LanHelper Report - Services

Generated on 2009-4-18 22:38:24      Machines: 2


Service Display Name Status Startup Type Account Description Module
 VM3 Top  
Alerter Alerter Stopped Disabled NT AUTHORITY\LocalService Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k LocalService
ALG Application Layer Gateway Service Running Manual NT AUTHORITY\LocalService Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall. C:\WINDOWS\System32\alg.exe
AppMgmt Application Management Stopped Manual LocalSystem Provides software installation services such as Assign, Publish, and Remove. C:\WINDOWS\system32\svchost.exe -k netsvcs
AudioSrv Windows Audio Stopped Disabled LocalSystem Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
BITS Background Intelligent Transfer Service Stopped Disabled LocalSystem Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly. C:\WINDOWS\system32\svchost.exe -k netsvcs
Browser Computer Browser Running Automatic LocalSystem Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k netsvcs
CiSvc Indexing Service Stopped Disabled LocalSystem Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. C:\WINDOWS\system32\cisvc.exe
ClipSrv ClipBook Stopped Disabled LocalSystem Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\clipsrv.exe
COMSysApp COM+ System Application Stopped Manual LocalSystem Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
CryptSvc Cryptographic Services Running Automatic LocalSystem Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k netsvcs
DcomLaunch DCOM Server Process Launcher Running Automatic LocalSystem Provides launch functionality for DCOM services. C:\WINDOWS\system32\svchost -k DcomLaunch
Dhcp DHCP Client Running Automatic LocalSystem Manages network configuration by registering and updating IP addresses and DNS names. C:\WINDOWS\system32\svchost.exe -k netsvcs
dmadmin Logical Disk Manager Administrative Service Stopped Manual LocalSystem Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. C:\WINDOWS\System32\dmadmin.exe /com
dmserver Logical Disk Manager Running Automatic LocalSystem Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
Dnscache DNS Client Running Automatic NT AUTHORITY\NetworkService Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k NetworkService
ERSvc Error Reporting Service Stopped Disabled LocalSystem Allows error reporting for services and applictions running in non-standard environments. C:\WINDOWS\System32\svchost.exe -k netsvcs
Eventlog Event Log Running Automatic LocalSystem Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. C:\WINDOWS\system32\services.exe
EventSystem COM+ Event System Running Manual LocalSystem Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k netsvcs
FastUserSwitchingCompatibility Fast User Switching Compatibility Stopped Manual LocalSystem Provides management for applications that require assistance in a multiple user environment. C:\WINDOWS\System32\svchost.exe -k netsvcs
helpsvc Help and Support Stopped Disabled LocalSystem Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
HidServ Human Interface Device Access Stopped Disabled LocalSystem Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
HTTPFilter HTTP SSL Stopped Manual LocalSystem This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k HTTPFilter
lanmanserver Server Running Automatic LocalSystem Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k netsvcs
lanmanworkstation Workstation Running Automatic LocalSystem Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k netsvcs
LmHosts TCP/IP NetBIOS Helper Running Automatic NT AUTHORITY\LocalService Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. C:\WINDOWS\system32\svchost.exe -k LocalService
Messenger Messenger Stopped Manual LocalSystem Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k netsvcs
mnmsrvc NetMeeting Remote Desktop Sharing Stopped Disabled LocalSystem Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\mnmsrvc.exe
MSDTC Distributed Transaction Coordinator Stopped Manual NT AUTHORITY\NetworkService Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\msdtc.exe
MSIServer Windows Installer Stopped Manual LocalSystem Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\msiexec.exe /V
NetDDE Network DDE Stopped Manual LocalSystem Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\netdde.exe
NetDDEdsdm Network DDE DSDM Stopped Manual LocalSystem Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\netdde.exe
Netlogon Net Logon Stopped Manual LocalSystem Supports pass-through authentication of account logon events for computers in a domain. C:\WINDOWS\system32\lsass.exe
Netman Network Connections Running Manual LocalSystem Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. C:\WINDOWS\System32\svchost.exe -k netsvcs
Nla Network Location Awareness (NLA) Running Manual LocalSystem Collects and stores network configuration and location information, and notifies applications when this information changes. C:\WINDOWS\system32\svchost.exe -k netsvcs
