Slimming Down Windows XP The Complete Guide 【 10章完整版 】

               

  网上有一个汉化好的 压榨XP手册 是基于他的汉化版 现在我贴出的是英文原版

你还可以向作者捐献15$以便获得一个自动优化XP的脚本

原文：http://www.bold-fortune.com/forums/index.php?showforum=13

Thanks go out to Fred Langa for his acknowledgment of Slimming Down windows

Bold,

Awesome job on the "Slimming Down XP" article. I especially like the fact that your penchant for deleting files is tempered by the idea that (1) the OS should still work as required and (2) that there be zero errors in the Event Viewer. Like you, I can't stand errors in the Event Viewer; makes me feel dirty! And any schmuck can delete files willy-nilly, but it takes real talent, thought, and patience to do it the way you did. I can only imagine how long all the trial and error must have taken. Years, I'd bet.

Anyway, just wanted to drop a note letting you know that your efforts are appreciated.

Ugly Genius


Why I Don't Use Programs Like XPLite and nLite

Sure, programs can be written that will remove some applications and their specifics. Many programmers use the "inf file method". That is to say, if files are listed within the .inf file for a certain windows component, all you have to do is remove those particular files, and wallah! component gone.

Deleting whole components, however, oftentimes also removes some files that are necessary to an individual's use of a computer.

Users put their computers to many different uses. And all have very different needs from another.

Let me give you a couple of examples of what I'm talking about.

You decide you no longer want windows Media Player on your system.

You set your file removal program to delete all files associated with WMP. ...Which would mean that you also won't be needing the codecs installed for WMP. So you set the program to also delete all WMP codecs.

But you're also a big fan of Yahoo Chat.

Only now, you can't get Yahoo Chat to work properly. You want to talk with your friends in Voice, but you no longer have the ability...because along with all the other WMP codecs, you've deleted the specific codecs that allow this function.

So now we're talking about a program that would have to have a setting to delete windows Media Player and all its codecs, while keeping only the codecs needed by Yahoo Chat.

There are many other variables that would also need to be written into the program. It would have to take into consideration all of the many individual users who all put their computers to all very different uses.

You don't play games on the Internet.

Then you won't be needing all the DirectX files. Unless you decide you like windows Media Player after all. Then you're going to need to keep nine specific DirectX files on your system.

In this instance, you would need incorporated into your file removal program a special setting that would single out and keep the specific DirectX files needed for WMP, while deleting the other ninety-six DirectX files that you won't be needing because you don't play games on the Internet.

You elect to remove DirectX with your file-removal program.

You don't play games on the Internet. You could care less if windows Media Player needs nine DirectX files, because you never use it anyway, and you had the program remove WMP too.

Then you make yourself a nice TV dinner. Grab a bottle of pop from the refrigerator. And make yourself comfortable in front of your computer. It's movie time!

You pop in a DVD. Up springs NVDVD Player. Only it's telling you, "Sorry, you don't seem to have the proper files installed on your system."

You see, NVDVD Player needs seven specific DirectX files to work.

So you decide to re-install DirectX so you can watch your movie.

And now you've defeated your purpose (Remember your purpose?) to remove all unnecessary files from your system. ...Because now you have ninety-eight DirectX files installed on your system that you really don't need.

File removal programs give you a choice: keep an entire windows component and all its associated files, or remove the component completely, and lose function elsewhere.

You set your program to remove the Computer Management and Disk Management.

(The only reason I personally would have for accessing Computer Management would be to utilize Disk Management. The only reason I would have for utilizing Disk Management would be to format a drive. I do that with XP's installation disk during the installation process. The only utilities I need in Computer Management are the Services and Event Viewers, and I can access them both from my Start Menu.)

Your program takes out these files:

capesnpn.dll....Microsoft Certificate Template Management Extension
certmgr.dll.....Certificate MMC (Microsoft Management Console) Snap-In Tool
certmgr.msc.....
compmgmt.msc....Computer Management Console
diskmgmt.msc....Disk Management Console
DISKPART.EXE....
DmAdmin.exe.....Local Disk Manager Administrative Service
dmconfig.dll....Logical Disk Manager Configuration Library
dmdlgs.dll......Disk Management Snap-in Dialogs
dmdskmgr.dll....Disk Management Snap-in Support Library
dmdskres.dll....Disk Management Snap-in Resources
dmintf.dll......Disk Management DCOM Interface Stub
dmocx.dll.......TreeView OCX
DMREMOTE.EXE....Logical Disk Manager
DmServer.dll....Logical Disk Manager service dll
dmutil.dll......Logical Disk Manager Utility Library
dmview.ocx......Disk Management Snap-in
fsmgmt.msc......Microsoft Common Console Document (Shared Folders)
localsec.dll....Local Users and Groups MMC Snapin
lusrmgr.msc.....Microsoft Common Console Document
mmcshext.dll....MMC Shell Extension DLL
mycomput.dll....Computer Management
ntmsapi.dll.....Removable Storage Public Interfaces
ntmsmgr.dll.....Removable Storage Service
osuninst.dll....Uninstall Interface
sendcmsg.dll....Send Console Message
smlogcfg.dll....Performance Logs and Alerts Snap-in

Oops! Now you can't get into your Device Manager, because Device Manager is dependent upon the dmocx.dll.

See what I mean? There are just too many variables involved. It is impossible to have a file removal program remove whole components without disrupting an individual's use of a computer. Many times, while removing components, these programs remove along with them files that also have other uses.

"Aha!" you say. "nLite has an 'additional files to keep' box. Why not use this nLite feature to keep all the files you don't want it to remove along with certain whole components?"

With some 1,800 individual system32 files alone, a person would have quite a few decisions to make. You would really need to know your stuff to setup that program effectively.

And it is not always just about the choices we make about which files to keep or delete. It is also about which registry entries should be intact after the installation.

Some files we delete should never be UnRegistered...meaning their registry entries, or at least some of them, should never be removed. The files themselves can be removed, but UnRegister them, and you've got problems.

If certain files are removed before the installation, their registry entries are not delivered to the registry. Would it not follow, that if some their registry entries are needed, that they would not be present?

Some people refuse to look at this, or choose ignore it. I personally believe it is one of the reasons programs that remove files pre-installation are doomed to forever leave the individual user with post-installation problems

Take for example my favorite (or at least one of the more interesting) .OCX files, the daxctle.ocx.

This one .OCX file is attached to 11,741 Registry Keys and 12,864 Values under HKEY_CLASSES_ROOT/Interface...and every one of them will be removed by UnRegistering it.

11,741 registry Keys and 12,864 Values That's a lot. ...No, that's really, really a lot. And those numbers show up after I have run registry cleaners. I have seen it associated with as many as 13,583 Registry Keys before any registry cleaner was used.

