polecam program Process Exploler
http://www.instalki.pl/programy/downloa ... rer_XP.php
naciskasz na proces, prawym na niego i na sam duł naciskasz "search online..." tam po angielsku pisze od czego jest.
w przypadku guard.exe jest napisane "guard.exe is a process belonging to Phoenix Technologies and is part of Core Managed Environment (cME) Integration and Certification program. This process should not be removed to ensure that your system is secure. "