NtLmSsp NT LM Security Support Provider Stopped Manual LocalSystem Provides security to remote procedure call (RPC) programs that use transports other than named pipes. C:\WINDOWS\system32\lsass.exe
NtmsSvc Removable Storage Stopped Manual LocalSystem C:\WINDOWS\system32\svchost.exe -k netsvcs
ntrtscan OfficeScanNT ʵʱɨ Stopped Disabled LocalSystem C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
OfcPfwSvc OfficeScanNT ˷ǽ Stopped Disabled LocalSystem C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
PlugPlay Plug and Play Running Automatic LocalSystem Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. C:\WINDOWS\system32\services.exe
PolicyAgent IPSEC Services Running Automatic LocalSystem Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. C:\WINDOWS\system32\lsass.exe
ProtectedStorage Protected Storage Running Automatic LocalSystem Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. C:\WINDOWS\system32\lsass.exe
RasAuto Remote Access Auto Connection Manager Stopped Manual LocalSystem Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. C:\WINDOWS\system32\svchost.exe -k netsvcs
RasMan Remote Access Connection Manager Running Manual LocalSystem Creates a network connection. C:\WINDOWS\system32\svchost.exe -k netsvcs
RDSessMgr Remote Desktop Help Session Manager Stopped Manual LocalSystem Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. C:\WINDOWS\system32\sessmgr.exe
RemoteAccess Routing and Remote Access Stopped Disabled LocalSystem Offers routing services to businesses in local area and wide area network environments. C:\WINDOWS\system32\svchost.exe -k netsvcs
RemoteRegistry Remote Registry Running Automatic NT AUTHORITY\LocalService Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k LocalService
RpcLocator Remote Procedure Call (RPC) Locator Stopped Manual NT AUTHORITY\NetworkService Manages the RPC name service database. C:\WINDOWS\system32\locator.exe
RpcSs Remote Procedure Call (RPC) Running Automatic NT AUTHORITY\NetworkService Provides the endpoint mapper and other miscellaneous RPC services. C:\WINDOWS\system32\svchost -k rpcss
RSVP QoS RSVP Stopped Manual LocalSystem Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets. C:\WINDOWS\system32\rsvp.exe
SamSs Security Accounts Manager Running Automatic LocalSystem Stores security information for local user accounts. C:\WINDOWS\system32\lsass.exe
SCardSvr Smart Card Stopped Manual NT AUTHORITY\LocalService Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\SCardSvr.exe
Schedule Task Scheduler Running Automatic LocalSystem Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
seclogon Secondary Logon Running Automatic LocalSystem Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
SENS System Event Notification Running Automatic LocalSystem Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. C:\WINDOWS\system32\svchost.exe -k netsvcs
SharedAccess Windows Firewall/Internet Connection Sharing (ICS) Running Automatic LocalSystem Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. C:\WINDOWS\system32\svchost.exe -k netsvcs
ShellHWDetection Shell Hardware Detection Stopped Disabled LocalSystem Provides notifications for AutoPlay hardware events. C:\WINDOWS\System32\svchost.exe -k netsvcs
Spooler Print Spooler Stopped Manual LocalSystem Loads files to memory for later printing. C:\WINDOWS\system32\spoolsv.exe
srservice System Restore Service Stopped Disabled LocalSystem Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties C:\WINDOWS\system32\svchost.exe -k netsvcs
SSDPSRV SSDP Discovery Service Stopped Disabled NT AUTHORITY\LocalService Enables discovery of UPnP devices on your home network. C:\WINDOWS\system32\svchost.exe -k LocalService
stisvc Windows Image Acquisition (WIA) Stopped Disabled LocalSystem Provides image acquisition services for scanners and cameras. C:\WINDOWS\system32\svchost.exe -k imgsvc
SwPrv MS Software Shadow Copy Provider Stopped Disabled LocalSystem Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\dllhost.exe /Processid:{0EEAE51E-64C9-4AE5-A816-AE20042B0B4F}
SysmonLog Performance Logs and Alerts Stopped Manual NT Authority\NetworkService Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\smlogsvc.exe
TapiSrv Telephony Running Manual LocalSystem Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service. C:\WINDOWS\System32\svchost.exe -k netsvcs
TermService Terminal Services Stopped Disabled LocalSystem Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server. C:\WINDOWS\System32\svchost -k DComLaunch
Themes Themes Running Automatic LocalSystem Provides user experience theme management. C:\WINDOWS\System32\svchost.exe -k netsvcs
TlntSvr Telnet Stopped Disabled LocalSystem Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\tlntsvr.exe
tmlisten OfficeScanNT Stopped Disabled LocalSystem C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