It's not so much I need the daxctle.ocx on my system, I don't. But UnRegistering it removes registry entries which belong additionally to other files I do need on my system. I can delete the daxctle.ocx, no problem. But UnRegister it, and WMP10 will not play...anything.

Here are a few other examples of files I delete, but I do not UnRegister.

initpki.dll.....(Microsoft Trust Installation and Setup). Contains functions that support encryption. Should I UnRegister this file, I experience a few problems with Internet Explorer displaying certain items on web pages, and also some problems entering certain web sites. I can delete the initpki.dll and no such problems will occur...just so long as I do not UnRegister it.

mssip32.dll.....(MSSIP32 Forwarder DLL). Should I UnRegister this file, Microsoft Update will not function. I can delete the mssip32.dll and Microsoft Update will still function...just so long as I do not UnRegister it.

softpub.dll.....(Softpub Forwarder DLL). Contains functions that support encryption. Should I UnRegister this file, I experience a few problems with Internet Explorer displaying certain items on web pages, and also some problems entering certain web sites. I can delete the softpub.dll and no such problems will occur...just so long as I do not UnRegister it.

---------------------------------------

Many people have asked me for my batch files. I have declined to release them to the general public. I will however help you get started making your own batch files. You can then add any individual files you want to them. Which individual files you choose to remove from your system will be entirely up to you.

I have incorporated a failsafe feature into my batch files.

Files and folders will be moved and saved (Not deleted permanently. Later that will be up to you.) to a backup folder on C:/. The backup folder is simply named "Backup".

Within the Backup folder, you will find the files and folders you removed, in smart placement. Their order of appearance will be identical to how XP's files and folders appear on your C Drive.

When you remove files and folders from the windows and system32 directories, in the Backup folder you will first see a windows folder. Within the windows folder you will see the individual files and subfolders you removed, including the system32 folder. And within the system32 folder you will see its individual files and subfolders you removed. The same applies to the Documents and Settings and the Program Files directories.

I created this smart placement so you would always know exactly where these files and folders came from should you decide to replace any to their original locations.

Note: Be sure to temporarily delete the Backup folder filled with files and subfolders before using any registry
cleaners. The registry cleaners will more than likely correct the files paths to the Backup folder, rather than remove their paths.

This batch file I designed with individual system32 files in mind.

Copy and Paste between the lines to Notepad. Save as "any name you choose.bat" Then insert your file choices where I have mine.

CODE

IF NOT EXIST "c:/backup/WINDOWS/system32" md c:/backup/WINDOWS/system32
MOVE c:/WINDOWS/system32/$winnt$.inf c:/backup/WINDOWS/system32/
MOVE c:/WINDOWS/system32/aaaamon.dll c:/backup/WINDOWS/system32/
MOVE c:/WINDOWS/system32/ac3filter.cpl c:/backup/WINDOWS/system32/

I designed this particular batch file below a little differently, with the inf folder files in mind. As with the system32 batch file above, it will "move and save" (not delete) files to a Backup folder on C:/.

This one, however, will move all files in the inf folder (C:/WINDOWS/inf), and will instantaneously return the inf files you choose to keep to the inf folder. All this takes place so fast you'll think the files you chose to keep never moved at all.

CODE

IF NOT EXIST "c:/backup/WINDOWS/inf" md c:/backup/WINDOWS/inf
MOVE c:/WINDOWS/inf/*.* c:/backup/WINDOWS/inf/
IF NOT EXIST "c:/WINDOWS/inf" md c:/WINDOWS/inf
MOVE c:/backup/WINDOWS/inf/865.INF c:/WINDOWS/inf/
MOVE c:/backup/WINDOWS/inf/acpi.inf c:/WINDOWS/inf/
MOVE c:/backup/WINDOWS/inf/branches.inf c:/WINDOWS/inf/

---------------------------------------

One very important step before we set about deleting files together.

Create a full system backup image using a good backup program like Acronis or Ghost.

This backup image should be of a full install of XP. It should include all of your programs, drivers, setting changes, and tweaks applied...everything you normally do to make your windows experience an enjoyable one.

So now when you set about deleting files, you'll always have a the perfect safeguard. And you should never have to say on a forum, "I deleted this, and now that doesn't work!"

Well, revert back to your backup image, and don't delete that anymore.

---------------------------------------

The first thing I do is download the "Preview Version of XPLite." It's really makes it easy to disable windows File Protection.

Go to this page. In the upper right-hand corner click on "Download Preview".

http://www.litepc.com/xppreview.html

Open its zip folder and copy the "XPLite_TRIAL.exe" to your Desktop or a folder of your choice.

Open it and go to its "Windows File Protection" tab. Select "Disabled" and then "Apply". Close the program and reboot your computer.

---------------------------------------

This registry tweak helps me easily UnRegister DLL and OCX Files I remove.

It puts two entries into the right-click context menu: "Register" and "UnRegister" when you highlight and right-click on a single DLL or OCX File, or when you highlight and right-click on multiple DLL and OCX Files.

It really makes Registering and UnRegistering DLL and OCX Files very easy. Plus it gives me the ability to UnRegister multiples (even hundreds) of these files at once.

CODE

windows Registry Editor Version 5.00

;Add register / unregister to the context menu for .dll files
[HKEY_CLASSES_ROOT/.dll]
"Content Type"="application/x-msdownload"
@="dllfile"
[HKEY_CLASSES_ROOT/dllfile]
@="Application Extension"
[HKEY_CLASSES_ROOT/dllfile/Shell/Register/command]
@="regsvr32.exe /"%1/""
[HKEY_CLASSES_ROOT/dllfile/Shell/UnRegister/command]
@="regsvr32.exe /u /"%1/""

;Add register / unregister to the context menu for .ocx files
[HKEY_CLASSES_ROOT/.ocx]
@="ocxfile"
[HKEY_CLASSES_ROOT/ocxfile]
@="OCX"
[HKEY_CLASSES_ROOT/ocxfile/Shell/Register/command]
@="regsvr32.exe /"%1/""
[HKEY_CLASSES_ROOT/ocxfile/Shell/UnRegister/command]
@="regsvr32.exe /u /"%1/""

I normally do not use any registry cleaners, or UnRegister any DLL and OCX files, for a very long time after I have Slimmed Down my installation. I want to be certain everything is aok, first.

---------------------------------------

One final word before we get started. What you will find in this Guide are the "possibilities" of which files and folders can be removed from a windows XP Installation, while maintaining stability and keeping functionality in Microsoft's operating system.

The "possibilities" of what can be removed. That is very important to keep in mind before proceeding from here.

I could not expect anyone other than myself to remove everything listed in the guide. It would be practically impossible for anyone to duplicate what I do without running into problems.

Yes, I delete every file and every folder you will see listed....but my computing needs are different from yours. My system is different from yours. The programs I have installed are different from yours.

