "System" process may be listed as:

Image Name  PID  User Name   Memory  Description

System      4    SYSTEM      108 K    NT Kernel & System

Additional information about "System" process:

Started by: Boot program

Files used:

File  \clfs
File  \Device\Tcp
File  \Device\KsecDD
File  \Device\HarddiskVolume5
File  C:\hiberfil.sys
File  C:\pagefile.sys
File  C:\swapfile.sys
File  C:\Windows\bootstat.dat
File  C:\$Extend\$RmMetadata\$Txf
File  C:\Windows\System32\config\SAM
File  C:\Windows\System32\config\DEFAULT
File  C:\Windows\System32\config\SECURITY
File  C:\Windows\System32\config\SOFTWARE
File  C:\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
File  C:\Windows\System32\Drivers\en-US\USBXHCI.SYS.mui
File  C:\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000002
File  C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}
File  C:\Windows\System32\config\TxR\{4588951a-d6e0-11e1-b79d-001018953ae6}.TxR.2.regtrans-ms
File  X:\$Extend\$RmMetadata\$Txf
File  X:\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
File  C:\Windows\System32\config\RegBack\SECURITY
...
Key  HKU
Key  \REGISTRY
Key  HKLM\SYSTEM
Key  HKLM\SYSTEM\ControlSet001\Control\hivelist
Key  HKLM\SYSTEM\RNG
Key  HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER\MEMORY MANAGEMENT\PrefetchParameters
Key  HKLM\SYSTEM\Setup
Key  HKLM\SYSTEM\ControlSet001
Key  HKLM\SYSTEM\DriverDatabase
Key  HKLM\SYSTEM\ControlSet001\Enum
Key  HKLM\SYSTEM\ControlSet001\Control\DeviceClasses
Key  HKLM\SYSTEM\ControlSet001\Control\DeviceContainers
Key  HKLM\SYSTEM\ControlSet001\Control\Class
Key  HKLM\SYSTEM\ControlSet001\Services
Key  HKLM\SYSTEM\ControlSet001\Control\Notifications
Key  HKLM\SYSTEM\ControlSet001\Control\WMI\Security
Key  HKLM\SYSTEM\ControlSet001\Services\pci\Parameters
Key  HKLM\HARDWARE\DESCRIPTION\System\MultifunctionAdapter
...

"System" process is not a virus. You should not terminate "System" process.

 

"smss.exe" Process on Windows 8

"System Idle Process" on Windows 8

System Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials

2016-12-30, 2132🔥, 0💬