TPAutoConnSvc TP AutoConnect Service Stopped Disabled LocalSystem ThinPrint .print component for automatic creation of printer objects "C:\Program Files\VMware\VMware Tools\TPAutoConnSvc.exe"
TrkWks Distributed Link Tracking Client Stopped Disabled LocalSystem Maintains links between NTFS files within a computer or across computers in a network domain. C:\WINDOWS\system32\svchost.exe -k netsvcs
UMWdf Windows User Mode Driver Framework Stopped Manual NT AUTHORITY\LocalService ??? Windows ???꨺??y?3D? C:\WINDOWS\system32\wdfmgr.exe
upnphost Universal Plug and Play Device Host Stopped Manual NT AUTHORITY\LocalService Provides support to host Universal Plug and Play devices. C:\WINDOWS\system32\svchost.exe -k LocalService
UPS Uninterruptible Power Supply Stopped Disabled NT AUTHORITY\LocalService Manages an uninterruptible power supply (UPS) connected to the computer. C:\WINDOWS\System32\ups.exe
VMTools VMware Tools Service Running Automatic LocalSystem Provides support for synchronizing objects between the host and guest operating systems. "C:\Program Files\VMware\VMware Tools\VMwareService.exe"
VSS Volume Shadow Copy Stopped Disabled LocalSystem Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\vssvc.exe
W32Time Windows Time Stopped Disabled LocalSystem Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
WebClient WebClient Stopped Disabled NT AUTHORITY\LocalService Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k LocalService
winmgmt Windows Management Instrumentation Running Automatic LocalSystem Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k netsvcs
WmdmPmSN Portable Media Serial Number Service Stopped Manual LocalSystem Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device. C:\WINDOWS\System32\svchost.exe -k netsvcs
Wmi Windows Management Instrumentation Driver Extensions Stopped Manual LocalSystem Provides systems management information to and from drivers. C:\WINDOWS\System32\svchost.exe -k netsvcs
WmiApSrv WMI Performance Adapter Stopped Manual LocalSystem Provides performance library information from WMI HiPerf providers. C:\WINDOWS\system32\wbem\wmiapsrv.exe
wscsvc Security Center Stopped Disabled LocalSystem Monitors system security settings and configurations. C:\WINDOWS\System32\svchost.exe -k netsvcs
wuauserv Automatic Updates Stopped Disabled LocalSystem Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. C:\WINDOWS\system32\svchost.exe -k netsvcs
WZCSVC Wireless Zero Configuration Stopped Disabled LocalSystem Provides automatic configuration for the 802.11 adapters C:\WINDOWS\System32\svchost.exe -k netsvcs
xmlprov Network Provisioning Service Stopped Manual LocalSystem Manages XML configuration files on a domain basis for automatic network provisioning. C:\WINDOWS\System32\svchost.exe -k netsvcs
 192.168.10.33 Top  
Alerter Alerter Stopped Manual NT AUTHORITY\LocalService Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k LocalService
ALG Application Layer Gateway Service Stopped Manual NT AUTHORITY\LocalService Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Internet Connection Firewall C:\WINDOWS\System32\alg.exe
AppMgmt Application Management Stopped Manual LocalSystem Provides software installation services such as Assign, Publish, and Remove. C:\WINDOWS\system32\svchost.exe -k netsvcs
AudioSrv Windows Audio Running Automatic LocalSystem Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
BITS Background Intelligent Transfer Service Stopped Manual LocalSystem Uses idle network bandwidth to transfer data. C:\WINDOWS\System32\svchost.exe -k netsvcs
Browser Computer Browser Running Automatic LocalSystem Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
cisvc Indexing Service Stopped Manual LocalSystem Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. C:\WINDOWS\System32\cisvc.exe
ClipSrv ClipBook Stopped Manual LocalSystem Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\clipsrv.exe
COMSysApp COM+ System Application Stopped Manual LocalSystem Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
CryptSvc Cryptographic Services Running Automatic LocalSystem Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k netsvcs
Dhcp DHCP Client Running Automatic LocalSystem Manages network configuration by registering and updating IP addresses and DNS names. C:\WINDOWS\System32\svchost.exe -k netsvcs
dmadmin Logical Disk Manager Administrative Service Stopped Manual LocalSystem Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. C:\WINDOWS\System32\dmadmin.exe /com
dmserver Logical Disk Manager Running Automatic LocalSystem Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
Dnscache DNS Client Running Automatic NT AUTHORITY\NetworkService Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k NetworkService
ERSvc Error Reporting Service Running Automatic LocalSystem Allows error reporting for services and applictions running in non-standard environments. C:\WINDOWS\System32\svchost.exe -k netsvcs
