| Display Name | Name | State | Startup Type | Service Type | Controls Accepted | Executable | Description | Log On As | Group | Error Control | Exit Code |
| .NET Runtime Optimization Service v2.0.50727_x64 | clr_optimization_v2.0.50727_64 | Stopped | Manual | Own Process | | C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe | Microsoft .NET Framework NGEN | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| .NET Runtime Optimization Service v2.0.50727_X86 | clr_optimization_v2.0.50727_32 | Stopped | Manual | Own Process | | C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe | Microsoft .NET Framework NGEN | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| Alerter | Alerter | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k LocalService | Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Application Experience Lookup Service | AeLookupSvc | Running | Automatic | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Processes application compatibility lookup requests for applications as they are launched. | LocalSystem | | Normal | The operation completed successfully (0) |
| Application Layer Gateway Service | ALG | Running | Manual | Own Process | Stop | C:\WINDOWS\System32\alg.exe | Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Application Management | AppMgmt | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Processes installation, removal, and enumeration requests for Active Directory IntelliMirror group policy programs. If the service is disabled, users will be unable to install, remove, or enumerate any IntelliMirror programs. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| ASP.NET State Service | aspnet_state | Stopped | Manual | Own Process | | C:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_state.exe | Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Automatic Updates | wuauserv | Running | Automatic | Share Process | Stop, Shutdown, Power Event, Session Change | C:\WINDOWS\system32\svchost.exe -k netsvcs | Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. | LocalSystem | | Normal | The operation completed successfully (0) |
| avast! Antivirus | avast! Antivirus | Running | Automatic | Own Process (Interactive) | Stop, Shutdown | "C:\MY PROGRAMS\Security Programs\Avast\ashServ.exe" | Manages and implements avast! antivirus services for this computer. This includes the resident protection, the virus chest and the scheduler. | LocalSystem | ShellSvcGroup | Normal | The operation completed successfully (0) |
| avast! iAVS4 Control Service | aswUpdSv | Running | Automatic | Own Process (Interactive) | Stop, Shutdown | "C:\MY PROGRAMS\Security Programs\Avast\aswUpdSv.exe" | Provides automatic updating for the avast! antivirus. | LocalSystem | ShellSvcGroup | Normal | The operation completed successfully (0) |
| avast! Mail Scanner | avast! Mail Scanner | Running | Manual | Own Process (Interactive) | Stop, Shutdown | "C:\MY PROGRAMS\Security Programs\Avast\ashMaiSv.exe" /service | Implements mail scanning for avast! antivirus. | LocalSystem | ShellSvcGroup | Normal | The operation completed successfully (0) |
| avast! Web Scanner | avast! Web Scanner | Running | Manual | Own Process (Interactive) | Stop, Shutdown | "C:\MY PROGRAMS\Security Programs\Avast\ashWebSv.exe" /service | Implements web (HTTP) scanning for avast! antivirus. | LocalSystem | ShellSvcGroup | Normal | The operation completed successfully (0) |
| Background Intelligent Transfer Service | BITS | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\system32\svchost.exe -k netsvcs | Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly. | LocalSystem | | Normal | The operation completed successfully (0) |
| ClipBook | ClipSrv | Stopped | Disabled | Own Process | | C:\WINDOWS\system32\clipsrv.exe | Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| COM+ Event System | EventSystem | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| COM+ System Application | COMSysApp | Stopped | Manual | Own Process | | C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} | Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Computer Browser | Browser | Stopped | Automatic | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Cryptographic Services | CryptSvc | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| DCOM Server Process Launcher | DcomLaunch | Running | Automatic | Share Process | | C:\WINDOWS\system32\svchost.exe -k DcomLaunch | Provides launch functionality for DCOM services. | LocalSystem | Event Log | Normal | The operation completed successfully (0) |
| DHCP Client | Dhcp | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k NetworkService | Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | TDI | Normal | The operation completed successfully (0) |
| Distributed Link Tracking Client | TrkWks | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Enables client programs to track linked files that are moved within an NTFS volume, to another NTFS volume on the same computer, or to an NTFS volume on another computer. If this service is stopped, the links on this computer will not be maintained or tracked. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Distributed Transaction Coordinator | MSDTC | Stopped | Manual | Own Process | | C:\WINDOWS\system32\msdtc.exe | Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | MS Transactions | Normal | No attempts to start the service have been made since the last boot (1077) |
| DNS Client | Dnscache | Running | Automatic | Share Process | Stop, Param Change, Net Bind Change | C:\WINDOWS\system32\svchost.exe -k NetworkService | Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | TDI | Normal | The operation completed successfully (0) |
