Name

Status 

Startup

File Used

Alerter

 

Manual

svchost.exe

Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start.

Local Service

 

Application Layer Gateway Service

 

Manual

alg.exe

Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Internet Connection Firewall

Local Service

 

Application Management

 

Manual

svchost.exe

Provides software installation services such as Assign, Publish, and Remove.

Local System

 

Automatic Updates

Started

Automatic

svchost.exe

Enables the download and installation of critical Windows updates. If the service is disabled, the operating system can be manually updated at the Windows Update Web site.

Local System

 

Background Intelligent Transfer Service

Started

Automatic

svchost.exe

Uses idle network bandwidth to transfer data.

Local Service

 

ClipBook

 

Manual

Clipsrv.exe

Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

COM+ Event System

Started

Manual

svchost.exe

Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

COM+ System Application

 

Manual

dllhost.exe

Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Computer Browser

Started

Automatic

svchost.exe

Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Fast User Switching Compatibility

Started

Automatic

svchost.exe

Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

DHCP Client

Started

Automatic

svchost.exe

Manages network configuration by registering and updating IP addresses and DNS names.

Local System

 

Distributed Link Tracking Client

Started

Automatic

svchost.exe

Maintains links between NTFS files within a computer or across computers in a network domain.

Local System

 

Distributed Transaction Coordinator

 

Manual

Msdtc.exe

Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start.

Network Service

 

DNS Client

Started

Automatic

svchost.exe

Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start.

Network Service

 

Error Reporting Service

Started

Automatic

svchost.exe

Allows error reporting for services and applictions running in non-standard environments.

Local System

 

Event Log

Started

Automatic

svchost.exe

Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped.

Local System

 

Fast User Switching Compatibility

Started

Manual

svchost.exe

Provides management for applications that require assistance in a multiple user environment.

Local System

 

GEARSecurity

Started

Automatic

Gearsec.exe

No Description supplied

Local System

 

Help and Support

Started

Automatic

svchost.exe

Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Human Interface Device Access

 

Disabled

svchost.exe

Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

IMAPI CD-Burning COM Service

 

Manual

imapi.exe

Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Indexing Service

 

Disabled

cisvc.exe

Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language.

Local System

 

Internet Connection Firewall(ICF)/Internet Connection Sharing(ICS)

 

Manual

svchost.exe

Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.

Local System

 

IPSEC Services

Started

Automatic

isass.exe

Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver.

Local System

 

Logical Disk Manager

 

Manual

svchost.exe

Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Logical Disk Manager Administrative Service

 

Manual

dmadmia.exe

Configures hard disk drives and volumes. The service only runs for configuration processes and then stops.

Local System

 

Messenger

 

Manual

svchost.exe

Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

MS Software Shadow Copy Provider

 

Manual

dllhost.exe

Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Net Logon

 

Manual

isass.exe

Supports pass-through authentication of account logon events for computers in a domain.

Local System

 

NetMeeting Remote Desktop Sharing

 

Manual

mumsrvc.exe

Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Network Connections

Started

Manual

svchost.exe

Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.

Local System

 

Network DDE

 

Manual

netdde.exe

Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Network DDE DSDM

 

Manual

netdde.exe

Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Network Location Awareness (NLA)

Started

Manual

svchost.exe

Collects and stores network configuration and location information, and notifies applications when this information changes.

Local System

 

NT LM Security Support Provider

 

Manual

isass.exe

Provides security to remote procedure call (RPC) programs that use transports other than named pipes.

Local System

 

NVIDIA Display Driver Service

Started

Automatic

nvsvc.exe

Provides system and desktop level support to the NVIDIA display driver

Local System

 

Office Source Engine

 

Manual

ose.exe

Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports.

Local System

 

Performance Logs and Alerts

 

Manual

smlogsvc.exe

Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.

Network Service

 

Plug and Play

Started

Automatic

services.exe

Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.

Local System

 

Portable Media Serial Number Service

 

Manual

svchost.exe

Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device.

Local System

 

Print Spooler

Started

Automatic

spoolsv.exe

Loads files to memory for later printing.

Local System

 

Protected Storage

Started

Automatic

isass.exe

Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users.

Local System

 

QoS RSVP

 

Manual

rsvp.exe

Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets.

Local System

 

Remote Access Auto Connection Manager

 

Manual

svchost.exe

Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.

Local System

 

Remote Access Connection Manager

Started

Manual

svchost.exe

Creates a network connection.