Which files and folders to remove from your own windows XP Installations, you will have to make these choices for yourself. I have given you as much information about these files and folders as I could, given the limitations of my knowledge and my understanding of their uses and functions.

---------------------------------------

Now lets remove some files.


Slimming Down windows XP: The Complete Guide PART 1

TEMP and Junk Files


There are a lot of very good TEMP and Junk File Cleaners out there. I use two: IE Privacy Keeper and CCleaner. I think they are both great. TEMP and Junk File Cleaners will remove most TEMP and Junk Files. There are some TEMP and Junk Files they do may miss, though.

This is a list of TEMP and Junk Files I delete on my own because my TEMP and Junk File Cleaners miss them:

*.bak Files...Backup Files

---------------------------------------

*.chk Files...Lost Cluster Log Files

NOTE: If the edb.chk is deleted from the C:/WINDOWS/SoftwareDistribution/DataStore/Logs folder, you will need to reboot your computer before your next visit to the Microsoft Update Website...otherwise, the Microsoft Update Website will not function. The same holds true for the edb.log located in this folder. Further note: the edb.chk can be deleted only after your system settles in from after rebooting, or after a time from a visit to the Microsoft Update Website.

---------------------------------------

*.cnt Files

*.diz Files
*.doc Files

---------------------------------------

*.edb Files...Exchange Server store (a database)

This system *.edb file can usually be deleted after a reboot:

C:/WINDOWS/system32/CatRoot2/tmp.edb

These system *.edb files can be deleted only after your system settles in from after rebooting, or after a time from a visit to the Microsoft Update Website:

C:/WINDOWS/SoftwareDistribution/DataStore/DataStore.edb

C:/WINDOWS/SoftwareDistribution/DataStore/Logs/tmp.edb

---------------------------------------

*.gid Files......Windows Help Index Files

*.lic Files

---------------------------------------

*.log Files

I delete all *.log files I find. However, these system *.log files cannot be deleted:

C:/WINDOWS/WindowsUpdate.log. (The WindowsUpdate.log can only be deleted if the Automatic Updates Service is stopped.)

C:/Documents and Settings/USERNAME/NTUSER.DAT.LOG

C:/Documents and Settings/USERNAME/Local Settings/Application Data/Microsoft/Windows/UsrClass.dat.LOG

C:/Documents and Settings/NetworkService/ntuser.dat.LOG

C:/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Windows/UsrClass.dat.LOG

C:/WINDOWS/Debug/PASSWD.LOG

---------------------------------

C:/WINDOWS/SoftwareDistribution/ReportingEvents.log

If you look through the ReportingEvents.log in Notepad you will notice time-stamped, Microsoft Update installation information, which can date back quite awhile. Normally the ReportingEvents.log cannot be deleted, nor can its text be altered.

However, something interesting about the ReportingEvents.log file was discovered by nataliecv one of our forum members.

"If you go into Services and STOP Automatic Updates Service for a moment, ReportingEvents.log CAN be deleted. A fresh copy of the ReportingEvents.log will be created upon your next visit to the Microsoft Update Website, and it starts anew. NOTE: Do not forget to restart the Automatic Updates."

---------------------------------

C:/WINDOWS/system32/config/default.log
C:/WINDOWS/system32/config/SAM.LOG
C:/WINDOWS/system32/config/SECURITY.LOG
C:/WINDOWS/system32/config/software.LOG
C:/WINDOWS/system32/config/system.LOG

These system *.log files can usually be deleted after a reboot:

C:/WINDOWS/Sti_Trace.log
C:/WINDOWS/wiadebug.log
C:/WINDOWS/wiaservc.log

C:/WINDOWS/system32/CatRoot2/edb.log
C:/WINDOWS/system32/CatRoot2/edbtmp.log

These system *.log files can be deleted only after your system settles in from after rebooting, or upon a visit to the Microsoft Update Website:

C:/WINDOWS/SoftwareDistribution/DataStore/Logs/edbtmp.log

C:/WINDOWS/SoftwareDistribution/DataStore/Logs/edb.log

NOTE: If the edb.log is deleted from the C:/WINDOWS/SoftwareDistribution/DataStore/Logs folder, you will need to reboot your computer before your next visit to the Microsoft Update Website...otherwise, the Microsoft Update Website will not function. The same holds true for the edb.chk located in this folder. Further note: the edb.log can be deleted only after your system settles in from after rebooting, or after a time from a visit to the Microsoft Update Website.


I DO NOT DELETE any INSTALL.LOG or UNINSTALL.LOG files. Without them I cannot uninstall certain programs.

---------------------------------------

*.old Files....Backup Files

*.query Files

*.sav Files....Backup Files

---------------------------------------

*.txt Files

I delete all *.txt files I find. However, these system *.txt files cannot be deleted:

C:/WINDOWS/SchedLgU.Txt. (The SchedLgU.Txt can only be deleted if the Task Scheduler Service is stopped.)

C:/WINDOWS/SoftwareDistribution/WebSetup/wuident.cab/wuident.txt (The "wuident.txt" can only be deleted if the Automatic Updates Service is stopped.)

I DO NOT DELETE these program *.txt files:

C:/Program Files/RAXCO/PerfectDisk/Readme.txt because Perfect Disk will not operate without its "Readme.txt" or "Register.txt" files.

C:/Program Files/RAXCO/PerfectDisk/Register.txt because Perfect Disk will not operate without its "Register.txt" or "Readme.txt" files.

You yourself might want to take a look in any program's folder to consider which, if any, *.txt files just might be important to them.

---------------------------------------

Make Your Own TEMP and Junk File Cleaner

You can make your own TEMP and Junk File cleaner using Search Assistant.

In Notepad, make a list of TEMP and Junk File extensions you would like to remove.

Like so:

*.bak, *.chk, *.cnt, *.diz, *.doc, *.edb, *.gid, *.lic, *.gid, *.log, *.old, *.query, *.sav, *.txt

Copy and Paste your list into the search box of Search Assistant.

Be sure that under Search Options you have checked "Advanced Options."

Under Advanced Options check "Search system folders," "Search hidden
files and folders," and, "Search Subfolders."

Now run your search by clicking on Search Now.

Now, at the top of the Search Assistant, select File then Save Search.

Next time you want to search for those particular TEMP and Junk files, just click on your new search file.

Search Assistant will automatically popup, and your ready. Just click Search Now.

---------------------------------------

Here's an extensive list of TEMP and Junk Files I compiled. You may find it useful.

*.~* ......Temporary Files
*.~mp......

*.^* ......Temporary Files
*.^........Temporary Files

*.---......Setup Temporary Files

*.__.......Temporary Files
*__ofidx*.*...Microsoft Find Fast Indexer File

*._dd......Lost Cluster Files
*._detmp...Temporary Files

*.&db......Temporary Files (dBASE IV)

*.?$?......Temporary Files(st Reader)
*.?~?......Temporary Files
*.??$......Temporary Files

*.$$$......MS-DOS Temporary Files

*.!!!......