| Error Reporting Service | ERSvc | Stopped | Disabled | Share Process | | C:\WINDOWS\System32\svchost.exe -k WinErr | Collects, stores, and reports unexpected application crashes to Microsoft. If this service is stopped, then Error Reporting will occur only for kernel faults and some types of user mode faults. If this service is disabled, any services that explicitly depend on it will not start. | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| Event Log | Eventlog | Running | Automatic | Share Process | Shutdown | C:\WINDOWS\system32\services.exe | Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. | LocalSystem | Event Log | Normal | The operation completed successfully (0) |
| Help and Support | helpsvc | Running | Automatic | Share Process | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| HID Input Service | HidServ | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| HTTP SSL | HTTPFilter | Stopped | Manual | Share Process | | C:\WINDOWS\System32\lsass.exe | This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| IAS Jet Database Access | IASJet | Stopped | Manual | Share Process | | C:\WINDOWS\SysWOW64\svchost.exe -k iasjet | Configures Internet Authentication Service (IAS). If this service is stopped, remote network access that requires user authentication will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| IMAPI CD-Burning COM Service | ImapiService | Stopped | Manual | Own Process | | C:\WINDOWS\system32\imapi.exe | Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Indexing Service | CiSvc | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\cisvc.exe | Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| IPSEC Services | PolicyAgent | Running | Automatic | Share Process | Stop, Shutdown, Power Event | C:\WINDOWS\system32\lsass.exe | Provides end-to-end security between clients and servers on TCP/IP networks. If this service is stopped, TCP/IP security between clients and servers on the network will be impaired. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Java Quick Starter | JavaQuickStarterService | Stopped | Disabled | Own Process | | "C:\MY PROGRAMS\Computer Programs\Java Runtime Environment 5.0 Update 7\bin\jqs.exe" -service -config "C:\MY PROGRAMS\Computer Programs\Java Runtime Environment 5.0 Update 7\lib\deploy\jqs\jqs.conf" | Prefetches JRE files for faster startup of Java applets and applications | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Logical Disk Manager | dmserver | Running | Automatic | Share Process | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Logical Disk Manager Administrative Service | dmadmin | Stopped | Manual | Share Process | | C:\WINDOWS\System32\dmadmin.exe /com | Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Messenger | Messenger | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Microsoft Office Diagnostics Service | odserv | Stopped | Disabled | Own Process | | "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" | Run portions of Microsoft Office Diagnostics. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Microsoft Office Groove Audit Service | Microsoft Office Groove Audit Service | Stopped | Manual | Own Process | | "C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe" | | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Microsoft Software Shadow Copy Provider | swprv | Stopped | Disabled | Own Process | | C:\WINDOWS\System32\svchost.exe -k swprv | Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Net Logon | Netlogon | Stopped | Manual | Share Process | | C:\WINDOWS\system32\lsass.exe | Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | MS_WindowsRemoteValidation | Normal | No attempts to start the service have been made since the last boot (1077) |
| NetMeeting Remote Desktop Sharing | mnmsrvc | Stopped | Disabled | Own Process (Interactive) | | C:\WINDOWS\system32\mnmsrvc.exe | Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network Connections | Netman | Running | Manual | Share Process | Stop, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. If this service is disabled, you will not be able to view local area network and remote connections and any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Network DDE | NetDDE | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\netdde.exe | Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | NetDDEGroup | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network DDE DSDM | NetDDEdsdm | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\netdde.exe | Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network Location Awareness (NLA) | Nla | Running | Manual | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Collects and stores network configuration and location information, and notifies applications when this information changes. | LocalSystem | | Normal | The operation completed successfully (0) |
| Network Provisioning Service | xmlprov | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages XML configuration files on a domain basis for automatic network provisioning. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| NT LM Security Support Provider | NtLmSsp | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\lsass.exe | Provides security to remote procedure call (RPC) programs that use transports other than named pipes. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| NVIDIA Display Driver Service | NVSvc | Running | Automatic | Own Process | Stop, Pause/Continue, Shutdown, Param Change, Power Event, Session Change | C:\WINDOWS\system32\nvsvc64.exe | Provides system and desktop level support to the NVIDIA display driver | LocalSystem | | Normal | The operation completed successfully (0) |
