| Display Name | Name | State | Startup Type | Service Type | Controls Accepted | Executable | Description | Log On As | Group | Error Control | Exit Code |
| .NET Runtime Optimization Service v2.0.50727_X86 | clr_optimization_v2.0.50727_32 | Stopped | Manual | Own Process | | C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe | Microsoft .NET Framework NGEN | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| AD Monitor | ADMonitor | Stopped | Manual | Own Process | | C:\WINDOWS\system32\ADMonitor.exe | Monitor policy change of active directory for fingerprint software. | LocalSystem | Base | Normal | No attempts to start the service have been made since the last boot (1077) |
| Alerter | Alerter | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k LocalService | Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Apple Mobile Device | Apple Mobile Device | Running | Automatic | Own Process | Stop, Power Event, Session Change | "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" | Provides the interface to Apple mobile devices. | LocalSystem | | Normal | The operation completed successfully (0) |
| Application Layer Gateway Service | ALG | Running | Manual | Own Process | Stop | C:\WINDOWS\System32\alg.exe | Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Application Management | AppMgmt | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides software installation services such as Assign, Publish, and Remove. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| ArcSoft Connect Daemon | ACDaemon | Running | Automatic | Own Process | Stop, Pause/Continue | C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe | | LocalSystem | | Ignore | The operation completed successfully (0) |
| ASP.NET State Service | aspnet_state | Stopped | Manual | Own Process | | C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe | Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| AuthenTec Fingerprint Service | ATService | Running | Automatic | Own Process | Stop, Shutdown, Power Event | C:\WINDOWS\system32\AtService.exe | Provides applications with access to AuthenTec fingerprint sensors. | LocalSystem | Pointer Class | Normal | The operation completed successfully (0) |
| Automatic Updates | wuauserv | Running | Automatic | Share Process | Stop, Shutdown, Power Event, Session Change | C:\WINDOWS\system32\svchost.exe -k netsvcs | Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. | LocalSystem | | Normal | The operation completed successfully (0) |
| AVG8 E-mail Scanner | avg8emc | Running | Automatic | Own Process | Stop, Shutdown | C:\PROGRA~1\AVG\AVG8\avgemc.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| AVG8 WatchDog | avg8wd | Running | Automatic | Own Process | Shutdown, Power Event | C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| Background Intelligent Transfer Service | BITS | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\system32\svchost.exe -k netsvcs | Transfers files in the background using idle network bandwidth. If the service is stopped, features such as Windows Update, and MSN Explorer will be unable to automatically download programs and other information. If this service is disabled, any services that explicitly depend on it may fail to transfer files if they do not have a fail safe mechanism to transfer files directly through IE in case BITS has been disabled. | LocalSystem | | Normal | The operation completed successfully (0) |
| Bonjour Service | Bonjour Service | Running | Automatic | Own Process | Stop, Power Event | "C:\Program Files\Bonjour\mDNSResponder.exe" | Bonjour allows applications like iTunes and Safari to advertise and discover services on the local network. Having Bonjour running enables you to connect to hardware devices like Apple TV and software services like iTunes sharing and AirTunes. If you disable Bonjour, any network service that explicitly depends on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| ClipBook | ClipSrv | Stopped | Disabled | Own Process | | C:\WINDOWS\system32\clipsrv.exe | Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| COM+ Event System | EventSystem | Running | Manual | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | Network | Normal | The operation completed successfully (0) |
| COM+ System Application | COMSysApp | Stopped | Manual | Own Process | | C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} | Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Computer Browser | Browser | Stopped | Automatic | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Cryptographic Services | CryptSvc | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Data Transfer Service | dtsvc | Running | Automatic | Own Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\DTS.exe | Passively transfers data between clients for the fingerprint applications. | LocalSystem | Base | Normal | The operation completed successfully (0) |