*.000......sequential file in split Zip archive?
*.001......sequential file in split Zip archive?
*.002......sequential file in split Zip archive?

*.1st......(system.1st is a windows diagnostic file)

*.b~k......Backup File, some text editors
*.bak......Backup Files
*.bk.......Backup File
*.bk?......Potential junk
*.bmk......
*.bsc......Visual Studios Temp File

*.cam......
*.cb.......
*.chk......Lost Cluster Log Files
*.cln......
*.cnt......
*.cpy......Backup Files

*.da1......
*.da2......
*.db$......Temporary Files (dBASE)
*.diz......
*.dmp......Potential junk
*.doc......

*.edb......Exchange Server store (a database)
*.err......Error File

*.fic......Potential junk
*.fix......
*.fnd......Find Result Files
*.ftg......Word List File of *.HLP
*.fts......Word List File of *.HLP

*.gid......Windows Help Index Files

*.ign......
*.ilc .....Borland Temporary File
*.ild .....Borland Temporary File
*.ilf .....Borland Temporary File
*.ilk......Visual Studios Temp File
*.ils......Borland Temporary File
*.ink......

*.lgc......
*.lge......
*.lhx......
*.lic......
*.license.txt...Potential junk
*.log......
*.log.txt...Log Files windows diagnostic files

*.mp.......Temporary Files
*.MS.......Microsoft Product Backup Files

*.nav......Backup Files
*.new......
*.nu3......Symantec Backup File

*.old......Backup Files
*.out......

*.par......
*.pch......Visual Studios Temp File
*.pvt......
*.prv......Backup Files (bootlog.prv: windows diagnostic file)

*.query....

*.res......Visual Studios Temp File

*.sav......Backup File
*.sdi......Archive Content File
*.sik......Potential junk
*.spc......Temporary Files (WordPerfect for windows)
*.syd......Backup Files

*.tds......Borland Temporary File
*.temp.....Temporary Files
*.tmp......Temporary Files
*.txt Files

*.umb......

*.wbk......Word Backup Files


*modemlog.txt...Windows Modem Log File

*install*.txt...Potential junk

*order*.txt...Potential junk

*whatsnew*.txt...Potential junk


0*.nch....Temporary Files created by MS Outlook Express

ABEND.LOG...Novell Abend Log
anti-vir.dat...Created by F-Prot Anti-Virus

chklist.*...Lost Cluster Files

eula.txt...Microsoft end-user license agreement

file_id.diz...Description of Shareware

ghosterr.txt...Norton Ghost Error File

iebak.dat...Internet Explorer Junk File

modemdet.txt...Windows Diagnostic File
mscreate.dir...Setup Temporary File
msoe.txt...Readme for Microsoft Outlook™ Express
mssecure.xml...Microsoft Baseline Security Analyzer File

readme.txt...Potential junk

pq_debug.txt...PowerQuest PartitionInfo file
pspbrwse.jbf...Paint Shop Folder Image Information Cache File

suhdlog.dat...Windows diagnostic File
system.st...Windows diagnostic File

twain???.mtx...TWAIN Temporary File

ws_ftp.log...WS_FTP Temporary File

 

Slimming Down windows XP: The Complete Guide PART 2

Disabled Services

windows XP Services Companion

windows XP Services Companion is a companion to Slimming Down windows XP: The Complete Guide PART 2: Disabled Services. Here I can shed more light on windows XP Services that space restrictions will not allow in PART 2.


The settings below reflect my Services settings.

11 Services are set to Automatic:


Automatic Updates

Automatic Updates, the windows Update Agent, enables the download and installation of windows Updates.

Automatic Updates doesn't mean that you can't turn off the Automatic Updates feature in System Properties, because you prefer to manually choose and download windows Updates from the windows Update Web site. That you can do.

But, if the Automatic Updates Service is disabled, your computer will be unable to use either the Automatic Updates feature or the windows Update Web site.

wuauserv.dll....(Windows Update AutoUpdate Service). <---(Main Service File)

DCOM Server Process Launcher

Distributed Component Object Model (DCOM) is a Microsoft proprietary technology for software components distributed across several networked computers to communicate with each other. It extends Microsoft's COM, and provides the communication substrate under Microsoft's COM+ application server infrastructure. It has been deprecated in favor of Microsoft .NET.

DCOM Server Process Launcher provides launch functionality for DCOM services.

Note: windows Firewall/Internet Connection Sharing (ICS) cannot start if the DCOM Process Launcher Service is disabled. PerfectDisk needs it too, so I personally can't disable DCOM on my system.

Most home users don't need DCOM; in that, most home users are operating stand-alone computers, and are not running any software that requires DCOM.

In addition to disabling DCOM in Services, I've seen this registry change suggested. It seems to make sense, since DCOM, in actuality, is OLE (Object Linking and Embedding).

Navigate in the Registry to:

HKEY_LOCAL_MACHINE/Software/Microsoft/OLE

In the right pane, look for the string "EnableDCOM" and set the Value to N. (The default setting is Y).

DHCP Client

Dynamic Host Configuration Protocol Client (DHCP Client) manages network configuration by registering and updating IP addresses and (DNS) names.

This is how your computer gets a Dynamic IP address so you can connect to the internet.

Internet Protocol address (IP address) is a unique number that devices use in order to identify and communicate with each other on a network utilizing the Internet Protocol standard.

Domain Name Server (DNS) is a system that stores information associated with domain names in a distributed database on networks, such as the Internet.

DHCP Client is required for Internet connectivity by most DSL and Cable connections.

DHCPCSVC.DLL....(DHCP Client Service). <---(Main Service File)

Event Log

The Event Log Service writes events sent by applications, services, and the operating system to log files. These reports contain diagnostic information in addition to errors specific to the source application, service, or component. They contain information that can sometimes be useful in diagnosing problems. These reports can be viewed through the Event Viewer.

If the Event Log Service is disabled, you will be unable to track events, which reduces your ability to diagnose problems with your system.

EVENTVWR.EXE....(Event Viewer Snapin Launcher). <---(Main Service File)

IMAPI CD-Burning COM Service

IMAPI CD-Burning COM Service manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, your computer will be unable to record CDs--using windows Media Player 10, that is.

I personally do use WMP10 to burn CDs. However, many people use other burning software that don't require the IMAPI CD-Burning COM Service.

Even when set to Automatic, this Service will stop by itself after use.

IMAPI.EXE.......(CD-Burning COM Service). <---(Main Service File)

Plug and Play

Plug and Play enables a computer to recognize and adapt to hardware changes with little or no user input.

With Plug and Play, a user can add or remove devices, without any intricate knowledge of computer hardware, and without being forced to manually configure hardware or the operating system.

A simple example, a user can plug in a USB keyboard and Plug and Play will detect the new device, find a driver for it and install it.