| Office Source Engine | ose | Stopped | Manual | Own Process | | "C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE" | Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Performance Logs and Alerts | SysmonLog | Stopped | Disabled | Own Process | | C:\WINDOWS\system32\smlogsvc.exe | Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. | NT Authority\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Plug and Play | PlugPlay | Running | Automatic | Share Process | Shutdown, Session Change | C:\WINDOWS\system32\services.exe | Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. | LocalSystem | PlugPlay | Normal | The operation completed successfully (0) |
| Portable Media Serial Number Service | WmdmPmSN | Stopped | Disabled | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Print Spooler | Spooler | Running | Automatic | Own Process (Interactive) | Stop, Shutdown, Power Event | C:\WINDOWS\system32\spoolsv.exe | Manages all local and network print queues and controls all printing jobs. If this service is stopped, printing on the local machine will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | SpoolerGroup | Normal | The operation completed successfully (0) |
| Protected Storage | ProtectedStorage | Running | Automatic | Share Process (Interactive) | Stop | C:\WINDOWS\system32\lsass.exe | Protects storage of sensitive information, such as private keys, and prevents access by unauthorized services, processes, or users. If this service is stopped, protected storage will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Remote Access Auto Connection Manager | RasAuto | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Access Connection Manager | RasMan | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates a network connection. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Desktop Help Session Manager | RDSessMgr | Stopped | Disabled | Own Process | | C:\WINDOWS\system32\sessmgr.exe | Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Procedure Call (RPC) | RpcSs | Running | Automatic | Share Process | Power Event | C:\WINDOWS\system32\svchost.exe -k rpcss | Serves as the endpoint mapper and COM Service Control Manager. If this service is stopped or disabled, programs using COM or Remote Procedure Call (RPC) services will not function properly. | NT AUTHORITY\NetworkService | COM Infrastructure | Normal | The operation completed successfully (0) |
| Remote Procedure Call (RPC) Locator | RpcLocator | Stopped | Manual | Own Process | | C:\WINDOWS\system32\locator.exe | Enables remote procedure call (RPC) clients using the RpcNs* family of APIs to locate RPC servers. If this service is stopped or disabled, RPC clients using RpcNs* APIs may be unable to locate servers or fail to start. RpcNs* APIs are not used internally in Windows. | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Registry | RemoteRegistry | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Removable Storage | NtmsSvc | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Manages and catalogs removable media and operates automated removable media devices. If this service is stopped, programs that are dependent on Removable Storage, such as Backup and Remote Storage, will operate more slowly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Routing and Remote Access | RemoteAccess | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Offers routing services to businesses in local area and wide area network environments. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Secondary Logon | seclogon | Running | Automatic | Share Process | Stop, Pause/Continue | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Security Accounts Manager | SamSs | Running | Automatic | Share Process | | C:\WINDOWS\system32\lsass.exe | The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled. | LocalSystem | MS_WindowsLocalValidation | Normal | The operation completed successfully (0) |
| Security Center | wscsvc | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Monitors system security settings and configurations. | LocalSystem | | Normal | The operation completed successfully (0) |
| Server | lanmanserver | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Shell Hardware Detection | ShellHWDetection | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides notifications for AutoPlay hardware events. | LocalSystem | ShellSvcGroup | Ignore | The operation completed successfully (0) |
| Smart Card | SCardSvr | Stopped | Manual | Share Process | | C:\WINDOWS\System32\SCardSvr.exe | Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | SmartCardGroup | Ignore | No attempts to start the service have been made since the last boot (1077) |
| SSDP Discovery Service | SSDPSRV | Running | Manual | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables discovery of UPnP devices on your home network. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| System Event Notification | SENS | Running | Automatic | Share Process | Stop, Power Event | C:\WINDOWS\system32\svchost.exe -k netsvcs | Monitors system events and notifies subscribers to COM+ Event System of these events. If this service is stopped, COM+ Event System subscribers will not receive system event notifications. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | Network | Normal | The operation completed successfully (0) |