| DCOM Server Process Launcher | DcomLaunch | Running | Automatic | Share Process | | C:\WINDOWS\system32\svchost -k DcomLaunch | Provides launch functionality for DCOM services. | LocalSystem | Event Log | Normal | The operation completed successfully (0) |
| DHCP Client | Dhcp | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Manages network configuration by registering and updating IP addresses and DNS names. | LocalSystem | TDI | Normal | The operation completed successfully (0) |
| Distributed Link Tracking Client | TrkWks | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Maintains links between NTFS files within a computer or across computers in a network domain. | LocalSystem | | Normal | The operation completed successfully (0) |
| Distributed Transaction Coordinator | MSDTC | Stopped | Manual | Own Process | | C:\WINDOWS\system32\msdtc.exe | Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | MS Transactions | Normal | No attempts to start the service have been made since the last boot (1077) |
| DNS Client | Dnscache | Running | Automatic | Share Process | Stop, Param Change, Net Bind Change | C:\WINDOWS\system32\svchost.exe -k NetworkService | Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | TDI | Normal | The operation completed successfully (0) |
| Error Reporting Service | ERSvc | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Allows error reporting for services and applictions running in non-standard environments. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Event Log | Eventlog | Running | Automatic | Share Process | Shutdown | C:\WINDOWS\system32\services.exe | Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. | LocalSystem | Event Log | Normal | The operation completed successfully (0) |
| Extensible Authentication Protocol Service | EapHost | Running | Manual | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k eapsvcs | Provides windows clients Extensible Authentication Protocol Service | localSystem | | Normal | The operation completed successfully (0) |
| Fast User Switching Compatibility | FastUserSwitchingCompatibility | Running | Manual | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides management for applications that require assistance in a multiple user environment. | LocalSystem | | Normal | The operation completed successfully (0) |
| Fingerprint Server | FingerprintServer | Running | Automatic | Own Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\FpLogonServ.exe | AuthenTec Biometric Software Fingerprint Server | LocalSystem | Pointer Class | Normal | The operation completed successfully (0) |
| Google Software Updater | gusvc | Stopped | Automatic | Own Process | | "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" | Google Updater keeps your Google software up to date. If Google Updater Service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Google Update Service (gupdate1c9899443e0f070) | gupdate1c9899443e0f070 | Stopped | Automatic | Own Process | | "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc | Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it. | LocalSystem | | Normal | The operation completed successfully (0) |
| Health Key and Certificate Management Service | hkmsvc | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages health certificates and keys (used by NAP) | localSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Help and Support | helpsvc | Running | Automatic | Share Process | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| HTTP SSL | HTTPFilter | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k HTTPFilter | This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Human Interface Device Access | HidServ | Stopped | Disabled | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| IMAPI CD-Burning COM Service | ImapiService | Stopped | Manual | Own Process | | C:\WINDOWS\system32\imapi.exe | Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Indexing Service | CiSvc | Stopped | Manual | Share Process (Interactive) | | C:\WINDOWS\system32\cisvc.exe | Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| InstallDriver Table Manager | IDriverT | Stopped | Manual | Own Process | | "C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" | Provides support for the Running Object Table for InstallShield Drivers | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| Intel® PROSet/Wireless Event Log | EvtEng | Running | Automatic | Own Process | Stop | C:\Program Files\Intel\WiFi\bin\EvtEng.exe | Manages the event trace messages for all the Intel® PROSet/Wireless Software components. | LocalSystem | | Normal | The operation completed successfully (0) |
| Intel® PROSet/Wireless Registry Service | RegSrvc | Running | Automatic | Own Process | Stop | C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe | Provides registry access to all Intel® PROSet/Wireless Software components | LocalSystem | | Normal | The operation completed successfully (0) |