A more complicated example, a user can dock a portable computer and use the docking station's Ethernet card to connect to the network without changing the configuration. Later, the user can undock that same computer and use a modem to connect to the network - again without making any manual configuration changes.

PnP (Plug and Play) is not related to UPnP (Universal Plug and Play).

services.exe....(Services and Controller app). <---(Main Service File)

Remote Procedure Call (RPC)

A remote procedure call (RPC) is initiated by the caller (client) sending a request message to a remote system (the server) to execute a certain procedure using parameters supplied. A result message is returned to the caller.

A parameter is a a set of values (or variables) which can be accepted by a subroutine.

A subroutine is a portion of code within a larger program, which performs a specific task.

RPC is a the paradigm (or pattern) for implementing the client/server model of distributed computing (the coordinated use of physically separated computers).

Client/Server is a network architecture which separates the client from the server.

Picture, if you will, the use of web pages on the internet. Your computer and web browser would be considered a client, and the computers, databases, and applications that make up a particular web page you are looking at could be considered the server.

When your web browser makes a request of a web site, the web site's server gathers all of the information required to display the information from its database, and assembles it onto the web page, and sends it back to your web browser for you to look at.

Remote Procedure Call (RPC) is vital to the operation of your system. Your system will not boot without.

RPCSS.DLL.......(Distributed COM Services). <---(Main Service File)

Shell Hardware Detection

AutoPlay is a computer operating system's ability to automatically take action upon a media disc when inserted into an optical drive.

Shell Hardware Detection allows you the option of selecting what action you wish taken with a type of file on a CD or DVD, (Music files, Pictures, Video files, a Music CD, or a DVD movie), when you place the disc into one of your optical drives.

When you disable Shell Hardware Detection, when checking the Properties of an optical drive, you won't have the AutoPlay tab available. (Where you would normally make these selections.)

When you disable Shell Hardware Detection and reboot, in "My Computer," you may not see your optical drives displayed as "DVD Drive" and/or "DVD-RW Drive." They will still be displayed, only now they might be displayed as simply "CD Drive."

Everything else will work fine with your optical drives. You just won't have the AutoPlay function if you disable Shell Hardware Detection.

shsvcs.dll......(Windows Shell Services Dll). <---(Main Service File)

Themes

Themes allows you to see and manage the default windows XP theme that was designed especially for windows XP.

You can even change its color scheme in Display Properties, under the Appearance tab. The Themes Service makes that option available to you.

Some minimalists discard this theme, as it can be a resource hog, and choose to go with the old, Classic-Style Theme -- that homely one you were using in windows 98.

But I say, where's the fun in that? I got to look at this thing everyday.

If you are memory conscious, do not care either way -- or even just because you prefer the look of the old, Classic-Style Theme -- you can disable Themes. When you disable the Themes Service, the Classic-Style Theme will appear instantly for you.

UXTHEME.DLL.....(Microsoft UxTheme Library). <---(Main Service File)

User Profile Hive Cleanup

User Profile Hive Cleanup is a Service I installed to help me with faster shutdowns. It really works too.

The User Profile Hive Cleanup service helps to ensure user sessions are completely terminated when a user logs off. System processes and applications occasionally maintain connections to registry keys in the user profile after a user logs off. In those cases the user session is prevented from completely ending. This can result in problems when using Roaming User Profiles in a server environment or when using locked profiles as implemented through the Shared Computer Toolkit for windows XP.

On windows 2000 you can benefit from this service if the application event log shows event id 1000 where the message text indicates that the profile is not unloading and that the error is "Access is denied". On windows XP and windows Server 2003 either event ids 1517 and 1524 indicate the same profile unload problem.

To accomplish this the service monitors for logged off users that still have registry hives loaded. When that happens the service determines which application have handles opened to the hives and releases them. It logs the application name and what registry keys were left open. After this the system finishes unloading the profile.

The Main Service File is uphclean.exe (User Profile Hive Cleanup Service) located in C:/Program Files/UPHClean.

windows Audio

windows Audio is required if you wish to hear any audio at all. Unless your computer doesn't have a sound card installed...in which case, you're not going to be able to hear anything anyway. (A little joke there.)

AUDIOSRV.DLL...(Windows Audio Service). <---(Main Service File)


6 Services are set to Manual:


Acronis Scheduler2 Service

Not much I can tell you or you need to know about Acronis Scheduler2 Service, other than this service is installed by Acronis TrueImage and it is needed for the program to work.

The Main Service File is schedul2.exe (Acronis Scheduler 2) located in C:/Program Files/Common Files/Acronis/Schedule2.

Background Intelligent Transfer

Background Intelligent Transfer (BITS) transfers data between clients and servers in the background using idle network bandwidth.

BITS is a file transfer service that transfers files in the foreground or background (default) between a client and a server.

Background transfers use only idle network bandwidth in order to preserve the user’s interactive experience with other network applications, such as Internet Explorer.

BITS examines the network traffic, and uses only the idle portion of the network bandwidth. It regulates its use of bandwidth as users increase or decrease their use of the bandwidth.

BITS suspends file transfers if the user logs off or the network connection is lost. When the user logs on and a network connection exists, it resumes the transfer from where it left off previously. The same is true for system reboots.

If Background Intelligent Transfer is disabled, the windows Automatic Update feature will not work. Neither will you be able to manually download windows Updates from the windows Update Web site.

qmgr.dll........(Background Intelligent Transfer Service). <---(Main Service File)

Cryptographics Services

Cryptographics Services, Management of Certification Authority certificates.

Cryptographics Services provides three management services.

1.) Catalog Database Service, which confirms the signatures of windows files.

2.) Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from your computer.

3.) Key Service, which helps enroll your computer for certificates.

If Cryptographics Services is stopped, these management services will not function properly.

Automatic windows Updates, and even Manual updates at the windows Update Web site, requires Cryptographic Services to be running.

Reportedly, Cryptographic Services is also required for the installation of some key windows components, like DirectX, and windows Media Player. (I wouldn't know, because I've never tried installing either of these windows compontents with Cryptographic Services disabled.)

Set to Manual, Cryptographics Services will start automatically when needed.

cryptsvc.dll...(Cryptographic Services). <---(Main Service File)

PDEngine

Not much I can tell you or you need to know about PDEngine, other than this service is installed by PerfectDisk and it is needed for the program to work.

The Main Service File is PDEngine.exe (PerfectDisk defrag engine) located in C:/Program Files/RAXCO/PerfectDisk.

PDScheduler

Not much I can tell you or you need to know about PDSched.exe, other than this service is installed by PerfectDisk and it is needed for the program to work.

The Main Service File is PDSched.exe (PerfectDisk defrag engine) located in C:/Program Files/RAXCO/PerfectDisk.

windows Installer

windows Installer uses the information within .MSI files that are provided with some applications, and installs, repairs, or removes software using this information.