| System Restore Service | srservice | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties | LocalSystem | | Normal | The operation completed successfully (0) |
| Task Scheduler | Schedule | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown, Power Event | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | SchedulerGroup | Normal | The operation completed successfully (0) |
| TCP/IP NetBIOS Helper | LmHosts | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k LocalService | Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | TDI | Normal | The operation completed successfully (0) |
| Telephony | TapiSrv | Stopped | Disabled | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides Telephony API (TAPI) support for clients using programs that control telephony devices and IP-based voice connections. If this service is stopped, the function of all dependent programs will be impaired. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Telnet | TlntSvr | Stopped | Disabled | Own Process | | C:\WINDOWS\system32\tlntsvr.exe | Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Terminal Services | TermService | Running | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Allows users to connect interactively to a remote computer. Remote Desktop, Fast User Switching, Remote Assistance, and Terminal Server depend on this service - stopping or disabling this service may make your computer unreliable. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item. | LocalSystem | | Normal | The operation completed successfully (0) |
| Themes | Themes | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides user experience theme management. | LocalSystem | UIGroup | Normal | The operation completed successfully (0) |
| Uninterruptible Power Supply | UPS | Stopped | Manual | Own Process | | C:\WINDOWS\System32\ups.exe | Manages an uninterruptible power supply (UPS) connected to the computer. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Universal Plug and Play Device Host | upnphost | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Provides support to host Universal Plug and Play devices. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Virtual Disk Service | vds | Stopped | Manual | Own Process | | C:\WINDOWS\System32\vds.exe | Provides software volume and hardware volume management service. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Volume Shadow Copy | VSS | Stopped | Disabled | Own Process | | C:\WINDOWS\System32\vssvc.exe | Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| WebClient | WebClient | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | NetworkProvider | Normal | The operation completed successfully (0) |
| Windows Audio | AudioSrv | Running | Automatic | Share Process | Stop, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | AudioGroup | Normal | The operation completed successfully (0) |
| Windows Firewall/Internet Connection Sharing (ICS) | SharedAccess | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. | LocalSystem | | Normal | The operation completed successfully (0) |
| Windows Image Acquisition (WIA) | stisvc | Running | Automatic | Share Process | Stop, Shutdown, Param Change, Power Event | C:\WINDOWS\system32\svchost.exe -k imgsvc | Provides image acquisition services for scanners and cameras. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Windows Installer | MSIServer | Stopped | Manual | Share Process | | C:\WINDOWS\system32\msiexec.exe /V | Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows Management Instrumentation | winmgmt | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Windows Management Instrumentation Driver Extensions | Wmi | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Monitors all drivers and event trace providers that are configured to publish Windows Management Instrumentation (WMI) or event trace information. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows Time | W32Time | Stopped | Disabled | Share Process | | C:\WINDOWS\System32\svchost.exe -k LocalService | Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
| NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows User Mode Driver Framework | UMWdf | Stopped | Manual | Own Process | | C:\WINDOWS\system32\wdfmgr.exe | Enables Windows user mode drivers. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| WinHTTP Web Proxy Auto-Discovery Service | WinHttpAutoProxySvc | Running | Manual | Share Process | Stop, Power Event | C:\WINDOWS\system32\svchost.exe -k LocalService | Implements the Web Proxy Auto-Discovery (WPAD) protocol for Windows HTTP Services (WinHTTP). WPAD is a protocol to enable an HTTP client to automatically discover a proxy configuration. If this service is stopped or disabled, the WPAD protocol will be executed within the HTTP client's process instead of an external service process; there would be no loss of functionality as a result. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Wireless Configuration | WZCSVC | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables automatic configuration for IEEE 802.11 adapters. If this service is stopped, automatic configuration will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | TDI | Normal | The operation completed successfully (0) |
| WMI Performance Adapter | WmiApSrv | Stopped | Manual | Own Process | | C:\WINDOWS\system32\wbem\wmiapsrv.exe | Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Workstation | lanmanworkstation | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | NetworkProvider | Normal | The operation completed successfully (0) |