| Intel® PROSet/Wireless WiFi Service | S24EventMonitor | Running | Automatic | Own Process (Interactive) | Stop | C:\Program Files\Intel\WiFi\bin\S24EvMon.exe | Wireless Management Service for Intel® PROSet/Wireless WiFi Software | LocalSystem | NDIS | Normal | The operation completed successfully (0) |
| Intuit Update Service | IntuitUpdateService | Running | Automatic | Own Process | Stop, Shutdown | "C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe" | Helps Intuit applications automatically update themselves. | LocalSystem | | Normal | The operation completed successfully (0) |
| iPod Service | iPod Service | Running | Manual | Own Process | Stop | "C:\Program Files\iPod\bin\iPodService.exe" | iPod hardware management services | LocalSystem | | Normal | The operation completed successfully (0) |
| IPSEC Services | PolicyAgent | Running | Automatic | Share Process | Stop, Shutdown, Power Event | C:\WINDOWS\system32\lsass.exe | Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. | LocalSystem | | Normal | The operation completed successfully (0) |
| IviRegMgr | IviRegMgr | Running | Automatic | Own Process | Stop | C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| Java Quick Starter | JavaQuickStarterService | Running | Automatic | Own Process | Stop, Pause/Continue, Shutdown, Power Event, Session Change | "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" | Prefetches JRE files for faster startup of Java applets and applications | LocalSystem | | Normal | The operation completed successfully (0) |
| LiveShare P2P Server 9 | RoxLiveShare9 | Stopped | Automatic | Own Process (Interactive) | | "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe" | Allows remote users to view through WEB browsers your authorized multimedia content managed by Roxio Media Manager9. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Logical Disk Manager | dmserver | Running | Automatic | Share Process | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Logical Disk Manager Administrative Service | dmadmin | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\System32\dmadmin.exe /com | Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. | LocalSystem | | Normal | The operation completed successfully (0) |
| Messenger | Messenger | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Microsoft Office Diagnostics Service | odserv | Stopped | Manual | Own Process | | "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" | Run portions of Microsoft Office Diagnostics. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Microsoft Office Groove Audit Service | Microsoft Office Groove Audit Service | Stopped | Manual | Own Process | | "C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe" | | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| MS Software Shadow Copy Provider | SwPrv | Stopped | Manual | Own Process | | C:\WINDOWS\system32\dllhost.exe /Processid:{6DB330A3-8CC9-4272-8D33-F9A05B79EAAB} | Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| Net Logon | Netlogon | Stopped | Manual | Share Process | | C:\WINDOWS\system32\lsass.exe | Supports pass-through authentication of account logon events for computers in a domain. | LocalSystem | RemoteValidation | Normal | No attempts to start the service have been made since the last boot (1077) |
| Net.Tcp Port Sharing Service | NetTcpPortSharing | Stopped | Disabled | Share Process | | "c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" | Provides ability to share TCP ports over the net.tcp protocol. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| NetMeeting Remote Desktop Sharing | mnmsrvc | Stopped | Manual | Own Process (Interactive) | | C:\WINDOWS\system32\mnmsrvc.exe | Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network Access Protection Agent | napagent | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Allows windows clients to participate in Network Access Protection | localSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network Connections | Netman | Running | Manual | Share Process (Interactive) | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. | LocalSystem | | Normal | The operation completed successfully (0) |
| Network DDE | NetDDE | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\netdde.exe | Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | NetDDEGroup | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network DDE DSDM | NetDDEdsdm | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\netdde.exe | Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network Location Awareness (NLA) | Nla | Running | Manual | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Collects and stores network configuration and location information, and notifies applications when this information changes. | LocalSystem | | Normal | The operation completed successfully (0) |
