Below is a list of proccesses in which are all safe if they are in the right default location. I will be adding the locations, and a definition of the process. Some of the info will come from my head, others will come from one of the two links in which I will place at the bottom of this thread.
I'd like to start with a tip or so, depending on if I think of any. Before you question a service or a process, think about what the words could be shortened as, such as svchost.exe. Does it sound like infectionhost.exe, or does it sound like servicehost.exe?
conhost.exe
csrss.exe
ctfmon.exe
Dannyhost.exe
dllhost.exe
dwm.exe
explorer.exe
igfxpers.exe
jusched.exe
jqs.exe
lsass.exe
nvsvc32.exe
plugin-container.exe
rundll32.exe
searchfilterhost.exe
smss.exe
soundman.exe
spoolsv.exe
svchost.exe
services.exe
taskhost.exe
taskmgr.exe
Teatimer.exe
winlogon.exe
wscntfy.exe
wuauclt.exe