You can view these .MSI (Windows Installer File) files within the C:/WINDOWS/Installer folder.

MSIEXEC.EXE.....(Windows Installer) <---(Main Service File)


60 Services are set to Disabled:


Alerter Service

Alerter Service notifies users of administrative alerts on a network.

alrsvc.dll.....(Alerter Service DLL). <---(Main Service File)

Application Layer Gateway Service

Application Layer Gateway Service is a subcomponent of the windows Firewall/Internet Connection Sharing (ICS) Service. It provides support for 3rd party plug-ins that allow network protocols to pass through the firewall and work behind ICS.

However, BlackViper tells us that after the installation of Service Pack 2 it no longer is required.

ALG.EXE.........(Application Layer Gateway Service). <---(Main Service File)

Application Management

Application Management is a software installation Group Policy extension. It processes requests to enumerate, install, and remove applications deployed via a corporate network.

The Main Service File would be appmgmts.dll, and it should be located in C:/WINDOWS/system32. Not installed on XP Home Edition.

Clipbook

Enables the Clipbook Viewer to create and share "pages" of data to be viewed by remote computers. This service depends on the NetDDE/Network Dynamic Data Exchange (DDE) service to create the actual file shares that other computers can connect to, while the Clipbook application and service allow users to create the pages of data to share.

CLIPSRV.EXE.....(Windows NT DDE Server). The network dynamic data exchange (DDE) clipboard service used by Clipboard Viewer to access objects or data copied into memory. <---(Main Service File)

COM+ Event System & COM+ System Application

COM+ Event System supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If this service is turned off, SENS will close and will not be able to provide logon and logoff notifications.

COM+ System Application manages the configuration and tracking of Components Object Model (COM)+ based components.

es.dll..........<----(Main Service File)

Computer Browser

Maintains an up-to-date list of computers on your network, and supplies the list to programs that request it.

browser.dll.....(Computer Browser Service DLL). <---(Main Service File)

Distributed Link Tracking Client

Distributed Link Tracking Client maintains links between the NTFS file system files within a computer or across computers in a network domain. The service ensures that shortcuts and (Object Linking and Embedding) OLE links continue to work after the target file is renamed or moved.

trkwks.dll......(Distributed Link Tracking Client).<---(Main Service File)

Distributed Transaction Coordinator

Distributed Transaction Coordinator coordinates transactions that are distributed across multiple computer systems and/or resource managers, such as databases, message queues, file systems, or other transaction-protected resource managers. It is closely related to Distributed Link Tracking Client. It really doesn't serve much of a purpose for home user systems.

MSDTC.EXE.......(MS DTC console program). The console for the Distributed Transaction Coordinator (DTC). <---(Main Service File)

DNS Client

DNS Client resolves and caches (Domain Name Server) DNS names. DNS Client is required if using IPSEC.

There are lots of arguments about this one. My opinion, it's not required. If you disable it, all the lookups will be done by your Internet Service Provider's DNS.

dnsrslvr.dll....(DNS Caching Resolver Service). <---(Main Service File)

Error Reporting Service

Error Reporting Service calls home to Microsoft when application errors occur.

ersvc.dll.......(Windows Error Reporting Service). <---(Main Service File)

Fast User Switching Compatibility

Fast User Switching Compatibility allows for switching users without closing all existing applications running under a different account.

Designed for the home, Fast User Switching lets everyone use a single computer as if it were their own. There is no need to log someone else off and have to decide whether to save another user's files. Instead windows XP takes advantage of Terminal Services technology and runs each user session as a unique Terminal Services session, enabling each user's data to be entirely separated.

shsvcs.dll.........(Windows Shell Services Dll). <---(Main Service File)

Help and Support

Help and Support is required for viewing Microsoft's online help documents.

HelpSvc.exe.....(Microsoft Help Center Service). <---(Main Service File) Located in C:/WINDOWS//helpctr/binaries folder.

Http SSL

HTTP SSL enables IIS (Internet Information Services) to perform SSL (Secure Sockets Layer) functions. SSL is an open standard for establishing a secure communications channel to prevent the interception of critical information, such as credit card numbers.

w3ssl.dll.......(SSL service for HTTP). <---(Main Service File)

Human Interface Device Access

Human Interface Device Access enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function.

Some peripherals (devices connected to a computer) require this service. Internet keyboards with volume and play control buttons, scanners with fax or copy buttons.

I do not have the associated file, HidServ.dll, installed on my system.

Indexing Service

Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language.

CISVC.EXE.......(Content Index Service). The Content Index engine that performs file indexing to improve performance of resource searches. <---(Main Service File)

IPSEC Services

Per Microsoft: Internet Protocol Security (IPsec) is a framework of open standards for ensuring private, secure communications over Internet Protocol (IP) networks, through the use of cryptographic security services. IPsec supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection.

IPsec is supported by the windows Server 2003, windows XP, and windows 2000 operating systems and is integrated with the Active Directory Service.

Local Disk Manager and Local Disk Manager Administrative Service

Logical Disk Manager watches Plug and Play events for new drives to be detected and passes volume and/or disk information to the Logical Disk Manager Administrative Service to be configured.

DmServer.dll....(Logical Disk Manager service dll) <---Main Service File for Local Disk Manager

DmAdmin.exe....(Local Disk Manager Administrative Service). <---Main Service File for Local Disk Manager Administrative Service

Messenger

The Messenger system service sends messages to or receives messages from users and computers, administrators, and the Alerter service. This service is not related to Microsoft windows Messenger or MSN Messenger

msgsvc.dll......(NT Messenger Service). <---(Main Service File)

MS Software Shadow Copy Provider

MS Software Shadow Copy Provider manages software-based volume shadow copies taken by the Volume Shadow Copy service. MS Software Shadow Copy Provider is used in conjunction with the Volume Shadow Copy Service. Microsoft Backup uses these services.

DLLHOST.EXE.....(COM Surrogate). The COM+ process manager. <---(Main Service File)

Netmeeting Remote Desktop Sharing

NetMeeting Remote Desktop Sharing allows authorized users to remotely access your windows desktop from another PC over a corporate intranet by using Microsoft NetMeeting. You must explicitly enable this service in NetMeeting.

MNMSRVC.EXE.....(NetMeeting Remote Desktop Sharing). Allows authorized users to remotely access your desktop. <---(Main Service File)

Network Connections

Network Connections takes care of network configuration (client side) and displays status in the notification area on the desktop (the area on the taskbar to the right of the taskbar buttons).

NETMAN.DLL......(Network Connections Manager). <---(Main Service File)

Network DDE and Network DDE DSDM

Network DDE provides network transport and security for dynamic data exchange (DDE) by applications running on the same computer or on different computers.

Network DDE DSDM manages shared dynamic data exchange (DDE).