| Network Provisioning Service | xmlprov | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages XML configuration files on a domain basis for automatic network provisioning. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| NT LM Security Support Provider | NtLmSsp | Stopped | Manual | Share Process | | C:\WINDOWS\system32\lsass.exe | Provides security to remote procedure call (RPC) programs that use transports other than named pipes. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Office Source Engine | ose | Stopped | Manual | Own Process | | "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" | Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Performance Logs and Alerts | SysmonLog | Stopped | Manual | Own Process | | C:\WINDOWS\system32\smlogsvc.exe | Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. | NT Authority\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Plug and Play | PlugPlay | Running | Automatic | Share Process | Shutdown, Session Change | C:\WINDOWS\system32\services.exe | Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. | LocalSystem | PlugPlay | Normal | The operation completed successfully (0) |
| Portable Media Serial Number Service | WmdmPmSN | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Power Manager DBC Service | Power Manager DBC Service | Running | Automatic | Own Process | Stop, Pause/Continue, Shutdown, Session Change | C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE | | LocalSystem | | Normal | The operation completed successfully (0) |
| Print Spooler | Spooler | Running | Automatic | Own Process (Interactive) | Stop, Shutdown, Power Event | C:\WINDOWS\system32\spoolsv.exe | Loads files to memory for later printing. | LocalSystem | SpoolerGroup | Normal | The operation completed successfully (0) |
| Protected Storage | ProtectedStorage | Running | Automatic | Share Process (Interactive) | Stop | C:\WINDOWS\system32\lsass.exe | Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. | LocalSystem | | Normal | The operation completed successfully (0) |
| QoS RSVP | RSVP | Stopped | Manual | Own Process | | C:\WINDOWS\system32\rsvp.exe | Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Access Auto Connection Manager | RasAuto | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Access Connection Manager | RasMan | Running | Manual | Share Process | Stop, Power Event | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates a network connection. | LocalSystem | | Normal | The operation completed successfully (0) |
| Remote Desktop Help Session Manager | RDSessMgr | Stopped | Manual | Own Process | | C:\WINDOWS\system32\sessmgr.exe | Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Procedure Call (RPC) | RpcSs | Running | Automatic | Own Process | Power Event | C:\WINDOWS\system32\svchost -k rpcss | Provides the endpoint mapper and other miscellaneous RPC services. | NT Authority\NetworkService | COM Infrastructure | Normal | The operation completed successfully (0) |
| Remote Procedure Call (RPC) Locator | RpcLocator | Stopped | Manual | Own Process | | C:\WINDOWS\system32\locator.exe | Manages the RPC name service database. | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Registry | RemoteRegistry | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Removable Storage | NtmsSvc | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Routing and Remote Access | RemoteAccess | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Offers routing services to businesses in local area and wide area network environments. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Roxio Hard Drive Watcher 9 | RoxWatch9 | Stopped | Automatic | Own Process (Interactive) | | "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe" | | LocalSystem | | Ignore | The operation completed successfully (0) |
| Roxio UPnP Renderer 9 | Roxio UPnP Renderer 9 | Stopped | Manual | Own Process (Interactive) | | "C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe" | | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| Roxio Upnp Server 9 | Roxio Upnp Server 9 | Stopped | Automatic | Own Process (Interactive) | | "C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe" | | LocalSystem | | Ignore | The operation completed successfully (0) |
| RoxMediaDB9 | RoxMediaDB9 | Stopped | Manual | Own Process (Interactive) | | "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe" | Roxio RoxMediaDB9 Service | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| Secondary Logon | seclogon | Running | Automatic | Share Process (Interactive) | Stop, Pause/Continue | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Security Accounts Manager | SamSs | Running | Automatic | Share Process | | C:\WINDOWS\system32\lsass.exe | Stores security information for local user accounts. | LocalSystem | LocalValidation | Normal | The operation completed successfully (0) |
| Security Center | wscsvc | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Monitors system security settings and configurations. | LocalSystem | | Normal | The operation completed successfully (0) |