Eventlog Event Log Running Automatic LocalSystem Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. C:\WINDOWS\system32\services.exe
EventSystem COM+ Event System Running Manual LocalSystem Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
FastUserSwitchingCompatibility Fast User Switching Compatibility Running Manual LocalSystem Provides management for applications that require assistance in a multiple user environment. C:\WINDOWS\System32\svchost.exe -k netsvcs
helpsvc Help and Support Running Automatic LocalSystem Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
HidServ Human Interface Device Access Stopped Disabled LocalSystem Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
ImapiService IMAPI CD-Burning COM Service Stopped Manual LocalSystem Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\imapi.exe
lanmanserver Server Running Automatic LocalSystem Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
lanmanworkstation Workstation Running Automatic LocalSystem Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
LmHosts TCP/IP NetBIOS Helper Running Automatic NT AUTHORITY\LocalService Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. C:\WINDOWS\System32\svchost.exe -k LocalService
Messenger Messenger Running Automatic LocalSystem Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
mnmsrvc NetMeeting Remote Desktop Sharing Stopped Manual LocalSystem Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\mnmsrvc.exe
MSDTC Distributed Transaction Coordinator Stopped Manual NT AUTHORITY\NetworkService Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\msdtc.exe
MSIServer Windows Installer Stopped Manual LocalSystem Installs, repairs and removes software according to instructions contained in .MSI files. C:\WINDOWS\System32\msiexec.exe /V
NetDDE Network DDE Stopped Manual LocalSystem Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\netdde.exe
NetDDEdsdm Network DDE DSDM Stopped Manual LocalSystem Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\netdde.exe
Netlogon Net Logon Stopped Manual LocalSystem Supports pass-through authentication of account logon events for computers in a domain. C:\WINDOWS\System32\lsass.exe
Netman Network Connections Running Manual LocalSystem Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. C:\WINDOWS\System32\svchost.exe -k netsvcs
Nla Network Location Awareness (NLA) Running Manual LocalSystem Collects and stores network configuration and location information, and notifies applications when this information changes. C:\WINDOWS\System32\svchost.exe -k netsvcs
NtLmSsp NT LM Security Support Provider Stopped Manual LocalSystem Provides security to remote procedure call (RPC) programs that use transports other than named pipes. C:\WINDOWS\System32\lsass.exe
NtmsSvc Removable Storage Stopped Manual LocalSystem C:\WINDOWS\system32\svchost.exe -k netsvcs
PlugPlay Plug and Play Running Automatic LocalSystem Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. C:\WINDOWS\system32\services.exe
PolicyAgent IPSEC Services Running Automatic LocalSystem Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. C:\WINDOWS\System32\lsass.exe
ProtectedStorage Protected Storage Running Automatic LocalSystem Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. C:\WINDOWS\system32\lsass.exe
RasAuto Remote Access Auto Connection Manager Stopped Manual LocalSystem Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. C:\WINDOWS\System32\svchost.exe -k netsvcs
RasMan Remote Access Connection Manager Stopped Manual LocalSystem Creates a network connection. C:\WINDOWS\System32\svchost.exe -k netsvcs
RDSessMgr Remote Desktop Help Session Manager Stopped Manual LocalSystem Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. C:\WINDOWS\system32\sessmgr.exe
RemoteAccess Routing and Remote Access Stopped Disabled LocalSystem Offers routing services to businesses in local area and wide area network environments. C:\WINDOWS\System32\svchost.exe -k netsvcs
RemoteRegistry Remote Registry Running Automatic NT AUTHORITY\LocalService Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k LocalService
RpcLocator Remote Procedure Call (RPC) Locator Stopped Manual NT AUTHORITY\NetworkService Manages the RPC name service database. C:\WINDOWS\System32\locator.exe
RpcSs Remote Procedure Call (RPC) Running Automatic LocalSystem Provides the endpoint mapper and other miscellaneous RPC services. C:\WINDOWS\system32\svchost -k rpcss
RSVP QoS RSVP Stopped Manual LocalSystem Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets. C:\WINDOWS\System32\rsvp.exe
SamSs Security Accounts Manager Running Automatic LocalSystem Stores security information for local user accounts. C:\WINDOWS\system32\lsass.exe