NETDDE.EXE......(Network DDE - DDE Communication). A background network DDE provider. <---(Main Service File)

Network Location Awareness (NLA)

Network Location Awareness collects and stores network configuration and location information, and notifies applications when this information changes.

Mswsock.dll......(Microsoft windows Sockets 2.0 Service Provider). <---(Main Service File)

Network Provisioning Service

Network Provisioning Service manages XML (Extensible Markup Language) configuration files on a domain basis for automatic network provisioning.

The Extensible Markup Language (XML) is a general-purpose markup language for creating special-purpose markup languages, capable of describing many different kinds of data. Its primary purpose is to facilitate the sharing of data across different systems, particularly systems connected via the Internet.

A markup language combines text and extra information about the text. The extra information, for example about the text's structure or presentation, is expressed using markup, which is intermingled with the primary text.

But a picture is worth a thousand words. Double click on any file with a .XML extension, and you can see it.

xmlprov.dll.....(Network Provisioning Service). <---(Main Service File)

NVDIA Display Driver Service

NVDIA Display Driver Service provides system and desktop level support to the NVIDIA display driver.

nvsvc32.exe.....(NVIDIA Driver Helper Service). <---(Main Service File)

Performance Logs and Alerts

Performance Logs and Alerts is used to collect performance data automatically from local or remote computers that have been configured using the Performance Logs and Alerts snap-in.

SMLOGSVC.EXE....(Performance Logs and Alerts Service). An application that allows statistics to be monitored and collected on local and remote PCs. <---(Main Service File)

Portable Media Serial Number Service

Portable Media Serial Number Service retrieves the serial number of any portable music player connected to your computer.

MsPMSNSv.dll....(Microsoft Media Device Service Provider). <---(Main Service File)

Print Spooler

Print Spooler queues and manages print jobs locally and remotely. The print spooler is the heart of the windows printing subsystem and controls all printing jobs.

SPOOLSV.EXE.....(Spooler SubSystem App. Print Spooler Service). The spooler service for the print subsystem. <---(Main Service File)

Protected Storage

Allows applications to fetch and retrieve security and other information from a personal storage location, hiding the implementation and details of the storage itself.

pstorec.dll.....(Protected Storage COM interfaces). <---(Main Service File)

QoS RSVP

QoS (Quality of Service) RSVP (Resource ReSerVation Protocol) provides network signaling and local traffic setup functionality on a network using IPSEC and applications that support QoS. QoS is a measure of the reliability of a computer network. RSVP enables non-QoS technologies such as Ethernet and IP to make QoS requests of the network,

RSVP.EXE........(Resource Reservation Protocol. QoS RSVP Service.). A protocol that sets up a reserved pathway with a specific quality of service for a set of data packets. <---(Main Service File)

Remote Access Auto Connection Manager (Dial-Up Networking Common Libraries).

Remote Access Auto Connection Manager creates a connection to a remote network whenever a program references a remote name or address. The service is activated only when there is no network access.

rasmans.dll.....(Remote Access Connection Manager). <---Main Service File for Remote Access Auto Connection Manager

Remote Access Connection Manager (Terminal Services Remote Assistance Component)

Remote Access Connection Manager creates a network connection. This service manages the actual work of connecting, maintaining, and disconnecting dial-up and VPN (Virtual Private Network) connections from your computer to the Internet or other remote networks.

sessmgr.exe.....(Microsoft® Remote Desktop Help Session Manager). <---Main Service File for both Remote Access Connection Manager and Remote Desktop Help Session Manager

Remote Desktop Help Session Manager (Terminal Services Remote Assistance Component)

Remote Desktop Help Session manages and controls Remote Assistance.

sessmgr.exe.....(Microsoft® Remote Desktop Help Session Manager). <---Main Service File for both Remote Access Connection Manager and Remote Desktop Help Session Manager

Removable Storage

Removable Storage is used for managing removable media.

ntmssvc.dll.....(Removable Storage Manager). <---(Main Service File)

Routing and Remote Access (Dial-up Server for windows)

Don't rack your brain too much on this because I doubt if very many people thoroughly understand Networking. Networking is a very complex subject.

Basically, Routing and Remote Access offers routing services in local area and wide area network environments. Routing and Remote Access service provides:

• Multiprotocol LAN-to-LAN, LAN-to-WAN, VPN, and NAT routing services

• Dial-up and VPN remote access services.

A Local Area Network (LAN) is a computer network covering a small local area, like a home, office, or small group of buildings such as a college.)

A wide Area Network (WAN) is a computer network covering a wide geographical area, involving a vast array of computers.

The process of Network Address Translation (NAT) involves re-writing the source and/or destination addresses of IP packets as they pass through a router or firewall.

A Virtual Private Network (VPN) is a private communications network usually used within a company, or by several different companies or organizations, to communicate over a public network.

Dial-up access uses a modem connected to the computer and a telephone line to dial the Internet Service Provider's (ISP) node to establish a modem-to-modem link, which is then routed to the Internet.

mprdim.dll......(Dynamic Interface Manager). <---(Main Service File)

Secondary Logon

Secondary Logon enables granting a user account with limited privileges the higher privileges necessary to start an application or process.

To see for yourself exactly what it is. When you right-click on an executable (a file whose contents are meant to be interpreted as a program by a computer -- a file with an .EXE extension), you will see the "Run As" option in the context menu. Selecting it will bring up the "Run As" dialog box, (or you could call it, the "Which user account do you want to run this program?" selection box).

seclogon.dll....(Secondary Logon Service DLL). <---(Main Service File)

Security Accounts Manager

Security Accounts Manager stores profile and security information for local user accounts.

Related to the Secondary Logon function and another security information stores. Very similar to Protected Storage.

Startup of Security Accounts Manager signals other services that the Security Accounts Manager is ready to accept requests.

SAMLIB.DLL......(SAM Library DLL). <---(Main Service File)

Security Center

Security Center monitors the status of Automatic Updates, windows Firewall and virus protection software. Its "shield" icon is displayed in the System Tray.

If you do not want the Security Center to monitor these functions, disabling this service alone is not enough.

While Security Center is in its started state, go to Start > Control Panel > Security Center and select the link on the left-hand side labeled "Change the way Security Center alerts me."

In the resulting dialog box, uncheck Firewall, Automatic Update and Virus Protection.

After that step is complete, you may disable Security Center in your Services window, and it will not start again, and its "shield"icon will not be displayed in the System Tray.

wscsvc.dll......(Windows Security Center Service). <---(Main Service File)

Smart Card

Smart Card manages and controls access to a smart card inserted into a smart card reader attached to the computer.

A smart card, chip card, or integrated circuit(s) card (ICC), is defined as any pocket-sized card with embedded integrated circuits.

Contact smart card readers are used as a communications medium between the smart card and a host, e.g. a computer.