| Server | lanmanserver | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| SessionLauncher | SessionLauncher | Stopped | Automatic | Own Process (Interactive) | | C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\DX9\SessionLauncher.exe | Sonic | LocalSystem | | Normal | The operation completed successfully (0) |
| Shell Hardware Detection | ShellHWDetection | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides notifications for AutoPlay hardware events. | LocalSystem | ShellSvcGroup | Ignore | The operation completed successfully (0) |
| Smart Card | SCardSvr | Stopped | Manual | Share Process | | C:\WINDOWS\System32\SCardSvr.exe | Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | SmartCardGroup | Ignore | No attempts to start the service have been made since the last boot (1077) |
| SNMP Service | SNMP | Running | Automatic | Own Process | Stop | C:\WINDOWS\System32\snmp.exe | Includes agents that monitor the activity in network devices and report to the network console workstation. | LocalSystem | | Normal | The operation completed successfully (0) |
| SNMP Trap Service | SNMPTRAP | Stopped | Manual | Own Process | | C:\WINDOWS\System32\snmptrap.exe | Receives trap messages generated by local or remote SNMP agents and forwards the messages to SNMP management programs running on this computer. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| SSDP Discovery Service | SSDPSRV | Running | Manual | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables discovery of UPnP devices on your home network. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| stllssvr | stllssvr | Stopped | Manual | Own Process | | "C:\Program Files\Common Files\SureThing Shared\stllssvr.exe" | | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| System Event Notification | SENS | Running | Automatic | Share Process | Stop, Power Event | C:\WINDOWS\system32\svchost.exe -k netsvcs | Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. | LocalSystem | Network | Normal | The operation completed successfully (0) |
| System Restore Service | srservice | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties | LocalSystem | | Normal | The operation completed successfully (0) |
| System Update | SUService | Running | Automatic | Own Process | Stop, Shutdown, Power Event | c:\program files\lenovo\system update\suservice.exe | ThinkVantage System Update | LocalSystem | | Normal | The operation completed successfully (0) |
| Task Scheduler | Schedule | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown, Power Event | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | SchedulerGroup | Normal | The operation completed successfully (0) |
| TCP/IP NetBIOS Helper | LmHosts | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. | NT AUTHORITY\LocalService | TDI | Normal | The operation completed successfully (0) |
| TCP/IP Print Server | LPDSVC | Stopped | Manual | Share Process | | C:\WINDOWS\system32\tcpsvcs.exe | Provides a TCP/IP-based printing service that uses the Line Printer protocol. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Telephony | TapiSrv | Running | Manual | Share Process | Stop, Pause/Continue | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service. | LocalSystem | | Normal | The operation completed successfully (0) |
| Telnet | TlntSvr | Stopped | Disabled | Own Process | | C:\WINDOWS\system32\tlntsvr.exe | Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Terminal Services | TermService | Running | Manual | Share Process | | C:\WINDOWS\System32\svchost -k DComLaunch | Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server. | LocalSystem | | Normal | The operation completed successfully (0) |
| Themes | Themes | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides user experience theme management. | LocalSystem | UIGroup | Normal | The operation completed successfully (0) |
| ThinkPad HDD APS Logging Service | TPHDEXLGSVC | Running | Automatic | Own Process | Stop, Pause/Continue, Shutdown, Power Event | System32\TPHDEXLG.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| ThinkPad PM Service | IBMPMSVC | Running | Automatic | Own Process (Interactive) | Stop | C:\WINDOWS\system32\ibmpmsvc.exe | | LocalSystem | Pointer Port | Ignore | The operation completed successfully (0) |
| ThinkVantage Registry Monitor Service | ThinkVantage Registry Monitor Service | Running | Automatic | Own Process | Stop | "c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe" | | LocalSystem | | Ignore | The operation completed successfully (0) |
| TSS Core Service | TSSCoreService | Running | Automatic | Own Process | Stop | "C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe" | | NT AUTHORITY\NetworkService | | Ignore | The operation completed successfully (0) |