SCardDrv Smart Card Helper Stopped Manual NT AUTHORITY\LocalService Enables support for legacy non-plug and play smart-card readers used by this computer. If this service is stopped, this computer will not support legacy reader. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\SCardSvr.exe
SCardSvr Smart Card Stopped Manual NT AUTHORITY\LocalService Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\SCardSvr.exe
Schedule Task Scheduler Running Automatic LocalSystem Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
seclogon Secondary Logon Running Automatic LocalSystem Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
SENS System Event Notification Running Automatic LocalSystem Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. C:\WINDOWS\system32\svchost.exe -k netsvcs
SharedAccess Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) Stopped Manual LocalSystem Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. C:\WINDOWS\System32\svchost.exe -k netsvcs
ShellHWDetection Shell Hardware Detection Running Automatic LocalSystem C:\WINDOWS\System32\svchost.exe -k netsvcs
Spooler Print Spooler Running Automatic LocalSystem Loads files to memory for later printing. C:\WINDOWS\system32\spoolsv.exe
srservice System Restore Service Running Automatic LocalSystem Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties C:\WINDOWS\System32\svchost.exe -k netsvcs
SSDPSRV SSDP Discovery Service Running Manual NT AUTHORITY\LocalService Enables discovery of UPnP devices on your home network. C:\WINDOWS\System32\svchost.exe -k LocalService
stisvc Windows Image Acquisition (WIA) Stopped Manual LocalSystem Provides image acquisition services for scanners and cameras. C:\WINDOWS\System32\svchost.exe -k imgsvc
SwPrv MS Software Shadow Copy Provider Stopped Manual LocalSystem Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\dllhost.exe /Processid:{3996C149-0A2A-4E22-B0DC-5B489772950E}
SysmonLog Performance Logs and Alerts Stopped Manual NT Authority\NetworkService Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\smlogsvc.exe
TapiSrv Telephony Stopped Manual LocalSystem Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service. C:\WINDOWS\System32\svchost.exe -k netsvcs
TermService Terminal Services Running Manual LocalSystem Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server. C:\WINDOWS\System32\svchost.exe -k netsvcs
Themes Themes Running Automatic LocalSystem Provides user experience theme management. C:\WINDOWS\System32\svchost.exe -k netsvcs
TlntSvr Telnet Stopped Manual LocalSystem Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\tlntsvr.exe
TrkWks Distributed Link Tracking Client Running Automatic LocalSystem Maintains links between NTFS files within a computer or across computers in a network domain. C:\WINDOWS\system32\svchost.exe -k netsvcs
uploadmgr Upload Manager Running Automatic LocalSystem Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
upnphost Universal Plug and Play Device Host Stopped Manual NT AUTHORITY\LocalService Provides support to host Universal Plug and Play devices. C:\WINDOWS\System32\svchost.exe -k LocalService
UPS Uninterruptible Power Supply Stopped Manual NT AUTHORITY\LocalService Manages an uninterruptible power supply (UPS) connected to the computer. C:\WINDOWS\System32\ups.exe
VMTools VMware Tools Service Running Automatic LocalSystem Provides support for synchronizing objects between the host and guest operating systems. C:\Program Files\VMware\VMware Tools\VMwareService.exe
VSS Volume Shadow Copy Stopped Manual LocalSystem Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\vssvc.exe
W32Time Windows Time Running Automatic LocalSystem Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k netsvcs
WebClient WebClient Running Automatic NT AUTHORITY\LocalService Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k LocalService
winmgmt Windows Management Instrumentation Running Automatic LocalSystem Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\system32\svchost.exe -k netsvcs
WmdmPmSp Portable Media Serial Number Running Automatic LocalSystem Retrieves the serial number of any portable music player connected to your computer C:\WINDOWS\System32\svchost.exe -k netsvcs
Wmi Windows Management Instrumentation Driver Extensions Stopped Manual LocalSystem Provides systems management information to and from drivers. C:\WINDOWS\System32\svchost.exe -k netsvcs
WmiApSrv WMI Performance Adapter Running Manual LocalSystem Provides performance library information from WMI HiPerf providers. C:\WINDOWS\System32\wbem\wmiapsrv.exe
wuauserv Automatic Updates Running Automatic LocalSystem Enables the download and installation of critical Windows updates. If the service is disabled, the operating system can be manually updated at the Windows Update Web site. C:\WINDOWS\system32\svchost.exe -k netsvcs
WZCSVC Wireless Zero Configuration Running Automatic LocalSystem Provides automatic configuration for the 802.11 adapters C:\WINDOWS\System32\svchost.exe -k netsvcs



Powered by LanHelper