The standard perception of a smart card is a microprocessor card of credit card dimensions with tamper-resistant properties and is capable of providing security services (e.g. confidentiality of information in the memory).

If you don't have either a smart card or a smart card reader for your computer, you don't need this service enabled.

SCARDSVR.EXE....(Smart Card Resource Management Server). Smart Card Server component. <---(Main Service File)

SSDP Discovery Service

Universal Plug and Play (UPnP) is an architecture in windows XP that supports peer-to-peer Plug and Play functionality for network devices.

A Universal Plug and Play device advertises its presence on the network to other devices and control points by using the Simple Service Discovery Protocol (SSDP).

A new control point uses SSDP to discover Universal Plug and Play devices on the network. The information that is exchanged between the device and the control point is limited to discovery messages that provide basic information about the devices and their services, and a description URL, which can be used to gather additional information about the device.

ssdpsrv.dll.....(SSDP Service DLL). <---(Main Service File)

System Event Notification

System Event Notification (SENS) tracks system events such as windows logon network and power events. Notifies COM+ Event System subscribers of these events. SENS depends on COM+ Event System service.

sens.dll........System Event Notification Service (SENS) <---(Main Service File)

System Restore Service

The System Restore Application. Performs System Restore functions.

srsvc.dll.......(System Restore Service). <---(Main Service File)

Task Scheduler

Task Scheduler enables a user to configure and schedule automated tasks on a computer. The Task Scheduler monitors whatever criteria you choose and carries out the task at the designated time or interval.

Some third-party software require Task Scheduler to be running in order to carry out and perform scheduled and automated tasks, or maybe even for their automatic update features to work.

Anti-Virus programs generally require Task Scheduler be running. Prefetch requires Task Scheduler be running.

schedsvc.dll....(Task Scheduler Engine). <---(Main Service File)

TCP/IP NetBIOS Helper

TCP/IP NetBIOS Helper Service enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution.

Sometimes called the TCP/IP Internet Protocol Suite, TCP (Transmission Control Protocol) and the IP (Internet Protocol) is the set of communications protocols that implement the protocol stack on which the Internet and most commercial networks run.

In the Internet Protocol Suite, Transmission Control Protocol is the intermediate layer between the Internet Protocol below it, and an application above it. Applications often need reliable pipe-like connections to each other, whereas the Internet Protocol does not provide such streams, but rather only unreliable packets. TCP does the task of the transport layer in the simplified OSI (Open Systems Interconnection) model of computer networks.

The Transmission Control Protocol (TCP) is one of the core protocols of the Internet protocol suite. Using TCP, applications on networked hosts can create connections to one another, over which they can exchange data or packets. The protocol guarantees reliable and in-order delivery of sender to receiver data. TCP also distinguishes data for multiple, concurrent applications (e.g. Web server and email server) running on the same host.

TCP/IP (Transmission Control Protocol/Internet Protocol) NetBIOS (Network Basic Input/Output System) Helper Service enables support for NetBIOS over TCP/IP service and NetBIOS name resolution. (NetBIOS was originated for MS-DOS systems on small networks.)

TCP/IP is an extension of the kernel mode NetBT. The NetBT.sys driver is a kernel-mode component that supports the Transport Driver Interface (TDI) interface.

(A kernel is the core of an operating system, responsible for providing secure access to the machine's hardware and to various computer processes. A process is a computer program in a state of execution. A mode is a distinct setting within a computer program or any physical machine interface.)

Kernel mode drivers handle all I/O (Input/Output) devices. It is not even possible for user-mode code to access I/O hardware without the aid of a kernel mode driver.

The NetBIOS API (Network Basic Input/Output System Application Programming Interface) allows applications on separate computers to communicate over a local area network. It provides services related to the session layer of the OSI (Open Systems Interconnection) model. (OSI was eventually eclipsed by the Internet's TCP/IP protocol suite.)

(An Application Programming Interface (API) is the interface that a computer system, library or application provides in order to allow requests for service to be made of it by other computer programs, and/or to allow data to be exchanged between them.)

TCP/IP NetBIOS Helper should be considered an integral part of NetBT, not a normal service. It does two things for NetBT, which cannot be done in kernel mode:

• It performs DNS (Domain Name Server) name resolution.

• It pings a set of IP address and returns a list of reachable IP addresses.

(The Domain Name System, or Server (DNS) is a system that stores information associated with domain names in a distributed database on networks, such as the Internet. The Domain Name System associates many types of information with domain names, but most importantly, it provides the IP address (Internet Protocol address) associated with the domain name.)

(An Internet Protocol address is a unique number that devices use in order to identify and communicate with each other on a network utilizing the Internet Protocol standard.)

lmhsvc.dll......(TCPIP NetBios Transport Services DLL). <---(Main Service File)

Telephony

Controls telephony devices on the local computer. This service is required for dial-up modem connectivity.

tapisrv.dll.....(Microsoft® windows™ Telephony Server). <---(Main Service File)

Terminal Services

Terminal Services allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server.

termsrv.dll.....(Terminal Server Service). <---(Main Service File)

Uninterruptible Power Supply (Information forthcoming)

UPS.EXE.........(UPS Service). <---(Main Service File)

Universal Plug and Play Device Host

Universal Plug and Play (UPnP) is an architecture in windows XP that supports peer-to-peer Plug and Play functionality for network devices.

UPnP isn't PnP (Plug and Play). UPnP is for connectivity to devices on networks. A UPnP device is external (not inside the computer case) and a part of the local network.

upnphost.dll.....(UPnP Device Host). <---Main Service File

Volume Shadow Copy

Volume Shadow Copy manages and implements Volume Shadow Copies used for backup and other purposes. Volume Shadow Copy is used in conjunction with the MS Software Shadow Copy Provider service. Microsoft Backup uses these services.

VSSVC.EXE.......(Microsoft® Volume Shadow Copy Service). Manages and implements a volume shadow copy for backup purposes. <---(Main Service File)

WebClient

It's all about setting up a WebDAV publishing directory on your server.

WebClient enables windows-based programs to create, access, and modify Internet-based files.

WebDAV (Web-based Distributed Authoring and Versioning) extends the HTTP/1.1 protocol to allow clients to publish, lock, and manage resources on the Web.

HyperText Transfer Protocol (HTTP) is the primary method used to transfer or convey information on the World Wide Web.)

You can disable the WebClient service as long as you do not have to modify or write files on Web Distributed Authoring and Versioning (WebDAV) servers.

webclnt.dll.....(Web DAV Service DLL). <---(Main Service File)

windows Firewall/Internet Connection Sharing (ICS)

windows Firewall/Internet Connection Sharing (ICS) provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.

fwcfg.dll......

再分享一下我老师大神的人工智能教程吧。零基础！通俗易懂！风趣幽默！还带黄段子！希望你也加入到我们人工智能的队伍中来！https://blog.csdn.net/jiangjunshow