Local System

 

Remote Desktop Help Session Manager

 

Manual

sessmgr.exe

Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box.

Local System

 

Remote Procedure Call (RPC)

Started

Automatic

svchost.exe

Provides the endpoint mapper and other miscellaneous RPC services.

Local System

 

Remote Procedure Call (RPC) Locator

 

Manual

locator.exe

Manages the RPC name service database.

Network Service

 

Removable Storage

 

Manual

svchost.exe

No Description Supplied

Local System

 

Routing and Remote Access

 

Disabled

svchost.exe

Offers routing services to businesses in local area and wide area network environments.

Local System

 

Secondary Logon

Started

Automatic

svchost.exe

Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Security Accounts Manager

Started

Automatic

isass.exe

Stores security information for local user accounts.

Local System

 

Server

Started

Automatic

svchost.exe

Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Shell Hardware Detection

Started

Automatic

svchost.exe

No Description Supplied

Local System

 

Smart Card

 

Manual

Scardsvr.exe

Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.

Local Service

 

Smart Card Helper

 

Manual

Scardsvr.exe

Enables support for legacy non-plug and play smart-card readers used by this computer. If this service is stopped, this computer will not support legacy reader. If this service is disabled, any services that explicitly depend on it will fail to start.

Local Service

 

SSDP Discovery Service

Started

Manual

svchost.exe

Enables discovery of UPnP devices on your home network.

Local Service

 

System Event Notification

Started

Automatic

svchost.exe

Tracks system events such as Windows logon, network, and power events.  Notifies COM+ Event System subscribers of these events.

Local System

 

System Restore Service

Started

Automatic

svchost.exe

Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties

Local System

 

Task Scheduler

Started

Automatic

svchost.exe

Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

TCP/IP NetBIOS Helper

Started

Automatic

svchost.exe

Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution.

Local Service

 

Telephony

Started

Manual

svchost.exe

Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service.

Local System

 

Terminal Services

Started

Manual

svchost.exe

Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server.

Local System

 

Themes

Started

Automatic

svchost.exe

Provides user experience theme management.

Local System

 

Trend Micro Central Control Component

Started

Automatic

PcCtlCom.exe

Manages the Trend Micro PC-cillin Component.

Local System

 

Trend Micro Personal Firewall

Started

Automatic

TmPfw.exe

Manages the Trend Micro Personal Firewall.

Local System

 

Trend Micro Proxy Service

Started

Automatic

tmproxy.exe

Manages the Trend Micro tmtdi module.

Local System

 

Trend Micro Real-time Service

Started

Automatic

Tmntsrv.exe

Enables scanning in real time.

Local System

 

Uninterruptible Power Supply

 

Manual

ups.exe

Manages an uninterruptible power supply (UPS) connected to the computer.

Local System

 

Universal Plug and Play Device Host

 

Manual

svchost.exe

Provides support to host Universal Plug and Play devices.

Local Service

 

Upload Manager

Started

Automatic

svchost.exe

Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Volume Shadow Copy

 

Manual

vssvc.exe

Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Washer Security Access

Started

Automatic

wwSecure.exe

Window Washer Cleaning Service

Local System

 

WebClient

Started

Automatic

svchost.exe

Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.

Local Service

 

Webroot Spy Sweeper Engine

Started

Automatic

WRSSSDK.exe

Provides core functionality to Webroot Spy Sweeper.  This service must be enabled and started for Spy Sweeper to function.

Local System

 

Windows Audio

Started

Automatic

svchost.exe

Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Windows Image Acquisition (WIA)

Started

Automatic

svchost.exe

Provides image acquisition services for scanners and cameras.

Local System

 

Windows Installer

 

Manual

msiexec.exe

Installs, repairs and removes software according to instructions contained in .MSI files.

Local System

 

Windows Management Instrumentation

Started

Automatic

svchost.exe

Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Windows Time

 

Automatic

svchost.exe

Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System

 

Windows User Mode Driver Framework

Started

Automatic

wdfmgr.exe

Enables Windows user mode drivers.

Local Service

 

Wireless Zero Configuration

Started

Automatic

svchost.exe

Provides automatic configuration for the 802.11 adapters

Local System

 

WMI Performance Adapter

 

Manual

wmiapsrv.exe

Provides performance library information from WMI HiPerf providers.

Local System

 

Workstation

Started

Automatic

svchost.exe

Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Local System