The following system processes appear on every Windows system. (Two of these—Idle and System—are not full processes, as they are not running a user-mode executable.) ■ Idle process (contains one thread per CPU to account for idle CPU time) ■ System process (contains the majority of the kernel-mode system threads)
Processes are identified by their image name. However, this process (as well as the process named System) isn’t running a real user-mode image (in that there is no “System Idle Process.exe” in the \Windows directory). In addition, the name shown for this process differs from utility to utility (because of implementation details).
System—are not full processes, as they are not running a user-mode executable.)
■ Idle process (contains one thread per CPU to account for idle CPU time)
■ System process (contains the majority of the kernel-mode system threads)