| TVT Backup Protection Service | TVT Backup Protection Service | Running | Automatic | Own Process | Stop | C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| TVT Backup Service | TVT Backup Service | Running | Automatic | Own Process | Stop, Net Bind Change, Hardware Profile Change, Power Event | C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| TVT Scheduler | TVT Scheduler | Running | Automatic | Own Process (Interactive) | Stop, Net Bind Change, Hardware Profile Change, Power Event | "c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe" | | LocalSystem | | Ignore | The operation completed successfully (0) |
| TVT Windows Update Monitor | TVT_UpdateMonitor | Running | Automatic | Own Process (Interactive) | Shutdown | C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe | A service for monitoring operating system files changed by Windows update and copying them for TVT Rescue And Recovery Express Repair | LocalSystem | | Normal | The operation completed successfully (0) |
| Uninterruptible Power Supply | UPS | Stopped | Manual | Own Process | | C:\WINDOWS\System32\ups.exe | Manages an uninterruptible power supply (UPS) connected to the computer. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Universal Plug and Play Device Host | upnphost | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k LocalService | Provides support to host Universal Plug and Play devices. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Volume Shadow Copy | VSS | Stopped | Manual | Own Process | | C:\WINDOWS\System32\vssvc.exe | Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| WebClient | WebClient | Running | Automatic | Own Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | NetworkProvider | Normal | The operation completed successfully (0) |
| Windows Audio | AudioSrv | Running | Automatic | Share Process | Stop, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | AudioGroup | Normal | The operation completed successfully (0) |
| Windows CardSpace | idsvc | Stopped | Manual | Share Process | | "c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" | Securely enables the creation, management, and disclosure of digital identities. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows Firewall/Internet Connection Sharing (ICS) | SharedAccess | Running | Automatic | Share Process | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. | LocalSystem | | Normal | The operation completed successfully (0) |
| Windows Image Acquisition (WIA) | stisvc | Running | Automatic | Share Process | Stop, Shutdown, Param Change, Power Event | C:\WINDOWS\system32\svchost.exe -k imgsvc | Provides image acquisition services for scanners and cameras. | LocalSystem | | Normal | The operation completed successfully (0) |
| Windows Installer | MSIServer | Stopped | Manual | Share Process | | C:\WINDOWS\system32\msiexec.exe /V | Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Windows Management Instrumentation | winmgmt | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Windows Management Instrumentation Driver Extensions | Wmi | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides systems management information to and from drivers. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows Media Connect Service | WMConnectCDS | Stopped | Manual | Own Process | | C:\Program Files\Windows Media Connect 2\wmccds.exe | Shares media with media devices using Universal Plug and Play | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows Presentation Foundation Font Cache 3.0.0.0 | FontCache3.0.0.0 | Stopped | Manual | Own Process | | c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe | Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows Time | W32Time | Running | Automatic | Share Process | Stop, Shutdown, Param Change, Net Bind Change, Hardware Profile Change, Power Event | C:\WINDOWS\System32\svchost.exe -k netsvcs | Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
| LocalSystem | | Normal | The operation completed successfully (0) |
| Windows User Mode Driver Framework | UMWdf | Running | Automatic | Own Process | Stop, Shutdown, Session Change | C:\WINDOWS\system32\wdfmgr.exe | Enables Windows user mode drivers. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Wired AutoConfig | Dot3svc | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k dot3svc | This service performs IEEE 802.1X authentication on Ethernet interfaces | LocalSystem | TDI | Normal | The operation completed successfully (0) |
| Wireless Zero Configuration | WZCSVC | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides automatic configuration for the 802.11 adapters | LocalSystem | TDI | Normal | The operation completed successfully (0) |
| WMI Performance Adapter | WmiApSrv | Stopped | Manual | Own Process | | C:\WINDOWS\system32\wbem\wmiapsrv.exe | Provides performance library information from WMI HiPerf providers. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Workstation | lanmanworkstation | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | NetworkProvider | Normal | The operation completed successfully (0) |